Sorry, wrong list. Please ignore - Re: Logrotate failing for apache logs

2005-04-01 Thread Malcolm Ferguson
Malcolm Ferguson wrote: Sorry, wrong list. I meant to send to debian-user. Malc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Logrotate failing for apache logs

2005-04-01 Thread Malcolm Ferguson
I've just rebuild my server and now it appears that logrotate is failing for apache: wolverine:/var/log# logrotate /etc/logrotate.d/apache error running shared postrotate script for /var/log/apache/*.log I've run the above command through strace and it looks like logrotate creates a file in /tmp

[OT] Release cycle - was Re: My machine was hacked - possibly via sshd?

2005-03-30 Thread Malcolm Ferguson
David Pastern wrote: On Wed, 2005-03-30 at 20:34 +1000, Matthew Palmer wrote: You're not the first person to observe that woody's getting a bit long in the tooth. We're working on a new release, an no amount of aimless commentary on the symptom is going to solve the problems. I know. Firs

Re: My machine was hacked - possibly via sshd?

2005-03-28 Thread Malcolm Ferguson
Thanks for all the feedback everybody. It looks like an ssh dictionary attack discovered a weak password, followed by a local root exploit against an out-of-date kernel. From now on I will be sticking with an official Debian stable one. Alvin, I made a tar of the filesystem and put it on anot

Re: My machine was hacked - possibly via sshd?

2005-03-28 Thread Malcolm Ferguson
Mark Foster wrote: Malcolm Ferguson wrote: My machine was cracked on Thursday evening. I'm trying to understand how it happened so that it doesn't go down again. Sounds to me like you know exactly how it happened - ssh user enumeration won the jackpot. Thanks: you got me thinki

My machine was hacked - possibly via sshd?

2005-03-28 Thread Malcolm Ferguson
All, My machine was cracked on Thursday evening. I'm trying to understand how it happened so that it doesn't go down again. Machine was running Debian 3.0 and was behind a NAT box with ports forwarded for SMTP, HTTP and SSH. It hadn't been rebooted for 430 days. I was using a 2.4 kernel wit

Re: passwords and crypt?

2001-11-29 Thread Malcolm Ferguson
Mike Dresser wrote: > > On Fri, 30 Nov 2001, Roger Keays wrote: > > > I'm not sure if this is common knowledge or not, but I have just noticed > > the effects of having the first two letters of your password the same as > > the first two in your login name... You can use any extension of your > >

Re: passwords and crypt?

2001-11-29 Thread Malcolm Ferguson
Mike Dresser wrote: > > On Fri, 30 Nov 2001, Roger Keays wrote: > > > I'm not sure if this is common knowledge or not, but I have just noticed > > the effects of having the first two letters of your password the same as > > the first two in your login name... You can use any extension of your >

Re: Where should I start from ?

2001-11-27 Thread Malcolm Ferguson
John DOE wrote: > > Have to code the application in C ( I would prefer visual basic since it is > sometimes hard to tell a professor that this code does it in C especially if > you are in Turkey ) or C++ and of course on GNU Debian Linux. I'm a bit confused by this statement. First, what's Tu

Re: Where should I start from ?

2001-11-27 Thread Malcolm Ferguson
John DOE wrote: > > Have to code the application in C ( I would prefer visual basic since it is >sometimes hard to tell a professor that this code does it in C especially if you are >in Turkey ) or C++ and of course on GNU Debian Linux. I'm a bit confused by this statement. First, what's Tur