Re: Upcoming transition of FC3

2005-10-21 Thread Axel Thimm
On Fri, Oct 21, 2005 at 07:21:51PM -0400, Jeff Sheltren wrote: > On Oct 21, 2005, at 5:46 PM, Axel Thimm wrote: > > >On Fri, Oct 21, 2005 at 11:53:45AM -0700, Jesse Keating wrote: > >>I never did like all the extra repo files for each repository. I > >>liked > >>the idea of one file per family,

Re: Upcoming transition of FC3

2005-10-21 Thread Jeff Sheltren
On Oct 21, 2005, at 5:46 PM, Axel Thimm wrote: On Fri, Oct 21, 2005 at 11:53:45AM -0700, Jesse Keating wrote: I never did like all the extra repo files for each repository. I liked the idea of one file per family, so there was one file for say freshrpms, one for atrpms, one for extras, one f

Re: Upcoming transition of FC3

2005-10-21 Thread Axel Thimm
On Fri, Oct 21, 2005 at 11:53:45AM -0700, Jesse Keating wrote: > On Fri, 2005-10-21 at 14:37 -0400, Jeff Sheltren wrote: > > Notice there are separate repo files for base, updates, updates- > > testing and utils. I think this goes better with the new yum.repos.d > > format than having only one

Re: Upcoming transition of FC3

2005-10-21 Thread Jeff Sheltren
On Oct 21, 2005, at 2:53 PM, Jesse Keating wrote: On Fri, 2005-10-21 at 14:37 -0400, Jeff Sheltren wrote: Notice there are separate repo files for base, updates, updates- testing and utils. I think this goes better with the new yum.repos.d format than having only one repo file. Also, both ba

Re: Another security problem..

2005-10-21 Thread Alexander Dalloz
Am Fr, den 21.10.2005 schrieb Alexander Dalloz um 21:28: > I feel mod-security - www.modsecurity.org - is the better approach. It > is available from centos.karan.org repo as an rpm. *g* Forget about the second sentence ;} I thought to communicate on a different list. > Alexander Alexander --

Re: Another security problem..

2005-10-21 Thread Alexander Dalloz
Am Fr, den 21.10.2005 schrieb Benjamin Smith um 21:22: > Some time ago, I wrote a program in PHP that ran as a background task, > essentially grabbing the stdin from a > > "tail -f /var/log/httpd/access.log" > > It would scan each line of the input for certain patterns. EG: a certain # of >

Re: Another security problem..

2005-10-21 Thread Benjamin Smith
Some time ago, I wrote a program in PHP that ran as a background task, essentially grabbing the stdin from a "tail -f /var/log/httpd/access.log" It would scan each line of the input for certain patterns. EG: a certain # of hits in the most recent 5 minutes, a bunch of others like known "sploi

Re: Upcoming transition of FC3

2005-10-21 Thread Jesse Keating
On Fri, 2005-10-21 at 14:37 -0400, Jeff Sheltren wrote: > Notice there are separate repo files for base, updates, updates- > testing and utils. I think this goes better with the new yum.repos.d > format than having only one repo file. Also, both base and updates > are enabled, testing and ut

Re: Upcoming transition of FC3

2005-10-21 Thread Jeff Sheltren
On Oct 21, 2005, at 12:33 PM, Jesse Keating wrote: Well, we need to get packages ready for FC3 for us to provide to the end user, as well as packages ready for FC5 to be included in core distribution. Using $releasever and $basearch variables in our repo file means we can supply one repo fi

Re: Upcoming transition of FC3

2005-10-21 Thread Michal Jaegermann
On Fri, Oct 21, 2005 at 12:26:34PM -0400, Jeff Sheltren wrote: > On Oct 21, 2005, at 12:08 PM, Michal Jaegermann wrote: > > >Of course an URL to the key could be also in http://... , or some > >other protocol, form. You need to retrieve it only once and rpm > >from FC3 will import it. > > > Yeah,

Re: Upcoming transition of FC3

2005-10-21 Thread Jesse Keating
On Fri, 2005-10-21 at 11:49 -0400, Jeff Sheltren wrote: > Yep, I can put one together. You do mean 'FC3' and not 'FC5', > correct? :) What do you think is better - to create separate RPMs > (one for each arch), or to have all the repo configs in one RPM and > then just have people enable th

Re: Upcoming transition of FC3

2005-10-21 Thread Jeff Sheltren
On Oct 21, 2005, at 12:08 PM, Michal Jaegermann wrote: On Fri, Oct 21, 2005 at 11:49:14AM -0400, Jeff Sheltren wrote: By the way, where to store the GPG key on FC3? I think /etc/pki wasn't brought around until FC4, so I am thinking that /usr/share/ doc/ fedora-legacy/ would be a good place

Re: Upcoming transition of FC3

2005-10-21 Thread Michal Jaegermann
On Fri, Oct 21, 2005 at 11:49:14AM -0400, Jeff Sheltren wrote: > > By the way, where to store the GPG key on FC3? I think /etc/pki > wasn't brought around until FC4, so I am thinking that /usr/share/doc/ > fedora-legacy/ would be a good place for it. If you want to store keys on a disk then I

Re: Upcoming transition of FC3

2005-10-21 Thread Jeff Sheltren
On Oct 20, 2005, at 7:16 PM, Jesse Keating wrote: On Wed, 2005-10-19 at 14:17 -0400, Jeff Sheltren wrote: I like the idea of having a yum repo file pushed out by redhat, although I'm not sure if they'd go for it or not. If not, I think a good idea may be for us to release a package like legac

Re: Another security problem..

2005-10-21 Thread Nils Breunese (Lemonbit Internet)
G. Roderick Singleton wrote: Deamonshield works like a charm. If you check the forums there is a patch to make it work under RH7.3 provided you have python24 installed. I don't believe it's available via yum, right? Python24 is. Don't know about daemonshield as I did it from source and haven

Re: Another security problem..

2005-10-21 Thread G. Roderick Singleton
On Fri, 2005-10-21 at 16:12 +0200, Nils Breunese (Lemonbit Internet) wrote: > G. Roderick Singleton wrote: > > >> Another script I've found is Daemon Shield [2], but I haven't tried > >> it yet. Adds iptables rules for probing hosts. Any comments? Does > >> anyone know of better scripts? > > > > D

Re: Another security problem..

2005-10-21 Thread Nils Breunese (Lemonbit Internet)
G. Roderick Singleton wrote: Another script I've found is Daemon Shield [2], but I haven't tried it yet. Adds iptables rules for probing hosts. Any comments? Does anyone know of better scripts? Deamonshield works like a charm. If you check the forums there is a patch to make it work under RH7.

Re: Another security problem..

2005-10-21 Thread G. Roderick Singleton
On Fri, 2005-10-21 at 15:15 +0200, Nils Breunese (Lemonbit Internet) wrote: > Matthew Nuzum wrote: > > > I've not looked into it, but it would be nice if there was some > > *simple* to > > maintain script that would detect these types of probes and > > automatically > > add the IP to hosts.den

Re: Another security problem..

2005-10-21 Thread Nils Breunese (Lemonbit Internet)
Matthew Nuzum wrote: I've not looked into it, but it would be nice if there was some *simple* to maintain script that would detect these types of probes and automatically add the IP to hosts.deny and etc. I found DenyHosts [1] which is a Python script you can run in daemon mode (or a cro