iB::Topic::Security Updates

	Damn Small Linux :: Damn Small Linux Board The DSL Forums

» Welcome Guest
[ Log In :: Register ]

Damn Small Linux Board » MyDSL Extensions » Extension Development » Security Updates

		Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
		Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic

Pages: (6) </ 1 [2] 3 4 5 6 >/

[ Track this topic :: Email this topic :: Print this topic ]

Topic: Security Updates, zlib+ssl+ssh... +?

< Next Oldest | Next Newest >

jpeters

Group: Members
Posts: 804
Joined: April 2006

Posted: June 11 2008,04:59

Quote (lucky13 @ June 10 2008,19:26)

Update...

I was going to submit this all-in-one with SSL headers so other apps could be compiled against it. That would make it pretty big and unsuitable for users who just want the SSL/SSH/zlib updates. I'm holding back on these until I see what Robert is doing with tiny core. I only know he said he's using dropbear instead of SSH which means we'll need an OpenSSH and sshfs extension(s) for tiny core. Maybe the fuse module, too, if that's out of the base.

I don't know what version of SSL is in tiny core and if all of this will turn into many little pieces or one big package or if I need to separate the SSL headers from the rest so there's an update package and a dev package.

Here are the files used with openssh on Puppy:

http://jpeters.net/apps/openssh-5.tar.gz

lucky13

Group: Members
Posts: 1478
Joined: Feb. 2007

Posted: June 11 2008,14:11

Quote

Here are the files used with openssh on Puppy

I don't take cues from operating systems with root-only ssh login by default. Heh.

Thanks. I already know *which* files need to go in. The question is how I want to do it with respect to all-in-one, separate versions for DSL and DSL-tiny core (since it'll have dropbear instead of OpenSSH and therefore also need an sshfs extension, etc.), separating out SSL headers, etc. I don't want to make five or six different versions if I can get away with one or two. Or three.

--------------
"It felt kind of like having a pitbull terrier on my rear end."
-- meo (copyright(c)2008, all rights reserved)

jpeters

Group: Members
Posts: 804
Joined: April 2006

Posted: June 11 2008,15:09

Quote (lucky13 @ June 11 2008,14:11)

Quote

Here are the files used with openssh on Puppy

I don't take cues from operating systems with root-only ssh login by default. Heh.

I feel much more secure typing "sudo scp"

lucky13

Group: Members
Posts: 1478
Joined: Feb. 2007

Posted: June 11 2008,16:07

My sudoers:

Code Sample

root ALL=(ALL) ALL
# knoppix NOPE=(nuh-uh) not-here!
# dsl NOPE=(nuh-uh) not-here!

The rest of it is set up on Cmnd_Alias for specific commands per group rather than system-wide root access. Some commands requiring password, some not.

edit:
http://lucky13linux.wordpress.com/files/2008/06/sudosu-not.png

--------------
"It felt kind of like having a pitbull terrier on my rear end."
-- meo (copyright(c)2008, all rights reserved)

meo

Group: Members
Posts: 552
Joined: April 2004

Posted: June 25 2008,21:35

Hi!

A lot of words but very little workshop in favor of the community it seems.

Have fun all you who help out others in the community,
meo

--------------
"Live and let live" Treat others the way you want to be treated because that's what you should expect from them.

"All that is very well," answered Candide, "but let us cultivate our garden." - Francois-Marie Arouet Voltaire

26 replies since June 01 2008,12:37

< Next Oldest | Next Newest >

[ Track this topic :: Email this topic :: Print this topic ]

Pages: (6) </ 1 [2] 3 4 5 6 >/

Damn Small Linux Board » MyDSL Extensions » Extension Development » Security Updates