Re: CUPS

2012-03-08 Thread Ethan Rosenberg
At 07:03 PM 3/7/2012, Brian wrote: On Wed 07 Mar 2012 at 16:05:01 -0500, Ethan Rosenberg wrote: > At 06:57 PM 3/6/2012, Brian wrote: >> >> Please let us know how you make out. > > Brian - > > Thanks. > > Not well regrettably. > > I tried the stable version and then testing, and had the same resu

Re: How often will this cron job execute

2012-03-08 Thread Tom H
On Thu, Mar 8, 2012 at 11:32 PM, T o n g wrote: > > I've got the following entry in my cron job: > > 1 1 1 */2 * me my-this-job > > How often will it execute? > > Checking the log, I notice that it run on Jan 1 and Mar 1. That's really > not something that I've been expecting for. I have another c

Re: How to share the Internet with Linux and an iPad by Wi-Fi?

2012-03-08 Thread Ralf Mardorf
On Thu, 2012-03-08 at 19:14 +0200, Andrei POPESCU wrote: > On Jo, 08 mar 12, 16:51:18, Ralf Mardorf wrote: > > > > ... I just wondered that it looks like the driver doesn't work anymore, > > since the WLAN adapter also is lost after reinstalling nm. > > > > http://wiki.debian.org/WiFi/HowToUse#Co

How often will this cron job execute

2012-03-08 Thread T o n g
Hi, I've got the following entry in my cron job: 1 1 1 */2 * me my-this-job How often will it execute? Checking the log, I notice that it run on Jan 1 and Mar 1. That's really not something that I've been expecting for. I have another cron job fired at Feb 1, so no doubt that my cron was work

Re: sshfs and permissions

2012-03-08 Thread Tom H
On Thu, Mar 8, 2012 at 1:28 PM, Camaleón wrote: > On Wed, 07 Mar 2012 18:27:29 +0100, Pierre Penninckx wrote: > > (...) > >> So like I said I didn't manage to make permission 100% work through >> sshfs, though it works on the server or through DokanFS. The ACL on the >> /srv/movies folder is: # fi

Re: X forwarding to a Windows 7 PC

2012-03-08 Thread yudi v
> > Distance is irrelevant, but rather how the network itself is shielded > from the outside. > > Kind regards, > Andrei I am not sure what you are implying here. I am not changing any network settings nor am I opening up any ports expect when I run xserver on windows. All I am trying to do is us

Re: X forwarding to a Windows 7 PC

2012-03-08 Thread yudi v
> > Do you have a non-Win 7 (e.g. XP) that you can try to see if it exhibits the > same behavior?  This would probably identify the culprit end Sorry, don't. I am guessing I might have missed a setting somewhere. -- Kind regards, Yudi -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debi

Re: using bittorrent for backup of personal files

2012-03-08 Thread Jason Heeris
On 9 March 2012 07:46, Rob Owens wrote: > 1)  It typically maxes out my internet connection.  Plain old rsync > would do this too, unless there is a throttling option that I don't know > about.  Rtorrent, which I use, has a throttling option. Slightly tangential, but do you know about "trickle"?

Re: X forwarding to a Windows 7 PC

2012-03-08 Thread owens
- Original Message - From: yudi v To: ow...@netptc.net Cc: Debian users mailing list Sent: 3/8/2012 10:44:16 PM Subject: Re: X forwarding to a Windows 7 PC > > IIRC there is a version requirement for Samba to play nice with W7. Google > for Samba and Windows 7 > > Larry The

Re: using bittorrent for backup of personal files

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 18:56:19, Rob Owens wrote: > > > I'm a bit of a novice, so my terminology may be off. But by "public" I > mean a torrent that I upload to any public tracker, like > thepiratebay or something. Anyone could download my torrent, not that they > would know to look for it. You don

KVM problem

2012-03-08 Thread Neal Murphy
Howdy! A friend is having the devil's own time trying to get qemu-kvm working for himself. I have no such trouble. We are both using Squeeze. I have a quad Phenom-II with 8GB RAM, nVidia video. He has a dual Athlon with 3GB RAM, ATI video (and recently bought and tried an nVidia AGP card). Bot

Re: using bittorrent for backup of personal files

2012-03-08 Thread Rob Owens
On Thu, Mar 08, 2012 at 12:24:10PM +0200, Andrei POPESCU wrote: > On Ma, 06 mar 12, 19:18:49, Rob Owens wrote: > > I'm considering using bittorrent to back up large files such as pictures > > and home movies. I am the admin for several of my family members' > > computers. The idea would be to bac

Re: Securing Debian Manual: 5.1.4 Restricing access to file transfer only

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:25:53, Stayvoid wrote: > Hello. > > "... Give users a restricted shell such as scponly or rssh. These > shells restrict the commands available to the users so that they are > not provided any remote execution privileges." > Is it really necessary? Do you (plan to) have users

Re: Securing Debian Manual: 4.12.2 Configuring where alerts are sent

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:21:02, Stayvoid wrote: > Hello. > > "There are other role accounts and aliases on your system. On a small > system, it's probably simplest to make sure that all such aliases > point to the root account, and that mail to root is forwarded to the > system administrator's persona

Re: Securing Debian Manual: 4.10.11 Setting users umasks

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:18:07, Stayvoid wrote: > Hello. > > "Finally, you should consider changing root's default 022 umask (as > defined in /root/.bashrc) to a more strict umask." > Which one? If you understand umask(s) you will know. Kind regards, Andrei -- Offtopic discussions among Debian user

Re: Securing Debian Manual: 4.10.1 User authentication: PAM

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:13:06, Stayvoid wrote: > Hello. > > "Add root and the other users that should be able to su to the root > user to this group." > I'll be the only user of the server. Should I create a guest user for > me? Will it be enough to have a root access? It is considered good practice

Re: using bittorrent for backup of personal files

2012-03-08 Thread Rob Owens
On Wed, Mar 07, 2012 at 09:53:31AM -0800, Kelly Clowers wrote: > On Tue, Mar 6, 2012 at 16:18, Rob Owens wrote: > > I want to keep this data private.  What are my options, besides a VPN? > > I hesitate to use a public torrent even on encrypted data, because the > > computers of tomorrow may easily

Re: Securing Debian Manual: 4.9 Mounting partitions the right way

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:07:21, Stayvoid wrote: > Hello. > > "This sounds great, but it: only applies to ext2 or ext3 file systems…" [1] > What about ext4 (and others)? You may safely assume ext4 includes any features that ext2 and ext3 include. Kind regards, Andrei -- Offtopic discussions among D

Re: Securing Debian Manual: 4.8 Restricting system reboots through the console

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:05:40, Stayvoid wrote: > What can I do to disable keyboard access at all? (I'll use a remote > connection (SSH).) Does your VPS have a "keyboard"? Kind regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/

Re: using bittorrent for backup of personal files

2012-03-08 Thread Rob Owens
On Wed, Mar 07, 2012 at 06:18:40PM +0100, 0xAAA wrote: > On Tue, Mar 06, 2012 at 07:18:49PM -0500, Rob Owens wrote: > > I already use BackupPC successfully for offsite backups between family > > members. Very large files are sometimes a problem, however, which is > > why I'm considering bittorrent

Re: Securing Debian Manual: 4.2 Execute a security update

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 16:55:51, Stayvoid wrote: > Hello. > > "To manually update the system, put the following line in your > sources.list and you will get security updates automatically, whenever > you update your system. Replace [CODENAME] with the release codename, > e.g. squeeze. >deb http

Re: Securing Debian Manual: 3.7 Install the minimum amount of software required

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 16:54:09, Stayvoid wrote: > Hello. > > "The presence, for example, of development utilities (a C compiler) or > interpreted languages (such as perl - but see below -, python, tcl...) > may help an attacker compromise the system…" > "So, without Perl and, unless you remake these u

Re: sshfs and permissions

2012-03-08 Thread Rob Owens
On Wed, Mar 07, 2012 at 06:27:29PM +0100, Pierre Penninckx wrote: > Hi all, > > I'm using sshfs to access files on my server and it works great. > However I have a problem with permissions. > I recall having similar issues several years ago. I don't remember exactly how I fixed it, but possibly

Re: How to direct output into the LibreOffice Calc

2012-03-08 Thread Mark Neidorff
On Tuesday 28 February 2012 9:06:48 am lina wrote: > Hi, > > I wonder: > > 1] > > can the output like: > > 5 > 3 > 1 > 5 > 3 > > direct it into the LibreOffice directly. without copy and paste. Since no one has addressed the libreoffice (I assume calc) directly, how about this: Look up the

Re: Securing Debian Manual: 10.4.2.1 Proactive defense

2012-03-08 Thread Walter Hurry
On Thu, 08 Mar 2012 23:21:12 +0100, Martin Steigerwald wrote: > Hi Stayvoid! > I am overwhelmed by your posting flood. I'm not. He is already in the bozo bin. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.de

Re: X forwarding to a Windows 7 PC

2012-03-08 Thread yudi v
> > IIRC there is a version requirement for Samba to play nice with W7.  Google > for Samba and Windows 7 > > Larry The only issue I have with Samba right now is that I have to authenticate from windows every time I reboot either of my systems. Is there a way to stop this. -- Kind regards, Yudi

Re: How to direct output into the LibreOffice Calc

2012-03-08 Thread Arnt Karlsen
On Thu, 8 Mar 2012 05:15:05 +1300, Chris wrote in message <20120307161505.GA8420@tal>: > Mmmm, "apt-cache show sd" :( ..try a Sid box: ;o) arnt@celsius:~/speil$ apt-cache show sd Package: sd Version: 0.74-1 Installed-Size: 812 Maintainer: Christine Spang Architecture: all Depends: perl, libdat

Re: Securing Debian Manual: 11.4 Forensic analysis

2012-03-08 Thread Arnt Karlsen
On Thu, 8 Mar 2012 17:31:14 +0300, Stayvoid wrote in message : > Hello. > > "FIXME: Talk on how to do a debsums on a stable system with the > MD5sums on CD and with the recovered file system restored on a > separate partition." > How to do it? > > http://www.debian.org/doc/manuals/securing-debi

Re: How to direct output into the LibreOffice Calc

2012-03-08 Thread Arnt Karlsen
On Thu, 8 Mar 2012 11:45:12 +0200, Andrei wrote in message <20120308094512.GB25134@sid.nuvreauspam>: > On Jo, 08 mar 12, 05:15:05, Chris Bannister wrote: > > > > It downloads data when you are online? > > Only on request by the user (currency exchange rates). ..beyond a week by default, it'll

Re: Securing Debian Manual: 4.10.9.2 Using the shell history file

2012-03-08 Thread Martin Steigerwald
Am Donnerstag, 8. März 2012 schrieb Stayvoid: > Hello. Hi Stayvoid, > "Note that you could introduce the configuration above in the user's > .profile. But then you would need to setup permissions properly in > such a way that prevents the user from modifying this file. This > includes: having the

Re: Securing Debian Manual: 10.4.2.1 Proactive defense

2012-03-08 Thread Martin Steigerwald
Hi Stayvoid! Thanks for what I perceive to be an attempt to help to improve the securing Debian manual. Am Donnerstag, 8. März 2012 schrieb Stayvoid: > Hello. > > "Note, however, that there are rootkits which might work even in this > case, there are some that tamper with /dev/kmem (kernel memo

Re: Encrypted LVM and failed message

2012-03-08 Thread Claudius Hubig
Hello Daniele, Daniele Guerrieri wrote: > Every time I START the system, just before the prompt for passphrase, there > are some complaints about the / filesystem: something like "Cannot find > harpsiRoot volume" and also mobprobe: unix module not found. So it The ‘modprobe: unix module not foun

Encrypted LVM and failed message

2012-03-08 Thread Daniele Guerrieri
Hi everyone, i' m a new debian user and subscriber to this mailing list. I'd have one or two questions about some weird messages. I installed debian with 'expert install', made an encrypted volume (LUKS-crypt) which requires a passphrase in which subsequently i put an LVM physical volume which c

Re: Understanding the -depth option of find?

2012-03-08 Thread Karl Vogel
>> On Thu, 8 Mar 2012 17:06:54 + (UTC), said: C> I make the backup for my /home directory with plain "tar". What are the C> benefits/drawbacks of using "cpio" instead? Older versions of tar wouldn't read from stdin or any other list of files, and they also had really short limits on fi

big problem with TP-LINK WiFi card

2012-03-08 Thread Bernard
Hi to Everyone, On the Desktop of my association, there was no wireless card. So, I purchased one that is said to be Debian compatible. It is a PCI card TP-LINK TL-WN751ND It is supposedly based on an Atheros chipset AR 9227 I plugged it inside the Central Unit on a PCI slot, and then boote

Re: Securing Debian Manual: 3.2.1.1 Selecting the appropriate file systems

2012-03-08 Thread Brad Alexander
Probably. ext4 is mature and stable enough that I don't think it makes sense to use ext3. Unless, of course, some policy dictates or you are preserving an existing legacy partition, I would go with ext4. I just rebuilt my workstation and used ext4 for all, and all of the boxes we are building at w

Re: Understanding the -depth option of find?

2012-03-08 Thread Randy Kramer
On Thursday 08 March 2012 12:06:54 pm Camaleón wrote: > On Wed, 07 Mar 2012 13:37:12 -0500, Randy Kramer wrote: > > I guess that implies I'd better do something about the permissions on > > that read-only subdirectory before the next (and each) time I run that > > find...cpio command. > > Nothing y

Re: sshfs and permissions

2012-03-08 Thread Camaleón
On Wed, 07 Mar 2012 18:27:29 +0100, Pierre Penninckx wrote: (...) > So like I said I didn't manage to make permission 100% work through > sshfs, though it works on the server or through DokanFS. The ACL on the > /srv/movies folder is: # file: movies > # owner: root > # group: videos > # flags: -s

Re: OT: Newbie questions on security

2012-03-08 Thread Camaleón
On Thu, 08 Mar 2012 20:30:59 +0300, Stayvoid wrote: >> I wonder why the OP didn't keep all the questions in just one thread if >> they are addressed to the same subject. > Sorry again. I've though it was a good idea to split those because some > issues may lead to a long discussion. I have no pr

Re: libc6.1-dev 2.11.3-3 after Squeeze 6.0.4 DVD install on ia64

2012-03-08 Thread Camaleón
On Wed, 07 Mar 2012 18:15:30 -0700, Ryan J Nicholson wrote: > The following packages have unmet dependencies: > build-essential : > Depends: libc6.1-dev but it is not going to be installed or libc-dev This says that you have to manually install "libc-dev" first. > Depends: g++ (>= 4:4.4.3) but

Re: OT: Newbie questions on security

2012-03-08 Thread Stayvoid
> Why do you think debian-security was the wrong list? You even got answers to > some questions you posted there, what's wrong with those? People told me (in private) that my questions are not connected with security and I shouldn't post them there. I've also been told that debian-security is used

Re: OT: Newbie questions on security

2012-03-08 Thread Stayvoid
> nobody did Sorry. I learned my lesson. > Most of them could be > answered with the right google search. It's true, but most of the answers you get will be something like "do foo because foo is a Good Thing." I want to know the reason for doing foo. > Also, Im happy to see you are eager to learn

Re: OT: Newbie questions on security

2012-03-08 Thread Stayvoid
> I wonder why the OP didn't keep all the questions in just one thread if > they are addressed to the same subject. Sorry again. I've though it was a good idea to split those because some issues may lead to a long discussion. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with

Re: How to share the Internet with Linux and an iPad by Wi-Fi?

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 16:51:18, Ralf Mardorf wrote: > > ... I just wondered that it looks like the driver doesn't work anymore, > since the WLAN adapter also is lost after reinstalling nm. > > http://wiki.debian.org/WiFi/HowToUse#Command_Line ... > By running 'iwlist scan' I don't get the expected o

Re: Understanding the -depth option of find?

2012-03-08 Thread Camaleón
On Wed, 07 Mar 2012 13:37:12 -0500, Randy Kramer wrote: > On Wednesday 07 March 2012 12:51:48 pm Camaleón wrote: >> On Wed, 07 Mar 2012 08:39:05 -0500, Randy Kramer wrote: >> > % find . -print -depth | cpio -ov > tree.cpio > >> However, if you remember to use -depth, find will instead start

Re: [on-topic] /etc/passwd

2012-03-08 Thread Karl E. Jorgensen
On Thu, 2012-03-08 at 14:11 +, lina wrote: > Hi, > > Last time I added one user, > Later I used deluser some_user_name > > but some information still keep it in the /etc/passwd and /etc/shadow. What information is left? We would expect one line per user, but if the line is still there, then

Re: [on-topic] /etc/passwd

2012-03-08 Thread Camaleón
On Fri, 09 Mar 2012 00:19:23 +0800, lina wrote: > On Thu, Mar 8, 2012 at 11:46 PM, Camaleón wrote: >> On Thu, 08 Mar 2012 22:11:44 +0800, lina wrote: >> >> "On topic" can be omitted :-P >> >>> Last time I added one user, >>> Later I used deluser some_user_name >>> >>> but some information still k

Re: OT: Newbie questions on security

2012-03-08 Thread Eduardo M KALINOWSKI
On Qua, 07 Mar 2012, Stayvoid wrote: Hi there. I've recently read Securing Debian Manual and I have some newbie questions connected with security. I've thought that debian-security is the right list for them, but I was wrong. What is the proper list for such questions? Why do you think debian-

Re: [on-topic] /etc/passwd

2012-03-08 Thread lina
On Thu, Mar 8, 2012 at 11:46 PM, Camaleón wrote: > On Thu, 08 Mar 2012 22:11:44 +0800, lina wrote: > > "On topic" can be omitted :-P > >> Last time I added one user, >> Later I used deluser some_user_name >> >> but some information still keep it in the /etc/passwd and /etc/shadow. >> >> My questio

Re: howto log screen output while booting

2012-03-08 Thread Wayne Topa
On 03/08/2012 05:29 AM, Andrei POPESCU wrote: On Mi, 07 mar 12, 14:52:19, Wayne Topa wrote: UPDATE Fount the problem. Even though dpkg -l bootlogd said it was installed. some how back in January the bootlogd executable had been removed. Aptitude was able to purge/install the package and the l

Re: Securing Debian Manual: 4.10.6 Using sudo

2012-03-08 Thread Kelly Clowers
On Thu, Mar 8, 2012 at 06:13, Stayvoid wrote: > Hello. > > "Violations, such as incorrect passwords or trying to run a program > you don't have permission for, are logged and mailed to root." > Where can I check this? Log in/switch to root and run a mail reader, e.g. Mutt If you diverted root's

Re: How to share the Internet with Linux and an iPad by Wi-Fi?

2012-03-08 Thread Ralf Mardorf
On Thu, 2012-03-08 at 11:40 +0200, Andrei POPESCU wrote: > On Mi, 07 mar 12, 19:41:43, Ralf Mardorf wrote: > > > > Installed the following packages: > > bridge-utils (1.5-2ubuntu1.1) > > dnsmasq (2.57-1ubuntu1) > > dnsmasq-utils (2.57-1ubuntu1) > > h

Re: OT: Newbie questions on security

2012-03-08 Thread Alberto Fuentes
On 08/03/12 16:40, Andrei POPESCU wrote: On Jo, 08 mar 12, 12:52:01, Andrei POPESCU wrote: You can post them here as long as they are Debian related[2]. If there is a better list for any specific question you will get hints. Sorry list, I didn't expect what was about to come... nobody did

Re: OT: Newbie questions on security

2012-03-08 Thread Camaleón
On Thu, 08 Mar 2012 17:40:26 +0200, Andrei POPESCU wrote: > On Jo, 08 mar 12, 12:52:01, Andrei POPESCU wrote: >> >> You can post them here as long as they are Debian related[2]. If there >> is a better list for any specific question you will get hints. > > Sorry list, I didn't expect what was a

Re: Securing Debian Manual: 3.1 Choose a BIOS password

2012-03-08 Thread Kelly Clowers
On Thu, Mar 8, 2012 at 07:12, Camaleón wrote: > On Thu, 08 Mar 2012 16:46:24 +0300, Stayvoid wrote: > >> Hello. > > (...) > > Hi. > > Before going any further, would you care to explain what's going on here? > Were you bitten by a dancing bug or something like that? > Agree on that. Stayvoid, I

Re: [on-topic] /etc/passwd

2012-03-08 Thread Camaleón
On Thu, 08 Mar 2012 22:11:44 +0800, lina wrote: "On topic" can be omitted :-P > Last time I added one user, > Later I used deluser some_user_name > > but some information still keep it in the /etc/passwd and /etc/shadow. > > My question is that: is it safe do delete the entry regards the delete

Re: X forwarding to a Windows 7 PC

2012-03-08 Thread owens
- Original Message - From: yudi v To: Debian users mailing list Sent: 3/8/2012 4:23:56 AM Subject: X forwarding to a Windows 7 PC Hi all, I am trying to forward X from a Debian PC (laptop) to windows 7 pc (desktop) without using SSH. Will either use xming or mobaxterm on windo

Re: OT: Newbie questions on security

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 12:52:01, Andrei POPESCU wrote: > > You can post them here as long as they are Debian related[2]. If there > is a better list for any specific question you will get hints. Sorry list, I didn't expect what was about to come... Kind regards, Andrei -- Offtopic discussions amon

Re: Securing Debian Manual: 3.2.1 Choose an intelligent partition scheme

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 17:35:38, Stayvoid wrote: > > You really, really should read > > http://catb.org/esr/faqs/smart-questions.html first (this applies to all > > your other questions as well). > I read it some time ago. Well, maybe you should read it again. I'm not kidding, I've read it myself seve

Re: Securing Debian Manual: 3.1 Choose a BIOS password

2012-03-08 Thread Camaleón
On Thu, 08 Mar 2012 16:46:24 +0300, Stayvoid wrote: > Hello. (...) Hi. Before going any further, would you care to explain what's going on here? Were you bitten by a dancing bug or something like that? Greetings, -- Camaleón -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.or

Re: bug report request for advice

2012-03-08 Thread Camaleón
On Wed, 07 Mar 2012 20:22:27 -0800, David Christensen wrote: > On 03/07/2012 04:10 AM, Camaleón wrote: > > Fine, but for the next time don't be lazy and reply each user > separately, on its own thread>;-) > > 1. That scatters the conversation. On the contrary, it helps to keep the thread in a

Re: Securing Debian Manual: 10.4.2.1 Proactive defense

2012-03-08 Thread Stayvoid
> In ten years I've never seen so much of a flood sent to this list. I'm really sorry for this, but it's not that easy to find. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.d

Re: Securing Debian Manual: 3.1 Choose a BIOS password

2012-03-08 Thread Tom H
Are you trying to beat some number-of-posts-record?! -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAOdo=Sx3vvxCKE+8Wn_Zrc-_nXP0bOrAOkqNw7zQCxq=qhb...@mail.gmail.co

Re: Securing Debian Manual: 3.2.1 Choose an intelligent partition scheme

2012-03-08 Thread Stayvoid
> The one which suits your needs :p Could you point me to the guide that actually explains this? Every guide I read says something like: "do foo because foo is the right way." It doesn't make any sense. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscr

Re: Securing Debian Manual: 10.4.2.1 Proactive defense

2012-03-08 Thread Mr_Queue
In ten years I've never seen so much of a flood sent to this list. Please see the following URL and place each one of your emails in the magic box. http://lmgtfy.com -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@

Re: Network connection lost - Debian Lenny kernel 2.6.26-2-amd64

2012-03-08 Thread Camaleón
On Thu, 08 Mar 2012 00:07:23 +0100, benoit lair wrote: > 2012/3/7 benoit lair : >> 2012/3/7 Camaleón : >>> On Tue, 06 Mar 2012 23:33:00 +0100, benoit lair wrote: >>> I didn't specify it, but i've tried: ping onto an external host ping onto the gateway  of this server >>> >>> An

Re: Securing Debian Manual: 3.2.1 Choose an intelligent partition scheme

2012-03-08 Thread Stayvoid
> You really, really should read > http://catb.org/esr/faqs/smart-questions.html first (this applies to all > your other questions as well). I read it some time ago. Sorry for zillions of questions, but I really want to hear some thoughts on these topics. The guide is outdated and I hope it'll hel

Securing Debian Manual: 11.4 Forensic analysis

2012-03-08 Thread Stayvoid
Hello. "FIXME: Talk on how to do a debsums on a stable system with the MD5sums on CD and with the recovered file system restored on a separate partition." How to do it? http://www.debian.org/doc/manuals/securing-debian-howto/ch-after-compromise.en.html Cheers -- To UNSUBSCRIBE, email to debia

Securing Debian Manual: 11.2 Backing up the system

2012-03-08 Thread Stayvoid
Hello. "From this shell, backup the information to another host if possible (maybe a network file server through NFS/FTP)." What about SSH? "Make sure to startup in single user mode, so no other Trojan processes run after the kernel." How to be sure? http://www.debian.org/doc/manuals/securing-de

Re: Securing Debian Manual: 3.2.1 Choose an intelligent partition scheme

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 16:49:15, Stayvoid wrote: > > What partition scheme is the best for a VPS (MTA + web server)? The one which suits your needs :p (SCNR) You really, really should read http://catb.org/esr/faqs/smart-questions.html first (this applies to all your other questions as well). Kind

Securing Debian Manual: 10.4.2.1 Proactive defense

2012-03-08 Thread Stayvoid
Hello. "Note, however, that there are rootkits which might work even in this case, there are some that tamper with /dev/kmem (kernel memory) directly to make themselves undetectable." How to avoid those? http://www.debian.org/doc/manuals/securing-debian-howto/ch10.en.html Cheers -- To UNSUBSC

Securing Debian Manual: 5.1.4 Restricing access to file transfer only

2012-03-08 Thread Stayvoid
Hello. "... Give users a restricted shell such as scponly or rssh. These shells restrict the commands available to the users so that they are not provided any remote execution privileges." Is it really necessary? http://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services.en.html Che

Securing Debian Manual: 4.17.6 Protecting against ARP attacks

2012-03-08 Thread Stayvoid
Hello. "Implement IP traffic filtering validating the MAC address." How to do this? http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html Cheers -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.d

Securing Debian Manual: 4.17.2 Configuring syncookies

2012-03-08 Thread Stayvoid
Hello. "This option is a double-edged sword. On the one hand it protects your system against syn packet flooding; on the other hand it violates defined standards (RFCs)." Is there a way to protect the server against syn flooding without RFCs' violation? http://www.debian.org/doc/manuals/securing-

Securing Debian Manual: 4.16.2 The ext2 filesystem specific attributes (chattr/lsattr)

2012-03-08 Thread Stayvoid
Hello. "In addition to the usual Unix permissions, the ext2 and ext3 filesystems offer a set of specific attributes that give you more control over the files on your system." What about ext4 and others? "Now that the capability has been removed from the system, an intruder cannot change any attri

Re: Bug in both update manager and in apt-get

2012-03-08 Thread Camaleón
On Wed, 07 Mar 2012 18:23:13 -0300, pierpaolo pilla wrote: > " > Can you tell why are you using apt-listbugs to get the updates? I mean, > "apt-get upgrade" should manage that for you, right? :-) " > > With apt-get upgrade, I would have installed even the update with a > grave bug, that was my lo

Securing Debian Manual: 4.12.2 Configuring where alerts are sent

2012-03-08 Thread Stayvoid
Hello. "There are other role accounts and aliases on your system. On a small system, it's probably simplest to make sure that all such aliases point to the root account, and that mail to root is forwarded to the system administrator's personal mailbox." How to enable this mailbox thing? Is it secu

Securing Debian Manual: 4.11 Using tcpwrappers

2012-03-08 Thread Stayvoid
Hello. "Beware: The above printed example is open to a DoS attack by making many connections in a short period of time. Many emails mean a lot of file I/O by sending only a few packets." How to avoid this? http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html Cheers -- To UNSUBS

Securing Debian Manual: 4.10.12 Limiting what users can see/access

2012-03-08 Thread Stayvoid
Hello. "Describe the consequences of changing packages permissions when upgrading (an admin this paranoid should chroot his users BTW) if not using dpkg-statoverride." Could you provide more information on this? http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html Cheers -- To

Securing Debian Manual: 4.10.11 Setting users umasks

2012-03-08 Thread Stayvoid
Hello. "Finally, you should consider changing root's default 022 umask (as defined in /root/.bashrc) to a more strict umask." Which one? http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html Cheers -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject

Securing Debian Manual: 4.10.9.2 Using the shell history file

2012-03-08 Thread Stayvoid
Hello. "Note that you could introduce the configuration above in the user's .profile. But then you would need to setup permissions properly in such a way that prevents the user from modifying this file. This includes: having the user's home directories not belong to the user (since he would be abl

Securing Debian Manual: 4.10.9 User auditing

2012-03-08 Thread Stayvoid
Hello. "If you are really paranoid you might want to add a system-wide configuration to audit what the users are doing in your system. This sections presents some tips using diverse utilities you can use." Is it safe? Someone can read the logs. http://www.debian.org/doc/manuals/securing-debian-ho

Securing Debian Manual: 4.10.6 Using sudo

2012-03-08 Thread Stayvoid
Hello. "Violations, such as incorrect passwords or trying to run a program you don't have permission for, are logged and mailed to root." Where can I check this? http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org

Securing Debian Manual: 4.10.1 User authentication: PAM

2012-03-08 Thread Stayvoid
Hello. "Add root and the other users that should be able to su to the root user to this group." I'll be the only user of the server. Should I create a guest user for me? Will it be enough to have a root access? (The answer is pretty obvious, but I want to be sure.) "To make sure that the user roo

[on-topic] /etc/passwd

2012-03-08 Thread lina
Hi, Last time I added one user, Later I used deluser some_user_name but some information still keep it in the /etc/passwd and /etc/shadow. My question is that: is it safe do delete the entry regards the deleted user by hand? Thanks, -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debi

Securing Debian Manual: 4.9.1 Setting /tmp noexec

2012-03-08 Thread Stayvoid
Hello. "You can set this variable in /etc/apt/apt.conf to another directory with exec privileges other than /tmp." [1] Which directory should be selected? [1] http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html Cheers -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debia

Securing Debian Manual: 4.9 Mounting partitions the right way

2012-03-08 Thread Stayvoid
Hello. "This sounds great, but it: only applies to ext2 or ext3 file systems…" [1] What about ext4 (and others)? [1] http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html Cheers -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trou

Securing Debian Manual: 4.8 Restricting system reboots through the console

2012-03-08 Thread Stayvoid
Hello. "Now, in order to allow some users to shutdown the system, as the manpage shutdown(8) describes, you must create the file /etc/shutdown.allow and include there the name of users which can boot the system. When the three finger salute (a.k.a. ctrl+alt+del) is given the program will check if

Re: history configuration

2012-03-08 Thread lina
On Thu, Mar 8, 2012 at 12:01 PM, Karl Vogel wrote: >>> On Wed, 29 Feb 2012 00:19:19 +0800, lina said: > > L> How to configure to make each terminal share one "history"?  I found > L> each terminal saves its own history and no sharing.  Is it possible to > L> let them share? > >   You can if you d

Securing Debian Manual: 4.2.2 Security update of the kernel

2012-03-08 Thread Stayvoid
Hello. "If you are doing a security update which includes the kernel image you need to reboot the system in order for the security update to be useful." [1] How to make it on a running server? I don't want to disable my site and mail for that period of time. Should I use another server to keep the

Re: Securing Debian Manual: 4.2.1 Security update of libraries

2012-03-08 Thread Stayvoid
"Exercise caution when dealing with security upgrades if you are doing them over a remote connection like ssh. A suggested procedure for a security upgrade that involves a service restart is to restart the SSH daemon and then, inmediately, attempt a new ssh connection without breaking the previous

Securing Debian Manual: 4.2.1 Security update of libraries

2012-03-08 Thread Stayvoid
Hello. "Bringing the system to run level 1 (single user) and then back to run level 3 (multi user) should take care of the restart of most (if not all) system services. But this is not an option if you are executing the security upgrade from a remote connection (like ssh) since it will be severed.

Securing Debian Manual: 4.2 Execute a security update

2012-03-08 Thread Stayvoid
Hello. "To manually update the system, put the following line in your sources.list and you will get security updates automatically, whenever you update your system. Replace [CODENAME] with the release codename, e.g. squeeze. deb http://security.debian.org/ [CODENAME]/updates main contrib no

Securing Debian Manual: 3.7 Install the minimum amount of software required

2012-03-08 Thread Stayvoid
Hello. "The presence, for example, of development utilities (a C compiler) or interpreted languages (such as perl - but see below -, python, tcl...) may help an attacker compromise the system…" "So, without Perl and, unless you remake these utilities in shell script, you will probably not be able

Securing Debian Manual: 3.2.1.1 Selecting the appropriate file systems

2012-03-08 Thread Stayvoid
Hello. "During the system partitioning you also have to decide which file system you want to use. The default file system selected in the Debian installation for Linux partitions is ext3, a journaling file system." [1] This manual covers only ext-related features. Should I use ext4 instead of ext3

Securing Debian Manual: 3.2.1 Choose an intelligent partition scheme

2012-03-08 Thread Stayvoid
Hello. What partition scheme is the best for a VPS (MTA + web server)? According to the guide [1] I should use something like this: /home /tmp /var/tmp/ /var /opt /var/mail [1] http://www.debian.org/doc/manuals/securing-debian-howto/ch3.en.html Cheers P.S. Sorry for those who already seen this

Securing Debian Manual: 3.1 Choose a BIOS password

2012-03-08 Thread Stayvoid
Hello. "Before you install any operating system on your computer, set up a BIOS password. After installation (once you have enabled bootup from the hard disk) you should go back to the BIOS and change the boot sequence to disable booting from floppy, CD-ROM and other devices that shouldn't boot. O

Re: using bittorrent for backup of personal files

2012-03-08 Thread Andrew McGlashan
On 8/03/2012 9:24 PM, Andrei POPESCU wrote: On Ma, 06 mar 12, 19:18:49, Rob Owens wrote: I'm considering using bittorrent to back up large files such as pictures and home movies. I am the admin for several of my family members' computers. The idea would be to back up my files onto their machin

Re: OT: Newbie questions on security

2012-03-08 Thread Andrei POPESCU
On Jo, 08 mar 12, 14:56:03, Stayvoid wrote: > > A machine (including any virtual hosts on it) can not be 100% secured > > from people having physical access to it. > So the only solution in this case is to run the server at my place. Right? Depends on your paranoia, since your place is not 100% se

Re: PulseAudio--simultaneous output stopped working

2012-03-08 Thread Dr. Jennifer Nussbaum
- Original Message - > From: Dr. Jennifer Nussbaum > To: "debian-user@lists.debian.org" > Cc: > Sent: Wednesday, March 7, 2012 9:42 PM > Subject: PulseAudio--simultaneous output stopped working > > I use PulseAudio on Debian Testing. For the most part it Just Works and i > didnt > h

  1   2   >