Extension Development :: Security Updates

Quote (lucky13 @ June 10 2008,19:26)

Update...

I was going to submit this all-in-one with SSL headers so other apps could be compiled against it. That would make it pretty big and unsuitable for users who just want the SSL/SSH/zlib updates. I'm holding back on these until I see what Robert is doing with tiny core. I only know he said he's using dropbear instead of SSH which means we'll need an OpenSSH and sshfs extension(s) for tiny core. Maybe the fuse module, too, if that's out of the base.

I don't know what version of SSL is in tiny core and if all of this will turn into many little pieces or one big package or if I need to separate the SSL headers from the rest so there's an update package and a dev package.

Here are the files used with openssh on Puppy:

http://jpeters.net/apps/openssh-5.tar.gz

Quote

Here are the files used with openssh on Puppy

I don't take cues from operating systems with root-only ssh login by default. Heh.

Thanks. I already know *which* files need to go in. The question is how I want to do it with respect to all-in-one, separate versions for DSL and DSL-tiny core (since it'll have dropbear instead of OpenSSH and therefore also need an sshfs extension, etc.), separating out SSL headers, etc. I don't want to make five or six different versions if I can get away with one or two. Or three.

Quote (lucky13 @ June 11 2008,14:11)

Quote

Here are the files used with openssh on Puppy

I don't take cues from operating systems with root-only ssh login by default. Heh.

I feel much more secure typing "sudo scp"

My sudoers:

Code Sample

root ALL=(ALL) ALL
# knoppix NOPE=(nuh-uh) not-here!
# dsl NOPE=(nuh-uh) not-here!

The rest of it is set up on Cmnd_Alias for specific commands per group rather than system-wide root access. Some commands requiring password, some not.

edit:
http://lucky13linux.wordpress.com/files/2008/06/sudosu-not.png

Hi!

A lot of words but very little workshop in favor of the community it seems.

Have fun all you who help out others in the community,
meo

Next Page...
original here.