Re: [gentoo-user] Ghost cyber threat

2015-01-31 Thread shawn wilson
On Jan 31, 2015 11:57 PM, "Adam Carter" wrote: > > >> > Do they need telnet or ssh access, >> Not telnet shell but this could be triggered with telnet/nc or even nmap, hping, or tcpreplay - all of which could send an arbitrary payload to tcp or udp ports. >> I don't understand this obsession wit

Re: [gentoo-user] Ghost cyber threat

2015-01-30 Thread shawn wilson
On Jan 30, 2015 12:53 PM, "Andrew Savchenko" wrote: > > On Fri, 30 Jan 2015 12:19:01 -0500 symack wrote: > > or buy some freak of nature can exploit the vulnerability in other ways? > > Considering how old one's setup should be to be affected to this > issue, it is likely that such systems have a

Re: [gentoo-user] emerge default config

2015-01-23 Thread shawn wilson
On Fri, Jan 23, 2015 at 7:12 PM, wrote: > Rich Freeman wrote: > >> On Fri, Jan 23, 2015 at 5:45 PM, shawn wilson wrote: >> > Is there a way to have default config lines that emerge updates won't >> > touch? >> > >> >> I'd be inter

[gentoo-user] emerge default config

2015-01-23 Thread shawn wilson
Is there a way to have default config lines that emerge updates won't touch? For instance, my /etc/ssh/sshd_config differs from the default in some places. I know this and upstream shows me the same diffs in that file over and over again. But maybe upstream will add a new option - I'd like to see

Re: [gentoo-user] Changing cpan repo in emerge

2014-07-07 Thread shawn wilson
On Mon, Jul 7, 2014 at 5:27 AM, Stroller wrote: > > On Sun, 6 July 2014, at 11:47 pm, shawn wilson wrote: > >> How do I change emerge/ebuild from using cpan to metacpan to a local repo? > > If you're just creating a local ebuild - i.e. bumping to a version that isn'

[gentoo-user] Changing cpan repo in emerge

2014-07-06 Thread shawn wilson
How do I change emerge/ebuild from using cpan to metacpan to a local repo? I see mirror://cpan/foo and I figure SRC_URI gets scraped and changed (I'm guessing this happens somewhere in python since I don't see anything happening to SRC_URI in perl-module.eclass). I just want to use metacpan for al

Re: [gentoo-user] IPTables question... simple as possible for starters

2013-12-31 Thread shawn wilson
On Tue, Dec 31, 2013 at 9:08 AM, Pandu Poluan wrote: > > On Dec 30, 2013 7:31 PM, "shawn wilson" wrote: >> >> Minor additions to what Pandu said... >> >> On Mon, Dec 30, 2013 at 7:02 AM, Pandu Poluan wrote: >> > On Mon, Dec 30, 2013 at 6:07 PM,

Re: [gentoo-user] Re: IPTables question... simple as possible for starters

2013-12-30 Thread shawn wilson
On Mon, Dec 30, 2013 at 1:04 PM, James wrote: > shawn wilson gmail.com> writes: > > >> Also see nftables: http://netfilter.org/projects/nftables/ > > Interesting read. > > http://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg > > h

Re: [gentoo-user] IPTables question... simple as possible for starters

2013-12-30 Thread shawn wilson
Minor additions to what Pandu said... On Mon, Dec 30, 2013 at 7:02 AM, Pandu Poluan wrote: > On Mon, Dec 30, 2013 at 6:07 PM, Tanstaafl wrote: > The numbers within [brackets] are statistics/countes. Just replace > them with [0:0], unless you really really really have a good reason to > not star

Re: [gentoo-user] IPTables question... simple as possible for starters

2013-12-29 Thread shawn wilson
On Sun, Dec 29, 2013 at 1:07 PM, Tanstaafl wrote: > Hi all, > > Ok, I'm setting up a new server, and I'd like to rethink my iptables rules. > > I'd like to start with something fairly simple: > > 1. Allow connections from anywhere ONLY to certain ports > > ie, for encrypted IMAP/SMTP connections f

Re: [gentoo-user] Where to put advanced routing configuration?

2013-10-13 Thread shawn wilson
On Fri, Oct 4, 2013 at 5:58 PM, Michael Orlitzky wrote: > > 1. The iptables-restore syntax is uglier and harder to read. I don't get this - the syntax is *chain and then :tables (with optional counters) instead of -N, and then a bunch of rules, and then a COMMIT command (the only thing you don't

Re: [gentoo-user] SystemD + Gnome 3.8 I can log in as root but not as normal user

2013-10-01 Thread Shawn Wilson
rm ~/.Xauthority Walter Dnes wrote: >On Tue, Oct 01, 2013 at 12:30:51AM -0600, Carlos Sura wrote >> Hello Mates, >> >> I finally thought that I got this working, so now I am dealing this >issue: >> I choose the latest kernel with systemd and GDM starts good, but I >cannot >> log in to gnome as

Re: [gentoo-user] re: alternating between wired and wireless interfaces

2013-09-21 Thread Shawn Wilson
Just thought I'd give the other popular alternative of the Redhat backed NetworkManager. Also, if you don't wait for the interface to come up I don't think the service can bind to the interface (and it obviously can't bind to an IP). Probably not an issue for ssh but possibly one for MySQL or

Re: [gentoo-user] ssh hanging ... why?

2013-09-18 Thread shawn wilson
eros." which makes sense, as I intuitively knew if I left out the sticky bit, it would be unset but always thought: user, group, everyone else. So, 'chmod 0 config' doesn't look as cluttered and conveys the same meaning :) On Wed, Sep 18, 2013 at 4:48 PM, Stefan G. Weichinger wrote:

Re: [gentoo-user] ssh hanging ... why?

2013-09-18 Thread Shawn Wilson
I was saying to chmod 000 it so that you're not picking up (possibly strange?) options. "Stefan G. Weichinger" wrote: >Am 18.09.2013 20:03, schrieb Shawn Wilson: >> Since the downgrade fixed your issue idk... but, what does your >> authorized_keys look like? Als

Re: [gentoo-user] ssh hanging ... why?

2013-09-18 Thread Shawn Wilson
Since the downgrade fixed your issue idk... but, what does your authorized_keys look like? Also, move or chmod 0 your config to make sure nothing funny is happening there. "Stefan G. Weichinger" wrote: >Am 18.09.2013 19:47, schrieb Joe Nyland: >> Not sure why a downgraded openssh would improve

Re: [gentoo-user] Linux viruses

2013-07-12 Thread shawn wilson
On Jul 12, 2013 4:32 PM, "Volker Armin Hemmann" wrote: > > Am 12.07.2013 18:36, schrieb Timur Aydin: > > On 7/5/2013 11:12 PM, Dale wrote: > >> I since did some googling and it seems I am right and he just thought I > >> was some know nothing guy he could sell some service too. Anyway, has > >> a

Re: [gentoo-user] Linux viruses

2013-07-06 Thread shawn wilson
I was present for a discussion about which is the most secure OS. I don't remember the forum but the consensus was that the most secure OS is the one you know. Anyone can wreck a system but not everyone has the ability to maintain a system. I'm not arguing that you can run Windows as tight as Linu

[gentoo-user] git log kernel

2013-03-27 Thread shawn wilson
Is there a way I can get git to only show commits for lines that are evaluated after #ifdef, #ifndef, etc? Maybe I can preparse (strip out code) with gcc and then have some git magic to show me what I want? If I do: git log v3.8..v3.8.4 I get about a fourth of the stuff that I don't care about.

Re: [gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-27 Thread shawn wilson
Yes On Wed, Feb 27, 2013 at 11:11 AM, Alan McKinnon wrote: > On 27/02/2013 12:52, shawn wilson wrote: >> I still haven't found a solution >> >> On Tue, Feb 26, 2013 at 5:57 PM, Neil Bothwick wrote: >>> On Tue, 26 Feb 2013 17:24:29 -0500, shawn wilson wrote: &

Re: [gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-27 Thread shawn wilson
On Wed, Feb 27, 2013 at 5:52 AM, shawn wilson wrote: > So, I searched for UIDGID_CONVERTED in menuconfig and only see it as a > bool and no dependency. However, if I: > echo "CONFIG_UIDGID_CONVERTED=y" >> .config > and then make menuconfig, this goes away as well

Re: [gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-27 Thread shawn wilson
I still haven't found a solution On Tue, Feb 26, 2013 at 5:57 PM, Neil Bothwick wrote: > On Tue, 26 Feb 2013 17:24:29 -0500, shawn wilson wrote: > > The wiki page says to use / to search for each option in make menuconfig. > That shows the option and its dependencies, for exam

[gentoo-user] Kernel 3.8.0 CONFIG_USER_NS

2013-02-26 Thread shawn wilson
I'm trying to follow the doc to setup LXC (http://wiki.gentoo.org/wiki/LXC) and am unable to find this option. I manually insert it ane make menuconfig again and it gets removed. I see the other options the doc references: [*] UTS namespace [*] IPC namespace [*] User namespace (EXPERIME