[SLUG] How to delete runauto..

2008-04-16 Thread weiwei
Hi everyone
I will how to delete a file ,and this file's name runauto..
I use some ways,but don't delete it,why?
Who can help me? Thanks in advance!

[EMAIL PROTECTED] disk-3]$ cat runauto..
cat: runauto..: There is no file or directory
[EMAIL PROTECTED] disk-3]$ cd runauto..
bash: cd: runauto..: There is no file or directory
[EMAIL PROTECTED] disk-3]$ rm -rf runauto..
[EMAIL PROTECTED] disk-3]$
[EMAIL PROTECTED] runaut~1]# cd ..
[EMAIL PROTECTED] disk-3]# rm -rf runauto*
[EMAIL PROTECTED] disk-3]# rm -rf runauto*
[EMAIL PROTECTED] disk-3]# echo $?
0
[EMAIL PROTECTED] disk-3]# rmdir runauto..
rmdir: runauto..: There is no file or directory
[EMAIL PROTECTED] disk-3]#
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: looking for a command to composite sequentially numbered files

2008-04-16 Thread glennrp


On Apr 15, 10:07 am, elliott-brennan <[EMAIL PROTECTED]> wrote:
> Hi Richard, Alex and all.

> If I try:
>
> for i in `seq 1 999`;do echo j=`printf %04d $i`;
> echo composite -compose atop bubbles.png 0*.png
> image$j.png; done | head
>
> I get:
>
> j=0001
> composite -compose atop bubbles.png 02729.png
> 02730.png image.png
[more similar]
> BUT no composite images???

G'Day.  Removing the second "echo " might help.

Glenn
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Can I be comfortable with this log message

2008-04-16 Thread Rick Phillips
I run my own web server and have done so for a number of years.  The OS
is Mandriva Server 3 which is now 3 years old but still supported and I
keep it fully patched and up to date.  I receive the security advisories
and act within hours on those.  I have recently updated OpenSSH.  I am
planning to change to CentOS 5.1 in a few weeks.

My router only has the necessary ports open for mail, ssh and web.  FTP
is blocked and the service does not run on the box. I run ssh through a
non standard port (externally) and use normal password authentication.
The ssh config file does not allow root logons and through hosts
allow/deny, only my work ip address and internal network addresses are
allowed access.  The ip based access has been tested and is known to
work.  My passwords are strong and changed every six weeks.  The system
uses msec which trolls the folders and changes permissions back to
defaults on critical files/folders every one minute.

I run logwatch and read the report diligently each day.  Msec also
delivers a report daily on files which have changed and ports which have
been opened/closed.  Over the last year or so I have had appear a few
times, the following message in my logs and which has caused me concern.

 1 possible successful probes 
/long_path_to_file/../../../etc/passwd HTTP Response 200 

With the environment (described above) in place, should I be worried or
should I be confident that I have taken every precaution I can take?

Regards,

Rick

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Can I be comfortable with this log message

2008-04-16 Thread Aleksey Tsalolikhin
Sounds like you are being very thorough in your security.

If you want to add another layer of defense, you can change your
Apache config to forbid download of the passwd file.

If your /etc/passwd file was really downloaded, it is conceivable a
password could be cracked, but you limit connections to just a couple
of addresses.

If I were in your place,  I wouldn't be too worried about this
message, but I'd take measures to make sure my passwd file was not
downloadable.

Best,
Aleksey
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Can I be comfortable with this log message

2008-04-16 Thread jam

On Thu, 2008-04-17 at 12:00 +1000, [EMAIL PROTECTED] wrote:
> I run my own web server and have done so for a number of
> years.  The OS
> is Mandriva Server 3 which is now 3 years old but still
> supported and I
> keep it fully patched and up to date.  I receive the security
> advisories
> and act within hours on those.  I have recently updated
> OpenSSH.  I am
> planning to change to CentOS 5.1 in a few weeks.
> 
> My router only has the necessary ports open for mail, ssh and
> web.  FTP
> is blocked and the service does not run on the box. I run ssh
> through a
> non standard port (externally) and use normal password
> authentication.
> The ssh config file does not allow root logons and through
> hosts
> allow/deny, only my work ip address and internal network
> addresses are
> allowed access.  The ip based access has been tested and is
> known to
> work.  My passwords are strong and changed every six weeks.
> The system
> uses msec which trolls the folders and changes permissions
> back to
> defaults on critical files/folders every one minute.
> 
> I run logwatch and read the report diligently each day.  Msec
> also
> delivers a report daily on files which have changed and ports
> which have
> been opened/closed.  Over the last year or so I have had
> appear a few
> times, the following message in my logs and which has caused
> me concern.
> 
>  1 possible successful probes 
> /long_path_to_file/../../../etc/passwd HTTP Response 200 
> 
> With the environment (described above) in place, should I be
> worried or
> should I be confident that I have taken every precaution I can
> take?

Rick  where do you keep the gold?

My system sounds like yours: www, mail, ssh on non standard, no root
login. I made a complete disk backup on install
(A WD raptor failed after 3 years (warranty :-), so the backup was
pressed into service)
But passwords are untouched after 5 years, updates happen 1 or 2 per
year, no other restrictions are enforced. 

I sleep easy, knowing that worst-case is a disk swap and some pondering,
and I've 5 years of lolling on the beach while you fret over the
logs ...

Of course if you're having fun then do enjoy.
James

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Can I be comfortable with this log message

2008-04-16 Thread jam

On Thu, 2008-04-17 at 12:00 +1000, [EMAIL PROTECTED] wrote:
> Sounds like you are being very thorough in your security.
> 
> If you want to add another layer of defense, you can change
> your
> Apache config to forbid download of the passwd file.
> 
> If your /etc/passwd file was really downloaded, it is
> conceivable a
> password could be cracked, but you limit connections to just a
> couple
> of addresses.

NOT TRUE. Nothing in /etc/passwd mentions *passwords* in any vaguely
modern distro, specially mandrake 3 ond CentOS 5.1. (ref /etc/shadow)

Giving passwd to the bad guys lets them try 'keith and james' instead of
taking a punt on 'fred and bill'. That is the reason for no root login
the name 'root' is a certain hit.

In all the years noone has ever tried my non standard ssh port!
 
> 
> If I were in your place,  I wouldn't be too worried about this
> message, but I'd take measures to make sure my passwd file was
> not
> downloadable.
> 
James

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Can I be comfortable with this log message

2008-04-16 Thread Rick Welykochy

jam wrote:


In all the years noone has ever tried my non standard ssh port!


Ditto. I use non-standard ssh/scp ports on all machines I
maintain. Works a treat.

The reason: I was getting hammered on port 22
and snort told me all about it.


cheers
rickw



--

Rick Welykochy || Praxis Services || Internet Driving Instructor

We like to think of ourselves as the Microsoft of the energy world.
 -- Kenneth Lay, former CEO of Enron
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Can I be comfortable with this log message

2008-04-16 Thread Michael Chesterton


On 17/04/2008, at 6:09 AM, Rick Phillips wrote:


 1 possible successful probes
/long_path_to_file/../../../etc/passwd HTTP Response 200

With the environment (described above) in place, should I be  
worried or

should I be confident that I have taken every precaution I can take?



I would be a little concerned if they can download /etc/passwd, they  
could
download a more sensitive file.  Have you tried to download passwd  
yourself?

does it actually work?

What's your DocumentRoot, out of curiosity?

--
Michael Chesterton
http://chesterton.id.au/blog/
http://barrang.com.au/



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Free Linux Magazine & Linux Journal

2008-04-16 Thread Grahame M. Kelly
Hi All.

For the "first here - first served" person who would like two years 
and more (including 2008) editions of Linux Magazine 
(http://www.linux-mag.com/) and Linux Journal 
(http://www.linuxjournal.com/) all you have to do is email me back, 
come and pick them up. They are absolutely free and they are in 
excellent condition.
 
If they are not taken by Thursday 24th April, then they will be 
donated to: The yellow recycling bin.

Hoping this will make happy reading.
Cheers. Grahame
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] OpenRG v's m0n0wall

2008-04-16 Thread Kyle

Hi folks,

can someone offer an educated opinion on the benefits/disadvantages of 
OpenRG's firewall over m0n0wall and/or vice versa pls.


I have the choice of either sticking with a Linksys RV082 (which 
apparently runs OpenRG) or moving to a m0n0 based firewall.


I know m0n0 is highly regarded, but have yet to find any community 
opinions on OpenRG (Only commercial reviews which focus on the whole as 
opposed to the firewall).


Does someone here have any experience pls?
--

Kind Regards

Kyle

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Thanks Re: Disk Full Message

2008-04-16 Thread bill
Thanks to all that provided suggestions and advice. I learned quite a 
lot from your comments.


Problem however was due to errant line in /etc/mtab - once line was 
removed, there was no longer a problem - its apparently a know problem 
wit Ubuntu.


Thanks again

Bill
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Thanks Re: Disk Full Message

2008-04-16 Thread Martin Visser
Bill,

No worries. Any chance of letting the list know what the errant line
was? It might help others for next time

Martin

On Thu, Apr 17, 2008 at 4:32 PM, bill <[EMAIL PROTECTED]> wrote:
> Thanks to all that provided suggestions and advice. I learned quite a lot
> from your comments.
>
>  Problem however was due to errant line in /etc/mtab - once line was
> removed, there was no longer a problem - its apparently a know problem wit
> Ubuntu.
>
>  Thanks again
>
>  Bill
>  --
>  SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
>  Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
>



-- 
Regards, Martin

Martin Visser
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html