http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf
-------- Original Message --------
Subject: Whitepaper about the new security features in RHEL3 U3
Date: Tue, 31 Aug 2004 09:54:15 +0200
From: Arjan van de Ven <arjanv(a)redhat.com>
Reply-To: Discussion of Red Hat Enterprise Linux 3 (Taroon)
<taroon-list(a)redhat.com>
To: taroon-list(a)redhat.com
Hi,
with the beta of RHEL3U3 out for some time it should come of no suprise that
U3 is comming out sometime soon. In preparation of that I wrote a whitepaper
about the new security features that were added to U3:
http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf
If anyone here has questions about this stuff please just ask...
Greetings,
Arjan van de Ven
--
"Computer games don't affect kids; I mean if Pac-Man affected us as
kids, we'd
all be running around in darkened rooms, munching magic pills and
listening to
repetitive electronic music." -- Kristian Wilson, Nintendo Inc., 1989
--
John Newbigin - Computer Systems Officer
School of Information Technology
Swinburne University of Technology
Melbourne, Australia
http://www.it.swin.edu.au/staff/jnewbigin
--
Taroon-list mailing list
Taroon-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/taroon-list
I am currently in the process of updating all centos modified packages
to contain the release suffix .c2.$n This will help identify modified
packages and aid with RedHat -> CentOS upgrades. These packages have
been rebuilt but should be the same as the previous release. It should
be safe to update them but of course when upgrading the boot loader it
is always wise to use some caution. The following packages for CentOS-2
have been built and uploaded the the centos mirror:
Files available:
grub-0.90-11.c2.1.i386.rpm
mkinitrd-3.2.6.2-1.c2.1.i386.rpm
indexhtml-7.2-1.c2.1.noarch.rpm
There will be more package to follow including apache, nautilus, perl,
tetex & Xconfigurator. These will be available soon.
The easy way to make sure you are up to date with all the latest patches
is to run:
# yum update
--
John Newbigin - Computer Systems Officer
School of Information Technology
Swinburne University of Technology
Melbourne, Australia
http://www.it.swin.edu.au/staff/jnewbigin
The following errata for CentOS-2 have been built and uploaded the the
centos mirror:
RHSA-2004:448-01 Updated krb5 packages fix security vulnerabilities
Files available:
krb5-devel-1.2.2-31.i386.rpm
krb5-libs-1.2.2-31.i386.rpm
krb5-server-1.2.2-31.i386.rpm
krb5-workstation-1.2.2-31.i386.rpm
More details are available from the RedHat web site at
https://rhn.redhat.com/errata/rh21as-errata.html
The easy way to make sure you are up to date with all the latest patches
is to run:
# yum update
--
John Newbigin - Computer Systems Officer
School of Information Technology
Swinburne University of Technology
Melbourne, Australia
http://www.it.swin.edu.au/staff/jnewbigin
Hi Everyone,
Critical security updates for centos3.
Available from: http://mirror.caosity.org/centos-3/3.1/ and soon your
local mirror.
krb5: https://rhn.redhat.com/errata/RHSA-2004-350.html
updates/i386/RPMS/krb5-server-1.2.7-28.i386.rpm
updates/i386/RPMS/krb5-devel-1.2.7-28.i386.rpm
updates/i386/RPMS/krb5-workstation-1.2.7-28.i386.rpm
updates/i386/RPMS/krb5-libs-1.2.7-28.i386.rpm
updates/i386/SRPMS/krb5-1.2.7-28.src.rpm
The vulnerabilities involved look pretty ugly.
Let me know if there are any problems.
To update for any of these simply run:
yum update
-sv
Hello all,
I am messing around with iptables, trying to learn how
it works so that I can build my self a router/firewall
and mabey a VPN. Anyway I tried to use a command on my
Desktop CentOS3 machine.
"iptables -A INPUT -s 127.0.0.1 -p icmp -j DROP"
now the command seems to have went through because I
didn't get any errors, but when I go to ping 127.0.0.1
I am getting a response and my packet loss is 0%. It
should be 100% packet loss.
Can anyone tell me what I am doing wrong. I am not
trying to do anything yet, just want to learn by
exploring.
Thanks all.
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
Hi All
What is the major difference between version 3 and 3.1?
Is there any incompatibilities for rpms?
For example I wish to install evms from dag's repo. Is there any problem?
Thanks for your great job.