devil-linux-develop Mailing List for Devil-Linux (Page 48)

Hi,

I'm really sorry for troubling people, who is testing 1.3. I've updated kernel
to 2.6.21.5 but I still can't adjust the kernel config file and "make prepare"
freezes on "make oldconfig" phase .

As a workaround (I use it myself) I suggest to _temporary_ add the following to
the scripts/prepare:

-       make oldconfig || exit 1
+       ( yes | sed 's/y//' | make oldconfig ) || exit 1

it allows to set default values for all unknown kernel options.

Heiko, could you please point me the right direction? I copied full .config to
cripts/config/linux-2.6/linux_config but the next time the system asks me
again... Have I missed something critical?

--
 Serge Leschinsky

Hi,

after a fresh new build from cvs, I still got some problems with :

* install-on-usb script fails when executed on the booted DL box:

I've got an ide cd-rom from which the system boot.
I've also installed a CF card in a CF to usb card reader(integrated on
mobo epia-MS 10000)

When I try to install-on-usb with /dev/ide/host0/bus0/target1/lun0/cd as
source
/dev/scsi/host0/bus0/target0/lun0/disc as destination disc and
/dev/scsi/host0/bus0/target0/lun0/part1 as destination part,

the script fails when copying the cd image with an
/dev/ide/host0/bus0/target1/lun0/cd i/o error

the bootcd.iso file created is smaller than the original one.

The only way I have to sucessfully run the script is to provide a path
to a bootcd.iso file somewhere ...


* when I try to boot from an ide hdd, the part is listed as mounted in
mtab but inaccessible :

# mount
rootfs on / type rootfs (rw)
shmfs on /shm type iso9660 (ro)
/dev/ide/host0/bus0/target0/lun0/part1 on /shm/var/adm/boot type ext2
(ro,noatime)
...

l# s /var/adm/boot gives nothing

and if I try

# mount /dev/ide/host0/bus0/target0/lun0/part1 /shm/var/adm/boot -text2
-orw,remount

it says :

mount: /shm/var/adm/boot/ not mounted already, or bad option

this is quite a boring thing as I can't even modify anything on this
partition even if I boot from CF card as the boot process automatically
swap to first ide part with bootcd.iso and DEVIL-LINUX file he found,
before any on scsi device in the search of system device.

Any idea ???

Regards,

MaNU

Hi,

starting with a fresh new lfssystem, I build an iso then do some changes
in the make menuconfig and wanted to start over :

make mrproper unpack prepare build


the build stops with an error on glibc ...

root:/data/build#tail tmp/LOG/build/glibc
/data/build/tmp/glibc-build/elf/sln
/data/build/tmp/glibc-build/elf/symlink.list
rm -f /data/build/tmp/glibc-build/elf/symlink.list
test ! -x /data/build/tmp/glibc-build/elf/ldconfig || LC_ALL=C LANGUAGE=C \
  /data/build/tmp/glibc-build/elf/ldconfig  \
                               /lib /usr/lib
CC="gcc" /usr/bin/perl scripts/test-installation.pl
/data/build/tmp/glibc-build/
Your new glibc installation seems to be ok.
make[2]: Leaving directory `/data/build/tmp/glibc-2.3.2'
make[1]: Leaving directory `/data/build/tmp/glibc-build'
ln: `/lib/libdl.so': File exists

There are three ways to solve this : either the link is to be deleted
when make mrproper or it has to be when make build in the glibc script,
and finally one could keep the glibc build script from updating the link
and modify glibc build script not to create the link if it exixts.

I choose the second way as it is the easier and "cleaner" one, for me at
least ;)

here is the patch :

--- scripts/glibc.old   2007-05-24 10:05:45.000000000 +0200
+++ scripts/glibc       2007-07-04 18:57:23.000000000 +0200
@@ -70,6 +70,9 @@
                # we have to install this immediately, because this is a
library and could be needed by other sources
                make install || exit 1
                #make localedata/install-locales || exit 1
+                if [ -f /lib/libdl.so ]; then
+                       rm /lib/libdl.so
+               fi
                ln -s libdl.so.2 /lib/libdl.so || exit 1
                ;;



Regards,

MaNU ESCaR

Hello

My name is Lara Thynne and I am a PhD candidate at Deakin University
Australia.  I am currently researching the boundary between work and
leisure activities directly related to the open source community and
open source program development.

As part of this I am running a survey at the following address.

https://dcarf.deakin.edu.au/surveys/oss/

The survey is completely confidential and looks at your views and
motivations to use Open Source software and to participate in the
community.

It will only take a five to ten minutes to complete and your contact
details will not be recorded. You can withdraw your participation at
any stage.

I sincerely apologize for the spammish nature of this e-mail - I
don't mean to abuse this list.  I am trying to collect responses
from as many open source developers and users as possible and a
mailing list like can be the only way to reach many developers.

Thanks again

Lara

P.S The program that I am using is open source, of course
(www.phpsurveyor.org)!

Hello DL Fans !

I'm pleased to announce the 1.2.13 release of Devil-Linux.

Main changes include the updated timezone information for the recent DST
changes, a lot of program updates, addition of missing iptables modules
and much more. Check the changelog for details.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

2007/2/25, Serge Leschinsky <fi...@in...>:
>
> Hi Carlos,
>
> Carlos H. - Uptime. Tecnologia da Informa=E7=E3o wrote:
> ...
> >
> > My name is Carlos and I use a customized devil-linux as my standard
> > linux solution in my clients I would be glad to help developing the nex=
t
> > ( 1.3) dl version.
> >
> > I've been looking for information about the status of the track but
> > couldn't find anything really usefull. Is there a to-do list? What are
> > the top priorities?
>
> I'm a person, who have been trying to build 1.3 for the last time. There
> is my
> to-do list:
>
> 1. All packages from default profile should be able to be compiled.
> For the current cvs snapshot:
>
> pwlib  -- fail
> openh323gk  --fail ( depends on pwlib )
> grub -- fail
> lm_sensors -- fail
> ndiswrapper -- fail
> vmware -- fail
>
> 2. Modify scripts/config/linux-2.6/config_linux to be able execute 'make
> prepare' without hack below:
> -----------------------------------------------------------------------
> --- scripts/prepare     2007-02-13 15:10:40.000000000 +0000
> +++ scripts/prepare.mod 2007-02-09 12:56:17.000000000 +0000
> @@ -169,8 +169,8 @@
>
>         set_all_kernel_options drivers/i2c
>
> -       make oldconfig || exit 1
> -
> +       ( yes | sed 's/y//' | make oldconfig ) || exit 1
> +
>         if [ "$CONFIG_LINUX_VERSION" =3D "2.4" ]; then
>                 make dep || exit 1
>         else
> -----------------------------------------------------------------------
> So, I mean all necessary parameters should be defined for clean 'make
> oldconfig'
> execution.
>
> 3. Review the list of software from up-to-date point of view.
>
> 4. Create test release and find volunteer to test it!
>
> --
> Serge
>
>
>
>
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D=
DEVDEV
> _______________________________________________
> Devil-linux-develop mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop
>



--=20
[]'s
Carlos H.

Hi Carlos,

Carlos H. - Uptime. Tecnologia da Informação wrote:
...
> 
> My name is Carlos and I use a customized devil-linux as my standard
> linux solution in my clients I would be glad to help developing the next
> ( 1.3) dl version.
> 
> I've been looking for information about the status of the track but
> couldn't find anything really usefull. Is there a to-do list? What are
> the top priorities?

 I'm a person, who have been trying to build 1.3 for the last time. There is my
to-do list:

1. All packages from default profile should be able to be compiled.
For the current cvs snapshot:

pwlib  -- fail
openh323gk  --fail ( depends on pwlib )
grub -- fail
lm_sensors -- fail
ndiswrapper -- fail
vmware -- fail

2. Modify scripts/config/linux-2.6/config_linux to be able execute 'make
prepare' without hack below:
-----------------------------------------------------------------------
--- scripts/prepare     2007-02-13 15:10:40.000000000 +0000
+++ scripts/prepare.mod 2007-02-09 12:56:17.000000000 +0000
@@ -169,8 +169,8 @@

        set_all_kernel_options drivers/i2c

-       make oldconfig || exit 1
-
+       ( yes | sed 's/y//' | make oldconfig ) || exit 1
+
        if [ "$CONFIG_LINUX_VERSION" = "2.4" ]; then
                make dep || exit 1
        else
-----------------------------------------------------------------------
So, I mean all necessary parameters should be defined for clean 'make oldconfig'
execution.

3. Review the list of software from up-to-date point of view.

4. Create test release and find volunteer to test it!

--
 Serge

Yes there are plans for 2.6, but no ETA.

> Our current development track (1.3) has support for Kernel 2.6, but we
> didn't work on it for a while. Most stuff works, but the Kernel needs to
> be updated and some packages don't compile yet.
>
> We would be more then happy to welcome new developers, who want to help us
> working on it
> The current DL developers unfortunately have only enough time to maintain
> the 1.2 (Kernel 2.4) track.
>

Hello Heiko,

My name is Carlos and I use a customized devil-linux as my standard linux
solution in my clients I would be glad to help developing the next (1.3) dl
version.

I've been looking for information about the status of the track but couldn't
find anything really usefull. Is there a to-do list? What are the top
priorities?

-- 
[]'s
Carlos H.

Hi Henning,

On Mon, January 29, 2007 04:33, Henning Stahlke wrote:
> I searched the mailing list archive for kernel 2.6 and linux 2.6 but I
> could not find anything. Are there any plans / ideas about devil-linux
> with linux kernel 2.6?

Yes there are plans for 2.6, but no ETA.
Our current development track (1.3) has support for Kernel 2.6, but we
didn't work on it for a while. Most stuff works, but the Kernel needs to
be updated and some packages don't compile yet.

We would be more then happy to welcome new developers, who want to help us
working on it.
The current DL developers unfortunately have only enough time to maintain
the 1.2 (Kernel 2.4) track.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Hi,

I searched the mailing list archive for kernel 2.6 and linux 2.6 but I could 
not find anything. Are there any plans / ideas about devil-linux with linux 
kernel 2.6?

Regards

-- 
Dipl.-Ing. Henning Stahlke
RWE Dea AG
IT-Infrastructures, Networks

Devil-Linux 1.2.12 is available for download !

Change highlights:

Kernel 2.4.34, security fixes, many package updates, new PERL modules, 
a few new packages, and more. See CHANGELOG for more details.
--

Regards
  Bruce Smith
  http://www.devil-linux.org

Can you try the Python X Library (contain xauth prog) to
http://sourceforge.net/projects/python-xlib ?

Alberto

+--------------------------+
|   Dott. Alberto Benati   |
|   System Administrator   |
|   Faculty of Economics   |
|  University of  Ferrara  |
| be...@ec... |
|  Tel: +39 0532 45 5012   |
+--------------------------+


---------- Original Message -----------
From: "Heiko Zuerker" <he...@zu...>
To: dev...@li...
Sent: Wed, 6 Dec 2006 19:13:50 -0600 (CST)
Subject: Re: [Devil-linux-develop] SSH X forwarding broken.

> On Wed, December 6, 2006 15:29, Bruce Smith wrote:
> > I need to ssh into my DL firewall, and then ssh into a machine on my
> > internal network with X11 forwarding turned on.  I turned on ForwardX11 in
> > the ssh config files, and it doesn't work.  Then I figured out the problem
> > is because the program 'xauth' doesn't exist on DL.
> >
> > So I copied xauth from my SuSE 10.1 desktop to /etc/bin/ (new dir), set
> > "XAuthLocation /etc/bin/xauth" in /etc/ssh/ssh*config files, copied all
> > the required libraries to /etc/lib/ (new dir), modified /etc/ld.so.conf,
> > ran ldconfig, and now ssh X11 forwarding works.  (but what a pain!)
> >
> > Now (you guessed it! :) I'm going to ask if we can add 'xauth' to DL.
> > The main problem I see is all the required X libraries:
> >
> >
> > bruce@suse10.1:~> ldd /usr/X11R6/bin/xauth
> > linux-gate.so.1 =>  (0xffffe000) libXau.so.6 => /usr/X11R6/lib/libXau.so.6
> > (0xb7f3a000)
> > libXmuu.so.1 => /usr/X11R6/lib/libXmuu.so.1 (0xb7f37000) libXext.so.6 =>
> > /usr/X11R6/lib/libXext.so.6 (0xb7f29000)
> > libX11.so.6 => /usr/X11R6/lib/libX11.so.6 (0xb7e32000) libc.so.6 =>
> > /lib/libc.so.6 (0xb7d11000)
> > libdl.so.2 => /lib/libdl.so.2 (0xb7d0d000) /lib/ld-linux.so.2 (0xb7f54000)
> >
> >
> > So, instead of adding 'xauth' the traditional way, is there any way we
> > can grab xauth and it's libraries from LFS and put them on the CD? I really
> > hate to add hours of compile time to completely compile x.org just to get
> > one little program.
> 
> There's no X in the LFS system.
> Maybe there's a replacement tool available for cases like this?
> 
> --
> 
> Regards
>   Heiko Zuerker
>   http://www.devil-linux.org
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to 
> share your opinions on IT & business topics through brief surveys -
>  and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Devil-linux-develop mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop
------- End of Original Message -------

On Wed, December 6, 2006 15:29, Bruce Smith wrote:
> I need to ssh into my DL firewall, and then ssh into a machine on my
> internal network with X11 forwarding turned on.  I turned on ForwardX11 in
> the ssh config files, and it doesn't work.  Then I figured out the problem
> is because the program 'xauth' doesn't exist on DL.
>
> So I copied xauth from my SuSE 10.1 desktop to /etc/bin/ (new dir), set
> "XAuthLocation /etc/bin/xauth" in /etc/ssh/ssh*config files, copied all
> the required libraries to /etc/lib/ (new dir), modified /etc/ld.so.conf,
> ran ldconfig, and now ssh X11 forwarding works.  (but what a pain!)
>
> Now (you guessed it! :) I'm going to ask if we can add 'xauth' to DL.
> The main problem I see is all the required X libraries:
>
>
> bruce@suse10.1:~> ldd /usr/X11R6/bin/xauth
> linux-gate.so.1 =>  (0xffffe000) libXau.so.6 => /usr/X11R6/lib/libXau.so.6
> (0xb7f3a000)
> libXmuu.so.1 => /usr/X11R6/lib/libXmuu.so.1 (0xb7f37000) libXext.so.6 =>
> /usr/X11R6/lib/libXext.so.6 (0xb7f29000)
> libX11.so.6 => /usr/X11R6/lib/libX11.so.6 (0xb7e32000) libc.so.6 =>
> /lib/libc.so.6 (0xb7d11000)
> libdl.so.2 => /lib/libdl.so.2 (0xb7d0d000) /lib/ld-linux.so.2 (0xb7f54000)
>
>
> So, instead of adding 'xauth' the traditional way, is there any way we
> can grab xauth and it's libraries from LFS and put them on the CD? I really
> hate to add hours of compile time to completely compile x.org just to get
> one little program.

There's no X in the LFS system.
Maybe there's a replacement tool available for cases like this?

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

I need to ssh into my DL firewall, and then ssh into a machine on my
internal network with X11 forwarding turned on.  I turned on ForwardX11
in the ssh config files, and it doesn't work.  Then I figured out the
problem is because the program 'xauth' doesn't exist on DL.

So I copied xauth from my SuSE 10.1 desktop to /etc/bin/ (new dir), set
"XAuthLocation /etc/bin/xauth" in /etc/ssh/ssh*config files, copied all
the required libraries to /etc/lib/ (new dir), modified /etc/ld.so.conf,
ran ldconfig, and now ssh X11 forwarding works.  (but what a pain!)

Now (you guessed it! :) I'm going to ask if we can add 'xauth' to DL.
The main problem I see is all the required X libraries:

bruce@suse10.1:~> ldd /usr/X11R6/bin/xauth
        linux-gate.so.1 =>  (0xffffe000)
        libXau.so.6 => /usr/X11R6/lib/libXau.so.6 (0xb7f3a000)
        libXmuu.so.1 => /usr/X11R6/lib/libXmuu.so.1 (0xb7f37000)
        libXext.so.6 => /usr/X11R6/lib/libXext.so.6 (0xb7f29000)
        libX11.so.6 => /usr/X11R6/lib/libX11.so.6 (0xb7e32000)
        libc.so.6 => /lib/libc.so.6 (0xb7d11000)
        libdl.so.2 => /lib/libdl.so.2 (0xb7d0d000)
        /lib/ld-linux.so.2 (0xb7f54000)

So, instead of adding 'xauth' the traditional way, is there any way we
can grab xauth and it's libraries from LFS and put them on the CD?
I really hate to add hours of compile time to completely compile x.org
just to get one little program.

 - BS

On Mon, November 20, 2006 01:25, Endre SZABO wrote:
> hey there!
>
> i run 30+ openvpn processes on a devil box, and i wanted to identify them
> in the syslog, so i updated it's init script as it's in gentoo:
>
> - ${DAEMON} --daemon --config $c --cd /etc/openvpn
> + ${DAEMON} --daemon `basename $c .conf` --config $c --cd /etc/openvpn
>
>
> # grep Completed fw01-bud/2006-11-19/daemon|grep -i '23:17'

I added the change to CVS.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

hey there!

i run 30+ openvpn processes on a devil box, and i wanted to identify them in 
the syslog, so i updated it's init script as it's in gentoo:

- ${DAEMON} --daemon --config $c --cd /etc/openvpn
+ ${DAEMON} --daemon `basename $c .conf` --config $c --cd /etc/openvpn

# grep Completed fw01-bud/2006-11-19/daemon|grep -i '23:17'

---->8----
23:17:37 notice nagylak[6873]: Initialization Sequence Completed
23:17:46 notice szabolcs[7033]: Initialization Sequence Completed
23:17:49 notice tolna[7097]: Initialization Sequence Completed
23:17:51 notice hajdu[6777]: Initialization Sequence Completed
23:17:53 notice szolnok[7065]: Initialization Sequence Completed
23:17:54 notice borsod[6649]: Initialization Sequence Completed
23:17:55 notice komarom[6841]: Initialization Sequence Completed
23:17:56 notice roszke[6969]: Initialization Sequence Completed
23:17:56 notice zala[7193]: Initialization Sequence Completed
23:17:58 notice gyor[6745]: Initialization Sequence Completed
23:17:59 notice pest[6937]: Initialization Sequence Completed
23:17:59 notice vas[7129]: Initialization Sequence Completed
23:17:59 notice veszprem[7161]: Initialization Sequence Completed
---->8----

best regards,

endre

Hi all!

Documentation for getting access to cvs on sf.net can be found by clicking onto

http://www.devil-linux.org/documentation/1.2.x/ch03s01.html

The example lines 

* cvs -d:pserver:ano...@cv...:/cvsroot/devil-linux login
* cvs -z3 -d:pserver:ano...@cv...:/cvsroot/devil-linux co build
* cvs -z3 -d:pserver:ano...@cv...:/cvsroot/devil-linux co -r rel-1-2-patches build

The cvs host is wrong, it should be devil-linux.cvs.sourceforge.net
eg:
* cvs -d:pserver:ano...@de...:/cvsroot/devil-linux login

Gruesse
Michael
-- 
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! 
Ideal für Modem und ISDN: http://www.gmx.net/de/go/smartsurfer

Devil-Linux 1.2.11 is available for download !

Change highlights:

Kernel 2.4.33.3, many program updates, better NFS and USB card reader
support, updated all perl modules and added all modules required by
spamassassin, ocr plugins can now be used with spamassassin, corrected the
location of varios binaries and many more other changes (see the changelog
for details)

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Thank you for your feedback Victor.

I would appreciate if you could respond to your post on full-disclosure
and confirm that there was no problem with Devil-Linux. We need to limit
the damage this post has already caused.

I forwarded your email to our mailinglist, since non-subscriber emails get
deleted.

Thanks
Heiko

---------------------------- Original Message ----------------------------
Subject: Re: false accusations
From:    "Victor Grishchenko" <gr...@pl...>
Date:    Fri, October 20, 2006 04:57
To:      "Heiko Zuerker" <he...@zu...>
Cc:      dev...@li...
         dev...@li...
         dev...@li...
--------------------------------------------------------------------------

Hi Heiko.

On 19.10.2006, at 23:02, Heiko Zuerker wrote:
> I am the project leader of Devil-Linux.
> First of all our website is up and was not down at any time.

It was a coincidence; our proxy cached zero-sized reply for some
unknown reason.

> I don't know how this bot got on your system, but what you're
> writing does
> not make any sense.
> 1. There's no bot included in the DL sources

Yes, sorry. We had an intrusion.

> 2. I can never have been compiled on a running DL system, because
> there
> are no compilers included.

Indeed. The intruder downloaded a tar both with binaries and sources.
We mistakenly decided that he compiled it right on the site.

> 3. It can only have been introduced (compiled from source as you
> say) if
> the machine you compiled DL on, was compromised.

Unlikely. The intruder's bash_history from the DL host is attached.

> 4. The location you specify (/shm) is a ramdisk. So it must be
> copied onto
> the system after it boots up. This can only be the case if you have
> the
> system wide open and somebody can log in easily.

Yes. Most probably he logged in using public key login from another
intranet host. We found a DMZ host which is the most probable initial
point of the intrusion. Also, we've "seized" a ton of haxor tools.
The intrusion chain was non-obvious, so we mistakenly suspected DL.
The mail was sent to full-disclosure mostly because the DL site
appeared "down".

There are no problems with DevilLinux distro.

My excuses!


						Victor



-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

I can confirm that it's not on any of my 1.2.10 systems.

There is no /shm/ssh* directory or file on my systems.

There is no executable file named "TODO" or "todo" on my CD or in RAM.

There is no executable file in my compiled source code tree named "TODO"
or "todo" on my build system.  (the only files named "todo/TODO" are
text-only documentation for some packages, and NOT executable)

There is no running process named "todo/TODO" on my 1.2.10 boxes.  
There are no processes running that I can't account for either.

The EnergyMech IRC bot (www.energymech.net) is not included in any
version of Devil-Linux.

The guy either got cracked somehow, or perhaps this is just FUD, since
the full-disclosure mailing list is unmoderated.

 - BS


> Victor Grishchenko <gritzko <at> plotinka.ru> writes:
> > While building and testing a customized version of DevilLinux router
> > distro I found an IRC bot onboard. As far as I understood, it was
> > EnergyMech compiled from source right there plus some executable named
> > "TODO" (for camouflage purposes). The stuff unfolds at /shm/sshd/ and
> > runs somehow. Sadly, I had no time for detailed investigation. It leaves
> > an overall impression of script kiddie's work.
> > Last days DevilLinux website seems to be dead.
> 
> I am the project leader of Devil-Linux.
> First of all our website is up and was not down at any time.
> 
> I don't know how this bot got on your system, but what you're writing does
> not make any sense.
> 1. There's no bot included in the DL sources
> 2. I can never have been compiled on a running DL system, because there
> are no compilers included.
> 3. It can only have been introduced (compiled from source as you say) if
> the machine you compiled DL on, was compromised.
> 4. The location you specify (/shm) is a ramdisk. So it must be copied onto
> the system after it boots up. This can only be the case if you have the
> system wide open and somebody can log in easily.
> 5. I verified the official 1.2.10 release and there's no bot to be seen.
> 
> So it seems the problem does not like with Devil-Linux, but rather with
> your own system.
> Please stop spreading accusations like this, especially without properly
> analyzing the issue first.
> 
> Regards
>   Heiko Zuerker
>   http://www.devil-linux.org

Hi Victor,

Victor Grishchenko <gritzko <at> plotinka.ru> writes:
> While building and testing a customized version of DevilLinux router
> distro I found an IRC bot onboard. As far as I understood, it was
> EnergyMech compiled from source right there plus some executable named
> "TODO" (for camouflage purposes). The stuff unfolds at /shm/sshd/ and
> runs somehow. Sadly, I had no time for detailed investigation. It leaves
> an overall impression of script kiddie's work.
> Last days DevilLinux website seems to be dead.

I am the project leader of Devil-Linux.
First of all our website is up and was not down at any time.

I don't know how this bot got on your system, but what you're writing does
not make any sense.
1. There's no bot included in the DL sources
2. I can never have been compiled on a running DL system, because there
are no compilers included.
3. It can only have been introduced (compiled from source as you say) if
the machine you compiled DL on, was compromised.
4. The location you specify (/shm) is a ramdisk. So it must be copied onto
the system after it boots up. This can only be the case if you have the
system wide open and somebody can log in easily.
5. I verified the official 1.2.10 release and there's no bot to be seen.

So it seems the problem does not like with Devil-Linux, but rather with
your own system.
Please stop spreading accusations like this, especially without properly
analyzing the issue first.

Regards
  Heiko Zuerker
  http://www.devil-linux.org

> Try this link: http://hostap.epitest.fi/

One was up to day, the other was almost (and is now).

And never mind about openssh.  I see you already beat me to it.  :-)

 - BS

On Fri, October 6, 2006 09:24, Bruce Smith wrote:
>>>> Double check the hostapd one, it has related packages (from same
>>>> website, I think drivers and stuff) as far as I remember. Please
>>>> update them too.
>>>
>>> I'm not seeing them.
>>>
>>>
>>>
>>> http://hostap.epitest.fi/hostapd/
>>>
>>
>> I must be going senile....
>>
>
> Are you thinking of these packages?

Ahhhhh

> src/hostap-driver-0.1.3.tar.gz src/hostap-utils-0.1.3.tar.gz
>
> I'm not sure where to download them, if they are.

Try this link: http://hostap.epitest.fi/

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

> >> Double check the hostapd one, it has related packages (from same
> >> website, I think drivers and stuff) as far as I remember.
> >> Please update them too.
> >
> > I'm not seeing them.
> >
> >
> > http://hostap.epitest.fi/hostapd/
> 
> I must be going senile....

Are you thinking of these packages?

src/hostap-driver-0.1.3.tar.gz  
src/hostap-utils-0.1.3.tar.gz

I'm not sure where to download them, if they are.

 - BS

On Fri, October 6, 2006 09:11, Bruce Smith wrote:
>>> OK, I gave OpenSSL 0.9.8 a try.
>>>
>>>
>>> A few packages aborted, so I upgraded them one by one to their latest
>>>  versions, and now everything compiles.  Packages that I updated are:
>>>
>>>
>>> openssl-0.9.8d.tar.gz wvdial-1.56.tar.gz wvstreams-4.2.2.tar.gz
>>> hostapd-0.4.9.tar.gz perl-ext/Crypt-OpenSSL-RSA-0.23.tar.gz
>>
>> Double check the hostapd one, it has related packages (from same
>> website, I think drivers and stuff) as far as I remember.
>> Please update them too.
>>
>
> I'm not seeing them.
>
>
> http://hostap.epitest.fi/hostapd/

I must be going senile....

>>> Shall I upload/commit the changes?
>>>
>>
>> Sure, but make sure you dont' overwrite what I did yesterday ;-)
>>
>
> I am going to overwrite openssh to the version that came out today.  :-)

If you have to. ;-)

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org