“This week, advisories for the nfs-utils vulnerability were
released. Although there are currently no known exploits for this
bug, in theory, it can be used for gaining root access remotely.
Advisories for nkitb, LISTSERV, wu-ftpd, gpm, and dhcp were also
released.“
“In the news, a paper “Deploying Portsentry” provides a step by
step guide to setting up the popular port-scan detection package,
Portsentry. The paper explains how to configure the portsentry.conf
file, advanced stealth options, advanced_exclude response options,
and how to configure external commands (retaliation scripts). If
you have not installed portsentry, you may want to consider
obtaining it.”
“Our feature this week, “Advanced Access Control with the
Trustees Project,” by Dave Wreski, is an interview with Slava
Zavadsky regarding the work his organization has done. The Linux
Trustees Project is an effort to create improved access control and
advanced file permission management similar to other operating
systems.”