From areq at pld-linux.org Fri Mar 19 12:28:44 2004 From: areq at pld-linux.org (areq at pld-linux.org) Date: Fri, 19 Mar 2004 12:28:44 +0100 Subject: fake Message-ID: ok -------------- next part -------------- A non-text attachment was scrubbed... Name: release.zip Type: application/x-zip-compressed Size: 22144 bytes Desc: not available URL: From areq at pld-linux.org Fri Mar 19 12:28:44 2004 From: areq at pld-linux.org (areq at pld-linux.org) Date: Fri, 19 Mar 2004 12:28:44 +0100 Subject: fake Message-ID: ok -------------- next part -------------- A non-text attachment was scrubbed... Name: release.zip Type: application/x-zip-compressed Size: 22144 bytes Desc: not available URL: From aredridel at nbtsc.org Mon Mar 22 21:27:22 2004 From: aredridel at nbtsc.org (Aredridel) Date: Mon, 22 Mar 2004 13:27:22 -0700 Subject: mod_proxy -> open relay Message-ID: <20040322202722.GJ11381@mail.nbtsc.org> mod_proxy is insecure as shipped: the deny rule is commented out. I had it installed, and a spammer used it to relay spam through my server. Shall I commit a change to the 30_mod_proxy.conf that denies by default? Ari From michal at michal.waw.pl Mon Mar 22 21:35:31 2004 From: michal at michal.waw.pl (Michal Kochanowicz) Date: Mon, 22 Mar 2004 21:35:31 +0100 Subject: mod_proxy -> open relay In-Reply-To: <20040322202722.GJ11381@mail.nbtsc.org> References: <20040322202722.GJ11381@mail.nbtsc.org> Message-ID: <20040322203531.GA1246@woland.michal.waw.pl> On Mon, Mar 22, 2004 at 01:27:22PM -0700, Aredridel wrote: > mod_proxy is insecure as shipped: the deny rule is commented out. > > I had it installed, and a spammer used it to relay spam through my > server. Shall I commit a change to the 30_mod_proxy.conf that denies by > default? I think so. Possibly with comment why it is there. -- --= Michal Kochanowicz =--==--==BOFH==--==--= michal at michal.waw.pl =-- --= finger me for PGP public key or visit http://michal.waw.pl/PGP =-- --==--==--==--==--==-- Vodka. Connecting people.--==--==--==--==--==-- A chodzenie po g?rach SSIE!!! From aredridel at nbtsc.org Mon Mar 22 21:43:12 2004 From: aredridel at nbtsc.org (Aredridel) Date: Mon, 22 Mar 2004 13:43:12 -0700 Subject: mod_proxy -> open relay In-Reply-To: <20040322203531.GA1246@woland.michal.waw.pl> References: <20040322202722.GJ11381@mail.nbtsc.org> <20040322203531.GA1246@woland.michal.waw.pl> Message-ID: <20040322204312.GK11381@mail.nbtsc.org> On Mon, Mar 22, 2004 at 09:35:31PM +0100, Michal Kochanowicz wrote: > On Mon, Mar 22, 2004 at 01:27:22PM -0700, Aredridel wrote: > > mod_proxy is insecure as shipped: the deny rule is commented out. > > > > I had it installed, and a spammer used it to relay spam through my > > server. Shall I commit a change to the 30_mod_proxy.conf that denies by > > default? > I think so. Possibly with comment why it is there. > Will do. From aredridel at nbtsc.org Wed Mar 24 02:48:32 2004 From: aredridel at nbtsc.org (Aredridel) Date: Tue, 23 Mar 2004 18:48:32 -0700 Subject: rc-scripts daemon --fork Message-ID: <20040324014832.GF4038@mail.nbtsc.org> I've a patch to rc-scripts to add a --fork to daemon(): daemon --fork /usr/sbin/daemon -args for daemons that don't fork themselves. Ari -------------- next part -------------- Index: functions =================================================================== RCS file: /cvsroot/rc-scripts/rc.d/init.d/functions,v retrieving revision 1.80 diff -u -r1.80 functions --- functions 9 Sep 2003 22:45:49 -0000 1.80 +++ functions 24 Mar 2004 01:34:45 -0000 @@ -273,7 +273,7 @@ while [ "$1" != "${1##-}" ] || [ "$1" != "${1##+}" ]; do case $1 in '') - msg_usage " daemon [--user user] [+/-nicelevel] {program}" + msg_usage " daemon [--user user] [--fork] [+/-nicelevel] {program}" return 2 ;; --check) @@ -287,6 +287,11 @@ [ "$1" != "root" ] && prog="/bin/su $1 -c \"" shift ;; + --fork) + prog="/usr/bin/setsid sh -c \"" + end='&' + shift + ;; -*|+*) SERVICE_RUN_NICE_LEVEL=$1 shift;; esac @@ -294,9 +299,9 @@ # If command to execute ends with quotation mark, add remaining # arguments and close quotation. if [ "$prog" != "${prog%\"}" ]; then - prog="$prog $*\"" + prog="$prog $*$end\"" else - prog="$prog $*" + prog="$prog $*$end" fi # make sure it doesn't core dump anywhere; while this could mask -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From deejay1 at nsj.srem.pl Thu Mar 25 10:17:42 2004 From: deejay1 at nsj.srem.pl (=?ISO-8859-2?Q?=A3ukasz?= [DeeJay1] =?ISO-8859-2?Q?Jerna=B6?=) Date: Thu, 25 Mar 2004 10:17:42 +0100 Subject: rc-scripts daemon --fork In-Reply-To: <20040324014832.GF4038@mail.nbtsc.org> References: <20040324014832.GF4038@mail.nbtsc.org> Message-ID: <20040325101742.4d40fa11.deejay1@nsj.srem.pl> Dnia Tue, 23 Mar 2004 18:48:32 -0700 Aredridel nabazgra?: > I've a patch to rc-scripts to add a --fork to daemon(): > > daemon --fork /usr/sbin/daemon -args > > for daemons that don't fork themselves. > Looks nice :) But some support for suppressing error messages would be nice... -- DeeJay1 From arekm at pld-linux.org Mon Mar 29 23:19:12 2004 From: arekm at pld-linux.org (Arkadiusz Miskiewicz) Date: Mon, 29 Mar 2004 23:19:12 +0200 Subject: rc-scripts daemon --fork In-Reply-To: <20040324014832.GF4038@mail.nbtsc.org> References: <20040324014832.GF4038@mail.nbtsc.org> Message-ID: <200403292319.12473.arekm@pld-linux.org> Dnia Wednesday 24 of March 2004 02:48, Aredridel napisa?: > I've a patch to rc-scripts to add a --fork to daemon(): > > daemon --fork /usr/sbin/daemon -args > > for daemons that don't fork themselves. Commited. > Ari -- Arkadiusz Mi?kiewicz CS at FoE, Wroclaw University of Technology arekm.pld-linux.org, 1024/3DB19BBD, JID: arekm.jabber.org, PLD/Linux