LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-15-2011, 12:27 PM   #31
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Rep: Reputation: 11

That's what I'm afraid of, and I tried to download it but it said the service was down which is why I'm wondering if it was safe of me to even go there and try either via wget or by internet browser.
 
Old 09-16-2011, 02:59 AM   #32
hua
Member
 
Registered: Oct 2006
Location: Slovak Republic
Distribution: Slackware 14.2, current
Posts: 461

Rep: Reputation: 78
Since I read about this security breach I examine the security level of my desktop. Actually I downloaded and compiled the latest kernel from kernel.org at 31.Aug.
Because its only my desktop with no important data on it (instead of reinstall) I started to read my logs from the network logging system.
Even if my kernel should be somehow tampered (with some hidden processes) I cannot find any suspicious traffic on network level.
So maybe this can show that the kernel source was not Tampered. (?)

I mean any malicious (modified) part of the kernel which should serve to take control or use my system somehow requires network activity.

Last edited by hua; 09-16-2011 at 03:10 AM.
 
Old 09-17-2011, 06:31 AM   #33
ButterflyMelissa
Senior Member
 
Registered: Nov 2007
Location: Somewhere on my hard drive...
Distribution: Manjaro
Posts: 2,766
Blog Entries: 23

Rep: Reputation: 411Reputation: 411Reputation: 411Reputation: 411Reputation: 411
Panic is not the option, here.

Again, Open Source will prevail...because it's "all over the place" so a single attack will not make more that a (serious) dent.

By the way, it shows where we stand against the "other" one...if there is an attack, we dont cover up and pretend our noses bleed...

As a future note: let's all meditate on how to strengthen the "system" and what with (software, package signing, hashes, what have you)...and flush the ideas around to let them mature...

Hey, I just got wind of this because I needed to recompile a kernel...so...

Thor
 
Old 09-17-2011, 11:22 AM   #34
H_TeXMeX_H
LQ Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
git seems pretty resilient, so that may be the safe way to get the kernel source in the future. As can be seen from this example the local checksums weren't helpful.
 
1 members found this post helpful.
Old 09-17-2011, 11:26 AM   #35
ButterflyMelissa
Senior Member
 
Registered: Nov 2007
Location: Somewhere on my hard drive...
Distribution: Manjaro
Posts: 2,766
Blog Entries: 23

Rep: Reputation: 411Reputation: 411Reputation: 411Reputation: 411Reputation: 411
Quote:
git seems pretty resilient
Thanks, let's see if I can use it...

Edit...ehrm...any manuals out there? I've heared/read about it, but never considered it... (noob as I am)

Edit 2 : IXquick was my friend...sorry for my earlier panic attack

Last edited by ButterflyMelissa; 09-17-2011 at 11:39 AM.
 
Old 09-17-2011, 01:38 PM   #36
H_TeXMeX_H
LQ Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
There is a 'man git'. Usually you'll be using 'git clone' and 'git pull'.
 
Old 09-17-2011, 01:52 PM   #37
ButterflyMelissa
Senior Member
 
Registered: Nov 2007
Location: Somewhere on my hard drive...
Distribution: Manjaro
Posts: 2,766
Blog Entries: 23

Rep: Reputation: 411Reputation: 411Reputation: 411Reputation: 411Reputation: 411
Thanks...

man, it gives me a creepy feeling...let's hope the stuff is back on-line soon...
 
Old 09-17-2011, 03:19 PM   #38
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Linux Security is a forum that deals with facts, not fiction. Conjecture, giving voice to vague ideas just don't belong. Please keep this thread factual and on topic.
 
Old 09-17-2011, 03:22 PM   #39
ButterflyMelissa
Senior Member
 
Registered: Nov 2007
Location: Somewhere on my hard drive...
Distribution: Manjaro
Posts: 2,766
Blog Entries: 23

Rep: Reputation: 411Reputation: 411Reputation: 411Reputation: 411Reputation: 411
Gottit...sorry. Straightening up now...
 
Old 09-26-2011, 03:26 AM   #40
ButterflyMelissa
Senior Member
 
Registered: Nov 2007
Location: Somewhere on my hard drive...
Distribution: Manjaro
Posts: 2,766
Blog Entries: 23

Rep: Reputation: 411Reputation: 411Reputation: 411Reputation: 411Reputation: 411
One fact-question (no speculations):

Does anyone know when kernel.org and Linux.com will be back? Or, has the output been moved elsewhere and I'm not (yet) aware of it.

Sorry for a doofy question...

Thanks

Thor
 
Old 09-26-2011, 04:46 AM   #41
Nylex
LQ Addict
 
Registered: Jul 2003
Location: London, UK
Distribution: Slackware
Posts: 7,464

Rep: Reputation: Disabled
Quote:
Originally Posted by Thor_2.0 View Post
One fact-question (no speculations):

Does anyone know when kernel.org and Linux.com will be back? Or, has the output been moved elsewhere and I'm not (yet) aware of it.
This is relevant.
 
2 members found this post helpful.
Old 09-26-2011, 05:11 AM   #42
ButterflyMelissa
Senior Member
 
Registered: Nov 2007
Location: Somewhere on my hard drive...
Distribution: Manjaro
Posts: 2,766
Blog Entries: 23

Rep: Reputation: 411Reputation: 411Reputation: 411Reputation: 411Reputation: 411
Thanks Nylex
 
Old 09-26-2011, 06:48 AM   #43
andrewthomas
Senior Member
 
Registered: May 2010
Location: Chicago Metro
Distribution: Arch, Gentoo, Slackware
Posts: 1,690

Rep: Reputation: 312Reputation: 312Reputation: 312Reputation: 312
For those looking to update from Linus Torvald's kernel tree it is on github now.

https://github.com/mirrors/linux


https://github.com/mirrors/linux.git

Read Linus' message

https://lkml.org/lkml/2011/9/4/92

and substitute the above for

the replaced:
https://github.com/torvalds/linux.git

If you already have a cloned tree you can change your remote with:

git remote set-url origin https://github.com/mirrors/linux.git
 
2 members found this post helpful.
Old 10-06-2011, 10:17 AM   #44
BlackRider
Member
 
Registered: Aug 2011
Posts: 295

Rep: Reputation: 101Reputation: 101
The kernel site is online again.

www.kernel.org
 
1 members found this post helpful.
Old 10-10-2011, 03:49 PM   #45
Konphine
Member
 
Registered: Jul 2011
Location: Phoenix, New York
Distribution: Slackware 13.37
Posts: 376

Rep: Reputation: 11
The site is back up but it's not possible to download anything right now.
 
1 members found this post helpful.
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Yet another thread about a security breach Fredde87 Linux - Security 19 10-16-2009 08:12 AM
[SOLVED] possible security breach johnh10000 Linux - Security 18 10-13-2009 11:23 AM
Breach in Sendmail Security? bper Linux - Security 2 08-02-2005 05:40 PM
[Security Questions] Last Login, how good is this feature for security breach info? t3gah Linux - Security 2 06-14-2005 01:02 AM
Security breach? lhoff Linux - Security 5 02-15-2002 01:33 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:01 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration