On Wed May 07, 2003 at 03:3721PM -0400, Robert B Wilson wrote:
>
> On Wed, 7 May 2003 08:53:40 +0200 Michael Bergbauer
> <[EMAIL PROTECTED]> writes:
> If you
> > think SSH (or any other component) is not trustworthy, just look for
> > alternatives (or create them yourself).
>
> what would be a
Thank you all guys. I now have enough info to start. :-)
~kmag
I got arp storm in my network(30 PCs and some WLAN devices),
about 10,000 arp requests per second, no responses,lasting
for severalminutes,all these arp requests have the same content
which looks very strange:
SRC DSTinfo
0060e0017d960060f0017d96 who has 192.1
Hi,
you get this message when you use different names for a machine, for
example the ip and the machine's name. One of them is saved in
known_hosts, the other one causes this message!
Sebastian
Ian Goodall wrote:
Thanks everyone for your help.
It must be his computer as all the computers I
Hi again,
Thank you for all the feedback and sorry for the controversy of stating
that "mime-support" does not seem like a security update. Actually, I
usually will allow the update, for I don't always have the time to try
to stay up to date on all the security issues. I simply used this as an
exa
* Quoting Rudolph van Graan ([EMAIL PROTECTED]):
> What I would have like to see was something like this: [Please think of
> this in terms of "stable" or "testing"]
apt-listchanges. It displays the new changelog
entries from the debs before installing them, but
has to download them first, so no b
On Thursday, 2003-05-08 at 10:53:54 +0200, Rudolph van Graan wrote:
> What I would have like to see was something like this: [Please think of
> this in terms of "stable" or "testing"]
> Package Class
>
> apt Secu
Hi,
> apt-listchanges. It displays the new changelog
> entries from the debs before installing them, but
> has to download them first, so no bandwidth
> saving.
>
> The only (and incomplete) other way I see is
> reading the DSAs, but this doesn't apply to
> testing. But if you run testing, you ca
On Thu, 08 May 2003 01:30:15 +0200, in linux.debian.security you
wrote:
>kernel. The ptrace bug is not the only problem as there are other
>security problems (for example in the netfilter code) that have never
>been fixed in stable.
could you please speek out about this?
Where can I find more i
On Wednesday 07 May 2003 14:53, Peter Holm wrote:
> Hi,
>
> may I be allowed to ask some questions?
>
> I am a little bit confused about the latest discussions on the ptrace
> kernel bug.
[...]
> Why isn´t there a security warning about that ptrace bug?
[...]
Well the most problem is that Marcelo
>By the way there are people not following security lists and they
that was my situation. there must be hundreds or thousands of people
out there, which also do have just little time for administering their
debian installs and rely on security announcement list and apt-get.
Also, if I understa
>kernel. The ptrace bug is not the only problem as there are other
>security problems (for example in the netfilter code) that have never
>been fixed in stable.
could you please speek out about this?
Where can I find more info about this?
Where can i find patches?
Which kernel-source/image p
Am Don, 2003-05-08 um 15.52 schrieb Peter Holm:
> >kernel. The ptrace bug is not the only problem as there are other
> >security problems (for example in the netfilter code) that have never
> >been fixed in stable.
>
> could you please speek out about this?
You can find documentation about secur
On Thursday 08 May 2003 03:30 am, Rudolph van Graan wrote:
> Hi,
>
> Rolf Kutz wrote:
> > apt-listchanges. It displays the new changelog
> > entries from the debs before installing them, but
> > has to download them first, so no bandwidth
> > saving.
>
> This is almost exactly what I looked for - i
The security team has already released two DSA's on the ptrace issue.
Those would be DSA 270 and DSA 276. Why they have not put priority on
fixing it for the i386 architecture I do not know, but I do know that
modifying the kernel in stable on i386 is a monstrous problem, as doing
it right means yo
Hi again,
I'm struggling trying to get to the root of a possible problem with
woody or the kernel. One of my up to date production machines show a
very strange load average problem. Basically, the machine gradually
builds up to a high LA and then abruptly at 6:30 in the morning this
stops. It then
On 08 May 2003, Markus Kolb wrote:
> There are patched Debian kernel images with version 2.4.18-7 by the
> kernel-image maintainer Herbet Xu but not in official debian package
> trees. Just don't know where to find Herbert's packages. Perhaps
> someone can post the place!
You can find patched
On Thu, 08.05.03, Joey Hess <[EMAIL PROTECTED]> wrote:
> fixing it for the i386 architecture I do not know, but I do know that
> modifying the kernel in stable on i386 is a monstrous problem, as doing
> it right means you have to:
>
> - rebuild all the different kernel images
> - rebuild all the
Hi Rudolph,
that might very well be a problem with the kernel since you
still run a 2.2 kernel. any chance the system has IDE-Disks ?
i am using a syslog server and it was running a 2.2.20 kernel.
with this kernel the load was pretty high. after i upgraded to
2.4 kernel series the problem immediat
Masz już dosyć
ciągłego szukania potrzebnych informacji w segregatorach?
Chyba każdemu zdarzyło się „zawalić” jakąś sprawę, bo nie można było
znaleźć jej akt.
Potrzebujesz programu, który pozwoli Ci w łatwy i szybki sposób
wprowadzić, wyszukać, posegregować dane, pomoże w stworzeniu pisma ur
hi Rudolph,
On Thu, 8 May 2003 19:33:40 +0200
"Rudolph van Graan" <[EMAIL PROTECTED]> wrote:
> I'm struggling trying to get to the root of a possible problem with
> woody or the kernel. One of my up to date production machines show a
> very strange load average problem. Basically, the machine gra
Hello *:
I would like set 'a' bit for files in /var/log/ but it makes
imposible to logrotate to rotate log files normaly. Is enough to set
chattr -a in prerotate script? How useful is set 'a' bit for log files?
No much I think, if an intruder gain root access... he could unset
append
You recently sent an e-mail to a user whose e-mail is handled by
Loughborough University.
The subject of the e-mail was:- WindykPC [www.windyk.com] - idealne
rozwiazanie biurowe
It was sent on:- Thu, 8 May 2003 14:42:23 -0500 (CDT)
Unfortunately it was not possible to deliver your message du
Nils Juergens wrote:
> > fixing it for the i386 architecture I do not know, but I do know that
> > modifying the kernel in stable on i386 is a monstrous problem, as doing
> > it right means you have to:
> >
> > - rebuild all the different kernel images
> > - rebuild all the modules packages extern
hmm sorry but i didn't watched this tread but i just want to add some stuff
first make a backup of your disk ( if you might want to research it later on )
or you might want to toy with a copy of the backup leaving the system in
state it was.
backups can be used as evidence. Or you can monitor th
Mayba, I can add my comments here.
recently, a kernel bug exploited and linux kernel developers patched it
already. ptrace-kmod exploit. A local user can run suid shell with just
using an exploit. Maybe hacking -- if there is-- may be done via this too.
But, according to me too, backups are goo
Maybe, I can add my comments here.
recently, a kernel bug exploited and linux kernel developers patched it
already. ptrace-kmod exploit. A local user can run suid shell with just
using an exploit. Maybe hacking -- if there is-- may be done via this too.
But, according to me too, backups are goo
Maybe, I can add my comments here.
recently, a kernel bug exploited and linux kernel developers patched it
already. ptrace-kmod exploit. A local user can run suid shell with just
using an exploit. Maybe hacking -- if there is-- may be done via this too.
But, according to me too, backups are goo
28 matches
Mail list logo
