Re: chkrootkit sniffers

2006-08-13 Thread Nicolas Haller
On Fri, Aug 11, 2006 at 11:40:24AM +0200, Izak Burger wrote: On 8/11/06, Christian Schuerer [EMAIL PROTECTED] wrote: Isn't it strange that there is an DHCP client running on lo? I don't get the point of doing that. The pid is the same for all three (29184), so it is obviously a process

Re: chkrootkit sniffers

2006-08-13 Thread Christian Schuerer
On Sunday 13 August 2006 23:38, Nicolas Haller wrote: It remains strange because normally, lo is a non-broadcast interface. With version 0.46 it get this result: Checking `sniffer'... lo: not promisc and no packet sniffer sockets lan: PACKET SNIFFER(/sbin/dhclient3[6515]) Maybe it's just

Re: chkrootkit sniffers

2006-08-13 Thread Lothar Ketterer
Hi, It remains strange because normally, lo is a non-broadcast interface. Maybe it would help to know how Henri has his network configured. Mine is configured with ifupdown, /etc/network/interfaces looks like this: auto lo eth0 iface lo inet loopback iface eth0 inet dhcp and chkrootkit

Re: [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation

2006-08-13 Thread Steffen Hoffmann
Hello, just a question: I can't find a package by this name shadow. So what's this all about? Greetings Steffen Hoffmann Martin Schulze, 12.08.2006 18:50: -- Debian Security Advisory DSA 1150-1[EMAIL

Re: [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation

2006-08-13 Thread dann frazier
On Sun, Aug 13, 2006 at 09:11:16PM +0200, Steffen Hoffmann wrote: Hello, just a question: I can't find a package by this name shadow. So what's this all about? That's the source package name - if you look towards the end of the advisory you'll see a list of binary packages that are built