August 2007 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] LUKS and its master key
by Jochen+opensuse-security＠Hayek.name 12 Dec '07

12 Dec '07

I found LUKS recently through SUSE Linux 10.3, and the other night a read an article in c't 2006/11. I can't seriously appreciate the technical internals, as I'm not too compentent there. Anyway: Kudos to Clemens Fruhwirth! But I am not really sure, whether I can trust, what I read in that article regarding the master key, spefically that the master key can be read from the LUKS volume by the sys admin without any difficulties. Does that really mean, that as soon as somebody gains control over my computer with a mounted LUKS encrypted (external) disc and he also manages to gain root priviliges, that he can retrieve the necessary information, to mount that disc himself with LUKS-means again?!? I mean without me passing the keys to him. If that is seriously so, I think I will have to find myself another disc encryption toolset, as I cannot tolerate, that intruders can deal with my personal data without my explicit permission and support. Whether those intruders have governmental permissions, I don't f...ing care. I appreciate your serious comments. J. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

6 11

Re: [opensuse-security] Setting up FTP and SuseFirewall
by Terje J. Hanssen 03 Sep '07

03 Sep '07

Stefan Seifert wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Terje J. Hanssen wrote: > >> Next I >> tried to enable the more secure vsftpd instead, but did't get any FTP >> document, even not with the FireWall deactivated. Maybe also something >> also has to be configured in vsftpd.conf? >> > > You need to set local_enable and write_enable to YES in vsftpd.conf. > I tried this, disabled the firewall, but didn't get vsftpd to receive ftp documents from my scanner. --Terje --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

3 2

[opensuse-security] Setting up FTP and SuseFirewall
by Terje J. Hanssen 03 Sep '07

03 Sep '07

pure-ftpd vs vsftpd: I wish to setup FTP on a OpenSUSE 10.2 workstation to receive scanned documents from a networked MFP machine which has "Scan to FTP". First I enabled pure-ftpd service with xinetd, deactivated SuSEFirewall and was able to receive scanned ftp documents in my homedir as seleced. Next I tried to enable the more secure vsftpd instead, but did't get any FTP document, even not with the FireWall deactivated. Maybe also something also has to be configured in vsftpd.conf? SuseFirewall: I have a default SuseFirewall setup just with SSH enabled for external Zone access. My question is how configure SUSEFirewall preferably with YaST to receive FTP documents from my network scanner? I'm using fixed IP addresses on the LAN, not DHCP. I haven't activated Firewall for the Internal zone and thought therefore everything on my LAN had access, but scanned documents don't come through. I've read FTP may need that port 20-21 both TCP and UDP in the Firewall, maybe this is for External zone only? Rgds, Terje J. Hanssen --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

5 7

[opensuse-security] Re: [security-announce] test 1 2 3 - do not approve
by Marcus Meissner 30 Aug '07

30 Aug '07

On Thu, Aug 30, 2007 at 01:36:32PM +0200, Marcus Meissner wrote: > i > -- > Working, but not speaking, for the following german company: > SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) Please disregard this mail ... it should not have been approved. :/ Ciao, Marcus --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

1 0

[opensuse-security] Antivir keys opensuse 10.2
by Administrator 19 Aug '07

19 Aug '07

Hi, can anyone tell me how to get a new key (licence) for antivir on openSuSE 10.2? I've looked through the web site www.free-av.com and can't find anywhere where I can request or get a new free key for AV Classic for Linux or even a paid-for key for AV Premium for Linux. Can someone send me a current URL for the right page, please? Thanks David --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 1

Re: [opensuse-security] Proplem with scp under SuSE10.1
by Carlos E. R. 07 Aug '07

07 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 El 2007-08-06 a las 11:01 +0200, Kendy Kutzner escribió: > On 2007-07-12T15:58:24+0200, Carlos E. R. wrote: > > The Wednesday 2007-07-11 at 14:44 +0200, su.secu@ wrote: > > > After a few Bytes I got the message on the receiver: > > > 'Disconnecting: Corrupted MAC on input' and on the sender 'received > > > disconnect from xxx.xxx.xxx.xxx: 2: Corrupted MAC on input'. The > > > receiver host is a SuSE 10.2 and the sender host is a SuSE 10.1, both > > > host with all updates. When I search in the net I found the problem in > > > context with the kernel and the nic's. > > > > I fail to see what your problem has to do with "security". > > Note that scp (or better the ssh underneath) complains about a corrupt > Message Authentication Code, not about a bad Medium Access Control > address. (MAC != MAC) Ah... I see. The error message should be more clear, not used a confusing acronym. But then, you should have posted this to the list, not to me in private. I'm answering to the list, leaving your full text, in the hope the OP sees it. > The message authentication code is responsible to ensure the integrity > of the data stream, and as such it is security related. > > Reasons for the above message can be an active attacker trying to > tamper with your connection or data errors not detected by other > mechanisms. > > Kendy > > - -- Saludos Carlos E.R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFGuGBwtTMYHG2NR9URAu2FAJwMR7PKlPmQszrvT44ubat+oLiulACfQWvy x3StzGFLsz9trnp6E9b0wUA= =Qs1j -----END PGP SIGNATURE-----

1 0