Re: Strange 'su' error messages

2004-01-16 Thread Teun Vink
On Thursday, January 15, 2004 5:17 PM [GMT+1=CET], Barak Korren <[EMAIL PROTECTED]> wrote: > Ian Brayshaw wrote: > >> On Tuesday 13 January 2004 9:29 am, Christian Schuerer wrote: >> >> >>> Since updating my debian server yesterday I get the following error >>> messages every hour (generated by lo

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Neil McGovern
On Thu, Jan 15, 2004 at 12:15:45PM -0800, Hans Baume wrote: > Like some others who have mentioned this in the past, I would like > to mirror security.debian.org for internal use due to the large > number of Debian boxes at my company and the inconsistent access > to the important updates residing

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Martin Helas
Am Do Jan 15, 2004 at 12:1545 -0800 gab Hans Baume <[EMAIL PROTECTED]> von sich: > Like some others who have mentioned this in the past, I would like > to mirror security.debian.org for internal use due to the large > number of Debian boxes at my company and the inconsistent access > to the impor

Re: Strange 'su' error messages

2004-01-16 Thread Bill Marcum
On Tue, Jan 13, 2004 at 10:29:10AM +0100, Christian Schuerer wrote: > Hello! > > Since updating my debian server yesterday I get the following error > messages every hour (generated by logcheck): > > Jan 13 00:05:01 asterix su[2102]: + ??? root:bin > > Today there is even an additional line: >

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Markus Amersdorfer
On Thu, 15 Jan 2004 12:15:45 -0800 Hans Baume <[EMAIL PROTECTED]> wrote: > Does anyone have any tips > on how to do it? I wrote some lines about this: http://homex.subnet.at/~max/debian/mirror.php Cheers, Max -- The first time any man's freedom is trodden on, we're all damaged.

Re: Update of security-critical outdated packages

2004-01-16 Thread Kjetil Kjernsmo
Agh! I had written down a lengthy reply, and just before sending it, a fuse blew and took my machine down with it. Why don't we get PSUs with built-in UPSes that last a minute or so, enough to change the fuse or take a clean shutdown...? Probably because most PCs run an OS that goes down

Re: /usr/bin/ssh-copy-id & trojan or variant UNIX/Exploit-SSHIDEN

2004-01-16 Thread Jim Richardson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 15 Jan 2004 20:50:11 +0100, Asim Saglam <[EMAIL PROTECTED]> wrote: > Dear all, > > Can anybody explain the following? > > My virus scanner reported the following after the scan tonight: > > /usr/bin/ssh-copy-id >Found trojan or var

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Blars Blarson
In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >Like some others who have mentioned this in the past, I would like >to mirror security.debian.org for internal use How about apt-move mirror? -- Blars Blarson [EMAIL PROTECTED] http://w

Re: Release.gpg files gone?

2004-01-16 Thread Santiago Garcia Mantinan
> All Release.gpg files except those from woody have disappeared > from the ftp mirrors last night. The files themselves are still there, but This was due to the key that was being used for signing being expired, it has now been replaced with a new key the one for 2004, so the newly signed Release

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Goswin von Brederlow
Hans Baume <[EMAIL PROTECTED]> writes: > Like some others who have mentioned this in the past, I would like > to mirror security.debian.org for internal use due to the large > number of Debian boxes at my company and the inconsistent access > to the important updates residing on that server. >

Re: Strange file atttributes

2004-01-16 Thread Benjamin Weste Pearre
> Am running 2.4.22 kernel on to Debian boxes and notice today that if I > run an lsattr in > the /bin and /sbin dir some of the files are coming up with strange > attributes. I had some problems recently while trying to upgrade a package. dpkg kept getting "Operation not permitted" while trying

Re: Strange 'su' error messages

2004-01-16 Thread Teun Vink
On Thursday, January 15, 2004 5:17 PM [GMT+1=CET], Barak Korren <[EMAIL PROTECTED]> wrote: > Ian Brayshaw wrote: > >> On Tuesday 13 January 2004 9:29 am, Christian Schuerer wrote: >> >> >>> Since updating my debian server yesterday I get the following error >>> messages every hour (generated by lo

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Neil McGovern
On Thu, Jan 15, 2004 at 12:15:45PM -0800, Hans Baume wrote: > Like some others who have mentioned this in the past, I would like > to mirror security.debian.org for internal use due to the large > number of Debian boxes at my company and the inconsistent access > to the important updates residing

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Martin Helas
Am Do Jan 15, 2004 at 12:1545 -0800 gab Hans Baume <[EMAIL PROTECTED]> von sich: > Like some others who have mentioned this in the past, I would like > to mirror security.debian.org for internal use due to the large > number of Debian boxes at my company and the inconsistent access > to the impor

Re: Strange 'su' error messages

2004-01-16 Thread Bill Marcum
On Tue, Jan 13, 2004 at 10:29:10AM +0100, Christian Schuerer wrote: > Hello! > > Since updating my debian server yesterday I get the following error > messages every hour (generated by logcheck): > > Jan 13 00:05:01 asterix su[2102]: + ??? root:bin > > Today there is even an additional line: >

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Markus Amersdorfer
On Thu, 15 Jan 2004 12:15:45 -0800 Hans Baume <[EMAIL PROTECTED]> wrote: > Does anyone have any tips > on how to do it? I wrote some lines about this: http://homex.subnet.at/~max/debian/mirror.php Cheers, Max -- The first time any man's freedom is trodden on, we're all damaged.

Re: Update of security-critical outdated packages

2004-01-16 Thread Kjetil Kjernsmo
Agh! I had written down a lengthy reply, and just before sending it, a fuse blew and took my machine down with it. Why don't we get PSUs with built-in UPSes that last a minute or so, enough to change the fuse or take a clean shutdown...? Probably because most PCs run an OS that goes down

Re: /usr/bin/ssh-copy-id & trojan or variant UNIX/Exploit-SSHIDEN

2004-01-16 Thread Jim Richardson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 15 Jan 2004 20:50:11 +0100, Asim Saglam <[EMAIL PROTECTED]> wrote: > Dear all, > > Can anybody explain the following? > > My virus scanner reported the following after the scan tonight: > > /usr/bin/ssh-copy-id >Found trojan or var

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Blars Blarson
In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >Like some others who have mentioned this in the past, I would like >to mirror security.debian.org for internal use How about apt-move mirror? -- Blars Blarson [EMAIL PROTECTED] http://w

Re: Release.gpg files gone?

2004-01-16 Thread Santiago Garcia Mantinan
> All Release.gpg files except those from woody have disappeared > from the ftp mirrors last night. The files themselves are still there, but This was due to the key that was being used for signing being expired, it has now been replaced with a new key the one for 2004, so the newly signed Release

Re: Mirroring security.debian.org for internal use

2004-01-16 Thread Goswin von Brederlow
Hans Baume <[EMAIL PROTECTED]> writes: > Like some others who have mentioned this in the past, I would like > to mirror security.debian.org for internal use due to the large > number of Debian boxes at my company and the inconsistent access > to the important updates residing on that server. >

Re: Strange file atttributes

2004-01-16 Thread Benjamin Weste Pearre
> Am running 2.4.22 kernel on to Debian boxes and notice today that if I > run an lsattr in > the /bin and /sbin dir some of the files are coming up with strange > attributes. I had some problems recently while trying to upgrade a package. dpkg kept getting "Operation not permitted" while trying