Re: [/tmp partition secure]

2006-08-31 Thread Michael Wilsker 

Denis,

What do you mean by mount in a secure mode?  Please be more 
specific.  Do you want to prevent binaries from being executable?  Do 
you want to prevent setuid programs from running?


Short of encrypting /tmp, the man page for mount(8) describes all of 
the mounting options you are likely to want.   Note that securing 
/tmp will not, by itself, make the system significantly more secure.


Regards,

  -- Mikey

At 08:11 AM 8/30/2006, Denis Augusto Araujo de Souza wrote:

Friends,

I'm needing to mount a /tmp partition in a secure mode. Which is
the best way to fstab file configuration?

Thanks in advance,
  Denis

Re: ISAKMP and Public Key Infrastructure

2006-06-23 Thread Michael Wilsker 

You mean like this:

http://www.securityfocus.com/infocus/1859

  -- Mikey


At 02:30 PM 6/23/2006, Bharj, Gagan wrote:

Hello Folks,

I have got my VPN working with automatic key exchange and a hard-coded
password.  I would like to implement the VPN using public/private keys.  Do
you guys know of any site that has a good tutorial on how to set up such a
system?  BTW Would such a setup require creating both server and client
certificates, or just creating RSA keys on the client and server will suffice?
My knowledge in PKI is limited so any advice you guys could give would be
greatly appreciated.

Thanks in advance,
Gagandeep

Re: upgrade halted

2006-04-19 Thread Michael Wilsker 

Howdy,

You might also want to check that you unpacked the base file set 
correctly (using tar xzpf).   If you didn't preserve the setuid file 
modes in /usr/libexec/auth for example, the system's ability to 
process password based logins would be pretty well crippled.If 
this is the case, unpacking the fileset(s) again using the correct 
tar options will fix it.


Regards,

 -- Mikey




On Wednesday 19 April 2006 19:27, Stuart Henderson wrote:
 On 2006/04/19 13:10, Jeff Quast wrote:
  Maybe I'm missing something, no access to a unix right now, but how
  about the ssh option for a command?, the ssh manpage says

 I checked this earlier - it doesn't work (at least on current OpenSSH;
 I didn't check older versions).

 user ... not allowed because shell /bin/... does not exist

Re: mp3 via printer port

2006-02-28 Thread Michael Wilsker 

http://www.google.com/search?hl=enq=openbsd+playing+mp3s+through+printerbtnG=Google+Search

  -- Mikey

At 10:19 AM 2/28/2006, [EMAIL PROTECTED] wrote:

Once I was watching photos from OpenBSD hackaton and saw there that people
listened mp3's by sending them to the lpt port. How is it possible to do?
Can somebody describe it in details.
Thanks!

Re: Unable to build Gateway route

2005-12-23 Thread Michael Wilsker 

At 05:20 AM 12/23/2005, Craig Skinner wrote:

On Fri, Dec 23, 2005 at 01:12:01PM +, Craig Skinner wrote:
 On Thu, Dec 22, 2005 at 10:12:32AM -0800, martin wrote:
  IP - 209.216.76.1
  Netmask - 255.255.255.252
  GW - 209.216.77.6

 The above is wrong.

My mistake, I mis-read the above.


As someone already pointed out, this host/netmask/gateway combination 
is invalid.


Either the netmask is supposed to be 255.255.252.0 or one of the 
addresses is incorrect.  Even if the third octet of the gateway 
address was '76' it would still fall outside the /30 netmask.


  -- Mikey