Re: need help with openssh attack

2011-12-30 Thread Russell Coker
On Fri, 30 Dec 2011, Taz wrote: > of course, i've double changed all password and regenerated ssh keys. Are the SSH and PAM settings doing what you think? I suggest carefully examining the contents of /etc to see what has been changed from the default. A new sshd vulnerability that allows remo

Re: SELinux on Squeeze?

2011-12-30 Thread Russell Coker
On Sat, 31 Dec 2011, Laurentiu Pancescu wrote: > is there any difference between i386 and amd64 as to how much protection > SELinux is able to provide? Earlier, stuff like NX was only available on > 64-bit processors; are there still such differences? There has never been any difference in SE Lin

Re: SELinux on Squeeze?

2011-12-30 Thread Laurentiu Pancescu
Hello Russell, is there any difference between i386 and amd64 as to how much protection SELinux is able to provide? Earlier, stuff like NX was only available on 64-bit processors; are there still such differences? On 12/30/11 14:15 , Russell Coker wrote: The support is quite good. I run a b

Re: SELinux on Squeeze?

2011-12-30 Thread Russell Coker
On Fri, 30 Dec 2011, Laurentiu Pancescu wrote: > I would like to harden a web server setup using SELinux. How good is the > support for SELinux on Squeeze? Are the instructions on the Debian Wiki > [1] up to date for Squeeze? I tried this last time on Lenny, and DHCP > couldn't work back then due

SELinux on Squeeze?

2011-12-30 Thread Laurentiu Pancescu
Hello, I would like to harden a web server setup using SELinux. How good is the support for SELinux on Squeeze? Are the instructions on the Debian Wiki [1] up to date for Squeeze? I tried this last time on Lenny, and DHCP couldn't work back then due to SELinux not letting modprobe load additi