search for: kasprzak

Hi, I''m running into something weird here. I''m using RH5.1 with tcp_wrappers 7.6. The syntax for hosts.allow and hosts.deny is: <service list> : <access list> [ : <shell_command> ] Everything works when I _don''t_ use the shell_command. I used the _exact_ line as in the man-pages utilising "safe_finger" (comes with tcp_wrappers), tcpdchk

I have a RedHat 6.0 x86 server which is serving a number of minor things, which I wish to add shell access to. I'm currently running sshd and am quite happy with it, the exceptiong being that I am unable to make sshd perform a chroot for shell account users. I have been reading man pages and howto's, many of which discuss sshd or chroot, but never the two together. Is this not an

...n.tudelft.nl> Cc: linux-security@redhat.com Subject: [linux-security] Re: Problem with TCP_wrappers In-reply-to: Your message of "Wed, 05 Aug 1998 10:30:03 +0200." <Pine.LNX.3.96.980805102226.960A-100000@jp-gp.vsi.nl> Date: Wed, 05 Aug 1998 16:11:59 +0200 From: Jan Kasprzak <kas@informatics.muni.cz> X-moderate: yes Jan-Philip Velders wrote: [...] : I'm using RH5.1 with tcp_wrappers 7.6. [...] : The tcp_wrappers also have a special compile-time-option which gives more : functionality with all the rules, but then you have to combine all the rules : into _one_...

...disks of 8000K size 1024 > blocksize > loop: loaded (max 8 devices) > PPP generic driver version 2.4.2 > PPP Deflate Compression module registered > Cronyx Ltd, Synchronous PPP and CISCO HDLC (c) 1994 > Linux port (c) 1998 Building Number Three Ltd & Jan "Yenya" > Kasprzak. > LAPB Ethernet driver version 0.01 > NET4: Linux TCP/IP 1.0 for NET4.0 > IP Protocols: ICMP, UDP, TCP, IGMP > IP: routing cache hash table of 512 buckets, 4Kbytes > TCP: Hash tables configured (established 2048 bind 4096) > IPv4 over IPv4 tunneling driver > ip_conntrack versi...

...it script * Fri Oct 29 1999 Damien Miller <djm at ibs.com.au> - Back to old binary names * Thu Oct 28 1999 Damien Miller <djm at ibs.com.au> - Use autoconf - New binary names * Wed Oct 27 1999 Damien Miller <djm at ibs.com.au> - Initial RPMification, based on Jan "Yenya" Kasprzak's <kas at fi.muni.cz> spec. %prep %setup -q %build CFLAGS="$RPM_OPT_FLAGS" \ ./configure --prefix=/usr --sysconfdir=/etc/ssh --with-gnome-askpass \ --with-tcp-wrappers --with-ipv4-default make cd contrib gcc -O -g `gnome-config --cflags gnome gnomeui` \ g...

...o Many people say there is a PAMified version of ssh available at ftp://ftp.replay.com/pub/crypto/redhat/SRPMS (the source) ftp://ftp.replay.com/pub/crypto/redhat/i386 (Intel binaries) (there are analogous paths for the other architectures). The packages are made by Jan "Yenya" Kasprzak <kas@eunet.cz>. Of course, the mirrors of ftp.replay.com contain these RPMs as well. o John A. Martin <jam@jamux.com> says there are PAMified ssh packages at ftp://ftp.fi.muni.cz/pub/ssh/local-fi.muni.cz/linux/ o Andy McRory <amacc@mailer.org> says there is a patch for ssh-...

-----BEGIN PGP SIGNED MESSAGE----- ##### ## ## ###### ## ### ## ## ##### ## # ## ## ## ## ### ## ##### . ## ## . ###### . Secure Networks Inc. Security Advisory

...it script * Fri Oct 29 1999 Damien Miller <djm at ibs.com.au> - Back to old binary names * Thu Oct 28 1999 Damien Miller <djm at ibs.com.au> - Use autoconf - New binary names * Wed Oct 27 1999 Damien Miller <djm at ibs.com.au> - Initial RPMification, based on Jan "Yenya" Kasprzak's <kas at fi.muni.cz> spec. %prep %setup -a 1 %build CFLAGS="$RPM_OPT_FLAGS" \ ./configure --prefix=/usr --sysconfdir=/etc/ssh \ --with-tcp-wrappers --with-ipv4-default \ --with-rsh=/usr/bin/rsh make %if ! %{no_x11_askpass} cd x11-ssh-askpass-%{aversio...

...for staliomem/1 devfs_mk_dev: could not append to parent for staliomem/2 devfs_mk_dev: could not append to parent for staliomem/3 STALLION: failed to register serial driver Cronyx Ltd, Synchronous PPP and CISCO HDLC (c) 1994 Linux port (c) 1998 Building Number Three Ltd & Jan "Yenya" Kasprzak. HDLC support module revision 1.17 SyncLink serial driver $Revision: 4.28 $ devfs_mk_dev: could not append to parent for <NULL>0 devfs_mk_dev: could not append to parent for <NULL>1 devfs_mk_dev: could not append to parent for <NULL>2 devfs_mk_dev: could not append to parent for &...

...o Many people say there is a PAMified version of ssh available at ftp://ftp.replay.com/pub/crypto/redhat/SRPMS (the source) ftp://ftp.replay.com/pub/crypto/redhat/i386 (Intel binaries) (there are analogous paths for the other architectures). The packages are made by Jan "Yenya" Kasprzak <kas@eunet.cz>. Of course, the mirrors of ftp.replay.com contain these RPMs as well. o John A. Martin <jam@jamux.com> says there are PAMified ssh packages at ftp://ftp.fi.muni.cz/pub/ssh/local-fi.muni.cz/linux/ o Andy McRory <amacc@mailer.org> says there is a patch for ssh-...