Re: [SECURITY] [DSA 1960-1] New acpid packages fix weak file permissions

2009-12-20 Thread Matthijs Kooijman
Hi Raphael, > its log file with weak permissions, which might expose sensible > information or might be abused by a local user to consume all free disk Shouldn't that be "sensitive information" ? Gr. Matthijs signature.asc Description: Digital signature

Re: Fwd: [USN-74-1] Postfix vulnerability

2005-02-07 Thread Matthijs Mohlmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Already read this link: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=267837 Jan Wagner wrote: | -- Forwarded Message -- | | Subject: [USN-74-1] Postfix vulnerability | Date: Sunday 06 February 2005 23:55 | From: Wietse Venema <[EMA

unsubscribe

2004-02-08 Thread Matthijs
unsubscribe

unsubscribe

2004-02-08 Thread Matthijs
unsubscribe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: LKM

2004-01-26 Thread Matthijs
On Mon, 2004-01-26 at 11:40, Thiago Ribeiro wrote: > Hi, > > When I run tiger, I got a follow error: > > NEW: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit > installation > NEW: Warning: Possible LKM Trojan installed > > But I alredy list my proccess and did find nothing... >

Re: LKM

2004-01-26 Thread Matthijs
On Mon, 2004-01-26 at 11:40, Thiago Ribeiro wrote: > Hi, > > When I run tiger, I got a follow error: > > NEW: --WARN-- [rootkit004f] Chkrootkit has detected a possible rootkit > installation > NEW: Warning: Possible LKM Trojan installed > > But I alredy list my proccess and did find nothing... >

Re: Debian servers "hacked"?

2003-11-26 Thread Matthijs Mohlmann
ey, Maybe some piece of advice. I run a server with the grsecurity patch on the kernel maybe that's also an option to run on the debian server(s) Maybe this is already on the server, when so, i've nothing said. Regards, Matthijs On Fri, 2003-11-21 at 13:13, Jan Wagner wrote: >

Re: Debian servers "hacked"?

2003-11-26 Thread Matthijs Mohlmann
ey, Maybe some piece of advice. I run a server with the grsecurity patch on the kernel maybe that's also an option to run on the debian server(s) Maybe this is already on the server, when so, i've nothing said. Regards, Matthijs On Fri, 2003-11-21 at 13:13, Jan Wagner wrote: >

Re: KerberosV OpenLDAP and PAM

2003-08-31 Thread Matthijs Mohlmann
On Sun, 2003-08-31 at 00:57, Stephen Frost wrote: > * Matthijs Mohlmann ([EMAIL PROTECTED]) wrote: > > I use for authentication KerberosV. For all types of data i use OpenLDAP > > and for login on into a computer on a network i use PAM. > [...] > > Now i want this togeth

Re: KerberosV OpenLDAP and PAM

2003-08-31 Thread Matthijs Mohlmann
On Sun, 2003-08-31 at 00:57, Stephen Frost wrote: > * Matthijs Mohlmann ([EMAIL PROTECTED]) wrote: > > I use for authentication KerberosV. For all types of data i use OpenLDAP > > and for login on into a computer on a network i use PAM. > [...] > > Now i want this togeth

Re: KerberosV OpenLDAP and PAM

2003-08-30 Thread Matthijs Mohlmann
On Sat, 2003-08-30 at 23:37, Cajus Pollmeier wrote: > On Samstag, 30. August 2003 23:06, Matthijs Mohlmann wrote: > > ey all, > > > > I use for authentication KerberosV. For all types of data i use OpenLDAP > > and for login on into a computer on a network i use PAM. &

KerberosV OpenLDAP and PAM

2003-08-30 Thread Matthijs Mohlmann
ey all, I use for authentication KerberosV. For all types of data i use OpenLDAP and for login on into a computer on a network i use PAM. When i use KerberosV then i do so: auth requisite pam_securetty.so auth requisite pam_nologin.so auth required pam_env.so auth sufficient pam_krb5.so a

Re: KerberosV OpenLDAP and PAM

2003-08-30 Thread Matthijs Mohlmann
On Sat, 2003-08-30 at 23:37, Cajus Pollmeier wrote: > On Samstag, 30. August 2003 23:06, Matthijs Mohlmann wrote: > > ey all, > > > > I use for authentication KerberosV. For all types of data i use OpenLDAP > > and for login on into a computer on a network i use PAM. &

KerberosV OpenLDAP and PAM

2003-08-30 Thread Matthijs Mohlmann
ey all, I use for authentication KerberosV. For all types of data i use OpenLDAP and for login on into a computer on a network i use PAM. When i use KerberosV then i do so: auth requisite pam_securetty.so auth requisite pam_nologin.so auth required pam_env.so auth sufficient pam_krb5.so a

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Matthijs Mohlmann
I have here also key login. It's very easy. ssh-keygen -t dsa You got now two files id_dsa and id_dsa.pub. You put the id_dsa.pub in ~/.ssh/authorized_keys2 and id_dsa on your client in ~/.ssh/id_dsa. When you start now ssh on the client to the remote he take the id_dsa key and login. :-) That's

Re: Passwordless Authentication (was Re: How to reduce sidsecurity)

2003-08-01 Thread Matthijs Mohlmann
I have here also key login. It's very easy. ssh-keygen -t dsa You got now two files id_dsa and id_dsa.pub. You put the id_dsa.pub in ~/.ssh/authorized_keys2 and id_dsa on your client in ~/.ssh/id_dsa. When you start now ssh on the client to the remote he take the id_dsa key and login. :-) That's

Re: XP box inside the firewall

2003-07-30 Thread Matthijs Mohlmann
Installing Woody on your parents laptop ? On Wed, 2003-07-30 at 14:01, Kjetil Kjernsmo wrote: > Hi all! > > It seems I have to have an Windows XP box inside the firewall for some > time to come... :-( (It's not my network, it's my parent's, and they > have a laptop with XP, their workstation is

Re: XP box inside the firewall

2003-07-30 Thread Matthijs Mohlmann
Installing Woody on your parents laptop ? On Wed, 2003-07-30 at 14:01, Kjetil Kjernsmo wrote: > Hi all! > > It seems I have to have an Windows XP box inside the firewall for some > time to come... :-( (It's not my network, it's my parent's, and they > have a laptop with XP, their workstation is

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Matthijs Mohlmann
Why download the source from RedHat? The source from debian is also patched with needed patches. apt-get install kernel-source On Mon, 2003-07-28 at 19:05, Bruce Banner wrote: > You can download Red Hats > kernel-source-2.4.20-19.9.i386.rpm run alien against > it and install the dpkg'ed kernel-

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Matthijs Mohlmann
Why download the source from RedHat? The source from debian is also patched with needed patches. apt-get install kernel-source On Mon, 2003-07-28 at 19:05, Bruce Banner wrote: > You can download Red Hats > kernel-source-2.4.20-19.9.i386.rpm run alien against > it and install the dpkg'ed kernel-