Linuxers

linuxers@mm.ilug-bom.org.in

14152 discussions

Re: [ILUG-BOM] root access from console(was Re: Think my servers got cracked....
by Tahir Hashmi 04 Jul '02

04 Jul '02

On Thu, 4 Jul 2002 13:47:41 Amish Mehta wrote: > >because if person has access to tty2, tty3..etc he also has access >to tty1 too. So might as well allow(infact deny for more security) [snip] This is true for the typical Linux installation on a PC. There are many setups where the ttys are all connected to the server externally. We have such a setup in AMU. So, it's quite possible that tty1 (say) is located in the SysAd's chamber. Get the point? Also check http://www.tldp.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/ch… --- Tahir Hashmi (VSE, NCST) http://staff.ncst.ernet.in/tahir tahir AT ncst DOT ernet DOT in __________________________________ We, the rest of humanity, wish GNU luck and Godspeed _____________________________________________________ Supercharge your e-mail with a 25MB Inbox, POP3 Access, No Ads and NoTaglines --> LYCOS MAIL PLUS. http://www.mail.lycos.com/brandPage.shtml?pageId=plus

1 0

Re: [ILUG-BOM] Think my servers got cracked........any ideas..??
by Tahir Hashmi 04 Jul '02

04 Jul '02

On Thu, 4 Jul 2002 11:54:54 Philip S Tellis wrote: >On Thu, 4 Jul 2002, Tahir Hashmi wrote: > >> - Disable logins from all consoles except one, say, tty1 (check out >> /etc/securetty) > >Then how do you work with multiple interactive applications >simultaneously? > Oops! I meant to say "Disable _root_ logins..." --- Tahir Hashmi (VSE, NCST) http://staff.ncst.ernet.in/tahir tahir AT ncst DOT ernet DOT in __________________________________ We, the rest of humanity, wish GNU luck and Godspeed _____________________________________________________ Supercharge your e-mail with a 25MB Inbox, POP3 Access, No Ads and NoTaglines --> LYCOS MAIL PLUS. http://www.mail.lycos.com/brandPage.shtml?pageId=plus

2 1

root access from console(was Re: Think my servers got cracked....)
by Amish Mehta 04 Jul '02

04 Jul '02

Tahir Hashmi wrote: > - Disable logins from all consoles except one, say, tty1 (check out > /etc/securetty) Doesnt make sense to allow root access only from console tty1 because if person has access to tty2, tty3..etc he also has access to tty1 too. So might as well allow(infact deny for more security) root access from all console ttyN. Use 'su - root' after logging in as normal user. Amish.

1 0

Re: [ILUG-BOM] Project Resource Center
by Amol Hatwar 04 Jul '02

04 Jul '02

>target a couple of magazines and speak to its editor about what >we are >trying to achieve with this. I will work on Network Computing and >Chip >magazine. What Chip? It's Digit now :D. If you can't get through at Digit get in touch with me. Get in touch with Deccan Herald too. Bangalore is a huge place for picking up talent. >b. We need to be present at some high-profile technology >events..maybe as a speaker on GNU, GPL, or just about the Project >Resource >Center. We also ought to start talking about technology >topics-and >identifying ourselves as members of the ILUG Project Resource >Center(ILUG-PRC)..this will put some highlight on the PRC. Can >someone take >the responsibility of finding out what events are coming up? >Nasscom may be >a good source of such information. Please guys..Do cooperate with >us on this >one....... > >c. We need to do a survey of what is a valid project..the >feedback >form is a good idea, trevor. Some of us need to go to each of our >target >institutions and speak to the students there and the >professors/teachers. >Who will be part of this team..People.. please come forward. schools prefer working with successful ex-students. everyone for their own alma-mater. :) > >d. Since I think at least a few students from such >institutions >would already be members of the ILUG, they should come forward >and be the >ambassadors of the ILUG in their institutions. Vishal.can u do >this in >NCST?.Guys.calling the rest of u once again. small team of devoted fellas is better. Negative Energy gets too much to handle. I think we must start small initially. Spreading without a spine will get us down. -- AH _________________________________________________________ There is always a better job for you at Monsterindia.com. Go now http://monsterindia.com/rediffin/

2 1

Re: [ILUG-BOM] Think my servers got cracked........any ideas..??
by Tahir Hashmi 04 Jul '02

04 Jul '02

On Wed, 3 Jul 2002 13:20:40 Trevor Warren wrote: > I tried reverse lookin up this IP...but to no avail. Reverse lookup fails for hosts behind firewalls and hosts with synamically assigned IPs. I take these few steps for my system's security: - No Telnet/FTP - SSH doesn't allow root login. You login as a normal user and su to - root. - Disable logins from all consoles except one, say, tty1 (check out /etc/securetty) - Some of the files like /etc/securetty should not be readable by 'others'. This is mostly a policy decision between user liberty and reduction in system vulnerability and I prefer to keep most files readable. However, it makes lot of sense to deny perms on files like /etc/securetty, /etc/lilo.conf and /etc/sysconfig/* - run an updated scanner like nessus periodically to check for vulnerabilities - keep a tab on security updates issued by the vendor of your distro Finally refer to "Maximum Linux Security" by Anonymous for more exotic tips or read the "Securing and Optimizing Red Hat Linux" Guide on www.tldp.org --- Tahir Hashmi (VSE, NCST) http://staff.ncst.ernet.in/tahir tahir AT ncst DOT ernet DOT in __________________________________ We, the rest of humanity, wish GNU luck and Godspeed _____________________________________________________ Supercharge your e-mail with a 25MB Inbox, POP3 Access, No Ads and NoTaglines --> LYCOS MAIL PLUS. http://www.mail.lycos.com/brandPage.shtml?pageId=plus

3 2

Caveats with gnome-terminal (gnome-core-1.4.1)
by Philip S Tellis 04 Jul '02

04 Jul '02

For those of you who use gnome-terminal to start console applications from gnome, bear in mind that it no longer accepts quotes around multi word application names. So: gnome-terminal -e "pine -i" now becomes gnome-terminal -e pine -i but gnome-terminal -e "pine" still works. -- Speak the truth. That is always much easier, and is often the most powerful argument. -Bene Gesserit Axiom

1 0

Re: [ILUG-BOM] Can somebody help me in newsletters ?
by Vishwanath V 04 Jul '02

04 Jul '02

I had been trying with my custom made perl scripts. But the analysis part seems to b tricky. Like keeping track of users and invalid mail id's ? On Wed, 3 Jul 2002, Vishwanath V wrote: > Can anybody suggest me a appication for > sendind newsletters to huge no of mail id's and > monitor the activity of newsletters ? From: Philip S Tellis <philip(a)konark.ncst.ernet.in> >what have you tried already? ________________________________________________________________________ Want to sell your car? advertise on Yahoo Autos Classifieds. It's Free!! visit http://in.autos.yahoo.com

2 1

Installing Linux on laptop
by Nikhil D. Kikkeri 04 Jul '02

04 Jul '02

hello, is it true that in order to install Linux on a laptop/desktop which comes pre-loaded with WinXP i have to format the ENTIRE hard drive? if so, is there a way i can avoid formatting the hard disk? are there any generic V.90 56k software modem drivers available for Linux which would be used for software modems of all makes? TIA -NDK _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com

2 1

Is it actually Running.......i.e. Telnet / FTP services..?
by Desai Ashish 04 Jul '02

04 Jul '02

Hi� Luggers, As I installed/configured Telnet / FTP server in RH Linux 7.2 If I checks it by following command of processes then it is showing me that the �xinetd� service is running. And if I checks it by �nmapfe� utility the scanning is showing me that Telnet and FTP ports are open in Red color. I m going to logon as a user ROOT to LOCALHOST with its password for Telnet session it gives me following error : telnet localhost or telnet 127.0.0.1 Login : root Password : Login incorrect Connection closed by foreign host. And in FTP session when logon as a user ROOT with its password it gives me following error : ftp localhost or ftp 127.0.0.1 Login : root Password : 530 Login incorrect Login failed. It is also not allowing me to Telnet Linux machine (192.168.0.1) from Windows machine (192.168.0.2) It gives me following error : For Telnet : Could not open a connection to 192.168.0.1 For FTP : ftp >ftp:connect:10071 ftp> But if I give ls command then it shows me �not connected� msg. As my Configuration files are concern they are here for u people to review /etc/xinetd.conf defaults { instances = 60 log_type = SYSLOG authpriv log_on_failure = HOST } includedir /etc/xinetd.d /etc/xinetd.d/telnet service telnet { disable = no flags = REUSE socket_type = stream wait = no user = root server = /usr/sbin/in.xinetd log_on_failure += USERID no_access = 10.0..0.1/24 log_on_success += PID HOST EXIT access_times = 09:45-16:30 } /etc/xinetd.d/wu-ftp service ftp { socket_type = stream wait = no user = root server = /usr/sbin/in.ftpd server_args = -l -a log_on_success += DURATION USERID log_on_failure += USERID nice = 10 disable = yes } /etc/hosts.allow ALL:ALL@ALL /etc/hosts.deny (This file is Empty) But as I Telnet / FTP my Localhost by any other User then it is allowing me to connect and also gets connected. So, after reviewing this plz. Suggest me where should I make change to resolve this problem. Regards, [Ashish Desai] __________________________________________________ Do You Yahoo!? Sign up for SBC Yahoo! Dial - First Month Free http://sbc.yahoo.com

3 2

Re: [ILUG-BOM] [Soul Search] Free Software wizard in Gujarat
by Amol Hatwar 04 Jul '02

04 Jul '02

>I want to know if any one in the list, or any one who knows a >free software enthisiast in Gujarat, who knows free DBMSs like >MySQL and willing to work for an international project, and >knows >the locality well. No gurantees ... but I will try, can u send in the details to me? -Ah amolhatwar at rediffmail dot com _________________________________________________________ There is always a better job for you at Monsterindia.com. Go now http://monsterindia.com/rediffin/

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Linuxers