Re: security issues with apache!

2006-03-07 Thread Brian Brazil
On Tue, Mar 07, 2006 at 12:37:42PM +0100, Ismail wrote: > >>Recently I've noticed that my Apache-installation gets violated and that > >>an intruder somehow manages to put stuff in /tmp and /var/tmp. Then it > >>makes Apache execute these. Unfortunately these are some rather nasty > >>things, mostl

Re: [SECURITY] [DSA 978-1] New GnuPG packages fix invalid success return

2006-02-17 Thread Brian Brazil
On Fri, Feb 17, 2006 at 09:30:50AM +0100, Martin Schulze wrote: > For the stable distribution (sarge) this problem has been fixed in > version 1.4.1-1sarge1. > AMD64 architecture: > > > http://security.debian.org/pool/updates/main/g/gnupg/gnupg_1.4.1-1sarge1_amd64.deb > Size/MD5 c

Re: Weird message in my apache error log

2006-01-31 Thread Brian Brazil
On Tue, Jan 31, 2006 at 11:19:45PM +0100, Josep Serrano wrote: > Hello all. I got some weird entries in my apache error log. > Any clues about what/where/how ? > > sh: -c: line 22: unexpected EOF while looking for matching ``' > sh: -c: line 24: syntax error: unexpected end of file > > sh: -c: li

Re: Strange kernel log in apache log

2005-04-15 Thread Brian Brazil
On Sat, Apr 16, 2005 at 12:04:33AM +0200, HubiX wrote: > martin f krafft a écrit : > > > >Can you put the file on the web somewhere (http://rafb.net/paste) > >and show us the link? > > OK, here my /etc/syslog.conf : http://rafb.net/paste/results/vu91Zw34.html Last 4 lines: *.* /var/log/apache

Re: how to check bind9 chroot

2004-03-27 Thread Brian Brazil
On Sat, Mar 27, 2004 at 08:25:52PM +0100, Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > > Of course Linux chroot is broken. Found that out after doing chown -R 0.0 > > .. in a chroot while I was compiling LFS. (Was running SuSE 7.0 at the > > time - 2.4.19). > > Well linux c

Re: how to check bind9 chroot

2004-03-27 Thread Brian Brazil
On Sat, Mar 27, 2004 at 08:25:52PM +0100, Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > > Of course Linux chroot is broken. Found that out after doing chown -R 0.0 > > .. in a chroot while I was compiling LFS. (Was running SuSE 7.0 at the > > time - 2.4.19). > > Well linux c

Re: how to check bind9 chroot

2004-03-27 Thread Brian Brazil
On Fri, Mar 26, 2004 at 07:53:49PM +0200, Costas Magkos wrote: > Is there a way to test whether a chroot works? Does anyone know if the > above syslog option is really needed? According to the man page of > syslog it is needed. /proc/pid/root Of course Linux chroot is broken. Found that out aft

Re: how to check bind9 chroot

2004-03-27 Thread Brian Brazil
On Fri, Mar 26, 2004 at 07:53:49PM +0200, Costas Magkos wrote: > Is there a way to test whether a chroot works? Does anyone know if the > above syslog option is really needed? According to the man page of > syslog it is needed. /proc/pid/root Of course Linux chroot is broken. Found that out aft

Re: Checking what running program are using old libraries

2004-03-18 Thread Brian Brazil
On Thu, Mar 18, 2004 at 10:03:34AM +, Ronny Adsetts wrote: > Hi all. > > Whilst doing security upgrades this morning for openssl, it occurred to me > that lots of software that uses the openssl libraries will not > automatically get restarted and will therefore still be running with old > l

Re: Checking what running program are using old libraries

2004-03-18 Thread Brian Brazil
On Thu, Mar 18, 2004 at 10:03:34AM +, Ronny Adsetts wrote: > Hi all. > > Whilst doing security upgrades this morning for openssl, it occurred to me > that lots of software that uses the openssl libraries will not > automatically get restarted and will therefore still be running with old > l