Re: Package/Mirror integrity?

2001-05-04 Thread Henrique M Holschuh
On Fri, 04 May 2001, Debian User wrote: > Henrique M Holschuh wrote: > > A secure (digital signature-based) system is being deployed right now in the > > unstable distribution, but it is not fully integrated into our archive > > structure yet. > > Where to find out mo

Re: Package/Mirror integrity?

2001-05-04 Thread Henrique M Holschuh
On Fri, 04 May 2001, Debian User wrote: > Henrique M Holschuh wrote: > > A secure (digital signature-based) system is being deployed right now in the > > unstable distribution, but it is not fully integrated into our archive > > structure yet. > > Where to find out mo

Re: Package/Mirror integrity?

2001-05-04 Thread Henrique M Holschuh
On Fri, 04 May 2001, a certain Debian user wrote: > I remember Debian folks wher talking about some kind of checksums to > integrate in package manager system (dpkg e.a.) some time ago. Is there > any work in progress, where can i find out more about this? I took a > look on Debian's documentation

Re: Package/Mirror integrity?

2001-05-04 Thread Henrique M Holschuh
On Fri, 04 May 2001, a certain Debian user wrote: > I remember Debian folks wher talking about some kind of checksums to > integrate in package manager system (dpkg e.a.) some time ago. Is there > any work in progress, where can i find out more about this? I took a > look on Debian's documentatio

Re: Apt-get package verification

2001-02-08 Thread Henrique M Holschuh
On Thu, 08 Feb 2001, Christian Hammers wrote: > > Currently it won't. :-\ You would have to get the packages yourself > > and check the md5sums. > Which were of course altered by the cracker. Bad idea. Just subscribe to debian-devel-changes or debian-changes @lists.debian.org, the .changes files

Re: Apt-get package verification

2001-02-08 Thread Henrique M Holschuh
On Thu, 08 Feb 2001, Christian Hammers wrote: > > Currently it won't. :-\ You would have to get the packages yourself > > and check the md5sums. > Which were of course altered by the cracker. Bad idea. Just subscribe to debian-devel-changes or debian-changes @lists.debian.org, the .changes file

Security patches being reverted, and the BTS

2001-01-27 Thread Henrique M Holschuh
The recent mgetty upload security fix, and an NMU upload (of mgetty) to unstable yesterday reminded me of a serious issue we still have to address. Sometimes, security patches made by the security team (and made available through security.debian.org) are reverted on mistake by maintainers on the n

Security patches being reverted, and the BTS

2001-01-27 Thread Henrique M Holschuh
The recent mgetty upload security fix, and an NMU upload (of mgetty) to unstable yesterday reminded me of a serious issue we still have to address. Sometimes, security patches made by the security team (and made available through security.debian.org) are reverted on mistake by maintainers on the

Re: System log monitor

2000-12-10 Thread Henrique M Holschuh
On Sun, 10 Dec 2000, Rene Mayrhofer wrote: > files in there. Another small question: Is it better to have different .d > directories (for ignore, violations, violations.ignore and hacking) or having > one .d directory and using filename-postfixes (e.g. postfix.ignore, > postfix.violations, postfix.

Re: System log monitor

2000-12-10 Thread Henrique M Holschuh
On Sun, 10 Dec 2000, Rene Mayrhofer wrote: > files in there. Another small question: Is it better to have different .d > directories (for ignore, violations, violations.ignore and hacking) or having > one .d directory and using filename-postfixes (e.g. postfix.ignore, > postfix.violations, postfix

Re: System log monitor

2000-12-10 Thread Henrique M Holschuh
On Sun, 10 Dec 2000, Rene Mayrhofer wrote: > Well, the package is not orphaned, I have already fixed nearly all bug > reports. > The reason why the package has not been updated in a while is that I am in the > NM queue for myself (since about 1,5 years). Now I am approved by an AM, > but > st

Re: System log monitor

2000-12-10 Thread Henrique M Holschuh
On Sun, 10 Dec 2000, Rene Mayrhofer wrote: > Well, the package is not orphaned, I have already fixed nearly all bug reports. > The reason why the package has not been updated in a while is that I am in the > NM queue for myself (since about 1,5 years). Now I am approved by an AM, but > still w

Re: [RFC] Network Security Policy (was Re: atd...)

2000-09-26 Thread Henrique M Holschuh
On Tue, 26 Sep 2000, Simon Huggins wrote: > On Tue, Sep 26, 2000 at 09:28:17AM +0100, Patrick Lambe wrote: > What would be nice would be The One True Way to know if a service was > meant to be disabled or not. i.e. when I apt-get install > new_network_daemon I want it to look at /etc/security/netw

Re: [RFC] Network Security Policy (was Re: atd...)

2000-09-26 Thread Henrique M Holschuh
On Tue, 26 Sep 2000, Simon Huggins wrote: > On Tue, Sep 26, 2000 at 09:28:17AM +0100, Patrick Lambe wrote: > What would be nice would be The One True Way to know if a service was > meant to be disabled or not. i.e. when I apt-get install > new_network_daemon I want it to look at /etc/security/net

Re: OTP (opie) and ssh

2000-09-18 Thread Henrique M Holschuh
On Mon, 18 Sep 2000, Thorsten Sideb0ard wrote: > By a one time password system i am not referring to carrying round a sheet > of paper, but rather something like the SecureID system, or some kind of > automated otp generator, and i belive there is a good one for the Palm > platform also. Yeah, tho

Re: OTP (opie) and ssh

2000-09-18 Thread Henrique M Holschuh
> I can see the point, > because a would be intruder could look over the shoulder of an authorised > user, or someone with more priveleges than himself, and watch his password > being entered. Then it doesnt matter whether the session is encrypted > because the intruder knows the password. > > the

Re: OTP (opie) and ssh

2000-09-18 Thread Henrique M Holschuh
On Mon, 18 Sep 2000, Thorsten Sideb0ard wrote: > By a one time password system i am not referring to carrying round a sheet > of paper, but rather something like the SecureID system, or some kind of > automated otp generator, and i belive there is a good one for the Palm > platform also. Yeah, th

Re: OTP (opie) and ssh

2000-09-18 Thread Henrique M Holschuh
> I can see the point, > because a would be intruder could look over the shoulder of an authorised > user, or someone with more priveleges than himself, and watch his password > being entered. Then it doesnt matter whether the session is encrypted > because the intruder knows the password. > > th

Re: Editing and storing encrypted files

2000-09-07 Thread Henrique M Holschuh
On Thu, 07 Sep 2000, Arthur Korn wrote: > Could somebody more familiar with vim than me please tell me > (us) wheter this writes anything unencrypted onto disk? If not, > shall I file a wishlist bug against vim-rt to include this? Is your swap file (not VIM's, the OS') in an encripted partition? O

Re: Editing and storing encrypted files

2000-09-07 Thread Henrique M Holschuh
On Thu, 07 Sep 2000, Arthur Korn wrote: > Could somebody more familiar with vim than me please tell me > (us) wheter this writes anything unencrypted onto disk? If not, > shall I file a wishlist bug against vim-rt to include this? Is your swap file (not VIM's, the OS') in an encripted partition?