Skip to search.

Breaking News Visit Yahoo! News for the latest.

×Close this window

lalugs · Mailing list for coordinating between the

The Yahoo! Groups Product Blog

Check it out!

Group Information

  • Members: 131
  • Category: Linux
  • Founded: Aug 23, 1999
  • Language: English
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Real people. Real stories. See how Yahoo! Groups impacts members worldwide.

Messages

Advanced
Messages Help
Messages 304 - 333 of 558   Oldest  |  < Older  |  Newer >  |  Newest
Messages: Show Message Summaries Sort by Date ^  
#304 From: "Gareth J. Greenaway" <gareth@...>
Date: Thu Dec 21, 2000 3:02 am
Subject: [SCLUG Chat Reminder
gareth@...
Send Email Send Email
 
***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.



--
Gareth J. Greenaway
gareth@...

#305 From: "Gareth J. Greenaway" <gareth@...>
Date: Thu Jan 18, 2001 12:25 am
Subject: SCLUG Chat Reminder
gareth@...
Send Email Send Email
 
***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.

#306 From: "Gareth J. Greenaway" <gareth@...>
Date: Thu Jan 25, 2001 1:15 am
Subject: SCLUG Chat Reminder
gareth@...
Send Email Send Email
 
***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.


--
Gareth J. Greenaway
gareth@...

#307 From: "Gareth J. Greenaway" <gareth@...>
Date: Tue Feb 6, 2001 8:04 am
Subject: LUG Fest IV
gareth@...
Send Email Send Email
 
The Simi-Conejo Linux Users Group will be holding LUGFest IV on April 21st and
22nd, 2001, in Simi Valley, California.

A LUGFest is an opportunity for Linux users to demo Linux (or other Open
Source operating systems), Linux applications, attend seminars, and BOF (Birds
Of a Feather) sessions.  Additionally, Linux vendors may participate and
show off their wares.

LUGFest III was held on October 28, 2000, and was a great success.
(See http://www.sclug.org/members/notes.cgi?date=10-28-2000-LUGFest3).
Approximately 350 Linux enthusiasts and a number of vendors attended over the
course of the afternoon.

We had people come from Orange County, Santa Barbara, Santa Clarita, the
South Bay area, all points in between, and also from out-of-state.  Many Linux
vendors donated stuff for giveways and raffles.  Vendors who came with their
wares were  VA Linux, SGI, LinuxCare, LinuxBoxen, Mandrake, Parasoft, VMware,
Cobolt, LinuxSolve, Corel, Loki Games, Cosmo Engineering and Andern.org

If you have a special skill with Linux or a Linux application, or if you're
a Linux vendor who would like to show off his products, SCLUG would love
to have you participate in LUGFest IV!  SCLUG is also looking for speakers on
Linux, Open Source, or other related subjects.

Due to the continually growing attendance from LUGFest to LUGFest, we've
changed the LUGFest to a two-afternoon event so more people can attend.

For more info, to register for LFIV, or to volunteer to do a demo, contact
gareth@..., or visit http://www.lugfest.org

#308 From: "Gareth J. Greenaway" <gareth@...>
Date: Thu Feb 8, 2001 4:10 am
Subject: [root@...: SCLUG Chat Reminder]
gareth@...
Send Email Send Email
 
----- Forwarded message from root <root@...> -----

Date: Wed, 7 Feb 2001 17:30:01 -0800
From: root <root@...>
To: sclug@...
Subject: SCLUG Chat Reminder

Precedence: bulk
Reply-To: sclug@...


   ***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.


----- End forwarded message -----

--
Gareth J. Greenaway
gareth@...

#309 From: Dan Kegel <dank@...>
Date: Tue Feb 13, 2001 9:41 pm
Subject: gcc on red hat 7.0 is better for programmers
dank@...
Send Email Send Email
 
OK, so the gcc on Red Hat 7.0 can't be used to compile the kernel
( you have to use what they call kgcc ).  A lot of people have
given Red Hat flak for this and the C++ dynamic linking portability issue.

But I just noticed a real nice thing about the gcc on red hat 7.0:
it does better at stack tracebacks when a signal is received.

I often use the code fragments listed at the bottom of this email to force
a stack dump after a crash (not that I have many of them :-).  Under older
gcc's,
it worked, but the stack was slightly screwed up, and it didn't
show the crash point reliably.  For instance, here's a stack dump
from a program that calls crash_me() from main (where crash_me has
a null pointer reference) under Red Hat 6.2:

#0  0x402488c9 in __wait4 () from /lib/libc.so.6
#1  0x402a71cc in ?? () from /lib/libc.so.6
#2  0x401f7ccc in __libc_system (line=0xbfffee8c "gdb -batch -x gdbcmd ./mtserv
28026") at ../sysdeps/posix/system.c:136
#3  0x400578ac in system (line=0xbfffee8c "gdb -batch -x gdbcmd ./mtserv 28026")
at wrapsyscall.c:120
#4  0x804f87d in dump_stack (signum=11) at mtserv.cc:54
#5  0x401d5c48 in __restore () at
../sysdeps/unix/sysv/linux/i386/sigaction.c:127
#6  0x805043b in main (argc=3, argv=0xbffff8d4) at mtserv.cc:291

And here's the output under Red Hat 7.0:

#0  0x40260e69 in __wait4 () from /lib/libc.so.6
#1  0x402cce4c in __DTOR_END__ () from /lib/libc.so.6
#2  0x401f69d2 in __libc_system (line=0xbfffe95c "gdb -batch -x gdbcmd ./mtserv
16394") at ../sysdeps/posix/system.c:136
#3  0x4005b229 in system (line=0xbfffe95c "gdb -batch -x gdbcmd ./mtserv 16394")
at wrapsyscall.c:159
#4  0x804f0e6 in dump_stack (signum=11) at mtserv.cc:54
#5  0x4005907e in pthread_sighandler (signo=11, ctx={gs = 0, __gsh = 0, ...
oldmask = 2147483648, cr2 = 0}) at signals.c:97
#6  <signal handler called>
#7  0x804f104 in crash_me () at mtserv.cc:63
#8  0x804fc4e in main (argc=3, argv=0xbffff464) at mtserv.cc:291
#9  0x401c4f31 in __libc_start_main (main=0x804f954 <main>, argc=3,
ubp_av=0xbffff464, init=0x804c588 <_init>, fini=0x809f9d8 <_fini>,
rtld_fini=0x4000e274
<_dl_fini>, stack_end=0xbffff45c) at ../sysdeps/generic/libc-start.c:129

The output under Red Hat 7.0 with the new gcc is far more informative;
it correctly identifies the exact line of the crash.

- Dan

static const char *argv0 = NULL;

main(int argc, char **argv)
{
...
             argv0 = argv[0];
             signal(SIGSEGV, dump_stack);
             signal(SIGBUS, dump_stack);
...
}

void dump_stack(int signum)
{
     (void) signum;
     char s[160];
     // Guess that there are three threads active... should probably dump more.
     system("echo 'info threads\nbt\nthread 3\nbt\nthread 4\nbt\nthread 5\nbt\n'
> gdbcmd");

     sprintf(s, "gdb -batch -x gdbcmd %s %d", argv0, getpid());
     printf("Crashed!  Starting debugger to get stack dump.  You may need to kill
-9 this process afterwards.\n");
     system(s);
     exit(1);
}

#310 From: gareth@...
Date: Thu Feb 15, 2001 2:32 am
Subject: SCLUG Chat Reminder
gareth@...
Send Email Send Email
 
***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.


--
Gareth J. Greenaway
gareth@...

#311 From: gareth@...
Date: Sat Feb 24, 2001 7:42 pm
Subject: Re: SCLUG Saturday's meeting
gareth@...
Send Email Send Email
 
----- Forwarded message from "Gareth J. Greenaway" <gareth@...> -----

Date: Fri, 23 Feb 2001 16:25:42 -0800
To: Simi Conejo Linux Users Group <sclug@...>
Subject: Re: SCLUG Saturday's meeting
From: gareth@... (Gareth J. Greenaway)

Precedence: bulk
Reply-To: sclug@...

Slight change of plans, since the PIM demo wont take more than 15-20
minutes.  Chris Little is gonna talk about gbuild for a while.  Gbuild
is a nifty tool that takes the current CVS source for applications and
builds rpms.  Should be interesting.  Hope to see everyone there.



						 Gareth

On Thu, Feb 22, 2001 at 01:48:24PM -0800, Orv Beach wrote:
> Precedence: bulk
> Reply-To: sclug@...
>
> This Saturday at the SCLUG meeting, Alex and Gareth will demo the
> contact manager program they're writing.
>
> At this point's it's not very useable, but you will get a sense of where
> they're going with it.  This might also be your opportunity to provide
> them some feedback as far as features that might cool to have.
>
> Since that will only take an hour or so, we'll have one of our usual Q&A
> sessions (AKA "We don't have anything else planned").
>
> See you there.
>
> Orv

--
Gareth J. Greenaway
gareth@...

----- End forwarded message -----

--
Gareth J. Greenaway
gareth@...

#312 From: Ismet Kursunoglu <ibk@...>
Date: Tue Feb 27, 2001 12:45 am
Subject: 24 hour irc Linuxatlax
ibk@...
Send Email Send Email
 
If Home Depot can do so can we-

Lilax chat is now open 24 hours a day - point your IRC client to
linuxatlax.org or 209.151.230.139 and join the #lilax channel.
For example, in ircII, x-chat, or tkirc:

/server 209.151.230.139
/join #lilax

If you have questions about IRC please see

http://www.irchelp.org/

If you have X running,  X-Chat is good client to use
(http://xchat.org)

If you have some time please join in when you can to help others with
questions etc... we'll make sure to log the sessions and hopefully create
some method to search them as an additional information resource.

If a few of the experts in the group can intermittently populate the
server we can provide a real-time help service for the groups here
in LA- and now we can have folks on the East coast join in given the new
and improved hours of operation.

Just connect then you can accomplish all sorts of things including
executing scripts, sharing files and much more, in addition to plain old
chat.

If you have any questions or thoughts about this please let me know.

Thanks.

Ismet

Ismet Kursunoglu
ibk@...

#313 From: Ismet Kursunoglu <ibk@...>
Date: Sun Mar 4, 2001 8:20 am
Subject: Web related seminar
ibk@...
Send Email Send Email
 
Dear Kind People,

We have a very compelling presentation/seminar next Sat, March 10th.
I very much appreciate you including this in your calendar if possible.


                           DATE: March 10, 2001

                           ORGANIZATION: Linuxatlax.org - Linux user group

                           EVENT:"Powerful Web tools"-An Overview of
                                  Zope/Python and Roxen. Used in web
                                  application development and large scale
                                  distributed web content management

                           SPEAKERS:Paul Everitt, co-founder of Digital
                                    Creations, Inc., is scheduled to speak
                                    about Zope/Python.
                                    Martin Bäehr will talk about the
                                    Roxen web server/platform

                           TIME:10am to 4pm

                           LOCATION:2555 West 190th Street, Torrance, CA
                                    90504-6002

                           DETAILS: http://www.linuxatlax.org
                                    ibk@..., 310 354 5609

                           COST: Free, as are all of our seminars


The two speakers are very accomplished in their fields and I expect the
session will be very well attended. It of course is going to be mostly
technical, however I imagine that anyone involved in web development from
any angle would benefit.

We are lucky to have both of these presentations on the same day as they
will be given in a complementary fashion. You can expect that there will
be demonstrations and many other hands-on opportunities in the lab
after sessions. Bring along a laptop or PC as you like and plug into  the
T3 line. We have two switches but I would suggest bringing a long patch
cord.

Thanks very much for your kind consideration in sharing this with your
students, colleagues and others.

BTW you can see the announcement over at
http://209.85.55.10/Calendar2/Calendar.asp#Event43

Hopefully this will be announced in the Los Angeles Times, Monday, in the
"Cutting Edge" business section. Please let me know if you see it there.
Thanks.


Ismet

#314 From: Ismet Kursunoglu <ibk@...>
Date: Mon Mar 5, 2001 3:21 am
Subject: Further info on Zope portion of Mar 10th Web seminar
ibk@...
Send Email Send Email
 
I just wanted to elaborate some more on what Paul Everitt will be
presenting this coming Saturday.

Zope is an Open Source application server, specializing in content
management, portals, and custom solutions. Zope is focused on rapid
delivery of rich solutions to wide audiences.

Paul will be reviewing it's architecture, implementation and follow with a
series of demonstrations.

This will including building a clustered application server in "ten
minutes", where all three tiers (presentation, logic, and content) are
transactionally distributed.

Zope has a cluster mode called ZEO (Zope Enterprise Objects) that allows
one to add machines and distribute transactions. This will be included as
part of the hands on demonstration.

Please pass the information on to others. They can check
http://www.linuxatlax.org for additional updates concerning this
seminar.

Thanks.

--Ismet

#315 From: Dan Kegel <dank@...>
Date: Thu Mar 8, 2001 4:41 pm
Subject: Installfest organization
dank@...
Send Email Send Email
 
Up in Northern California, LUGOD appears to be doing
a good job of organizing Installfests.   Check out their page
   http://www.lugod.org/projects/installfest/

It has
a checklist of what to bring
a release form
a map
a form for reserving a spot
a flyer for those who want to help advertise
a contact address if you want to volunteer to help

Our local Installfests would do well to emulate the LUGOD example.

Now, there's not a whole lot that's LUG-specific about this stuff;
mostly the map and the flyer, plus the time slots.   I wonder
if lalugs.org could host a generic Installfest page service
for use by the individual LUGs; they would provide the map and flyer
and time slot choices, and lalugs.org would provide the rest.
That would make it easier for the individual LUGs to get this
stuff right, since they wouldn't have to reinvent it all.

Comments?

- Dan

#316 From: John Wenger <JohnWenger@...>
Date: Thu Mar 8, 2001 6:58 pm
Subject: Re: Installfest organization
JohnWenger@...
Send Email Send Email
 
Dan Kegel wrote:
>
> Up in Northern California, LUGOD appears to be doing
> a good job of organizing Installfests.   Check out their page
>   http://www.lugod.org/projects/installfest/
>
> It has
> a checklist of what to bring
> a release form
> a map
> a form for reserving a spot
> a flyer for those who want to help advertise
> a contact address if you want to volunteer to help
>
> Our local Installfests would do well to emulate the LUGOD example.
>
> Now, there's not a whole lot that's LUG-specific about this stuff;
> mostly the map and the flyer, plus the time slots.   I wonder
> if lalugs.org could host a generic Installfest page service
> for use by the individual LUGs; they would provide the map and flyer
> and time slot choices, and lalugs.org would provide the rest.
> That would make it easier for the individual LUGs to get this
> stuff right, since they wouldn't have to reinvent it all.
>
> Comments?
>
> - Dan

I think it is a good idea.  Build it and see if they come.

John

#317 From: Erik Hovland <ehovland@...>
Date: Thu Mar 8, 2001 10:58 pm
Subject: Revolution OS, the film
ehovland@...
Send Email Send Email
 
Possible free screening at JPL, Let Ed Wright know if you are interested (hint:
don't email me or Don).

E

----- Forwarded message from Don Gibbs <donald.e.gibbs@...> -----

Ed Wright, ex-physicist and current Perl hacker, has polled the JPL
community in order to determine if there is sufficient interest to organize
the screening of a special interest film.  I belive Ed will try to schedule
it in the near future at the Von Karman auditorium here at JPL, Pasadena.

Von Karman is readily accessible to the public and I've gotten Ed's consent
to post this to local linux/unix mail lists.  The more the merrier!

If you are interested, you may reply directly to Ed.

Ed Wright <ewright@...>

   --Don

From: Ed Wright

I recently made the aquaintence of a filmmaker who created a documentary on
the Linx/GNU/Open Source movement titled "Revolution O.S."

The film currently is on the fim festival circuit. A 90 seconds trailer is
available at:

http://films.sxsw.com/2001/DATABASE/index.php?dvsearch=show&dvserialnum=420

The filmmaker offered a screen for the high ubergeeks of JPL (he lives in
LA).  Do a reasonable number of JPLers have an interest in a Linux
documentary  to make a screening worth the effort?

As always,
Ed Wright

"All your base are belong to us."

========================================================================
Don Gibbs                | "Somehow it seems to fill my head with ideas
don.gibbs@...   | -- only I don't know exactly what they are!"
818 354-2990             |
Pager: 1-800-759-8888    |       Alice, after reading JABBERWOCKY
   pin: 1617934          |
------------------------------------------------------------------------
----- End forwarded message -----

--
Erik Hovland
USC Linux User Group Member
http://linux.usc.edu/~ehovland/
GnuPG public key: http://linux.usc.edu/~ehovland/ehovland.gpg

#318 From: Ron Golan <rgolan@...>
Date: Fri Mar 9, 2001 5:59 am
Subject: Re: Installfest organization
rgolan@...
Send Email Send Email
 
On Thu, Mar 08, 2001 at 08:41:37AM -0800, Dan Kegel wrote:
> Up in Northern California, LUGOD appears to be doing
> a good job of organizing Installfests.   Check out their page
>   http://www.lugod.org/projects/installfest/
>
> It has
> a checklist of what to bring
> a release form
> a map
> a form for reserving a spot
> a flyer for those who want to help advertise
> a contact address if you want to volunteer to help
>
> Our local Installfests would do well to emulate the LUGOD example.
>
> Now, there's not a whole lot that's LUG-specific about this stuff;
> mostly the map and the flyer, plus the time slots.   I wonder
> if lalugs.org could host a generic Installfest page service
> for use by the individual LUGs; they would provide the map and flyer
> and time slot choices, and lalugs.org would provide the rest.
> That would make it easier for the individual LUGs to get this
> stuff right, since they wouldn't have to reinvent it all.
>
> Comments?
>
> - Dan

This example is a great model for LULA to work from. I'll help to
adapt it to our needs.


--
Ron Golan
rgolan@...

#319 From: gareth@...
Date: Wed Mar 14, 2001 7:47 pm
Subject: LUG Fest IV Call for Demos!
gareth@...
Send Email Send Email
 
LUGFest IV, the fourth Linux festival held by SCLUG, is looking for YOU!

SCLUG needs persons willing to demo their favorite app, and vendors
willing to show off their latest & greatest Linux wares.  If you're
skilled at GIMP, or Samba, or any other Linux application, we'd love to
have you volunteer for a seminar.  If you're a vendor with a cool Linux
product, the LUGFest is an ideal place for a table.

LUGFest IV will be held at Nortel Networks in Simi Valley, California,
on October 28th, 2000.  For additional info, or to sign up for a demo,
see www.lugfest.org.

LUGFest II & III were huge succeses, and we need YOUR
help to make number IV even better!

We'll see you there!
Gareth, gareth@...
Simi-Conejo Linux Users Group President

Orv, w6bi@...
Simi-Conejo Linux Users Group member-at-large
--
Gareth J. Greenaway
gareth@...

#320 From: gareth@...
Date: Wed Mar 14, 2001 11:29 pm
Subject: LUG Fest Update aka Gareth is stupid
gareth@...
Send Email Send Email
 
Okay folks, little update.  LUG Fest IV will be happening on April 21st
and 22nd *NOT* October 28th, 2000 as I had in the previous email.
Thanks Art from Lilax for pointing that out.


--
Gareth J. Greenaway
gareth@...

#321 From: Michael Elkins <me@...>
Date: Thu Mar 22, 2001 12:07 am
Subject: IRC chat
me@...
Send Email Send Email
 
FYI, some of LA Linux users will be hanging out on IRC to chat in real time.
Try server irc.openprojects.net on channel #lalugs.  It'd be nice to get all
of the area's Linux users together, so we hope to see you there!

If you need help with IRC, www.irchelp.org is a good resource.

me

#322 From: Martin Baehr <mbaehr@...>
Date: Fri Mar 23, 2001 1:21 am
Subject: Re: IRC chat
mbaehr@...
Send Email Send Email
 
On Wed, Mar 21, 2001 at 04:07:19PM -0800, Michael Elkins wrote:
> FYI, some of LA Linux users will be hanging out on IRC to chat in real time.
> Try server irc.openprojects.net on channel #lalugs.  It'd be nice to get all
> of the area's Linux users together, so we hope to see you there!

excellent idea.
there is really no reason why we can't all share one channel,
as there is not much activity in the current channels anyways...

this invitation should be forwarded to all the lists out there...

greetings, martin.
--
starting summer 2001 i am looking for a new job doing pike development
and/or training and/or unix and roxen system administration.
--
pike programmer            On The Verge          |    www.hb2.tuwien.ac.at
                            Los Angeles           |     db.hb2.tuwien.ac.at
unix systemadministrator   iaeste.or.at                iaeste.tuwien.ac.at
                            www.archlab.tuwien.ac.at   black.linux-m68k.org
Martin B"ahr               stuts.org    bahai.at    mud.at    is.schon.org
http://www.iaeste.or.at/~mbaehr/

#323 From: John Wenger <JohnWenger@...>
Date: Fri Mar 23, 2001 6:22 pm
Subject: [Fwd: ALERT - A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET]
JohnWenger@...
Send Email Send Email
 
This worm called "Lion" attacks DNS that is not up to date.


-------- Original Message --------
Subject: ALERT -  A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET
Date: Fri, 23 Mar 2001  7:57:29 -0700 (MST)
From: The SANS Institute <securityalert@...>
To: John Wenger (SD439051) <JohnWenger@...>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ALERT!  A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET

March 23, 2001 7:00 AM

Late last night, the SANS Institute (through its Global Incident
Analysis Center) uncovered a dangerous new worm that appears to be
spreading rapidly across the Internet.  It scans the Internet looking
for Linux computers with a known vulnerability. It infects the
vulnerable machines, steals the password file  (sending it to a
China.com site), installs other hacking tools, and forces the newly
infected machine to begin scanning the Internet looking for other
victims.

Several experts from the security community worked through the night
to
decompose the worm's code and engineer a utility to help you discover
if the Lion worm has affected your organization.

Updates to this announcement will be posted at the SANS web site,
http://www.sans.org


DESCRIPTION

The Lion worm is similar to the Ramen worm. However, this worm is
significantly more dangerous and should be taken very seriously.  It
infects Linux machines running the BIND DNS server.  It is known to
infect bind version(s) 8.2, 8.2-P1, 8.2.1, 8.2.2-Px, and all
8.2.3-betas. The specific vulnerability used by the worm to exploit
machines is the TSIG vulnerability that was reported on January 29,
2001.

The Lion worm spreads via an application called "randb".  Randb scans
random class B networks probing TCP port 53. Once it hits a system, it
checks to see if it is vulnerable. If so, Lion exploits the system
using
an exploit called "name".  It then installs the t0rn rootkit.

Once Lion has compromised a system, it:

- - Sends the contents of /etc/passwd, /etc/shadow, as well as some
network settings to an address in the china.com domain.
- - Deletes /etc/hosts.deny, eliminating the host-based perimeter
protection afforded by tcp wrappers.
- - Installs backdoor root shells on ports 60008/tcp and 33567/tcp
(via
inetd, see /etc/inetd.conf)
- - Installs a trojaned version of ssh that listens on 33568/tcp
- - Kills Syslogd , so the logging on the system can't be trusted
- - Installs a trojaned version of login
- - Looks for a hashed password in /etc/ttyhash
- - /usr/sbin/nscd (the optional Name Service Caching daemon) is
overwritten with a trojaned version of ssh.

The t0rn rootkit replaces several binaries on the system in order to
stealth itself. Here are the binaries that it replaces:

du, find, ifconfig, in.telnetd, in.fingerd, login, ls, mjy, netstat,
ps, pstree, top

- - "Mjy" is a utility for cleaning out log entries, and is placed in
/bin
and /usr/man/man1/man1/lib/.lib/.
- - in.telnetd is also placed in these directories; its use is not
known
at this time.
- - A setuid shell is placed in /usr/man/man1/man1/lib/.lib/.x

DETECTION AND REMOVAL

We have developed a utility called Lionfind that will detect the Lion
files on an infected system.  Simply download it, uncompress it, and
run lionfind.  This utility will list which of the suspect files is on
the system.

At this time, Lionfind is not able to remove the virus from the
system.
If and when an updated version becomes available (and we expect to
provide one), an announcement will be made at this site.

Download Lionfind at http://www.sans.org/y2k/lionfind-0.1.tar.gz


REFERENCES

Further information can be found at:

http://www.sans.org/current.htm
http://www.cert.org/advisories/CA-2001-02.html, CERT Advisory
CA-2001-02,
Multiple Vulnerabilities in BIND
http://www.kb.cert.org/vuls/id/196945 ISC BIND 8 contains buffer
overflow
in transaction signature (TSIG) handling code
http://www.sans.org/y2k/t0rn.htm Information about the t0rn rootkit.
The following vendor update pages may help you in fixing the original
BIND
vulnerability:

Redhat Linux RHSA-2001:007-03 - Bind remote exploit
http://www.redhat.com/support/errata/RHSA-2001-007.html
Debian GNU/Linux DSA-026-1 BIND
http://www.debian.org/security/2001/dsa-026
SuSE Linux SuSE-SA:2001:03 - Bind 8 remote root compromise.
http://www.suse.com/de/support/security/2001_003_bind8_ txt.txt
Caldera Linux CSSA-2001-008.0 Bind buffer overflow
http://www.caldera.com/support/security/advisories/CSSA-2001-008.0.txt
http://www.caldera.com/support/security/advisories/CSSA-2001-008.1.txt

This security advisory was prepared by Matt Fearnow of the SANS
Institute and William Stearns of the Dartmouth Institute for Security
Technology Studies.

The Lionfind utility was written by William Stearns. William is an
Open-Source developer, enthusiast, and advocate from Vermont, USA. His
day job at the Institute for Security Technology Studies at Dartmouth
College pays him to work on network security and Linux projects.

Also contributing efforts go to Dave Dittrich from the University of
Washington, and Greg Shipley of Neohapsis

Matt Fearnow
SANS GIAC Incident Handler

If you have additional data on this worm or a critical quetsion
please
email lionworm@...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (BSD/OS)
Comment: For info see http://www.gnupg.org

iD8DBQE6u17n+LUG5KFpTkYRAgn9AJ0ffubakBA47teAe9lF92lrS2H+TwCgh3T/
ek+YCliAS832nnMIzP28ezM=
=E1SG
-----END PGP SIGNATURE-----

#324 From: John Wenger <JohnWenger@...>
Date: Fri Mar 23, 2001 6:54 pm
Subject: Re: [Fwd: ALERT - A DANGEROUS NEW WORM IS SPREADING ON THE INTERNET]
JohnWenger@...
Send Email Send Email
 
Typo (mento?).  I meant to write BIND that is not up to date.

John

John Wenger wrote:
>
> This worm called "Lion" attacks DNS that is not up to date.

#325 From: gareth@...
Date: Sat Mar 24, 2001 7:46 pm
Subject: Topic for today
gareth@...
Send Email Send Email
 
okay folks, it seems we'll have a formal topic today.  Charlie
Blanchard is going to talk about Zope, the open source web server.
Should be pretty interesting.  Hope to see everyone there.


					 Gareth

--
Gareth J. Greenaway
gareth@...

#326 From: Martin Baehr <mbaehr@...>
Date: Sat Mar 24, 2001 11:47 pm
Subject: Re: Topic for today
mbaehr@...
Send Email Send Email
 
On Sat, Mar 24, 2001 at 11:46:31AM -0800, gareth@... wrote:
> okay folks, it seems we'll have a formal topic today.  Charlie
> Blanchard is going to talk about Zope, the open source web server.
> Should be pretty interesting.  Hope to see everyone there.

gee, could you guys announce these things a bit earlier?

greetings, martin.
--
starting summer 2001 i am looking for a new job doing pike development
and/or training and/or unix and roxen system administration.
--
pike programmer            On The Verge          |    www.hb2.tuwien.ac.at
                            Los Angeles           |     db.hb2.tuwien.ac.at
unix systemadministrator   iaeste.or.at                iaeste.tuwien.ac.at
                            www.archlab.tuwien.ac.at   black.linux-m68k.org
Martin B"ahr               stuts.org    bahai.at    mud.at    is.schon.org
http://www.iaeste.or.at/~mbaehr/

#327 From: gareth@...
Date: Sun Mar 25, 2001 1:52 am
Subject: Re: Topic for today
gareth@...
Send Email Send Email
 
Apologies, I only heard from Charlie this morning about this.


On Sun, Mar 25, 2001 at 12:47:21AM +0100, Martin Baehr wrote:
> On Sat, Mar 24, 2001 at 11:46:31AM -0800, gareth@... wrote:
> > okay folks, it seems we'll have a formal topic today.  Charlie
> > Blanchard is going to talk about Zope, the open source web server.
> > Should be pretty interesting.  Hope to see everyone there.
>
> gee, could you guys announce these things a bit earlier?
>
> greetings, martin.
> --
> starting summer 2001 i am looking for a new job doing pike development
> and/or training and/or unix and roxen system administration.
> --
> pike programmer            On The Verge          |    www.hb2.tuwien.ac.at
>                            Los Angeles           |     db.hb2.tuwien.ac.at
> unix systemadministrator   iaeste.or.at                iaeste.tuwien.ac.at
>                            www.archlab.tuwien.ac.at   black.linux-m68k.org
> Martin B"ahr               stuts.org    bahai.at    mud.at    is.schon.org
> http://www.iaeste.or.at/~mbaehr/
>
>
> Los Angeles Linux User Groups
> http://www.lalugs.org
>
> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/
>

--
Gareth J. Greenaway
gareth@...

#328 From: gareth@...
Date: Thu Mar 29, 2001 12:03 am
Subject: SCLUG Chat Reminder
gareth@...
Send Email Send Email
 
***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.


Tonight we will be discussing the up and coming LUG Fest.  Hope to see
everyone there.


--
Gareth J. Greenaway
gareth@...

#329 From: Ismet Kursunoglu <ibk@...>
Date: Fri Mar 30, 2001 2:50 am
Subject: Lilax April 14th meeting?
ibk@...
Send Email Send Email
 
I am trying to get some idea of the interest level for an April 14
meeting.

There are some possible topics; however given that it is tax time I don't
know what your time constraints will be.

It might be best to put off until May 12th- sort of a spring break.  (that
is my vote)

Please let me know so I can adjust the schedule as needed.

Your suggestions on future topics would be very welcome!

Thanks for your help.

Ismet


Ismet Kursunoglu
ibk@...

#330 From: John Wenger <JohnWenger@...>
Date: Sat Mar 31, 2001 10:01 am
Subject: Re: [Lilax] Lilax April 14th meeting?
JohnWenger@...
Send Email Send Email
 
I suggest delaying the meeting by one week in order to move it past
the Income Tax Rush, and thereby escape the time constraints of that
period.  Delaying the meeting a full month is too long.  We need to
maintain our momentum.  The Simi-Conejo group meets every two weeks.
Two months between meetings for LILAX is too long.

John

Ismet Kursunoglu wrote:
>
> I am trying to get some idea of the interest level for an April 14
> meeting.
>
> There are some possible topics; however given that it is tax time I don't
> know what your time constraints will be.
>
> It might be best to put off until May 12th- sort of a spring break.  (that
> is my vote)
>
> Please let me know so I can adjust the schedule as needed.
>
> Ismet

#331 From: Ismet Kursunoglu <ibk@...>
Date: Tue Apr 3, 2001 1:03 am
Subject: Wireless LAN's;Processes, threads, tasks-April 14th
ibk@...
Send Email Send Email
 
Hot off the press- the abstracts for our next session of Linuxatlax.org
Christopher Smith, (Linux and overall technical Guru, member of lula.org)
will be addressing us on two compelling subjects.

You don't want to miss this one. Please
check http://www.linuxatlax.org/meetings.html for any updates and other
information regarding our meetings.

Thank you.

Ismet

Ismet Kursunoglu
ibk@...


---------- Forwarded message ----------
Date: 02 Apr 2001 15:15:16 -0700
To: Ismet Kursunoglu <ibk@...>
Subject: Topic Description.

We'll be talking about two completely unrelated topics, one hardware and
one software.

1) Wireless LAN's

This presentation will talk about the various Wireless networking
solutions in the market, but specifically focus on 802.11b wireless
networking, or Wi-Fi, which provides an 11mbps wireless LAN in a fairly
cost-effective manner. The presentation will include a demonstration of
the technology, and details on how to get your Linux box onto a Wi-Fi
network.

2) Processes, threads & tasks: working on the C10K problem

This presentation will talk about how Linux's multi-tasking works.
Multi-tasking is something we all take for granted, but most of us don't
know how Linux actually gets the job done. The presentation will start
out slow, defining terms like "process", "threads", "tasks" and
"signals" in the context of the Linux world. Depending on time and how
well the crowd is grasping the concepts, we'll move on to talking about
the good and the bad of the Linux approach to these concepts, and
strategies for programmers using these concepts in the real world to get
the best performance out of the available hardware.

--Chris

#332 From: gareth@...
Date: Wed Apr 4, 2001 11:37 pm
Subject: SCLUG Chat Reminder
gareth@...
Send Email Send Email
 
***** REMINDER *****

   There's an SCLUG Chat session tonight starting at 8:00pm.
Check <http://www.sclug.org/irc.cgi> for details. C'ya there.


--
Gareth J. Greenaway
gareth@...

#333 From: Dan Kegel <dank@...>
Date: Thu Apr 5, 2001 6:02 pm
Subject: 'Digital Domicile', May 21-23, Santa Monica
dank@...
Send Email Send Email
 
Chaz Austin wrote:
> >Chaz Austin wrote:
> >>
> >>  A client of mine, the Digital Domicile Conference, wants to email an
> >>  offer to the southern California chapters leadership for the members
> >>  of the LA Linux User Groups, offering them a discount to the
> >>  Conference.
> >>
> >>  To whom do I email it?
> >
> >The mailing list lalugs@yahoogroups.com is where most of the leaders
> >can be reached.  I can forward it if you like.
> >- Dan
>
> That'd be great.
> Thanks, Dan.
>
> Here's the pitch:
>
> We'd like to offer your members a 20 % discount
> to attend Digital Domicile http://www.digitaldomicilebiz.com
>
> All we ask in return is that you let them know (via a calendar
> listing, email notification, or whatever's appropriate).
>
> Information follows.
>
> Digital Domicile Conference
> Monday May 21st through Wednesday, May 23rd
> Doubletree Hotel, Santa Monica, CA
>
> Key Topic: "Selling Entertainment Content and Services to the Connected Home."
>
> The conference will bring together designers and creators of the new
> digital entertainment value chain (content providers, backbone
> providers, last mile broadband providers and ISPs) with members of
> the home networking and consumer electronics industries.
>
> Participants include AOL, AT&T Broadband, Bell Canada, BMI,
> Earthlink, EMI, Excite@Home, iFilm, Lycos, Matasushita Electric
> Corporation, Microsoft, Motorola, OpenTV, Spiderdance, TBWA/Chiat
> Day, TV Guide, Variety, and more.
>
> They will discuss new business models, customer revenue
> opportunities, back office systems, intellectual property and
> technology options to support working together to sell digital
> entertainment content and services to the wired home of the future.
>
> A one day iTV workshop on May 21st will precede the conference and
> explore new business models and technologies needed to move forward
> the future of streaming and interactive television. Participants
> include Packet Video, Philips, Unilever, Intel, Arbitron, and more.
>
> To redeem the special 20 percent discount, mention Code 11 when registering:
> REGISTER ONLINE: http://www.digitaldomicilebiz.com/ddrego.htm
> REGISTER BY PHONE: (818) 888-4444
>
> To request a brochure or for additional information:
> mail@... or Ron Henderson (818) 888-4445, ext. 28
>

Messages 304 - 333 of 558   Oldest  |  < Older  |  Newer >  |  Newest
Add to My Yahoo!      XML What's This?

Copyright © 2010 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines NEW - Help