Re: Which ssh should I have?

2001-11-08 Thread Junichi Uekawa
Wichert Akkerman <[EMAIL PROTECTED]> immo vero scripsit > That's because nessus only checks the version number, and since we > backported the patch we still have the old version number even though > we are safe. CERT tells me Debian potato is vulnerable. We might want to correct them if they are

Re: Hard Disk Organization

2001-11-08 Thread Mark Lanett
The deal with RAID is that it only protects you from hardware failure, not software failure. If you accidentally delete a file or someone hacks your machine, the data will be erased from both sides of the mirror. Personally I think software failure is more likely than hardware (unless you have tho

Re: Which ssh should I have?

2001-11-08 Thread Junichi Uekawa
Wichert Akkerman <[EMAIL PROTECTED]> immo vero scripsit > That's because nessus only checks the version number, and since we > backported the patch we still have the old version number even though > we are safe. CERT tells me Debian potato is vulnerable. We might want to correct them if they are

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Ethan Benson wrote: > sorry i don't leave known security holes wide open on my boxes. only > an idiot does that. If you think your box does not have currently unknown holes you are naive :) Wichert. -- _ /[EMAIL PROT

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:32:06PM -0800, Vineet Kumar wrote: > > Well, on some level, *every* system is vulnerable to scriptkiddies. The > worst security flaw is admin hubris; always remember that you are not > immune. sorry i don't leave known security holes wide open on my boxes. only an idio

Re: Hard Disk Organization

2001-11-08 Thread John
On Thu, Nov 08, 2001 at 10:28:11PM +0100, eim wrote: > So I've lost sdb1 and all my important data, but fortunately > my home dir is still there ! > > My question is, has somebody any suggestions on how to > organize personal data, maybe some Real Life examples in > order to share opinions on a S

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Rolf Kutz wrote: > If you have a linux-fileserver serving binaries for > linux-workstations, how should it tell? It won't have any effect then anyway. Wichert. -- _ /[EMAIL PROTECTED] This space intentionally

Re: Hard Disk Organization

2001-11-08 Thread Mark Lanett
The deal with RAID is that it only protects you from hardware failure, not software failure. If you accidentally delete a file or someone hacks your machine, the data will be erased from both sides of the mirror. Personally I think software failure is more likely than hardware (unless you have th

Re: Debconf and noexec on /tmp

2001-11-08 Thread Rolf Kutz
* Quoting Wichert Akkerman ([EMAIL PROTECTED]): > Previously Rolf Kutz wrote: > > If you mount partitions of a different OS or > > machine, whose programs can't or shouldn't be > > executed. > > Any sane OS will gave a sane error when you do that anyway. If you have a linux-fileserver serving bin

Re: Debconf and noexec on /tmp

2001-11-08 Thread Vineet Kumar
* Ethan Benson ([EMAIL PROTECTED]) [011108 07:56]: > On Thu, Nov 08, 2001 at 03:43:56PM +0100, Wichert Akkerman wrote: > > Previously Ethan Benson wrote: > > > its not, it provides you NO extra security whatsoever, and will break > > > many many things. > > > > It breaks a fair number of scripts t

Re: FTP and security

2001-11-08 Thread Vineet Kumar
* Brandon High ([EMAIL PROTECTED]) [011108 12:25]: > On Thu, Nov 08, 2001 at 10:29:08PM +0100, Luc MAIGNAN wrote: > > Is FTP really insecure ? > > I use a version of ProFtpd. > > The protocol is insecure, since it sends login and authentication > information over the wire in clear text. ...which

Re: FTP and security

2001-11-08 Thread Jari Eskelinen
On 09.11.2001 00:52 Petter Abrahamsson wrote: Try gftp, it will do the trick for you I tried it some time ago (and now again), but it seems to use some other kind of sftp system we have here... It tries to start sftpserv from remote machine, and there are none. Instead there are sftp-server

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Ethan Benson wrote: > sorry i don't leave known security holes wide open on my boxes. only > an idiot does that. If you think your box does not have currently unknown holes you are naive :) Wichert. -- _ [EMAIL PROT

Re: FTP and security

2001-11-08 Thread Petter Abrahamsson
On Thu, 2001-11-08 at 15:25, Jari Eskelinen wrote: > > > While were on the subject, is there an OpenSSH port of SFTP? > > openssh has a sftp subsystem, yes. > > How about sftp-client with decent (G)UI, is there one (for Linux, > preferable for Debian)? OpenSSH's sftp-client is pathetic. How you e

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:32:06PM -0800, Vineet Kumar wrote: > > Well, on some level, *every* system is vulnerable to scriptkiddies. The > worst security flaw is admin hubris; always remember that you are not > immune. sorry i don't leave known security holes wide open on my boxes. only an idi

Re: Hard Disk Organization

2001-11-08 Thread dude
Just curious but how did you lose the data? I seem to hve run into huge disk prlbems with page defualts On 8 Nov 2001, eim wrote: >Date: 08 Nov 2001 22:28:11 +0100 >From: eim <[EMAIL PROTECTED]> >To: Debian-Security List >Subject: Hard Disk Organization >Resent-From: debian-security@lists.de

Re: FTP and security

2001-11-08 Thread Emmanuel Valliet
(2001-11-09) Jari Eskelinen sed : | > > While were on the subject, is there an OpenSSH port of SFTP? | > openssh has a sftp subsystem, yes. | | How about sftp-client with decent (G)UI, is there one (for Linux, | preferable for Debian)? OpenSSH's sftp-client is pathetic. How you even | can up

Re: FTP and security

2001-11-08 Thread Petro
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > Is there a decent Windows FTP application that supports sftp? Unfortunately, > I have to use Windows at work. :/ Well, there's always cygwin. It almost makes Windows liveable. > On Thu, Nov 08, 2001 at 10:55:17PM +0100, Wich

Re: Hard Disk Organization

2001-11-08 Thread John
On Thu, Nov 08, 2001 at 10:28:11PM +0100, eim wrote: > So I've lost sdb1 and all my important data, but fortunately > my home dir is still there ! > > My question is, has somebody any suggestions on how to > organize personal data, maybe some Real Life examples in > order to share opinions on a

Re: FTP and security

2001-11-08 Thread Jari Eskelinen
> While were on the subject, is there an OpenSSH port of SFTP? openssh has a sftp subsystem, yes. How about sftp-client with decent (G)UI, is there one (for Linux, preferable for Debian)? OpenSSH's sftp-client is pathetic. How you even can upload/download whole subdirectories with it? -- Jar

RE: Re: FTP and security

2001-11-08 Thread Don Froien, III
There's also putty. Free software that will allow your windows box to ssh into your linux machine and supports vim syntax coloring. Mark Janssen <[EMAIL PROTECTED]> wrote: >On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: >> Is there a decent Windows FTP application that supports

RE: FTP and security

2001-11-08 Thread Jesse Molina
You can try SecureFX from Van Dyke Technologies, www.vandyke.com I think. It works pretty well. It supports ftp and sftp. # Jesse Molina lanner, Snow # Network Engineer Maximum Charisma Studios Inc. # [EMAIL PROTECTED] 1.303.432.0286 # end of sig > -Orig

Re: FTP and security

2001-11-08 Thread Kenneth Pronovici
> On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > > Is there a decent Windows FTP application that supports sftp? > > Unfortunately, I have to use Windows at work. :/ > > cygwin includes openssh... and the sftp it has supports everything you > need. Or, try Putty: http://w

Re: FTP and security

2001-11-08 Thread Mark Janssen
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > Is there a decent Windows FTP application that supports sftp? Unfortunately, > I have to use Windows at work. :/ cygwin includes openssh... and the sftp it has supports everything you need. -- Mark Janssen

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Rolf Kutz wrote: > If you have a linux-fileserver serving binaries for > linux-workstations, how should it tell? It won't have any effect then anyway. Wichert. -- _ [EMAIL PROTECTED] This space intentionally

Re: FTP and security

2001-11-08 Thread Adam Spickler
Is there a decent Windows FTP application that supports sftp? Unfortunately, I have to use Windows at work. :/ Thanks, Adam On Thu, Nov 08, 2001 at 10:55:17PM +0100, Wichert Akkerman wrote: > Previously Lars Bjarby wrote: > > While were on the subject, is there an OpenSSH port of SFTP? > > o

Re: FTP and security

2001-11-08 Thread Wichert Akkerman
Previously Lars Bjarby wrote: > While were on the subject, is there an OpenSSH port of SFTP? openssh has a sftp subsystem, yes. Wichert. -- _ /[EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL PROTECTED

Re: FTP and security

2001-11-08 Thread Lars Bjarby
At 22:29 2001-11-08, Luc MAIGNAN wrote: Is FTP really insecure ? I use a version of ProFtpd. A protocol that sends the passwords in clear text is anything but secure. If you have to use FTP you should probably have diffrent usernames and/or passwords in the ftpd. While were on the subject,

Re: Debconf and noexec on /tmp

2001-11-08 Thread Rolf Kutz
* Quoting Wichert Akkerman ([EMAIL PROTECTED]): > Previously Rolf Kutz wrote: > > If you mount partitions of a different OS or > > machine, whose programs can't or shouldn't be > > executed. > > Any sane OS will gave a sane error when you do that anyway. If you have a linux-fileserver serving bi

Re: Debconf and noexec on /tmp

2001-11-08 Thread Vineet Kumar
* Ethan Benson ([EMAIL PROTECTED]) [011108 07:56]: > On Thu, Nov 08, 2001 at 03:43:56PM +0100, Wichert Akkerman wrote: > > Previously Ethan Benson wrote: > > > its not, it provides you NO extra security whatsoever, and will break > > > many many things. > > > > It breaks a fair number of scripts

Hard Disk Organization

2001-11-08 Thread eim
Two days ago I've lost all my Personal Data on my Second HDD, Personal Data like Photos, Images, Audio Stuff, Source Code, Mails: everything gone...! I had some Backups fortuneatly but most stuff is lost forever. Well, now I'm Ready to start my Personal Data Organization from the begining, I've a

Re: FTP and security

2001-11-08 Thread Vineet Kumar
* Brandon High ([EMAIL PROTECTED]) [011108 12:25]: > On Thu, Nov 08, 2001 at 10:29:08PM +0100, Luc MAIGNAN wrote: > > Is FTP really insecure ? > > I use a version of ProFtpd. > > The protocol is insecure, since it sends login and authentication > information over the wire in clear text. ...which

Re: FTP and security

2001-11-08 Thread Jari Eskelinen
On 09.11.2001 00:52 Petter Abrahamsson wrote: > Try gftp, it will do the trick for you I tried it some time ago (and now again), but it seems to use some other kind of sftp system we have here... It tries to start sftpserv from remote machine, and there are none. Instead there are sftp-server

Re: FTP and security

2001-11-08 Thread Petter Abrahamsson
On Thu, 2001-11-08 at 15:25, Jari Eskelinen wrote: > > > While were on the subject, is there an OpenSSH port of SFTP? > > openssh has a sftp subsystem, yes. > > How about sftp-client with decent (G)UI, is there one (for Linux, > preferable for Debian)? OpenSSH's sftp-client is pathetic. How you

Re: Hard Disk Organization

2001-11-08 Thread dude
Just curious but how did you lose the data? I seem to hve run into huge disk prlbems with page defualts On 8 Nov 2001, eim wrote: >Date: 08 Nov 2001 22:28:11 +0100 >From: eim <[EMAIL PROTECTED]> >To: Debian-Security List <[EMAIL PROTECTED]> >Subject: Hard Disk Organization >Resent-From: [EMA

Re: FTP and security

2001-11-08 Thread Emmanuel Valliet
(2001-11-09) Jari Eskelinen sed : | > > While were on the subject, is there an OpenSSH port of SFTP? | > openssh has a sftp subsystem, yes. | | How about sftp-client with decent (G)UI, is there one (for Linux, | preferable for Debian)? OpenSSH's sftp-client is pathetic. How you even | can u

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Rolf Kutz wrote: > If you mount partitions of a different OS or > machine, whose programs can't or shouldn't be > executed. Any sane OS will gave a sane error when you do that anyway. Wichert. -- _ /[EMAIL PROTECTED]

Re: FTP and security

2001-11-08 Thread Petro
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > Is there a decent Windows FTP application that supports sftp? Unfortunately, I have >to use Windows at work. :/ Well, there's always cygwin. It almost makes Windows liveable. > On Thu, Nov 08, 2001 at 10:55:17PM +0100, Wich

Re: FTP and security

2001-11-08 Thread Jari Eskelinen
> > While were on the subject, is there an OpenSSH port of SFTP? > openssh has a sftp subsystem, yes. How about sftp-client with decent (G)UI, is there one (for Linux, preferable for Debian)? OpenSSH's sftp-client is pathetic. How you even can upload/download whole subdirectories with it? --

Re: FTP and security

2001-11-08 Thread Brandon High
On Thu, Nov 08, 2001 at 10:29:08PM +0100, Luc MAIGNAN wrote: > Is FTP really insecure ? > I use a version of ProFtpd. The protocol is insecure, since it sends login and authentication information over the wire in clear text. Different FTP daemons have different security issues. -B -- Brandon H

RE: FTP and security

2001-11-08 Thread Jesse Molina
Be more specific about your concerns. The question is, what about it might be insecure? The network transport method? Authentication method? The daemon to remote exploits? The daemon for local exploits? A problem may be related to the specific implementation of the standard, or the standard its

FTP and security

2001-11-08 Thread Luc MAIGNAN
Is FTP really insecure ? I use a version of ProFtpd. Regards

RE: Re: FTP and security

2001-11-08 Thread Don Froien, III
There's also putty. Free software that will allow your windows box to ssh into your linux machine and supports vim syntax coloring. Mark Janssen <[EMAIL PROTECTED]> wrote: >On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: >> Is there a decent Windows FTP application that supports

RE: FTP and security

2001-11-08 Thread Jesse Molina
You can try SecureFX from Van Dyke Technologies, www.vandyke.com I think. It works pretty well. It supports ftp and sftp. # Jesse Molina lanner, Snow # Network Engineer Maximum Charisma Studios Inc. # [EMAIL PROTECTED]1.303.432.0286 # end of sig > -Orig

Re: FTP and security

2001-11-08 Thread Kenneth Pronovici
> On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > > Is there a decent Windows FTP application that supports sftp? Unfortunately, I >have to use Windows at work. :/ > > cygwin includes openssh... and the sftp it has supports everything you > need. Or, try Putty: http://www

Re: FTP and security

2001-11-08 Thread Mark Janssen
On Thu, Nov 08, 2001 at 04:57:22PM -0500, Adam Spickler wrote: > Is there a decent Windows FTP application that supports sftp? Unfortunately, I have >to use Windows at work. :/ cygwin includes openssh... and the sftp it has supports everything you need. -- Mark Janssen

Re: FTP and security

2001-11-08 Thread Adam Spickler
Is there a decent Windows FTP application that supports sftp? Unfortunately, I have to use Windows at work. :/ Thanks, Adam On Thu, Nov 08, 2001 at 10:55:17PM +0100, Wichert Akkerman wrote: > Previously Lars Bjarby wrote: > > While were on the subject, is there an OpenSSH port of SFTP? > >

Re: FTP and security

2001-11-08 Thread Wichert Akkerman
Previously Lars Bjarby wrote: > While were on the subject, is there an OpenSSH port of SFTP? openssh has a sftp subsystem, yes. Wichert. -- _ [EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL PROTECTED

Re: FTP and security

2001-11-08 Thread Lars Bjarby
At 22:29 2001-11-08, Luc MAIGNAN wrote: >Is FTP really insecure ? >I use a version of ProFtpd. A protocol that sends the passwords in clear text is anything but secure. If you have to use FTP you should probably have diffrent usernames and/or passwords in the ftpd. While were on the subject,

Re: log iptables

2001-11-08 Thread Davy Gigan
Osvaldo Mundim Junior writes: > Hi, > > does anybody knowns what are TOS,PREC,TTL and RES of iptables`s log?? These are fields in IP packets : TOS stands for Type Of Service PREC stands for precedence These one may be usefull to determine priority for packets, but i think they're not very

Hard Disk Organization

2001-11-08 Thread eim
Two days ago I've lost all my Personal Data on my Second HDD, Personal Data like Photos, Images, Audio Stuff, Source Code, Mails: everything gone...! I had some Backups fortuneatly but most stuff is lost forever. Well, now I'm Ready to start my Personal Data Organization from the begining, I've

log iptables

2001-11-08 Thread Osvaldo Mundim Junior
Hi, does anybody knowns what are TOS,PREC,TTL and RES of iptables`s log?? tks ___ Osvaldo

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Rolf Kutz wrote: > If you mount partitions of a different OS or > machine, whose programs can't or shouldn't be > executed. Any sane OS will gave a sane error when you do that anyway. Wichert. -- _ [EMAIL PROTECTED]

Re: Debconf and noexec on /tmp

2001-11-08 Thread Oyvind A. Holm
On 2001-11-08 16:47 Wichert Akkerman wrote: Previously Emmanuel Lacour wrote: EL> What's the use of noexec flag??? WA> Historic thing mostly with very little practical use these days. At least it's a Good Thing to have around when mounting DOSish floppies and such to avoid having all files marke

Re: FTP and security

2001-11-08 Thread Brandon High
On Thu, Nov 08, 2001 at 10:29:08PM +0100, Luc MAIGNAN wrote: > Is FTP really insecure ? > I use a version of ProFtpd. The protocol is insecure, since it sends login and authentication information over the wire in clear text. Different FTP daemons have different security issues. -B -- Brandon

RE: FTP and security

2001-11-08 Thread Jesse Molina
Be more specific about your concerns. The question is, what about it might be insecure? The network transport method? Authentication method? The daemon to remote exploits? The daemon for local exploits? A problem may be related to the specific implementation of the standard, or the standard it

FTP and security

2001-11-08 Thread Luc MAIGNAN
Is FTP really insecure ? I use a version of ProFtpd. Regards -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: log iptables

2001-11-08 Thread Davy Gigan
Osvaldo Mundim Junior writes: > Hi, > > does anybody knowns what are TOS,PREC,TTL and RES of iptables`s log?? These are fields in IP packets : TOS stands for Type Of Service PREC stands for precedence These one may be usefull to determine priority for packets, but i think they're not ver

log iptables

2001-11-08 Thread Osvaldo Mundim Junior
Hi, does anybody knowns what are TOS,PREC,TTL and RES of iptables`s log?? tks ___ Osvaldo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Strange auth.log entry

2001-11-08 Thread Kenneth Pronovici
> the **unknown* is due to if there is not a correct uid (number) match to a > username (your login name) in /etc/passwd. I only know this because of a bug > in the dialy server I use (connectd) which didn't for whatever reason collect > the correct uid for the user 'nobody'. Obviously somethi

Re: Strange auth.log entry

2001-11-08 Thread Alexander Clouter
Brian P. Flaherty [EMAIL PROTECTED] wrote: > > I found this in my auth.log yesterday and I am puzzeled by it. > > Nov 7 00:52:56 localhost PAM_unix[4704]: authentication failure; (uid=0) -> > **unknown** for passwd service > > I don't know how to interpret the (uid=0) -> **unknown** part. I >

Re: Debconf and noexec on /tmp

2001-11-08 Thread Rolf Kutz
Wichert Akkerman ([EMAIL PROTECTED]) wrote: > Previously Emmanuel Lacour wrote: > > What's the use of noexec flag??? > > Historic thing mostly with very little practical use these days. man mount - Rolf

Re: Debconf and noexec on /tmp

2001-11-08 Thread Rolf Kutz
Emmanuel Lacour ([EMAIL PROTECTED]) wrote: > What's the use of noexec flag??? If you mount partitions of a different OS or machine, whose programs can't or shouldn't be executed. - Rolf

Re: Debconf and noexec on /tmp

2001-11-08 Thread Oyvind A. Holm
On 2001-11-08 16:47 Wichert Akkerman wrote: Previously Emmanuel Lacour wrote: EL> What's the use of noexec flag??? WA> Historic thing mostly with very little practical use these days. At least it's a Good Thing to have around when mounting DOSish floppies and such to avoid having all files mark

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Ethan Benson wrote: > 1: if your system is vulnerable to script kiddies then admin needs to >be taken out back and beaten with a large LART. Sure, but I don't mind having a hopefully completely redundant extra layer in there. > 2: if the script kiddie even has 2 tenths of a percent

Strange auth.log entry

2001-11-08 Thread Brian P. Flaherty
Hello, I found this in my auth.log yesterday and I am puzzeled by it. Nov 7 00:52:56 localhost PAM_unix[4704]: authentication failure; (uid=0) -> **unknown** for passwd service I don't know how to interpret the (uid=0) -> **unknown** part. I don't think I was working as root at the time (in f

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:43:56PM +0100, Wichert Akkerman wrote: > Previously Ethan Benson wrote: > > its not, it provides you NO extra security whatsoever, and will break > > many many things. > > It breaks a fair number of scripts that script-kiddies use, and as > such it is somewhat useful. 1

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Emmanuel Lacour wrote: > What's the use of noexec flag??? Historic thing mostly with very little practical use these days. Wichert. -- _ /[EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL PRO

Re: Debconf and noexec on /tmp

2001-11-08 Thread Emmanuel Lacour
Ok, thanks for all the comments, I remember have been seen that we could run a program in a noexec partition like you said. So I will continue without noexec (and do more stuff on more usefull security tricks). Just one question: What's the use of noexec flag??? -- Easter-eggs

Re: Strange auth.log entry

2001-11-08 Thread Kenneth Pronovici
> the **unknown* is due to if there is not a correct uid (number) match to a > username (your login name) in /etc/passwd. I only know this because of a bug > in the dialy server I use (connectd) which didn't for whatever reason collect > the correct uid for the user 'nobody'. Obviously someth

Re: Debconf and noexec on /tmp

2001-11-08 Thread Tim Haynes
Wichert Akkerman <[EMAIL PROTECTED]> writes: > Previously Ethan Benson wrote: > > its not, it provides you NO extra security whatsoever, and will break > > many many things. > > It breaks a fair number of scripts that script-kiddies use, and as > such it is somewhat useful. . FWIW it'll also bre

Re: Strange auth.log entry

2001-11-08 Thread Alexander Clouter
Brian P. Flaherty [[EMAIL PROTECTED]] wrote: > > I found this in my auth.log yesterday and I am puzzeled by it. > > Nov 7 00:52:56 localhost PAM_unix[4704]: authentication failure; (uid=0) -> >**unknown** for passwd service > > I don't know how to interpret the (uid=0) -> **unknown** part. I

Re: Debconf and noexec on /tmp

2001-11-08 Thread Rolf Kutz
Wichert Akkerman ([EMAIL PROTECTED]) wrote: > Previously Emmanuel Lacour wrote: > > What's the use of noexec flag??? > > Historic thing mostly with very little practical use these days. man mount - Rolf -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble?

Re: Debconf and noexec on /tmp

2001-11-08 Thread Rolf Kutz
Emmanuel Lacour ([EMAIL PROTECTED]) wrote: > What's the use of noexec flag??? If you mount partitions of a different OS or machine, whose programs can't or shouldn't be executed. - Rolf -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PRO

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Ethan Benson wrote: > its not, it provides you NO extra security whatsoever, and will break > many many things. It breaks a fair number of scripts that script-kiddies use, and as such it is somewhat useful. Wichert. -- ___

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:13:05PM +0100, Emmanuel Lacour wrote: > Hi, > > I've got an ix86 with woody installed today, made a separate partition > for /tmp and mounted it noexec (I thinks it's a good Idea...). its not, it provides you NO extra security whatsoever, and will break many many things

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Emmanuel Lacour wrote: > Is this due to debconf or to the scripts preinst from ntpdate?? You hit bug# 116448 (see http://bugs.debian.org/116448) Wichert. -- _ /[EMAIL PROTECTED] This space intentionally left

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Ethan Benson wrote: > 1: if your system is vulnerable to script kiddies then admin needs to >be taken out back and beaten with a large LART. Sure, but I don't mind having a hopefully completely redundant extra layer in there. > 2: if the script kiddie even has 2 tenths of a percen

Debconf and noexec on /tmp

2001-11-08 Thread Emmanuel Lacour
Hi, I've got an ix86 with woody installed today, made a separate partition for /tmp and mounted it noexec (I thinks it's a good Idea...). When apt-get installing ntpdate, I got the folowing error: Can't exec "/tmp/config.4271": Permission denied at /usr/share/perl/5.6.1/IPC/Open3.pm line 159 ...

Strange auth.log entry

2001-11-08 Thread Brian P. Flaherty
Hello, I found this in my auth.log yesterday and I am puzzeled by it. Nov 7 00:52:56 localhost PAM_unix[4704]: authentication failure; (uid=0) -> **unknown** for passwd service I don't know how to interpret the (uid=0) -> **unknown** part. I don't think I was working as root at the time (in

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:43:56PM +0100, Wichert Akkerman wrote: > Previously Ethan Benson wrote: > > its not, it provides you NO extra security whatsoever, and will break > > many many things. > > It breaks a fair number of scripts that script-kiddies use, and as > such it is somewhat useful.

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Emmanuel Lacour wrote: > What's the use of noexec flag??? Historic thing mostly with very little practical use these days. Wichert. -- _ [EMAIL PROTECTED] This space intentionally left occupied \ | [EMAIL PRO

Re: Debconf and noexec on /tmp

2001-11-08 Thread Emmanuel Lacour
Ok, thanks for all the comments, I remember have been seen that we could run a program in a noexec partition like you said. So I will continue without noexec (and do more stuff on more usefull security tricks). Just one question: What's the use of noexec flag??? -- Easter-eggs

Re: Debconf and noexec on /tmp

2001-11-08 Thread Tim Haynes
Wichert Akkerman <[EMAIL PROTECTED]> writes: > Previously Ethan Benson wrote: > > its not, it provides you NO extra security whatsoever, and will break > > many many things. > > It breaks a fair number of scripts that script-kiddies use, and as > such it is somewhat useful. . FWIW it'll also br

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Ethan Benson wrote: > its not, it provides you NO extra security whatsoever, and will break > many many things. It breaks a fair number of scripts that script-kiddies use, and as such it is somewhat useful. Wichert. -- __

Re: Debconf and noexec on /tmp

2001-11-08 Thread Ethan Benson
On Thu, Nov 08, 2001 at 03:13:05PM +0100, Emmanuel Lacour wrote: > Hi, > > I've got an ix86 with woody installed today, made a separate partition > for /tmp and mounted it noexec (I thinks it's a good Idea...). its not, it provides you NO extra security whatsoever, and will break many many thing

Re: Debconf and noexec on /tmp

2001-11-08 Thread Wichert Akkerman
Previously Emmanuel Lacour wrote: > Is this due to debconf or to the scripts preinst from ntpdate?? You hit bug# 116448 (see http://bugs.debian.org/116448) Wichert. -- _ [EMAIL PROTECTED] This space intentionally left

Debconf and noexec on /tmp

2001-11-08 Thread Emmanuel Lacour
Hi, I've got an ix86 with woody installed today, made a separate partition for /tmp and mounted it noexec (I thinks it's a good Idea...). When apt-get installing ntpdate, I got the folowing error: Can't exec "/tmp/config.4271": Permission denied at /usr/share/perl/5.6.1/IPC/Open3.pm line 159 ..

Re: question about something, but don't know if it exists...

2001-11-08 Thread martin f krafft
* Bryan Andersen <[EMAIL PROTECTED]> [2001.11.06 05:23:05-0600]: > Another possibility would be to have them replace the hubs with > switches, this assumes you are using twisted pair, not thin net > or thick net. which is not secure due to arp flooding. i'll happily give you a POP3 account over

Re: Hacked stable system?

2001-11-08 Thread Johan Kiviniemi
On Wed, Nov 07, 2001 at 04:10:05PM -0800, Gleb Arshinov wrote: > I am running an up-to-date stable distribution. It looks like it may > have been hacked yesterday, but I am not sure how. You might want to run chkrootkit on the machine. It's apt-gettable for testing and unstable, and downloadab

Re: question about something, but don't know if it exists...

2001-11-08 Thread martin f krafft
* Bryan Andersen <[EMAIL PROTECTED]> [2001.11.06 05:23:05-0600]: > Another possibility would be to have them replace the hubs with > switches, this assumes you are using twisted pair, not thin net > or thick net. which is not secure due to arp flooding. i'll happily give you a POP3 account ove

Re: Hacked stable system?

2001-11-08 Thread Johan Kiviniemi
On Wed, Nov 07, 2001 at 04:10:05PM -0800, Gleb Arshinov wrote: > I am running an up-to-date stable distribution. It looks like it may > have been hacked yesterday, but I am not sure how. You might want to run chkrootkit on the machine. It's apt-gettable for testing and unstable, and downloada

Re: Hacked stable system?

2001-11-08 Thread Lars Bahner
Gleb Arshinov wrote: I am running an up-to-date stable distribution. It looks like it may have been hacked yesterday, but I am not sure how. So, what could have caused ssh/telnet to hang like this while ftp worked fine? What else should I check for break-in signs? I am thinking I should re

Re: question about something, but don't know if it exists...

2001-11-08 Thread Vineet Kumar
* [EMAIL PROTECTED] ([EMAIL PROTECTED]) [011106 05:54]: > Hallo, > > > > > happen few times that students stole their passwords and so on and mainly > > > they could steal even teacher's these days.) > > > > Can you get a shell account on the outside of your local network? > > If so SSH over t