TSL-2004-0016 - multi

--------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2004-0016

Package name:      xinetd, dev, filesystem
Summary:           multiple bugs
Date:              2004-03-30
Affected versions: Trustix 2.0, 2.1

--------------------------------------------------------------------------
Package description:
  Xinetd:
  Xinetd is a secure replacement for inetd, the Internet services
  daemon. Xinetd provides access control for all services based on the
  address of the remote host and/or on time of access and can prevent
  denial-of-access attacks. Xinetd provides extensive logging, has no
  limit on the number of server arguments, and lets you bind specific
  services to specific IP addresses on your host machine. Each service
  has its own specific configuration file for Xinetd; the files are
  located in the /etc/xinetd.d directory.

  dev:
  The Trustix operating system uses file system entries to represent
  devices (CD-ROMs, floppy drives, etc.) attached to the machine. All of
  these entries are in the /dev tree (although they don't have to be).
  This package contains the most commonly used /dev entries.

  filesystem:
  The filesystem package is one of the basic packages that is installed on
  a Trustix Secure Linux system.  Filesystem  contains the basic directory
  layout for a Linux operating system, including the correct permissions
  for the directories.

  
Problem description:

  Xinetd:
  Included the directory /etc/xinetd.d, but did not own it in the
  rpm database.  This made dependencies on /etc/xinetd.d fail.

  dev:
  Several device nodes were owned by the wrong group.

  filesystem:
  /root was group readable for group root.


Action:
  We recommend that all systems with this package installed be upgraded.
  Please note that if you do not need the functionality provided by this
  package, you may want to remove it from your system.


Location:
  All Trustix updates are available from
  <URI:http://http.trustix.org/pub/trustix/updates/>
  <URI:ftp://ftp.trustix.org/pub/trustix/updates/>


About Trustix Secure Linux:
  Trustix Secure Linux is a small Linux distribution for servers. With focus
  on security and stability, the system is painlessly kept safe and up to
  date from day one using swup, the automated software updater.


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Public testing:
  Most updates for Trustix are made available for public testing some time
  before release.
  If you want to contribute by testing the various packages in the
  testing tree, please feel free to share your findings on the
  tsl-discuss mailinglist.
  The testing tree is located at
  <URI:http://tsldev.trustix.org/horizon/>

  You may also use swup for public testing of updates:
  
  site {
      class = 0
      location = "http://tsldev.trustix.org/horizon/rdfs/latest.rdf"
      regexp = ".*"
  }
  

Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.org/support/>


Verification:
  This advisory along with all Trustix packages are signed with the
  TSL sign key.
  This key is available from:
  <URI:http://www.trustix.org/TSL-SIGN-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.org/errata/trustix-2.0/> and
  <URI:http://www.trustix.org/errata/trustix-2.1/>
  or directly at
  <URI:http://www.trustix.org/errata/misc/2004/TSL-2004-0016-multi.asc.txt>


MD5sums of the packages:
--------------------------------------------------------------------------
30041dc281ac4e2229b41a0606bc09ed  2.1/rpms/dev-2.7.11-9tr.i586.rpm
237921df44c025780f72c959510bd563  2.1/rpms/filesystem-2.1.0-4tr.noarch.rpm
b1c92497e68f96fe613374482ef23161  2.1/rpms/xinetd-2.3.13-4tr.i586.rpm
826efa8c766c926070659872e001db57  2.0/rpms/dev-2.7.11-9tr.i586.rpm
3639dbf0a3d3057f351698335b356d06  2.0/rpms/filesystem-2.1.0-4tr.noarch.rpm
4325de24ca3801783891dfa23cef442a  2.0/rpms/xinetd-2.3.13-1tr.i586.rpm
--------------------------------------------------------------------------


Trustix Security Team