similar to: Apache leaks sensitive info in PHP phpinfo() calls

Recent proftpd security vulnerability release FYI. Ports has latest patched proftpd distribution. -- Jez http://www.munk.nu/ -------------- next part -------------- An embedded message was scrubbed... From: Dave Ahmad <da@securityfocus.com> Subject: ISS Security Brief: ProFTPD ASCII File Remote Compromise Vulnerability (fwd) Date: Tue, 23 Sep 2003 10:25:54 -0600 (MDT) Size: 4588 Url:

Hello, What do you recommend for keeping track of user activities? For preserving bash histories I followed these recommendations: http://www.defcon1.org/secure-command.html They include using 'chflags sappnd .bash_history', enabling process accounting, and the like. My goal is to "watch the watchers," i.e. watch for abuse of power by SOC people with the ability to view

Hi all I am trying to get rid of strings: kernel: Connection attempt to UDP FREEBSD_IP:port from DNSSERVER_IP:53 on my console and in log file I understand that those are replies on DNS queries that for some reason took too long time to be answered. I do not want to turn off the "log in vain" feature. As these strings fill up my log I am afraid to miss some sensitive messages (e.g.

Hi, I would like to log all keyboard activities in all ttys in my FreeBSD 5.2 box. Is there anyway to do it? I read the watch man page and it seems like I should run watch with tty as many times as number of ttys. Am I right? Also is it possible to do the log in invisible way? The main reason is to log all commands typed in shell and tty and send the log to the remote server. How can I

It seems a php-extensions bug. If you comment the mhash.so in /usr/local/etc/php/extensions.ini as: ;entension=mhash.so all works fine and you don't get anymore httpd crash (signal 11) if you use 'apachectl graceful'. Maybe will be a good idea to open PR for this? I hope it helps someone.... (I'm very surprised that this isn't a documented bug in 7.0 yet) -- Thanks, Jordi

I can't seem to figure out why any changes I make to php.ini and restart apache (apachectl stop|start; grep of any httpd processes), the settings do not update. php -r "phpinfo();" | grep Configuration Configuration File (php.ini) Path => /etc/php.ini Configuration I installed extensions via yum and they don't show up. # rpm -qa|grep php php-gd-5.1.6-27.el5

I partially worked out that to do an assign I will need to manually assign a temporary first and then load data into it, which also means I'll need to set up a temporaries list in my code assembler as allocations must be done before anything else? or is it fine to allocate a variable mid-way through a function and the compiler will manage it? With that as well, if I had a function that loads

However I need the standard assignment operator so I can assign the value of a temporary to that of another temporary, or to create a new temporary from an existing one. - Paul ________________________________________ From: Tim Northover <t.p.northover at gmail.com> Sent: 16 March 2016 13:11 To: Paul Hancock Cc: llvm-dev at lists.llvm.org Subject: Re: [llvm-dev] IRBuilder Assignment (

Hi All, Ok after watching all the discussion about some security documentation and teams I have come up with a few ideas that might help out some. I'm willing to program an interface at the extremefreebsd.org site (yes I know it's still new and under some work) that will allow the following: 1. A dedicated page for security related posts (articles, docs, advisories, etc) at

Puppeteers, I''ve seen things in the documentation to make me think this is possible but I''m not sure how to implement it. Here''s what I''d like to do: puppetd pulls down a config file, say httpd.conf BEFORE puppetd moves it to $path, I''d like to have it check it''s integrity with apachectl configtest IF configtest passes, then puppetd should

I am looking at: https://httpd.apache.org/docs/2.4/vhosts/index.html I tried: |apachectl -S | And no output. Even stopping httpd, no output. How to we see how apache parsed the config files? thank you

[1.3.22]-Please Fix "F.E.A.R. 3" - Here is log... http://pastebin.com/BqEpzQWu Thanks! JeZ+Lee

Hello, I built apache+openssl+mod_ssl. It is working fine, and I have been starting the server with: apachectl startssl Recently, however, I have decided that I will not be doing anything over https (for a while, at least) with this web server, so for security reasons, I want to only run on port 80. So now I start the server with: apachectl start And it runs without SSL. My question is, is

Hi, I have CentOS 4.2 installed on my PC and I've successfully installed Oracle 10g along with apache web server(httpd) and perl-DBD-Oracle. The problem is trying to connect to oracle to oracle from a CGI script. I defined all of the environment variables(ORACLE_HOME, LD_LIBRARY_PATH, PERL5LIB) in httpd.conf as well as apachectl scripts but I am getting the following error in the

Hi, Thought I'd just forward this here, because I don't have time to look into it right now, and am off skiing next week. I'd guess that we should be checking for username = ``root'' before going off to do password checks, and rejecting it on that basis first. Cheers, Phil. -- Mind-numbingly stupid UK law alert! Act now to stop it! http://www.stand.org.uk/ --------------

How I can start mongrel apache in the order it must be started after a re-boot automatically? I am using "mongrel_rails cluster::start" in a script after a login...like this... cd /home/sa/workspace/studio mongrel_rails cluster::start /usr/local/apache2/bin/apachectl start Thanks, Jim _________________________________________________________________ Type your favorite song.? Get a

Hi, Am writing scripts to manage configuration management and Asterisk. I would like to be able to point the asterisk binary at config directory with an asterisk.conf in it, and for asterisk to run a pre- flight check. A bit like a pint check in php, 'apachectl configtest' and lots of other tools. asterisk will then exit with 0 on a safe config, and 1 on a bad config. I can

OK, with openssh-SNAP-20001218 I still have the problem of a hanging ssh when running (one specific) command on a server. On the server side, there's a small suid C prog (/usr/dh/mgmt/HupServer) that runs system "/usr/local/apache/bin/apachectl stop/start". Incidentally, apachectl is a shell script, hence the need for a suid wrapper for non-root users... On the client side,

Hi originally I installed php 4 on centos 5.5 and then a few repos including the remi repo to upgrade to php5, which seems to upgrade/work without any issues. However when I make a change to the /etc/php.ini file it doesn't look like apache is seeing it, for example if I change the post_max_size and upload_max_file to 25M each apache still sees the default 2M. I also removed the /etc/php.ini

Hi, I followed the instructions for deploying a site with Passenger from the screencast that is on the Phusion Passenger site and it didn''t work. I am using Dreamhost to host my site- could the problem be on their end? Someone suggested that I do: passenger-install-apache2-module on my command line but I already did that when I first installed Passenger and the Passenger Pref pane