January 2005 - openSUSE Users - openSUSE Mailing Lists

rkhunter-1.1.9-1.ps.noarch.rpm available
by Patrick Shanahan 12 Feb '05

12 Feb '05

rkhunter-1.1.9-1.ps.noarch.rpm is available for download: http://wahoo.no-ip.org/~pat/rkhunter-1.1.9-1.ps.noarch.rpm Rootkit Hunter scans files and systems for known and unknown rootkits, backdoors, and sniffers. The package contains one shell script, a few text-based databases, and optional Perl modules. It should run on almost every Unix clone. This release contains support for RH-Sharpe's rootkit and the SHV5 rootkit, a special test for tripwire, metalog (syslog), and support for many new distributions. Many MD5 hashes have been added to the database, and some code/documentation cleanup has been performed. Description Rootkit scanner is scanning tool to ensure you for about 99.9%* you're clean of nasty tools. This tool scans for rootkits, backdoors and local exploits by running tests like: - MD5 hash compare - Look for default files used by rootkits - Wrong file permissions for binaries - Look for suspected strings in LKM and KLD modules - Look for hidden files - Optional scan within plaintext and binary files Rootkit Hunter is released as GPL licensed project and free for everyone to use. * No, not really 99.9%.. It's just another security layer * 1.1.9 (28/12/2004) New: - Added RH-Sharpe's rootkit (rootkit) - Added SHV5 rootkit (rootkit) - Added special test for tripwire - Added support for metalog (syslog daemon) - Added support for ALTLinux 2.2 and 2.4 - Added support for CentOS 3.3 - Added support for Gentoo 1.6 - Added support for FreeBSD 4.10 (alpha platform) - Added support for SuSE SLES8. Thanks to Mario Lenz - Added support for SuSE 9.2 (i586) - Added support for Fedora Core 3 - Added support for Red Hat Enterprise Linux ES/WS release 4 - Added hashes for Fedora Core 3. Thanks to Steph - Official port is now available for ALTLinux - Change text when an old software package has been found. This will happen with backporting operating systems (Red Hat, Fedora etc) Changes: - Improved logging for lsof test - Updated hashes for Fedora Core 1 - Updated hashes for Debian woody - Updated hashes for Red Hat Enterprise Linux ES/WS release 3 - Updated hashes for Slackware 9 - Updated hashes for Slackware 10 - Updated hashes for SuSE 9.1 - Updated wishlist/todo, updated readme and manpage. - Code cleanup (added more remarks, cleanup of old/buggy things).. - Improved logging Bugfixes: - Changed binary search path due typo. Thanks to Bertrand author: Michael Boelen <michael(a)rootkit.nl> http://www.rootkit.nl -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/photos

4 5

suse 9.2: ip_conntrack: table full, dropping packet
by Erik Hensema 11 Feb '05

11 Feb '05

Hi, I recently upgraded some servers to suse linux 9.2 pro from 8.1 pro. Two of the servers are getting quite a lot of traffic and they quickly run out of space in the ip conntrack hashtable, giving the following message: Jan 28 08:43:25 nuspelen kernel: ip_conntrack: table full, dropping packet. I now increased the maximum number of tracked connections to about 128000, but I'm not sure yet the system will run stable with this size. I've googled a bit on the error message; it seems that some timeouts in the conntracking code are way too high. Is there a way to lower these limits? Are there patches available? I really like to run on stock kernels (for the security updates and the QA), but rolling my own is no real problem. -- Erik Hensema (erik(a)hensema.net)

2 3

LAN sniffer ?
by mikus＠bga.com 10 Feb '05

10 Feb '05

Would like to capture packets on my in-house LAN, then look at formatted output of what I've captured. What software should I use ? Thanks, mikus

9 10

Curious desktop behaviour
by James Knott 08 Feb '05

08 Feb '05

I have two systems running SuSE 9.2. One is a notebook and the other a desktop system. One thing I've noticed on the desktop system, is that if I close a window, the focus does not return to anything on the desktop and I have to click on something to return focus. Also, none of the desktops is highlighted in the pager. This does not happen on the notebook, where closing one windows, returns focus to another window and the active desktop is highlighted in the pager. All the relevant setting in the Control Center appear to be the same. Any ideas? tnx jk

4 9

kdm issues
by Trey Sizemore 06 Feb '05

06 Feb '05

I've upgraded to the latest KDE beta and things are running pretty well with a few exceptions. One of these is repairable in that kdm no longer has any sessions other than a few light WMs and KDE. Gnome was one of the casualties and I wanted to add it back. I noticed that I have both an /etc/opt/kde3/share/config/kdm/kdmrc and an /etc/opt/kde3/share/kdm/kdmrc.SuSEconfig file. Which one does KDE use? Also, there's an issue loading one or two panel applets in kicker so didn't know if these files had any bearing on that. Thanks.

2 3

SuSE support
by James Mohr 05 Feb '05

05 Feb '05

Hi all! <rant> Is it just me or has SuSE support gone down the toilet. I paid real money for 9.2 and have spent the last several weeks trying to get it installed, but it keeps hanging at the point just before it should be installing the software. Although I have bought every even numbered versions since 8.0, this is the first time I have had to open a support call. I opened up a support request and each time I reply to what SuSE support tells me to do, it is as if they did not read the whole message, let alone the rest of the problem history. So, they end up picking out one minor issue (such as one of 10 messages) and make some comment or suggestion about that. In essence, despite having paid for the software, I am no where near getting it installed. Had anyone else had the same bad experience with SuSE support? </rant> Regards, jimmo -- --------------------------------------- "Be more concerned with your character than with your reputation. Your character is what you really are while your reputation is merely what others think you are." -- John Wooden --------------------------------------- Be sure to visit the Linux Tutorial: http://www.linux-tutorial.info --------------------------------------- NOTE: All messages sent to me in response to my posts to newsgroups or forums are subject to reposting.

20 43

Backup to CD/DVD -- recommended software?
by Paul W. Abrahams 05 Feb '05

05 Feb '05

I've got a pretty common need: backing up a directory to CD/DVD. The obvious solution is to use K3B -- but alas, it doesn't work right. When K3B creates a project for a directory it saves the directory contents at the time of creating the project. Then, when it attempts to write the directory at future times, it uses that very same file list, even though some members and submembers of the directory may have been deleted and (worse) others may have been added. This particular bit of behavior is to me at least inexplicable, but I see no way around it other than to create a new project every time -- which, for various reasons, I do not want to do. So can someone recommend a CD-writing utility with functionality similar to K3B but that does not have that particular design flaw? I'd much prefer something that's part of the standard SuSE distribution, and I definitely don't want commercial software. Paul

5 8

mail storage solution
by Hans du Plooy 04 Feb '05

04 Feb '05

Hi guys, I've been following this mailing list since SUSE 8.0 came out, and have kept every single mail. I know that might sound excessive, but having my own copy of at least a piece of "the archives" has helped more than a couple of times when connectivity isn't available. Currently I have all my mail stashed in ~/Maildir - courier-imap gives me access to it. Nice setup as I can chop&change between mail clients any time I like. However, the sheer volume of mail is becoming a problem. It's getting slower and slower, searches through mail folders take for ever and max out my CPU for minutes at a time. I was wondering if there's a better way to store my mail? Thanks -- Kind regards Hans du Plooy Newington Consulting Services hansdp at newingtoncs dot co dot za

10 23

problems with Iomega Zip drives in Suse 9.2
by Gaunce Lewis 04 Feb '05

04 Feb '05

I have just installed Suse 9.2, and can't get my Iomega Atapi zip drive to work. The boot log indicates that this drive is detected as hdd. However, when I run the suse hardware tool, it is unable to find the drive unless there is a zip disk in the drive. When I put a zip disk in the drive, the drive acts as if it is being read briefly more frequently than once a minute. The slows the system down dramatically an produces very frequently repeated string of msgs in the system log of the form Jan 31 00:00:20 linux /etc/dev.d/block/50-hwscan.dev[20540]: new block device /block/hdd/hdd4 Jan 31 00:00:20 linux /etc/dev.d/block/51-subfs.dev[20550]: mount block device /block/hdd/hdd4 Jan 31 00:00:21 linux /etc/dev.d/block/51-subfs.dev[20609]: umount block device /block/hdd/hdd4 Jan 31 00:00:21 linux kernel: hdd: hdd4 Jan 31 00:00:21 linux /etc/dev.d/block/51-subfs.dev[20609]: umount: /dev/hdd4: not mounted Jan 31 00:00:21 linux kernel: hdd: hdd4 As far as I can tell, subfs doesn't support zip drives. I have tried inserting the appropriate entries in fstab for the zip drive such as /dev/hdd4 /media/zip vfat noauto,users but this has no effect. Similar fstab entries worked fine in Suse 9.1 and several different versions of Red Hat. The oddest thing about all of this is that, when I list the directory /dev, there is no entry of the form hdd4. Every other possible hdd# is there, but hdd4 is missing. However, this is the right partition for a vfat formatted zip disk. Any help would be appreciated. Thanks, Gaunce Lewis

8 20

help with finding kernel-source-2.6.8-24.5.i586.rpm
by rada and gus 03 Feb '05

03 Feb '05

Dear Susers, Does anyone know where can I find the kernel-source-2.6.8-24.10.i586.rpm package for Suse 9.2? I looked on the Suse site and googled without results. Thanks. Gustav Degref.

2 4