Re: How to get the current security updates on CD?

2003-01-04 Thread Matt Zimmerman
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: > Hi. I'm doing a fresh Woody installation, and I want it to include a > reasonably current set of security updates, but I also want to do the > installation offline. How can I get the security updates in CD form? > I went to htt

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread George Georgalis
On Sun, Jan 05, 2003 at 01:16:31AM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: >On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: >> Hi, I'm currently trying to use makejail... it does not work very good. > > Could you elaborate more on this? I would like to know which issue

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Alain Tesio
On Fri, 03 Jan 2003 18:19:43 +0100 Stefano Salvi <[EMAIL PROTECTED]> wrote: > Makejail from testing has a script about apache, but does it support Tomcat > and PHP4? > And how about CGIs? It supports php and CGIs, I've tested it with a search engine with php/mysql, I'm about to use it for phpnuk

Re: How to get the current security updates on CD?

2003-01-04 Thread Mike Renfro
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: > Hi. I'm doing a fresh Woody installation, and I want it to include > a reasonably current set of security updates, but I also want to do > the installation offline. How can I get the security updates in CD > form? I went to ht

Someone at works likes you. mckhw

2003-01-04 Thread mcrAlina
We have been hired to contact you because someone you know is interested in you. Please follow the link below to find out who. http://www.sliaba.com/5/ No more email here http://www.sliaba.com/nomore.php lmbitexuvxcyawuni

Re: How to get the current security updates on CD?

2003-01-04 Thread Matt Zimmerman
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: > Hi. I'm doing a fresh Woody installation, and I want it to include a > reasonably current set of security updates, but I also want to do the > installation offline. How can I get the security updates in CD form? > I went to htt

Re: How to get the current security updates on CD?

2003-01-04 Thread Rick Moen
Quoting Raymond Wood ([EMAIL PROTECTED]): > Interesting -- I wasn't aware of the security updates to > sarge/testing. If I am correct in assuming that the Security > Team still don't *officially* support Testing/Sarge, then I > would be interested in knowing who produces/maintains these > securit

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread George Georgalis
On Sun, Jan 05, 2003 at 01:16:31AM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: >On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: >> Hi, I'm currently trying to use makejail... it does not work very good. > > Could you elaborate more on this? I would like to know which issue

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Phillip Hofmeister
A word of caution to chrooters, make sure when a library gets updated for security you copy the updated library into the jail and then restart all jailed applications... -- Phil PGP/GPG Key: http://www.zionlth.org/~plhofmei/ wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import -- Ex

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Alain Tesio
On Fri, 03 Jan 2003 18:19:43 +0100 Stefano Salvi <[EMAIL PROTECTED]> wrote: > Makejail from testing has a script about apache, but does it support Tomcat > and PHP4? > And how about CGIs? It supports php and CGIs, I've tested it with a search engine with php/mysql, I'm about to use it for phpnuk

Re: How to get the current security updates on CD?

2003-01-04 Thread Mike Renfro
On Sat, Jan 04, 2003 at 05:20:46PM -0500, [EMAIL PROTECTED] wrote: > Hi. I'm doing a fresh Woody installation, and I want it to include > a reasonably current set of security updates, but I also want to do > the installation offline. How can I get the security updates in CD > form? I went to ht

Someone at works likes you. mckhw

2003-01-04 Thread mcrAlina
We have been hired to contact you because someone you know is interested in you. Please follow the link below to find out who. http://www.sliaba.com/5/ No more email here http://www.sliaba.com/nomore.php lmbitexuvxcyawuni -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject

Re: chrooting bind9

2003-01-04 Thread Mark Ferlatte
begin Stefano Salvi quote on Fri, Jan 03, 2003 at 06:19:53PM +0100: > There are two chances to do this: > 1) using parameter --chroot of 'start-stop-daemon' > 2) using parameter -t of bind > In both ways I have to use -u parameter of bind to change user, otherwise > it can't get privileged resour

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Javier Fernández-Sanguino Peña
On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: > Hi, I'm currently trying to use makejail... it does not work very good. Could you elaborate more on this? I would like to know which issues have you come up with. Also, you might want to take a loot at the (recen

Re: How to get the current security updates on CD?

2003-01-04 Thread Raymond Wood
On Sun, Jan 05, 2003 at 12:26:12AM +0100, SteX imagined: > In a stormy day a lighting flash occurred: it carried the > message from [EMAIL PROTECTED]: > > § How can I get the security updates in CD form? > § I went to http://www.debian.org/security, but I couldn't > § find anything § like CD image

Re: How to get the current security updates on CD?

2003-01-04 Thread Rick Moen
Quoting Raymond Wood ([EMAIL PROTECTED]): > Interesting -- I wasn't aware of the security updates to > sarge/testing. If I am correct in assuming that the Security > Team still don't *officially* support Testing/Sarge, then I > would be interested in knowing who produces/maintains these > securit

Re: How to get the current security updates on CD?

2003-01-04 Thread SteX
In a stormy day a lighting flash occurred: it carried the message from [EMAIL PROTECTED]: § How can I get the security updates in CD form? § I went to http://www.debian.org/security, but I couldn't find anything § like CD images. You better add the following lines in /etc/apt/sources.list deb h

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Phillip Hofmeister
A word of caution to chrooters, make sure when a library gets updated for security you copy the updated library into the jail and then restart all jailed applications... -- Phil PGP/GPG Key: http://www.zionlth.org/~plhofmei/ wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import -- Ex

Re: chrooting bind9

2003-01-04 Thread Mark Ferlatte
begin Stefano Salvi quote on Fri, Jan 03, 2003 at 06:19:53PM +0100: > There are two chances to do this: > 1) using parameter --chroot of 'start-stop-daemon' > 2) using parameter -t of bind > In both ways I have to use -u parameter of bind to change user, otherwise > it can't get privileged resour

How to get the current security updates on CD?

2003-01-04 Thread kynn
Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to http://www.debian.org/security, but I couldn't find anything like CD images

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Javier Fernández-Sanguino Peña
On Sat, Jan 04, 2003 at 09:00:45PM +0200, Martynas Domarkas wrote: > Hi, I'm currently trying to use makejail... it does not work very good. Could you elaborate more on this? I would like to know which issues have you come up with. Also, you might want to take a loot at the (recen

Re: How to get the current security updates on CD?

2003-01-04 Thread Raymond Wood
On Sun, Jan 05, 2003 at 12:26:12AM +0100, SteX imagined: > In a stormy day a lighting flash occurred: it carried the > message from [EMAIL PROTECTED]: > > § How can I get the security updates in CD form? > § I went to http://www.debian.org/security, but I couldn't > § find anything § like CD image

Re: How to get the current security updates on CD?

2003-01-04 Thread SteX
In a stormy day a lighting flash occurred: it carried the message from [EMAIL PROTECTED]: § How can I get the security updates in CD form? § I went to http://www.debian.org/security, but I couldn't find anything § like CD images. You better add the following lines in /etc/apt/sources.list deb ht

How to get the current security updates on CD?

2003-01-04 Thread kynn
Hi. I'm doing a fresh Woody installation, and I want it to include a reasonably current set of security updates, but I also want to do the installation offline. How can I get the security updates in CD form? I went to http://www.debian.org/security, but I couldn't find anything like CD images

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Martynas Domarkas
Hi, I'm currently trying to use makejail... it does not work very good. Simple way is copy /bin/bash with libraries (try ldd /bin/bash to find out which libs you need), so you can do chroot /your/chroot/dir. After do dpkg -L apache and copy contents of apache package to chroot, also repeat it with

chrooting bind9

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I'm setting bind9 in a chroot jail. There are two chances to do this: 1) using parameter --chroot of 'start-stop-daemon' 2) using parameter -t of bind In both ways I have to use -u parameter of bind to change user, otherwise it can't get privil

Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I have to host our school website. This site uses parts written in PHP4, and some CGIs. I also want to setup tomcat for a future possible use of JSP an servlets. I think it would be wise to put all this stuff in a chroot jail, but I wonder if

Re: Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Martynas Domarkas
Hi, I'm currently trying to use makejail... it does not work very good. Simple way is copy /bin/bash with libraries (try ldd /bin/bash to find out which libs you need), so you can do chroot /your/chroot/dir. After do dpkg -L apache and copy contents of apache package to chroot, also repeat it with

chrooting bind9

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I'm setting bind9 in a chroot jail. There are two chances to do this: 1) using parameter --chroot of 'start-stop-daemon' 2) using parameter -t of bind In both ways I have to use -u parameter of bind to change user, otherwise it can't get privile

Putting Apache, PHP, Tomcat and CGI in a jail

2003-01-04 Thread Stefano Salvi
I'm setting up my new server, based on Debian Woody. I have to host our school website. This site uses parts written in PHP4, and some CGIs. I also want to setup tomcat for a future possible use of JSP an servlets. I think it would be wise to put all this stuff in a chroot jail, but I wonder if i