Home Blog Page 8992

Full disclosure: how much security info is too much

Author: JT Smith

Kelly McNeill writes “The debate over how much detail to release on software security gaps and when to go public with potentially sensitive security information has experts looking for a middle ground, wherein systems can be secured without helping hackers. The Code Red and Code Red II virus outbreaks, which capitalized on vulnerabilities that were publicized before the viruses spread, brought the debate front and center, but the issue presents a constant challenge to those who hunt for vulnerabilities.”

Category:

  • Linux

LinuxMedNews first look: StarOffice 6.0 beta

Author: JT Smith

Saint writes “Sun has announced its long-awaited 6.0 Beta to the venerable StarOffice 5.2. Featuring a plethora of improvements such as much faster load times, removal of a very un-necessary desktop, XML file formats, improved Microsoft file compatibility and far better online help. We gave the software a first look and conclude that this Beta release while not without problems is the biggest threat to Microsoft’s office-suite domination yet.

Complete Story

SuSE Linux 7.3 set for October 22

Author: JT Smith

MozillaQuest Magazine reports that, “SuSE Linux plans to release its SuSE Linux 7.3 distribution on 22 October 2001. SuSE Linux 7.3 is expected to ship with the new Linux 2.4.10 kernel. You should be able to buy the shiny, shrink-wrapped package at retail stores or directly from SuSE on 22 October.”

Category:

  • Open Source

Senators seek to extend Net tax ban

Author: JT Smith

ZDNet reports that three “key senators moved Tuesday to extend a soon-to-expire ban on Internet-specific taxes, hoping to separate it from a more controversial proposal that would allow states to tax online sales.

Motorola creates gas-powered cell phones

Author: JT Smith

From ZDNet: “Motorola researchers announced Tuesday that they have successfully demonstrated a methane gas-powered fuel cell, which can provide enough juice between chargings for a month of cell phone calls.”

Category:

  • Linux

GNOME Control Center 1.5.8 released

Author: JT Smith

Version 1.5.8 of the GNOME Control Center, as well as the capplet
library and the supplementary capplets (control-center-plus) is now
available. This new version of the GNOME Control Center depends on GAL
0.12, as
opposed to the previous version which required GAL 0.9. This is a bugfix
release.

* Availability

The new control center is available at
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/control-center/control-center-1.5.8.tar.gz

The advanced capplets are available at
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/control-center-plus/control-center-plus-1.5.8.tar.gz

The capplet library is available at
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/libcapplet/libcapplet-1.5.8.tar.gz

* What's new

         - Refactored background rendering code; in particular translucent
          backgrounds should now render properly

         - The bonobo-conf capplets now have Apply and Close buttons, rather
          than Ok and Cancel, to be more in tune with the Setup Tools.

         - The rollback capplet dialog has similar changes

         - Many, many bug fixes and cleanups

* Installation instructions and prerequisites

This version of the control center requires the following packages in
addition to the GNOME 1.4 platform:

* bonobo-conf 0.12, available at
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/bonobo-conf/bonobo-conf-0.12.tar.gz

* pkgconfig 0.8, available at
http://www.freedesktop.org/software/pkgconfig/releases/pkgconfig-0.8.0.tar.gz

* gtkhtml >= 0.9 (0.14.0 preferred), available at
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/gtkhtml/gtkhtml-0.14.0.tar.gz

* gal >= 0.12, available at
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/gal/gal-0.12.tar.gz

In addition, libcapplet must be compiled before control-center or
control-center-plus

Please download and try this out. If you have any questions or comments,
please consult gnomecc-list@gnome.org or #xst on GNOME IRC. Thank you.

Category:

  • Linux

Ximian Setup Tools 0.8.0

Author: JT Smith

The Ximian Setup Tools are a set of cross-platform configuration utilities
for Linux and other Unices. Internally they are divided in frontends and
backends. The frontend knows nothing about the underlying system and provides
the same user interface across the different types of systems. The backend
knows how to read and write configuration information. The Ximian Setup Tools
do not impose a new database on the system, they work with the default
configuration files so that configuration can still be done by hand or by
other tools.



Changes since last release
--------------------------

- Added Display tool for configuring XFree86.

- Added Internet Sharing tool for easy sharing of an internet connection.

- Re-enabled the disabled Shares tool with many new features and
  improvements.

- Improved error reporting.

- Lots of stabilizing and bugfixing in the existing tools.


Downloading
----------
You can get it from :

ftp://ftp.ximian.com/pub/setuptools/
or (once the mirrors sync)
ftp://ftp.gnome.org/pub/GNOME/unstable/sources/ximian-setup-tools

Contributions
-------------

We are happy to say that a lot of contributions have started flowing
in. We still need lots of help from anybody interested in contributing
to XST. 

- Testing
   Testing that the tools work correctly on your system and either filing
   detailed bug reports or confirming that they work correctly is greatly
   appreciated. If you test a tool on an unsupported distro/system and find out
   that it works correctly let us know so that we can update the supported
   tools matrix (see below).
  
- Porting
   The backends are designed as to minimize the effort needed to support more
   distros/systems. A great way to contribute is to port the tools to
   another distribution/system.


Mailing list / IRC
------------------

We have a mailing list set up at :
http://lists.ximian.com/mailman/listinfo/setup-tool-hackers

You can also find us in IRC server irc.gnome.org channel #xst


Whitepaper
----------

You can find the latest version of the XST whitepaper at:

http://primates.ximian.com/~miguel/helix-setup-tools.html


Backup system
-------------

Every time a tool modifies your system configuration files, it makes backups
of those files. The backups are rotated (for 9 levels in total), and the
backup made the first time the tool was run is kept forever. This means that
you can revert your system configuration to the point before you ever ran a
Ximian Setup Tool.

The backup path is /var/cache/ximian-setup-tools/backup/[tool]/[id]/. In this
directory, you'll find a complete snapshot of the files that were modified.
The original directory structure leading up to these files is also kept. 
runs from 1-9, and when the first backup is rotated out, it is kept in a
special catalog called "First", which is never touched again.


The current set of tools include :
----------------------------------

- Network admin
   
   Allows you to configure your:
   - hostname
   - samba hostname and workgroup
   - DNS servers
   - search domains
   - hosts (/etc/hosts)
   - Network interfaces
        - ppp 
        - ethernet
        - slip
        - wavelan (limited support)
         
- Time admin

   Allows you to configure your:
   - Date & Time
   - Timezone
   - NTPD servers
   
- Users admin

    Allows you to manage:
    - Users
        - username / full name
        - password
        - home dir
        - shell
        - groups
    - Groups
    
- Boot admin

     Allows you to set:
     - Default boot partition
     - Partition type and label
     - Timeout
     - Kernel image
     - Kernel extra parameters (append)
     - adding or deleting partitions from the boot manager
     
- Shares admin

     Allows you to import and export NFS and samba
     shares.
     - import NFS & samba shares
     - export NFS & samba shares

- Display admin

     Allows you to configure your:
     - Resolution
     - Color depth

- Internet Sharing admin

     Lets you share your internet connection with a LAN, configuring:
     - Masquerading
     - DHCP server and ranges


* NOTE: For this release disks admin and memory admin are disabled.


Verification matrix
-------------------

This is a matrix describing the current status of tool platform/distribution
support, to the best of our knowledge.

Key:

+  Supported and tested. The tool will not ask you to select a compatible
   version or distribution. Of course, there may still be bugs. :-)
+? Supported, not tested. Same as '+', but we haven't tested it. In other
   words, it "should work", because we know it's compatible.
?  Unsupported, may work. You'll be asked to select a compatible version or
   distribution, which may or may not work.
-  Unsupported, doesn't work. We haven't worked on any version of that
   flavour. It's most likely that it won't work.


Red Hat Linux:

Version        5.2     6.0     6.1     6.2     7.0     7.1

Boot            +?      +?      +?      +       +       +
Disks           +?      +?      +?      +       +       +
Memory          +?      +?      +?      +       +       +
Network         +?      +?      +?      +       +       +
Shares          +?      +?      +?      +       +       +
Time            +?      +?      +?      +       +       +
Users           +?      +?      +?      +       +       +
Display          ?       ?       ?      ?       +       +
Internetsharing  ?       ?       ?      ?       +       +


Debian GNU/Linux:

Version        2.2    Woody

Boot            +       +
Disks           +       +
Memory          +       +
Network         +       +?
Shares          +       +
Time            +       +
Users           +       +?
Display         +       +
Internetsharing +       +

Woody comments: You'll have to echo 'woody' > /etc/debian_version to
make the ximian-setup-tools detect your distribution. 


Linux Mandrake:

Version        7.0     7.1     7.2     8.0

Boot            ?       ?       +       ?
Disks           ?       ?       +       ?
Memory          ?       ?       +       ?
Network         ?       ?       +       ?
Shares          ?       ?       +       ?
Time            ?       ?       +       ?
Users           ?       ?       +       ?
Display         ?       ?       ?       ?
Internetsharing ?       ?       +       ?


SuSE Linux:

Version        6.3     6.4     7.0     7.1

Boot            ?       ?       +       ?
Disks           ?       ?       +       ?
Memory          ?       ?       +       ?
Network         ?       ?       +?      ?
Shares          ?       ?       +       ?
Time            ?       ?       +       ?
Users           ?       ?       +       ?
Display         ?       ?       ?       ?
Internetsharing ?       ?       ?       ?


Turbolinux:

Version         6

Boot            ?
Disks           ?
Memory          ?
Network         -
Shares          ?
Time            -
Users           ?
Display         +?
Internetsharing ?


LinuxPPC:

Version        2000

Boot            -
Disks           ?
Memory          ?
Network         -
Shares          ?
Time            -
Users           ?
Display         ?
Internetsharing ?


Yellow Dog Linux:

Version        1.2     2.0

Boot            -       -
Disks           ?       ?
Memory          ?       ?
Network         -       -
Shares          ?       ?
Time            -       -
Users           ?       ?
Display         ?       ?
Internetsharing ?       ?


Solaris:

Version        7.0     8.0

Boot            -       -
Disks           -       -
Memory          -       -
Network         -       -
Shares          -       -
Time            -       -
Users           -       -
Display         -       -
Internetsharing -       -


HPUX:

Version       10.0     11.0

Boot            -       -
Disks           -       -
Memory          -       -
Network         -       -
Shares          -       -
Time            -       -
Users           -       -
Display         -       -
Internetsharing -       -


FreeBSD:

Version        4.x     5.x

Boot            -       -
Disks           -       -
Memory          -       -
Network         -       -
Shares          ?       ?
Time            -       -
Users           ?       ?
Display         -       -
Internetsharing -       -

Category:

  • Linux

The Linux Show calls for political action, Disney boycott

Author: JT Smith

The Linux Show is calling on the Linux communities to boycott the Walt Disney Corporation for its participation in drafting the Security Systems Standards Certification Act (SSSCA). From the press release posted at LinuxPR: “SSSCA when combined
with UCITA legislation and the DMCA could be disastrous for our community,
consumers around the world, and even existence of the Internet as we now know
it. This is BAD legislation that if passed could make much of the existing Open
Source software in the world illegal, well at least illegal in the US. These combined
legislation of these three, WILL put a strangle hold on innovation and CONTROL
of the IT industry and the Internet itself into the hands of a few government
bureaucrats and multinational companies. Folks they are attempting to turn our
computers into Web TV boxes and turn the Internet into another broadcast medium
for the major networks and content owner/providers.”

Category:

  • Migration

Security hole in Internet Explorer for OS X

Author: JT Smith

Macintouch is reporting that the copy of Internet Explorer bundled with Mac OS X 10.1 has a way of handling some downloads that opens a huge security hole: “Every .hqx encoded classic application is decoded by Explorer itself (that’s the default, Stuffit Expander isn’t used)
and then automatically started.” You’ll have to scroll down a bit to see this short item, or maybe plug the words “Internet Explorer” into the find feature of your favorite browser.

Category:

  • Linux

Day of Action in UK against new CDs

Author: JT Smith

Philip Hunt writes “The
Campaign for Digital Rights
is holding a Day of Action against the
new
copy-prevented CDs

this Saturday. We will be distributing leaflets outside record
shops thoughout the UK, warning potential customers of the danger the
new CDs pose.
Record companies are introducing new corrupt CDs
which won’t play on
computers, PS2 and DVD machines, or have lower quality sound
and won’t last as long as normal CDs. Of the CDs that will play on
computers, they will only play on Microsoft operating systems,
and using Microsoft’s Media Player software –
users of minority operating systems like Linux will be deliberately excluded, as will non-Microsoft music playing software.

If, like us, you don’t want to be ripped off with shoddy, sub-standard
CDs, you can
be part of our Day of Action.”

Category:

  • Migration