Section: .. / linux / security /
| /// File Name: |
linux-2.4.37.9-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | The patch has been updated to Linux 2.4.37.9. A post-2.4.37.9 upstream fix for FAT filesystems has been added. The FAQ has been updated. | | File Size: | 38842 | | Last Modified: | Feb 20 14:16:46 2010 |
| MD5 Checksum: | ea4e7d83f29a200b961dc6992e26927f |
|
| /// File Name: |
linux-2.4.37.7-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | The patch has been updated to Linux 2.4.37.7. | | File Size: | 38647 | | Last Modified: | Nov 18 08:58:16 2009 |
| MD5 Checksum: | ccaf3046d45bdb35f10ea9ff80e68782 |
|
| /// File Name: |
linux-2.4.37.6-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | The patch has been updated to Linux 2.4.37.6. A fix for a typographical error in one of the information leak fixes included into 2.4.37.6 has been added. | | File Size: | 38658 | | Last Modified: | Oct 26 17:29:57 2009 |
| MD5 Checksum: | 4c39e6d63554149628ae40a1ecf90520 |
|
| /// File Name: |
linux-2.4.37.5-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Besides being an update to the 2.4.37.5 kernel release, this revision of the patch adds a fix for the sigaltstack local information leak affecting 64-bit kernel builds.) | | File Size: | 38919 | | Related CVE(s): | CVE-2009-2847 | | Last Modified: | Aug 23 12:13:41 2009 |
| MD5 Checksum: | b0fa23f0a9c6e22a38cab9dfc469d636 |
|
| /// File Name: |
linux-2.4.37.4-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | The patch has been updated to Linux 2.4.37.4, which integrates a replacement for the "personality" hardening measure introduced in 2.4.37.3-ow1. | | File Size: | 38657 | | Last Modified: | Aug 5 15:03:12 2009 |
| MD5 Checksum: | 9ca3a58031dbce1f1acb17dc0d09327c |
|
| /// File Name: |
linux-2.4.37.3-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | Besides being an update to the 2.4.37.3 kernel release, this revision of the patch introduces an additional security hardening measure where the kernel would no longer allow the "personality" feature (which is needed to support some program binaries from other operating systems) to be abused to bypass the vm.mmap_min_addr restriction via SUID-root programs with a certain class of design errors in them. | | File Size: | 39087 | | Last Modified: | Jul 20 14:13:22 2009 |
| MD5 Checksum: | 2e9c348c8af5ff653b1efd3479e441c0 |
|
| /// File Name: |
linux-2.4.37.2-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | This release was updated to Linux 2.4.37.2. | | File Size: | 38668 | | Last Modified: | Jul 7 19:49:00 2009 |
| MD5 Checksum: | 260846dc9e23154e1d11d6b00a6d1f52 |
|
| /// File Name: |
linux-2.4.37.1-ow1.tar.gz |
Description:
|
The Openwall Linux kernel patch is a collection of security hardening features for the Linux kernel which can stop most 'cookbook' buffer overflow exploits. The patch can also add more privacy to the system by restricting access to parts of /proc so that users may not see what others are doing. Also tightens down file descriptors 0, 1, and 2, implements process limits and shared memory destruction.
| | Author: | Solar Designer | | Homepage: | http://www.openwall.com/linux | | Changes: | This release was updated to Linux 2.4.37.1. Functionality of the CONFIG_HARDEN_PAGE0 feature has been revised to apply on top of the vm.mmap_min_addr sysctl introduced in mainstream 2.4 kernels, and the documentation has been revised accordingly. | | File Size: | 38713 | | Last Modified: | May 25 11:34:35 2009 |
| MD5 Checksum: | 8c6b53fa001d2bf714db82cec0f80712 |
|
| /// File Name: |
rsbac-common-2.6-1.4.2.tar.bz2 |
Description:
|
Rule Set Based Access Control (RSBAC) is an open source security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) and provides a flexible system of access control implemented with the help of a kernel patch. All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions. This version is for the 2.6 kernel. This release is for Linux kernel 2.6.29.2. A significant speedup and even better SMP scalability are expected from the new RCU based list locking. The most important changes since 1.3.5 are the addition of VUM (Virtual User Management) support, OTP support for UM, support of ANY for NETLINK control, checking of CLOSE requests in RC, the addition of SCD target videomem and kernel attribute pagenr, ext4 secure delete support, and many small bugfixes too. Generic lists were changed to use RCU instead of rw spinlocks.
| | Homepage: | http://www.rsbac.org | | File Size: | 382105 | | Last Modified: | May 15 14:34:29 2009 |
| MD5 Checksum: | 731cfaee70c087bb02c37a28392d31d5 |
|
| /// File Name: |
ZoneMinder-1.24.1.tar.gz |
Description:
|
ZoneMinder is a suite of applications intended for use in video camera security applications, including theft prevention and child or family member monitoring. It supports capture, analysis, recording, and monitoring of video data coming from one or more cameras attached to a Linux system. It also features a user-friendly Web interface which allows viewing, archival, review, and deletion of images and movies captured by the cameras. The image analysis system is highly configurable, permitting retention of specific events, while eliminating false positives. ZoneMinder supports both directly connected and network cameras and is built around the definition of a set of individual 'zones' of varying sensitivity and functionality for each camera. This allows the elimination of regions which should be ignored or the definition of areas which will alarm if various thresholds are exceeded in conjunction with other zones. All management, control, and other functions are supported through the Web interface.
| | Author: | Philip Coombes | | Homepage: | http://www.zoneminder.com | | Changes: | Release addressing some issues discovered in 1.24.0 plus a small number of useful features. | | File Size: | 894667 | | Last Modified: | Feb 27 23:51:50 2009 |
| MD5 Checksum: | 1e4ce392d645cbb28037ecebc5a56584 |
|
| /// File Name: |
rsbac-common-2.6-1.4.0.tar.bz2 |
Description:
|
Rule Set Based Access Control (RSBAC) is an open source security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) and provides a flexible system of access control implemented with the help of a kernel patch. All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions. This version is for the 2.6 kernel. Added VUM (Virtual User Management) support. OTP support for UM. Converted the common code to 2.6 only.
| | Homepage: | http://www.rsbac.org | | File Size: | 374362 | | Last Modified: | Jan 16 17:40:05 2009 |
| MD5 Checksum: | 3393d3b3e96a742307732997deb29b78 |
|
| /// File Name: |
rsbac-common-2.4-1.4.0.tar.bz2 |
Description:
|
Rule Set Based Access Control (RSBAC) is an open source security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) and provides a flexible system of access control implemented with the help of a kernel patch. All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions. This version is for the 2.4 kernel.
| | Homepage: | http://www.rsbac.org | | Changes: | Added VUM (Virtual User Management) support. OTP support for UM. Increase string lengths in user and group items significantly. Add RSBAC memory slab 384 for new user item sizes. | | File Size: | 380178 | | Last Modified: | Jan 16 17:40:03 2009 |
| MD5 Checksum: | 23ed35d5b7b4767b8f2df93c6d036933 |
|
| /// File Name: |
poldi-0.4.tar.bz2 |
Description:
|
Poldi is a PAM module that implements authentication through the OpenPGP smart card. It uses the smart card daemon from the GnuPG project for smart card access.
| | Author: | Moritz Schulte | | File Size: | 367470 | | Last Modified: | Aug 13 01:10:14 2008 |
| MD5 Checksum: | 5a0312c3124e3dbb558a24f1017c169c |
|
| /// File Name: |
pam_p11-0.1.4.tar.gz |
Description:
|
Pam_p11 is a pluggable authentication module (PAM) package for using cryptographic tokens such as smart cards and USB crypto tokens for authentication. Pam_p11 is very simple, as it has no config file, no options other than the PKCS#11 module file, and does not know about certificate chains, certificate authorities, revocation lists, or OCSP. There is one module that uses the $HOME/.eid/authorized_certificates file (like the old pam_opensc did) and one module that uses the $HOME/.ssh/authorized_keys file (like ssh does).
| | Homepage: | http://www.opensc-project.org/pam_p11/ | | Changes: | Various fixes. See changelog. | | File Size: | 343208 | | Last Modified: | Jul 31 18:48:08 2008 |
| MD5 Checksum: | eee73804eaf2ef77e18cf6a777009509 |
|
| /// File Name: |
32or64elf.c |
Description:
|
Simple tool to verify if an ELF binary needs 32-bit or 64-bit architecture.
| | Author: | WarGame | | File Size: | 808 | | Last Modified: | Jun 2 17:41:07 2008 |
| MD5 Checksum: | 0ed44f8f78f2b083eda4735412eb335e |
|
| /// File Name: |
ZoneMinder-1.23.3.tar.gz |
Description:
|
ZoneMinder is a suite of applications intended for use in video camera security applications, including theft prevention and child or family member monitoring. It supports capture, analysis, recording, and monitoring of video data coming from one or more cameras attached to a Linux system. It also features a user-friendly Web interface which allows viewing, archival, review, and deletion of images and movies captured by the cameras. The image analysis system is highly configurable, permitting retention of specific events, while eliminating false positives. ZoneMinder supports both directly connected and network cameras and is built around the definition of a set of individual 'zones' of varying sensitivity and functionality for each camera. This allows the elimination of regions which should be ignored or the definition of areas which will alarm if various thresholds are exceeded in conjunction with other zones. All management, control, and other functions are supported through the Web interface.
| | Author: | Philip Coombes | | Homepage: | http://www.zoneminder.com | | Changes: | Fixed a number of potential vulnerabilities in remote script execution that could allow an authenticated ZoneMinder user to create and run arbitrary code on your system as the web user. Various other updates made as well. | | File Size: | 764528 | | Last Modified: | Apr 29 20:00:35 2008 |
| MD5 Checksum: | ee803f0f71d6e67adf602c3557fb6bc9 |
|
| /// File Name: |
DumpRam.c |
Description:
|
A simple tool for Linux that allows the dumping of all physical memory (RAM).
| | Author: | WarGame | | File Size: | 1722 | | Last Modified: | Feb 26 19:15:18 2008 |
| MD5 Checksum: | 9226efe8cb4cc30143ed8d879af57099 |
|
| /// File Name: |
ZoneMinder-1.23.2.tar.gz |
Description:
|
ZoneMinder is a suite of applications intended for use in video camera security applications, including theft prevention and child or family member monitoring. It supports capture, analysis, recording, and monitoring of video data coming from one or more cameras attached to a Linux system. It also features a user-friendly Web interface which allows viewing, archival, review, and deletion of images and movies captured by the cameras. The image analysis system is highly configurable, permitting retention of specific events, while eliminating false positives. ZoneMinder supports both directly connected and network cameras and is built around the definition of a set of individual 'zones' of varying sensitivity and functionality for each camera. This allows the elimination of regions which should be ignored or the definition of areas which will alarm if various thresholds are exceeded in conjunction with other zones. All management, control, and other functions are supported through the Web interface.
| | Author: | Philip Coombes | | Homepage: | http://www.zoneminder.com | | Changes: | Mostly bug fixes with some feature additions. | | File Size: | 763217 | | Last Modified: | Feb 26 18:03:00 2008 |
| MD5 Checksum: | 8f203786bbe14d3e31a18f9dace98113 |
|
| /// File Name: |
rsbac-common-1.3.7.tar.bz2 |
Description:
|
Rule Set Based Access Control (RSBAC) is an open source security extension for current Linux kernels. It is based on the Generalized Framework for Access Control (GFAC) and provides a flexible system of access control implemented with the help of a kernel patch. All security relevant system calls are extended by security enforcement code. This code calls the central decision component, which in turn calls all active decision modules and generates a combined decision. This decision is then enforced by the system call extensions.
| | Homepage: | http://www.rsbac.org | | Changes: | Fixed secure_delete hanging on ext3, various other additions, improvements, and fixes. | | File Size: | 369430 | | Last Modified: | Feb 19 22:53:17 2008 |
| MD5 Checksum: | 4da0f85d10ac8b598838a843a322e187 |
|
| /// File Name: |
ZoneMinder-1.23.1.tar.gz |
Description:
|
ZoneMinder is a suite of applications intended for use in video camera security applications, including theft prevention and child or family member monitoring. It supports capture, analysis, recording, and monitoring of video data coming from one or more cameras attached to a Linux system. It also features a user-friendly Web interface which allows viewing, archival, review, and deletion of images and movies captured by the cameras. The image analysis system is highly configurable, permitting retention of specific events, while eliminating false positives. ZoneMinder supports both directly connected and network cameras and is built around the definition of a set of individual 'zones' of varying sensitivity and functionality for each camera. This allows the elimination of regions which should be ignored or the definition of areas which will alarm if various thresholds are exceeded in conjunction with other zones. All management, control, and other functions are supported through the Web interface.
| | Author: | Philip Coombes | | Homepage: | http://www.zoneminder.com | | Changes: | Mostly bug fixes with a minor feature addition. | | File Size: | 744316 | | Last Modified: | Jan 21 20:06:03 2008 |
| MD5 Checksum: | 2a70f4708a414be37187700823e87fb4 |
|
| /// Directory: |
/ lids / |
Description:
|
Unavailable.
| | Total Files: | 63 | | Last Modified: | Dec 13 18:33:26 2007 |
|
| /// Directory: |
/ bastille / |
Description:
|
The Bastille Hardening System attempts to "harden" or "tighten" the Linux/Unix operating systems. It currently supports Red Hat and Mandrake systems, with support on the way for Debian, SuSE, TurboLinux and HP-UX. We attempt to provide the most secure, yet usable, system possible.
| | Total Files: | 34 | | Last Modified: | Sep 5 22:26:29 2007 |
|
| /// Directory: |
/ stjude / |
Description:
|
Unavailable.
| | Total Files: | 15 | | Last Modified: | Sep 5 22:26:24 2007 |
|
| /// Directory: |
/ motion / |
Description:
|
motion uses a video4linux device as a motion detector, taking snapshots of the motion it sees.
| | Total Files: | 20 | | Last Modified: | Sep 5 22:26:20 2007 |
|
|
|
|
|