similar to: Re: signing a filesystem

[Sorry, it seems that I overlooked this message -- alex] Hi, Since nvi is hard to come by, here is a little program to mimic the behavior of nvi on any file you care to try... usage: locklogin file_to_lock It first tries POSIX locking and then does BSD flavor. It seems that it is BSD after all that is causing the trouble... Best wishes Andrew #!/bin/csh -f # Uuencoded gz-compressed file

Hi, I''ve been writing a login application to utilize the features of both PAM and libpwdb. Not surprisingly, this has meant looking at some old code.. The following denial of service attack seems to work quite nicely on my ancient Red Hat 3.0.3 system with the standard login application. Perhaps this is not a problem with 4.0? Does anyone know about other distributions? joe$ nvi

Hi, I''ve been thinking about group membership and the corresponding (weak) restrictions to system resources. Consider the following: % cat > gsh.c main() { system("/bin/sh"); } % cc -o gsh gsh.c % id uid=100(joe) gid=500(users) groups=14(floppy),15(sound) % chgrp sound gsh % chmod g+s gsh % mail abuser Subject: You owe me $5...

In Debian 1.1, the optional DOSEMU package installs /usr/sbin/dos setuid root. This is a serious security hole which can be exploited to gain access to any file on the system. Package: dosemu Version: 0.64.0.2-9 ------- start of cut text -------------- $ cat /etc/debian_version 1.1 $ id uid=xxxx(quinlan) gid=xxxx(quinlan) groups=xxxx(quinlan),20(dialout),24(cdrom) [quinlan:~]$ ls -al

On Fri, Feb 13, 2015 at 7:12 AM, Lamar Owen <lowen at pari.edu> wrote: > On 02/13/2015 05:41 AM, James Hogarth wrote: > > This is also why the Orange Book and its Rainbow kin exist (Orange Book = > 5200.28-STD, aka DoD Trusted Computer System Evaluation Criteria). > Should anyone care to learn from the Rainbow Books, they are available from the United States of America (USA)

Phexro <ieure@linknet.kitsap.lib.wa.us> writes: > chroot()''d processes. So, important system calls could be modified thus: Since there are tons of syscalls and new ones appearing all the time, "Fixing" some of them doesn''t seem like a good idea. It seems more reasonbale to deny access to all of them, except for a few specific ones (that can moreover be

Good morning, I would appreciate some help. SAMBA is new turf. I am working out of a John Blair Book SAMBA: Integrating UNIX and Windows 1998 PROBLEM: unable to print to the 2nd of two printers on a samba host. ENVIRONMENT: -4 systems in a home network; connected to an HP hub (10 meg) -3 systems run Red Hat linux 9.0 (system names: snoopy, white, olblue) -4th system runs Windows 2000

Marek Michalkiewicz <marekm@I17LINUXB.ISTS.PWR.WROC.PL> wrote: : It seems that most of the RedHat 5.3.12 security patches are in the : standard 5.4.17, except for the patch below. Also, there are more : (different) fixes in 5.4.18 (check h_length against sizeof(sin_addr) : in inet/rcmd.c and inet/rexec.c). : + { : +

-------- Original Message -------- Subject: [Samba] second printer connection Date: Thu, 04 Mar 2004 14:17:44 -0600 From: Gregory W. Eckrich <newxman@outdrs.net> To: samba <samba@lists.samba.org> PROBLEM: unable to print to the 2nd of two printers on a samba host. ENVIRONMENT: -4 systems in a home network; connected to an HP Pro Curve hub (10 meg) -3 systems run Red Hat linux

Folks, Samba version 2.0.5a, as shipped with RedHat Linux 6.1. There may be an obvious answer to the problem I am facing, but no matter how many times I leave it and come back to it, I'm still unable to see what I'm doing wrong. Please can anyone help? I'm trying to Here's the problem. I have reason to want a directory tree to be writable by virtue of the GID of users

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated sgml-tools packages fix insecure temporary file handling Advisory ID: RHSA-2001:027-02 Issue date: 2001-03-09 Updated on: 2001-03-14 Product: Red Hat Linux Keywords: sgml-tools /tmp tempfile Cross

This package provides a common set of SGML entities and XML/CSS style sheets used in building/formatting the documentation provided in other X.Org packages. It's typically only needed by people building from source who want to produce formatted documentation from their builds, or those who have installed the HTML version of the documentation, which refers to the included common xorg.css

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This package provides the X Window System documentation that doesn't belong in a more specific package. It used to provide a lot of docs that did belong in more specific packages, but that has largely been corrected in this release: git diff --shortstat xorg-docs-1.5..xorg-docs-1.5.99.901 155 files changed, 27570 insertions(+), 112431

I'm using R 2.2.0 on Windows. Doing some conversions of help files. Internal comments indicate that the Sd2Rd conversion is "Converted by Sd2Rd version 1.21." I'm converting .d -> .Rd .sgml -> .Rd using Sd2Rd, then checking by using Rdconv to convert .Rd back to .d or .sgml. Here are errors in some of the conversions. The most significant errors are in .Rd to .sgml.

Hello, My question is regarding the interpretation of --stats output and whether I have a performance issue or not. Can the client/server architecture (rsync client on one machine, rsync server on another machine) be far slowlier than a local rsync session ? This is the ouput of an rsync session: date rsync -v --recursive --links --perms --times --group --owner --xattrs --acls --delete

Which is the proper way to rename a factor? If I do: test$Parc[test$Parc=="Ol?rdola"]<-"Ol?rdola" R complains that Warning message: invalid factor level, NAs generated in: `[<-.factor`(`*tmp*`, test$Parc == "Ol?rdola", value = "Ol?rdola") Thanks Agus -- Dr. Agustin Lobo Institut de Ciencies de la Terra "Jaume Almera" (CSIC) LLuis Sole

I am stumped here. I am a novice at using samba to do MS Active Directory stuff, but I have read everything I could find in the HOWTO collection and on the linux.samba cache of the list and am still stuck. A bit of background... I have set up a Windows 2003 server as a domain controller here and configured it to be the DNS for a ficticious domain for internal use only. The domain functional

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This package provides a common set of SGML entities and XML/CSS style sheets used in building/formatting the documentation provided in other X.Org packages. It's typically only needed by people building from source who want to produce formatted documentation from their builds, or those who have installed the HTML version of the documentation,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This package provides a common set of SGML entities and XML/CSS style sheets used in building/formatting the documentation provided in other X.Org packages. It's typically only needed by people building from source who want to produce formatted documentation from their builds, or those who have installed the HTML version of the documentation,

> I did some local testing and it seems that you are using a curve that is not acceptable for openssl as a server key. > > I tested with openssl s_server -cert ec-cert.pem -key ec-key.pem -port 5555 > > using cert generated with brainpool. Everything works if I use prime256v1 or secp521r1. This is a limitation in OpenSSL and not something we can really do anything about. > >