December 2003 - Legacy - lists.gtalug.org

Captive: The first free NTFS read/write filesystem for GNU/Linux
by jason-gaRZxGPHtpBxZtjKW1aY+1aTQe2KTcn/＠public.gmane.org 02 Dec '03

02 Dec '03

This ought to be interesting to see how stable this is. I dont think I will be testing this too soon on critical systems, but it is definitely something to watch. http://www.jankratochvil.net/project/captive/ -snip- Project implements the first full read/write free access to NTFS disk drives. You can mount your Microsoft Windows NT, 200x or XP partition as a transparently accessible volume for your GNU/Linux. This compatibility was achieved in the Wine way by using the original Microsoft Windows ntfs.sys driver. It emulates the required subsystems of the Microsoft Windows kernel by reusing one of the original ntoskrnl.exe, ReactOS parts, or this project's own reimplementations, on a case by case basis. Project includes the first open source MS-Windows kernel API for Free operating systems. Involvement of the original driver files was chosen to achieve the best and unprecedented filesystem compatibility and safety. As opposite to other projects this is currently the only software supporting the full read/write access including the possibility to create/delete files, modify directories etc. -snip- -- " Eventually people tire of repairing broken Windows, And decide to replace them with something stronger" (o_ //\ Linux - The Choice Of A GNU Generation V_/_ Jason Shein Linux Registered User #281100 jason-gaRZxGPHtpBxZtjKW1aY+1aTQe2KTcn/(a)public.gmane.org -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by jason-gaRZxGPHtpBxZtjKW1aY+1aTQe2KTcn/＠public.gmane.org 02 Dec '03

02 Dec '03

In the security alert I recived yesterday from Mandrake Security -snip- Package name: kernel Advisory ID: MDKSA-2003:110 Date: December 1st, 2003 Affected versions: 9.0, 9.1, Corporate Server 2.1, Multi Network Firewall 8.2 ______________________________________________________________________ Problem Description: A vulnerability was discovered in the Linux kernel versions 2.4.22 and previous. A flaw in bounds checking in the do_brk() function can allow a local attacker to gain root privileges. This vulnerability is known to be exploitable; an exploit is in the wild at this time. The Mandrake Linux 9.2 kernels are not vulnerable to this problem as the fix for it is already present in those kernels. MandrakeSoft encourages all users to upgrade their systems immediately. -snip- Robert Brockway wrote: > On Tue, 2 Dec 2003, JoeHill wrote: > > >>What confuses me, is that my default install of MDK 9.2 shows kernel version: >> >>2.4.22-10 >> >>But MDK says 9.2 is safe. >> >>Can someone clarify this for me? > > > It is very common for distributions to patch their own kernels seperately > to the main tree. This way they ensure minimalist changes to their kernel > and also keep whatever customisation or optimisations they have previously > incorporated. > > So when upgrading to avoid an exploit like this, either go for a vanilla > kernel which is known to be fixed (2.4.23 in this case) _or_ whatever > version your distro maintainers advise is safe. > > Rob > -- " Eventually people tire of repairing broken Windows, And decide to replace them with something stronger" (o_ //\ Linux - The Choice Of A GNU Generation V_/_ Jason Shein Linux Registered User #281100 jason-gaRZxGPHtpBxZtjKW1aY+1aTQe2KTcn/(a)public.gmane.org -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by henry-lqW1N6Cllo0sV2N9l4h3zg＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, 2 Dec 2003, JoeHill wrote: > "This bug has been fixed in kernel version 2.4.23 for the 2.4 tree and > 2.6.0-test6 kernel tree. For Debian it has been fixed in version > 2.4.18-12 of the kernel source packages, version 2.4.18-14 of the i386 > kernel images and version 2.4.18-11 of the alpha kernel images." > ... > What confuses me, is that my default install of MDK 9.2 shows kernel version: > 2.4.22-10 > But MDK says 9.2 is safe. Note the "-10" on the end. That is not a stock 2.4.22; it is their modified version of it. I don't know enough about Mandrake to say for sure about them, but this sort of thing often means that they've got their own package of favorite kernel mods and need a while to integrate it into a new kernel release, so the quickest way to respond to a problem is to manually put the fix for it into their current kernel, rather than instantly switching to the new kernel. Henry Spencer henry-lqW1N6Cllo0sV2N9l4h3zg at public.gmane.org -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

SMC Cable/DSL 4port router
by linux-5ZoueyuiTZhBDgjK7y7TUQ＠public.gmane.org 02 Dec '03

02 Dec '03

Tim Writer wrote: > James Knott <james.knott-bJEeYj9oJeDQT0dZR+AlfA at public.gmane.org> writes: > > >>Terry Tanski wrote: >> >>>Hi all, >>>Anyone have any comments on the SMC Cable/DSL 4port router (SMC7004VBR)? >>>How does it compare to the DLINK (604) or the LinkSys (SR41)? Does it have >>>half-decent firewall capabilities? >> >>>Terry >> >>I have the wireless version of that. It seems to be OK. What capabilities >>were you looking for? > > > Well, I worked on the wireless version for a while and was not at all > impressed. The firewalling capabilities are only applicable to the Internet > connection, i.e. you cannot firewall your wireless LAN from your traditional > LAN. You can use MAC based ACLs to prevent wireless users from going out to > the Internet but you can't stop them from accessing your wired LAN. You can > also restrict wireless traffic but you can't implement a deny by default > policy, i.e. you cannot deny everything except the few services you want to > allow, you can only deny specific services. > > The bottom line: as long as you're not using wireless and you're using NAT, > it will give you a basic level of protection simply due to the use of private > IPs with NAT. IOW, it's okay for a simple home setting but I wouldn't use it > in a business setting. > Back when those routers first came out SMC was really the only one on the market and thus I sold a number of them. A -lot- of them later failed. I switched to using Linksys (now Cisco) and I haven't had a single failure yet. Madison -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

SMC Cable/DSL 4port router
by tim-s/rLXaiAEBtBDgjK7y7TUQ＠public.gmane.org 02 Dec '03

02 Dec '03

James Knott <james.knott-bJEeYj9oJeDQT0dZR+AlfA at public.gmane.org> writes: > Terry Tanski wrote: > > Hi all, > > Anyone have any comments on the SMC Cable/DSL 4port router (SMC7004VBR)? > > How does it compare to the DLINK (604) or the LinkSys (SR41)? Does it have > > half-decent firewall capabilities? > > > Terry > > > > > I have the wireless version of that. It seems to be OK. What capabilities > were you looking for? Well, I worked on the wireless version for a while and was not at all impressed. The firewalling capabilities are only applicable to the Internet connection, i.e. you cannot firewall your wireless LAN from your traditional LAN. You can use MAC based ACLs to prevent wireless users from going out to the Internet but you can't stop them from accessing your wired LAN. You can also restrict wireless traffic but you can't implement a deny by default policy, i.e. you cannot deny everything except the few services you want to allow, you can only deny specific services. The bottom line: as long as you're not using wireless and you're using NAT, it will give you a basic level of protection simply due to the use of private IPs with NAT. IOW, it's okay for a simple home setting but I wouldn't use it in a business setting. -- tim writer <tim-s/rLXaiAEBtBDgjK7y7TUQ at public.gmane.org> starnix inc. 905.771.0017 ext. 225 thornhill, ontario, canada http://www.starnix.com professional linux services & products -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

GUI2
by hughreilly1-PkbjNfxxIARBDgjK7y7TUQ＠public.gmane.org 02 Dec '03

02 Dec '03

OK, Now that this thread (which I'm afraid I started) has come to an end--even though I didn't see anyone mention Hitler but I did see mention of a certain member of the Buffalo Sabres--I'd like to announce the winners: Taavi Burns for: http://www.pycage.de/expocity.html http://xserver.freedesktop.org and Joe Hill for: http://rox.sourceforge.net Thanks everybody for participating. Unless I missed anything, these URLs by Taavi and Joe are serious on-topic answers to my serious-though-maybe-a-bit-mischievious question. Does anybody have any experiences with these or any rationale why these are or might be "GUI paradise" for the Linux user? -Hugh _______________________________________________ Hugh Reilly XEN Technology Group | LinuxLab 600 Bay Street, Suite 405 Toronto ON M5R 1G6 tel: 416-204-9951 fax: 416-204-9723 email: info-2K4XOyu7qTosA/PxXw9srA at public.gmane.org _______________________________________________ http://www.xen.ca | http://www.linuxlab.ca _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus&pgmarket=en-ca&RU=http%3a%2f%2fjoi… -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Question about VNC
by sidney-3Kd7Tu4o6f/sBN0MCq728g＠public.gmane.org 02 Dec '03

02 Dec '03

Thanks Thomas, KDE Desktop Sharing looks perfect. Sid > -----Original Message----- > From: owner-tlug-lxSQFCZeNF4 at public.gmane.org [mailto:owner-tlug at ss.org] On Behalf Of Thomas > Gibson > Sent: Tuesday, December 02, 2003 9:28 AM > To: tlug-lxSQFCZeNF4 at public.gmane.org > Subject: RE: [TLUG]: Question about VNC > > Sidney, > > Windows vncserver's behaviour is slightly different > from Linux/Unix. In Windows(workstation), there is > only one desktop/session so this is the one that is > shared. In Linux, each vncserver sponses its own > desktop/session which lasts for the lifetime of the > server process. > > Vncserver runs its own pseudo-X-server, Xvnc which is > conflicting with the xserver sponsed by start. Have a > read of the Xvnc man page. It sounds like you are > running init level 3(non-X11). In which cases > desktops are unmanaged. If you change the init level > to 5, Xdm will be running and display numbers will be > managed for you automagically. This will get around > the display number problem if your happy with the fact > that your local desktop will be seperate from your VNC > desktop. > > But.. > > I think you are looking for something more along the > lines of KDE Desktop Sharing. Haven't used it but > have a look at: http://www.tjansen.de/krfb/ > > Hope this helps. > > --- Sidney Shapiro <sidney-3Kd7Tu4o6f/sBN0MCq728g at public.gmane.org> wrote: > > > > > > VNC is already using display 0, so you would have > > to do: > > > > > > startx -- :1 > > > > > > Question, though. The whole point of VNC is that > > you have an X desktop > > > open from > > > the remote machine. Why start *another* X session > > on top of it? > > > > > > Instead, on the remote machine, there should be a > > ~/.vnc dir, create a > > > file > > > called xstartup, make it executable, and then edit > > it to start > > whatever > > > desktop > > > or window manager you want to run on VNC. > > > > > > > Hmmm, I am trying to get my local VNC prog to > > display the RH X screen to > > show a client how to make some changes. > > > > Sid > > > > > > -- > > The Toronto Linux Users Group. Meetings: > > http://tlug.ss.org > > TLUG requests: Linux topics, No HTML, wrap text > > below 80 columns > > How to UNSUBSCRIBE: > http://tlug.ss.org/subscribe.shtml > > ______________________________________________________________________ > Post your free ad now! http://personals.yahoo.ca > -- > The Toronto Linux Users Group. Meetings: http://tlug.ss.org > TLUG requests: Linux topics, No HTML, wrap text below 80 columns > How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Question about VNC
by a67582000-/E1597aS9LQAvxtiuMwx3w＠public.gmane.org 02 Dec '03

02 Dec '03

Sidney, Windows vncserver's behaviour is slightly different from Linux/Unix. In Windows(workstation), there is only one desktop/session so this is the one that is shared. In Linux, each vncserver sponses its own desktop/session which lasts for the lifetime of the server process. Vncserver runs its own pseudo-X-server, Xvnc which is conflicting with the xserver sponsed by start. Have a read of the Xvnc man page. It sounds like you are running init level 3(non-X11). In which cases desktops are unmanaged. If you change the init level to 5, Xdm will be running and display numbers will be managed for you automagically. This will get around the display number problem if your happy with the fact that your local desktop will be seperate from your VNC desktop. But.. I think you are looking for something more along the lines of KDE Desktop Sharing. Haven't used it but have a look at: http://www.tjansen.de/krfb/ Hope this helps. --- Sidney Shapiro <sidney-3Kd7Tu4o6f/sBN0MCq728g at public.gmane.org> wrote: > > > > VNC is already using display 0, so you would have > to do: > > > > startx -- :1 > > > > Question, though. The whole point of VNC is that > you have an X desktop > > open from > > the remote machine. Why start *another* X session > on top of it? > > > > Instead, on the remote machine, there should be a > ~/.vnc dir, create a > > file > > called xstartup, make it executable, and then edit > it to start > whatever > > desktop > > or window manager you want to run on VNC. > > > > Hmmm, I am trying to get my local VNC prog to > display the RH X screen to > show a client how to make some changes. > > Sid > > > -- > The Toronto Linux Users Group. Meetings: > http://tlug.ss.org > TLUG requests: Linux topics, No HTML, wrap text > below 80 columns > How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml ______________________________________________________________________ Post your free ad now! http://personals.yahoo.ca -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Debian attacker may have used new exploit
by robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy＠public.gmane.org 02 Dec '03

02 Dec '03

On Tue, 2 Dec 2003, JoeHill wrote: > What confuses me, is that my default install of MDK 9.2 shows kernel version: > > 2.4.22-10 > > But MDK says 9.2 is safe. > > Can someone clarify this for me? It is very common for distributions to patch their own kernels seperately to the main tree. This way they ensure minimalist changes to their kernel and also keep whatever customisation or optimisations they have previously incorporated. So when upgrading to avoid an exploit like this, either go for a vanilla kernel which is known to be fixed (2.4.23 in this case) _or_ whatever version your distro maintainers advise is safe. Rob -- Robert Brockway B.Sc. email: robert-5LEc/6Zm6xCUd8a0hrldnti2O/JbrIOy at public.gmane.org, zzbrock at uqconnect.net Linux counter project ID #16440 (http://counter.li.org) "The earth is but one country and mankind its citizens" -Baha'u'llah -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Question about VNC
by sidney-3Kd7Tu4o6f/sBN0MCq728g＠public.gmane.org 02 Dec '03

02 Dec '03

> > VNC is already using display 0, so you would have to do: > > startx -- :1 > > Question, though. The whole point of VNC is that you have an X desktop > open from > the remote machine. Why start *another* X session on top of it? > > Instead, on the remote machine, there should be a ~/.vnc dir, create a > file > called xstartup, make it executable, and then edit it to start whatever > desktop > or window manager you want to run on VNC. > Hmmm, I am trying to get my local VNC prog to display the RH X screen to show a client how to make some changes. Sid -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0