Re: Grsecurity, ssh and postfix

2003-12-09 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 08, 2003 at 09:30:04AM +0100, Domonkos Czinke wrote: > Hi, > > I think you won't have to make a unique jail for ssh, you can use the > pam module which is designed especially for this. Unfortunately AFAIK > debian does not support that module, so you will have to compile your > own pac

Re: Grsecurity, ssh and postfix

2003-12-09 Thread Javier Fernández-Sanguino Peña
On Mon, Dec 08, 2003 at 09:30:04AM +0100, Domonkos Czinke wrote: > Hi, > > I think you won't have to make a unique jail for ssh, you can use the > pam module which is designed especially for this. Unfortunately AFAIK > debian does not support that module, so you will have to compile your > own pac

Re: What will be old configurations if new kernel installed

2003-12-09 Thread Peter Cordes
On Thu, Dec 04, 2003 at 03:23:40PM +0200, E&Erdem wrote: > Hi, > I didn't find /usr/share/kernel-image-2.4.18-bf.2.4/ also there isn't > any kernel image folder on my machine (?) I think he meant to say /usr/share/doc/... > So i forget all other things > and installed bf2.4 again (apt-get update

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Steve Kemp
On Tue, Dec 09, 2003 at 11:45:22AM -0500, Walter Tautz wrote: > just wondering if this would be a good idea. We currently have > >80 machines that do an update once a day on this host so > I think it may be a good idea to mirror the archive locally, say > once a day via rsync? The way that I do

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Peter Cordes
On Tue, Dec 09, 2003 at 05:58:51PM +0100, Giacomo Mulas wrote: > On Tue, 9 Dec 2003, Walter Tautz wrote: > > > just wondering if this would be a good idea. We currently have > > >80 machines that do an update once a day on this host so > > I think it may be a good idea to mirror the archive locall

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread George Georgalis
On Tue, Dec 09, 2003 at 11:45:22AM -0500, Walter Tautz wrote: >just wondering if this would be a good idea. We currently have >>80 machines that do an update once a day on this host so >I think it may be a good idea to mirror the archive locally, say >once a day via rsync? The Nov ?? Deb weekly ne

Re: Is there a FAM(file alteration monitor) exploit in the wild?

2003-12-09 Thread Me
On Mon, Dec 08, 2003 at 11:02:49AM +0100, Jean-Francois Dive wrote: > why do you run that kind of service on a publicly reachable address ? Well, it wasn't by choice. It came with some K-apps that were installed. But that isn't the point. It is pretty common. The fact that there might be an

Re: What will be old configurations if new kernel installed

2003-12-09 Thread Peter Cordes
On Thu, Dec 04, 2003 at 03:23:40PM +0200, E&Erdem wrote: > Hi, > I didn't find /usr/share/kernel-image-2.4.18-bf.2.4/ also there isn't > any kernel image folder on my machine (?) I think he meant to say /usr/share/doc/... > So i forget all other things > and installed bf2.4 again (apt-get update

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Steve Kemp
On Tue, Dec 09, 2003 at 11:45:22AM -0500, Walter Tautz wrote: > just wondering if this would be a good idea. We currently have > >80 machines that do an update once a day on this host so > I think it may be a good idea to mirror the archive locally, say > once a day via rsync? The way that I do

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Peter Cordes
On Tue, Dec 09, 2003 at 05:58:51PM +0100, Giacomo Mulas wrote: > On Tue, 9 Dec 2003, Walter Tautz wrote: > > > just wondering if this would be a good idea. We currently have > > >80 machines that do an update once a day on this host so > > I think it may be a good idea to mirror the archive locall

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Giacomo Mulas
On Tue, 9 Dec 2003, Walter Tautz wrote: > just wondering if this would be a good idea. We currently have > >80 machines that do an update once a day on this host so > I think it may be a good idea to mirror the archive locally, say > once a day via rsync? I have a similar situation and I do mirro

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread George Georgalis
On Tue, Dec 09, 2003 at 11:45:22AM -0500, Walter Tautz wrote: >just wondering if this would be a good idea. We currently have >>80 machines that do an update once a day on this host so >I think it may be a good idea to mirror the archive locally, say >once a day via rsync? The Nov ?? Deb weekly ne

Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Walter Tautz
just wondering if this would be a good idea. We currently have >80 machines that do an update once a day on this host so I think it may be a good idea to mirror the archive locally, say once a day via rsync? walter

Re: Is there a FAM(file alteration monitor) exploit in the wild?

2003-12-09 Thread Me
On Mon, Dec 08, 2003 at 11:02:49AM +0100, Jean-Francois Dive wrote: > why do you run that kind of service on a publicly reachable address ? Well, it wasn't by choice. It came with some K-apps that were installed. But that isn't the point. It is pretty common. The fact that there might be an

Re: Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Giacomo Mulas
On Tue, 9 Dec 2003, Walter Tautz wrote: > just wondering if this would be a good idea. We currently have > >80 machines that do an update once a day on this host so > I think it may be a good idea to mirror the archive locally, say > once a day via rsync? I have a similar situation and I do mirro

Q. Should one mirror debian.security.org? Good or Bad Idea?

2003-12-09 Thread Walter Tautz
just wondering if this would be a good idea. We currently have >80 machines that do an update once a day on this host so I think it may be a good idea to mirror the archive locally, say once a day via rsync? walter -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". T

Re: Grsecurity, ssh and postfix

2003-12-09 Thread Florian Weimer
Domonkos Czinke wrote: > I think you won't have to make a unique jail for ssh, you can use the > pam module which is designed especially for this. Unfortunately AFAIK > debian does not support that module, so you will have to compile your > own packages. Btw you can switch off the double chroot re

Re: Grsecurity, ssh and postfix

2003-12-09 Thread Florian Weimer
Domonkos Czinke wrote: > I think you won't have to make a unique jail for ssh, you can use the > pam module which is designed especially for this. Unfortunately AFAIK > debian does not support that module, so you will have to compile your > own packages. Btw you can switch off the double chroot re

Re: testing/Release not signed by the same key than non-US/testing/Release

2003-12-09 Thread Romain Francoise
Sebastien Chaumat <[EMAIL PROTECTED]> writes: > Can someone explain why testing/Release is signed with the key id : > 30B34DD5 (which I can't trust because I can't find any valid/trustable > source for it) whereas non-US/testing/Release is correctly signed with > ftp-master 2003 key ? It's the

Re: testing/Release not signed by the same key than non-US/testing/Release

2003-12-09 Thread Romain Francoise
Sebastien Chaumat <[EMAIL PROTECTED]> writes: > Can someone explain why testing/Release is signed with the key id : > 30B34DD5 (which I can't trust because I can't find any valid/trustable > source for it) whereas non-US/testing/Release is correctly signed with > ftp-master 2003 key ? It's the

DETEKTOVAN VIRUS U PORUCI ZA VAS / VIRUS DETECTED IN MAIL FOR YOU

2003-12-09 Thread gatekeeper
U P O Z O R E N J E - D E T E K T O V A N V I R U S V I R U S A L E R T Nas antivirus softver pronasao je | Our viruschecker found the install.exeinfected: I-Worm.Swen virus(e) u posti za vas sa adrese: | virus(es) in an email to you

DETEKTOVAN VIRUS U PORUCI ZA VAS / VIRUS DETECTED IN MAIL FOR YOU

2003-12-09 Thread gatekeeper
U P O Z O R E N J E - D E T E K T O V A N V I R U S V I R U S A L E R T Nas antivirus softver pronasao je | Our viruschecker found the install.exeinfected: I-Worm.Swen virus(e) u posti za vas sa adrese: | virus(es) in an email to you

testing/Release not signed by the same key than non-US/testing/Release

2003-12-09 Thread Sebastien Chaumat
Hi, Can someone explain why testing/Release is signed with the key id : 30B34DD5 (which I can't trust because I can't find any valid/trustable source for it) whereas non-US/testing/Release is correctly signed with ftp-master 2003 key ? Thanks, SEb P.S : sorry if it was ask there before I do n

testing/Release not signed by the same key than non-US/testing/Release

2003-12-09 Thread Sebastien Chaumat
Hi, Can someone explain why testing/Release is signed with the key id : 30B34DD5 (which I can't trust because I can't find any valid/trustable source for it) whereas non-US/testing/Release is correctly signed with ftp-master 2003 key ? Thanks, SEb P.S : sorry if it was ask there before I do n