2004-09-13

the Fedora Core project not release the OpenSSH security hole yet

in fact, i really don't want to mess up my system.
but untill now, i don't find RPM-based security fix from Fedora Core project.
SecurityFocus.com indicated this security hole in 2003/09/16 :

Versions older than 3.7.1 are vulnerable to a flaw in the buffer management
functions which might allow an attacker to execute arbitrary commands on this
host.

in the alternative way, you can download tarball from openssh.org to solve
this problem.

./configure --prefix=/opt
make
make install

modify /etc/rc.d/init.d/sshd :
KEYGEN=/opt/bin/ssh-keygen
SSHD=/opt/sbin/sshd
RSA1_KEY=/opt/etc/ssh_host_key
RSA_KEY=/opt/etc/ssh_host_rsa_key
DSA_KEY=/opt/etc/ssh_host_dsa_key

final, restart your SSHD

Install nessus

1. lynx -source http://install.nessus.org | sh
2. /usr/local/sbin/nessus-mkcert
3. /usr/local/sbin/nessus-adduser
4. nessus-update-plugins
5. /usr/local/sbin/nessusd -D
6. nessus &

XP desktop environment

this is a interesting project.
they try to recrate a Windows XP interface on Linux.

http://www.xpde.com/
&
screenshots:
http://www.xpde.com/shots.php

script for the damn RPM dependencies

#!/bin/bash
for i in $(ls ./);
do
echo $i >> rpm-content.txt;
echo "====================" >> rpm-content.txt;
rpm -qlp $i >> rpm-content.txt;
echo " " >> rpm-content.txt;
echo " " >> rpm-content.txt;
done

###########
PIII 500, 128MB RAM
Fedora Core 1
--------------
real 6m17.237s
user 2m54.410s
sys 0m45.850s

save iptables config in /etc/sysconfig/iptables

/sbin/service iptables save

more details in /etc/sysconfig

/usr/share/doc/initscripts-verson-number/sysconfig.txt

font in MCC (Mandrake Linux 10 Community)

/etc/X11/xdm/Xservers:
:0 local /usr/X11R6/bin/X -deferglyphs 16 -dpi 120

NetBSD gateway

1. /etc/mygate

or

2. /etc/rc.conf
host="xxx.yyy.zzz"
defaultroute="1.2.3.4"
domain name="yyy.zzz"