Recommended security management packages

2003-05-21 Thread Tib
I'm looking for information on packages that will do a nice job of keeping an eye on my system security-wise. PackageS because I know that no one packages can do it all. Currently all I've got is 'tiger', and while it does a good job it has issues like failed checksums against installed packages

PHP imap-ssl support

2003-05-21 Thread Kristof Goossens
Hello all, I want to use debian packages for imap-ssl support in php4. regular imap works fine after installing the php4-imap package; however the imap-ssl does not work. In the output of phpinfo() I can see that my php4 (debian stable package) was configured with the option --with-imap, but not

PHP4-package for using FTP-SSL?

2003-05-21 Thread Stefan Neufeind
Hi, is there a package available (similar to the ftp-package which can be found in the pear-lib) to use ftp with ssl? I'm not looking for SFTP (SSH-filetransfer) but SSL with AUTH SSL at the beginning of the session. All the best Stefan

Re: PHP4-package for using FTP-SSL?

2003-05-21 Thread Dariush Pietrzak
is there a package available (similar to the ftp-package which can be found in the pear-lib) to use ftp with ssl? I'm not looking for SFTP (SSH-filetransfer) but SSL with AUTH SSL at the beginning of the for server - proftpd, for client - for example lftp. -- Dariush Pietrzak, She swore

RE: PHP imap-ssl support

2003-05-21 Thread Christian Storch
I don't think there would be another 'version' of the same package. But what error did you get while compiling? With or without --with-imap-ssl? I've a running environment for recompiling php4 (stable release) without any problems (though I've switched on more than 4.1 would allow ;). Christian

Re: Recommended security management packages

2003-05-21 Thread Jeffrey L. Taylor
Quoting Tib [EMAIL PROTECTED]: I'm looking for information on packages that will do a nice job of keeping an eye on my system security-wise. PackageS because I know that no one packages can do it all. Currently all I've got is 'tiger', and while it does a good job it has issues like failed

Re: Recommended security management packages

2003-05-21 Thread Tib
John the Ripper (weak password detection), Appears to be installed but I'm not actively using it. logcheck (batch checks on syslogs), Installed and configured PortSentry (IDS w/ some reaction capability), Installed and configured AIDE or Tripwire (file integrity checks), Just installed and

Tiger checkmd5sums module

2003-05-21 Thread Tib
Where is it pulling it's md5sums for comparison? I keep getting failures off freshly installed packages and would love to have this part actually work as it is quite helpful I'm sure. EOL Tib

english

2003-05-21 Thread H Labidi

english

2003-05-21 Thread H Labidi

md5sums

2003-05-21 Thread Tib
Well I found the debsums program, but unfortunately that hasn't solved anything. Here's what I run and this is what I get. There are a LOT more failures than just these, but these are the only two types of failures. How do I properly fix these? altaica:~# debsums --generate=missing|grep -v OK

Re: Recommended security management packages

2003-05-21 Thread Frank Becker
In article [EMAIL PROTECTED], Tib wrote: Hi, and snort (IDS). Would this interfere with portsentry? No. Portsentry waits for SYNs to come on ports you configure. Snort just listens and analyses traffic. Bye, Frank -- Frank Becker [EMAIL PROTECTED] | May the source be with GNU... GnuPG:

Re: Could sudo be an security issue?

2003-05-21 Thread Peter Cordes
On Wed, May 14, 2003 at 06:00:16PM -0700, Mark Ferlatte wrote: In addition, most administrator's accounts are root equivilent anyway, due to group memberships, etc. For example, you may have a nightly cron that runs as root that's editable by the adm group, of which all admins are members.