Re: about install --reinstall for overwriting possible trojaned bins

2005-05-02 Thread Floris Bruynooghe
On Mon, May 02, 2005 at 06:10:11PM +0200, Jorge Salamero wrote: > > is there any way to do something like 'apt-get install --reinstall *' ? apt-get install --reistall `dpkg --get-selections`? > if my binaries are safe, my kernel is safe, after a reboot my > machine could be unless apt-get was

about install --reinstall for overwriting possible trojaned bins

2005-05-02 Thread Jorge Salamero
i was thinking about checking if all debian binaries on my system are safe, not trojaned. there is debsums but not all binaries come with their md5 in the debian packages, so a solution is to make an apt-get install --reinstall for every package on my system and then save their md5 for future

Re: Fixing stupid PHP application design flaws

2005-05-02 Thread Henrique de Moraes Holschuh
On Mon, 02 May 2005, Thijs Kinkhorst wrote: > Your viewpoint requires shell access for webmasters and that creates extra Why? It is not too difficult to make your PHP scripts use ../include/foo for their includes, and that is all it takes to get the crap out of the exported tree. > dependencies m

Re: Fixing stupid PHP application design flaws

2005-05-02 Thread Thijs Kinkhorst
On Sat, April 30, 2005 14:54, Martin Schulze wrote: >> "Simple makefile" doesn't match the typical person installing a web >> application. A .tar.gz may already be too difficult, they want to be able >> to ftp their files to their provider and it should work. Also, this > > Such people should stay

Re: FIle access auditing

2005-05-02 Thread Russell Coker
On Wednesday 27 April 2005 21:16, Marcell Metzner <[EMAIL PROTECTED]> wrote: > I have seen this using SE Linux or RSBAC. > This 2 are the best I have seen till now. One limitation of SE Linux in this regard is due to the design of the LSM interface. The LSM interface does not get called until a