Re: Exploit in 2.6 kernels

2005-04-15 Thread Adrian Bunk
On Wed, Apr 13, 2005 at 03:01:46PM +0100, John M Collins wrote: >... > Could I possibly make a suggestion for "make xconfig" in the kernel tree > (and make other-kinds-of-config I suppose)? > > I currently routinely copy the ".config" out of the previous kernel tree > before I start to save workin

Re: Exploit in 2.6 kernels

2005-04-15 Thread Duncan Sands
> I still don't think they would lose out by much.. I've just being > trying to RE the ATI Mpeg2 IDCT/MC hardware, ATI know this, I know > this, they are only wasting my time and my employers money (we still > are going to buy their chips... no choice..) will they give out specs > .. no .. why? cau

Re: Exploit in 2.6 kernels

2005-04-15 Thread Dave Airlie
On 4/16/05, Alan Cox <[EMAIL PROTECTED]> wrote: > On Mer, 2005-04-13 at 14:23, Lennart Sorensen wrote: > > On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: > > Graphics card companies don't realize they are hardware companies not > > software companies and that it is hardware the

Re: Exploit in 2.6 kernels

2005-04-15 Thread Alan Cox
On Mer, 2005-04-13 at 14:23, Lennart Sorensen wrote: > On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: > Graphics card companies don't realize they are hardware companies not > software companies and that it is hardware they make their money from? > Oh and they have too many law

Re: Exploit in 2.6 kernels

2005-04-14 Thread John M Collins
On Thu, 2005-04-14 at 16:02 -0400, Greg Folkert wrote: > A-Freakin'-MEN me droogy. > > Hehehe, either a slow system, or you know how to transfer a working > setup to another machine. > > My current image I use(d) for all of my machines was Built a long time > ago, I think slink was what I used to

Re: Exploit in 2.6 kernels

2005-04-14 Thread Greg Folkert
On Wed, 2005-04-13 at 10:41 -0400, Lennart Sorensen wrote: > On Wed, Apr 13, 2005 at 09:26:28AM -0500, Eric Rannaud wrote: > > On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: > > > modprobe nvidia || m-a -t prepare nvidia && m-a -t build nvidia && m-a -t > > > install nvidia && modprobe

Re: Exploit in 2.6 kernels

2005-04-14 Thread Helge Hafting
Chris Friesen wrote: Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? This has been mentioned before, but I'll say it again. Nvidia has intellectua

Re: Exploit in 2.6 kernels

2005-04-14 Thread Helge Hafting
Lennart Sorensen wrote: On Wed, Apr 13, 2005 at 11:47:46AM +0200, Helge Hafting wrote: You're not. Complain to nvidia - using both email and snailmail. If everybody with such problems did that, chances are they see the light someday. Oh, and complain to the guy handing out nvidia cards like con

Re: Exploit in 2.6 kernels

2005-04-13 Thread Chris Friesen
Lennart Sorensen wrote: Graphics card companies don't realize they are hardware companies not software companies and that it is hardware they make their money from? Oh and they have too many lawyers? This has been mentioned before, but I'll say it again. Nvidia has intellectual property from *other

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 09:26:28AM -0500, Eric Rannaud wrote: > On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: > > modprobe nvidia || m-a -t prepare nvidia && m-a -t build nvidia && m-a -t > > install nvidia && modprobe nvidia > > Something along the lines of: > modprobe nvidia || sh

Re: Exploit in 2.6 kernels

2005-04-13 Thread Eric Rannaud
On Wed, 2005-04-13 at 09:02 -0400, Lennart Sorensen wrote: > modprobe nvidia || m-a -t prepare nvidia && m-a -t build nvidia && m-a -t > install nvidia && modprobe nvidia Something along the lines of: modprobe nvidia || sh NVIDIA-Linux-x86-1.0-6629-pkg1.run -s -f --no-network && modprobe nvidia

Re: Exploit in 2.6 kernels

2005-04-13 Thread John M Collins
On Wed, 2005-04-13 at 09:23 -0400, Lennart Sorensen wrote: > Graphics card companies don't realize they are hardware companies not > software companies and that it is hardware they make their money from? > Oh and they have too many lawyers? > > It seems to me that 2D graphics are a done deal, wit

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 03:06:46PM +0200, Lars Marowsky-Bree wrote: > On 2005-04-13T08:59:21, Lennart Sorensen <[EMAIL PROTECTED]> wrote: > > > It is becoming harder and harder to find supported cards it seems. > > Finding a card with decent 2D drivers for X can still be done, but 3D is > > just n

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lars Marowsky-Bree
On 2005-04-13T08:59:21, Lennart Sorensen <[EMAIL PROTECTED]> wrote: > It is becoming harder and harder to find supported cards it seems. > Finding a card with decent 2D drivers for X can still be done, but 3D is > just not really an option it seems. Even 2D seems to be a problem on > many cards i

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Tue, Apr 12, 2005 at 10:32:59PM +0100, John M Collins wrote: > I'll do that - trouble is round where I am they dish out Nvidia cards > like confetti, I've got them in the machine I use most and another 2 and > you have to do all that gyrating with running the script to FTP down and > build the s

Re: Exploit in 2.6 kernels

2005-04-13 Thread Lennart Sorensen
On Wed, Apr 13, 2005 at 11:47:46AM +0200, Helge Hafting wrote: > You're not. Complain to nvidia - using both email and snailmail. > If everybody with such problems did that, chances are they see > the light someday. Oh, and complain to the guy handing out > nvidia cards like confetti, state your p

Re: Exploit in 2.6 kernels

2005-04-13 Thread Helge Hafting
John M Collins wrote: On Tue, 2005-04-12 at 14:08 -0700, Chris Wright wrote: * John M Collins ([EMAIL PROTECTED]) wrote: Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're protect

Re: Exploit in 2.6 kernels

2005-04-12 Thread Valdis . Kletnieks
On Tue, 12 Apr 2005 22:32:59 BST, John M Collins said: > I wish some kind soul would speak nicely to Nvidia and get them to see > reason on the point but I suspect I'm not the first person to wish that. NVidia is aware, and they're doing the best they can under the circumstances (no, they can't o

Re: Exploit in 2.6 kernels

2005-04-12 Thread Chris Wright
* John M Collins ([EMAIL PROTECTED]) wrote: > Thanks to everyone for the pointers on this one I've rebuilt the kernels > and we'll see what happens. BTW, I'd recommend updating to 2.6.11.7 so that you're protected from another local root exploit. thanks, -chris - To unsubscribe from this list: se

Re: Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
On Tue, 2005-04-12 at 14:08 -0700, Chris Wright wrote: > * John M Collins ([EMAIL PROTECTED]) wrote: > > Thanks to everyone for the pointers on this one I've rebuilt the kernels > > and we'll see what happens. > > BTW, I'd recommend updating to 2.6.11.7 so that you're protected from > another loca

Re: Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens. Seems like they got in because on most of the machines I had an ancient sshd_config which allowed Protocol 1. When I installed newer sshds the newer sshd_config got stuck in as a ".rpmnew" file. >

Re: Exploit in 2.6 kernels

2005-04-12 Thread Baruch Even
You can find the source at http://www.securiteam.com/exploits/5VP0N0UF5U.html The fix: http://linux.bkbits.net:8080/linux-2.6/[EMAIL PROTECTED]|[EMAIL PROTECTED] CAN: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0736 John M Collins wrote: Please CC any reply to jmc AT xisl.com as

Exploit in 2.6 kernels

2005-04-12 Thread John M Collins
Please CC any reply to jmc AT xisl.com as I'm not subscribed - thanks We had 5 machines broken into last night all but one with kernel 2.6.8 and found a binary "krad-no-longer-private.c" had been downloaded It contains the string: k-rad.c - linux 2.6.* CPL 0 kernel exploit Discovered Jan 2005