Re: execute permissions in /tmp

2003-07-12 Thread Peter Cordes
On Sun, Jul 13, 2003 at 01:33:52AM -0400, Noah L. Meyerhans wrote: > On Sat, Jul 12, 2003 at 11:43:02PM -0300, Peter Cordes wrote: > > This is at least the third time this has come up that I remember. However, > > absolute statements like *can not* get me thinking: Is there any any sort > > of

Re: execute permissions in /tmp

2003-07-12 Thread Noah L. Meyerhans
On Sat, Jul 12, 2003 at 11:43:02PM -0300, Peter Cordes wrote: > This is at least the third time this has come up that I remember. However, > absolute statements like *can not* get me thinking: Is there any any sort > of file that can't be executed from /tmp? What about statically linked ELF >

Re: execute permissions in /tmp

2003-07-12 Thread Peter Cordes
On Sat, Jul 12, 2003 at 10:37:24PM -0400, Jim Popovitch wrote: > Well now, that is interesting. You are absolutely correct about the sticky > bit. It is the noexec flag that this is happening with, and I agree that it > alone is not a total security solution. However, it is a piece of a much > b

Re: execute permissions in /tmp

2003-07-12 Thread Peter Cordes
On Sat, Jul 12, 2003 at 09:34:16PM -0400, Noah L. Meyerhans wrote: > On Sat, Jul 12, 2003 at 09:22:45PM -0400, Jim Popovitch wrote: > > I have a complaint/opinion/statement to express. It seems that every now > > and then when I run 'apt-get upgrade' i get a lot of errors about "Can't > > exec "/t

RE: execute permissions in /tmp

2003-07-12 Thread Jim Popovitch
Well now, that is interesting. You are absolutely correct about the sticky bit. It is the noexec flag that this is happening with, and I agree that it alone is not a total security solution. However, it is a piece of a much bigger pie and really should be enforced. -Jim P. > -Original Mess

Re: execute permissions in /tmp

2003-07-12 Thread Noah L. Meyerhans
On Sat, Jul 12, 2003 at 09:34:16PM -0400, Noah L. Meyerhans wrote: > # cp /bin/ls /tmp/ > # /lib/ld-linux.so.2 /bin/ls ^^^ Naturally I meant /tmp/ls on the second line there. I'm sure you figured that out on your own, but just for the record... noah pgph5wAJkMhjE.pgp

Re: execute permissions in /tmp

2003-07-12 Thread Noah L. Meyerhans
On Sat, Jul 12, 2003 at 09:22:45PM -0400, Jim Popovitch wrote: > I have a complaint/opinion/statement to express. It seems that every now > and then when I run 'apt-get upgrade' i get a lot of errors about "Can't > exec "/tmp/config.x": Permission denied at...". I like to keep my > Debian box

execute permissions in /tmp

2003-07-12 Thread Jim Popovitch
I have a complaint/opinion/statement to express. It seems that every now and then when I run 'apt-get upgrade' i get a lot of errors about "Can't exec "/tmp/config.x": Permission denied at...". I like to keep my Debian boxen nice and secure, so I 'chmod +t /tmp' to prevent temp files from bei

Re: execute permissions in /tmp

2003-07-12 Thread Peter Cordes
On Sat, Jul 12, 2003 at 10:37:24PM -0400, Jim Popovitch wrote: > Well now, that is interesting. You are absolutely correct about the sticky > bit. It is the noexec flag that this is happening with, and I agree that it > alone is not a total security solution. However, it is a piece of a much > b

Re: execute permissions in /tmp

2003-07-12 Thread Peter Cordes
On Sat, Jul 12, 2003 at 09:34:16PM -0400, Noah L. Meyerhans wrote: > On Sat, Jul 12, 2003 at 09:22:45PM -0400, Jim Popovitch wrote: > > I have a complaint/opinion/statement to express. It seems that every now > > and then when I run 'apt-get upgrade' i get a lot of errors about "Can't > > exec "/t

RE: execute permissions in /tmp

2003-07-12 Thread Jim Popovitch
Well now, that is interesting. You are absolutely correct about the sticky bit. It is the noexec flag that this is happening with, and I agree that it alone is not a total security solution. However, it is a piece of a much bigger pie and really should be enforced. -Jim P. > -Original Mess

Re: execute permissions in /tmp

2003-07-12 Thread Noah L. Meyerhans
On Sat, Jul 12, 2003 at 09:34:16PM -0400, Noah L. Meyerhans wrote: > # cp /bin/ls /tmp/ > # /lib/ld-linux.so.2 /bin/ls ^^^ Naturally I meant /tmp/ls on the second line there. I'm sure you figured that out on your own, but just for the record... noah pgp0.pgp Desc

Re: execute permissions in /tmp

2003-07-12 Thread Noah L. Meyerhans
On Sat, Jul 12, 2003 at 09:22:45PM -0400, Jim Popovitch wrote: > I have a complaint/opinion/statement to express. It seems that every now > and then when I run 'apt-get upgrade' i get a lot of errors about "Can't > exec "/tmp/config.x": Permission denied at...". I like to keep my > Debian box

execute permissions in /tmp

2003-07-12 Thread Jim Popovitch
I have a complaint/opinion/statement to express. It seems that every now and then when I run 'apt-get upgrade' i get a lot of errors about "Can't exec "/tmp/config.x": Permission denied at...". I like to keep my Debian boxen nice and secure, so I 'chmod +t /tmp' to prevent temp files from bei

Nessus

2003-07-12 Thread Jim
What version of nessus can i get using apt, i already have 2.06 running fine, but would like to upgrade, also can someone give me some advice on how to get update-nessus-plugins working.   this is the error i get when trying to update useing install-nessus.sh   This is the error i'm getting.