devil-linux-develop — developer discussions

[Devil-linux-develop] [ devil-linux-Feature Requests-970416 ] add ndiswrapper

[SourceForge.net <no...@so...>]

Feature Requests item #970416, was opened at 2004-06-10 09:15
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=970416&group_id=34096

Category: Packages
Group: None
Status: Open
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: add ndiswrapper

Initial Comment:
http://ndiswrapper.sourceforge.net/
(works like a charm with my linksys 54g card)

Some vendors refuses to release specs or even a binary 
Linux driver for their WLAN cards. ndiswrapper tries to 
solve this by making a kernel module that can load Ndis 
(Windows network driver API) drivers. The goal is not to 
implement all of the Ndis API, but to implement the 
functions needed to get cards without Linux drivers to 
work

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=970416&group_id=34096

[Devil-linux-develop] [ devil-linux-Bugs-970407 ] backup of mysql db

[SourceForge.net <no...@so...>]

Bugs item #970407, was opened at 2004-06-10 09:11
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=970407&group_id=34096

Category: Website
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: backup of mysql db

Initial Comment:
we need some means of exporting/backup of the mysql 
db

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=970407&group_id=34096

[Devil-linux-develop] [ devil-linux-Bugs-970405 ] add infos about mirror server contacts

[SourceForge.net <no...@so...>]

Bugs item #970405, was opened at 2004-06-10 09:10
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=970405&group_id=34096

Category: Website
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: add infos about mirror server contacts

Initial Comment:
currently we don't have any reference who are our 
contacts for the various mirror servers.
add infos the mysql db

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=970405&group_id=34096

[Devil-linux-develop] [ devil-linux-Bugs-838817 ] mount usb stick read-only

[SourceForge.net <no...@so...>]

Bugs item #838817, was opened at 2003-11-09 11:14
Message generated for change (Settings changed) made by smiley73
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=838817&group_id=34096

Category: Base System
Group: v1.1
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
>Assigned to: Heiko Zuerker (smiley73)
Summary: mount usb stick read-only

Initial Comment:
check in the save-config script if fs is ro, then
remount it rw.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=838817&group_id=34096

Re: [Devil-linux-develop] [Fwd: [suse-security-announce] SUSE Security Announcement: squid (SuSE-SA:2004:016)]

[Heiko Z. <he...@zu...>]

> We might want to upgrade squid in the latest DL ...

Friedrich send me a link to a (German) site this morning about this problem.
There's no newer squid available, but a patch:
http://www.squid-cache.org/~wessels/patch/libntlmssp.c.patch

If you got some time, add it to 1.2 & 1.3

-- 
Regards
  Heiko Zuerker
  http://www.devil-linux.org

[Devil-linux-develop] [Fwd: [suse-security-announce] SUSE Security Announcement: squid (SuSE-SA:2004:016)]

[Bruce S. <bw...@ar...>]

We might want to upgrade squid in the latest DL ...

 - BS


-----Forwarded Message-----
From: Thomas Biege <th...@su...>
To: sus...@su...
Subject: [suse-security-announce] SUSE Security Announcement: squid (SuSE-SA:2004:016)
Date: Wed, 09 Jun 2004 16:45:55 +0200


-----BEGIN PGP SIGNED MESSAGE-----

______________________________________________________________________________

                        SUSE Security Announcement

        Package:                squid
        Announcement-ID:        SuSE-SA:2004:016
        Date:                   Wednesday, Jun 9th 2004 16:30 MEST
        Affected products:      8.2, 9.0, 9.1
        Vulnerability Type:     remote system compromise
        Severity (1-10):        5
        SUSE default package:   no
        Cross References:       CAN-2004-0541

    Content of this advisory:
        1) security vulnerability resolved:
             - buffer overflow
           problem description, discussion, solution and upgrade information
        2) pending vulnerabilities, solutions, workarounds:
             - icecast
             - sitecopy
             - cadaver
             - tla
             - OpenOffice_org
             - tripwire
             - postgresql
             - lha
         3) standard appendix (further information)

______________________________________________________________________________

1)  problem description, brief discussion, solution, upgrade information

    Squid is a feature-rich web-proxy with support for various web-related
    protocols.
    The NTLM authentication helper application of Squid is vulnerable to
    a buffer overflow that can be exploited remotely by using a long
    password to execute arbitrary code.
    NTLM authentication is enabled by default in the Squid package that
    is shipped by SUSE LINUX.

    There is no workaround known other then turning off the NTLM
    authentication.

    Please download the update package for your distribution and verify its
    integrity by the methods listed in section 3) of this announcement.
    Then, install the package using the command "rpm -Fhv file.rpm" to apply
    the update.
    Our maintenance customers are being notified individually. The packages
    are being offered to install from the maintenance web.


    Intel i386 Platform:

    SuSE-9.1:
    ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/squid-2.5.STABLE5-42.9.i586.rpm
      ea3da461f226cc881562b06224a8370e
    patch rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/squid-2.5.STABLE5-42.9.i586.patch.rpm
      f85bd7c071695d0d9c304969c5a35a23
    source rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/squid-2.5.STABLE5-42.9.src.rpm
      610caf4de1d7333af0f8613767d40bb0

    SuSE-9.0:
    ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/squid-2.5.STABLE3-110.i586.rpm
      fc31dd7379b249d8f9a07d0f4464996d
    patch rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/squid-2.5.STABLE3-110.i586.patch.rpm
      06961779c39bca33ee2d619773f47f39
    source rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/squid-2.5.STABLE3-110.src.rpm
      90c171552d03e2efb731d25a4ffbf553

    SuSE-8.2:
    ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/squid-2.5.STABLE1-98.i586.rpm
      d35da0a2719ca8de24c299ef9a8dbe3f
    patch rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/squid-2.5.STABLE1-98.i586.patch.rpm
      0aa98cf95a23a0ea35a2e6657717243e
    source rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/squid-2.5.STABLE1-98.src.rpm
      4fdd84cebf8dbdc7334e48a9f8369efc


    SuSE-8.0:
    ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/squid-2.4.STABLE6-9.i386.rpm
      fa4780901f96712ea22eef28bdf53700
    patch rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/8.0/n2/squid-2.4.STABLE6-9.i386.patch.rpm
      917c26da9c444085d045b708548eae3e
    source rpm(s):
    ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/squid-2.4.STABLE6-9.src.rpm
      dc96baf5541829ee6e615861d17146aa



    Opteron x86_64 Platform:

    SuSE-9.1:
    ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/squid-2.5.STABLE5-42.9.x86_64.rpm
      868c4121e1622f6ac91a8eaac414eabe
    patch rpm(s):
    ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/squid-2.5.STABLE5-42.9.x86_64.patch.rpm
      0cbc28a5262dfe4eb72ee3fbbb5b4657
    source rpm(s):
    ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/squid-2.5.STABLE5-42.9.src.rpm
      20ab0af37af2139e1de8f1f4edfcc2c6

    SuSE-9.0:
    ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/squid-2.5.STABLE3-110.x86_64.rpm
      616f32f8196ed53a4f5f163f33d2a838
    patch rpm(s):
    ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/squid-2.5.STABLE3-110.x86_64.patch.rpm
      72ca1d31e833be4d9e9c150349d2bbbc
    source rpm(s):
    ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/squid-2.5.STABLE3-110.src.rpm
      632bd7bdbe116eff14213b9f6245cd0a

______________________________________________________________________________

2)  Pending vulnerabilities in SUSE Distributions and Workarounds:

    - icecast
    The icecast service is vulnerable to a remote denial-of-service
    attack. Update packages will be available soon.

    - sitecopy
    The sitecopy package includes a vulnerable version of the
    neon library (CAN-2004-0179, CAN-2004-0398). Update packages will be
    available soon.

    - cadaver
    The cadaver package includes a vulnerable version of the
    neon library (CAN-2004-0179, CAN-2004-0398). Update packages will be
    available soon.

    - tla
    The tla package includes a vulnerable version of the
    neon library (CAN-2004-0179, CAN-2004-0398). Update packages are
    available on our FTP servers.

    - OpenOffice_org
    The OpenOffice_org package includes a vulnerable version
    of the neon library (CAN-2004-0179, CAN-2004-0398). Update packages
    will be available soon.

    - tripwire
    A format string bug in tripwire can be exploited locally
    to gain root permissions. Update packages will be available soon.

    - postgresql
    A buffer overflow in psqlODBC could be exploited to crash the
    application using it. E.g. a PHP script that uses ODBC to access a
    PostgreSQL database can be utilized to crash the surrounding Apache
    web-server. Other parts of PostgreSQL are not affected.
    Update packages will be available soon.

    - lha
    Minor security fix for a buffer overflow while handling command
    line options. This buffer overflow could be exploited in conjunction
    with other mechanisms to gain higher privileges or access the system
    remotely.

______________________________________________________________________________
...

Re: [Devil-linux-develop] Important Announcement Regarding the grsecurity Project]

[Heiko Z. <he...@zu...>]

> On Tuesday 01 June 2004 02:55, Heiko Zuerker wrote:
>> Bruce Smith wrote:
> [...]
>>
>> We can work on the implementation on the 1.3 tree.
>> Even if grsecurity continues, there's no reason why we couldn't add LIDS
>> to DL.
> Looks like grsecurity was saved after all:
>
> http://www.grsecurity.org/news.php
> June 8, 2004
> Thanks to many donations and several sponsors (check the sponsors page as
> I
> update it), grsecurity development will continue. To see what changes are
> planned for grsecurity in the near future, consult the future work section
> of
> my research paper entitled "Increasing Performance and Granularity in
> Role-Based Access Control Systems" available from the papers section.

That is good !
But we should include LIDS as an option anyway...

-- 
Regards
  Heiko Zuerker
  http://www.devil-linux.org

Re: [Devil-linux-develop] [Fwd: [grsec] Important =?iso-8859-15?q?Announcement=09Regarding_the_grsecurity?= Project]

[Roland P. <pa...@ta...>]

On Tuesday 01 June 2004 02:55, Heiko Zuerker wrote:
> Bruce Smith wrote:
[...]
>
> We can work on the implementation on the 1.3 tree.
> Even if grsecurity continues, there's no reason why we couldn't add LIDS
> to DL.
Looks like grsecurity was saved after all:

http://www.grsecurity.org/news.php
June 8, 2004
Thanks to many donations and several sponsors (check the sponsors page as I 
update it), grsecurity development will continue. To see what changes are 
planned for grsecurity in the near future, consult the future work section of 
my research paper entitled "Increasing Performance and Granularity in 
Role-Based Access Control Systems" available from the papers section.

Roland
-- 
ICQ UIN 49339118	Linux Counter #88774
GPG-Key 1024D/59C6AFA6 2003-02-07 Roland Pabel <ro...@pa...>

Re: [Devil-linux-develop] check this out.....

[Diego T. <dt...@co...>]

On Thu, Jun 03, 2004 at 10:07:55PM -0400, Heiko Zuerker wrote:

> ... something happend to our website: http://www.devil-linux.org

now it looks quite professional :))

thxs to engine solutions!

-- 
-- gnupg keyfingerprint -- 48AF 5BF9 8F54 2966 64CC  2327 7CD0 DD91 B09D 5799
-- Use of a keyboard or mouse may be linked to serious injuries or disorders.
Diego Torres - dtorres at anthalia dot org - Madrid / España

[Devil-linux-develop] [ devil-linux-Feature Requests-966905 ] add docsis (encoder)

[SourceForge.net <no...@so...>]

Feature Requests item #966905, was opened at 2004-06-05 03:32
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=966905&group_id=34096

Category: Packages
Group: None
Status: Open
Priority: 5
Submitted By: Friedrich Lobenstock (friedl)
Assigned to: Nobody/Anonymous (nobody)
Summary: add docsis (encoder)

Initial Comment:
DOCSIS config file encoder
http://freshmeat.net/projects/docsis/

About:
The DOCSIS config file encoder converts a
human-readable text configuration file into a binary
configuration file compatible with DOCSIS cable modems
or PacketCable Multimedia Terminal Adapters (MTAs).

[License]
OSI Approved :: GNU General Public License (GPL)


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=966905&group_id=34096

[Devil-linux-develop] [ devil-linux-Feature Requests-966904 ] add docsis_server

[SourceForge.net <no...@so...>]

Feature Requests item #966904, was opened at 2004-06-05 03:29
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=966904&group_id=34096

Category: Packages
Group: None
Status: Open
Priority: 5
Submitted By: Friedrich Lobenstock (friedl)
Assigned to: Nobody/Anonymous (nobody)
Summary: add docsis_server

Initial Comment:
http://freshmeat.net/projects/docsis_server/

About:
DOCSIS Server is a DHCP/TFTP/TOD/syslog server that
uses MySQL as a backend. If you have a DOCSIS Cable
Modem headend, you can use this server to boot up cable
modems and assign IP addresses to customer premise
equipment. With a little bit of tweaking you could also
use it as just a DHCP server attached to a MySQL
database. It was designed to boot up more than 150
modems per second.

[License]	 	 
OSI Approved :: GNU General Public License (GPL)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=966904&group_id=34096

[Devil-linux-develop] [ devil-linux-Feature Requests-837885 ] add lprng

[SourceForge.net <no...@so...>]

Feature Requests item #837885, was opened at 2003-11-07 09:07
Message generated for change (Settings changed) made by smiley73
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=837885&group_id=34096

Category: Packages
Group: Next Release
>Status: Closed
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
>Assigned to: Heiko Zuerker (smiley73)
Summary: add lprng

Initial Comment:
http://www.lprng.com

The LPRng software is an enhanced, extended, and 
portable implementation of the Berkeley LPR print spooler 
functionality. While providing the same interface and 
meeting RFC1179 requirements, the implementation is 
completely new and provides support for the following 
features: lightweight (no databases needed) lpr, lpc, 
and lprm programs; dynamic redirection of print queues; 
automatic job holding; highly verbose diagnostics; 
multiple printers serving a single queue; client programs 
do not need to run SUID root; greatly enhanced security 
checks; and a greatly improved permission and 
authorization mechanism

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=837885&group_id=34096

[Devil-linux-develop] check this out.....

[Heiko Z. <he...@zu...>]

... something happend to our website: http://www.devil-linux.org

Regards
   DL Team

Re: [Devil-linux-develop] Please Upload to ftp-area

[Heiko Z. <he...@zu...>]

Oliver Jehle wrote:
> Hi
> 
> please upload to the ftp sites
> 
> -> pax patch for 2.6.6
> -> kernel 2.6.6
> 
> to fix the build for 2.6 and 2.6.6 
> 

DONE

Heiko

Re: [Devil-linux-develop] NAPI support

[<hzu...@ra...>]

On 06/01/2004 01:49:13 PM Peter Frischknecht wrote:
>Is there any interest in implementing a few NAPI drivers along with DL?
>
>For those of you who don't know, NAPI is a high-performance architecture
>that forgoes Interrupts in favor of polling.  A very suitable mechanism
>for devices that would otherwise generate thousands of interrupts/sec,
>like Gigabit Network cards.  Or for users who manage networks with a
>high percentage of small packets (like me).
>
>There is a good bit of information here:
>ftp://robur.slu.se/pub/Linux/net-development/NAPI/
>(read the README)
>
>The Kernel patches are already included in 2.4.20+ and 2.6+.  The only
>thing missing is the NIC drivers.
>
>The drivers for e1000, eepro100, and tulip are stable.  Tulip being the
>most tested.  There are loose reports of 8139 drivers, but all the
>patches I found are from 2001.  The 3com patch is pretty old as well, i
>would not trust it.
>
>As a side note, NAPI goes beyond network card drivers, once the kernel
>is patched, any other device that would generate lots of interrupts
>could be handled NAPI style.  A good example is video capture devices.
>The folks that run the dvr project have had a good discussion of video
>capture cards and NAPI enabled drivers for them.

Since this wpuld be a new feature, it can only be considered for DL 1.3.

DL 1.3 will drop Kernel 2.4 support and only concentrate on 2.6

Heiko

[Devil-linux-develop] NAPI support

[Peter F. <pe...@em...>]

Is there any interest in implementing a few NAPI drivers along with DL?

For those of you who don't know, NAPI is a high-performance architecture
that forgoes Interrupts in favor of polling.  A very suitable mechanism
for devices that would otherwise generate thousands of interrupts/sec,
like Gigabit Network cards.  Or for users who manage networks with a
high percentage of small packets (like me).

There is a good bit of information here:
ftp://robur.slu.se/pub/Linux/net-development/NAPI/
(read the README)

The Kernel patches are already included in 2.4.20+ and 2.6+.  The only
thing missing is the NIC drivers.

The drivers for e1000, eepro100, and tulip are stable.  Tulip being the
most tested.  There are loose reports of 8139 drivers, but all the
patches I found are from 2001.  The 3com patch is pretty old as well, i
would not trust it.

As a side note, NAPI goes beyond network card drivers, once the kernel
is patched, any other device that would generate lots of interrupts
could be handled NAPI style.  A good example is video capture devices. 
The folks that run the dvr project have had a good discussion of video
capture cards and NAPI enabled drivers for them.


-- 
I look forward to hearing from you.

Peter Frischknecht
Empowering Solutions, Inc.
http://www.empoweringsolutions.com
AIM: esipeterf
877.GOESI74 x803 Phone
704.625.9019	 Fax

[Devil-linux-develop] Please Upload to ftp-area

[Oliver J. <oli...@mo...>]

Hi

please upload to the ftp sites

-> pax patch for 2.6.6
-> kernel 2.6.6

to fix the build for 2.6 and 2.6.6 


thx

Oliver

[Devil-linux-develop] New Package "DAR" - powerful, flexible command line backups

[Tim T. <t....@co...>]

<http://sourceforge.net/projects/dar/>

Summary (From Sourceforge):

"DAR is a command-line backup tool, that uses compression, makes 
differential or full backups, which can be split over several files or 
disks. Dar saves *all* UNIX inode types, hard links, as well as Extended 
Attributes. And many other features ..."

Tarball:
<http://prdownloads.sourceforge.net/dar/dar-2.1.3.tar.gz>

This script configures DAR for 64bit mode instead of the "infinint" 
because of the extra memory and mips that demands. 4GB^2  should be 
enough for now? In any case it does not affect the save format.

It's worth noting that a binary windows distribution also exists, making 
it a natural to use in a samba environment.

Tim

-----------
On a side note, it seems like the documentation on how to add new 
packages is out of date. I threw together this quick summary based on 
DNSMASQ, did I miss anything important?

Example: DNSMASQ

./scripts/dnsmasq:

    Make script - calls make for package, both for build and install. 
Often calls the
   "configure"  auto-config script to make "Makefile" first..

./scripts/scripts/dnsmasq:

    Script to be installed into init.d for deamons. Startup, etc

./scripts/configuration/dnsmasq.config:

    Adds menu choice to "make menuconfig". Note that you need to pick
    the correct sub-menu location.

./scripts/configuration/help/dnsmasq.help:

    Help screen text for "make menuconfig"

./scripts/.buildorder/dnsmasq:

    Auto-generated by "make prepare" (I think)
    
.configuration/profiles/default:

    Add line like "CONFIG_DNSMASQ=y" for package. (Is this needed??)

[Devil-linux-develop] branch for 1.2

[Heiko Z. <he...@zu...>]

Hey folks,

in order to be able to start adding new features to DL, I created a 
branch rel-1-2-patches.
This branch will become the 1.2 release and will hold all bugfixes for it.

The main CVS branch will now become 1.3, the next development release.

Heiko

Re: [Devil-linux-develop] [Fwd: [grsec] Important Announcement Regarding the grsecurity Project]

[Heiko Z. <he...@zu...>]

Bruce Smith wrote:
>>That's the problem with Opensource, it doesn't pay the bills.
> 
> 
> A lot of people make money off open source.  But that's a topic for a
> different thread ...
> 
> It's no secret that I've never liked grsecurity because it caused
> problems on my DL servers, but I do feel bad when a project is stopped
> because of lack of money.
> 
> In any case, I'll suggest (again) that we drop grsecurity from DL.  
> If we really need something like that, maybe we should look around for
> something else.  About a year ago, these guys http://www.linuxbox.com/
> (who make money from open source) came to my LUG and did a presentation
> on LIDS.  Take a look:  http://www.linuxbox.com/ABOUT/LIDS.pdf
> This looked like good stuff, and I was very impressed!
> http://www.lids.org/about.html
> 
> I also got the impression from the presentation that LIDS was only
> active once it was started, so if you didn't want to use it, then you
> just don't start LIDS.  Something I wish I could do with grsecurity on a
> server, so it wouldn't kill my mission critical processes.

We can work on the implementation on the 1.3 tree.
Even if grsecurity continues, there's no reason why we couldn't add LIDS 
to DL.

Heiko

Re: [Devil-linux-develop] [Fwd: [grsec] Important Announcement Regarding the grsecurity Project]

[Bruce S. <bw...@ar...>]

> That's the problem with Opensource, it doesn't pay the bills.

A lot of people make money off open source.  But that's a topic for a
different thread ...

It's no secret that I've never liked grsecurity because it caused
problems on my DL servers, but I do feel bad when a project is stopped
because of lack of money.

In any case, I'll suggest (again) that we drop grsecurity from DL.  
If we really need something like that, maybe we should look around for
something else.  About a year ago, these guys http://www.linuxbox.com/
(who make money from open source) came to my LUG and did a presentation
on LIDS.  Take a look:  http://www.linuxbox.com/ABOUT/LIDS.pdf
This looked like good stuff, and I was very impressed!
http://www.lids.org/about.html

I also got the impression from the presentation that LIDS was only
active once it was started, so if you didn't want to use it, then you
just don't start LIDS.  Something I wish I could do with grsecurity on a
server, so it wouldn't kill my mission critical processes.

 - BS

[Devil-linux-develop] [Fwd: [grsec] Important Announcement Regarding the grsecurity Project]

[Heiko Z. <he...@zu...>]

crap....

That's the problem with Opensource, it doesn't pay the bills.

Heiko

[Devil-linux-develop] [ devil-linux-Feature Requests-963640 ] add DSPAM

[SourceForge.net <no...@so...>]

Feature Requests item #963640, was opened at 2004-05-31 10:23
Message generated for change (Comment added) made by smiley73
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=963640&group_id=34096

Category: Packages
Group: None
Status: Open
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: add DSPAM

Initial Comment:
http://www.nuclearelephant.com/projects/dspam/

DSPAM (as in De-Spam) is an extremely scalable,
open-source statistical hybrid anti-spam filter. While
most commercial solutions only provide a mere 95%
accuracy (1 error in 20), a majority of DSPAM users
frequently see between 99.95% (1 error in 2000) all the
way up to 99.985% (1 error in 7000). DSPAM is currently
effective as both a server-side agent for UNIX email
servers and a developer's library for mail clients,
other anti-spam tools, and similar projects requiring
drop-in spam filtering. DSPAM has been implemented on
many large and small scale systems with the largest
systems being reported at about 125,000 mailboxes.



----------------------------------------------------------------------

>Comment By: Heiko Zuerker (smiley73)
Date: 2004-05-31 12:07

Message:
Logged In: YES 
user_id=112133

Freshmeat says it's GPL.
http://freshmeat.net/projects/dspam/

----------------------------------------------------------------------

Comment By: Friedrich Lobenstock (friedl)
Date: 2004-05-31 11:11

Message:
Logged In: YES 
user_id=38090

Please add information about the licence.

I can not find any licence information at the url provided.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=963640&group_id=34096

[Devil-linux-develop] [ devil-linux-Feature Requests-963640 ] add DSPAM

[SourceForge.net <no...@so...>]

Feature Requests item #963640, was opened at 2004-05-31 17:23
Message generated for change (Comment added) made by friedl
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=963640&group_id=34096

Category: Packages
Group: None
Status: Open
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: add DSPAM

Initial Comment:
http://www.nuclearelephant.com/projects/dspam/

DSPAM (as in De-Spam) is an extremely scalable,
open-source statistical hybrid anti-spam filter. While
most commercial solutions only provide a mere 95%
accuracy (1 error in 20), a majority of DSPAM users
frequently see between 99.95% (1 error in 2000) all the
way up to 99.985% (1 error in 7000). DSPAM is currently
effective as both a server-side agent for UNIX email
servers and a developer's library for mail clients,
other anti-spam tools, and similar projects requiring
drop-in spam filtering. DSPAM has been implemented on
many large and small scale systems with the largest
systems being reported at about 125,000 mailboxes.



----------------------------------------------------------------------

>Comment By: Friedrich Lobenstock (friedl)
Date: 2004-05-31 18:11

Message:
Logged In: YES 
user_id=38090

Please add information about the licence.

I can not find any licence information at the url provided.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=963640&group_id=34096

[Devil-linux-develop] [ devil-linux-Feature Requests-963640 ] add DSPAM

[SourceForge.net <no...@so...>]

Feature Requests item #963640, was opened at 2004-05-31 10:23
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=963640&group_id=34096

Category: Packages
Group: None
Status: Open
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: add DSPAM

Initial Comment:
http://www.nuclearelephant.com/projects/dspam/

DSPAM (as in De-Spam) is an extremely scalable,
open-source statistical hybrid anti-spam filter. While
most commercial solutions only provide a mere 95%
accuracy (1 error in 20), a majority of DSPAM users
frequently see between 99.95% (1 error in 2000) all the
way up to 99.985% (1 error in 7000). DSPAM is currently
effective as both a server-side agent for UNIX email
servers and a developer's library for mail clients,
other anti-spam tools, and similar projects requiring
drop-in spam filtering. DSPAM has been implemented on
many large and small scale systems with the largest
systems being reported at about 125,000 mailboxes.



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410646&aid=963640&group_id=34096