Re: [sentinix-list] Announcement regarding upcoming release ofSENTINIX

That should be excellent..

Are you going to include usermin aswell, one small request , please remove
all the non-used modules.


----- Original Message ----- 
From: "Hugo Teso Torío" <HugoT-/pWY+TzeTZ/MIokLUahv6wC/[email protected]>
To: "The SENTINIX Mailing List" <[email protected]>
Sent: Sunday, February 01, 2004 3:18 PM
Subject: Re: [sentinix-list] Announcement regarding upcoming release
ofSENTINIX


> Hi,
>
> I think this question is directly related to me, because I'm adapting
Webmin
> to Sentinix. I'm working on it for one month, but with the new year at my
> company everybody has lots of things to do and I have less time for
working
> on Webmin. Actulay I have modified the install script adding new files for
a
> best adaptation with sentinix and now I'm working on the build script;
> hopfully I will finish it sooner.
>
> Any aditional help will be wellcome.
>
> Best regards
>
> Hugo Teso Torío
> MkZ Soluciones de Ingeniería
> HugoT-/pWY+TzeTZ/MIokLUahv6wC/[email protected]
>
> ----- Original Message ----- 
> From: "SpaceMan007ultra" <[email protected]>
> To: "The SENTINIX Mailing List" <[email protected]>
> Sent: Sunday, February 01, 2004 11:34 AM
> Subject: Re: [sentinix-list] Announcement regarding upcoming release
> ofSENTINIX
>
>
> > Hi
> >
> > I was wondering why you have not added webmin to Sentinix ?
> >
> > Cheers
> > Adrian Kriel
> >
> > ----- Original Message ----- 
> > From: "Michel Blomgren" <[email protected]>
> > To: <[email protected]>
> > Sent: Thursday, January 29, 2004 2:47 AM
> > Subject: [sentinix-list] Announcement regarding upcoming release of
> SENTINIX
> >
> >
> > Hi list!
> >
> > I just wanted to tell everyone what I (and Chris Hammond and Xavier) am
> > working on right now.
> >
> > Major changes in SENTINIX (probably v 0.80):
> >
> > ##KERNELS##
> >
> > Linux 2.4.21 will still be used, but the do_brk and the do_mremap bugs
> have
> > been patched out.  I have experienced the best result with the 2.4.21
> > openMosix kernel, that's why I'll stick with it.  I _might_ try and add
> > 2.6.0
> > (but patched against the do_mremap bug) as the "plain" and "smp" kernel.
> The
> > kernel headers would however be 2.4.21.
> >
> > I will add more kernels in the future, for example openMosix 2.4.22. But
> > kernel compilation does take time and I need to get the system working
> > before
> > increasing the compilation time. It currently takes about 5 hours to
> compile
> > everything (source tree + initrd sys + kernels) on my AMD XP 1800+ (w/
> > ATA-100 disks).
> >
> > ##THE COMPILER##
> >
> > gcc 3.3.2 instead of 2.95.3, although 2.95.3 is still in there in order
to
> > compile the Linux kernels. Only C and C++ are compiled in gcc (perhaps
> I'll
> > add objc too). The libc library is glibc 2.3.2.
> >
> > ##THE INITRD (installation CD)##
> >
> > The initrd rootfs has been refurnished. uClibc has been thrown out and
> > replaced with the approach of simply copying in selected libs from the
> /lib
> > directory and compiling all apps for the installation CD dynamically
> linked
> > against the regular (i.e. the same) libs under /lib.  A couple of bugs
> have
> > also been resolved, boot-loadsize is now 4, not 32 and setup.manualpart
is
> > using another approach when calling sfdisk.
> >
> > ##WEBINTERFACE##
> >
> > Next version looks fancier, but most importantly, it's behind strong
> TLS/SSL
> > client authentication (Mozilla supports AES-256 :o). A user would have
to
> > install a PKCS#12 key file in his/her browser in order to access it
> > (basically PKI). The PKCS (.p12) key is not supported by all browsers
> (even
> > if they say so), this might be a problem some users may experience. It
> does
> > work flawlessly with a recent Mozilla (+ Mozilla Firebird) and MSIE.
> >
> > ##SECURITY##
> >
> > Well, we're still lacking a local IDS (yes, I do know about samhain and
> > tripwire), but Xavier is doing a great job working on what's going to be
> > SENTINIX's own integrity app.  It'll include file hashing+checking and
> > rootkit detection.  I started making what was going to be a syscall and
> > anti-LKM-rootkit sec module or a kernel patch, but then I read up on LSM
> > (Linux 2.6.0) and now I'm wondering if that's not the way we're going to
> go.
> >
> > All network services or apps supporting network services (such as
openssh,
> > openssl, apache, php, mod_ssl, samba, sendmail, imapd, pure-ftpd, etc.)
> will
> > be compiled with the stack-smashing protector patch for gcc by Hiroaki
> Etoh
> > at IBM http://www.research.ibm.com/trl/projects/security/ssp/.
Currently,
> > these apps have been successfully compiled with it:
> >
> > openldap
> > apache
> > mod_ssl
> > php
> > openssl
> > openssh
> > sendmail
> > pine (imapd, ipop2d, ipop3d, pico, pilot, pine)
> > lynx
> > links
> > cvs
> > bind
> > dhcpcd
> > dhcp (dhcpd)
> > nessus
> > samba
> > nfs-utils
> > net-snmp
> > libol
> > syslog-ng
> > ntp
> > portmap
> > ntop
> >
> > Buffer overflows... be gone!!!  8^)
> >
> > I'm working on putting all network services behind TLS/SSL (sendmail
> > STARTTLS+AUTH {cyrus-sasl}), imapd, ipop3d, etc.). When e.g. sendmail
and
> > imapd is started (from an rc.d script), it'll automatically check if
> > certificates and keys exist, if not, the rc.d script will auto-generate
> > them,
> > so "openssl-illiterates" will get a by-default-secured sendmail, imapd,
> etc.
> >
> > Also, I'll add some personal network sec scripts of mine that I've
patched
> > together from various sources. One will enforce some networking security
> > while a couple of others will be iptables templates for more advanced
> > firewalling. When I wanted to enforce my router's fw rules, I noticed
that
> > it
> > can take many hours to write Netfilter rules (with iptables) that do
what
> > you
> > want. I wanted logging of spoofs and null+xmas+fin scans among other
> things.
> > I'll include that script too.
> >
> > ##CVS##
> >
> > The "Source Tree" is now in CVS (all tarballs are available through
> rsync).
> > Take a look at http://developer.berlios.de/projects/sentinix/ (you'll
find
> > more info in the README.CVS file
> >
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/sentinix/sentinix/README.CVS ).
> >
> > I'm testing Subversion, I really need changesets, perhaps it'll handle
big
> > tarballs better than CVS too. Is anyone here familiar with subversion
and
> > willing to give me some hints???
> >
> > ##BINARY PACKAGES##
> >
> > As you might have heard, SENTINIX is going modular. All apps will be
> > packaged
> > into packages (.sx.tgz) containing binaries.  These packages are being
(or
> > are about to be -- I'm still working on the generator) auto-generated
> during
> > the compilation process of the Source Tree.  Once done, an admin is
going
> to
> > be able to upgrade/remove packages using a simple command line tool
> (sxpkg).
> > I'll also be working on making sentinix installable from http, ftp and
> sftp
> > (although, this feature will not be in the next version of sentinix).
> >
> > ##PACKAGE LIST##
> >
> > Hang on, here's a list of all the packages in the current (my private)
> > Source
> > Tree, generated from "make versions" under the /usr/src directory...
> >
> > linux-includefiles-2.4.21-i486-1
> > man-pages-1.60-i486-1
> > glibc-2.3.2-i486-1
> > binutils-2.14-i486-1
> > gcc-3.3.2-i486-1
> > coreutils-5.0-i486-1
> > zlib-1.1.4-i486-1
> > findutils-4.1.20-i486-1
> > gawk-3.1.3-i486-1
> > ncurses-5.3-i486-1
> > vim-6.2-i486-1
> > libtermcap-1.3.1-i486-1
> > m4-1.4-i486-1
> > bison-1.875-i486-1
> > less-381-i486-1
> > groff-1.19-i486-1
> > sed-4.0.8-i486-1
> > flex-2.5.4a-i486-1
> > gettext-0.12.1-i486-1
> > tcpip-slackware-9.1-i486-1
> > gdbm-1.8.3-i486-1
> > perl-5.8.2-i486-1
> > whois-4.6.9-i486-1
> > texinfo-4.6-i486-1
> > autoconf-2.57-i486-1
> > automake-1.7.8-1.4-p6-i486-1
> > bash-2.05b-i486-1
> > file-4.06-i486-1
> > libtool-1.5-i486-1
> > bin86-0.16.14-i486-1
> > bzip2-1.0.2-i486-1
> > diffutils-2.8.1-i486-1
> > ed-0.2-i486-1
> > kbd-1.08-i486-1
> > hdparm-5.4-i486-1
> > e2fsprogs-1.34-i486-1
> > reiserfsprogs-3.6.11-i486-1
> > grep-2.5.1-i486-1
> > gzip-1.3.5-i486-1
> > which-2.16-i486-1
> > man-1.5m2-i486-1
> > nasm-0.98.38-i486-1
> > lilo-22.5.8-i486-1
> > make-3.80-i486-1
> > modutils-2.4.25-i486-1
> > patch-2.5.4-i486-1
> > procinfo-18-i486-1
> > procps-3.1.14-i486-1
> > psmisc-21.3-i486-1
> > shadow-4.0.3-i486-1
> > sysklogd-1.4.1-i486-1
> > sysvinit-2.85-i486-1
> > tar-1.13.25-i486-1
> > util-linux-2.12-i486-1
> > gcc-2.95.3-i486-1
> > linuxmandocs-2.4.21-i486-1
> > calcpercent-0.1-i486-1
> > installwatch-0.6.3-i486-1
> > gdb-6.0-i486-1
> > strace-4.5.1-i486-1
> > ksymoops-2.4.9-i486-1
> > db4-4.1.25-i486-1
> > mailx-8.1.1-i486-1
> > traceroute-1.4a12-i486-1
> > popt-1.7-i486-1
> > logrotate-3.6.3-i486-1
> > nano-1.2.2-i486-1
> > iptables-1.2.9-i486-1
> > libpng-1.2.5-i486-1
> > libjpeg-6b-i486-1
> > freetype-2.1.5-i486-1
> > glib-1.2.10-i486-1
> > minicom-2.1-i486-1
> > mm-1.3.0-i486-1
> > libpcap-0.7.2-i486-1
> > tcpdump-3.7.2-i486-1
> > readline-4.3-i486-1
> > openssl-0.9.7c-i486-1
> > wget-1.9-i486-1
> > curl-7.10.8-i486-1
> > nail-10.5-i486-1
> > lynx-2.8.4-i486-1
> > gmp-4.1.2-i486-1
> > mysql-4.0.17-i486-1
> > gd-2.0.15-i486-1
> > apache-1.3.29-i486-1
> > portmap-5-i486-1
> > cyrus-sasl-2.1.15-i486-1
> > openldap-2.1.23-i486-1
> > samba-3.0.0-i486-1
> > eject-2.0.13-i486-1
> > cron-2.3.3-i486-1
> > dhcp-3.0pl2-i486-1
> > dhcpcd-1.3.22-pl4-i486-1
> > parted-1.6.6-i486-1
> > debianutils-1.16-i486-1
> > openssh-3.7.1p2-i486-1
> > bind-9.2.3-i486-1
> > bc-1.06-i486-1
> > ntp-4.2.0-i486-1
> > biew-550-i486-1
> > gpm-1.20.1-i486-1
> > mc-4.6.0-i486-1
> > pure-ftpd-1.0.17a-i486-1
> > libnet-1.0.2a-i486-1
> > libnids-1.18-i486-1
> > dsniff-2.3-i486-1
> > nmap-3.48-i486-1
> > netwox-5.7.0-i486-1
> > scapy-0.9.16-i486-1
> > netcat-110-i486-1
> > lftp-2.6.8-i486-1
> > raidtools-1.00.3-i486-1
> > zoneinfo-sentinix-linux-i486-1
> > links-2.1pre14-i486-1
> > slocate-2.7-i486-1
> > cdrtools-2.00.3-i486-1
> > infozip-2.3-5.30-i486-1
> > usleep-unknown-i486-1
> > sendmail-8.12.10-i486-1
> > procmail-3.22-i486-1
> > oggvorbis-1.0-i486-1
> > mad-0.15.0b-i486-1
> > sox-12.17.4-i486-1
> > mpg321-0.2.10-i486-1
> > nfs-utils-1.0.6-i486-1
> > bchunk-1.1.1-i486-1
> > gcal-3.01-i486-1
> > mhash-0.8.18-i486-1
> > http_fetcher-1.0.3-i486-1
> > fetch-1.0-i486-1
> > fping-2.4b2_to-ipv6-i486-1
> > qstat-25c-i486-1
> > radiusclient-0.3.2-i486-1
> > net-snmp-5.0.9-i486-1
> > nessus-2.0.9-i486-1
> > nagios-1.1-i486-1
> > snort+acid-2.0.6-i486-1
> > bmon-1.2.1-i486-1
> > replimenu-0.9.1-i486-1
> > dialog-0.7-i486-1
> > openmosix-tools-0.3.4-i486-1
> > rexima-1.4-i486-1
> > cdparanoia-III-alpha9.8-i486-1
> > cdp-0.33-13-i486-1
> > gnupg-1.2.3-i486-1
> > sharkwrapper-0.3-i486-1
> > python-2.3.2-i486-1
> > sysstat-5.0.0-i486-1
> > fblogo-0.5.2-i486-1
> > clamav-0.65-i486-1
> > sentinix-perlmodules-1.0-i486-1
> > spamassassin-2.60-i486-1
> > mailscanner-4.25-14-i486-1
> > pine-4.58-i486-1
> > ngrep-1.41-i486-1
> > ansirem-NA-i486-1
> > announceuptime-0.1-i486-1
> > ipaudit-0.95-i486-1
> > tcptrace-6.6.0-i486-1
> > lsof-4.69-i486-1
> > makedev-2.3.1-58-i486-1
> > ipfm-0.11.5-i486-1
> > iptraf-2.7.0-i486-1
> > ettercap-0.6.b-i486-1
> > rsync-2.6.0-i486-1
> > rcs-5.7-i486-1
> > cvs-1.11.10-i486-1
> > libol-0.3.11-i486-1
> > syslog-ng-1.6.1-i486-1
> > screen-3.9.9-i486-1
> > miscrequired-1.0-i486-1
> > sentinix-rc.d-1.0-i486-1
> > sentinix-setuputility-1.0-i486-1
> > cgitoolkit-0.1-i486-1
> > rrdtool-1.0.45-i486-1
> > ntop-2.2c-i486-1
> > cacti-0.8.4-i486-1
> > snortcenter-1.0beta-i486-1
> > bandwidthd-1.2.0b-i486-1
> > sentinix-mysqldatabases-1.0-i486-1
> >
> > Packages will be named something like e.g. rrdtool-1.0.45-i486-1.sx.tgz.
> >
> > ##FINAL NOTE##
> >
> > If anyone is interested in helping out with something listed above, let
me
> > know!
> >
> > The best way to keep in close contact with me is to join the #sentinix
> > channel
> > at server irc.sentinix.org, my nick is "replikan".  I have strange
> uptimes,
> > so people on the american continent will probably find me there during
and
> > after their working hours. ;)
> >
> > That's it folks... for now!
> > Stay tuned!
> >
> > Michel
> >
> > _______________________________________________
> > SENTINIX mailing list
> > [email protected]
> > http://elevenprospect.com/mailman/listinfo/sentinix
> >
> >
> >
> > _______________________________________________
> > SENTINIX mailing list
> > [email protected]
> > http://elevenprospect.com/mailman/listinfo/sentinix
> >
>
> _______________________________________________
> SENTINIX mailing list
> [email protected]
> http://elevenprospect.com/mailman/listinfo/sentinix
>
>