[expert] Why doesn't msec set directory permissions?

2003-07-28 Thread Avi Schwartz
I asked this question on the newbie side but received no replies.  
Maybe it is a question for the experts...

Because the machine in question will end being a server connected 24x7 
to the Internet, I set its security level to higher (4).  However, I 
want to change the privileges for /usr/share/doc to be world browsable 
and readable.  I used drakeperm to set the directory permissions and 
when I look at /etc/security/msec/perm.local I see the following line:

/usr/share/doc/adm.adm755

I then ran msec but when I checked the permissions on the directory I 
still see:

drwxr-x--- 297 admadm

In /var/log/messages I do see that msec is reading the perm.local file.

Any idea why is msec ignoring my permissions?

Thanks,
Avi

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Mandrake Update through MCC and new kernel

2003-07-28 Thread Avi Schwartz
Mandrake should change their kernel installation instructions in the 
latest Security Advisory since they say there:

"To upgrade automatically, use MandrakeUpdate.  If you want to upgrade 
manually, download the updated package(s) from one of our FTP server 
mirrors and upgrade with "rpm -Fvh *.rpm"."

Avi

On Monday, Jul 28, 2003, at 20:00 America/Chicago, David Guntner wrote:

stefmit grabbed a keyboard and wrote:
Three machines running MDK 9.1: one of them prompts me with the 
existence
of a new kernel, the other two don't (via MCC --> Software Management 
-->
Mandrake Update). Is there a setup I may have missed on two machines, 
to
enable kernel updates to show up?
I don't know why it showed up on the one, Mandrake screened kernels 
out of
the Mandrake Update program.  You don't WANT them to show up there,
because then you might be temped to use MU to update a kernel.  At 
which
point, you end up with a *really* big mess on your hands.

Download the kernel manually, then use rpm to install it (-ivh), not
update.  Remember to run lilo (assuming that's what you use for your 
boot
loader) to put the new kernel into the boot sequence.  When you're sure
that the new kernel works, "rpm -e" the old kernel, edit 
/etc/lilo.conf to
take references to the old kernel out and set the new kernel as the
default, run lilo again, and you're done.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Mandrake Update through MCC and new kernel

2003-07-29 Thread Avi Schwartz
On Tuesday, Jul 29, 2003, at 11:22 America/Chicago, Vincent Danen wrote:

On Mon Jul 28, 2003 at 08:22:15PM -0700, Rolf Pedersen wrote:

Regarding the instructions for the kernel upgrade, they include:

'Once you have modified your lilo.conf or menu.lst file, execute "lilo
-v" or "sh /boot/grub/install.sh", again depending upon your 
bootloader.'

I have never re-installed grub (over 3 years) after only modifying
menu.lst and there have been others who have expressed a reservation
about this instruction.  My understanding was that it was not 
necessary
(1) but my understanding might be incomplete, so I would appreciate 
some
clarification here.
I don't use grub, so I can't honestly say.  If someone knows 
definitively,
please let me know.
Grub need not be re-installed when a new kernel is being added to the 
system.  All you may need to do is modify menu.lst and even that seems 
to be unnecessary with Mandrake since the vmlinuz and initrd point to 
the latest kernel and initrd via soft links.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] How to turn off Bootsplash & mdkKDM?

2003-07-31 Thread Avi Schwartz
Try another mirror.  There is a kdebase-kdm-3.1-83.3mdk.i586.rpm 
around.  I had to search few mirrors until I found it (sorry, I don't 
remember where it was).

Avi

On Thursday, Jul 31, 2003, at 17:53 America/Chicago, Felix Miata wrote:

James Sparenberg wrote:

As for turning off mdkkdm.  Go to /etc/sysconfig and edit the file
desktop.  Make it say KDM GDM or XDM and you will again have a fully
functioning Linux box.  Not a "Hi! you are stupid and we know better
than you." box. (No need to remove anything. but... you may need to 
add
kdebase-kdm it doesn't get installed by default gdm and xdm do.)
Cute:

#urpmi kdebase-kdm-3.1-83mdk.i586.rpm
The following packages have to be removed for others to be upgraded:
kdebase-3.1-83.3mdk (due to unsatisfied kdebase == 3.1-83mdk)
kdebase-devel-3.1-83.3mdk (due to unsatisfied kdebase == 3.1-83mdk)
kdebase-nsplugins-3.1-83.3mdk (due to unsatisfied kdebase == 3.1-83mdk)
do you agree ? (Y/n)
So now what should I do?


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] LILO v GrUB

2003-08-01 Thread Avi Schwartz
Let me add one more thing about Grub that many people are not aware of. 
 Grub has a shell-like interface which you can bring up when the Grub 
menu appears.  From this shell you can search for kernels on your 
drives, set the root partition and kernel to boot from and then boot 
into you new setup on the fly.  This means that even if you screw up 
that text file, you can still boot into your system without resorting 
to booting from a CD.

Avi

On Friday, Aug 1, 2003, at 13:55 America/Chicago, James Sparenberg 
wrote:

On Fri, 2003-08-01 at 10:03, Felix Miata wrote:
Anne Wilson wrote:

As for lilo and grub - I've never even tried grub, since lilo works
fine for me.
I use GrUB because of its simplicity. Configuring means simply 
editing a
text file. Nothing to run afterwards. This makes chroot on rescue 
boots
unnecessary, which makes explaining rescue over the phone or email 
much
easier.
Now that is the first real reason I've heard for the grub advantage 
(the
chroot part.)  hm.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Cyrus-imap directory ownership

2003-08-03 Thread Avi Schwartz
From my past experience with Cyrus-imap on SuSE Linux and from reading 
the documents installed on my MDK 9.1 box, certain directories and 
files need to be owned by the 'cyrus' user.  However, when I look at 
the directory hierarchy installed by the 2.1.12 rpm all these 
directories are owned by 'root' instead and the 'cyrus' user doesn't 
even exist.  is this a problem with the RPM or do I have to create the 
user myself and then go and change the ownership of the 
files/directories?

Thanks,
Avi

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Cyrus-imap directory ownership

2003-08-03 Thread Avi Schwartz
Excellent.  I just finished installing cyrus-imapd-2.1.14-4mdk and 
indeed the user was created the directories have the correct ownership.

BTW, I always use Mozilla.  It is my favorite browser.

Than you very much!

Avi

On Sunday, August 3, 2003, at 11:32 AM, Luca Olivetti wrote:

Avi Schwartz wrote:
 From my past experience with Cyrus-imap on SuSE Linux and from 
reading the documents installed on my MDK 9.1 box, certain 
directories and files need to be owned by the 'cyrus' user.  However, 
when I look at the directory hierarchy installed by the 2.1.12 rpm 
all these directories are owned by 'root' instead and the 'cyrus' 
user doesn't even exist.  is this a problem with the RPM or do I have 
to create the user myself and then go and change the ownership of the 
files/directories?
This was a problem until 2.1.12-5mdk which I fixed in 6mdk. The 
problem is that I created cyrus user with a fixed uid, so if there was 
already a user with the same uid, cyrus user wouldn't be created, 
causing the problem you're seeing. I realized that a fixed uid isn't 
really necessary.
You can find up to date cyrus-imapd rpms at 
http://perso.wanadoo.es/olivetti/cyrus/
(use mozilla, or they'll shove pop-ups at you, sorry it's beyond my 
control).


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] msec configuration problem

2003-09-02 Thread Avi Schwartz
Hi,

This question started actually in the newbie mailing list but it may be 
more appropriate for the expert list.

I setup my machine with security level 4 but I am interested in 
relaxing some of the permission settings.  I made changes to 
/etc/security/msec/perm.local and then executed msec.  I found that 
msec does not make the requested changes unless I pass it the security 
level parameter as in

msec 4

If I don't pass this parameter, the local changes are not executed.  
Even if I do pass this parameter, on the hour, cron executes 
/etc/cron.hourly/msec which again resets my local changes and reverts 
to the default.

The reason for this is that in the following line in msec:

/usr/share/msec/Perms.py $CHANGE $OPT /usr/share/msec/perm.$PERM_LEVEL 
$LOCAL

$CHANGE is not set and therefore the local changes do not get saved.  
For now I hard coded in the msec script CHANGE=-c so that the changes 
will be saved.

Is this a bug in msec or am I missing some setting which will force 
msec to use my local changes?

Thanks,
Avi

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] msec configuration problem

2003-09-02 Thread Avi Schwartz
On Monday, Sep 1, 2003, at 22:55 America/Chicago, Jack Coates wrote:

On Mon, 2003-09-01 at 20:11, Avi Schwartz wrote:
Hi,

This question started actually in the newbie mailing list but it may 
be
more appropriate for the expert list.

I setup my machine with security level 4 but I am interested in
relaxing some of the permission settings.  I made changes to
/etc/security/msec/perm.local and then executed msec.  I found that
msec does not make the requested changes unless I pass it the security
level parameter as in
msec 4

If I don't pass this parameter, the local changes are not executed.
Even if I do pass this parameter, on the hour, cron executes
/etc/cron.hourly/msec which again resets my local changes and reverts
to the default.
The reason for this is that in the following line in msec:

/usr/share/msec/Perms.py $CHANGE $OPT /usr/share/msec/perm.$PERM_LEVEL
$LOCAL
$CHANGE is not set and therefore the local changes do not get saved.
For now I hard coded in the msec script CHANGE=-c so that the changes
will be saved.
Is this a bug in msec or am I missing some setting which will force
msec to use my local changes?
Thanks,
Avi
puzzling. Seems like a bug -- I can only assume that I've made my
changes manually and then altered perm.local so they'll stick, 
otherwise
I should have seen this too.

Then there is something else going on since I also did the changes 
manually but the next time that cron ran msec is restored it to the 
default without taking into account my changes.

If you look at your /etc/cron.hourly/msec is it a link to the msec 
executable?

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] connect with ssh to my box

2003-09-02 Thread Avi Schwartz
elPunishar wrote:

hello everybody,

i have my mdk9.1 box security level set on "standard".
now, i want to be able to connect with ssh or telnet to this box from another 
one in my lan.
the connections are refused...
where do i have to make the changes to allow this ?
 

Assuming that sshd is running on your box, you may need to edit 
/etc/hosts.allow and add the line

sshd:ALL

This will allow all external hosts to connect via ssh.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] AntiVir Personal Edition

2003-09-11 Thread Avi Schwartz
I've been using it for about 3 years now via Amavis as the virus 
scanner of all my email.  Works great and the current version can be 
set to go out and check for updates automatically.  In the past you had 
to download the virus definition files manually and install them.

BTW, Vexira Antivirus also uses the H+BEDV scan engine with their own 
user interface.

Avi

On Thursday, September 11, 2003, at 07:05 PM, Miark wrote:

Today I stumbled across anti-virus software from H+BEDV
(a German company) for Linux. It's free for personal use,
and was wondering if anyone here had used it, and if so
what you think about it.
Miark

PS You can sign up for a free license at
   http://www.hbedv.com/private/


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] AntiVir Personal Edition

2003-09-11 Thread Avi Schwartz
I am checking all emails going into my mail server and the reason is 
not because of Linux viruses but because my wife needs to use Windows 
to access her office via software that is not available for Linux.  
Also, at work they use Windows so it will be nice if my mail server 
will not infect her machine while she checks her email remotely :-)

As for Linux viruses, there are rumored to be one or two of them, but I 
don't know of anyone that was infected by them.

Avi

On Thursday, September 11, 2003, at 09:06 PM, Wolfgang Bornath wrote:

 *** Avi Schwartz Thu, 11 Sep 2003 20:51:51 -0500 :

I've been using it for about 3 years now via Amavis as the virus
scanner of all my email.  Works great and the current version can be
set to go out and check for updates automatically.  In the past you
had to download the virus definition files manually and install them.
A question to help me understanding:
Do you use this AntiVir to check mails which are forwarded to a Windows
machine in your network? Or do you check mails in general although you
are using Linux? Does this AntiVir for Linux check for Linux virii? If
so, which?
OK, 4 questions.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] Why is urpmi such a pain in the ...?

2003-09-16 Thread Avi Schwartz
Today, Mandrake has issued a security update to ssh (BTW, if you did 
not update it yet, you better do it soon, before the exploit starts 
circulating).  I updated all the sources but urpmi --update 
--auto-select told me that everything is up to date.  Tried the 
graphical updater, the same story.  I ended up downloading the new RPMs 
and installing them manually.  How am I supposed to trust DrakeUpdate 
and urpmi?

This is something Mandrake can learn from SuSE.  Their online update 
works perfectly every time.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-16 Thread Avi Schwartz
On Tuesday, September 16, 2003, at 10:38 PM, Brant Fitzsimmons wrote:

Avi Schwartz wrote:
Today, Mandrake has issued a security update to ssh (BTW, if you did 
not update it yet, you better do it soon, before the exploit starts 
circulating).  I updated all the sources but urpmi --update 
--auto-select told me that everything is up to date.  Tried the 
graphical updater, the same story.  I ended up downloading the new 
RPMs and installing them manually.  How am I supposed to trust 
DrakeUpdate and urpmi?
This is something Mandrake can learn from SuSE.  Their online update 
works perfectly every time.
Avi
Your success with Mandrake Update depends on the mirror you have setup 
as your update source.  Mandrake just released the updated packages 
and it takes time for all of the update mirrors to sync with 
Mandrake's server.  You may need to give your mirror some time to 
actually get the updates from the mothership.  Once that is done you 
should be able to update without a hitch.  I just did and it went as 
smooth as usual.

Also, you need to run "urpmi.update -a" first to make sure your box 
knows that there are updates available.  Then run "urpmi -v --updates 
--auto-select" or "urpmi -v --auto-select" to actually download and 
install the updates.
I did urpmi.update -a first, but I guess I need to look for better 
mirrors.  Is there a way to find out which mirrors are updated more 
frequently?

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-16 Thread Avi Schwartz
On Tuesday, September 16, 2003, at 10:52 PM, Vincent Danen wrote:

On Tue Sep 16, 2003 at 10:45:07PM -0500, Avi Schwartz wrote:

Today, Mandrake has issued a security update to ssh (BTW, if you did
not update it yet, you better do it soon, before the exploit starts
circulating).  I updated all the sources but urpmi --update
--auto-select told me that everything is up to date.  Tried the
graphical updater, the same story.  I ended up downloading the new
RPMs and installing them manually.  How am I supposed to trust
DrakeUpdate and urpmi?
This is something Mandrake can learn from SuSE.  Their online update
works perfectly every time.
Avi
Your success with Mandrake Update depends on the mirror you have 
setup
as your update source.  Mandrake just released the updated packages
and it takes time for all of the update mirrors to sync with
Mandrake's server.  You may need to give your mirror some time to
actually get the updates from the mothership.  Once that is done you
should be able to update without a hitch.  I just did and it went as
smooth as usual.

Also, you need to run "urpmi.update -a" first to make sure your box
knows that there are updates available.  Then run "urpmi -v --updates
--auto-select" or "urpmi -v --auto-select" to actually download and
install the updates.
I did urpmi.update -a first, but I guess I need to look for better
mirrors.  Is there a way to find out which mirrors are updated more
frequently?
http://www.mandrakesecure.net/en/ftp.php

Perfect.  Thanks you!

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-16 Thread Avi Schwartz
I had 3.6.1p1 installed, but as other have pointed out, I was probably 
using a mirror that was not updated yet.

Avi

On Tuesday, September 16, 2003, at 10:48 PM, bascule wrote:

it may be that like me you have installed some package via cooker that 
might
have required a later openssh? i found i had 3.6.1p2-4 and therefore
3.6.1p2-1.1 was seen as not an upgrade, i'm hopefull that there will a
further cooker package with the needed patch becasue when i went to 
uninstall
openssh and then insatll the upgrade i had problems, but you should 
try that
too since my problems are hopefully local to me

bascule

On Wednesday 17 Sep 2003 4:05 am, Avi Schwartz wrote:
Today, Mandrake has issued a security update to ssh (BTW, if you did
not update it yet, you better do it soon, before the exploit starts
circulating).  I updated all the sources but urpmi --update
--auto-select told me that everything is up to date.  Tried the
graphical updater, the same story.  I ended up downloading the new 
RPMs
and installing them manually.  How am I supposed to trust DrakeUpdate
and urpmi?

This is something Mandrake can learn from SuSE.  Their online update
works perfectly every time.
Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-16 Thread Avi Schwartz
On Tuesday, September 16, 2003, at 11:27 PM, Jack Coates wrote:

On Tue, 2003-09-16 at 20:05, Avi Schwartz wrote:
Today, Mandrake has issued a security update to ssh (BTW, if you did
not update it yet, you better do it soon, before the exploit starts
circulating).  I updated all the sources but urpmi --update
--auto-select told me that everything is up to date.  Tried the
graphical updater, the same story.  I ended up downloading the new 
RPMs
and installing them manually.  How am I supposed to trust DrakeUpdate
and urpmi?

This is something Mandrake can learn from SuSE.  Their online update
works perfectly every time.
Avi

where are you physically? Mandrake's mirrors in the Pacific Standard
Time Zone tend to be pretty far behind.
Chicago, CST.

Avi



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Re: Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 01:58 AM, T. Ribbrock wrote:

On Tue, Sep 16, 2003 at 10:05:18PM -0500, Avi Schwartz wrote:
Today, Mandrake has issued a security update to ssh (BTW, if you did
not update it yet, you better do it soon, before the exploit starts
circulating).
[...]

Well, while updating is definitely recommended, at least there seems to
be no reason to panic yet. Quote from the OpenSSH advisory:
"All versions of OpenSSH's sshd prior to 3.7.1 contain buffer
 management errors.  It is uncertain whether these errors are
 potentially exploitable, however, we prefer to see bugs fixed 
proactively."

Nonetheless, I just *love* the approach of the OpenSSH team. Would be
great if everybody did it that way.
When it comes to SSH, I am always nervous.  In the past, the admin at 
the time, failed to update SSH and it was used to break into 3 of our 
machines.  So, yeah, I am nervous :-)

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 12:17 AM, James Sparenberg wrote:

On Tue, 2003-09-16 at 20:05, Avi Schwartz wrote:
Today, Mandrake has issued a security update to ssh (BTW, if you did
not update it yet, you better do it soon, before the exploit starts
circulating).  I updated all the sources but urpmi --update
--auto-select told me that everything is up to date.  Tried the
graphical updater, the same story.  I ended up downloading the new 
RPMs
and installing them manually.  How am I supposed to trust DrakeUpdate
and urpmi?

This is something Mandrake can learn from SuSE.  Their online update
works perfectly every time.
Avi
No not every time.  Try to do an online update for the NVidia drivers.
100% failure on 6 boxes.  As for the problem.  Did you do urpmi.update
-a first?  If your inbox records are behind the servers records then
what it's telling you is correct.
That may be a little unfair to SuSE.  The NVidia drivers are closed 
source and so they can be a challenge for any distribution.  As I 
understand it, people fixed the problem by using the older driver.  But 
my point was not to talk about a specific patch.  It would be also nice 
if Mandrake would send notification about security patches to their 
mailing lists.  In generalshould look into tightening the update 
process when it comes to security patches.  Unlike regular updates that 
may not be very important some security patches can be critical.  Also 
downloading the list of files can be a major pain.  Couple of 15MB 
lists can take awhile, even at IDSL speeds (144K) not to mention 
dial-up speeds.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
That is another problem.  I found out about it from other 
distribution's security announcements then I checked MandrakeSecure and 
found that they posted the information there.  They should send an 
announcement like this to the mailing lists.

Avi

On Wednesday, September 17, 2003, at 08:02 AM, Tango Echo wrote:

Today, Mandrake has issued a security update to ssh
They did?  How do you recieve notification? I though I
was subscribed to the exploit list, but I haven't
recieved a message in well over 6 months.  Do I need
to resubscribe or are you receiving noitification by
other means?  Obviously, staying up to date on
exploits is a top priority and I'd like to be in the
loop =)


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Very sorry for the hijacked threads

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 05:17 AM, HaywireMac wrote:

On Wed, 17 Sep 2003 17:08:07 +0700
Fajar Priyanto <[EMAIL PROTECTED]> uttered:
What did Chomsky say about it?
Well, exactly what that Cambridge research showed, that people learn
language not in bits and pieces like the "phonics" method still in use
today, but by grokking whole chunks of meaning from analyzing 
contextual
patterns in speech and writing. I can't do him justice, so I won't go
further than that. Look him up on Google, there's lots out there, or
should I say tehres ltos out trehe.

If I understand it correctly they tried for few years in Israel to use 
the pattern method to teach kid to read and write.  It failed 
miserably.  So much so that in this school year they went back to the 
old system.  It will be intersting to hear from anyone living in Israel 
and having school age kids their opinion on what went wrong.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 11:38 AM, Brant Fitzsimmons wrote:

Avi Schwartz wrote:

Also downloading the list of files can be a major pain.  Couple of 
15MB lists can take awhile, even at IDSL speeds (144K) not to mention 
dial-up speeds.
Avi
and set up an update source that uses rsync instead of ftp or http. 
Then when you run "urpmi.update -a" it will download only the 
differences in the list instead of the whole list.

That's great, I wasn't aware that there are sites allowing rsync.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 01:03 PM, Vincent Danen wrote:

On Wed Sep 17, 2003 at 08:19:45AM -0500, Avi Schwartz wrote:

That is another problem.  I found out about it from other
distribution's security announcements then I checked MandrakeSecure 
and
found that they posted the information there.  They should send an
announcement like this to the mailing lists.
The only problem is that you're not subscribed to the right mailing 
list.
Subscribe to the announce list (via MandrakeSecure, the very site you 
were
on).

Advisories go out in many forms; I can't help it if you don't pay 
attention
to one of the many:

- [EMAIL PROTECTED]
- [EMAIL PROTECTED]
- full-disclosure ml
- RSS feed from MandrakeSecure
- MandrakeSecure website (on nearly every single page)
- MandrakeClub (latest advisory always on the front page)
And no, announcements will not be going to this list or any other list 
other
than the announce list.

I appreciate the information and I just subscribed to the announce 
list.  However, the same way I didn't know about the 
[EMAIL PROTECTED] list I am sure there are many others that 
are not aware of it.  If there is a bug that has a potential of 
becoming a way to break into a computer I feel that all mailing list be 
notified of it to minimize the potential damage.  Mandrake may have 
many newbies (I hope you do, you need the business) which are new to 
Linux and may need this extra help.  One nice touch SuSE has is a small 
icon in the KDE task bar which changes color when there are updates 
available.  Click on it and you get a menu allowing you to check for 
updates, show the last update log or start the update process.  very 
nice, clean and can help users keep their system safe.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 01:03 PM, Vincent Danen wrote:

Advisories go out in many forms; I can't help it if you don't pay 
attention
to one of the many:

- [EMAIL PROTECTED]
- [EMAIL PROTECTED]
- full-disclosure ml
- RSS feed from MandrakeSecure
- MandrakeSecure website (on nearly every single page)
- MandrakeClub (latest advisory always on the front page)
As I said, I did pay attention since I knew about it before Mandrake 
announced it.

Anyway, how do you subscribe to the RSS feed?  What is the url?

Thanks,
Avi

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Why is urpmi such a pain in the ...?

2003-09-17 Thread Avi Schwartz
On Wednesday, September 17, 2003, at 03:29 PM, Vincent Danen wrote:

I think all things considered, we aren't that slow.  If you're 
defining slow
by a few hours, shame on you, if you're defining it by a few days, 
shame on
me.

I think we're fairly close to the other big players when it comes to 
the big
updates.

And, also, keep in mind that RH and SuSE both employ about a half dozen
security folks and, IIRC, gentoo doesn't have to worry about compiling 
for a
number of different versions.  Contrary to popular opinion, it *does* 
take
time to properly compile and test packages on each supported platform.

We also don't run our own server for updates so we have to wait for
mirroring... RH can put the packages up and announce it that minute, 
we have
to wait at least 1-2hrs before announcing or I get flooded with "you
announced it so where is it?" messages, just due to the mirroring 
process.

With all that in mind, I think this one-man operation is pretty damn 
speedy.

My hat's off to you.  One person?  This is impressive.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


[expert] What do I need to do to access my web server?

2003-09-17 Thread Avi Schwartz
Hi,

I installed the advanced sever on 9.1, ran the server wizard to set it 
to serv both Intranet and Internet and 'netstat -lp' shows that httpd2 
is listening to ports 80 and 443.  However, when I try to connect via 
'telnet localhost 80' I get a 'Connection Refused' message.  There is 
no error message in any of the log files as far as I could find.  Is 
ADVX built with tcpwrappers support?  If it is, what is the daemon name 
I have to put in /etc/hosts.allow?  Is there another place when access 
permissions  are set?

Thanks,
Avi

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Mandrake 9.1

2003-09-29 Thread Avi Schwartz
Lawson, Jim wrote:

I hope Mandrake 9.1 is better than Mandrake 9.1. Mandrake 9.0 is great from
my experience with it. But 9.1 lacks a lot in stability.
I have to wonder what is this observation based on.  Mdk 9.1 is my first 
mdk ever after using SuSE for many years.  Admittedly I was forced to 
use MDK by SuSE when it dropped support for my processor (VIA Nehemiah) 
but I must tell you that mdk 9.1 impressed me quite a bit.  I am using 
it on a gateway machine to a small network providing firewall, nat, 
imap, web based mail, a caching dns and a caching transparent web proxy. 
 It scans emails for virus and filters spam.  It is on 24x7 and had no 
problems at all.  For few weeks, while setting up the box I was also 
running KDE on it.  Now however it is no longer booting into GUI since 
it is a pure server.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Mandrake 9.1

2003-09-29 Thread Avi Schwartz
Lawson, Jim wrote:

I have the same luck with 9.0. 9.1 bombed for me. Have you tried to install
sarg and run it with errors> Some thing about /var/www/sarg is a directory.
I just installed (to test it for you) sarg-1.4.1-1mdk.  It works fine. 
The only thing I had to do was to change in /etc/sarg/sarg.conf the 
location of the squid access log file.  This is however a little unfair 
since the version I installed came from the cooker so it may be that the 
9.1 shipped version is broken, but as you see, there is a solution.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] 9.2 start menu hosed after installing Moz 1.4

2003-10-18 Thread Avi Schwartz
D. R. Evans wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 18 Oct 2003 at 8:49, Greg Sarsons wrote:


Noted this before ...

What I've done, there might be another way, is to run MCC.  It the
select System and select MenuDrake.  


There is no MCC any more (no System menu) :-(

Is there a way to run MCC from the CLI? (Well, there must be, but I don't 
know how :-) )
I had a similar problem and no, I did not install Mozilla.  There seems 
to be a problem in rebuilding (or lack of) the menus in 9.2.  I found 
there is a program /usr/sbin/update-menus which when I ran it, it 
rebuilt all menus and desktop links.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com


Re: [expert] Mandrake releases bug fixes for MDK 9.2

2003-10-24 Thread Avi Schwartz
James Conner wrote:

On Friday 24 October 2003 02:10 am, James Sparenberg wrote:

I agree, I was being sarcastic.  I just installed MDK 9.2 on a friends system, 
I'll do it on mine after I back everything up.  Everything went peachy, only 
lost the menu's once.  That bug/feature was fixed with these patches.  Seems 
quite nice.  Now we just got to install all of plf's stuff and contribs, plus 
configure a few apps.
I don't think the disappearing menu 'feature' was fixed since I lost my 
menu couple of times on two different machines since applying the patches.

Avi


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com