Re: [SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness

2005-10-29 Thread Philippe Troin
[EMAIL PROTECTED] (Martin Schulze) writes: > The following matrix explains which version in which distribution has > this problem corrected. > > oldstable (woody) stable (sarge) unstable (sid) > openssl 0.9.6c-2.woody.8 0.9.7e-3sarge1 0.9.8-3

Re: Addressing the recent zlib issue

2005-07-10 Thread Philippe Troin
Florian Weimer <[EMAIL PROTECTED]> writes: > On my system, the following packages contain statically linked copies > of zlib-related code: > > dpkg (zlib version 1.2.2) > various kernel images (zlib version 1.1.3) > monotone (probably an independent reimplementation of the algorithm) > mo

Re: Kernel Crash Bug????

2004-06-14 Thread Philippe Troin
peace bwitchu <[EMAIL PROTECTED]> writes: > Anyone have info on this one? > > > http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html Fixed by Linux here: http://linux.bkbits.net:8080/linux-2.5/diffs/include/asm-i386/[EMAIL PROTECTED]|src/.|src/include|src/include/asm-i386|hist/inc

Re: Kernel Crash Bug????

2004-06-14 Thread Philippe Troin
peace bwitchu <[EMAIL PROTECTED]> writes: > Anyone have info on this one? > > > http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html Fixed by Linux here: http://linux.bkbits.net:8080/linux-2.5/diffs/include/asm-i386/[EMAIL PROTECTED]|src/.|src/include|src/include/asm-i386|hist/inc

Re: Non-existent user able to log in??? hacked????

2004-05-18 Thread Philippe Troin
elijah wright <[EMAIL PROTECTED]> writes: > > It's been a long time, but IIRC, the NIS uses it's own dbm files which > > are built from those in /etc. The test account must have existed when > > you set it up. > > Arnaud, if i remember correctly, there's a special directory you can go to > and ty

Re: Non-existent user able to log in??? hacked????

2004-05-18 Thread Philippe Troin
elijah wright <[EMAIL PROTECTED]> writes: > > It's been a long time, but IIRC, the NIS uses it's own dbm files which > > are built from those in /etc. The test account must have existed when > > you set it up. > > Arnaud, if i remember correctly, there's a special directory you can go to > and ty

Re: Secure temporary fifo creation

2004-05-18 Thread Philippe Troin
Goswin von Brederlow <[EMAIL PROTECTED]> writes: > Philippe Troin <[EMAIL PROTECTED]> writes: > > > Not needed... This should be race-free: > > > > char *s; > > while (s = (tempnam("/tmp", "foo")) { > > if (mknod(s,

Re: Secure temporary fifo creation

2004-05-18 Thread Philippe Troin
Goswin von Brederlow <[EMAIL PROTECTED]> writes: > Philippe Troin <[EMAIL PROTECTED]> writes: > > > Not needed... This should be race-free: > > > > char *s; > > while (s = (tempnam("/tmp", "foo")) { > > if (mknod(s,

Re: Secure temporary fifo creation

2004-05-17 Thread Philippe Troin
Greg Deitrick <[EMAIL PROTECTED]> writes: > Hello, > > What is the recommended method for securely creating a temporary named pipe > in > C code? > > Looking at the man pages for various library calls it appears that tmpfile(3) > is probably an acceptable means of creating a temporary file, b

Re: Secure temporary fifo creation

2004-05-17 Thread Philippe Troin
Greg Deitrick <[EMAIL PROTECTED]> writes: > Hello, > > What is the recommended method for securely creating a temporary named pipe in > C code? > > Looking at the man pages for various library calls it appears that tmpfile(3) > is probably an acceptable means of creating a temporary file, but

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-14 Thread Philippe Troin
Jan Lühr <[EMAIL PROTECTED]> writes: > Greetings,.. > > Am Mittwoch, 14. April 2004 20:57 schrieben Sie: > > Jan Lühr <[EMAIL PROTECTED]> writes: > > > Greetings, > > > Okay... This is the result of a cursory check, do your homework, yada, > > yada... > > > > Thanks for doing so ;) Anyway, this

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-14 Thread Philippe Troin
Jan Lühr <[EMAIL PROTECTED]> writes: > Greetings,.. > > Am Mittwoch, 14. April 2004 20:57 schrieben Sie: > > Jan Lühr <[EMAIL PROTECTED]> writes: > > > Greetings, > > > Okay... This is the result of a cursory check, do your homework, yada, > > yada... > > > > Thanks for doing so ;) Anyway, this

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-14 Thread Philippe Troin
Jan Lühr <[EMAIL PROTECTED]> writes: > Greetings, > > Am Mittwoch, 14. April 2004 16:52 schrieb Martin Schulze: > > -- > > Debian Security Advisory DSA 479-1 [EMAIL PROTECTED] > > http://www.debian.org/sec

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-14 Thread Philippe Troin
Jan Lühr <[EMAIL PROTECTED]> writes: > Greetings, > > Am Mittwoch, 14. April 2004 16:52 schrieb Martin Schulze: > > -- > > Debian Security Advisory DSA 479-1 [EMAIL PROTECTED] > > http://www.debian.org/sec

Re: Converting Users from Solaris to (Debian-)Linux

2002-08-30 Thread Philippe Troin
Jan-Hendrik Palic <[EMAIL PROTECTED]> writes: > Hi .. > > > On Fri, Aug 30, 2002 at 12:04:15PM -0400, Steve Mickeler wrote: > >Your solaris hashes arent MD5. > > is it not possible to upgrade to MD5 on Solaris? AFAIK Solaris does not support MD5. I wrote a PAM module that exactlky does that..

Re: how to create MD5 passwords

2002-01-24 Thread Philippe Troin
Michael Wood <[EMAIL PROTECTED]> writes: > On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: > > Hi everyone, > > please can me tell somebody how to make MD5 passwords in order > > to supply it to ftppasswd file? > > You just need to call the standard crypt() function with the > apropr

Re: how to create MD5 passwords

2002-01-24 Thread Philippe Troin
Michael Wood <[EMAIL PROTECTED]> writes: > On Thu, Jan 24, 2002 at 08:56:56AM +0100, Rainer Sigl wrote: > > Hi everyone, > > please can me tell somebody how to make MD5 passwords in order > > to supply it to ftppasswd file? > > You just need to call the standard crypt() function with the > aprop

Re: home directory permission

2001-12-01 Thread Philippe Troin
Peter Samek <[EMAIL PROTECTED]> writes: > On Fri, Nov 30, 2001 at 12:22:34PM -0300, teste teste1 wrote: > > > > Howto modify permission when create a new user, I > > do not want to change the permissions all time that to > > add a new user. > > > > > > Default Permission > > drwxr-sr-x2

Re: home directory permission

2001-12-01 Thread Philippe Troin
Peter Samek <[EMAIL PROTECTED]> writes: > On Fri, Nov 30, 2001 at 12:22:34PM -0300, teste teste1 wrote: > > > > Howto modify permission when create a new user, I > > do not want to change the permissions all time that to > > add a new user. > > > > > > Default Permission > > drwxr-sr-x

Re: Multiple IP addresses

2001-10-23 Thread Philippe Troin
Marcel Welschbillig <[EMAIL PROTECTED]> writes: > Can any one tell me the kernel option to enable on 2.2.17 to be able > to specify multiple ethernet addresses in the /etc/network/interfaces > file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? > > I know it works on the standard

Re: Multiple IP addresses

2001-10-22 Thread Philippe Troin
Marcel Welschbillig <[EMAIL PROTECTED]> writes: > Can any one tell me the kernel option to enable on 2.2.17 to be able > to specify multiple ethernet addresses in the /etc/network/interfaces > file. ie. eth0 eth0:1 eth0:2 .. on the same physical interface ? > > I know it works on the standar

Re: listen on tcp port and log input ??

2001-09-05 Thread Philippe Troin
Marcel Welschbillig <[EMAIL PROTECTED]> writes: > Dose anybody know of any programs i could use to open a port on a > debian box and log the data that comes in to a file ?? > > What i want to do is have a CISCO router send data that it recieves on > an AUX port to a tcp port on a linux machine an

Re: listen on tcp port and log input ??

2001-09-05 Thread Philippe Troin
Marcel Welschbillig <[EMAIL PROTECTED]> writes: > Dose anybody know of any programs i could use to open a port on a > debian box and log the data that comes in to a file ?? > > What i want to do is have a CISCO router send data that it recieves on > an AUX port to a tcp port on a linux machine a

Re: Logging practices (and why does it suck in Debian?)

2001-04-20 Thread Philippe Troin
Lupe Christoph <[EMAIL PROTECTED]> writes: > On Friday, 2001-04-20 at 14:14:13 -0300, Peter Cordes wrote: > > On Fri, Apr 20, 2001 at 10:12:42AM -0600, Tim Uckun wrote: > > > Shared libraries may have been a good idea but somehow the > > > implementation in both windows and linux got all weird. I

Re: Logging practices (and why does it suck in Debian?)

2001-04-20 Thread Philippe Troin
Lupe Christoph <[EMAIL PROTECTED]> writes: > On Friday, 2001-04-20 at 14:14:13 -0300, Peter Cordes wrote: > > On Fri, Apr 20, 2001 at 10:12:42AM -0600, Tim Uckun wrote: > > > Shared libraries may have been a good idea but somehow the > > > implementation in both windows and linux got all weird. I