Re: Limiting attack surface for Debian sshd

2025-04-14 Thread tomas
On Mon, Apr 14, 2025 at 12:20:34PM -0700, Michael Paoli wrote: > What systemd dependencies? :-) Thanks for reminding us that Debian is (more or less) viable without systemd (I try to keep my daily driver that way, too). But the original poster has another, valid concern. I think the best illustr

Re: Fwd: Chaos

2025-04-14 Thread Maureen Thomas
Not sure how this happened but it was not meant for you guys.  It is good info for those of us who are living it. On 4/14/25 7:57 PM, Maureen Thomas wrote: Excellent read. Forwarded Message Subject:Chaos Date: Mon, 14 Apr 2025 08:02:12 + From: Robert Reich

Fwd: Chaos

2025-04-14 Thread Maureen Thomas
Excellent read. Forwarded Message Subject:Chaos Date: Mon, 14 Apr 2025 08:02:12 + From: Robert Reich Reply-To: Robert Reich To: silver...@verizon.net Chaos The American oligarchy is petrified by Trump’s economic chaos but careful not to criticize

Re: Limiting attack surface for Debian sshd

2025-04-14 Thread Michael Paoli
What systemd dependencies? :-) # readlink /proc/1/exe /sbin && dpkg -S /sbin/init && cat /etc/debian_version && more /etc/apt/preferences.d/* | cat /usr/sbin/init usr/sbin sysvinit-core: /sbin/init 12.10 :: /etc/apt/preferences.d/98init :: Explanation: Avoid unintended in

Re: possible cllue about this 30 second system freeze

2025-04-14 Thread gene heskett
On 4/14/25 11:51, Pocket wrote: On 4/14/25 11:04 AM, gene heskett wrote: On 4/14/25 09:18, Pocket wrote: On 4/14/25 8:35 AM, gene heskett wrote: But while there is a call to docker on an ipv4 address starting with 172 in the trace output, I don't recall ever setting up docker on this system.

Re: FreeRadius Help

2025-04-14 Thread Timothy M Butterworth
On Sun, Apr 13, 2025 at 7:30 AM Timothy M Butterworth < timothy.m.butterwo...@gmail.com> wrote: > *Push the below role, The user in the IOS will get the level 15 > Privilege.This would be applicable for all the users who are member of > group cisco-rw* > > *DEFAULT Group == cisco-rw, Auth-Type =

Re: Limiting attack surface for Debian sshd

2025-04-14 Thread Marc SCHAEFER
On Mon, Apr 14, 2025 at 03:08:11PM +0200, didier gaumet wrote: > please take all that precedes with a grain of salt: I do not install and set > up ssh servers :-) All input is welcome, thank you.

Re: Debian

2025-04-14 Thread Stefan Monnier
> Worse than that, if this is the original netgear "firmware", I have no idea > how close to a normal debian system it ever was, what the actual hardware > is, or whether that hardware is supported by debian itself (vs only with > netgear modifications). A quick google suggests that the netgear > m

Re: case fan speed

2025-04-14 Thread Eben King
On 4/14/25 04:33, Jonathan Dowland wrote: On Sun Apr 13, 2025 at 10:23 PM BST, Eben King wrote: sudo modprobe it87 force_id=0x8728 then running "sensors" shows it8728-isa-0a40 Adapter: ISA adapter <9 voltages> <5 fans, one of which is 0 RPM> <3 temps> intrusion0:  ALARM That might be the w

Re: possible cllue about this 30 second system freeze

2025-04-14 Thread gene heskett
On 4/14/25 09:18, Pocket wrote: On 4/14/25 8:35 AM, gene heskett wrote: But while there is a call to docker on an ipv4 address starting with 172 in the trace output, I don't recall ever setting up docker on this system.  So who can help me check to see if its missing and this freeze is the ti

Re: Limiting attack surface for Debian sshd

2025-04-14 Thread Dan Purgert
On Apr 14, 2025, Marc SCHAEFER wrote: > I wrote: > > > If you > >sudo systemctl disable cups # and maybe others > > Actually, if you follow the discussion, the CUPS Bonjour auto-discovery > >- it presumably handled by the cups-browsed package > (you can uninstall it, or systemctl di

Re: case fan speed

2025-04-14 Thread Dan Ritter
Jonathan Dowland wrote: > On Sun Apr 13, 2025 at 10:23 PM BST, Eben King wrote: > > sudo modprobe it87 force_id=0x8728 > > > > then running "sensors" shows > > it8728-isa-0a40 > > Adapter: ISA adapter > > <9 voltages> > > <5 fans, one of which is 0 RPM> > > <3 temps> > > intrusion0: ALARM > > >

Re: Limiting attack surface for Debian sshd

2025-04-14 Thread didier gaumet
Le 14/04/2025 à 13:57, Marc SCHAEFER a écrit : Hello, Yes! On the (dynamic) dependancy side it seems ideal. So it means it's a reimplementation of the SSH server, not using libssh? (or it's statically compiled, which could be worse?) libssh does not appear in the build-dependencies of the sou

Re: possible cllue about this 30 second system freeze

2025-04-14 Thread gene heskett
On 4/14/25 01:55, Andrew M.A. Cater wrote: On Sun, Apr 13, 2025 at 05:32:29PM -0400, gene heskett wrote: On 4/13/25 14:07, Andrew M.A. Cater wrote: On Sun, Apr 13, 2025 at 12:50:14PM -0400, gene heskett wrote: Hi Gene, I'm probably going to regret this - let's see if I can help you fault-find

Re: Limiting attack surface for Debian sshd

2025-04-14 Thread Marc SCHAEFER
I wrote: > If you >sudo systemctl disable cups # and maybe others Actually, if you follow the discussion, the CUPS Bonjour auto-discovery - it presumably handled by the cups-browsed package (you can uninstall it, or systemctl disable it, if you don't want printer auto-detection

cups-browsed installed and open by default (was: Limiting attack surface for Debian sshd)

2025-04-14 Thread Marc SCHAEFER
Hello, On Sun, Apr 13, 2025 at 11:38:01AM -0400, Stefan Monnier wrote: > Why do you need cups ports open to print? You presumably do not, in the general sense. On this machine, I have this: tcp0 0 127.0.0.1:631 0.0.0.0:* LISTEN 10711/cupsd tcp

Re: Limiting attack surface for Debian sshd

2025-04-14 Thread Marc SCHAEFER
Hello, On Sun, Apr 13, 2025 at 06:24:50PM +0200, didier gaumet wrote: > didier@hp-notebook14:~$ ldd /usr/sbin/tinysshd > linux-vdso.so.1 (0x7ffdb29f7000) > libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x7f54a996c000) > /lib64/ld-linux-x86-64.so.2 (0x7f54a9c2e000) >

Re: Syslog-NG Centralized Log Collector

2025-04-14 Thread Timothy M Butterworth
All, After quite a bit of trail and error I managed to get log collection working. Here are the commands for /etc/syslog-ng/syslog-ng.conf: source s_net { tcp(ip(10.0.0.1) port(514) max-connections (5000)); udp(ip(10.0.0.1) port(514)); }; destination cisco-remote { file("/var/log/cisco.log"); };

Re: case fan speed

2025-04-14 Thread Jonathan Dowland
On Sun Apr 13, 2025 at 10:23 PM BST, Eben King wrote: sudo modprobe it87 force_id=0x8728 then running "sensors" shows it8728-isa-0a40 Adapter: ISA adapter <9 voltages> <5 fans, one of which is 0 RPM> <3 temps> intrusion0: ALARM It's been put into /etc/modules. That might be the way forward.

Re: Syslog-NG Centralized Log Collector

2025-04-14 Thread Timothy M Butterworth
On Sun, Apr 13, 2025 at 11:59 PM Timothy M Butterworth < timothy.m.butterwo...@gmail.com> wrote: > > > On Sun, Apr 13, 2025 at 11:00 PM Timothy M Butterworth < > timothy.m.butterwo...@gmail.com> wrote: > >> >> >> On Sun, Apr 13, 2025 at 10:51 PM Timothy M Butterworth < >> timothy.m.butterwo...@gma