Re: PAM account, auth, password, session source code and modules + config of /etc/nsswitch.conf

2005-01-22 Thread elijah wright
Any pointers on where to find skeleton source files, and a make file for PAM account, auth, password, session in C? perl? other recommended programing languages? ??? Also, how is it that Linux knows to use LDAP auth if its installed? The config file for the ldap auth is one thing. It points t

Re: BAHAHA was (telnetd vulnerability from BUGTRAQ)

2004-09-28 Thread elijah wright
Assuming the U.S. government doesn't freak out and stop it, IPSEC encryption will soon(?) be used for all internet communication, which hahahahahahahahahaha agreed - hahahahahahahahahahahahahahahahahahahaha --elijah -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Tr

Re: pgp in Debian: obsolete?

2004-08-08 Thread elijah wright
> http://tiefighter.et.tudelft.nl/~arthur/gnupg-idea/ > > It is sort of an source-based installer. You get the source, when > building the package it downloads the source and creates a binary > package. The source file idea.c is however not DFSG free because the > copyrights notice forbids distrib

Re: [d-security] Re: [SECURITY] [DSA 532-1] New libapache-mod-ssl packages fix multiple vulnerabilities

2004-07-28 Thread elijah wright
> * elijah wright <[EMAIL PROTECTED]> [040727 19:40]: > > and it probably would have been fine, if you'd been running a stock > > config. > > If things only have to be fine when using a stock config, why not > abolish all those limiting rules about /etc and just

Re: [d-security] Re: [SECURITY] [DSA 532-1] New libapache-mod-ssl packages fix multiple vulnerabilities

2004-07-27 Thread elijah wright
> That's my point: I did not do "apt-get install", I did "apt-get > upgrade". If this had been a fresh install, I would agree with you > completely, but not in the case of a security update. and it probably would have been fine, if you'd been running a stock config. with great power comes great

Re: Non-existent user able to log in??? hacked????

2004-05-18 Thread elijah wright
> It's been a long time, but IIRC, the NIS uses it's own dbm files which > are built from those in /etc. The test account must have existed when > you set it up. Arnaud, if i remember correctly, there's a special directory you can go to and type 'make' - you get a set of rebuilt NIS databases as

Re: Non-existent user able to log in??? hacked????

2004-05-18 Thread elijah wright
> It's been a long time, but IIRC, the NIS uses it's own dbm files which > are built from those in /etc. The test account must have existed when > you set it up. Arnaud, if i remember correctly, there's a special directory you can go to and type 'make' - you get a set of rebuilt NIS databases as

Re: Dsniff/mailsnarf

2004-02-24 Thread elijah wright
> > I've been asked to place a sniffer on a network that handles HIPPA > > data, and watch for e-mail containing certain strings. I figured that > > mailsnarf would be the best way to do this. > > > Aside from any of hte technical details of this, I'm kind of wondering > how this fits into HIPPA a

Re: Dsniff/mailsnarf

2004-02-24 Thread elijah wright
> > I've been asked to place a sniffer on a network that handles HIPPA > > data, and watch for e-mail containing certain strings. I figured that > > mailsnarf would be the best way to do this. > > > Aside from any of hte technical details of this, I'm kind of wondering > how this fits into HIPPA a

Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?

2003-12-03 Thread elijah wright
> ... but on a second thought: how do I find this information out ion my > own and what does "SMP" stand for? my understanding is that all of the post-k6/III CPUs from AMD are K7-ish. [well, the 32-bit non-AMD64 cpus anyway... if there are other quirks *I* would like to know.] you'd know if you h

Re: Will 2.4.20 Source be patched for the latest kernel vulnerability?

2003-12-03 Thread elijah wright
> ... but on a second thought: how do I find this information out ion my > own and what does "SMP" stand for? my understanding is that all of the post-k6/III CPUs from AMD are K7-ish. [well, the 32-bit non-AMD64 cpus anyway... if there are other quirks *I* would like to know.] you'd know if you h