Re: Fwd: Fedora22 Security Issue.

2015-08-19 Thread Rick Stevens
On 08/19/2015 09:02 AM, Patrick O'Callaghan wrote: On Wed, 2015-08-19 at 15:04 +0200, Suvayu Ali wrote: Don't use digests (they are a waste of time in this day and age), or if you do then use a mailer that supports direct replying to a digest message (not to the digest itself). Evolution can d

Re: Fwd: Fedora22 Security Issue.

2015-08-19 Thread Patrick O'Callaghan
On Wed, 2015-08-19 at 15:04 +0200, Suvayu Ali wrote: > > Don't use digests (they are a waste of time in this day and age), > or if > > you do then use a mailer that supports direct replying to a digest > > message (not to the digest itself). Evolution can do this and I > think > > Thunderbird also.

Re: Fwd: Fedora22 Security Issue.

2015-08-19 Thread Suvayu Ali
On Wed, Aug 19, 2015 at 12:31:19PM +0100, Patrick O'Callaghan wrote: > On Wed, 2015-08-19 at 09:55 +0900, Scott Mattan wrote: > > Is there a better way of viewing this list without having to copy > > paste titles and contents? > > Don't use digests (they are a waste of time in this day and age),

Re: Fwd: Fedora22 Security Issue.

2015-08-19 Thread Patrick O'Callaghan
On Wed, 2015-08-19 at 09:55 +0900, Scott Mattan wrote: > Is there a better way of viewing this list without having to copy > paste titles and contents? Don't use digests (they are a waste of time in this day and age), or if you do then use a mailer that supports direct replying to a digest messag

Re: Fedora22 Security Issue.

2015-08-18 Thread Martin Cigorraga
Hi, I recently came up with this 'issue' (not really an issue in fact, please read along) when I configured a Webmin panel on a CentOS 6.7 instance we use at work. Thing is that the sudo tool provides a configuration flag to deny a command execution if it's not being invoked from a console. Origi

Re: Fedora22 Security Issue.

2015-08-18 Thread inode0
On Tue, Aug 18, 2015 at 2:09 AM, Scott Mattan wrote: > Hello, > > I am seeing some disparity between (two distributions granted) CentOS 6.6 > and Fedora22 in their use of the su utility. I cannot figure out the cause, > so I cannot fix it. > > In CentOS there is no way to script login to root...

Re: Fwd: Fedora22 Security Issue.

2015-08-18 Thread Scott Mattan
I have changed my settings from digest. I will additionally try to add the pam_securetty.so to my su file when I get home tonight (JST) Thanks On Wed, Aug 19, 2015 at 11:04 AM, Ed Greshko wrote: > On 08/19/15 08:55, Scott Mattan wrote: > > Sorry about the other post, this one may not come in c

Re: Fwd: Fedora22 Security Issue.

2015-08-18 Thread Ed Greshko
On 08/19/15 08:55, Scott Mattan wrote: > Sorry about the other post, this one may not come in correctly either... > > In anycase, I will explain this after the main issue... > > I have the following differences in my /etc/pam.d/su file: > > Fedora22: > #%PAM-1.0 > authsufficient pa

Re: Fedora22 Security Issue.

2015-08-18 Thread Scott Mattan
I just tried the non-login-shell with those settings, and it didn't offer any change from the previous response. (I primarily work with CentOS6.6 at work but am testing Fedora at home and would like to implement similar security settings) [ user@localhost ~]$ su - < password > echo "" > id > EOF

Fwd: Fedora22 Security Issue.

2015-08-18 Thread Scott Mattan
Sorry about the other post, this one may not come in correctly either... In anycase, I will explain this after the main issue... I have the following differences in my /etc/pam.d/su file: Fedora22: #%PAM-1.0 authsufficient pam_rootok.so # Uncomment the following line to implicit

Re: Fedora22 Security Issue.

2015-08-18 Thread Patrick O'Callaghan
On Wed, 2015-08-19 at 04:05 +0800, Ed Greshko wrote: > On 08/19/15 00:10, Patrick O'Callaghan wrote: > > On Wed, 2015-08-19 at 00:13 +0900, Scott Mattan wrote: > > > I havent tried comparing yet but ive verified that disabling > > > various > > > combinations on the cent machine does not produce th

Re: Fedora22 Security Issue.

2015-08-18 Thread Ed Greshko
On 08/19/15 00:10, Patrick O'Callaghan wrote: > On Wed, 2015-08-19 at 00:13 +0900, Scott Mattan wrote: >> I havent tried comparing yet but ive verified that disabling various >> combinations on the cent machine does not produce the same results. > Same results as what? Is this part of some other th

Re: Fedora22 Security Issue.

2015-08-18 Thread Patrick O'Callaghan
On Wed, 2015-08-19 at 00:13 +0900, Scott Mattan wrote: > I havent tried comparing yet but ive verified that disabling various > combinations on the cent machine does not produce the same results. Same results as what? Is this part of some other thread? poc -- users mailing list users@lists.fedo

Fedora22 Security Issue.

2015-08-18 Thread Scott Mattan
I havent tried comparing yet but ive verified that disabling various combinations on the cent machine does not produce the same results. I understand that this is not a perfect method and will take a look as soon as i get home at the very latest by tomorrow JST, and then report back -- users mail

Re: Fedora22 Security Issue.

2015-08-18 Thread Ed Greshko
On 08/18/15 15:09, Scott Mattan wrote: > > I am seeing some disparity between (two distributions granted) CentOS 6.6 and > Fedora22 in their use of the su utility. I cannot figure out the cause, so I > cannot fix it. > > In CentOS there is no way to script login to root... this is of course a >

Fedora22 Security Issue.

2015-08-18 Thread Scott Mattan
Hello, I am seeing some disparity between (two distributions granted) CentOS 6.6 and Fedora22 in their use of the su utility. I cannot figure out the cause, so I cannot fix it. In CentOS there is no way to script login to root... this is of course a desirable trait. for instance, [ user@localhos