Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting
Mailing Lists: lists.debian.org > debian-user-digest > 07 > 070235.html (Request Expert lists.debian.org Support)

debian-user-digest Digest V2007 #2058

From: <debian-user-digest-request(at)lists.debian.org>
Date: Sun Jul 29 2007 - 15:54:29 EDT


Content-Type: text/plain

debian-user-digest Digest Volume 2007 : Issue 2058

Today's Topics: 

  Re: essential services? ssh, nfs?     [ Jeff D  ]
  Re: essential services? ssh, nfs?     [ Jeff D  ]
  Re: essential services? ssh, nfs?     [ mouss  ]
  Re: searching for graphical torrent   [ Andrei Popescu  ]
  Re: /bin/login listening?             [ Tyler Smith 
  Re: how to set network io priority f  [ "Andrew J. Barr" <andrew.james.barr ]
  Re: dumb question about Adobe Acroba  [ Alan Ianson <agianson@shaw.ca> ]



Date: Sun, 29 Jul 2007 09:55:52 -0700 (PDT)
From: Jeff D <fixedored@gmail.com>


To: debian user <debian-user@lists.debian.org>
Subject: Re: essential services? ssh, nfs?
Message-ID: <Pine.LNX.4.62.0707290946210.12185@proto.technobounce.com>
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed



On Sun, 29 Jul 2007, Tyler Smith wrote:


> Hi,
>
> I'm working through the security quick start how to, and I'm not clear
> on what services are required and which ones I can safely remove. I'm
> running a single laptop, which I connect to the net via wireless at
> home or at cafes, and via an ethernet cable at work.
>
> 1) I never login remotely, so I think I can safely do away with
> openssh-server?
>
> tcp6        *:ssh                   *:*       LISTEN     3026/sshd
>
> 2) The how-to suggests that for my setup I don't need anything to do
> with NFS - netstat reports rpc.statd and portmap as listening. Can I
> just purge nfs-common and portmap?
>
> tcp         *:37381                 *:*       LISTEN     2603/rpc.statd
> tcp         *:sunrpc                *:*       LISTEN     2578/portmap
>
>
> 3) I have apache installed as a dependency of doc-central. netstat
> shows it to be listening to all interfaces. Is there a way to set it
> to listen only for local connections? I don't understand this very
> well, but it seems I shouldn't need to listen to anyone from the
> outside to connect to my docs.
>
> tcp         *:www                   *:*       LISTEN     3826/apache
>
> 4) The only remaining listeners I have are:
>
> tcp         localhost:929           *:*       LISTEN     3721/famd
> tcp         *:auth                  *:*       LISTEN     3661/inetd
> tcp         localhost:smtp          *:*       LISTEN     3385/exim4
>
> What is auth? Since famd and exim4 are only listening to localhost,
> can I conclude they are not a security risk?
>
> Thanks for your help,
>
> Tyler
>
>
> --

the general rule of thumb, is if you dont use it, turn it off.  I'd turn 
off almost every thing.  You can leave exim and famd on.
to turn auth off, you can edit /etc/inetd.conf and comment out the line 
that starts with ident.


Do you need help?X

for portmap:


update-rc.d -f portmap remove


for rpc.statd:


update-rc.d -f rpc.statd remove


ssh:


update-rc.d -f ssh remove



to bind apache to the localhost, in /etc/apache2/ports.conf change the 
Listen 80 to Listen 127.0.0.1:80, then restart apache.




-+-


8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno.



Date: Sun, 29 Jul 2007 10:00:51 -0700 (PDT)
From: Jeff D <fixedored@gmail.com>


To: debian user <debian-user@lists.debian.org>
Subject: Re: essential services? ssh, nfs?
Message-ID: <Pine.LNX.4.62.0707290957420.12185@proto.technobounce.com>
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed



On Sun, 29 Jul 2007, Tyler Smith wrote:


> Hi,
>
> I'm working through the security quick start how to, and I'm not clear
> on what services are required and which ones I can safely remove. I'm
> running a single laptop, which I connect to the net via wireless at
> home or at cafes, and via an ethernet cable at work.
>
> 1) I never login remotely, so I think I can safely do away with
> openssh-server?
>
> tcp6        *:ssh                   *:*       LISTEN     3026/sshd
>
> 2) The how-to suggests that for my setup I don't need anything to do
> with NFS - netstat reports rpc.statd and portmap as listening. Can I
> just purge nfs-common and portmap?
>
> tcp         *:37381                 *:*       LISTEN     2603/rpc.statd
> tcp         *:sunrpc                *:*       LISTEN     2578/portmap
>
>
> 3) I have apache installed as a dependency of doc-central. netstat
> shows it to be listening to all interfaces. Is there a way to set it
> to listen only for local connections? I don't understand this very
> well, but it seems I shouldn't need to listen to anyone from the
> outside to connect to my docs.
>
> tcp         *:www                   *:*       LISTEN     3826/apache
>
> 4) The only remaining listeners I have are:
>
> tcp         localhost:929           *:*       LISTEN     3721/famd
> tcp         *:auth                  *:*       LISTEN     3661/inetd
> tcp         localhost:smtp          *:*       LISTEN     3385/exim4
>
> What is auth? Since famd and exim4 are only listening to localhost,
> can I conclude they are not a security risk?
>
> Thanks for your help,
>
> Tyler
>
>
> --

erf, it's too early, not enough coffee yet, but you might want to add this 
one to the list too:


update-rc.d -f nfs-common remove



Do you need more help?X

You can also just remove the packages that control these though.  But, 
personally I like to keep them around, just incase I need to turn them 
back on at some point.  It's come in handy for me a few time to have the 
services available



-+-


8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno.



Date: Sun, 29 Jul 2007 19:22:27 +0200

From: mouss 
To: debian-user@lists.debian.org
Cc: debian-user@lists.debian.org



Subject: Re: essential services? ssh, nfs?

Message-ID: <46ACCCD3.30208@free.fr>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit


Tyler Smith wrote:

> Hi,
>
> I'm working through the security quick start how to, and I'm not clear
> on what services are required and which ones I can safely remove. I'm
> running a single laptop, which I connect to the net via wireless at
> home or at cafes, and via an ethernet cable at work. 
>
> 1) I never login remotely, so I think I can safely do away with
> openssh-server? 
>
> tcp6        *:ssh                   *:*       LISTEN     3026/sshd           
>
> 2) The how-to suggests that for my setup I don't need anything to do
> with NFS - netstat reports rpc.statd and portmap as listening. Can I
> just purge nfs-common and portmap?
>
> tcp         *:37381                 *:*       LISTEN     2603/rpc.statd      
> tcp         *:sunrpc                *:*       LISTEN     2578/portmap        
>
>
> 3) I have apache installed as a dependency of doc-central. netstat
> shows it to be listening to all interfaces. Is there a way to set it
> to listen only for local connections? I don't understand this very
> well, but it seems I shouldn't need to listen to anyone from the
> outside to connect to my docs.
>
> tcp         *:www                   *:*       LISTEN     3826/apache         
>
>   

you need to edit apache config file. look for "Listen" and replace the 
wildcard IP by 127.0.0.1. I personally avoid changing config files that 
come with packages. so here, just use an iptables rule to block incoming 
traffic unless you want it.


> 4) The only remaining listeners I have are:
>
> tcp         localhost:929           *:*       LISTEN     3721/famd           
> tcp         *:auth                  *:*       LISTEN     3661/inetd          
> tcp         localhost:smtp          *:*       LISTEN     3385/exim4          
>
> What is auth?

This is the (obsolete?) ident service. you can disable it (after all, 
windows people don't have it and they have no problem surfing...).


Can we help you?X

If you use a firewall, make sure to reject packets coming in to this 
port, instead of a DROP. Otherwise, services that use ident will be slow 
at connection time.


>  Since famd and exim4 are only listening to localhost,
> can I conclude they are not a security risk?
>   

In general, it's ok, but you still need to keep your eyes open:



  •   make sure incoming traffic to localhost is blocked (just drop). 127.* 
should not appear on the wire. This really belongs to the IP stack, but 
as I am not sure it is filtered there, stay safe and add an explicit rule.

  
  •   make sure you have no NAT rule that redirects incoming traffic to 
localhost.



Date: Sun, 29 Jul 2007 20:54:12 +0300


From: Andrei Popescu <andreimpopescu@gmail.com>
To: debian-user@lists.debian.org


Subject: Re: searching for graphical torrent client
Message-ID: <20070729175412.GB21882@think.homenet>
Content-Type: multipart/signed; micalg=pgp-sha1;


        protocol="application/pgp-signature"; boundary="aVD9QWMuhilNxW9f"
Content-Disposition: inline



--aVD9QWMuhilNxW9f

Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


On Fri, Jul 27, 2007 at 01:07:17PM +0300, Giorgos D. Pallas wrote:

> I tried google but can't seem to find something that both looks decent
> *and* is available for debian (testing) as a binary. For example I tried
> qtorrent, but it is so minimal that I don't like it... Or to put it in
> another way: Which client resembles most the windows utorrent? (I also
> tried ktorrent for KDE and it crashes often...)
Can't find what you're looking for?X

ktorrent crashed on me only when using DHT.



Regards,


Andrei


--=20


If you can't explain it simply, you don't understand it well enough.
(Albert Einstein)



--aVD9QWMuhilNxW9f

Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----


Version: GnuPG v1.4.6 (GNU/Linux)



iD8DBQFGrNREqJyztHCFm9kRAms0AJ4pnJTH9ydA4h0Fvk27RwOVyMDuPACfcyPE
h+9e5o7SlntT3L4dqNRKUmo=


=fwgU

-----END PGP SIGNATURE-----


--aVD9QWMuhilNxW9f--



Date: Sun, 29 Jul 2007 14:07:19 -0400


From: Douglas Allan Tutty <dtutty@porchlight.ca>
To: debian-user@lists.debian.org


Subject: how to set network io priority for a process?

Message-ID: <20070729180719.GA10786@titan>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


I'm on slow dialup.  Downloads of iso's take days. Yet, I still want to
be able to browse the internet.


Don't know where to look next?X

I would like to set up something like trickle that will run something
but limit its bandwidth so that it lower's its priority.



For example, wget and rsync allow one to limit the bandwidth to a set
rate.  However, if nothing else wants the connection, this wastes
available bandwidth.  Conversely, if I try to view a big web site, it
would like the wget or rsync to get out of the way while I'm doing it.



Trickle allows one to set a rate for programs that don't give the
option.  ionice does something similar for disk io.



What I want is something like ionice but for network bandwidth.



Any suggestions?



Thanks,



Doug.


Confused? Frustrated?X

Date: 29 Jul 2007 17:52:12 GMT


From: Tyler Smith <tyler.smith@mail.mcgill.ca>
To: debian-user@lists.debian.org


Subject: Re: essential services? ssh, nfs?
Message-ID: <slrnfapodj.448.tyler.smith@blackbart.mynetwork>



On 2007-07-29, Jeff D <fixedored@gmail.com> wrote:

>
> the general rule of thumb, is if you dont use it, turn it off.  I'd turn 
> off almost every thing.  You can leave exim and famd on.
> to turn auth off, you can edit /etc/inetd.conf and comment out the line 
> that starts with ident.
>
> for portmap:
> update-rc.d -f portmap remove
> for rpc.statd:
> update-rc.d -f rpc.statd remove
> ssh:
> update-rc.d -f ssh remove
>
> to bind apache to the localhost, in /etc/apache2/ports.conf change the 
> Listen 80 to Listen 127.0.0.1:80, then restart apache.
>
>

Thanks Jeff, Doug, and everyone!



I purged the ssh-server, and followed Jeff's advice to remove
everything else. On rebooting now I have:



root:tyler# netstat -tap | grep LISTEN

 localhost:www           *:*                     LISTEN     4371/apache         

Call Pantek today for Open Source Technical Support at 1-877-546-8934 - 24/7/365X

 localhost:smtp          *:*                     LISTEN     3331/exim4          


I don't know what happened to famd, but it's gone now. I did have to
change my bookmarks for doc-central from blackbart.mynetwork/dc to
localhost/dc, and that's working. The actual change in the apache conf
was in the file /etc/apache/httpd.conf. Other than that there were no
surprises. 



Now that I have nothing listening to the outside world, do I still
need a firewall? I have been using firestarter, but not consistently. 



Cheers,


Do you need help?X

Tyler



Date: Sun, 29 Jul 2007 20:50:13 +0200


From: Gilles Mocellin <gilles.mocellin@free.fr>
To: debian-user@lists.debian.org


Subject: Re: bindgraph


Message-Id: <200707292050.17118.gilles.mocellin@free.fr>
Content-Type: multipart/signed;


  boundary="nextPart1209177.Hf9qvoFq9G";
  protocol="application/pgp-signature";


  micalg=pgp-sha1


Content-Transfer-Encoding: 7bit



--nextPart1209177.Hf9qvoFq9G


Content-Type: text/plain;


  charset="iso-8859-1"


Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline



Le Saturday 28 July 2007 08:49:50 koffiejunkie, vous avez =E9crit=A0:

> Gilles Mocellin wrote:
> > Strange !
> > I just installed it today, and I found what is the problem.
> > It is not compatible with rrdtool 1.2.
> > I found it trying to display directly the image (look in the HTMl
> > source). RRD says it doesn't understand the data format...
> >
> > I backported the testing/unstable version 0.2a.
> > I saw this bug in BTS which was corrected.
>
> Hi Gilles,
>
> Thanks for this.  I looked at the code for a long time, but it's greek
> to me - my perl is limited to "hello" world...
>
> I'm just on the way out for the weekend, will look into this again
> tomorrow night.  As far as I remember I don't even get the images
> generated (that is triggered by the .cgi, isn't it?).
>
> # ./bindgraph.cgi
> Use of uninitialized value in substitution (s///) at
> /usr/share/perl/5.8/File/Basename.pm line 338.
> fileparse(): need a valid pathname at ./bindgraph.cgi line 181
>
> When I strace it, I get this snipped some of the "file not found" lines:
>
> stat64("/usr/lib/perl/5.8/re.pm", {st_mode=3DS_IFREG|0644, st_size=3D1340,
> ...}) =3D 0
> open("/usr/lib/perl/5.8/re.pm", O_RDONLY|O_LARGEFILE) =3D 5
> ioctl(5, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffec48) =3D -1 ENOTTY
> (Inappropriate ioctl for device)
> _llseek(5, 0, [0], SEEK_CUR)            =3D 0
> read(5, "package re;\n\nour $VERSION =3D 0.05"..., 4096) =3D 1340
> read(5, "", 4096)                       =3D 0
> close(5)                                =3D 0
> read(4, "[:>\\]])?(.*)/s);\n    $dirpath ||"..., 4096) =3D 4096
> brk(0x8235000)                          =3D 0x8235000
> read(4, ".\'.  fileparse() would return \'f"..., 4096) =3D 3069
> read(4, "", 4096)                       =3D 0
> close(4)                                =3D 0
> read(3, "t_date {\n\tmy ($when) =3D @_;\n\n\tmy "..., 4096) =3D 2195
> read(3, "", 4096)                       =3D 0
> close(3)                                =3D 0
> uname({sys=3D"Linux", node=3D"rimwards", ...}) =3D 0
> write(2, "Use of uninitialized value in su"..., 100Use of uninitialized
> value in substitution (s///) at /usr/share/perl/5.8/File/Basename.pm
> line 338.
> ) =3D 100
> [snip]
> stat64("/usr/share/perl/5.8/Carp/Heavy.pm", {st_mode=3DS_IFREG|0644,
> st_size=3D5747, ...}) =3D 0
> open("/usr/share/perl/5.8/Carp/Heavy.pm", O_RDONLY|O_LARGEFILE) =3D 3
> ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbffff598) =3D -1 ENOTTY
> (Inappropriate ioctl for device)
> _llseek(3, 0, [0], SEEK_CUR)            =3D 0
> read(3, "# Carp::Heavy uses some variable"..., 4096) =3D 4096
> brk(0x8256000)                          =3D 0x8256000
> read(3, "s($called, $caller, $cache);\n   "..., 4096) =3D 1651
> read(3, "", 4096)                       =3D 0
> close(3)                                =3D 0
> write(2, "fileparse(): need a valid pathna"..., 63fileparse(): need a
> valid pathname at ./bindgraph.cgi line 181
> ) =3D 63
> exit_group(255)                         =3D ?
> Process 28639 detached
>
>
> Is this what you got too?

No, but I didn't try to execute the cgi on the command line.
I got RRD errors. The rrd command that generates images did not work for a=
=20


formatting reason.


The error was well known to me, since I had several time problems with=20
mailgraph / amavis-stats which are tools very similar to bindgraph.



Just try the newer version, no need to backport it since it's just a perl=20
script. You can use pinning or just downlad appart the deb file from testin=
g.



--nextPart1209177.Hf9qvoFq9G


Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.


Do you need more help?X
-----BEGIN PGP SIGNATURE-----


Version: GnuPG v1.4.6 (GNU/Linux)



iD8DBQBGrOFpDltnDmLJYdARAkgoAKC/0iyAX9i3Ld3uxr9ajau83HPxnwCfeBsE
ErbK+m3tf5YfpybfvhfU0Ek=


=gu9K

-----END PGP SIGNATURE-----


--nextPart1209177.Hf9qvoFq9G--



Date: Sun, 29 Jul 2007 14:33:02 -0400


From: Douglas Allan Tutty <dtutty@porchlight.ca>
To: debian-user@lists.debian.org


Subject: Re: essential services? ssh, nfs?

Message-ID: <20070729183302.GA10968@titan>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


On Sun, Jul 29, 2007 at 05:52:12PM +0000, Tyler Smith wrote:
 

> Now that I have nothing listening to the outside world, do I still
> need a firewall? I have been using firestarter, but not consistently. 
> 

I look at a firewall as icing on the cake.  If you reject and log local
to net, anything trying to go out that you haven't configured gives you
something to trace.  For example, I recently put etch onto my 486 and
installed ntp.  Between the time I installed it and when I configured it
to look to my main box, it came configured to try to access the debian
ntp pool.  Those packets were rejected but I go an email from my main
box warning me about it.



Doug.


Can we help you?X

Date: Sun, 29 Jul 2007 14:34:54 -0400


From: Douglas Allan Tutty <dtutty@porchlight.ca>
To: debian-user@lists.debian.org


Subject: Re: how to set network io priority for a process?

Message-ID: <20070729183454.GB10968@titan>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


On Sun, Jul 29, 2007 at 06:14:46PM -0000, Paul Johnson wrote:

> On Jul 29, 11:10 am, Douglas Allan Tutty <dtu...@porchlight.ca> wrote:
> > I'm on slow dialup.  Downloads of iso's take days. Yet, I still want to
> > be able to browse the internet.
> >
> > I would like to set up something like trickle that will run something
> > but limit its bandwidth so that it lower's its priority.
> [...]
> > What I want is something like ionice but for network bandwidth.
> 
> I'm not sure if that's workable, but if you have your own home
> network,
> you might look into setting up your own squid cache.  Squid is a web
> proxy that maintains it's own cache of items people on your network
> have already visited.  If you use offline mode, you may have to force
> a refresh on sites you know have new content (shift-refresh in most
> browsers), but items you've already downloaded for viewing before
> will load much more quickly on subsequent visits.
> 

I already have polipo cache set up and working.  



Perhaps this is something else I'll have to write from scratch.  I'll
have to see how, at any given time, one sees what is using the
bandwidth.



Thanks,



Doug.


Can't find what you're looking for?X

Date: Sun, 29 Jul 2007 20:20:59 +0200


From: Florian Kulzer <florian.kulzer+debian@icfo.es>
To: debian-user@lists.debian.org


Subject: Re: dumb question about Adobe Acrobat....

Message-ID: <20070729182059.GA5668@localhost>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


On Sat, 28 Jul 2007 23:39:18 +0100, Brad Rogers wrote:



[...]


> IIRC, Xpdf doesn't have the ability to do form filling.  With acroread,
> you can fill out forms (they have to be set up to allow it, of course),
> and then print them, already filled in.  Obviously, you can't save the
> filled out form.

pdftk can be used to fill in PDF forms. It can generate an FDF file from
the form fields of a PDF. You can edit the data in the FDF file with an
ASCII editor and then use pdftk again to produce a "filled-in" PDF from
the edited FDF and the original PDF file. You can furthermore "flatten"
this new PDF file so that other people cannot change your data anymore
if you send them this file. However, if someone wants you to submit the
form electronically then it is important to send the file non-flattened
because the other party will probably want to extract the data directly
from the file.



Unfortunately I am not sure if this works with all versions of PDF forms
or only with older ones.


-- 
Regards,            | 
http://users.icfo.es/Florian.Kulzer
          Florian   |


Date: Sun, 29 Jul 2007 19:52:15 +0100
From: Brad Rogers <brad@fineby.me.uk>
To: debian-user@lists.debian.org
Subject: Re: dumb question about Adobe Acrobat....
Message-ID: <20070729195215.1bc7c038@abydos.stargate.org.uk>
Content-Type: multipart/signed; boundary="Sig_zmDOA9CrtE5wA0LF=1Nn8Ql";
 protocol="application/pgp-signature"; micalg=PGP-SHA1

--Sig_zmDOA9CrtE5wA0LF=1Nn8Ql
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

On Sun, 29 Jul 2007 20:20:59 +0200
Florian Kulzer <florian.kulzer+debian@icfo.es> wrote:

Hello Florian,


> pdftk can be used to fill in PDF forms. It can generate an FDF file


Yet another package I've not heard of.  Hardly surprising, really,
given that there seem to be dozens of ways of achieving one's goals
with *nix OSs.  Which is a good thing, of course.


> Unfortunately I am not sure if this works with all versions of PDF
> forms or only with older ones.

=20
PDF, like many formats, is an ever moving goalpost.  Consequently,
we're playing "catch-up" all the time.

--=20
 Regards  _
         / )           "The blindingly obvious is
        / _)rad        never immediately apparent"

I must be hallucinating, watching angels celebrating
There Must Be An Angel (Playing With My Heart) - Eurythmics

--Sig_zmDOA9CrtE5wA0LF=1Nn8Ql
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGrOHiSXvR9Iq2E38RAnG5AJ0SX2AYb24XoMg1jt4qIVIpqTpcNgCgig7r
7VLSHnoS7jZvlztZxTZuKJw=
=CMOO
-----END PGP SIGNATURE-----

--Sig_zmDOA9CrtE5wA0LF=1Nn8Ql--



Date: 29 Jul 2007 18:27:43 GMT
From: Tyler Smith <tyler.smith@mail.mcgill.ca>
To: debian-user@lists.debian.org
Subject: Re: /bin/login listening?
Message-ID: <slrnfapqg7.42b.tyler.smith@blackbart.mynetwork>

On 2007-07-29, Mathias Brodala <info@noctus.net> wrote:

> This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
> --------------enig6620D8D79CB50A9B1AFF7AB2
> Content-Type: text/plain; charset=UTF-8
> Content-Transfer-Encoding: quoted-printable
>
> Hi Douglas.
>
> Douglas Allan Tutty, 29.07.2007 18:35:
>> Boot the box from something like the install CD, go to a shell, mount
>> your / partition ro, noexec.
>>=20
>> I think the install CD has md5sum installed.  Run:
>> 	#md5sum /bin/login.
>>=20
>> On my i386, I get:
>>=20
>> 2ee32ff74e474c4d9fc9df6f1460980f /bin/login
>
> You should also tell the exact version of the "login" package you are usi=
> ng.
> Otherwise this number is useless.
>
> With 1:4.0.18.1-11 on i386 I get this:
>
>> 004a41bb9196f1888bd89c2245910f46  /bin/login
>


Which is just what I got too. I found an old Mepis CD, booted into
that, mounted my / partition, ran md5sum on /bin/login, and out came
the same answer, for the same version of /bin/login.

So I'm going to proceed as if I've been lucky, have not been
rootkit-ed, and will continue on with hardening my laptop without
reinstalling.

Thanks for your help!

Tyler


Don't know where to look next?X

Date: Sun, 29 Jul 2007 15:22:27 -0300
From: =?ISO-8859-1?Q?M=E1rcio_Luciano_Donada?= <mdonada@auroraalimentos.com.br>
To: debian-user@lists.debian.org
Subject: Adpater network quad-port
Message-ID: <46ACDAE3.8010601@auroraalimentos.com.br>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Hi,
We buy a net plate quadr-port, I am using debian etch in our server of
firewall, but I am seeing that the plate did not show pra me the net
interfaces, in any ones of the doors that I connect the server it I
answer ping, what I he must make still to have the four interfaces of
net functioning in difentes nets? I am using kernel 2.6.19-7.

Thnx!!!


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
 
iD8DBQFGrNribjyCr4Ixg0wRAoUMAKCUSHhmkykxnAyJ3+vqJHxxMs6rYQCfV4gt
laAHCOYMLOJy0T/SCgXw7FQ=
=sG7y
-----END PGP SIGNATURE-----



Date: Sun, 29 Jul 2007 12:20:55 -0700
From: "Kelly Clowers" <kelly.clowers@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: dumb question about Adobe Acrobat....
Message-ID: <1840f6970707291220g3bb35bf2p9bd05a67abfca1b6@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 7/29/07, Brad Rogers <brad@fineby.me.uk> wrote:

> On Sun, 29 Jul 2007 20:20:59 +0200
> Florian Kulzer <florian.kulzer+debian@icfo.es> wrote:
>
> Hello Florian,
>
> > pdftk can be used to fill in PDF forms. It can generate an FDF file
>
> Yet another package I've not heard of.  Hardly surprising, really,
> given that there seem to be dozens of ways of achieving one's goals
> with *nix OSs.  Which is a good thing, of course.
>
> > Unfortunately I am not sure if this works with all versions of PDF
> > forms or only with older ones.
>
> PDF, like many formats, is an ever moving goalpost.  Consequently,
> we're playing "catch-up" all the time.


The next version of Evince, due this fall, will also support form filling.


Cheers,
Kelly



Date: Sun, 29 Jul 2007 15:28:17 -0400
From: "Andrew J. Barr" <andrew.james.barr@gmail.com>
To: debian-user@lists.debian.org
Subject: Re: how to set network io priority for a process?
Message-ID: <903e17bb0707291228q6f6d6a07sbf6931d26f6c211d@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 7/29/07, Douglas Allan Tutty <dtutty@porchlight.ca> wrote:

> I'm on slow dialup.  Downloads of iso's take days. Yet, I still want to
> be able to browse the internet.
>
> I would like to set up something like trickle that will run something
> but limit its bandwidth so that it lower's its priority.


I think the QoS or traffic shaping features of the kernel may be able
to do what you want.

-- 
Andrew Barr

We matter more than pounds and pence,
your economic theory makes no sense...



Date: Sun, 29 Jul 2007 12:32:18 -0700
From: Alan Ianson <agianson@shaw.ca>
To: debian-user@lists.debian.org
Subject: Re: dumb question about Adobe Acrobat....
Message-id: <1185737538.3167.2.camel@laptop.ok.shawcable.net>
Content-type: text/plain
Content-transfer-encoding: 7bit

On Sun, 2007-29-07 at 12:20 -0700, Kelly Clowers wrote:

> On 7/29/07, Brad Rogers <brad@fineby.me.uk> wrote:
> > On Sun, 29 Jul 2007 20:20:59 +0200
> > Florian Kulzer <florian.kulzer+debian@icfo.es> wrote:
> >
> > Hello Florian,
> >
> > > pdftk can be used to fill in PDF forms. It can generate an FDF file
> >
> > Yet another package I've not heard of.  Hardly surprising, really,
> > given that there seem to be dozens of ways of achieving one's goals
> > with *nix OSs.  Which is a good thing, of course.
> >
> > > Unfortunately I am not sure if this works with all versions of PDF
> > > forms or only with older ones.
> >
> > PDF, like many formats, is an ever moving goalpost.  Consequently,
> > we're playing "catch-up" all the time.
> 
> The next version of Evince, due this fall, will also support form filling.


That is such good news.. exactly what I have been hoping to read.. I've
been looking for a way to fill in pdf forms for an amd64 box I have
here.

You made my day.. :)

End of debian-user-digest Digest V2007 Issue #2058
**************************************************

Received on Sun Jul 29 15:52:54 2007

This archive was generated by hypermail 2.1.8 : Thu Aug 09 2007 - 19:05:34 EDT

Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library