Linux Security

EMSDN.COM

Linux Security

NAVIGATION

SuSEfirewall2 and VPN

Hi list-users,trying to setup SuSEfirewall2 (SuSE 9.3) to work with IPSEC, but with nosuccess.tunnel is up, but packets who should go through tunnel did not go through.Any help would be appreciated.Here some info about my config:I'm using DSL with fixed IP.VARS from SuSEfirewall2:FW_DEV_EXT...

0 answers | 2199 bytes |

SUSE Security Summary Report SUSE-SR:2006:021

PGP SIGNED MESSAGEHash: SHA1 SUSE Security Summary Report Announcement ID: SUSE-SR:2006:021 Date: Fri, 01 Sep 2006 17:00:00 +0000 Cross-References: CVE-2006-2314, CVE-2006-3124, CVE-2006-3125 CVE-2006-3468, CVE-2006-3694, CVE-2006-3745 CVE-2006-4089, CVE-2006-4093, CVE-2006-4111 CVE-2006-4112,...

0 answers | 9035 bytes |

Possible to use LDAP from protected network to log in users to DMZ?

I am trying to set up a new and hopefully better network that we run today.I have a ADSL router/Firewall with DMZ and VPN capabilities.I also have a web/ftp server for both customers and company users that i wantto put in the DMZ.And i would like the DMZ server to check its users against the LDA...

1 answers | 913 bytes |

ezmlm warning

Hi! This is the ezmlm program. I'm managing thesuse-security (AT) suse (DOT) com mailing list.I'm working for my owner, who can be reachedat suse-security-owner (AT) suse (DOT) com.Messages to you from the suse-security mailing list seem tohave been bouncing. I've attached a copy...

0 answers | 13208 bytes |

Write-protect sctors?

Bill Church wrote:It sounds very crazy. Did you ever actually identify if there was a rootkit installed? Did you try booting to a live CD of another distribution and investigating the disks from that live CD?Remember that partitioning does modify the existing data on the disk, just the partition...

3 answers | 3390 bytes |

Write-protect sctors?

It sounds very crazy. Did you ever actually identify if there was a rootkit installed? Did you try booting to a live CD of another distribution and investigating the disks from that live CD?Remember that partitioning does modify the existing data on the disk, just the partition table, unless you...

0 answers | 2493 bytes |

Write-protect sctors?

I had a probable rootkit in ubuntu dapper that proved to be morepersistent than I thought possible.I did rkhunter and showed someanomalies in /dev/Trying to track those dir's down provedelusive,even with root enabled(in ubuntu,root is disabled by default.Youcan still sudo, but no su without...

3 answers | 1146 bytes |

RSBAC Functionality

Hello,Has anyone here implemented RSBAC access control in a 9+ suse/opensuserelease? I am looking at testing RSBAC within suse and was wanting toknow other end-user(s) experiences.I am sure that kernel patches must be altered to apply cleanly to susekernels. And the init system within suse is a...

4 answers | 771 bytes |

SuSEfirewall script hardcodes ip_conntrack_max

SL9.1 and SLES9Extreme use of our webservers during online application season requireswe set the / very high (= 65536). Itried to make this setting persistant between reboots by means of/etc/sysctl.conf and boot.sysctl init script. But each reboot leftip_conntrack_max = 16384.After much hair-pul...

0 answers | 979 bytes |

Apparmor profile locations & Found unexpected keyword: 'mr' errors

Could someone point out the difference between the profiles stored in/etc/apparmor.d/ vs /etc/apparmor/profiles/extras/?The reason I ask is that I sometimes get errors about profiles claimingunexpected keyword: 'mr'. For example, here is one from a netstatprofile:"Loading AppArmor prof...

2 answers | 2987 bytes |

Linux Audit

If you check the security pen-testers list a couple weeks ago their wasa thread on checklists for checking systems.Bill WoodhamsSystems TechnicianDevelopment Group-Technical SystemsWegmans Food MarketsDirect:(585) 429-3183William.Woodhams (AT) wegmans (DOT) com MessageFrom: Mohammad Hadidi [mail...

0 answers | 644 bytes |

resetting You

Hello,I have managed to tame the Zen/Rug business on most of the machines Iadminister, but one of them is refusing to cooperate. Every time I try torun 'you' or configure it yast just crashes. There are no error messagesor core files, just a shell prompt at the top of the screen hidden...

0 answers | 593 bytes |