Skip to main content.

2001-Nov-09

Just read about an SSH root exploit. http://staff.washington.edu/dittrich/misc/ssh-analysis.txt I read it effects Debian 2.2. I did a "apt-get update" (using security.debian.org) followed by "apt-get upgrade". It updated Apache, exim, libc, and several other packages, but not ssh. I have openssh package 1.2.3-9.2 installed. I see on debian's security page (http://www.debian.org/security/2001/dsa-027) that this problem was fixed in February.

The apache package wanted to update srm.conf. I let it, but it removed the path to my default DocumentRoot so I replaced the new file.

Tried to mount Heather's grandparent's drive. Linux 2.2.13 kernel saw it: "hdb: Maxtor 83201A6, ATA DISK drive". But then reported "hdb: driver not present". So I thought this was caused by some strange drive. After doing seom searches, I find some notes about new patches, modules and support by 2.4 kernels. I also read a note where someone had this problem because they had a boot config for their hd? device set.

So I retrieved Linux 2.4.14 (the latest stable). And configured by copying over my backed up .config and using "make oldconfig". Then I chose a few things and built it and the modules. One module had a dependency problem at install time.

When I rebooted, the drive still didn't work, but I saw a new message. Then I realized I did have a boot config for hdb setup via lilo:

append="hdb=ide-scsi"
Because I had used it for the CD Writer. So I commented it out, re ran lilo and rebooted; then the drive was detected, but no ethernet -- and a bunch of modules errors. So I reverted back to my my backed up kernel (including rerunning lilo). And all was well! Then I did a "modprobe vfat" and I was able to mount the two partitions.