Discuss August 2010

discuss@lists.centos.org

250 participants
192 discussions

Scripting for Centos security advisory database
by Fajar Priyanto 11 Aug '10

11 Aug '10

Hi all, Where can I find Centos Security Advisory database? The one that I believe similar with RHSA? 2ndly, is there any script available to check if there's any CESA against my installed Centos? Thank you very much.

4 6

Automated Reply from Dieter Thiel <centos-announce@centos.org>
by Dieter Thiel 11 Aug '10

11 Aug '10

Abwesenheitsnotiz: Vielen Dank für Ihre Nachricht. Ich bin ab dem 16.08. wieder im Büro erreichbar. In dringenden Fällen wenden Sie sich bitte an Herrn Ostermann, Email <ostermann(a)dimast.de>. Vielen Dank!

1 0

sshd bug?
by Matt Keating 11 Aug '10

11 Aug '10

Hi, I've found a bug/problem with my centos 5.5 server. Any users who have a password of 9 characters or more, only the first 9 characters are used by the OS... eg. i set my password to "123456789" and i try logon via ssh with password "123456789ofgjdfuh" - it lets me in. and if i set my password to "qwertasdfGHJB" and i enter "qwertasdfSDWQWSDS" - it lets me in... The 'passwd' command only recognises the first 9 characters too... Has anyone seen this before, or know how to fix it? I feel its a major security risk and would like it fixed ASAP. Thanks, Matt

3 4

good centos/rhel source for latest spamassassin?
by Eero Volotinen 11 Aug '10

11 Aug '10

Is there any good rpm source for latest spamassassin for centos/rhel ? Currently using from dag's, but is is a bit old version nowdays. -- Eero

7 9

Re: [CentOS] Iptables questions
by Bob Hoffman 11 Aug '10

11 Aug '10

Forgive me if this does not go with the right topic, I am on digest and responding to a topic sometimes makes it start a new one. My reason for the iptables questions is to not follow the practice of putting up a wall and ignoring hackers. I want to be more proactive. If I have set my ssh port to 55994 and am not using port 22, but hackers are pounding on my port 22 looking for Ssh, then I want to not only know about it, I want to log them and prevent them access to my server and web applications. At least temporarily. I see now that many of the programs are log users and not real time. And many like fail2ban actually add chains to iptables that I Could do myself. It looks like getting some books on netfilter may be the way to go. I would rather stop stuff at the firewall then trust apache, php, sendmail, vsftp, etc. I would rather use them as back up failsafes while I work on hack proofing the single point of entry. I have a server sitting right on the net and the constant barrage of 100s of Ips trying thousands of times at port 22 is insane. I examine my logs and see so much in the way of dns posion attacks, ssh-mail-ftp, etc attacks that I do not want to just sit back and Think I am fine because I have a firewall and centos will send me bug fixes. That firewall seems like the 100% way of going at stopping and preventing issues. If an IP is doing something it should not be doing, most likely you do not want it probing anything else either. That's why I ask.

8 7

Iptables questions
by Bob Hoffman 11 Aug '10

11 Aug '10

Hello, I have read and seen many options for additions to Iptables as a firewall and security system. All seem to react to logs and not to incoming packets (as far as I have seen) I am interested in doing a number of security ideas to the firewall, iptables, on my webserver. If you have a program you would suggest or believe iptables is the proper solution, please feel free to post that. Here are some of the things I would like to do 1) I have switched my SSH to a different port. I would like to still check for anyone trying to hit the old port 22 and log them. At the same time add them to a reject/ban for a certain period of time, lets say 1 day. 2) there are certain apache hacks (like things that include ../) that I would prefer to stop at the firewall. I would also like to log these attempts and begin a reject/ban for a certain period of time. Or just log until I figure out the best way to safely ban. 3) There are common script kiddie hacks that look for certain files 1 million times a day. I would like to either look for them in the incoming packets, log, and ban. Or I would like to be able to use my own php program to route them out and then add to a ban list that iptables can use. These are just some of the things I am looking at doing. I also want to start a ban list for mail packets too, why bog down sendmail when I know what they are? I realize some things might be done via programs like fail2ban (like my php program making a list) but others would be better at the firewall as active reaction security measures. Any input kindly accepted. Thank you for any help or ideas. Bob

8 7

CentOS 5, gnome-screensaver and password amnesia?
by Scott Ehrlich 11 Aug '10

11 Aug '10

I've built some CentOS 5.5 64-bit systems straight off the DVD, full installs, and the Gnome screen lock (manually invoked or automatically via the gnome-screensaver) does not allow the user to unlock the screen. The only fix appears to be ctrl-alt-F<1 - 5> then have the user log into the tty session, type pkill -f gnome-screensaver, log out, then ctrl-alt-f7 to return to X. These systems are standalone, so there is no option to remote in, and the display is never unplugged from the system as some of the RedHat bugzilla reports show. I did try a yum update but the problem persists, so I suspect the issue has not been fixed, or if it has, has not been released via the yum default locations. The screensaver and manual screenlock options must be enabled, so disabling them is not an option. I've also developed a cron job to restart gnome-screensaver every few minutes. I've got other systems, built back when CentOS 5.0 was out, that do not experience this problem. I've built newer systems with CentOS 5.4 and 5.5, yum updates, and I don't think they have experienced the problem either. I _think_ the issue, thus far, appears to be a full install of all packages from the DVD, which is how I build various standalones. Does anyone have an update on when this will officially be fixed? Thanks for any insights. Scott

2 1

KTorrent on CentOS 5.5 does not exist
by MGW-Discussions 11 Aug '10

11 Aug '10

Greetings guys. What repo do I need to install to be able to install ktorrent? I have CentOS 5.5 however, when attempting to download a distro for use on a virtual machine, which only seems to provide a torrent, I am unable to locate any torrent clients, and yum installation fails for ktorrent. I thought that ktorrent was associated with kde so why isn't it installed by default? Thanks. -- Respectfully, Martes G Wigglesworth M. G. Wigglesworth Holdings, LLC www.mgwigglesworth.com

3 2

CentOS IRC logs
by didi 10 Aug '10

10 Aug '10

Hey It seams like loads of people have their own personal CentOS IRC logs, but is there a website where I can look at them? Cheers Didi -- Hoffmann Geerd-Dietger http://contact.ribalba.de

2 2

Automounter problem in C5.5?
by Mark 10 Aug '10

10 Aug '10

Last night I was having some bizarre problems with my USB ports. I couldn't access one of my scanners, and when I started moving plugs around, it seemed as though I lost more peripherals. For some reason, I did NOT lose the laser printer, but my one scanner and my scan/fax/printer disappeared and wouldn't come back. I figured it might be the automounter, so I tried plugging in a USB flash drive, and it did not get mounted either. I rebooted and the problem disappeared (duh). Questions: 1) I'm suspected this was an automounter failure - is that the most likely culprit? 2) How do I restart the automounter when it dies, or can I? I've hit this issue before once or twice and only rebooting seems to make it right again. Thanks. Mark

3 3

← Newer
1
...
11
12
13
14
15
16
17
...
20
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss August 2010