Re: rkhunter report

2010-11-22 Thread Dotan Cohen
> I don't want to go too far forward, because I DO NOT want kde4 > installed, EVER. I run gnome/lxde, and my wife runs kde3.. She is > already mad because people email her with M$ powerpoint attachments, and > we hear no sound from them... isn't that what youtube is for? I cannot > understand why p

Re: rkhunter report

2010-11-21 Thread Paul Cartwright
On 11/21/2010 09:02 PM, Bob Proulx wrote: > I also recommend using volatile. > thanks! >> > Volatile is meant for updates to packages whose usefulness naturally >> > degrades as time passes, like virus scanners and spam filters. >> > ... > Another example of a package in volatile is tzdata. Time z

Re: rkhunter report

2010-11-21 Thread Bob Proulx
Boyd Stephen Smith Jr. wrote: > Paul Cartwright wrote: > >I have volatile commented out in my sources.list.. should I be using it? > > I recommend it, but there aren't that many packages in it anyway so you are > likely not missing anything. I also recommend using volatile. > Volatile is meant

Re: rkhunter report

2010-11-21 Thread Klistvud
Dne, 21. 11. 2010 13:35:21 je Paul Cartwright napisal(a): already mad because people email her with M$ powerpoint attachments, and we hear no sound from them... isn't that what youtube is for? I cannot understand why people will send 9Mb powerpoint attachments of a youtube video, instead of

Re: rkhunter report

2010-11-21 Thread Paul Cartwright
On 11/20/2010 06:34 PM, Boyd Stephen Smith Jr. wrote: > I recommend it, but there aren't that many packages in it anyway so you are > likely not missing anything. I added it back did an update, and I think it did find 1 or 2 apps to update.. nothing.. that I could see, that might be a security iss

Re: rkhunter report

2010-11-21 Thread Paul Cartwright
On 11/20/2010 07:07 PM, Brian wrote: > Slapper Worm: ". . . . spreads on Linux machines by using a flaw > discovered in August 2002 in OpenSSL libraries." (www.f-secure.com). And > the flaw hasn't been fixed? don't have that one, good info though! > You'll have to make your own mind up about the v

Re: rkhunter report

2010-11-21 Thread CamaleĆ³n
On Sat, 20 Nov 2010 08:08:02 -0500, Paul Cartwright wrote: > I run rkhunter, and today I got this report: > > Warning: Application 'gpg', version '1.4.10', is out of date, and > possibly a security risk. > Warning: Application 'openssl', version '0.9.8n', is out of date, and > possibly a securi

Re: rkhunter report

2010-11-20 Thread Brian
On Sat 20 Nov 2010 at 16:50:59 -0500, Paul Cartwright wrote: > are you saying rkhunter is not worth running? Chosen at random. beX2, portacelo and devil rootkits: Distinguished by there being no evidence for their existence. A doctor telling me to avoid contracting beX2, portacelo or devil disea

Re: rkhunter report

2010-11-20 Thread Boyd Stephen Smith Jr.
In <4ce83a40.5030...@pcartwright.com>, Paul Cartwright wrote: >On 11/20/2010 03:59 PM, Boyd Stephen Smith Jr. wrote: >> Many people don't consider Debian stable up-to-date even with packages >> from security.debian.org and volatile.debian.org in use. It is possible >> that the development / releas

Re: rkhunter report

2010-11-20 Thread Paul Cartwright
On 11/20/2010 03:46 PM, Brian wrote: > Well, don't run applications which output spurious warnings as a matter > of course. Purging rkhunter will do wonders for your blood pressure > without endangering your system. are you saying rkhunter is not worth running? -- Paul Cartwright Registered Linux

Re: rkhunter report

2010-11-20 Thread gun_smoke
On Sat, Nov 20, 2010 at 08:46:57PM +, Brian wrote: > > Well, don't run applications which output spurious warnings as a matter > of course. Purging rkhunter will do wonders for your blood pressure > without endangering your system. > I agree. -- To UNSUBSCRIBE, email to debian-user-requ..

Re: rkhunter report

2010-11-20 Thread Brian
On Sat 20 Nov 2010 at 15:28:30 -0500, Paul Cartwright wrote: > I just don't like getting messages that tell me something is NOT > uptodate, when I am ALWAYS up to date.. Well, don't run applications which output spurious warnings as a matter of course. Purging rkhunter will do wonders for your bl

Re: rkhunter report

2010-11-20 Thread Norbert Zeh
Paul Cartwright [2010.11.20 1528 -0500]: > On 11/20/2010 03:14 PM, Boyd Stephen Smith Jr. wrote: > >> >Warning: Application 'gpg', version '1.4.10', is out of date, and > >> >possibly a > >> >security risk. Warning: Application 'openssl', version '0.9.8n', is out of > >> >date, and possibly a secu

Re: rkhunter report

2010-11-20 Thread Paul Cartwright
On 11/20/2010 03:59 PM, Boyd Stephen Smith Jr. wrote: > File a bug against rkhunter, then. that is a thought.. >> >I just don't like getting messages that tell me something is NOT >> >uptodate, when I am ALWAYS up to date.. > Many people don't consider Debian stable up-to-date even with packages fr

Re: rkhunter report

2010-11-20 Thread Boyd Stephen Smith Jr.
In <4ce82f6e.3030...@pcartwright.com>, Paul Cartwright wrote: >On 11/20/2010 03:14 PM, Boyd Stephen Smith Jr. wrote: >>> >Warning: Application 'gpg', version '1.4.10', is out of date, and >>> >possibly a security risk. Warning: Application 'openssl', version >>> >'0.9.8n', is out of date, and possi

Re: rkhunter report

2010-11-20 Thread Paul Cartwright
On 11/20/2010 03:14 PM, Boyd Stephen Smith Jr. wrote: >> >Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a >> >security risk. Warning: Application 'openssl', version '0.9.8n', is out of >> >date, and possibly a security risk. Warning: Application 'sshd', version >> >'5.5

Re: rkhunter report

2010-11-20 Thread Boyd Stephen Smith Jr.
In <4ce7c832.7010...@pcartwright.com>, Paul Cartwright wrote: >I run rkhunter, and today I got this report: > >Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a >security risk. Warning: Application 'openssl', version '0.9.8n', is out of >date, and possibly a security risk

rkhunter report

2010-11-20 Thread Paul Cartwright
I run rkhunter, and today I got this report: Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a security risk. Warning: Application 'openssl', version '0.9.8n', is out of date, and possibly a security risk. Warning: Application 'sshd', version '5.5p1', is out of date, a

Re: rkhunter report issues?

2008-08-26 Thread Johannes Wiedersich
On 2008-08-26 15:07, Paul Cartwright wrote: > Does this mean anything? > > Warning: The file properties have changed: > File: /bin/login > Current hash: 9092a50dbbf0b16b095a1ee22e9bfb2a9e0f9a21 > Stored hash : b333555dccebeca07909fdc9c53160f5e399d4f6 > Current i

rkhunter report issues?

2008-08-26 Thread Paul Cartwright
Does this mean anything? Warning: The file properties have changed: File: /bin/login Current hash: 9092a50dbbf0b16b095a1ee22e9bfb2a9e0f9a21 Stored hash : b333555dccebeca07909fdc9c53160f5e399d4f6 Current inode: 2068498Stored inode: 2071401 Current si