Re: [expert] How to find the locking process?

2000-04-24 Thread Erik Kaffehr

Hi!

The command is /sbin/fuser

/sbin/fuser -km /mnt/xxx

Should take care of the problem.

Regards

Eriks

On mån, 24 apr 2000  you wrote:
 From time to time when I go to umount somthing it will tell me that it's
 busy and I can't.
 
 Now sometimes it's clear to me why, and it's easily corrected, but other
 times it is not.
 
 Is there any way to:
 - Find what process has it locked, or
 - Force it to unlock anyway, killing process as necessary?
 
 -- 
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.
-- 
 New email address please update your address book !!
Erik Kaffehr[EMAIL PROTECTED] alt. [EMAIL PROTECTED]
Mariebergsvägen 53  +46 155 219338 (home)
S-611 66 Nyköping   +46 155 263515 (office)
Sweden  -- Message sent using 100% recycled electrons --



Re: [expert] I've been hacked!

2000-04-24 Thread Erik Kaffehr

Well one way to check would be to do:

rpm -qa | awk '{ print "rpm --verify " $1}' | sh

This would essentially tell you which files differ from the origianl
installation. There will be lots of complaints. 

You could also try to:

rpm -qa | awk '{ print "rpm -- --force --nodeps " $1}' | sh

Which would reinstall all packages.

A reinstall would of course be safest bet.

Regards

Erik


On mån, 24 apr 2000  you wrote:
 I woke up this morning to find this email in my system:
 
 Subject: *** Diff Check, Thu Apr 20 00:02:50 EDT 2000 ***
 Security Warning: Change in Suid Root files found :
   - Added suid root files : /bin/mount
   - Added suid root files : /bin/ping
   - Added suid root files : /bin/su
   - Added suid root files : /bin/umount
   - Added suid root files : /sbin/dump
   - Added suid root files : /sbin/pwdb_chkpwd
   - Added suid root files : /sbin/restore
   - Added suid root files : /usr/X11R6/bin/Xwrapper
   - Added suid root files : /usr/bin/at
   - Added suid root files : /usr/bin/chage
   - Added suid root files : /usr/bin/chfn
   - Added suid root files : /usr/bin/chsh
   - Added suid root files : /usr/bin/crontab
   - Added suid root files : /usr/bin/dos
   - Added suid root files : /usr/bin/gpasswd
   - Added suid root files : /usr/bin/lpq
   - Added suid root files : /usr/bin/lpr
   - Added suid root files : /usr/bin/lprm
   - Added suid root files : /usr/bin/newgrp
   - Added suid root files : /usr/bin/passwd
   - Added suid root files : /usr/bin/procmail
   - Added suid root files : /usr/bin/rcp
   - Added suid root files : /usr/bin/rlogin
   - Added suid root files : /usr/bin/rsh
   - Added suid root files : /usr/bin/sperl5.6.0
   - Added suid root files : /usr/bin/suidperl
   - Added suid root files : /usr/bin/urpmi
   - Added suid root files : /usr/lib/telnetd/login
   - Added suid root files : /usr/libexec/pt_chown
   - Added suid root files : /usr/sbin/sendmail
   - Added suid root files : /usr/sbin/traceroute
   - Added suid root files : /usr/sbin/userhelper
   - Added suid root files : /usr/sbin/usernetctl
 
 Security Warning: Changes in Suid Group files found :
   - Added suid group files : /usr/sbin/sendmail
 
 Security Warning: Change in World Writeable Files found :
   - Removed writables files : /tmp/fileUcAjVM
 
 Security Warning: the md5 checksum for one of your SUID files has changed,
   maybe an intruder modified one of these suid binary in order to put in a
 backdoor...
   - Checksum changed files : /usr/bin/suidperl
 
 Security Warning: There is modifications for port listening on your machine :
   -  Opened ports : tcp0  0 *:6000  *:*
 LISTEN  658/X
   -  Opened ports : tcp0  0 *:1024  *:*
 LISTEN  651/kdm
   -  Opened ports : tcp0  0 *:1 *:*
 LISTEN  586/perl
   -  Opened ports : tcp0  0 *:www   *:*
 LISTEN  520/httpd
   -  Opened ports : udp0  0 *:xdmcp *:*
 651/kdm
   -  Opened ports : udp0  0 *:1 *:*
 586/perl
   - Closed ports  : tcp0  0 *:www   *:*
 LISTEN  3244/httpd
   - Closed ports  : tcp0  0 *:1 *:*
 LISTEN  1996/perl
   - Closed ports  : tcp0  0 *:6000  *:*
 LISTEN  660/X
   - Closed ports  : tcp0  0 *:1024  *:*
 LISTEN  653/kdm
   - Closed ports  : udp0  0 *:1 *:*
 1996/perl
   - Closed ports  : udp0  0 *:xdmcp *:*
 653/kdm
 
 ...I've been hacked! The questions, now, are: 1. How do I fix this? and 2. How
 to I prevent it from happening again?
 
 ===
 Andrew Vogel: Program Manager at the University of Cincinnati College of
 Pharmacy. Actor, director, dog (JRT) lover, Miata owner,  much, much more!
 My homepage: "http://www.drewvogel.com". Play I-War, FF7PC,  BC3K!
 Offical BC3K Tester.  Linux! "The only way OUT is THROUGH."
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 dug: you da man! you da man!"Drew Vogel is its own reward."
 ric: isn't "the man" the guy who's always bringing everyone down?
 dug: nope! 'cause YOU da man!!  Email: [EMAIL 

Re: [expert] video card

2000-04-24 Thread Dennis Robertson

Civileme wrote:
 


 Everything I have tried with ATI seems to work.  Trident does
 with "noaccel" and other tweaks.  Even the infamous SiS6326 seems
 to work well under Air.
 
 Civileme

I got my Trident to work with Option "noaccel" and my present SiS6326
with Option "sw_cursor".  I tried an Octek 8mb AGP card with an S3 Trio
3D/2X chipset and couldn't get it to work;  I took it back.
Good luck.

-- 
Dennis Robertson  2/2 Sylvia Street  NOOSAVILLE  QLD  4566  AUSTRALIA
Phone: 61 7 54742343  Mobile: 0419 535539  Fax: Phone for setup.




Re: [expert] I've been hacked!

2000-04-24 Thread Wang Jian

You can use rpm to check the packages affected, and then reinstall
these package.
For example, the following steps find the package, verify the package,
and if affected, reinstall the package from CDROM

# rpm -qf /bin/mount
mount-2.9o-1
# rpm -V mount
# rpm -U --force mount-*rpm

Anyway, you should protect your machine with firewall and update
exploitable packages, and you should do many things before it is
security enough :-)

Monday, April 24, 2000, 8:22:01 AM, you wrote:

AV I woke up this morning to find this email in my system:

AV Subject: *** Diff Check, Thu Apr 20 00:02:50 EDT 2000 ***
AV Security Warning: Change in Suid Root files found :
AV - Added suid root files : /bin/mount
AV - Added suid root files : /bin/ping


-- 
  lark





[expert] Re: I've been hacked!

2000-04-24 Thread James

I don't know if it is true what Ron Stodden says, that you haven't been
hacked, since it *is* possible that you haven't been hacked.. it looks
like you are using Mandrake's latest security features?

Nevertheless, if you are interested in securing your system, here are a
few links I have in my personal bookmarks:

http://www.linuxworld.com/linuxworld/lw-2000-02/lw-02-expo-security.html
Are you sure that you're secure?


http://www.northernjourney.com/opensource/newbies/newb006.html
Basic Security


http://www.chicagotribune.com/tech/developer/article/0,2669,2-40578,FF.html
Protecting your Linux machine from the big, bad Internet


http://www.pcworld.idg.com.au/pcw.nsf/hereshow/47BAA80767F95D79CA25686A000DBE7D!OpenDocument
Linux network security, Part 1


http://www.sansstore.org/
SANS Institute.. Books on securing systems


http://dwheeler.com/secure-programs/Secure-Programs-HOWTO.html
Secure Programming for Linux HOWTO


http://securityportal.com/direct.cgi?/topnews/weekly/linux2313.html
SecurityPortal.com

james




RE: [expert] File Descriptor Max problems under Apache/Linux System

2000-04-24 Thread Russell \Elik\ Rademacher

Hello Jean.

Hmmmthis idea of doing the CustomLogs Directive and have it broken off
into individual vhosts sound good to me.  Now...the question is, how do I
apply this directive for the domains?  Just for the short and dirty rundown
of this would help so I can get to this problem quickly instead of spending
another 3 days looking it up and then trying to figure it out how to make
this work right.

Reason is that I have over 100 IP addresses with over 1320 domains split
among them in the Virtual Host Section.  So correct me on this if this
rundown is what I am supposed to do.

Basically, what I am supposed to do is in each vhost section, put the
CustomLog logs/access_log vcommon for all of them and then use the split log
utility to break them all up and sent to their log directory for the
Webalizer utility to run this?  And in the httpd.conf, I put this one in as
you mentioned:

LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon

Let me know if I am correct or wrong so I can get to work.  I have a hard
drive problems on that host right now and I putting together another host to
move this over before the drive fail completely on me before I have a chance
to get everything moved over.


 Don't do it(tm). Instead, check the CustomLogs directive. Put all your
 vhosts so that they log in the same file, but with their domain name in
 it. Then, write a small perl script that splits the main log each hour and
 puts them in its own file.

 Example:
 # this log format can be split per-virtual-host based on the first field
 LogFormat "%V %h %l %u %t \"%r\" %s %b" vcommon
 CustomLog logs/access_log vcommon

 If you still want to raise the file descriptors, have a look at:
 http://www.apache.org/docs/misc/descriptors.html
 http://www.apache.org/docs/vhosts/fd-limits.html

 Jean-Michel Dault
 [EMAIL PROTECTED]

 On Sun, 23 Apr 2000, Russell "Elik" Rademacher wrote:

  Date: Sun, 23 Apr 2000 09:33:31 -0400
  From: Russell "Elik" Rademacher [EMAIL PROTECTED]
  Reply-To: [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: [expert] File Descriptor Max problems under Apache/Linux System
 
  Okay... I been trying to locate the documentations on
 modifying the kernel
  to up the limit of the open file max from 1024 to 4048 or at
 least...2048,
  so that I can get the apache to work properly with over 1000
 domains with
  logging capability running for most of them for stats usage.
 
  Anyone can help on this issue?
 
  BTW Jean, sorry for taking so long.  As for the JServ
 problem, you can do
  this as follows:
 
  Point your browser to www.digi-host.com/jserv/ and it is
 supposed to show
  the info status on the JServ and you can see the problem that
 it shows when
  it happens. "HTTP Error 403 - Forbidden"
 
  I even set the allow,deny to allow all but it still have
 this problem.
  Dunno what to do about this.
 
  If you have any luck on this, let me know since it seems it
 is related the
  Java files or JServ or both.  I just gave up on it. :)
 






Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread Lane Lester

Ron Stodden said:
  Should have been sda4, surely?   sda is the device (you cannot
mount
  devices), sda4 is the partition (you can mount partitions).

When I was originally setting up the Zip drive, I read a lot of
conversation about the above. However, for my system this is what
worked for IDE:
/dev/hdd /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0

..and this is what works for IDE-SCSI:
/dev/sda /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0

But remember, I'm the guy with the ghost in his machine that always
switches him to runlevel 5. g
-- 
Lane

Lane Lester / Madison County, Georgia USA
Using Linux to get where I want to go...




Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread Lane Lester

Ron Johnson said:
  Please post any relevant portions of conf.modules, lilo.conf
  and fstab to share your hard-earned knowledge.

This is for a Memorex CDRW-2216 at hdc and an Iomega Zip drive at hdd,
both ATAPI drives.

No changes to conf.modules.

Additions to /etc/rc.d/rc.local:
/sbin/modprobe sg
/sbin/modprobe ide-scsi

Addition to /etc/lilo.conf:
append = "hdc=ide-scsi hdd=ide-scsi mem=124M"
(I already had the "mem=124M" there)

Additions to /etc/fstab:
/dev/sda /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0
/dev/sr0 /mnt/cdrom iso9660 user,noauto,suid,exec,dev,ro 0 1
(former entries for zip and cdrom removed)

-- 
Lane

Lane Lester / Madison County, Georgia USA
Using Linux to get where I want to go...




RE: [expert] Use of Windows may be hazardous to your Linux

2000-04-24 Thread Klar Brian D Contr MSG/SWS

Here at the Air Force Base, our systems are so locked down that we cant even set the 
clock on the PC. Therefore, sorry if my mails don't come through eye appealing.

Brian D. Klar - CVE
OTS
WPAFB
(937)257-5773
937-973-3125 (Pager)


-Original Message-
From: Hans Schneidhofer [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 21, 2000 5:26 AM
To: [EMAIL PROTECTED]
Subject: RE: [expert] Use of Windows may be hazardous to your Linux


Am Don, 20 Apr 2000 schrieben Sie:
 I have had problems with Win defrag on my dual boot system. 98 does something to my 
secondary drive. That drive is partitioned 2Gig for Win and 4Gig for linux. This 
drive was partitioned with linux fdisk. I had to turn off defragging my second drive 
altogether. I use loadlin and since have had no probs with defragging since this is 
not my boot drive for win.
 
 Brian D. Klar - CVE
 OTS
 WPAFB
 (937)257-5773
 937-973-3125 (Pager)

Hi Brian,

please let your maileditor know, that you would format your mails with about 70
or 80 characters per line. It isn't very understandable at a glance to read
mails with 363 charcters per line. You can believe me. Really.

bye 
Hans Schneidhofer



Re: [expert] How to find the locking process?

2000-04-24 Thread Brian T. Schellenberger


Yeah, I did that once I got your mail to clue me in to what to try.

Chmouel Boudjnah wrote:
 
 "Brian T. Schellenberger" [EMAIL PROTECTED] writes:
 
  I tried "lock" and "busy" and other things on a man -k, but "using"
  didn't occur to me.
 
 -$ man 1 fuser
 
 --
 MandrakeSoft Inchttp://www.mandrakesoft.com
 San-Diego, CA USA.--Chmouel

-- 
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.



[expert] DIsk Caching

2000-04-24 Thread Necrotica

Hello,

In Mandrake, is there a way where I can control the amount of memory being
used as a disk cache? I've noticed that sometimes Mandrake is using almost
100MB of physcial RAM as a disk cache, especially after doing something
intensive such as compiling an application. Unfortunately it doesn't seem to
shrink

I have 256MB of physcial RAM in my box. I would *think* that having a maximum
of a 64MB disk cache would suffice. Any thoughts? Thanks...

-Chris



Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread Brian T. Schellenberger


 
 Now it IS able to read the ZIP disk partition table.  This says that
 your ZIP disk IS pre-partitioned.
 
  And the above gave me the clue I needed for the zip drive: sda is what
  it wants to see in fstab:
  /dev/sda /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0
 
  I got tired of all the deleting and relinking to /dev/zip, so I just
  put /dev/sda in fstab.
 
 Should have been sda4, surely?  sda is the device (you cannot mount
 devices), sda4 is the partition (you can mount partitions).

No, that's not true.   You can mount devices.  I used to use zip  sparq
drives like that all the time.  It simply uses them like a floppy--the
entire drive is used for the filesystem.

This usage won't be compatible with the pre-formatting on the drives,
though; I used to use them with the ext2 filesystem so I didn't care.

On the other hand, if you are doing to use them with the vfat file
system, and especially if you are going to want to be compatible with
what computers using the "other" O/S read  write, /dev/sda4 is probably
better.

-- 
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.



Re: [expert] I've been hacked!

2000-04-24 Thread Brian T. Schellenberger


If that's the case, then why does the report say that there's a
*difference* in the suid root files?  Why does it claim that all of
those are *changed*?  It doesn't merely claim that they *are* suid root;
it claims that they *changed*.

 Subject: *** Diff Check, Thu Apr 20 00:02:50 EDT 2000 ***
 Security Warning: Change in Suid Root files found :
   - Added suid root files : /bin/mount
   - Added suid root files : /bin/ping
   - Added suid root files : /bin/su
   - Added suid root files : /bin/umount
   - Added suid root files : /sbin/dump
   - Added suid root files : /sbin/pwdb_chkpwd
:
:


Ron Stodden wrote:
 
 Andrew Vogel wrote:
 
  I woke up this morning to find this email in my system:
 
 ...
 
  I've been hacked! The questions, now, are: 1. How do I fix this? and 2. How
 to I prevent it from happening again?
 
 No you haven't!   This is just the periodic report done on your
 system security by your own msec (man msec).I have not seen it as
 an email before, only as /var/log/messages messages, so msec must
 consider the situation serious.
 
 It is telling you what needs to be done to bring your security up to
 snuff so that you can't be hacked.
 
 --
 
 Regards,
 
 Ron. [AU] - sent by Linux.

-- 
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.



Re: [expert] auto_inst.cfg.pl?

2000-04-24 Thread Andrew Vogel

On Sun, 23 Apr 2000 21:22:28 -0400 (EDT), you wrote:

http://www.linux-mandrake.com/drakx/auto_inst.html

Thanks! That link is EXACTLY what I needed!

---
===
Andrew Vogel: Program Manager at the University of Cincinnati College of
Pharmacy.   http://pharmacy.uc.edu/default.html  (513)-558-3784
===



Re: [expert] meaning of [a-z]

2000-04-24 Thread Charles Curley

On Sat, Apr 22, 2000 at 08:53:34AM -0400, Brian T. Schellenberger wrote:
- 
- Not an emergency but it's been bugging me for a while and traffic seems
- to be relatively light right now . . .
- 
- 
- 
- Throughout most of my Unix life a command like
- 
-  ls -d [a-z]
- 
- would list only lower-case files.  Sometime fairly recently in Linux
- this has changed; thus, in one of my directories,
- 
-   ls -d [a-z]
-  I/  K  b/  c/  d/  f/  g/  h/  n/  r/  t/  w/  x/
- 
- As you can see, [a-z] includes both upper- and lower-case items.  For
- quite I while I was under the misapprehension that this was because the
- [-] operator had gotten case-insensitive, but this is not the case:
- 
-   ls -d [abcdefghijklmnopqrstuvwxyz]
-  b/  c/  d/  f/  g/  h/  n/  r/  t/  w/  x/
- 
- So what's happened instead is that the order in which things are search
- has changed: instead of having a meaning interpretted in ASCII order
- it's in dictionary order.
- 
- This is not brand-new; it's true in Mandrake 7.0 but it was also true in
- RedHat 6.1. But it was not true in Caldera OpenLinux 2.2 or RedHat 5.2
- or any earlier Unix or Unix-like system I ever used before (HP-UX,
- Solaris, FreeBSD, real BSD).
- 
- I suppose that I can see why this would be done on the grounds of being
- "intuitive", but it's a lot less useful; with the old interpretation it
- was easy to express ideas like "lower-case" or "upper-caes" and it only
- took a few extra keystrokes to get any character range in both cases,
- but it takes lots to now express "uppercase" or "lowercase".
- 
- Anyway, does anybody know
- 
- - Why this was done?
- - Who decided to do this?
- - If there's something that can be done to switch it back?

Interesting. I don't see it on Mandrake 6.1.

As for itme 3, I believe ls is part of bash, so man bash may be the way to
go.


-- 

-- C^2

No windows were crashed in the making of this email.

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley



Re: [expert] Norton Antivirus and Bloodhound

2000-04-24 Thread Charles Curley

On Fri, Apr 21, 2000 at 02:49:08PM -0800, Civileme wrote:
- The "local" Alaska Linux Users Group reports that Norton Antivirus and 
- Bloodhound, Norton's newer "heuristic" virus hunter, is claiming LILO is 
- a boot sector virus in newly installed dual-boot systems.

Clearly a complaint to Norton is in order.

- 
- So, for their next installfest, they will be recommending the McAfee 
- virus scanner for linux that is there to protect windows.

I have had problems with McAfee rendering W95 unstable (OK, more so than
usual). You might look at fsecure instead.


-- 

-- C^2

No windows were crashed in the making of this email.

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley



Re: [expert] I've been hacked!

2000-04-24 Thread Paul Weber

Andrew,

The solution I use is to assume the worst.  Your system has been totally compromised 
as has every system that trusts it.  (Do you use rlogin, rsh or do you have ssh keys 
laying around on that system?)

The first thing you need to do is to grab a complete image of the disk(s) to tape for 
use in legal procedings.  Copy every log file from every system you've got and call 
your ISP for help on that end.  You may want to investigate your legal options as well.

My SOP is to completely format every partition, and check for partitions that were 
added, by the way!  Next, I would change every password on every system connected to 
it.  Finally, I would call in a security expert to look at what happened and make 
suggestions on what to do next.

I wouldn't do partial fixes for a major security breech.  Leaving user stuff may leave 
a hacker's back-door in place!

-Paul

 "Brian T. Schellenberger" [EMAIL PROTECTED] 04/23/00 10:26PM 

The easiest  fastest way to fix it is to re-install the O/S (not an
upgrade, an install).  This might not be a big deal if you have /home
and /usr/local on separate partitions and you've not customized
elsewhere much and/or if you keep frequent backups, orit might be a big
deal.

Nothing short of re-installing and restoring from backup is really safe,
though.

For preventing this in the future, what sort of internet hookup do you
have?  What sort of firewall setup?  What sort of security level are you
running?  What version of Mandrake?


Andrew Vogel wrote:
 
 I woke up this morning to find this email in my system:
 
 Subject: *** Diff Check, Thu Apr 20 00:02:50 EDT 2000 ***
 Security Warning: Change in Suid Root files found :
 - Added suid root files : /bin/mount
 - Added suid root files : /bin/ping
 - Added suid root files : /bin/su
 - Added suid root files : /bin/umount
 - Added suid root files : /sbin/dump
 - Added suid root files : /sbin/pwdb_chkpwd
 - Added suid root files : /sbin/restore
 - Added suid root files : /usr/X11R6/bin/Xwrapper
 - Added suid root files : /usr/bin/at
 - Added suid root files : /usr/bin/chage
 - Added suid root files : /usr/bin/chfn
 - Added suid root files : /usr/bin/chsh
 - Added suid root files : /usr/bin/crontab
 - Added suid root files : /usr/bin/dos
 - Added suid root files : /usr/bin/gpasswd
 - Added suid root files : /usr/bin/lpq
 - Added suid root files : /usr/bin/lpr
 - Added suid root files : /usr/bin/lprm
 - Added suid root files : /usr/bin/newgrp
 - Added suid root files : /usr/bin/passwd
 - Added suid root files : /usr/bin/procmail
 - Added suid root files : /usr/bin/rcp
 - Added suid root files : /usr/bin/rlogin
 - Added suid root files : /usr/bin/rsh
 - Added suid root files : /usr/bin/sperl5.6.0
 - Added suid root files : /usr/bin/suidperl
 - Added suid root files : /usr/bin/urpmi
 - Added suid root files : /usr/lib/telnetd/login
 - Added suid root files : /usr/libexec/pt_chown
 - Added suid root files : /usr/sbin/sendmail
 - Added suid root files : /usr/sbin/traceroute
 - Added suid root files : /usr/sbin/userhelper
 - Added suid root files : /usr/sbin/usernetctl
 
 Security Warning: Changes in Suid Group files found :
 - Added suid group files : /usr/sbin/sendmail
 
 Security Warning: Change in World Writeable Files found :
 - Removed writables files : /tmp/fileUcAjVM
 
 Security Warning: the md5 checksum for one of your SUID files has changed,
 maybe an intruder modified one of these suid binary in order to put in a
 backdoor...
 - Checksum changed files : /usr/bin/suidperl
 
 Security Warning: There is modifications for port listening on your machine :
 -  Opened ports : tcp0  0 *:6000  *:*
 LISTEN  658/X
 -  Opened ports : tcp0  0 *:1024  *:*
 LISTEN  651/kdm
 -  Opened ports : tcp0  0 *:1 *:*
 LISTEN  586/perl
 -  Opened ports : tcp0  0 *:www   *:*
 LISTEN  520/httpd
 -  Opened ports : udp0  0 *:xdmcp *:*
 651/kdm
 -  Opened ports : udp0  0 *:1 *:*
 586/perl
 - Closed ports  : tcp0  0 *:www   *:*
 LISTEN  3244/httpd
 - Closed ports  : tcp0  0 *:1 *:*
 LISTEN  

Re: [expert] restore my old sytem

2000-04-24 Thread Patrick

when i tried linux single, linux made initially unroll the message of
starting then it send me a message: "/dev/hda5 contains a file system with
error check forced"
then after some instant i receive the message"give the root password for
maintenance". after have given the root password i receive the message " bad
login..Thank you for your help
- Original Message -
From: Brian T. Schellenberger [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 24, 2000 4:34 AM
Subject: Re: [expert] restore my old sytem



 Well, what exactly happened when you tried "linux single"?
 What happened when you used the resuce disk?

 We'll need more information in order to help you.

 Patrick wrote:
 
  hi,
  yesterday, i start my linux and i mark an error in file sytem.i wanted
to
  give my password for maintenance .But my password didn't
  recognize.Please help me  to restore my system.i used the methods of
rescue
  end boot disk.I also used the command "linux single" in lilo prompt.But
  nothing march.i don't know which methods used for restore my sytem
.Thank
  you for your help.Please respond me at
  [EMAIL PROTECTED]
 
 
 

__
  message envoye depuis http://www.ifrance.com
  emails (pop)-sites persos (espace illimite)-agenda-favoris
(bookmarks)-forums
  Ecoutez ce message par tel ! : 08 92 68 92 15 (france uniquement)

 --
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.

 
__
message envoye depuis http://www.ifrance.com
emails (pop)-sites persos (espace illimite)-agenda-favoris (bookmarks)-forums 
Ecoutez ce message par tel ! : 08 92 68 92 15 (france uniquement)





[expert] Two Directories on Same Partition?

2000-04-24 Thread Lane Lester

If you're an expert you'll probably think this is a newbie question.
g. I've looked at a bunch of man pages, howtos, and Web sites without
finding the answer... which may be the answer!

Can you put two "low-level" directories in the same partition? For
example, can I have / in one partition and both /etc and /usr in one
separate partition?  If so, what goes in fstab?
-- 
Lane

Lane Lester / Madison County, Georgia USA
Using Linux to get where I want to go...




Re: [expert] How to find the locking process?

2000-04-24 Thread John Aldrich

On Sun, 23 Apr 2000, you wrote:
 From time to time when I go to umount somthing it will tell me that it's
 busy and I can't.
 
 Now sometimes it's clear to me why, and it's easily corrected, but other
 times it is not.
 
 Is there any way to:
 - Find what process has it locked, or
 - Force it to unlock anyway, killing process as necessary?
 
Dunno. However, one thing to keep in mind (as far as
removeable media is concerned at least): If you're in the
directory where the removeable media is mounted, you can't
unmount the drive. i.e. if you're in a console window, and
you've got a cdrom mounted in /mnt/cdrom, you can NOT
umount that drive if you're in /mnt/cdrom viewing the
contents of the drive. Same goes for /mnt/floppy, etc.
John



Re: [expert] txt_boot.img, txt_bootnet.img

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
 I needed to do a text network install of Mandrake 7 on a system without a
 mouse, but after downloading and RAWRITEing it to a floppy, it just told
 me to insert the Mandrake CDROM.  The same happened with txt_boot.img.
 
 Is this supposed to happen?  I did enjoy the whole FTP install that I did
 on Mandrake 6.1.  Other than this, I love mandrake, so I dunno  And I
 really want that 586 optimization for my P133 server
 
Yep. The standard boot image and the text_boot image are
NOT (afaik) capable of installs other than from a CDROM.
On the Mandrake 7.0-2 cd I burned from their ISO image,
there is a txt_bootnet.img file which should allow you to do
FTP/NFS installs.


 Also, the MD5SUMs aren't the same as they should be.  I know that isn't a
 good sign.
 
That is DEFINITELY a bad sign!
John



Re: [expert] lost bootup disk, recover ?

2000-04-24 Thread Ted Wager

On Sun, 23 Apr 2000, Alan Shoemaker wrote:
 Ted Wager wrote:
  
  On Fri, 21 Apr 2000, Civileme wrote:
 Ted.tomsrtbt is in need of a kernal update to support the
 ext2 filesystems created by the newest distros.  He has said
 that he is working on it but with the recent birth of a new baby
 daughter in March his time has been severely limited.  
 
  A chroot  to any of my 3 linux partitions tells me..
  chroot
  usage chroot directory program [arg]
  Also if I try to mount any of the linux parttitions I get
  couldn't mount because of unsupported optional features
  mount: wrong fs type bad option etc.
  Wonder if anyone can tell me what is wrong...I have used tomsrtbt in the past
  but this is the latest version.Is it my machine or the tomsrtbt disk ??
  
 Regards Ted
  
  Ted Wager..RedHat Linux 6.2
g3tpi.ampr.org  44.131.147.8
  
   OS From :- www.eridani.co.uk
-- 
Hi Alan
Thanks for the info..I have used the tomsrtbt on an old p75 running
Storm linux and it will mount /dev/hdc1 on that machine so think the problem
lies with this machine..It would not chroot on the p75  though...


   Regards Ted
  
Ted Wager..RedHat Linux 6.2
  g3tpi.ampr.org  44.131.147.8


 OS From :- www.eridani.co.uk



Re: [expert] DIsk Caching

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
 Hello,
 
 In Mandrake, is there a way where I can control the amount of memory being
 used as a disk cache? I've noticed that sometimes Mandrake is using almost
 100MB of physcial RAM as a disk cache, especially after doing something
 intensive such as compiling an application. Unfortunately it doesn't seem to
 shrink
 
 I have 256MB of physcial RAM in my box. I would *think* that having a maximum
 of a 64MB disk cache would suffice. Any thoughts? Thanks...
 
I think it's part of the O/S that Linux uses "available"
memory to cache the disks. AFAIK, that can't be changed w/o
rewriting the kernel.
This came up awhile back and it was pointed out at that
time that linux DOES release memory as needed by the
various applications, but that it continues to buffer the
disks up to available RAM.
John



Re: [expert] Re: The right way to do a private network

2000-04-24 Thread Charles Curley

On Wed, Apr 19, 2000 at 10:08:48AM -0600, Daniel Woods wrote:
- 
-  Charles Curley wrote:
-   On Mon, Apr 17, 2000 at 10:37:04AM -0600, Daniel Woods wrote:
-   -
-   -  Assuming your ISP is providing you with only a single IP address, you want
-   -  something along these lines:
-   - 
-   -  ++
-   -  | Comp B |---\+---+
-   -  ++\---| H |  ++ +---+
-   -| u |--| Comp A |-| Modem |
-   -  ++/---| b |  ++ +---+
-   -  | Comp C |---/+---+
-   -  ++
- 
-  Why purchase another machine at all?  Install a second network interface
-  card into Comp B and connect it in the diagram as Comp A.  It'll cost ya
-  about $10-20 for a nic.
- 
- I do have a second NIC, but this still leaves Comp A vulnerable to attack
- if it's connected to the cable modem.  Comp B is my development machine
- and placing it as Comp A might be risky.  Is this a valid assumption ?

Yep. Development or any other proprietary data should NEVER be on the
firewall.


-- 

-- C^2

No windows were crashed in the making of this email.

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley



Re: [expert] I've been hacked!

2000-04-24 Thread Ron Stodden

"Brian T. Schellenberger" wrote:
 
 If that's the case, then why does the report say that there's a
 *difference* in the suid root files?  Why does it claim that all of
 those are *changed*?  It doesn't merely claim that they *are* suid root;
 it claims that they *changed*.

My apologies.  You are correct.

One of the lovely advantages of having two logical partitions set up
with the same Linux is that now the victim could actually compare all
those files with the virgin copies using diff or md5sum to ascertain
whether the files have actually been changed or whether msec's record
of things got corrupted (msec is on its first release, remember, and
hiccups can be expected).

I'm sceptical that he in fact was hacked - why would the hacker make
that odd set of partial changes? - and would look for alternative
possibilities, including a hardware hiccup.

-- 

Regards,

Ron. [AU] - sent by Linux.



[expert] Howto integrate new settings in homebrew ISO?

2000-04-24 Thread root

Dear Mail list!

After a lot of download and adjusting work I finished a homebrew
Mandrake-iso, which I burned on CD.  But it only contains the default
configuration files...
Is there a possibility to include my adjusted configuration files (i.e.
isdn-files, crontab...) in the installation files on the CD?
Ok, I could backup /etc on a disk and then overwrite the install
settings, but hopefully there is another, more elegant way...
Any sort of help appreciated!

David.
(Mail: [EMAIL PROTECTED])




[expert] Howto integrate new settings in homebrew ISO?

2000-04-24 Thread root

Dear Mail list!

After a lot of download and adjusting work I finished a homebrew
Mandrake-iso, which I burned on CD.  But it only contains the default
configuration files...
Is there a possibility to include my adjusted configuration files (i.e.
isdn-files, crontab...) in the installation files on the CD?
Ok, I could backup /etc on a disk and then overwrite the install
settings, but hopefully there is another, more elegant way...
Any sort of help appreciated!

David.
(Mail: [EMAIL PROTECTED])






Re: [expert] Diamond Stealth ll S220

2000-04-24 Thread Joseph S. Gardner

John Aldrich wrote:

 On Fri, 21 Apr 2000, you wrote:
  Has anyone else had any trouble setting up X with a Stealth ll ?
 
  every time X tries to start itself it locks the system up tigher than
  a drum.  Anyone got any ideas??
 
 Which X server did you install?
 John

John,

I was doing a "recommended" install from a 7.0-2 disk so I assume it was
the default Xserver.  I replaced the card with a Voodoo3 2000 and all is
well although I would like to figure out what happened.

Someone suggested that they had problems with a bbp selection of 24 and
changing that solved their problem.  Mine was that I was never given the
chance to select that using the "recommended" install.


--
Joseph S. Gardner
Senior Designer / Technical Support
Kirby Co.,  Cleveland, OH
[EMAIL PROTECTED]

Linux is like a wigwam...
No windows, no gates.
Apache inside

Registered linux user #1696600
ICQ #63389227





Re: [expert] DIsk Caching

2000-04-24 Thread Brian T. Schellenberger


Linux will manage the memory space so that if there's some more useful
use for the memory it'll take back the disk cache space.  Run enough
applications that need the space and it'll shrink up real nice.

If you have applications actuallly dying from lack of memory while the
disk cache is still locked in, you've got a problem; otherwise, just
enjoy the intelligent use of memory.

PS: If you hve 256M you might want to get rid of swap space entirely;
that's what I've done.

Necrotica wrote:
 
 Hello,
 
 In Mandrake, is there a way where I can control the amount of memory being
 used as a disk cache? I've noticed that sometimes Mandrake is using almost
 100MB of physcial RAM as a disk cache, especially after doing something
 intensive such as compiling an application. Unfortunately it doesn't seem to
 shrink
 
 I have 256MB of physcial RAM in my box. I would *think* that having a maximum
 of a 64MB disk cache would suffice. Any thoughts? Thanks...
 
 -Chris

-- 
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.



[expert] Ghostview help needed!!!!!!!!!!

2000-04-24 Thread Simon Anun


  When I want open a PostSript file (*.ps) with Ghostview the messagges
displayed are

  unknown device x11alpha

   Error: PostScript interpreter failed in main windows



or 

  unknown device x11

   Error: PostScrip interpreter failed in main windows


   Thanks

   Simon Anun




Re: [expert] Network card causes modem to disappear

2000-04-24 Thread D. R. Evans

-BEGIN PGP SIGNED MESSAGE-

On 23 Apr 00, at 18:03, Charles Curley wrote:


 And in which case the card is out of spec. The PCI spec requires that
 software be able to assign a base address to the card in all address
 spaces.
 

The card does appear to be in spec; I can indeed assign base addresses at 
will. Also, the important thing to remember in all this is that the card 
works perfectly under Windows with the network card also in place. 

Either I'm missing something in my trying to configure it under Linux or, 
and I almost hate to say this) there's something slightly hosed in the PCI 
PnP support on Linux. At this point I've tried every configuration trick I 
can think of -- hence my call for help.

  Doc Evans


-BEGIN PGP SIGNATURE-
Version: PGP 6.0.2 -- QDPGP 2.60 
Comment: Key obtainable from servers: ID 0x6184B81D

iQCVAwUBOQRaTP2CFbFhhLgdAQEfjgP7BJQg6vTe4UDyowaWm8GUQQ9ZmPkYvdoO
+ocBHsexx9GEptM69v9n/lq/t2OqmcTFEq6cAq3vwx4dXpPPTeiD9C3LgBHWESp1
BRWCnUrLHZbsVZegCxObQwf7ZYhKlex+mbzhI0s5XEUr+4cmDup1Q2iNsdnNmub1
6lGVurebKPA=
=Xacv
-END PGP SIGNATURE-

--
D.R. Evans N7DR / G4AMJ  [EMAIL PROTECTED]

"Palindor Chronicles" information and extracts:
   http://www.sff.net/people/N7DR/drevans.htp
--



[expert] Analog Audio input - MP3 Application Found

2000-04-24 Thread Sevatio Octavio

Ok...  I've found it.  It's a command-line app that can record audio directly to mp3 
using Lame as the encoder.  I haven't tried it
yet and I'm not sure if it can utilize the much faster Gogo encoder.

http://www.netwaysglobal.com/mpegrec

Seve

-Original Message-
From: Sevatio Octavio [EMAIL PROTECTED]
To: [EMAIL PROTECTED] [EMAIL PROTECTED]
Date: Thursday, March 30, 2000 9:04 PM
Subject: [expert] Analog Audio input - MP3 in Realtime?


Hi All,

I'm in search of software that will convert my Audio-input to MP3 in real-time.  I 
already have the faster-than-real-time encoders;
Gogo  Lame.

The only program that I know of right now is Musicmatch for Windurs.  An equivalent 
linux program would be great!

Seve






Re: [expert] I've been hacked!

2000-04-24 Thread Russ Johnson

Ron, re-read the message. It specifically says that file the shouldn't be suid
have been changed to suid since the last scan.

For instance, mount, su, and umount should never be suid. They aren't installed
that way, so "something" had to change them.

Even if it wasn't a hack job, there are many security holes here. I wouldn't want
to have that system anywhere near a public network until it's fixed.

Russ

Ron Stodden wrote:

 Andrew Vogel wrote:
 
  I woke up this morning to find this email in my system:

 ...

  I've been hacked! The questions, now, are: 1. How do I fix this? and 2. How
 to I prevent it from happening again?

 No you haven't!   This is just the periodic report done on your
 system security by your own msec (man msec).I have not seen it as
 an email before, only as /var/log/messages messages, so msec must
 consider the situation serious.

 It is telling you what needs to be done to bring your security up to
 snuff so that you can't be hacked.

 --

 Regards,

 Ron. [AU] - sent by Linux.




Re: [expert] Diamond Stealth ll S220

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
 John,
 
 I was doing a "recommended" install from a 7.0-2 disk so I assume it was
 the default Xserver.  I replaced the card with a Voodoo3 2000 and all is
 well although I would like to figure out what happened.
 
 Someone suggested that they had problems with a bbp selection of 24 and
 changing that solved their problem.  Mine was that I was never given the
 chance to select that using the "recommended" install.
 
:-) That's why I *never* let Linux tell me how to install.
I *always* do a custom install. :-)
John



Re: [expert] Internet problems

2000-04-24 Thread Tom H

Well it is always www.nec.com or www.wellsfargo.com

any of the banking sites. Some parts of Microsoft's sites.

- Original Message - 
From: "Brian T. Schellenberger" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, April 23, 2000 8:23 PM
Subject: Re: [expert] Internet problems


 
 Ah dunno.
 
 Perhaps you could cite a specific site?
 
 I have IP Masquerading set up under Linux (Mandrake 7.0) to my cable
 modem, *with* a firewall.  I can see if they work for me.
 
 If some of the sites are "embarressing" feel free to send the URLs to me
 directly; I'm virtually impossible to offend.
 
 (Well, I dunno.  If it's a pro-movie-industry/anti-decss site or
 something I might get offended . . . )
 
 
 
  Tom H wrote:
  
  
  I have hooked up my Linux (Red Hat 6.1) to the DSL I am running Ip
  Masqurading on the system and it is routing to the internet for the
  other 4 systems. The strange thing is I am unable to astablish a
  connection to some web sites that use security. I have also noticed it
  has problems with frames. Or various other sites. If I connect it
  directly to the 98 or NT machine I can hit them fine with no problems.
  I think it might be a SSL problem but not sure. I have not installed a
  firewall yet. But I have checked all the files for IP Forwarding and
  they all seem to be OK. What am I missing.
  Tom H
  Triumph 595
  64 Corvair
  65 Corvair
 
 -- 
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.





[expert] some missing files in Air

2000-04-24 Thread Hans Schneidhofer

hi list,
have discovered some missing files and a lot of false links in Air.
Files in /usr/doc/kde/HTML/default/ are a lot of missing or false links.
Some of the needed files are located in /opt/kde/share/doc/HTML/en/default, but
a lot of them are not here.

Another thing I discovered, kdf isn't there (that is kdiskfree) whether on CD1
nor in CD3 nor on the ftp-server.

Another thing is a missing link on that : Checking for new hardware
/usr/sbin/kudzu : error in loading shared libraries : lib newt.so.0.50 : cannot
open shared object file : no such file or directory

Who, by the hell, has made a control on mandrake V7 BEFORE forwarding the CD's
to print.

Now, where can I get such missing files, and why are some docfiles in kde-help
missing ? Where can I find all the lacking help-files ?

Hope someone can tell me obout, wherte to find and how to correct that missing
things on "Air"

bye
Hans Schneidhofer



Re: [expert] DIsk Caching

2000-04-24 Thread Burkhard Zombronner

Am Mon, 24 Apr 2000 schrieben Sie:
 Linux will manage the memory space so that if there's some more useful
 use for the memory it'll take back the disk cache space.  Run enough
 applications that need the space and it'll shrink up real nice.
 
 If you have applications actuallly dying from lack of memory while the
 disk cache is still locked in, you've got a problem; otherwise, just
 enjoy the intelligent use of memory.
 
 PS: If you hve 256M you might want to get rid of swap space entirely;
 that's what I've done.
 
 Necrotica wrote:
  
  Hello,
  
  In Mandrake, is there a way where I can control the amount of memory being
  used as a disk cache? I've noticed that sometimes Mandrake is using almost
  100MB of physcial RAM as a disk cache, especially after doing something
  intensive such as compiling an application. Unfortunately it doesn't seem to
  shrink
  
  I have 256MB of physcial RAM in my box. I would *think* that having a maximum
  of a 64MB disk cache would suffice. Any thoughts? Thanks...
  
  -Chris
 
 -- 
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.

Brian,

it is better to leave the swap space. I also got 256MB of ram (its nice to work
with enough? ram.  On making mp3s I had a little swapping and I guess some
programs will have a look on swap on installation.

regards

Burkhard
Zombronner



Re[2]: [expert] I've been hacked!

2000-04-24 Thread Wang Jian

Sorry, but mout, su, and umount should be suid.
A rpm -Va can find all files changed since installation.


Monday, April 24, 2000, 11:08:42 PM, you wrote:

RJ Ron, re-read the message. It specifically says that file the shouldn't be suid
RJ have been changed to suid since the last scan.

RJ For instance, mount, su, and umount should never be suid. They aren't installed
RJ that way, so "something" had to change them.

RJ Even if it wasn't a hack job, there are many security holes here. I wouldn't want
RJ to have that system anywhere near a public network until it's fixed.

RJ Russ




-- 
  lark





Re: [expert] L 7.0(2) and PHP 3.0.16

2000-04-24 Thread Stig

Stig wrote:

 I'm having trouble compiling PHP on a freshly installed LM 7.0 machine.
 
 I used the norwegian locale when I installed, but I don't know if this 
 is the problem...
 
 The errors I get are with "functions/microtime.c" in the PHP tree. 
 Something about "usg"..
 I tried to install every package imaginable to make it work... even 
 tried to change the locale to US English to no use...
 
 Anyone else experienced this and found a sollution to this ?
 
 Thanks for your time.
 
 
 Stig-Ørjan Smelror
 
Excuse me for replying to my own mail, but here is the exact error I'm 
getting.

-
functions/microtime.c: In function `php3_getrusage':
functions/microtime.c:152: storage size of `usg' isn't known
functions/microtime.c:155: `RUSAGE_SELF' undeclared (first use in this 
function)
functions/microtime.c:155: (Each undeclared identifier is reported only once
functions/microtime.c:155: for each function it appears in.)
functions/microtime.c:161: `RUSAGE_CHILDREN' undeclared (first use in 
this function)
make: *** [functions/microtime.o] Error 1
--

Everything works fine on my private machine and I believe the problem 
lies with the norwegian locale I used when installing Mandrake.

Any help would be greatly appreciated!

Thanks for your time.

Best regards,
Stig-Ørjan




Re: [expert] Ghostview help needed!!!!!!!!!!

2000-04-24 Thread Alen Salamun

Simon Anun wrote:
 
   When I want open a PostSript file (*.ps) with Ghostview the messagges
 displayed are
Hi!

You are trying to display output to X11 in text mode...Either run X11 or
output display to svga or printer...

Bye, Alen
-- 
*---*
*E-Mail: Alen Salamun [EMAIL PROTECTED]*
*   LiNUX - The choice of GNU Generation!   *
*---*



[expert] Bastille w/ LM 7.0

2000-04-24 Thread Monte Milanuk

Has anyone used the Bastille scripts on top of a LM 7.0
system?  Is it even necessary, if you use msec to set the
security level to '5'?  This is for a system that will be
used as a firewall/router/DHCP/DNS/mail/news server.

Thanks for your time,

Monte



=

"Here, catch!  Don't worry, it won't bite...BBPPP!!!...much snicker"

What an unsuspecting mechanic hears as he learns to never, ever, play 'Catch' with a 
bored electrician  ;)

Monte Milanuk

__
Do You Yahoo!?
Send online invitations with Yahoo! Invites.
http://invites.yahoo.com



Re: [expert] I've been hacked!

2000-04-24 Thread Andrew Vogel

On Mon, 24 Apr 2000 08:08:42 -0700, you wrote:

Ron, re-read the message. It specifically says that file the shouldn't be suid
have been changed to suid since the last scan.

For instance, mount, su, and umount should never be suid. They aren't installed
that way, so "something" had to change them.

Even if it wasn't a hack job, there are many security holes here. I wouldn't want
to have that system anywhere near a public network until it's fixed.

Imagine how I'm feeling! 

I'm going to do a complete reinstall of the system when I get a bit of free
time...

The folks in this group have been TREMENDOUSLY valuable through this
process; thanks!

---
===
Andrew Vogel: Program Manager at the University of Cincinnati College of
Pharmacy.   http://pharmacy.uc.edu/default.html  (513)-558-3784
===



[expert] gui login

2000-04-24 Thread Joseph S. Gardner

I recall there being a discussion a while back regarding users added
after the 7.0 install not showing up on the cute little gui login
screen.  I tried searching the archives and came up empty, does anyone
recall the fix to this??

TIA
--
Joseph S. Gardner
Senior Designer / Technical Support
Kirby Co.,  Cleveland, OH
[EMAIL PROTECTED]

Linux is like a wigwam...
No windows, no gates.
Apache inside

Registered linux user #1696600
ICQ #63389227





Re: Re[2]: [expert] I've been hacked!

2000-04-24 Thread Gary Simmons

Yes this was not a hack... my files are in the same condition even after
reinstalling the RPMS to be sure... the reason it said it changed was
likely because you upgraded an RPM and it changed it for you, or this was
the first time the security scan was run. But now I do have to ask... why
does ping need to be suid root? and why do some of the other files he
listed have to be suid as well??

-Gary Simmons

On Tue, 25 Apr 2000, Wang Jian wrote:

 Sorry, but mout, su, and umount should be suid.
 A rpm -Va can find all files changed since installation.
 
 
 Monday, April 24, 2000, 11:08:42 PM, you wrote:
 
 RJ Ron, re-read the message. It specifically says that file the shouldn't be suid
 RJ have been changed to suid since the last scan.
 
 RJ For instance, mount, su, and umount should never be suid. They aren't installed
 RJ that way, so "something" had to change them.
 
 RJ Even if it wasn't a hack job, there are many security holes here. I wouldn't want
 RJ to have that system anywhere near a public network until it's fixed.
 
 RJ Russ
 
 
 
 
 




Re: [expert] gui login

2000-04-24 Thread Alan Shoemaker

Josephyou can set them to be seen in the kde control
center-applications-login manager.

Alan


"Joseph S. Gardner" wrote:
 
 I recall there being a discussion a while back regarding users added
 after the 7.0 install not showing up on the cute little gui login
 screen.  I tried searching the archives and came up empty, does anyone
 recall the fix to this??
 
 TIA
 --
 Joseph S. Gardner
 Senior Designer / Technical Support
 Kirby Co.,  Cleveland, OH
 [EMAIL PROTECTED]
 
 Linux is like a wigwam...
 No windows, no gates.
 Apache inside
 
 Registered linux user #1696600
 ICQ #63389227



Re: [expert] some missing files in Air

2000-04-24 Thread Civileme

Hans Schneidhofer wrote:

 hi list,
 have discovered some missing files and a lot of false links in Air.
 Files in /usr/doc/kde/HTML/default/ are a lot of missing or false links.
 Some of the needed files are located in /opt/kde/share/doc/HTML/en/default, but
 a lot of them are not here.

 Another thing I discovered, kdf isn't there (that is kdiskfree) whether on CD1
 nor in CD3 nor on the ftp-server.

 Another thing is a missing link on that : Checking for new hardware
 /usr/sbin/kudzu : error in loading shared libraries : lib newt.so.0.50 : cannot
 open shared object file : no such file or directory

 Who, by the hell, has made a control on mandrake V7 BEFORE forwarding the CD's
 to print.

 Now, where can I get such missing files, and why are some docfiles in kde-help
 missing ? Where can I find all the lacking help-files ?

 Hope someone can tell me obout, wherte to find and how to correct that missing
 things on "Air"

 bye
 Hans Schneidhofer

Well Kdiskfree should be on the Mandrake 6.1 distro for downloading

As for the kde docs, it may be an error to assume that there are missing docs.
Documentation is often not carried out by busy programmers and is instead shifted
to volunteer writers.  And, as the deadline approaches, some of the volunteers
vanish, so docs often go to electronic and paper publication with pieces missing,
or with answers not completely researched.  My own experience with kde docs in
previous distros is that there *are* pieces missing.

--
BETA-testing Netscape 6
and its mailer






Re: [expert] I've been hacked!

2000-04-24 Thread Eric L. Brine

 But now I do have to ask... why
 does ping need to be suid root? and why do some of the other files he
 listed have to be suid as well??

From a Solaris box (I don't have linux installed):
  {2} q2ir@jupiter [~] ls -l `which ping`
  -r-sr-xr-x   1 root bin20404 Oct  6  1998 /usr/sbin/ping*
 ^

ping and tracert send out ICMP (raw IP) packets. It's my hypothesis that
root permissions are need to send or receive those.

As for su and mount, root permissions are needed under some or all
circumstances. The only way to do that is to run the application as root
(and switch the effective UID to the user if the extra permissions are not
needed).

ELB

--
Eric L. Brine  |  Chicken: The egg's way of making more eggs.
[EMAIL PROTECTED]  |  Do you always hit the nail on the thumb?
ICQ# 4629314   |  An optimist thinks thorn bushes have roses.



Re: [expert] gui login

2000-04-24 Thread Civileme

On my system they DO show up, but that little display is dependent on
security level.

However, look at this AS ROOT

Kmenu-Settings-Applications-Login Manager

Civileme

"Joseph S. Gardner" wrote:

 I recall there being a discussion a while back regarding users added
 after the 7.0 install not showing up on the cute little gui login
 screen.  I tried searching the archives and came up empty, does anyone
 recall the fix to this??

 TIA
 --
 Joseph S. Gardner
 Senior Designer / Technical Support
 Kirby Co.,  Cleveland, OH
 [EMAIL PROTECTED]

 Linux is like a wigwam...
 No windows, no gates.
 Apache inside

 Registered linux user #1696600
 ICQ #63389227

--
BETA-testing Netscape 6
and its mailer






Re: [expert] gui login

2000-04-24 Thread D. R. Evans

-BEGIN PGP SIGNED MESSAGE-

On 24 Apr 00, at 13:27, Joseph S. Gardner wrote:

 I recall there being a discussion a while back regarding users added
 after the 7.0 install not showing up on the cute little gui login
 screen.  I tried searching the archives and came up empty, does anyone
 recall the fix to this??
 

That must have been before I subscribed, but I certainly haven't had any 
problem with added users not showing up on the "cute little gui login 
screen".

  Doc Evans


-BEGIN PGP SIGNATURE-
Version: PGP 6.0.2 -- QDPGP 2.60 
Comment: Key obtainable from servers: ID 0x6184B81D

iQCVAwUBOQSkFf2CFbFhhLgdAQHG6wQA4W8or0nvYzGUe9s+XVCSfR1vJ1tvtKsM
TkHlfozAX/kr3WWByFs0d7H3uf5Vztt6GLiSIn5fRTPYT4WY7nvwxSSUqEL3A0j3
LS+f0cJapMCTDRAJE6bEzNH+728wJJfh3keCMh2loBGbAKpFU4DS9/VRPkIxZNPY
2nkK+LZc93E=
=5eHI
-END PGP SIGNATURE-

--
D.R. Evans N7DR / G4AMJ  [EMAIL PROTECTED]

"Palindor Chronicles" information and extracts:
   http://www.sff.net/people/N7DR/drevans.htp
--



[expert] cdrecord CD-RW problems

2000-04-24 Thread S. Newhouse

Hello,
 I am using Mandrake-7.02.  

I am trying to use cdrecord to write on an ide CD-RW drive.  
I can write to CD-R just fine, but it doesn't work with any CD-RW
media.

I have no problems with real scsi drives.

I downloaded the new cdrecord  src for RedHat, recompiled and it does
not help.  

Here is what I get.  Any ideas would be appreciated.

P.S. I hope no one worries that I was attempting to write
 RH-6.2!

-cheers,
 -sen

My system:

Linux version 2.2.14-15mdk ([EMAIL PROTECTED]) (gcc version
2.95.2 19991024 (release)) #1 Tue Jan 4 22:24:20 CET 2000

cdrecord -scanbus
Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
Using libscg version 'schily-0.1'
scsibus0:
0,0,0 0) 'IDE-CD  ' 'R/RW 4x4x24 ' 'Z023' Removable CD-ROM
0,1,0 1) *
0,2,0 2) *
0,3,0 3) *
0,4,0 4) *
0,5,0 5) *
0,6,0 6) *
0,7,0 7) *

It writes in dummy mode just fine (I think).



cdrecord -v speed=4 dev=0,0 zoot-i386.iso -dummy
cdrecord: Badly placed option. Global options must be before any track.
[root@chaos RedHat-6.2]# cdrecord -v speed=4 dev=0,0 -dummy zoot-i386.iso 
Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
TOC Type: 1 = CD-ROM
scsidev: '0,0'
scsibus: 0 target: 0 lun: 0
Using libscg version 'schily-0.1'
atapi: 1
Device type: Removable CD-ROM
Version: 0
Response Format: 1
Vendor_info: 'IDE-CD  '
Identifikation : 'R/RW 4x4x24 '
Revision   : 'Z023'
Device seems to be: Generic mmc CD-RW.
Using generic SCSI-3/mmc CD-R driver (mmc_cdr).
Driver flags   : SWABAUDIO
Drive buf size : 1572864 = 1536 KB
FIFO size  : 4194304 = 4096 KB
Track 01: data  640 MB
Total size: 735 MB (72:54.25) = 328069 sectors
Lout start: 736 MB (72:56/19) = 328069 sectors
Current Secsize: 2048
ATIP info from disk:
  Indicated writing power: 5
  Reference speed: 2
  Is unrestricted
  Is erasable
  ATIP start of lead in:  -11625 (97:27/00)
  ATIP start of lead out: 336781 (74:52/31)
  speed low: 0 speed high: 4
  power mult factor: 4 6
  recommended erase/write power: 3
  A2 values: 5A C8 06
Disk type: phase change
Manuf. index: 81
Manufacturer: ILLEGAL: Old Ritek Co.???
Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
Starting to write CD/DVD at speed 4 in dummy mode for single session.
Last chance to quit, starting dummy write in 1 seconds.
Waiting for reader process to fill input buffer ... input buffer ready.
Starting new track at sector: 0
Track 01: data  640 MB
Total size: 735 MB (72:54.25) = 328069 sectors
Lout start: 736 MB (72:56/19) = 328069 sectors
Current Secsize: 2048
ATIP info from disk:
  Indicated writing power: 5
  Reference speed: 2
  Is unrestricted
  Is erasable
  ATIP start of lead in:  -11625 (97:27/00)
  ATIP start of lead out: 336781 (74:52/31)
  speed low: 0 speed high: 4
  power mult factor: 4 6
  recommended erase/write power: 3
  A2 values: 5A C8 06
Disk type: phase change
Manuf. index: 81
Manufacturer: ILLEGAL: Old Ritek Co.???
Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
Starting to write CD/DVD at speed 4 in dummy mode for single session.
Last chance to quit, starting dummy write in 1 seconds.
Waiting for reader process to fill input buffer ... input buffer ready.
Starting new track at sector: 0
Track 01: 640 of 640 MB written (fifo 100%).
Track 01: Total bytes read/written: 671881216/671881216 (328067 sectors).
Writing  time: 1101.589s
Fixating...
WARNING: Some drives don't like fixation in dummy mode.
Fixating time:   64.404s
cdrecord: fifo had 20505 puts and 20505 gets.
cdrecord: fifo was 0 times empty and 18649 times full, min fill was 90%.

Now, without the dummy mode:

cdrecord -v speed=4 dev=0,0 zoot-i386.iso 
Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
TOC Type: 1 = CD-ROM
scsidev: '0,0'
scsibus: 0 target: 0 lun: 0
Using libscg version 'schily-0.1'
atapi: 1
Device type: Removable CD-ROM
Version: 0
Response Format: 1
Vendor_info: 'IDE-CD  '
Identifikation : 'R/RW 4x4x24 '
Revision   : 'Z023'
Device seems to be: Generic mmc CD-RW.
Using generic SCSI-3/mmc CD-R driver (mmc_cdr).
Driver flags   : SWABAUDIO
Drive buf size : 1572864 = 1536 KB
FIFO size  : 4194304 = 4096 KB
Track 01: data  640 MB
Total size: 735 MB (72:54.25) = 328069 sectors
Lout start: 736 MB (72:56/19) = 328069 sectors
Current Secsize: 2048
ATIP info from disk:
  Indicated writing power: 5
  Reference speed: 2
  Is unrestricted
  Is erasable
  ATIP start of lead in:  -11625 (97:27/00)
  ATIP start of lead out: 336781 (74:52/31)
  speed low: 0 speed high: 4
  power mult factor: 4 6
  recommended erase/write power: 3
  A2 values: 5A C8 06
Disk type: phase change
Manuf. index: 81
Manufacturer: ILLEGAL: Old Ritek Co.???
Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
Starting to write CD/DVD at speed 4 in write 

Re: [expert] Fwd: [UKLUG] Wow, an actual constructive use for IRC!

2000-04-24 Thread Marcos Dione

On Sun, 23 Apr 2000, vern wrote:

 Check it outfire up an IRC client and head to irc.debian.org 
 channel #debian. Then you can do an "apt: ipmasq" to have the channel
 bot give you info on what ipmasq is and where to find docs. That's really
 cool! It works for most packages.

ok, it's VERY useful... if and only if you have DEBIAN... ur... is
this the mandrake list?

-- 
"No tire sus colillas en el mingitorio, las humedece y
las hace dificil de encender"
"Do not dump butts in the wc. They dampen and it makes
them difficult to light."
  --Tom Sharpe, "Wilt on high"




Re: [expert] some missing files in Air

2000-04-24 Thread Burkhard Zombronner

Am Mon, 24 Apr 2000 schrieben Sie:
 hi list,
 have discovered some missing files and a lot of false links in Air.
 Files in /usr/doc/kde/HTML/default/ are a lot of missing or false links.
 Some of the needed files are located in /opt/kde/share/doc/HTML/en/default, but
 a lot of them are not here.
 
 Another thing I discovered, kdf isn't there (that is kdiskfree) whether on CD1
 nor in CD3 nor on the ftp-server.
 
 Another thing is a missing link on that : Checking for new hardware
 /usr/sbin/kudzu : error in loading shared libraries : lib newt.so.0.50 : cannot
 open shared object file : no such file or directory
 
 Who, by the hell, has made a control on mandrake V7 BEFORE forwarding the CD's
 to print.
 
 Now, where can I get such missing files, and why are some docfiles in kde-help
 missing ? Where can I find all the lacking help-files ?
 
 Hope someone can tell me obout, wherte to find and how to correct that missing
 things on "Air"
 
 bye
 Hans Schneidhofer

Hello Hans,

kdf you will find at kde-download website as targz file; missing documentation
seems to be a problem within mandrake, perhabs you should understand that up to
mandrake 6.1(and 6.5) it has been an improved version derived from RedHat;
Mandrake 7.0-2 is most their own work, so I believe alot has to be improved but
for me it is still the best distribution I have tested (I have seen alot). I
guess they will improve their product very fast. If you are in need of any fast
help have a look to the cooker site, which you can find on the mandrake
website!!!

regards

Burkhard Zombronner



[expert] Is sendmail able to do source adress routing?

2000-04-24 Thread Alexander Feigl

Hi!

Does anybody know whether sendmail can do mailer routing depending of the
source address. I'd need this because I want to forward mails from my local
dial-up network to the correct mail servers. Each mail server does only accept
mail for his domain.  I use fetchmail to get mail and sendmail to send mail.

Example : foo.com (free mail service) only accepts emails with source address
@foo.com , bar.com only accepts emails from bar.com. Sendmail should send all
mails from @foo.com to foo.com's server, all mails from @bar.com to bar.com's
server.

Is this possible

Alexander



[expert] Hydrogen new release?

2000-04-24 Thread Asheesh Laroia

I was surfing my local linux-mandrake mirror and I found a directory
called "hydrogen", up there in the root with "7.0" and "iso".

Anyone know what it means?  Does it mean Mandrake's releasing something
new and special once again?

Thanks in advance.

Sincerely,

Asheesh Laroia.

-- 
BASIC is the Computer Science equivalent of `Creationism'.
--
And Visual Basic is the equivalent of `Scientific Creationism'.




Re: [expert] Is sendmail able to do source adress routing?

2000-04-24 Thread Asheesh Laroia

Hmm.  Wouldn't it just be easier to use that very sendmail daemon to send
directly to people?

For example,

From: [EMAIL PROTECTED]
To:   [EMAIL PROTECTED]
Subject: I love using sendmail (nt)

would just be sent by sendmail itself to server.com directly, with no need
for a different SMTP server.

Wouldn't that solve your problems?


 Hi!
 
 Does anybody know whether sendmail can do mailer routing depending of the
 source address. I'd need this because I want to forward mails from my local
 dial-up network to the correct mail servers. Each mail server does only accept
 mail for his domain.  I use fetchmail to get mail and sendmail to send mail.
 
 Example : foo.com (free mail service) only accepts emails with source address
 @foo.com , bar.com only accepts emails from bar.com. Sendmail should send all
 mails from @foo.com to foo.com's server, all mails from @bar.com to bar.com's
 server.
 
 Is this possible[?]

Probably, but it's also silly (see above).

Sincerely,

Asheesh Laroia.


-- 
Q: How many Microsoft support staff does it take to change a light bulb?
A: Four. One to ask "What is the registration number of the light bulb?", one
   to ask "Have you tried rebooting it?", another to ask "Have you tried
   reinstalling it?" and the last one to say "It must be your hardware because
   the light bulb in our office works fine..."




Re: [expert] txt_boot.img, txt_bootnet.img

2000-04-24 Thread vern

I love your sig. !!
And, the request for the text install with no mouse was
really "hard-core" for this "greenhorn"
Vern


 Sincerely,
 
 Asheesh Laroia.
 
 --
 Real programmers disdain structured programming.  Structured programming is
 for compulsive neurotics who were prematurely toilet- trained.  They wear
 neckties and carefully line up pencils on otherwise clear desks.




Re: [expert] I've been hacked!

2000-04-24 Thread Rial Juan


I don't have /sbin/dump; /sbin/restore and /usr/bin/sperl5.6.0 installed. Other
than that, all files in the following list are suid.

 Subject: *** Diff Check, Thu Apr 20 00:02:50 EDT 2000 ***
 Security Warning: Change in Suid Root files found :
   - Added suid root files : /bin/mount
   - Added suid root files : /bin/ping
   - Added suid root files : /bin/su
   - Added suid root files : /bin/umount
   - Added suid root files : /sbin/dump
   - Added suid root files : /sbin/pwdb_chkpwd
   - Added suid root files : /sbin/restore
   - Added suid root files : /usr/X11R6/bin/Xwrapper
   - Added suid root files : /usr/bin/at
   - Added suid root files : /usr/bin/chage
   - Added suid root files : /usr/bin/chfn
   - Added suid root files : /usr/bin/chsh
   - Added suid root files : /usr/bin/crontab
   - Added suid root files : /usr/bin/dos
   - Added suid root files : /usr/bin/gpasswd
   - Added suid root files : /usr/bin/lpq
   - Added suid root files : /usr/bin/lpr
   - Added suid root files : /usr/bin/lprm
   - Added suid root files : /usr/bin/newgrp
   - Added suid root files : /usr/bin/passwd
   - Added suid root files : /usr/bin/procmail
   - Added suid root files : /usr/bin/rcp
   - Added suid root files : /usr/bin/rlogin
   - Added suid root files : /usr/bin/rsh
   - Added suid root files : /usr/bin/sperl5.6.0
   - Added suid root files : /usr/bin/suidperl
   - Added suid root files : /usr/bin/urpmi
   - Added suid root files : /usr/lib/telnetd/login
   - Added suid root files : /usr/libexec/pt_chown
   - Added suid root files : /usr/sbin/sendmail
   - Added suid root files : /usr/sbin/traceroute
   - Added suid root files : /usr/sbin/userhelper
   - Added suid root files : /usr/sbin/usernetctl
 

Yup, group suid also.

 Security Warning: Changes in Suid Group files found :
   - Added suid group files : /usr/sbin/sendmail
 

Nothing to worry about; world writable files in /tmp/ are pretty common. They're
temp files anyway, so probably by the time you read the security check mail, the
file doesn't exist anymore.

 Security Warning: Change in World Writeable Files found :
   - Removed writables files : /tmp/fileUcAjVM
 

Ok, I don't know why the hell this file would change checksum. Perhaps you
reinstalled or perhaps the old checksum got corrupted.

 Security Warning: the md5 checksum for one of your SUID files has changed,
   maybe an intruder modified one of these suid binary in order to put in a
 backdoor...
   - Checksum changed files : /usr/bin/suidperl
 

I don't know which ports do what, but I always get this kind of crap also, so I
don't really believe it's much to worry about. I just deleted my own security
check mails, so I can't compare. And I don't really feel like running it right
now since it takes ages on this nearly full harddrive of mine... If it really
bothers you, I'll run the security check and send you the results.

 Security Warning: There is modifications for port listening on your machine :
   -  Opened ports : tcp0  0 *:6000  *:*
 LISTEN  658/X
   -  Opened ports : tcp0  0 *:1024  *:*
 LISTEN  651/kdm
   -  Opened ports : tcp0  0 *:1 *:*
 LISTEN  586/perl
   -  Opened ports : tcp0  0 *:www   *:*
 LISTEN  520/httpd
   -  Opened ports : udp0  0 *:xdmcp *:*
 651/kdm
   -  Opened ports : udp0  0 *:1 *:*
 586/perl
   - Closed ports  : tcp0  0 *:www   *:*
 LISTEN  3244/httpd
   - Closed ports  : tcp0  0 *:1 *:*
 LISTEN  1996/perl
   - Closed ports  : tcp0  0 *:6000  *:*
 LISTEN  660/X
   - Closed ports  : tcp0  0 *:1024  *:*
 LISTEN  653/kdm
   - Closed ports  : udp0  0 *:1 *:*

Ok, this is strange... Perl listening on a port, or how do I interpret this? Add
this to the fact that suidperl has changed md5 checksum, and here's a
possibillity of something that isn't quite the way it should be...

 1996/perl
   - Closed ports  : udp0  0 *:xdmcp *:*
 653/kdm
 
 ...I've been hacked! The questions, now, are: 1. How do I fix this? and 2. How
 to I prevent it from happening again?

Well, I don't think you've been hacked, but I can't completely rule 

[expert] disk maintenance

2000-04-24 Thread Arild Sunde

Hi,

Does anyone know how to maintain a fat-partition under Linux? 
Preferably diskcheck and defragging.

Thanks

Greetings from,

Arild Sunde





Re: [expert] Bastille w/ LM 7.0

2000-04-24 Thread Daniel Woods


 Has anyone used the Bastille scripts on top of a LM 7.0
 system?  Is it even necessary, if you use msec to set the
 security level to '5'?  This is for a system that will be
 used as a firewall/router/DHCP/DNS/mail/news server.

I was on their site today :)   They state that they support
RedHat 6.0/6.1 at the moment with Mandrake support on the
way.  In the README they state that you must run their script
IMMEDIATELY after an install and ONLY for these supported
systems... so I have not tried it yet.

If you want Bastille to lock up (secure) your LM7.0, then
you should probably wait for Bastille support.

Thanks... Dan.



Re: [expert] lost bootup disk, recover ?

2000-04-24 Thread Daniel Woods


 Ted Wager wrote:
  On Fri, 21 Apr 2000, Civileme wrote:
   Well, try downloading tomsrtbt and making a boot floppy to boot his
   linux, then
  
   # chroot  /dev/hdb1
   # mkbootdisk  --2.2.13-7mdk
  
   Civileme
 
  I downloaded the latest tomsrtbt..
  A chroot  to any of my 3 linux partitions tells me..
  chroot
  usage chroot directory program [arg]
  Also if I try to mount any of the linux parttitions I get
  couldn't mount because of unsupported optional features
  mount: wrong fs type bad option etc.
  Wonder if anyone can tell me what is wrong...I have used tomsrtbt in the past
  but this is the latest version.Is it my machine or the tomsrtbt disk ??
 Regards Ted

 Ted.tomsrtbt is in need of a kernal update to support the
 ext2 filesystems created by the newest distros.  He has said
 that he is working on it but with the recent birth of a new baby
 daughter in March his time has been severely limited.  
 
 In the interim, you should be able to use your boot floppy that
 you created during installation and a rescue.img (copied onto a
 floppy from your installation cd with rawrite.exe in dos) floppy
 as a pair to do the same thing Civileme suggested.  Boot with
 the boot floppy and at the boot: prompt type rescue and insert
 the rescue.img floppy.  Then follow Civileme's instructions.
 Alan

[I was the originator of this thread]
I also tried what Civileme suggested without success, as pointed out
by Ted.  I tried all sorts of variations and always got complaints.
Any other way around this ?

Since I could not get 'chroot' working, 'mkbootdisk' was not possible.
I managed to mount /dev/hdb1 /mnt" and then proceeded to copy all
files in /boot onto a floppy and use that for bootup.  

With tomsrtbt, is there a way to find out which are Linux partitions
on the drive(s) ?  I mean without guessing by trying to mount each
of the /dev/hd[ab][1-9] disk devices.

Thanks... Dan.



Re: [expert] cdrecord CD-RW problems

2000-04-24 Thread Larry Sword

"S. Newhouse" wrote:

 Hello,
  I am using Mandrake-7.02.

 I am trying to use cdrecord to write on an ide CD-RW drive.
 I can write to CD-R just fine, but it doesn't work with any CD-RW
 media.

 I have no problems with real scsi drives.

 I downloaded the new cdrecord  src for RedHat, recompiled and it does
 not help.

 Here is what I get.  Any ideas would be appreciated.

 P.S. I hope no one worries that I was attempting to write
  RH-6.2!

 -cheers,
  -sen

 My system:

 Linux version 2.2.14-15mdk ([EMAIL PROTECTED]) (gcc version
 2.95.2 19991024 (release)) #1 Tue Jan 4 22:24:20 CET 2000

 cdrecord -scanbus
 Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
 Using libscg version 'schily-0.1'
 scsibus0:
 0,0,0 0) 'IDE-CD  ' 'R/RW 4x4x24 ' 'Z023' Removable CD-ROM
 0,1,0 1) *
 0,2,0 2) *
 0,3,0 3) *
 0,4,0 4) *
 0,5,0 5) *
 0,6,0 6) *
 0,7,0 7) *

 It writes in dummy mode just fine (I think).

 cdrecord -v speed=4 dev=0,0 zoot-i386.iso -dummy
 cdrecord: Badly placed option. Global options must be before any track.
 [root@chaos RedHat-6.2]# cdrecord -v speed=4 dev=0,0 -dummy zoot-i386.iso
 Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
 TOC Type: 1 = CD-ROM
 scsidev: '0,0'
 scsibus: 0 target: 0 lun: 0
 Using libscg version 'schily-0.1'
 atapi: 1
 Device type: Removable CD-ROM
 Version: 0
 Response Format: 1
 Vendor_info: 'IDE-CD  '
 Identifikation : 'R/RW 4x4x24 '
 Revision   : 'Z023'
 Device seems to be: Generic mmc CD-RW.
 Using generic SCSI-3/mmc CD-R driver (mmc_cdr).
 Driver flags   : SWABAUDIO
 Drive buf size : 1572864 = 1536 KB
 FIFO size  : 4194304 = 4096 KB
 Track 01: data  640 MB
 Total size: 735 MB (72:54.25) = 328069 sectors
 Lout start: 736 MB (72:56/19) = 328069 sectors
 Current Secsize: 2048
 ATIP info from disk:
   Indicated writing power: 5
   Reference speed: 2
   Is unrestricted
   Is erasable
   ATIP start of lead in:  -11625 (97:27/00)
   ATIP start of lead out: 336781 (74:52/31)
   speed low: 0 speed high: 4
   power mult factor: 4 6
   recommended erase/write power: 3
   A2 values: 5A C8 06
 Disk type: phase change
 Manuf. index: 81
 Manufacturer: ILLEGAL: Old Ritek Co.???
 Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
 Starting to write CD/DVD at speed 4 in dummy mode for single session.
 Last chance to quit, starting dummy write in 1 seconds.
 Waiting for reader process to fill input buffer ... input buffer ready.
 Starting new track at sector: 0
 Track 01: data  640 MB
 Total size: 735 MB (72:54.25) = 328069 sectors
 Lout start: 736 MB (72:56/19) = 328069 sectors
 Current Secsize: 2048
 ATIP info from disk:
   Indicated writing power: 5
   Reference speed: 2
   Is unrestricted
   Is erasable
   ATIP start of lead in:  -11625 (97:27/00)
   ATIP start of lead out: 336781 (74:52/31)
   speed low: 0 speed high: 4
   power mult factor: 4 6
   recommended erase/write power: 3
   A2 values: 5A C8 06
 Disk type: phase change
 Manuf. index: 81
 Manufacturer: ILLEGAL: Old Ritek Co.???
 Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
 Starting to write CD/DVD at speed 4 in dummy mode for single session.
 Last chance to quit, starting dummy write in 1 seconds.
 Waiting for reader process to fill input buffer ... input buffer ready.
 Starting new track at sector: 0
 Track 01: 640 of 640 MB written (fifo 100%).
 Track 01: Total bytes read/written: 671881216/671881216 (328067 sectors).
 Writing  time: 1101.589s
 Fixating...
 WARNING: Some drives don't like fixation in dummy mode.
 Fixating time:   64.404s
 cdrecord: fifo had 20505 puts and 20505 gets.
 cdrecord: fifo was 0 times empty and 18649 times full, min fill was 90%.

 Now, without the dummy mode:

 cdrecord -v speed=4 dev=0,0 zoot-i386.iso
 Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
 TOC Type: 1 = CD-ROM
 scsidev: '0,0'
 scsibus: 0 target: 0 lun: 0
 Using libscg version 'schily-0.1'
 atapi: 1
 Device type: Removable CD-ROM
 Version: 0
 Response Format: 1
 Vendor_info: 'IDE-CD  '
 Identifikation : 'R/RW 4x4x24 '
 Revision   : 'Z023'
 Device seems to be: Generic mmc CD-RW.
 Using generic SCSI-3/mmc CD-R driver (mmc_cdr).
 Driver flags   : SWABAUDIO
 Drive buf size : 1572864 = 1536 KB
 FIFO size  : 4194304 = 4096 KB
 Track 01: data  640 MB
 Total size: 735 MB (72:54.25) = 328069 sectors
 Lout start: 736 MB (72:56/19) = 328069 sectors
 Current Secsize: 2048
 ATIP info from disk:
   Indicated writing power: 5
   Reference speed: 2
   Is unrestricted
   Is erasable
   ATIP start of lead in:  -11625 (97:27/00)
   ATIP start of lead out: 336781 (74:52/31)
   speed low: 0 speed high: 4
   power mult factor: 4 6
   recommended erase/write power: 3
   A2 values: 5A C8 06
 Disk type: phase change
 Manuf. index: 81
 Manufacturer: ILLEGAL: 

[expert] ntp info - Thanks

2000-04-24 Thread ken crist

Thanks for your assistance.  I have several options now.  I installed
rdate and found that I already had hwclock on the computer.

For Ron Stodden:
When I run ntpdate FQDN , it returns the time but says "the NTP socket
in use, exiting" and does not update the computer clock.

For Gary Bunker:
I discovered I have the xntp package on the Mandrake CD and am going to
uninstall the ntp package, install xntp and give it a test drive.  Most
of the files appear to be the same.  I believe I have the permissions
correct.  ntp is running as root.

For Civileme:
I will add the lines you suggested to rc.local for boot up and am going
to swap ntp for xntp just to see if it functions.  I may just run the
rc.local file now and then the way you do to keep the time right.  I
don't restart the computer very often.  I am only interested in the
clock being pretty good - doesn't have to be perfect.

For Matt Stedman:
Your suggestion (and Civileme's) work great.  In one way or another I
will be using this approach.  I'm going to set up the cron job for the
fun of it.

For Russ Johnson:
My clock was off about 8 minutes when I started trying to adjust it with
LinuxConfig.  I got to within 10 or so seconds after messing around with
it for a while and decided that there must be some better way to get it
set properly.

Again, thanks to all for your helpful responses.

Ken



RE: [expert] DIsk Caching

2000-04-24 Thread Bill Shirley

What is the benifit of UNUSED RAM??  RAM used for cache can be cashed in
(pun intended).  It will be flushed and used for programs, data, buffers,
etc. when needed by the kernel.

Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Necrotica
Sent: Monday, April 24, 2000 8:07 AM
To: [EMAIL PROTECTED]
Subject: [expert] DIsk Caching


Hello,

In Mandrake, is there a way where I can control the amount of memory being
used as a disk cache? I've noticed that sometimes Mandrake is using almost
100MB of physcial RAM as a disk cache, especially after doing something
intensive such as compiling an application. Unfortunately it doesn't seem to
shrink

I have 256MB of physcial RAM in my box. I would *think* that having a
maximum
of a 64MB disk cache would suffice. Any thoughts? Thanks...

-Chris




Re: [expert] cdrecord CD-RW problems

2000-04-24 Thread Civileme

Ummm--don't you have to blank CDRWs before writing to them?

Civileme


On Mon, 24 Apr 2000, you wrote:
 Hello,
  I am using Mandrake-7.02.  
 
 I am trying to use cdrecord to write on an ide CD-RW drive.  
 I can write to CD-R just fine, but it doesn't work with any CD-RW
 media.
 
 I have no problems with real scsi drives.
 
 I downloaded the new cdrecord  src for RedHat, recompiled and it does
 not help.  
 
 Here is what I get.  Any ideas would be appreciated.
 
 P.S. I hope no one worries that I was attempting to write
  RH-6.2!
 
 -cheers,
  -sen
 
 My system:
 
 Linux version 2.2.14-15mdk ([EMAIL PROTECTED]) (gcc version
 2.95.2 19991024 (release)) #1 Tue Jan 4 22:24:20 CET 2000
 
 cdrecord -scanbus
 Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
 Using libscg version 'schily-0.1'
 scsibus0:
 0,0,0 0) 'IDE-CD  ' 'R/RW 4x4x24 ' 'Z023' Removable CD-ROM
 0,1,0 1) *
 0,2,0 2) *
 0,3,0 3) *
 0,4,0 4) *
 0,5,0 5) *
 0,6,0 6) *
 0,7,0 7) *
 
 It writes in dummy mode just fine (I think).
 
 
 
 cdrecord -v speed=4 dev=0,0 zoot-i386.iso -dummy
 cdrecord: Badly placed option. Global options must be before any track.
 [root@chaos RedHat-6.2]# cdrecord -v speed=4 dev=0,0 -dummy zoot-i386.iso 
 Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
 TOC Type: 1 = CD-ROM
 scsidev: '0,0'
 scsibus: 0 target: 0 lun: 0
 Using libscg version 'schily-0.1'
 atapi: 1
 Device type: Removable CD-ROM
 Version: 0
 Response Format: 1
 Vendor_info: 'IDE-CD  '
 Identifikation : 'R/RW 4x4x24 '
 Revision   : 'Z023'
 Device seems to be: Generic mmc CD-RW.
 Using generic SCSI-3/mmc CD-R driver (mmc_cdr).
 Driver flags   : SWABAUDIO
 Drive buf size : 1572864 = 1536 KB
 FIFO size  : 4194304 = 4096 KB
 Track 01: data  640 MB
 Total size: 735 MB (72:54.25) = 328069 sectors
 Lout start: 736 MB (72:56/19) = 328069 sectors
 Current Secsize: 2048
 ATIP info from disk:
   Indicated writing power: 5
   Reference speed: 2
   Is unrestricted
   Is erasable
   ATIP start of lead in:  -11625 (97:27/00)
   ATIP start of lead out: 336781 (74:52/31)
   speed low: 0 speed high: 4
   power mult factor: 4 6
   recommended erase/write power: 3
   A2 values: 5A C8 06
 Disk type: phase change
 Manuf. index: 81
 Manufacturer: ILLEGAL: Old Ritek Co.???
 Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
 Starting to write CD/DVD at speed 4 in dummy mode for single session.
 Last chance to quit, starting dummy write in 1 seconds.
 Waiting for reader process to fill input buffer ... input buffer ready.
 Starting new track at sector: 0
 Track 01: data  640 MB
 Total size: 735 MB (72:54.25) = 328069 sectors
 Lout start: 736 MB (72:56/19) = 328069 sectors
 Current Secsize: 2048
 ATIP info from disk:
   Indicated writing power: 5
   Reference speed: 2
   Is unrestricted
   Is erasable
   ATIP start of lead in:  -11625 (97:27/00)
   ATIP start of lead out: 336781 (74:52/31)
   speed low: 0 speed high: 4
   power mult factor: 4 6
   recommended erase/write power: 3
   A2 values: 5A C8 06
 Disk type: phase change
 Manuf. index: 81
 Manufacturer: ILLEGAL: Old Ritek Co.???
 Blocks total: 336781 Blocks current: 336781 Blocks remaining: 8712
 Starting to write CD/DVD at speed 4 in dummy mode for single session.
 Last chance to quit, starting dummy write in 1 seconds.
 Waiting for reader process to fill input buffer ... input buffer ready.
 Starting new track at sector: 0
 Track 01: 640 of 640 MB written (fifo 100%).
 Track 01: Total bytes read/written: 671881216/671881216 (328067 sectors).
 Writing  time: 1101.589s
 Fixating...
 WARNING: Some drives don't like fixation in dummy mode.
 Fixating time:   64.404s
 cdrecord: fifo had 20505 puts and 20505 gets.
 cdrecord: fifo was 0 times empty and 18649 times full, min fill was 90%.
 
 Now, without the dummy mode:
 
 cdrecord -v speed=4 dev=0,0 zoot-i386.iso 
 Cdrecord 1.8.1a09 (i686-pc-linux-gnu) Copyright (C) 1995-2000 Jörg Schilling
 TOC Type: 1 = CD-ROM
 scsidev: '0,0'
 scsibus: 0 target: 0 lun: 0
 Using libscg version 'schily-0.1'
 atapi: 1
 Device type: Removable CD-ROM
 Version: 0
 Response Format: 1
 Vendor_info: 'IDE-CD  '
 Identifikation : 'R/RW 4x4x24 '
 Revision   : 'Z023'
 Device seems to be: Generic mmc CD-RW.
 Using generic SCSI-3/mmc CD-R driver (mmc_cdr).
 Driver flags   : SWABAUDIO
 Drive buf size : 1572864 = 1536 KB
 FIFO size  : 4194304 = 4096 KB
 Track 01: data  640 MB
 Total size: 735 MB (72:54.25) = 328069 sectors
 Lout start: 736 MB (72:56/19) = 328069 sectors
 Current Secsize: 2048
 ATIP info from disk:
   Indicated writing power: 5
   Reference speed: 2
   Is unrestricted
   Is erasable
   ATIP start of lead in:  -11625 (97:27/00)
   ATIP start of lead out: 336781 (74:52/31)
   speed low: 0 speed high: 4
   power mult factor: 

RE: [expert] Two Directories on Same Partition?

2000-04-24 Thread Bill Shirley

AFAIK, fstab is in the /etc directory and can't be accessed to find the
mount point for /etc .

Can you pass the kernel the partition name for /etc at boot time like you
can for / ??
If so, then:

mkdir /etc/usr
ln -s /etc/usr /usr

Hope this helps,

Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Lane Lester
Sent: Monday, April 24, 2000 8:45 AM
To: Experts
Subject: [expert] Two Directories on Same Partition?


If you're an expert you'll probably think this is a newbie question.
g. I've looked at a bunch of man pages, howtos, and Web sites without
finding the answer... which may be the answer!

Can you put two "low-level" directories in the same partition? For
example, can I have / in one partition and both /etc and /usr in one
separate partition?  If so, what goes in fstab?
--
Lane

Lane Lester / Madison County, Georgia USA
Using Linux to get where I want to go...





Re: [expert] lost bootup disk, recover ?

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
 
 Since I could not get 'chroot' working, 'mkbootdisk' was not possible.

Sure it is...it's just a bit more difficult. :-) You just
have to recall when doing it to preface all paths with
"/mnt/hdb1" as in "mkbootdisk
/mnt/hdb1/boot/vmlinux-some-version" *should* have
worked :-)
John



Re: [expert] Is sendmail able to do source adress routing?

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
 Hmm.  Wouldn't it just be easier to use that very sendmail daemon to send
 directly to people?
 
 For example,
 
 From: [EMAIL PROTECTED]
 To:   [EMAIL PROTECTED]
 Subject: I love using sendmail (nt)
 
 would just be sent by sendmail itself to server.com directly, with no need
 for a different SMTP server.
 
 Wouldn't that solve your problems?
 
Hmm...well, the problem here is that, unless a particular
server can do a reverse lookup on the system trying to drop
off mail, it MIGHT not accept the mail What with the
problems of SPAM these days, most folks are running
"closed" mail servers -- i.e. if your IP address ain't
"known" to me, I don't accept mail from you!
John



Re: [expert] Fwd: [UKLUG] Wow, an actual constructive use for IRC!

2000-04-24 Thread Monte Milanuk

Yep, it's a mandrake list, and I have been using RH or an rpm based
system since RH 4.2.  I had previously used Slackware, and wow!, what an
improvement!  I tried out Debian and it's derivatives Corel and Storm a
month or so ago and ended up coming back to Mandrake for the speed
optimizations and package availability.  I don't have the bandwidth
currently to make an 'apt get dist upgrade' a feasible option (something
like a 25 hour download at 1.6-2.2K/s).  But I really wish someone would
invent some way to get the features of the *.deb packages and apt
package manager using rpm's.  Namely the ability to intelligently
determine what dependencies are needed and retrieve and install them
also (I've heard rumors that urpmi or grpmi can do this ?), and the
ability to upgrade from the current CD to the latest bleeding edge
(Cooker) w/ one command (o.k., I'd settle for two ;) ) , and most
importantly of all, i.e. I don't give a rat's behind about the others as
long as I get this one: The package system is intelligent to not screw
w/ your config files.  Upgrading/updating the system to the latest
features, or just for security fixes, doesn't require hunting down your
config files, backing them up, hoping you got them all, and then
effectively doing a Hail Mary as you upgrade and hope you come out of it
w/ a functional system.

If there is a funtional way of doing using rpm, short of many hours
parsing man pages and tinkering w/ scripts, let me know.  Why do I
object to putzing around w/ the scripts?  'Cause I like to _use_ my
system now and again, not endlessly play w/ the settings just cause I
can.

Thanks for your time,

Monte

Marcos Dione wrote:
 
 On Sun, 23 Apr 2000, vern wrote:
 
  Check it outfire up an IRC client and head to irc.debian.org
  channel #debian. Then you can do an "apt: ipmasq" to have the channel
  bot give you info on what ipmasq is and where to find docs. That's really
  cool! It works for most packages.
 
 ok, it's VERY useful... if and only if you have DEBIAN... ur... is
 this the mandrake list?
 
 --
 "No tire sus colillas en el mingitorio, las humedece y
 las hace dificil de encender"
 "Do not dump butts in the wc. They dampen and it makes
 them difficult to light."
   --Tom Sharpe, "Wilt on high"

__
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com




Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread Ron Johnson

Thank you.

Lane Lester wrote:
 
[snip]
 
 Additions to /etc/fstab:
 /dev/sda /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0
 /dev/sr0 /mnt/cdrom iso9660 user,noauto,suid,exec,dev,ro 0 1
 (former entries for zip and cdrom removed)

Question, though: why is /dev/sr0 mounted ro, even though it
is a CD-RW?

Sincerely,
Ron
-- 
+--+
| Ron Johnson, Jr.Home: [EMAIL PROTECTED]   |
| Jefferson, LA  USA  WWW : [EMAIL PROTECTED] |
|  |
| Most overused words: feel, cool/kewl, fun, myBlah.com|
| Most underused word: think   |
+--+



[expert] Epson printer cutting off

2000-04-24 Thread Hawk82



Hey all!!

I have an Epson Sylus Color 600.

I set Linux up using DiskDrake and printer 
configuration using the Epson 600 printer setting.
The problem is that Epson printers have a feature 
to Maximize the printable area.
The printer's default (at least in Windows) is to 
have it on Maximized.
This causes the bottom of pages to be cut off and 
print the extra cutoff space on a new sheet - 3 lines on the new 
sheet.

Thanx for any help.

Josh



[expert] HP DeskJet 972Cse

2000-04-24 Thread Asheesh Laroia

Do any of you have the Hewlett-Packard DeskJet 972Cse printer?  It is an
excellent printer (I know; I have one).

I have one connected to a windows machine called 'HAL'.  I use SMB
printing through Samba to let my computer print to it on the local area
network (LAN!).  Unfortunately, I can only seem to print text.  And I have
to set that annoying CR-CRLF feature.

Has anyone had any luck using a 972Cse (either remotely or locally) to
print?  At all?  If so, please tell me!

Thanks again to everyone on this list.  Groups like this one are the true
power of Linux; with advances come complexity, but there are always
helpful users waiting to spread their beloved system.  Linux rocks, and
don't allow anyone to make you think otherwise.

Sincerely,

Asheesh Laroia.

-- 
The geographical center of Boston is in Roxbury.  Due north of the
center we find the South End.  This is not to be confused with South
Boston which lies directly east from the South End.  North of the South
End is East Boston and southwest of East Boston is the North End.
--
Of course...




Re: [expert] Bastille w/ LM 7.0

2000-04-24 Thread Bruce E. Harris

I have contacted Bastille via email awhile ago and was told support for
Mandrake 7 was on its way.

Bruce


On Mon, 24 Apr 2000, you wrote:
  Has anyone used the Bastille scripts on top of a LM 7.0
  system?  Is it even necessary, if you use msec to set the
  security level to '5'?  This is for a system that will be
  used as a firewall/router/DHCP/DNS/mail/news server.
 
 I was on their site today :)   They state that they support
 RedHat 6.0/6.1 at the moment with Mandrake support on the
 way.  In the README they state that you must run their script
 IMMEDIATELY after an install and ONLY for these supported
 systems... so I have not tried it yet.
 
 If you want Bastille to lock up (secure) your LM7.0, then
 you should probably wait for Bastille support.
 
 Thanks... Dan.
-- 
Best Regards, Bruce

Father to Bruce, Maverick  Aleister 1 Feb 2000
"I'm a man, I can change, if I have to, I guess" Men Anonymous
(from "The New Red Green Show")

My website
http://harrisherd.ahv.cx
or
http://207.167.130.166





Re: [expert] Fwd: [UKLUG] Wow, an actual constructive use for IRC!

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
I don't have the bandwidth
 currently to make an 'apt get dist upgrade' a feasible option (something
 like a 25 hour download at 1.6-2.2K/s).  But I really wish someone would
 invent some way to get the features of the *.deb packages and apt
 package manager using rpm's.  Namely the ability to intelligently
 determine what dependencies are needed and retrieve and install them
 also (I've heard rumors that urpmi or grpmi can do this ?)

Confession: I'm no longer using Mandrake. The bug reports
just were too much for me. However, I'm still following the
progress of Mandrake and hope my next installation will BE
Mandrake 7.5 or 8.

Now, as to your requests for automagic dependency checking
and installation: I'm told that RPM Drake does a MARVELOUS
job of taking care of that for you have you tried it?
John



Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread John Aldrich

On Mon, 24 Apr 2000, you wrote:
  Additions to /etc/fstab:
  /dev/sda /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0
  /dev/sr0 /mnt/cdrom iso9660 user,noauto,suid,exec,dev,ro 0 1
  (former entries for zip and cdrom removed)
 
 Question, though: why is /dev/sr0 mounted ro, even though it
 is a CD-RW?
 
Simple: When you MOUNT the CDRW drive, you're treating it
as a standard CDROM. You don't mount a CDRW drive when
burning a CD. :-)
John



Re[2]: [expert] I've been hacked!

2000-04-24 Thread Wang Jian

Actually, I suspect it is just a fuss :-)

Security check is scheduled to run in localtime 24:00 or say 00:00, so
if you are lazy and usually sleep early and shutdown the machine when
you sleep like a babe pig, you have no chance to have it run. And now,
by chances, you sleep a little late and security check is run, you get
this warning.

As I said again and again, use rpm -Va , rpm -qf, rpm -V to check the
packages, and then make decision, or you will be reinstalling your
system every day :-)

Tuesday, April 25, 2000, 1:23:41 AM, you wrote:

AV On Mon, 24 Apr 2000 08:08:42 -0700, you wrote:

AV Imagine how I'm feeling! 

AV I'm going to do a complete reinstall of the system when I get a bit of free
AV time...

AV The folks in this group have been TREMENDOUSLY valuable through this
AV process; thanks!



-- 
  lark





Re: [expert] Fwd: [UKLUG] Wow, an actual constructive use for IRC!

2000-04-24 Thread Warren Doney

You can point RPMdrake at an ftp site  it will check/get the Package
deps

-WBD


If there is a funtional way of doing using rpm, short of many hours
parsing man pages and tinkering w/ scripts, let me know.  Why do I
object to putzing around w/ the scripts?  'Cause I like to _use_ my
system now and again, not endlessly play w/ the settings just cause I
can.



Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread Ron Johnson

John Aldrich wrote:
 
 On Mon, 24 Apr 2000, you wrote:
   Additions to /etc/fstab:
   /dev/sda /mnt/zip vfat exec,user,noauto,rw,suid,dev 0 0
   /dev/sr0 /mnt/cdrom iso9660 user,noauto,suid,exec,dev,ro 0 1
   (former entries for zip and cdrom removed)
 
  Question, though: why is /dev/sr0 mounted ro, even though it
  is a CD-RW?
 
 Simple: When you MOUNT the CDRW drive, you're treating it
 as a standard CDROM. You don't mount a CDRW drive when
 burning a CD. :-)
 John
oh, ok...  Next question:  why *don't* you mount a CDRW when
burning a disk?  Is it because it is not yet formatted?  Just
like when u must mkext2 before you mount?

Ron
-- 
+--+
| Ron Johnson, Jr.Home: [EMAIL PROTECTED]   |
| Jefferson, LA  USA  WWW : [EMAIL PROTECTED] |
|  |
| Most overused words: feel, cool/kewl, fun, myBlah.com|
| Most underused word: think   |
+--+



Re: [expert] I've been hacked!

2000-04-24 Thread Russ Johnson

Well, take a good look too, as I was wrong about the three files I specifically
mentioned.

I'd still recommend tripwire (free version available at www.tripwire.com) to check for
changes on important files.

Russ

Andrew Vogel wrote:

 On Mon, 24 Apr 2000 08:08:42 -0700, you wrote:

 Ron, re-read the message. It specifically says that file the shouldn't be suid
 have been changed to suid since the last scan.
 
 For instance, mount, su, and umount should never be suid. They aren't installed
 that way, so "something" had to change them.
 
 Even if it wasn't a hack job, there are many security holes here. I wouldn't want
 to have that system anywhere near a public network until it's fixed.
 
 Imagine how I'm feeling!

 I'm going to do a complete reinstall of the system when I get a bit of free
 time...

 The folks in this group have been TREMENDOUSLY valuable through this
 process; thanks!

 ---
 ===
 Andrew Vogel: Program Manager at the University of Cincinnati College of
 Pharmacy.   http://pharmacy.uc.edu/default.html  (513)-558-3784
 ===




[expert] DirecPC drivers

2000-04-24 Thread Hawk82

I used to know that www.Helius.com used to make Linux drivers for download.
I was wondering if anyone knows where I can get some because I can't seem to
find the drivers for it on Helius' web site.

Hughes says they have no interest in making drivers for other OSs like Macs
or Windows 2000? or Linux.

I don't care because it is not a vital piece of hardware, but it would be
nice to have working.

Josh




Re: [expert] Internet problems

2000-04-24 Thread Tom H

ok
 I am also able to hit all the sites from the Linux Box. It seems to me
the sites I am trying to hit are either trying to place cookies or get some
type of communication back They are just not getting out communication from
the Microsoft box. Or it seems there is a drop in packets somewhere. I guess
it would have to be about somewhere in either the session or transport
layer. I am thinking there is no pass through with the protocol. More then
likely it is trying to pass some type of communication and not getting a
return reply.

It will go as far as web site found then just hang for days.


- Original Message -
From: "Civileme" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 24, 2000 11:13 AM
Subject: Re: [expert] Internet problems


 I am running IP Masquerade from Mandrake 6.1 on the server and I have 7.0
 boxes behind it.

 From Netscape 4.7
 www.wellsfargo.com was a refused connection
 www.nec.com opened and its links worked

 From Netscape 6
 www.wellsfargo.com opened
 www.nec.com.opened

 I retried www.wellsfargo.com and got intermittent refusals and opens on
both
 browsers--it appears the server was handling all the connections it could.

 OK Tom H, let's see how you are masquerading...  What ipchains did you
issue?

 Civileme


 Tom H wrote:

  Well it is always www.nec.com or www.wellsfargo.com
 
  any of the banking sites. Some parts of Microsoft's sites.
 
  - Original Message -
  From: "Brian T. Schellenberger" [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Sunday, April 23, 2000 8:23 PM
  Subject: Re: [expert] Internet problems
 
  
   Ah dunno.
  
   Perhaps you could cite a specific site?
  
   I have IP Masquerading set up under Linux (Mandrake 7.0) to my cable
   modem, *with* a firewall.  I can see if they work for me.
  
   If some of the sites are "embarressing" feel free to send the URLs to
me
   directly; I'm virtually impossible to offend.
  
   (Well, I dunno.  If it's a pro-movie-industry/anti-decss site or
   something I might get offended . . . )
  
  
  
Tom H wrote:
   
   
I have hooked up my Linux (Red Hat 6.1) to the DSL I am running Ip
Masqurading on the system and it is routing to the internet for the
other 4 systems. The strange thing is I am unable to astablish a
connection to some web sites that use security. I have also noticed
it
has problems with frames. Or various other sites. If I connect it
directly to the 98 or NT machine I can hit them fine with no
problems.
I think it might be a SSL problem but not sure. I have not installed
a
firewall yet. But I have checked all the files for IP Forwarding and
they all seem to be OK. What am I missing.
Tom H
Triumph 595
64 Corvair
65 Corvair
  
   --
   "Brian, the man from babble-on"  [EMAIL PROTECTED]
   Brian T. Schellenberger http://www.babbleon.org
   Support http://www.eff.org.  Support decss defendents.
   Support http://www.programming-freedom.org.  Boycott amazon.com.

 --
 BETA-testing Netscape 6
 and its mailer







Re: [expert] DIsk Caching

2000-04-24 Thread Guillermo Belli

The swap is used for storing data you are not using to free up some RAM when a
program needs it. I don't think you can control how the swap is used, or how
much swap is being used. It depends on what role your machine is playing; is it
a file server? or just a worksation? My system has 96Mb of RAM and with 80Mb of
swap is more tha enough (I've never used more than 50% of it)

Necrotica, escribió:
 Hello,
 
 In Mandrake, is there a way where I can control the amount of memory being
 used as a disk cache? I've noticed that sometimes Mandrake is using almost
 100MB of physcial RAM as a disk cache, especially after doing something
 intensive such as compiling an application. Unfortunately it doesn't seem to
 shrink
 
 I have 256MB of physcial RAM in my box. I would *think* that having a maximum
 of a 64MB disk cache would suffice. Any thoughts? Thanks...
 
 -Chris
-- 

*Guillermo Belli-Linux User #121340*
* ICQ #38321312*
*http://sites.netscape.net/memo81 (en construccion)*




Re: [expert] disk usage

2000-04-24 Thread Guillermo Belli

kwikdisk, kfsstatus

Wizaerd, escribió:
 Is there a graphical utility showing the mapping and file layouts on the
 harddrive as well as disk usage?
 
 thanx
 
 Joseph E. Sheble
 a.k.a. Wizaerd
 Wizaerd's Realm
 Canvas, 3D, Graphics, ColdFusion
 http://www.wizaerd.com
 =
 Zanova, Inc.
 http://www.zanova.com
 Moving Business Forward.
 =
-- 

*Guillermo Belli-Linux User #121340*
* ICQ #38321312*
*http://sites.netscape.net/memo81 (en construccion)*




Re: [expert] I've been hacked!

2000-04-24 Thread Guillermo Belli

I've found a similar emails in my system. It's impossible that someone hacked
into my system, because I connect to the internet via dialup, I don't stay
connected enough time connected for someone to hack in and my internet logins
are at random times during the day. I guess these messages are just routinary,
and are caused by MDK7's new security levels. I think there's no reason to
panic.

Andrew Vogel, escribió:
 I woke up this morning to find this email in my system:
 
 Subject: *** Diff Check, Thu Apr 20 00:02:50 EDT 2000 ***
 Security Warning: Change in Suid Root files found :
   - Added suid root files : /bin/mount
   - Added suid root files : /bin/ping
   - Added suid root files : /bin/su
   - Added suid root files : /bin/umount
   - Added suid root files : /sbin/dump
   - Added suid root files : /sbin/pwdb_chkpwd
   - Added suid root files : /sbin/restore
   - Added suid root files : /usr/X11R6/bin/Xwrapper
   - Added suid root files : /usr/bin/at
   - Added suid root files : /usr/bin/chage
   - Added suid root files : /usr/bin/chfn
   - Added suid root files : /usr/bin/chsh
   - Added suid root files : /usr/bin/crontab
   - Added suid root files : /usr/bin/dos
   - Added suid root files : /usr/bin/gpasswd
   - Added suid root files : /usr/bin/lpq
   - Added suid root files : /usr/bin/lpr
   - Added suid root files : /usr/bin/lprm
   - Added suid root files : /usr/bin/newgrp
   - Added suid root files : /usr/bin/passwd
   - Added suid root files : /usr/bin/procmail
   - Added suid root files : /usr/bin/rcp
   - Added suid root files : /usr/bin/rlogin
   - Added suid root files : /usr/bin/rsh
   - Added suid root files : /usr/bin/sperl5.6.0
   - Added suid root files : /usr/bin/suidperl
   - Added suid root files : /usr/bin/urpmi
   - Added suid root files : /usr/lib/telnetd/login
   - Added suid root files : /usr/libexec/pt_chown
   - Added suid root files : /usr/sbin/sendmail
   - Added suid root files : /usr/sbin/traceroute
   - Added suid root files : /usr/sbin/userhelper
   - Added suid root files : /usr/sbin/usernetctl
 
 Security Warning: Changes in Suid Group files found :
   - Added suid group files : /usr/sbin/sendmail
 
 Security Warning: Change in World Writeable Files found :
   - Removed writables files : /tmp/fileUcAjVM
 
 Security Warning: the md5 checksum for one of your SUID files has changed,
   maybe an intruder modified one of these suid binary in order to put in a
 backdoor...
   - Checksum changed files : /usr/bin/suidperl
 
 Security Warning: There is modifications for port listening on your machine :
   -  Opened ports : tcp0  0 *:6000  *:*
 LISTEN  658/X
   -  Opened ports : tcp0  0 *:1024  *:*
 LISTEN  651/kdm
   -  Opened ports : tcp0  0 *:1 *:*
 LISTEN  586/perl
   -  Opened ports : tcp0  0 *:www   *:*
 LISTEN  520/httpd
   -  Opened ports : udp0  0 *:xdmcp *:*
 651/kdm
   -  Opened ports : udp0  0 *:1 *:*
 586/perl
   - Closed ports  : tcp0  0 *:www   *:*
 LISTEN  3244/httpd
   - Closed ports  : tcp0  0 *:1 *:*
 LISTEN  1996/perl
   - Closed ports  : tcp0  0 *:6000  *:*
 LISTEN  660/X
   - Closed ports  : tcp0  0 *:1024  *:*
 LISTEN  653/kdm
   - Closed ports  : udp0  0 *:1 *:*
 1996/perl
   - Closed ports  : udp0  0 *:xdmcp *:*
 653/kdm
 
 ...I've been hacked! The questions, now, are: 1. How do I fix this? and 2. How
 tto I prevent it from happening again?
 
 ===
 Andrew Vogel: Program Manager at the University of Cincinnati College of
 Pharmacy. Actor, director, dog (JRT) lover, Miata owner,  much, much more!
 My homepage: "http://www.drewvogel.com". Play I-War, FF7PC,  BC3K!
 Offical BC3K Tester.  Linux! "The only way OUT is THROUGH."
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 dug: you da man! you da man!"Drew Vogel is its own reward."
 ric: isn't "the man" the guy who's always bringing everyone down?
 dug: nope! 'cause YOU da man!!  Email: [EMAIL PROTECTED]
 

Re: [expert] lost bootup disk, recover ?

2000-04-24 Thread Ron Stodden

Daniel Woods wrote:

 With tomsrtbt, is there a way to find out which are Linux partitions
 on the drive(s) ?  I mean without guessing by trying to mount each
 of the /dev/hd[ab][1-9] disk devices.

try from the command line:

fdisk -l /dev/hda

-- 

Regards,

Ron. [AU] - sent by Linux.



Re: [expert] some missing files in Air

2000-04-24 Thread Hoyt


- Original Message - 
From: "Civileme" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, April 24, 2000 2:43 PM
Subject: Re: [expert] some missing files in "Air"


 
 As for the kde docs, it may be an error to assume that there are missing docs.
 Documentation is often not carried out by busy programmers and is instead shifted
 to volunteer writers.  And, as the deadline approaches, some of the volunteers
 vanish, so docs often go to electronic and paper publication with pieces missing,
 or with answers not completely researched.  My own experience with kde docs in
 previous distros is that there *are* pieces missing.
 


I offered to help KDE with their docs and was told "get on [a particular] IRC channel 
and ask to help". I don't have any IRC programs installed and have no interest in IRC, 
so no KDE docs.

OTOH, I volunteered to help with the Mandrake docs and have found Camille to be most 
accommodating and a delight to work with.n I'm not a programmer or total bithead, but 
I do feel that I have something to contribute besides the occasional post here.

Hoyt

_
NetZero - Defenders of the Free World
Click here for FREE Internet Access and Email
http://www.netzero.net/download/index.html



Re: [expert] Going Crazy over IDE CD-writer

2000-04-24 Thread Ron Stodden

Ron Johnson wrote:

 Question, though: why is /dev/sr0 mounted ro, even though it
 is a CD-RW?

Because there is NO kernel support (yet?) for writing to CDROM
devices - only reading is supported, hence the r in sr0 (scsi read
zero).

For CD writing software the kernel is bypassed and the cdwriter
software contains its own hardware drivers and interfaces directly to
the CD-R or CD-RW device, which should NOT be mounted at the time.  I
would NOT attempt to concurrently read and write a CD-R or CD-RW.

-- 

Regards,

Ron. [AU] - sent by Linux.