Reporte de actividades diciembre 2009

12 [SECURITY] [DSA 1949-1] New php-net-ping packages fix arbitrary code execution
13 Al respecto de los limites existe ulimit

 ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 3064
max locked memory       (kbytes, -l) 32
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1024
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) 180
max user processes              (-u) 3064
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

14 Repositorio de documentos para la banda (janus probablemente), sin embargo, se puede hacer que se suba por ftp y que se vea por http protegido por htaccess, eso soluciona el problema?)

Sobby en maquina de trabajo, se tiene que configurar donde van los documentos, que puerto utiliza, si usa contraseña, etc. En Debian esta el servidor pero no tiene aun un archivo de configuración

Instalar Debian stable con panx

15 Con Panx 2pm en casa, como a las 3 terminamos, Debian funcionando en su netbook, un problema muy raro utilizo sdb para linux cuando la maquina solo tiene sda. Pescamos un intruso en linux… cerca de las 24 horas

Inusual uso de cpu en linux (reportado por munin), tito usuario comprometido

linux:/home/tito# last tito
tito     pts/1        74.217.168.152   Mon Dec 14 12:18 - 12:19  (00:00)
tito     pts/0        74.217.168.152   Mon Dec 14 00:59 - 01:10  (00:10)

Received: from munin with local (Exim 4.69)
00:05:14 -0600
To: vicm3
Subject: Munin notification
From: munin@sagan
Date: Tue, 15 Dec 2009 00:05:14 -0600

 :: linux :: CPU usage
	WARNINGs: system is 49.36 (outside range [:30]).

linux:/var/log# grep 74.217.168.152 * -R
auth.log:Dec 14 00:59:37 linux sshd[25188]: Accepted keyboard-interactive/pam for tito from 74.217.168.152 port 59873 ssh2
auth.log:Dec 14 12:18:55 linux sshd[19788]: Accepted keyboard-interactive/pam for tito from 74.217.168.152 port 55683 ssh2

Revise los passwords usados en linux y se encontró cuatro usuarios con contraseñas muy débiles a los cuales se contactará por mail y de lo contrario se depurara la cuenta o se cambiaran las contraseñas.

[SECURITY] [DSA-1953-1] New expat packages fix denial of service

16 Receta para hacer funcionar la wifi de Panx Re: Setting up Broadcom BCM4312

Postby hkoster1 » 2008-12-16 22:36

...and on you go with a bunch of output that only suggests that you should have followed the recipe in the forum post quoted. Let me spell it out once more for you: you need a proper compiling environment for the current kernel, presumably version 2.6.26. It doesn't really matter how you get that, but an easy way is to first install the "module-assistant" package, followed by the "m-a prepare" command as root -- you can be sure that you didn't miss anything that way. Once that's done, unpack the archive you downloaded from Broadcom and follow the directions to get it compiled. You then only need to move the wl.ko file to a place where it can be found (I'm suggesting the /lib/modules/2.6.26.../misc/ directory), run the "depmod -a" command as root, and you're all set. Just did it myself on a new installation yesterday, works like a charm.

Have faith!

[Security-news] SA-CORE-2009-009 - Drupal Core - Cross site scripting, fixed on icme

<  Reporte del 8-I-10 | Fechas para el Ourohackathon  >