Does anyone have experiences with plash?

2005-11-24 Thread Tarjei Huse
. Kind regards, Tarjei -- Tarjei Huse <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

How efficient is mounting /usr ro?

2003-10-09 Thread Tarjei Huse
Hi, The Securing Debian manual suggest one should set the /usr partition to ro and use remount when you install new programs. I was just wondering how much security one gains with this. Wouldn't most hackers go after the programs in the /bin and /sbin directories anyway? Thanks for any input. Tar

How efficient is mounting /usr ro?

2003-10-09 Thread Tarjei Huse
Hi, The Securing Debian manual suggest one should set the /usr partition to ro and use remount when you install new programs. I was just wondering how much security one gains with this. Wouldn't most hackers go after the programs in the /bin and /sbin directories anyway? Thanks for any input. Tar

Re: Looking for a simple SSL-CA package

2003-08-24 Thread Tarjei Huse
Hi, I'd like to thank all who contributed. > If you don't want to run your own certificate authority or pay a > commercial one to sign your key, and you don't have a lot of > certificates to deal with, you can have each key simply be self-signed, > which I believe is what's being recommended here.

Re: Looking for a simple SSL-CA package

2003-08-24 Thread Tarjei Huse
Hi, I'd like to thank all who contributed. > If you don't want to run your own certificate authority or pay a > commercial one to sign your key, and you don't have a lot of > certificates to deal with, you can have each key simply be self-signed, > which I believe is what's being recommended here.

Looking for a simple SSL-CA package

2003-08-21 Thread Tarjei Huse
Hi, I'm no expert on handling certificates and I hope not having to learn all the commandline switches of openssl by heart. However, I do need a simple setup of a CA that I may use for creating selfsigned certificates, webpages that clients may use to import the certificates and also a way to

Looking for a simple SSL-CA package

2003-08-21 Thread Tarjei Huse
Hi, I'm no expert on handling certificates and I hope not having to learn all the commandline switches of openssl by heart. However, I do need a simple setup of a CA that I may use for creating selfsigned certificates, webpages that clients may use to import the certificates and also a way to

Re: postfix security configuration

2003-08-14 Thread Tarjei Huse
This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Am Montag, 11.08.03, um 12:59 Uhr (Europe/Zurich) schrieb Tomasz > Papszun: > >> > > > > If you want to prevent them fr

Re: postfix security configuration

2003-08-11 Thread Tarjei Huse
This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Am Montag, 11.08.03, um 12:59 Uhr (Europe/Zurich) schrieb Tomasz > Papszun: > >> > > > > If you want to prevent them fr

Re: recommendations for FTP server

2003-06-20 Thread Tarjei Huse
On Fri, 2003-06-20 at 18:56, Stephen Gran wrote: > Hello all, > > I am thinking about setting up an FTP server to be used by myself and a > couple of friends. The box it will be running on is basically stock > Woody, and is currently only running apache and NAT'ing for a LAN. > > I'd like the FT

Re: recommendations for FTP server

2003-06-20 Thread Tarjei Huse
On Fri, 2003-06-20 at 18:56, Stephen Gran wrote: > Hello all, > > I am thinking about setting up an FTP server to be used by myself and a > couple of friends. The box it will be running on is basically stock > Woody, and is currently only running apache and NAT'ing for a LAN. > > I'd like the FT

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread Tarjei Huse
Networks needing a greater degree of privacy and authentication can try AFS/Kerberos (entailing non-free server-end software). Substituting LDAP-SSL for NIS is arguably a step forward, but then NFS remains a problem (No Friggin' Security). Doesn't NFS v4 answer some of these problems? Does a

Re: OT: Is it so easy to break into an NIS?

2003-03-19 Thread Tarjei Huse
Networks needing a greater degree of privacy and authentication can try AFS/Kerberos (entailing non-free server-end software). Substituting LDAP-SSL for NIS is arguably a step forward, but then NFS remains a problem (No Friggin' Security). Doesn't NFS v4 answer some of these problems? Does any

Re: NFS, password transparency, and security

2002-04-08 Thread Tarjei Huse
Hi, Just thought I'd chip inn some support for LDAP. Also a kerberos pointer: www.bayour.com has a very good ldap+kerberos howto for debian written by Turbo Fredrikson. Also you should check out directory administrator for admining your directory. A simple ldap client for administrating ldap user

Re: NFS, password transparency, and security

2002-04-07 Thread Tarjei Huse
Hi, Just thought I'd chip inn some support for LDAP. Also a kerberos pointer: www.bayour.com has a very good ldap+kerberos howto for debian written by Turbo Fredrikson. Also you should check out directory administrator for admining your directory. A simple ldap client for administrating ldap use

Re: Rãspuns: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
only me. *grin* > take care, > Dani. > > -Mesaj original- > De la: Tarjei Huse [mailto:[EMAIL PROTECTED] > Trimis: Monday, December 03, 2001 1:01 PM > Catre: debian-security@lists.debian.org > Cc: debian-security@lists.debian.org > Subiect: Re: Rãspuns: finding

Re: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
Thanks, I got: dev_to_tty tdev /dev/pts/%s /dev/%s /dev/tty%s /dev/pty%s /dev/%snsole Obsolete W option not supported. (You have a /dev/drum?) Any comments? Does this look ok? Tarjei Petre Daniel wrote: > > -Mesaj original- > De la: Tarjei Huse [mailto:[EMAIL PROTECTED]

Re: Rãspuns: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
only me. *grin* > take care, > Dani. > > -Mesaj original- > De la: Tarjei Huse [mailto:[EMAIL PROTECTED]] > Trimis: Monday, December 03, 2001 1:01 PM > Catre: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subiect: Re: Rãspuns: finding hidden processes > > Th

Re: Rãspuns: finding hidden processes

2001-12-03 Thread Tarjei Huse
Thanks, I got: dev_to_tty tdev /dev/pts/%s /dev/%s /dev/tty%s /dev/pty%s /dev/%snsole Obsolete W option not supported. (You have a /dev/drum?) Any comments? Does this look ok? Tarjei Petre Daniel wrote: > > -Mesaj original- > De la: Tarjei Huse [mailto:[EMAIL PROTECTED]]

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
gettytty1 pid: 7982 /usr/sbin/sshd pid: 862 xinetd-stayalive-reuse-pidfile/var/run/xinetd.pid pid: 9 pid: 969 /usr/libexec/postfix/master pid: 983 crond pid: 990 smbd-D pid: 992 nmbd-D pid: 994 nmbd-D pid: 995 netlogond-D pid: 997 samrd-D pid: 999 browserd-D Robert Mognet wrote: > > Hello

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
Could this be caused because I do not have all pids in the same dir? Tarjei [EMAIL PROTECTED] wrote: > > > Hi If I run chkproc from the chkrootid package I get: > > You have 3 process hidden for readdir command > > You have 3 process hidden for ps command > > > > How can I find these proc

finding hidden processes

2001-12-03 Thread Tarjei Huse
Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Tarjei

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
ile/var/run/xinetd.pid pid: 9 pid: 969 /usr/libexec/postfix/master pid: 983 crond pid: 990 smbd-D pid: 992 nmbd-D pid: 994 nmbd-D pid: 995 netlogond-D pid: 997 samrd-D pid: 999 browserd-D Robert Mognet wrote: > > Hello, > > On Mon, Dec 03, 2001 at 06:14:33PM +0100, Tarjei Huse wrot

Re: finding hidden processes

2001-12-03 Thread Tarjei Huse
Could this be caused because I do not have all pids in the same dir? Tarjei [EMAIL PROTECTED] wrote: > > > Hi If I run chkproc from the chkrootid package I get: > > You have 3 process hidden for readdir command > > You have 3 process hidden for ps command > > > > How can I find these pro

finding hidden processes

2001-12-03 Thread Tarjei Huse
Hi If I run chkproc from the chkrootid package I get: You have 3 process hidden for readdir command You have 3 process hidden for ps command How can I find these processes? Tarjei -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PRO

Re: Security Update

2001-10-13 Thread Tarjei Huse
> what's that actually mean? Is that mean that i already have the most > secure that debian have? Yes, but there is still a lot to do on setup. :) I'll cut and paste from a earlyer post on this list (not mine): Scott Henson wrote:http >Can any one point me to the best books, how-to's, articles, sc

Re: Security Update

2001-10-13 Thread Tarjei Huse
> what's that actually mean? Is that mean that i already have the most > secure that debian have? Yes, but there is still a lot to do on setup. :) I'll cut and paste from a earlyer post on this list (not mine): Scott Henson wrote:http >Can any one point me to the best books, how-to's, articles, s