Re: Weird and insecure su problem: FIXED

2002-11-19 Thread Pigeon
On Sun, 17 Nov 2002 13:00:56 +0200, Michelle Konzack <[EMAIL PROTECTED]> wrote: >Hello, > >Am 17:44 2002-11-15 + hat Pigeon geschrieben: >> >>On Fri, 15 Nov 2002 01:05:11 +, Glyn Kennington >><[EMAIL PROTECTED]> wrote: > >>couldn't run tar & gzip, I had to unpack it with WinZip on my Wind

Re: Weird and insecure su problem: FIXED

2002-11-18 Thread Michelle Konzack
Hello, Am 17:44 2002-11-15 + hat Pigeon geschrieben: > >On Fri, 15 Nov 2002 01:05:11 +, Glyn Kennington ><[EMAIL PROTECTED]> wrote: >couldn't run tar & gzip, I had to unpack it with WinZip on my Windoze ^^

Re: Weird and insecure su problem: FIXED

2002-11-16 Thread Colin Watson
On Sat, Nov 16, 2002 at 08:44:43PM +, Pigeon wrote: > On Fri, 15 Nov 2002 18:21:00 +, Colin Watson <[EMAIL PROTECTED]> > wrote: > >Unless you're using MD5 passwords, old Unix crypt() has been broken for > >a long time. In any case it's probably not a good idea to spread > >/etc/shadow aroun

Re: Weird and insecure su problem: FIXED

2002-11-16 Thread Pigeon
On Fri, 15 Nov 2002 18:26:11 +, Glyn Kennington <[EMAIL PROTECTED]> wrote: >Pigeon wrote: >> >And the `not an octal number' error suggest broken permissions somewhere. >> It does, doesn't it? That was Microsoft's fault for their LF/CR line >> break standard. In order to get my Linux box to boo

Re: Weird and insecure su problem: FIXED

2002-11-16 Thread Pigeon
On Fri, 15 Nov 2002 18:21:00 +, Colin Watson <[EMAIL PROTECTED]> wrote: >On Fri, Nov 15, 2002 at 05:44:56PM +, Pigeon wrote: >> On Fri, 15 Nov 2002 01:05:11 +, Glyn Kennington >> <[EMAIL PROTECTED]> wrote: >> >Check that /etc/passwd and /etc/shadow match the descriptions in `man >> >pa

Re: Weird and insecure su problem: FIXED

2002-11-15 Thread Glyn Kennington
Pigeon wrote: > >And the `not an octal number' error suggest broken permissions somewhere. > It does, doesn't it? That was Microsoft's fault for their LF/CR line > break standard. In order to get my Linux box to boot again I had to > manually copy in the files from > dists/slink/main/disks-i386/2.1

Re: Weird and insecure su problem: FIXED

2002-11-15 Thread Colin Watson
On Fri, Nov 15, 2002 at 05:44:56PM +, Pigeon wrote: > On Fri, 15 Nov 2002 01:05:11 +, Glyn Kennington > <[EMAIL PROTECTED]> wrote: > >Check that /etc/passwd and /etc/shadow match the descriptions in `man > >passwd` and `man shadow` respectively. > > Hey, thanks for that. It was /etc/shado

Re: Weird and insecure su problem: FIXED

2002-11-15 Thread Pigeon
On Fri, 15 Nov 2002 01:05:11 +, Glyn Kennington <[EMAIL PROTECTED]> wrote: >Pigeon wrote: >> If, however, I enter _no_ password, I get: >> : command not found >> ' is not an octal number from 000 to 777 >> : command not found >> : command not found >> >> and a somewhat mangled prompt; then >>

Re: Weird and insecure su problem

2002-11-14 Thread Glyn Kennington
Pigeon wrote: > If, however, I enter _no_ password, I get: > : command not found > ' is not an octal number from 000 to 777 > : command not found > : command not found > > and a somewhat mangled prompt; then > whoami > root > > - so I've su'ed to root without entering a password. WHAT? > > Wonde

Weird and insecure su problem

2002-11-14 Thread Pigeon
The story so far: - Accidentally nuke shared libraries; system dies - Unpack base2_1.tgz off original Debian 2.1 install CD; manually copy in enough of this and the rescue disk to get it to boot again - dpkg -i everything in dists/stable/main/binary-i386/base - Fire up dselect and reinstall everyth