Re: wu-ftpd security

2002-10-21 Thread Bob Nielsen
I don't know if wu-ftpd is configurable to do otherwise, but on my installation only anonymous users are chrooted (to /home/ftp, which has bin, etc and lib dirs.) On Mon, Oct 21, 2002 at 09:48:54AM -0500, Steve Johnson wrote: > Hi, > I'm using wu-ftpd and set up /etc/wu-ftpd/ftpaccess to allow onl

Re: wu-ftpd security

2002-10-21 Thread Bob Nielsen
I don't know if wu-ftpd is configurable to do otherwise, but on my installation only anonymous users are chrooted (to /home/ftp, which has bin, etc and lib dirs.) On Mon, Oct 21, 2002 at 09:48:54AM -0500, Steve Johnson wrote: > Hi, > I'm using wu-ftpd and set up /etc/wu-ftpd/ftpaccess to allow onl

Re: [SECURITY] [DSA-136-1] Multiple OpenSSL problems

2002-08-01 Thread Bob Nielsen
mes you need to be creative in figuring out the package name to look for, although 'apt-cache search' helps a lot. If you can't find a module you need, the dh-make-perl package automates the process for packaging a module. Bob Nielsen

Re: glibc_2.2.5-9.woody.4.deb is missing

2002-07-18 Thread Bob Nielsen
On Fri, Jul 19, 2002 at 09:36:01AM +0900, Olaf Meeuwissen wrote: > Bob Nielsen <[EMAIL PROTECTED]> writes: > > > Today's release of 2.2.5-10 appears to have resolved the problem. > > For unstable perhaps, but not for us folks sticking with testing. I am running

Re: glibc_2.2.5-9.woody.4.deb is missing

2002-07-18 Thread Bob Nielsen
Today's release of 2.2.5-10 appears to have resolved the problem. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: glibc_2.2.5-9.woody.4.deb is missing

2002-07-18 Thread Bob Nielsen
On Thu, Jul 18, 2002 at 05:55:17PM +0200, Thomas Buhk wrote: > > locales because the glibc_2.2.5-9.woody.4.deb would be > > missing. I had a > > hm... no problem this morning on several systems, all work fine with > 'apt-get update; apt-get upgrade' But did locales get removed? There is no gl

Re: Good Day

2002-07-02 Thread Bob Nielsen
On Tue, Jul 02, 2002 at 08:12:56AM -0700, Bob Nielsen wrote: > Yeah, I still get a few false positives and have had to tweak things a > bit (adding whitelist entries, etc.) > > Something strange has happened in the past few days, however. I > started seeing messages that didn&#

Re: Good Day

2002-07-02 Thread Bob Nielsen
Yeah, I still get a few false positives and have had to tweak things a bit (adding whitelist entries, etc.) Something strange has happened in the past few days, however. I started seeing messages that didn't appear to have gone through spamassassin at all. Some of these were obviously spam. In

Re: Good Day

2002-07-02 Thread Bob Nielsen
On Tue, Jul 02, 2002 at 02:18:16PM +0900, Howland, Curtis wrote: > > What bothers me in all of this is that Debian lists are > > managed so poorly > > to let this happen. > > The Debian lists are deliberately not "subscriber only may post" on > the theory that it's better to press DEL than to pre

Re: open ssh exploit - user not getting created

2002-06-24 Thread Bob Nielsen
The user "sshd" is created when the package is upgraded. Bob On Mon, Jun 24, 2002 at 05:11:15PM -0700, Jason Love wrote: > The report for the open ssh exploit fix says that the ssh fix will > create a new ssh user (if there is not one already). I have done a few > updates already and the ssh user