Input buildinfo: https://buildinfos.debian.net/buildinfo-pool/h/harden-doc/harden-doc_3.19+nmu1_all.buildinfo Use metasnap for getting required timestamps New buildinfo file: /tmp/harden-doc-3.19+nmu1t_1wlw42/harden-doc_3.19+nmu1_all.buildinfo Get source package info: harden-doc=3.19+nmu1 Source URL: http://snapshot.notset.fr/mr/package/harden-doc/3.19+nmu1/srcfiles?fileinfo=1 env -i PATH=/usr/sbin:/usr/bin:/sbin:/bin TMPDIR=/tmp mmdebstrap --arch=amd64 --include=ant=1.10.9-1 autoconf=2.69-14 automake=1:1.16.3-1 autopoint=0.21-3 autotools-dev=20180224.1+nmu1 base-files=11 base-passwd=3.5.48 bash=5.1-1 binutils=2.35.1-6 binutils-common=2.35.1-6 binutils-x86-64-linux-gnu=2.35.1-6 bsdextrautils=2.36.1-4 bsdutils=1:2.36.1-4 build-essential=12.8 bzip2=1.0.8-4 ca-certificates=20200601 ca-certificates-java=20190909 coreutils=8.32-4+b1 cpp=4:10.2.0-1 cpp-10=10.2.1-3 dash=0.5.11+git20200708+dd9ef66-5 debconf=1.5.74 debhelper=13.3.1 debianutils=4.11.2 default-jre-headless=2:1.11-72 dh-autoreconf=19 dh-strip-nondeterminism=1.9.0-1 diffutils=1:3.7-3 docbook-xml=4.5-9 docbook-xsl=1.79.2+dfsg-1 docbook-xsl-ns=1.79.2+dfsg-1 docbook5-xml=5.0-3 dpkg=1.20.5 dpkg-dev=1.20.5 dwz=0.13+20201015-2 file=1:5.39-3 findutils=4.7.0+git20201010-2 fontconfig=2.13.1-4.2 fontconfig-config=2.13.1-4.2 fonts-dejavu-core=2.37-2 fonts-font-awesome=5.0.10+really4.7.0~dfsg-4 fop=1:2.5-3 g++=4:10.2.0-1 g++-10=10.2.1-3 gcc=4:10.2.0-1 gcc-10=10.2.1-3 gcc-10-base=10.2.1-3 gettext=0.21-3 gettext-base=0.21-3 grep=3.6-1 groff-base=1.22.4-5 gzip=1.10-2 hostname=3.23 imagemagick-6-common=8:6.9.11.24+dfsg-1 init-system-helpers=1.60 intltool-debian=0.35.0+20060710.5 java-common=0.72 java-wrappers=0.3 libacl1=2.2.53-9 libalgorithm-c3-perl=0.11-1 libaom0=1.0.0.errata1-3 libapache-pom-java=18-1 libappconfig-perl=1.71-2.1 libarchive-zip-perl=1.68-1 libasan6=10.2.1-3 libasound2=1.2.4-1 libasound2-data=1.2.4-1 libatomic1=10.2.1-3 libattr1=1:2.4.48-6 libaudit-common=1:3.0-1 libaudit1=1:3.0-1 libavahi-client3=0.8-3 libavahi-common-data=0.8-3 libavahi-common3=0.8-3 libb-hooks-endofscope-perl=0.24-1.1 libb-hooks-op-check-perl=0.22-1+b3 libbatik-java=1.12-4 libbinutils=2.35.1-6 libblkid1=2.36.1-4 libbrotli1=1.0.9-2+b2 libbsd0=0.10.0-1 libbz2-1.0=1.0.8-4 libc-bin=2.31-6 libc-dev-bin=2.31-6 libc6=2.31-6 libc6-dev=2.31-6 libcairo-gobject2=1.16.0-5 libcairo2=1.16.0-5 libcap-ng0=0.7.9-2.2+b1 libcc1-0=10.2.1-3 libcgi-pm-perl=4.51-1 libclass-c3-perl=0.35-1 libclass-data-accessor-perl=0.04004-2 libclass-data-inheritable-perl=0.08-3 libclass-inspector-perl=1.36-1 libclass-method-modifiers-perl=2.13-1 libclass-singleton-perl=1.6-1 libcom-err2=1.45.6-1 libcommons-io-java=2.8.0-1 libcommons-logging-java=1.2-2 libcommons-parent-java=43-1 libconfig-simple-perl=4.59-6.1 libcrypt-dev=1:4.4.17-1 libcrypt1=1:4.4.17-1 libcss-perl=1.09-1.1 libctf-nobfd0=2.35.1-6 libctf0=2.35.1-6 libcups2=2.3.3op1-4 libdata-optlist-perl=0.110-1.1 libdatetime-format-dateparse-perl=0.05-2.1 libdatetime-locale-perl=1:1.31-1 libdatetime-perl=2:1.54-1 libdatetime-timezone-perl=1:2.46-1+2020e libdatrie1=0.2.12-3 libdav1d4=0.7.1-3 libdb5.3=5.3.28+dfsg1-0.6 libdbd-sqlite3-perl=1.66-1+b1 libdbi-perl=1.643-3+b1 libdbus-1-3=1.12.20-1 libde265-0=1.0.8-1 libdebconfclient0=0.255 libdebhelper-perl=13.3.1 libdeflate0=1.6-1 libdevel-callchecker-perl=0.008-1+b2 libdevel-stacktrace-perl=2.0400-1 libdpkg-perl=1.20.5 libdynaloader-functions-perl=0.003-1.1 libel-api-java=3.0.0-3 libelf1=0.182-2 libencode-locale-perl=1.05-1.1 libeval-closure-perl=0.14-1 libexception-class-perl=1.44-1 libexpat1=2.2.10-1 libexporter-tiny-perl=1.002002-1 libffi7=3.3-5 libfftw3-double3=3.3.8-2 libfile-copy-recursive-perl=0.45-1 libfile-find-rule-perl=0.34-1 libfile-homedir-perl=1.006-1 libfile-inplace-perl=0.20-2 libfile-listing-perl=6.14-1 libfile-pushd-perl=1.016-1 libfile-sharedir-perl=1.118-1 libfile-slurp-perl=9999.32-1 libfile-stripnondeterminism-perl=1.9.0-1 libfile-which-perl=1.23-1 libfont-afm-perl=1.20-3 libfontbox2-java=2.0.22-1 libfontconfig1=2.13.1-4.2 libfop-java=1:2.5-3 libfreetype6=2.10.4+dfsg-1 libfribidi0=1.0.8-2 libgcc-10-dev=10.2.1-3 libgcc-s1=10.2.1-3 libgcrypt20=1.8.7-2 libgdbm-compat4=1.18.1-5.1 libgdbm6=1.18.1-5.1 libgdk-pixbuf-2.0-0=2.42.2+dfsg-1 libgdk-pixbuf2.0-common=2.42.2+dfsg-1 libglib2.0-0=2.66.4-1 libgmp10=2:6.2.1+dfsg-1 libgnutls30=3.7.0-3 libgomp1=10.2.1-3 libgpg-error0=1.38-2 libgraphite2-3=1.3.14-1 libgssapi-krb5-2=1.18.3-4 libharfbuzz0b=2.6.7-1 libheif1=1.10.0-2 libhogweed6=3.6-2 libhtml-format-perl=2.12-1.1 libhtml-formattext-withlinks-andtables-perl=0.07-1 libhtml-formattext-withlinks-perl=0.15-1.1 libhtml-parser-perl=3.75-1+b1 libhtml-tagset-perl=3.20-4 libhtml-template-perl=2.97-1.1 libhtml-tree-perl=5.07-2 libhtml-wikiconverter-markdown-perl=0.06-2 libhtml-wikiconverter-perl=0.68-3.1 libhttp-cookies-perl=6.09-1 libhttp-date-perl=6.05-1 libhttp-message-perl=6.26-1 libhttp-negotiate-perl=6.01-1 libicu67=67.1-5 libidn2-0=2.3.0-4 libimage-magick-perl=8:6.9.11.24+dfsg-1 libimage-magick-q16-perl=8:6.9.11.24+dfsg-1+b2 libimage-size-perl=3.300-1.1 libio-html-perl=1.001-1.1 libio-socket-ssl-perl=2.068-1 libio-string-perl=1.08-3.1 libisl23=0.23-1 libitm1=10.2.1-3 libjaxp1.3-java=1.3.05-5.1 libjbig0=2.1-3.1+b2 libjpeg62-turbo=1:2.0.5-2 libjsp-api-java=2.3.4-3 libk5crypto3=1.18.3-4 libkeyutils1=1.6.1-2 libkrb5-3=1.18.3-4 libkrb5support0=1.18.3-4 liblcms2-2=2.9-4+b1 liblingua-en-fathom-perl=1.22-1.1 liblingua-en-sentence-perl=0.31-1.1 liblingua-en-syllable-perl=0.300-1 liblist-moreutils-perl=0.430-2 liblist-moreutils-xs-perl=0.430-2 liblocale-codes-perl=3.66-1 liblocale-maketext-gettext-perl=1.30-1 liblocale-maketext-lexicon-perl=1.00-1.1 liblocale-msgfmt-perl=0.15-2 liblocale-po-perl=0.27-2 liblqr-1-0=0.4.2-2.1 liblsan0=10.2.1-3 libltdl7=2.4.6-14 liblwp-mediatypes-perl=6.04-1 liblwp-protocol-https-perl=6.10-1 liblz4-1=1.9.3-1 liblzma5=5.2.4-1+b1 libmagic-mgc=1:5.39-3 libmagic1=1:5.39-3 libmagickcore-6.q16-6=8:6.9.11.24+dfsg-1+b2 libmodule-implementation-perl=0.09-1.1 libmodule-runtime-perl=0.016-1 libmount1=2.36.1-4 libmpc3=1.2.0-1 libmpfr6=4.1.0-3 libmro-compat-perl=0.13-1 libnamespace-autoclean-perl=0.29-1 libnamespace-clean-perl=0.27-1 libnet-http-perl=6.19-1 libnet-ssleay-perl=1.88-3+b1 libnettle8=3.6-2 libnsl-dev=1.3.0-2 libnsl2=1.3.0-2 libnspr4=2:4.29-1 libnss3=2:3.60-1 libnuma1=2.0.12-1+b1 libnumber-compare-perl=0.03-1.1 libopenjp2-7=2.3.1-1 libp11-kit0=0.23.22-1 libpackage-stash-perl=0.39-1 libpam-modules=1.4.0-2 libpam-modules-bin=1.4.0-2 libpam-runtime=1.4.0-2 libpam0g=1.4.0-2 libpango-1.0-0=1.46.2-3 libpangocairo-1.0-0=1.46.2-3 libpangoft2-1.0-0=1.46.2-3 libparams-classify-perl=0.015-1+b3 libparams-util-perl=1.102-1+b1 libparams-validate-perl=1.30-1+b1 libparams-validationcompiler-perl=0.30-1 libparse-recdescent-perl=1.967015+dfsg-2 libpath-tiny-perl=0.114-2 libpcre2-8-0=10.36-2 libpcre3=2:8.39-13 libpcsclite1=1.9.0-1 libperl5.32=5.32.0-6 libpipeline1=1.5.3-1 libpixman-1-0=0.40.0-1 libpng16-16=1.6.37-3 libqdox-java=1.12.1-3 libquadmath0=10.2.1-3 librole-tiny-perl=2.001004-1 librsvg2-2=2.50.2+dfsg-1 librsvg2-bin=2.50.2+dfsg-1 libseccomp2=2.5.1-1 libselinux1=3.1-2+b2 libservlet-api-java=4.0.1-2 libservlet3.1-java=1:4.0.1-2 libsigsegv2=2.12-3 libsmartcols1=2.36.1-4 libsort-versions-perl=1.62-1 libspecio-perl=0.46-1 libsqlite3-0=3.34.0-1 libssl1.1=1.1.1i-1 libstdc++-10-dev=10.2.1-3 libstdc++6=10.2.1-3 libstring-similarity-perl=1.04-2+b3 libsub-exporter-perl=0.987-1 libsub-exporter-progressive-perl=0.001013-1 libsub-identify-perl=0.14-1+b3 libsub-install-perl=0.928-1.1 libsub-name-perl=0.26-1+b1 libsub-override-perl=0.09-2 libsub-quote-perl=2.006006-1 libsyntax-highlight-engine-kate-perl=0.14+dfsg-1 libsystemd0=247.2-3 libtasn1-6=4.16.0-2 libtemplate-perl=2.27-1+b3 libtext-csv-xs-perl=1.45-1 libtext-glob-perl=0.11-1 libthai-data=0.1.28-3 libthai0=0.1.28-3 libtiff5=4.2.0-1 libtimedate-perl=2.3300-1 libtinfo6=6.2+20201114-1 libtirpc-common=1.2.6-3 libtirpc-dev=1.2.6-3 libtirpc3=1.2.6-3 libtool=2.4.6-14 libtry-tiny-perl=0.30-1 libtsan0=10.2.1-3 libubsan1=10.2.1-3 libuchardet0=0.0.7-1 libudev1=247.2-3 libunistring2=0.9.10-4 liburi-perl=5.05-1 libuuid1=2.36.1-4 libvariable-magic-perl=0.62-1+b3 libwebp6=0.6.1-2+b1 libwebpdemux2=0.6.1-2+b1 libwebpmux3=0.6.1-2+b1 libwebsocket-api-java=1.1-2 libwww-perl=6.51-1 libwww-robotrules-perl=6.02-1 libx11-6=2:1.6.12-1 libx11-data=2:1.6.12-1 libx265-192=3.4-2 libxalan2-java=2.7.2-4 libxau6=1:1.0.8-1+b2 libxcb-render0=1.14-2.1 libxcb-shm0=1.14-2.1 libxcb1=1.14-2.1 libxdmcp6=1:1.1.2-3 libxerces2-java=2.12.1-1 libxext6=2:1.3.3-1.1 libxi6=2:1.7.10-1 libxml-catalog-perl=1.03-2.1 libxml-commons-external-java=1.4.01-5 libxml-commons-resolver1.1-java=1.2-11 libxml-libxml-perl=2.0134+dfsg-2+b1 libxml-libxslt-perl=1.99-1+b1 libxml-namespacesupport-perl=1.12-1.1 libxml-parser-perl=2.46-2 libxml-sax-base-perl=1.09-1.1 libxml-sax-perl=1.02+dfsg-1 libxml-simple-perl=2.25-1 libxml-treebuilder-perl=5.4-2.1 libxml2=2.9.10+dfsg-6.3+b1 libxmlgraphics-commons-java=2.4-1 libxrender1=1:0.9.10-1 libxslt1.1=1.1.34-4 libxstring-perl=0.005-1+b1 libxtst6=2:1.2.3-1 libzstd1=1.4.8+dfsg-1 linux-libc-dev=5.9.15-1 login=1:4.8.1-1 lsb-base=11.1.0 m4=1.4.18-4 make=4.3-4 man-db=2.9.3-2 mawk=1.3.4.20200120-2 ncurses-base=6.2+20201114-1 ncurses-bin=6.2+20201114-1 netbase=6.2 openjdk-11-jre-headless=11.0.10+8-1 openssl=1.1.1i-1 patch=2.7.6-6 perl=5.32.0-6 perl-base=5.32.0-6 perl-modules-5.32=5.32.0-6 perl-openssl-defaults=5 po-debconf=1.0.21+nmu1 publican=4.3.2-3 publican-debian=0.4 rdfind=1.4.1-1+b3 sed=4.7-1 sensible-utils=0.0.12+nmu1 sgml-base=1.30 sgml-data=2.0.11+nmu1 shared-mime-info=2.0-1 sysvinit-utils=2.96-5 tar=1.32+dfsg-1 ucf=3.0043 unzip=6.0-25 util-linux=2.36.1-4 x11-common=1:7.7+21 xml-core=0.18+nmu1 xz-utils=5.2.4-1+b1 zlib1g=1:1.2.11.dfsg-2 --variant=apt --aptopt=Acquire::Check-Valid-Until "false" --aptopt=Acquire::http::Dl-Limit "1000"; --aptopt=Acquire::https::Dl-Limit "1000"; --aptopt=Acquire::Retries "5"; --aptopt=APT::Get::allow-downgrades "true"; --keyring=/usr/share/keyrings/ --essential-hook=chroot "$1" sh -c "apt-get --yes install fakeroot util-linux" --essential-hook=copy-in /usr/share/keyrings/debian-archive-bullseye-automatic.gpg /usr/share/keyrings/debian-archive-bullseye-security-automatic.gpg /usr/share/keyrings/debian-archive-bullseye-stable.gpg /usr/share/keyrings/debian-archive-buster-automatic.gpg /usr/share/keyrings/debian-archive-buster-security-automatic.gpg /usr/share/keyrings/debian-archive-buster-stable.gpg /usr/share/keyrings/debian-archive-keyring.gpg /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/keyrings/debian-archive-stretch-automatic.gpg /usr/share/keyrings/debian-archive-stretch-security-automatic.gpg /usr/share/keyrings/debian-archive-stretch-stable.gpg /usr/share/keyrings/debian-ports-archive-keyring-removed.gpg /usr/share/keyrings/debian-ports-archive-keyring.gpg /usr/share/keyrings/debian-keyring.gpg /etc/apt/trusted.gpg.d/ --essential-hook=chroot "$1" sh -c "rm /etc/apt/sources.list && echo 'deb http://snapshot.notset.fr/archive/debian/20210814T212851Z/ bookworm main deb-src http://snapshot.notset.fr/archive/debian/20210814T212851Z/ bookworm main deb http://snapshot.notset.fr/archive/debian/20210106T142920Z/ unstable main deb http://snapshot.notset.fr/archive/debian/20201230T203527Z/ unstable main' >> /etc/apt/sources.list && apt-get update" --customize-hook=chroot "$1" useradd --no-create-home -d /nonexistent -p "" builduser -s /bin/bash --customize-hook=chroot "$1" env sh -c "apt-get source --only-source -d harden-doc=3.19+nmu1 && mkdir -p /build/harden-doc-KnWLUV && dpkg-source --no-check -x /*.dsc /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1 && chown -R builduser:builduser /build/harden-doc-KnWLUV" --customize-hook=chroot "$1" env --unset=TMPDIR runuser builduser -c "cd /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1 && env DEB_BUILD_OPTIONS="parallel=4" LANG="C.UTF-8" LC_ALL="C.UTF-8" SOURCE_DATE_EPOCH="1609683992" dpkg-buildpackage -uc -a amd64 --build=all" --customize-hook=sync-out /build/harden-doc-KnWLUV /tmp/harden-doc-3.19+nmu1t_1wlw42 bullseye /dev/null deb http://snapshot.notset.fr/archive/debian/20201230T203527Z unstable main I: automatically chosen mode: root I: chroot architecture amd64 is equal to the host's architecture I: automatically chosen format: tar I: using /tmp/mmdebstrap.UgYPe8QbGC as tempdir I: running apt-get update... I: downloading packages with apt... I: extracting archives... I: installing essential packages... I: running --essential-hook in shell: sh -c 'chroot "$1" sh -c "apt-get --yes install fakeroot util-linux"' exec /tmp/mmdebstrap.UgYPe8QbGC Reading package lists... Building dependency tree... util-linux is already the newest version (2.36.1-4). The following NEW packages will be installed: fakeroot libfakeroot 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. Need to get 134 kB of archives. After this operation, 397 kB of additional disk space will be used. Get:1 http://snapshot.notset.fr/archive/debian/20201230T203527Z unstable/main amd64 libfakeroot amd64 1.25.3-1.1 [47.0 kB] Get:2 http://snapshot.notset.fr/archive/debian/20201230T203527Z unstable/main amd64 fakeroot amd64 1.25.3-1.1 [87.0 kB] debconf: delaying package configuration, since apt-utils is not installed Fetched 134 kB in 0s (1071 kB/s) Selecting previously unselected package libfakeroot:amd64. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 4648 files and directories currently installed.) Preparing to unpack .../libfakeroot_1.25.3-1.1_amd64.deb ... Unpacking libfakeroot:amd64 (1.25.3-1.1) ... Selecting previously unselected package fakeroot. Preparing to unpack .../fakeroot_1.25.3-1.1_amd64.deb ... Unpacking fakeroot (1.25.3-1.1) ... Setting up libfakeroot:amd64 (1.25.3-1.1) ... Setting up fakeroot (1.25.3-1.1) ... update-alternatives: using /usr/bin/fakeroot-sysv to provide /usr/bin/fakeroot (fakeroot) in auto mode Processing triggers for libc-bin (2.31-6) ... I: running special hook: copy-in /usr/share/keyrings/debian-archive-bullseye-automatic.gpg /usr/share/keyrings/debian-archive-bullseye-security-automatic.gpg /usr/share/keyrings/debian-archive-bullseye-stable.gpg /usr/share/keyrings/debian-archive-buster-automatic.gpg /usr/share/keyrings/debian-archive-buster-security-automatic.gpg /usr/share/keyrings/debian-archive-buster-stable.gpg /usr/share/keyrings/debian-archive-keyring.gpg /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/keyrings/debian-archive-stretch-automatic.gpg /usr/share/keyrings/debian-archive-stretch-security-automatic.gpg /usr/share/keyrings/debian-archive-stretch-stable.gpg /usr/share/keyrings/debian-ports-archive-keyring-removed.gpg /usr/share/keyrings/debian-ports-archive-keyring.gpg /usr/share/keyrings/debian-keyring.gpg /etc/apt/trusted.gpg.d/ I: running --essential-hook in shell: sh -c 'chroot "$1" sh -c "rm /etc/apt/sources.list && echo 'deb http://snapshot.notset.fr/archive/debian/20210814T212851Z/ bookworm main deb-src http://snapshot.notset.fr/archive/debian/20210814T212851Z/ bookworm main deb http://snapshot.notset.fr/archive/debian/20210106T142920Z/ unstable main deb http://snapshot.notset.fr/archive/debian/20201230T203527Z/ unstable main' >> /etc/apt/sources.list && apt-get update"' exec /tmp/mmdebstrap.UgYPe8QbGC Get:1 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm InRelease [81.6 kB] Get:2 http://snapshot.notset.fr/archive/debian/20210106T142920Z unstable InRelease [153 kB] Hit:3 http://snapshot.notset.fr/archive/debian/20201230T203527Z unstable InRelease Ign:4 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main Sources Ign:5 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main amd64 Packages Ign:4 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main Sources Ign:5 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main amd64 Packages Ign:4 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main Sources Ign:5 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main amd64 Packages Get:4 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main Sources [11.4 MB] Get:5 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main amd64 Packages [11.1 MB] Ign:6 http://snapshot.notset.fr/archive/debian/20210106T142920Z unstable/main amd64 Packages Ign:6 http://snapshot.notset.fr/archive/debian/20210106T142920Z unstable/main amd64 Packages Ign:6 http://snapshot.notset.fr/archive/debian/20210106T142920Z unstable/main amd64 Packages Get:6 http://snapshot.notset.fr/archive/debian/20210106T142920Z unstable/main amd64 Packages [11.6 MB] Fetched 34.3 MB in 32s (1058 kB/s) Reading package lists... I: installing remaining packages inside the chroot... I: running --customize-hook in shell: sh -c 'chroot "$1" useradd --no-create-home -d /nonexistent -p "" builduser -s /bin/bash' exec /tmp/mmdebstrap.UgYPe8QbGC I: running --customize-hook in shell: sh -c 'chroot "$1" env sh -c "apt-get source --only-source -d harden-doc=3.19+nmu1 && mkdir -p /build/harden-doc-KnWLUV && dpkg-source --no-check -x /*.dsc /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1 && chown -R builduser:builduser /build/harden-doc-KnWLUV"' exec /tmp/mmdebstrap.UgYPe8QbGC Reading package lists... NOTICE: 'harden-doc' packaging is maintained in the 'Git' version control system at: https://salsa.debian.org/ddp-team/securing-debian-howto.git Please use: git clone https://salsa.debian.org/ddp-team/securing-debian-howto.git to retrieve the latest (possibly unreleased) updates to the package. Need to get 1470 kB of source archives. Get:1 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main harden-doc 3.19+nmu1 (dsc) [1741 B] Get:2 http://snapshot.notset.fr/archive/debian/20210814T212851Z bookworm/main harden-doc 3.19+nmu1 (tar) [1469 kB] Fetched 1470 kB in 1s (1212 kB/s) Download complete and in download only mode W: Download is performed unsandboxed as root as file 'harden-doc_3.19+nmu1.dsc' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied) dpkg-source: info: extracting harden-doc in /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1 dpkg-source: info: unpacking harden-doc_3.19+nmu1.tar.xz I: running --customize-hook in shell: sh -c 'chroot "$1" env --unset=TMPDIR runuser builduser -c "cd /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1 && env DEB_BUILD_OPTIONS="parallel=4" LANG="C.UTF-8" LC_ALL="C.UTF-8" SOURCE_DATE_EPOCH="1609683992" dpkg-buildpackage -uc -a amd64 --build=all"' exec /tmp/mmdebstrap.UgYPe8QbGC dpkg-buildpackage: info: source package harden-doc dpkg-buildpackage: info: source version 3.19+nmu1 dpkg-buildpackage: info: source distribution unstable dpkg-buildpackage: info: source changed by Holger Levsen dpkg-source --before-build . fakeroot debian/rules clean dh clean debian/rules override_dh_auto_clean make[1]: Entering directory '/build/harden-doc-KnWLUV/harden-doc-3.19+nmu1' publican clean Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 12. Clean: Removing tmp and publish directories. make[1]: Leaving directory '/build/harden-doc-KnWLUV/harden-doc-3.19+nmu1' dh_clean debian/rules build-indep dh build-indep dh_update_autotools_config -i dh_autoreconf -i debian/rules override_dh_auto_build make[1]: Entering directory '/build/harden-doc-KnWLUV/harden-doc-3.19+nmu1' ./build/build-html --lang=de-DE Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up de-DE Merging de-DE/01_intro.po >> en-US/01_intro.xml -> tmp/de-DE/xml_tmp//01_intro.xml Merging de-DE/02_before-begin.po >> en-US/02_before-begin.xml -> tmp/de-DE/xml_tmp//02_before-begin.xml Merging de-DE/03_before-install.po >> en-US/03_before-install.xml -> tmp/de-DE/xml_tmp//03_before-install.xml Merging de-DE/04_after-install.po >> en-US/04_after-install.xml -> tmp/de-DE/xml_tmp//04_after-install.xml WARNING: Un-translated message in PO file. 98: "From Debian Jessie and up, you can install... WARNING: Fuzzy message in PO file. 376: "Remember to run init q after making any ... WARNING: Message missing from PO file, consider updating your POT and PO files. "Be careful if setting /tmp noexec when you want to install new software, since some programs might use it for installation. apt is one such program (see ) if not configured properly APT::ExtractTemplates::TempDir (see apt-extracttemplates1). You can set this variable in /etc/apt/apt.conf to another directory with exec privileges other than /tmp." WARNING: Un-translated message in PO file. 899: "> en-US/05_services.xml -> tmp/de-DE/xml_tmp//05_services.xml WARNING: Un-translated message in PO file. 1317: "The below script takes advantage of Debian's use (since Squeeze...  Merging de-DE/06_automatic.po >> en-US/06_automatic.xml -> tmp/de-DE/xml_tmp//06_automatic.xml Merging de-DE/07_infrastructure.po >> en-US/07_infrastructure.xml -> tmp/de-DE/xml_tmp//07_infrastructure.xml Merging de-DE/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/de-DE/xml_tmp//08_sec-tools.xml Merging de-DE/09_developer.po >> en-US/09_developer.xml -> tmp/de-DE/xml_tmp//09_developer.xml WARNING: Un-translated message in PO file. 239: "Maintainers that want to remove users in their postrm...  Merging de-DE/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/de-DE/xml_tmp//10_before-compromise.xml Merging de-DE/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/de-DE/xml_tmp//11_after-compromise.xml Merging de-DE/12_faq.po >> en-US/12_faq.xml -> tmp/de-DE/xml_tmp//12_faq.xml WARNING: Un-translated message in PO file. 772: "The security team keeps its list of Frequently Asked Questions ...  Merging de-DE/99_appendix.po >> en-US/99_appendix.xml -> tmp/de-DE/xml_tmp//99_appendix.xml Merging de-DE/Author_Group.po >> en-US/Author_Group.xml -> tmp/de-DE/xml_tmp//Author_Group.xml Merging de-DE/Book_Info.po >> en-US/Book_Info.xml -> tmp/de-DE/xml_tmp//Book_Info.xml Merging de-DE/Revision_History.po >> en-US/Revision_History.xml -> tmp/de-DE/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 28: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 31: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 40: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 43: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 46: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 49: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 52: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 55: "Use LSB headers for firewall script. Patch by Dominic Walden."  PO file 'de-DE/Securing_Debian_Manual.po' not found! Using base XML!  Processing file tmp/de-DE/xml/Common_Content/Conventions.xml -> tmp/de-DE/xml/Common_Content/Conventions.xml Processing file tmp/de-DE/xml/Common_Content/Feedback.xml -> tmp/de-DE/xml/Common_Content/Feedback.xml Processing file tmp/de-DE/xml/Common_Content/Legal_Notice.xml -> tmp/de-DE/xml/Common_Content/Legal_Notice.xml Processing file tmp/de-DE/xml/Common_Content/Program_Listing.xml -> tmp/de-DE/xml/Common_Content/Program_Listing.xml Processing file tmp/de-DE/xml/Common_Content/Revision_History.xml -> tmp/de-DE/xml/Common_Content/Revision_History.xml Processing file tmp/de-DE/xml_tmp/01_intro.xml -> tmp/de-DE/xml/01_intro.xml Processing file tmp/de-DE/xml_tmp/02_before-begin.xml -> tmp/de-DE/xml/02_before-begin.xml Processing file tmp/de-DE/xml_tmp/03_before-install.xml -> tmp/de-DE/xml/03_before-install.xml Processing file tmp/de-DE/xml_tmp/04_after-install.xml -> tmp/de-DE/xml/04_after-install.xml Processing file tmp/de-DE/xml_tmp/05_services.xml -> tmp/de-DE/xml/05_services.xml Processing file tmp/de-DE/xml_tmp/06_automatic.xml -> tmp/de-DE/xml/06_automatic.xml Processing file tmp/de-DE/xml_tmp/07_infrastructure.xml -> tmp/de-DE/xml/07_infrastructure.xml Processing file tmp/de-DE/xml_tmp/08_sec-tools.xml -> tmp/de-DE/xml/08_sec-tools.xml Processing file tmp/de-DE/xml_tmp/09_developer.xml -> tmp/de-DE/xml/09_developer.xml Processing file tmp/de-DE/xml_tmp/10_before-compromise.xml -> tmp/de-DE/xml/10_before-compromise.xml Processing file tmp/de-DE/xml_tmp/11_after-compromise.xml -> tmp/de-DE/xml/11_after-compromise.xml Processing file tmp/de-DE/xml_tmp/12_faq.xml -> tmp/de-DE/xml/12_faq.xml Processing file tmp/de-DE/xml_tmp/99_appendix.xml -> tmp/de-DE/xml/99_appendix.xml Processing file tmp/de-DE/xml_tmp/Author_Group.xml -> tmp/de-DE/xml/Author_Group.xml Processing file tmp/de-DE/xml_tmp/Book_Info.xml -> tmp/de-DE/xml/Book_Info.xml Processing file tmp/de-DE/xml_tmp/Revision_History.xml -> tmp/de-DE/xml/Revision_History.xml Processing file tmp/de-DE/xml_tmp/Securing_Debian_Manual.xml -> tmp/de-DE/xml/Securing_Debian_Manual.xml Beginning work on de-DE DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/de-DE/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=en-US Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up en-US Processing file tmp/en-US/xml/Common_Content/Conventions.xml -> tmp/en-US/xml/Common_Content/Conventions.xml Processing file tmp/en-US/xml/Common_Content/Feedback.xml -> tmp/en-US/xml/Common_Content/Feedback.xml Processing file tmp/en-US/xml/Common_Content/Legal_Notice.xml -> tmp/en-US/xml/Common_Content/Legal_Notice.xml Processing file tmp/en-US/xml/Common_Content/Program_Listing.xml -> tmp/en-US/xml/Common_Content/Program_Listing.xml Processing file tmp/en-US/xml/Common_Content/Revision_History.xml -> tmp/en-US/xml/Common_Content/Revision_History.xml Processing file tmp/en-US/xml_tmp/01_intro.xml -> tmp/en-US/xml/01_intro.xml Processing file tmp/en-US/xml_tmp/02_before-begin.xml -> tmp/en-US/xml/02_before-begin.xml Processing file tmp/en-US/xml_tmp/03_before-install.xml -> tmp/en-US/xml/03_before-install.xml Processing file tmp/en-US/xml_tmp/04_after-install.xml -> tmp/en-US/xml/04_after-install.xml Processing file tmp/en-US/xml_tmp/05_services.xml -> tmp/en-US/xml/05_services.xml Processing file tmp/en-US/xml_tmp/06_automatic.xml -> tmp/en-US/xml/06_automatic.xml Processing file tmp/en-US/xml_tmp/07_infrastructure.xml -> tmp/en-US/xml/07_infrastructure.xml Processing file tmp/en-US/xml_tmp/08_sec-tools.xml -> tmp/en-US/xml/08_sec-tools.xml Processing file tmp/en-US/xml_tmp/09_developer.xml -> tmp/en-US/xml/09_developer.xml Processing file tmp/en-US/xml_tmp/10_before-compromise.xml -> tmp/en-US/xml/10_before-compromise.xml Processing file tmp/en-US/xml_tmp/11_after-compromise.xml -> tmp/en-US/xml/11_after-compromise.xml Processing file tmp/en-US/xml_tmp/12_faq.xml -> tmp/en-US/xml/12_faq.xml Processing file tmp/en-US/xml_tmp/99_appendix.xml -> tmp/en-US/xml/99_appendix.xml Processing file tmp/en-US/xml_tmp/Author_Group.xml -> tmp/en-US/xml/Author_Group.xml Processing file tmp/en-US/xml_tmp/Book_Info.xml -> tmp/en-US/xml/Book_Info.xml Processing file tmp/en-US/xml_tmp/Revision_History.xml -> tmp/en-US/xml/Revision_History.xml Processing file tmp/en-US/xml_tmp/Securing_Debian_Manual.xml -> tmp/en-US/xml/Securing_Debian_Manual.xml Beginning work on en-US DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/en-US/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=es-ES Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up es-ES Merging es-ES/01_intro.po >> en-US/01_intro.xml -> tmp/es-ES/xml_tmp//01_intro.xml WARNING: Un-translated message in PO file. 27: "Authors" WARNING: Un-translated message in PO file. 30: "The current maintainer of this document is Javier Fernández-San... WARNING: Un-translated message in PO file. 33: "This manual was started as a HOWTO by Alex... WARNING: Un-translated message in PO file. 69: "You can download or view the latest version of the Securing Deb... WARNING: Un-translated message in PO file. 72: "If you want a full copy of the manual you can either download t... WARNING: Un-translated message in PO file. 75: "The document is also provided in text, html and PDF formats in ... WARNING: Un-translated message in PO file. 78: "This document is part of the documents distributed by the kernel-patch-2.4-lidsNSA Enhanced Linu... WARNING: Un-translated message in PO file. 165: "..." WARNING: Un-translated message in PO file. 183: "Details of turning off unnecessary network services (besides hosts.equiv and other major security holes... WARNING: Un-translated message in PO file. 198: "Issues with file sharing servers such as Samba and NFS?" WARNING: Un-translated message in PO file. 201: "suidmanager/dpkg-statoverrides." WARNING: Un-translated message in PO file. 204: "lpr and lprng." WARNING: Un-translated message in PO file. 207: "Switching off the GNOME IP things." WARNING: Un-translated message in PO file. 210: "Talk about pam_chroot (see compartm... WARNING: Un-translated message in PO file. 219: "More information regarding log analysis software (i.e. logcheck... WARNING: Un-translated message in PO file. 222: "'advanced' routing (traffic policing is security related)." WARNING: Un-translated message in PO file. 225: "limiting ssh access to running certain comma... WARNING: Un-translated message in PO file. 228: "using dpkg-statoverride." WARNING: Un-translated message in PO file. 231: "secure ways to share a CD burner among users." WARNING: Un-translated message in PO file. 234: "secure ways of providing networked sound in addition to network... WARNING: Un-translated message in PO file. 237: "securing web browsers." WARNING: Un-translated message in PO file. 240: "setting up ftp over ssh." WARNING: Un-translated message in PO file. 243: "using crypto loopback file systems." WARNING: Un-translated message in PO file. 246: "ncrypting the entire file system." WARNING: Un-translated message in PO file. 249: "steganographic tools." WARNING: Un-translated message in PO file. 252: "setting up a PKA for an organization." WARNING: Un-translated message in PO file. 255: "using LDAP to manage users. There is a HOWTO of ldap+kerberos f... WARNING: Un-translated message in PO file. 258: "How to remove information of reduced utility in production syst... WARNING: Un-translated message in PO file. 261: "More information on lcap based on the packages README file (wel... WARNING: Un-translated message in PO file. 264: "Add Colin's article on how to setup a chroot environment for a ... WARNING: Un-translated message in PO file. 267: "Add information on running multiple snort se... WARNING: Un-translated message in PO file. 270: "Add information on setting up a honeypot (honeyd> en-US/02_before-begin.xml -> tmp/es-ES/xml_tmp//02_before-begin.xml WARNING: Un-translated message in PO file. 51: "The > en-US/03_before-install.xml -> tmp/es-ES/xml_tmp//03_before-install.xml WARNING: Un-translated message in PO file. 27: "Note: many BIOSes have well known default master passwords, and... WARNING: Un-translated message in PO file. 30: "Partitioning the system" WARNING: Un-translated message in PO file. 39: "Any directory tree which a user has write permissions to, such ... WARNING: Un-translated message in PO file. 42: "Any partition which can fluctuate, e.g. /varext3... WARNING: Un-translated message in PO file. 75: "Notice, however, that there are some partitions that might not ... WARNING: Un-translated message in PO file. 93: "Setting a good root password is the most basic requirement for ... WARNING: Un-translated message in PO file. 96: "Plenty of information on choosing good passwords can be found o... WARNING: Un-translated message in PO file. 108: "As you may already know, when you install a given service the d... WARNING: Un-translated message in PO file. 114: "If you want to keep some services but use them rarely, use the ... WARNING: Un-translated message in PO file. 117: "invoke-rc.d support is mandatory in Debian, ... WARNING: Un-translated message in PO file. 123: "Disabling a daemon service is quite simple. You either remove t... WARNING: Un-translated message in PO file. 126: "You can remove these links manually or using update-rc... WARNING: Un-translated message in PO file. 129: "\n # update-rc.d name stop XX/etc/init.d/service_name/etc/init.d/service_na... WARNING: Un-translated message in PO file. 182: "Remove the execute permission from the /etc/init.d//etc/init.d/service_name<... WARNING: Un-translated message in PO file. 188: "Nevertheless, the files under /etc/init.d ... WARNING: Un-translated message in PO file. 197: "Disabling inetd or its services" WARNING: Un-translated message in PO file. 200: "You should check if you really need the inetda lot of software, for e... WARNING: Un-translated message in PO file. 223: "Since you already know what the system is for (don't you?) you ... WARNING: Un-translated message in PO file. 226: "The presence, for example, of development utilities (a C compil... WARNING: Un-translated message in PO file. 229: "allowing him to do privilege escalation. It's easier, for examp... WARNING: Un-translated message in PO file. 232: "providing tools that could help the attacker to use the comprom... WARNING: Un-translated message in PO file. 235: "Of course, an intruder with local shell access can download his... WARNING: Un-translated message in PO file. 238: "Please notice that a default installation of Debian s... WARNING: Un-translated message in PO file. 241: "\nPackage Size\n------------------------+---... WARNING: Un-translated message in PO file. 263: "This is something that is fixed in releases post-sarge, see perlperl? You can see for yo... WARNING: Un-translated message in PO file. 275: "\n $ for i in /bin/* /sbin/* /usr/bin/* /usr/sbin/*; do [ -f $... WARNING: Un-translated message in PO file. 281: "These include the following utilities in packages with priority... WARNING: Un-translated message in PO file. 284: "/usr/bin/chkdupexe of package /usr/bin/replay of package bs... WARNING: Un-translated message in PO file. 290: "/usr/sbin/cleanup-info of package /usr/sbin/dpkg-divert of package /usr/sbin/dpkg-statoverride of package /usr/sbin/install-info of package /usr/sbin/update-alternatives of package <... WARNING: Un-translated message in PO file. 305: "/usr/sbin/update-rc.d of package /usr/bin/grog of package grof... WARNING: Un-translated message in PO file. 311: "/usr/sbin/adduser of package ... WARNING: Un-translated message in PO file. 314: "/usr/sbin/debconf-show of package /usr/sbin/deluser of package ... WARNING: Un-translated message in PO file. 320: "/usr/sbin/dpkg-preconfigure of package /usr/sbin/dpkg-reconfigure of package /usr/sbin/exigrep of package ... WARNING: Un-translated message in PO file. 329: "/usr/sbin/eximconfig of package /usr/sbin/eximstats of package /usr/sbin/exim-upgrade-to-r3 of package /usr/sbin/exiqsumm of package /usr/sbin/keytab-lilo of package /usr/sbin/liloconfig of package /usr/sbin/lilo_find_mbr of package /usr/sbin/syslogd-listfiles of package /usr/sbin/syslog-facility of package /usr/sbin/update-inetd of package > en-US/04_after-install.xml -> tmp/es-ES/xml_tmp//04_after-install.xml WARNING: Un-translated message in PO file. 18: "Once the system is installed you can still do more to secure th... WARNING: Un-translated message in PO file. 21: "Before connecting to any network, especially if it's a public o... WARNING: Un-translated message in PO file. 24: "Subscribe to the Debian Security Announce mailing list" WARNING: Un-translated message in PO file. 27: "In order to receive information on available security updates y... WARNING: Un-translated message in PO file. 30: "DSAs are signed with the Debian Security Team's signature which... WARNING: Un-translated message in PO file. 33: "You should consider, also, subscribing to the Note: If you are using the testi... WARNING: Un-translated message in PO file. 61: "Once you've done this you can use multiple tools to upgrade you... WARNING: Un-translated message in PO file. 64: "If you want to use aptitude's text i... WARNING: Un-translated message in PO file. 76: "If you want to use apt do just like ... WARNING: Un-translated message in PO file. 79: "If you want to use dselect then firs... WARNING: Un-translated message in PO file. 82: "If you like, you can add the deb-src lines to /etc/ap... WARNING: Un-translated message in PO file. 85: "Security update of libraries" WARNING: Un-translated message in PO file. 88: "Once you have executed a security update you might need to rest... WARNING: Un-translated message in PO file. 91: "From Debian Jessie and up, you can install... WARNING: Un-translated message in PO file. 94: "Some packages (like libc6) will do t... WARNING: Un-translated message in PO file. 97: "Bringing the system to run level 1 (single user) and then back ... WARNING: Un-translated message in PO file. 100: "Excercise caution when dealing with security upgrades if you ar... WARNING: Un-translated message in PO file. 103: "Security update of the kernel" WARNING: Un-translated message in PO file. 106: "First, make sure your kernel is being managed through the packa... WARNING: Un-translated message in PO file. 118: "If your kernel is not being managed you will see a message sayi... WARNING: Un-translated message in PO file. 121: "The installation system of recent Debian releases will handle t... WARNING: Un-translated message in PO file. 129: "To see if your kernel needs to be updated run:" WARNING: Un-translated message in PO file. 155: "If you are doing a security update which includes the kernel im... WARNING: Un-translated message in PO file. 158: "If you need to do a system reboot (because of a kernel upgrade)... WARNING: Un-translated message in PO file. 161: "Change the BIOS (again)" WARNING: Un-translated message in PO file. 164: "Remember ? Well, then you shoul... WARNING: Un-translated message in PO file. 167: "Another less secure but more convenient way is to change the se... WARNING: Un-translated message in PO file. 173: "Anybody can easily get a root-shell and change your passwords b... WARNING: Un-translated message in PO file. 176: "<name-of-your-bootimage> init=/bin/sh/etc/pam.d/login In older Debian releases ... WARNING: Un-translated message in PO file. 306: "securetty The /etc/securettyallowed users ca... WARNING: Un-translated message in PO file. 332: "disable this feature completely." WARNING: Un-translated message in PO file. 335: "If you want to restrict this, you must check the /etc... WARNING: Un-translated message in PO file. 338: "The default in Debian includes this switch:" WARNING: Un-translated message in PO file. 346: "The -a switch, as the init q after making any ... WARNING: Un-translated message in PO file. 355: "Restricting the use of the Magic SysRq key" WARNING: Un-translated message in PO file. 358: "The Magic SysRq key is a key combination t... WARNING: Un-translated message in PO file. 361: "Since the Etch release, the Magic SysRq key feature is enabled ... WARNING: Un-translated message in PO file. 373: "The default value shown above allows all of the SysRq functions... WARNING: Un-translated message in PO file. 376: "You should disable this functionality ifaccess to the console i... WARNING: Un-translated message in PO file. 379: "\n# Disables the magic SysRq key\nkernel.sysrq = 0" WARNING: Un-translated message in PO file. 385: "For more information, read Ext file system (e... WARNING: Un-translated message in PO file. 402: "only applies to ext2 or ext3noe... WARNING: Un-translated message in PO file. 456: "The following is a more thorough example. A note, though: /tmp noexec" WARNING: Un-translated message in PO file. 516: "Note that the Post-Invoke may fail with a \"/usr busy\" error m... WARNING: Un-translated message in PO file. 524: "Stop or restart these programs and run the Post-Invoke manually... WARNING: Un-translated message in PO file. 533: "PAM (Pluggable Authentication Modules) allows system administra... WARNING: Un-translated message in PO file. 536: "Each application with PAM support provides a configuration file... WARNING: Un-translated message in PO file. 539: "what backend is used for authentication." WARNING: Un-translated message in PO file. 542: "what backend is used for sessions." WARNING: Un-translated message in PO file. 545: "how do password checks behave." WARNING: Un-translated message in PO file. 548: "The following description is far from complete, for more inform... WARNING: Un-translated message in PO file. 554: "Password security in PAM" WARNING: Un-translated message in PO file. 557: "Review the /etc/pam.d/common-password, inc... WARNING: Un-translated message in PO file. 560: "You have to make sure that the pam_unix.so module uses the \"sh... WARNING: Un-translated message in PO file. 563: "The line with the definition of the pam_unix module will look s... WARNING: Un-translated message in PO file. 578: "Enforces password encryption when storing passwords, using the ... WARNING: Un-translated message in PO file. 581: "Enables password complexity checks (option obscuremin/etc/pam.d/lo... WARNING: Un-translated message in PO file. 675: "Since there have been a number of so called insecure tempfile v... WARNING: Un-translated message in PO file. 683: "There has also been a discussion about adding this by default i... WARNING: Un-translated message in PO file. 729: "You should really take a serious look into this file. Here you ... WARNING: Un-translated message in PO file. 732: "If you do not restrict resource usage, any... WARNING: Un-translated message in PO file. 735: "There is a way to add resource limits to some shells (for examp... WARNING: Un-translated message in PO file. 738: "Resource limits are imposed by the kernel, but they need to be ... WARNING: Un-translated message in PO file. 746: "Commonly, login, ssh ... WARNING: Un-translated message in PO file. 749: "The specific limits settings you might want to enforce depend o... WARNING: Un-translated message in PO file. 752: "For example, the configuration example below enforces a 100 pro... WARNING: Un-translated message in PO file. 788: "These would be the limits a default user (including system daem... WARNING: Un-translated message in PO file. 852: "For more information read:" WARNING: Un-translated message in PO file. 855: "LASG in ... WARNING: Un-translated message in PO file. 867: "User login actions: edit /etc/login.defs" WARNING: Un-translated message in PO file. 870: "The next step is to edit the basic configuration and action upo... WARNING: Un-translated message in PO file. 886: "If you set this variable to 'yes' it will record unknown userna... WARNING: Un-translated message in PO file. 902: "The same as SYSLOG_SU_ENAB but applies to th... WARNING: Un-translated message in PO file. 910: "As stated above, encrypted passwords greatly reduce the problem... WARNING: Un-translated message in PO file. 913: "User login actions: edit /etc/pam.d/login" WARNING: Un-translated message in PO file. 916: "You can adjust the login configuration file to implement an str... WARNING: Un-translated message in PO file. 924: "Increasing the delay value to a higher val... WARNING: Un-translated message in PO file. 927: "In this file you can also set the system to present a message t... WARNING: Un-translated message in PO file. 935: "If required by your security policy, this file can be used to s... WARNING: Un-translated message in PO file. 938: "setting rules for which users can access at which times, by ena... WARNING: Un-translated message in PO file. 941: "setup login sessions to use user limits as defined in /etc/motd and /... WARNING: Un-translated message in PO file. 950: "Restricting ftp: editing /etc/ftpusers" WARNING: Un-translated message in PO file. 959: "A convenient way to add all system accounts to the /e... WARNING: Un-translated message in PO file. 982: "You should also modify /etc/security/access.conf/etc/security/a... WARNING: Un-translated message in PO file. 993: "Remember to enable the pam_access mo... WARNING: Un-translated message in PO file. 1005: "Debian currently provides in the unstable release (and might be... WARNING: Un-translated message in PO file. 1011: "Information on how to chroot users accessing... WARNING: Un-translated message in PO file. 1017: "If you are really paranoid you might want to add a system-wide ... WARNING: Un-translated message in PO file. 1020: "Input and output audit with script" WARNING: Un-translated message in PO file. 1023: "You can use the script command to audit both... WARNING: Un-translated message in PO file. 1035: "Of course, if you do this system wide it means that the shell w... WARNING: Un-translated message in PO file. 1038: "You also need to setup the files in the audit directory (in the... WARNING: Un-translated message in PO file. 1041: "A useful alternative for sysadmins, which includes date informa... WARNING: Un-translated message in PO file. 1053: "Using the shell history file" WARNING: Un-translated message in PO file. 1056: "If you want to review what does the user type in the shell (but... WARNING: Un-translated message in PO file. 1059: "For example, for bash, the /etc/profile co... WARNING: Un-translated message in PO file. 1093: "For this to work, the user can only append information to umask setting is ... WARNING: Un-translated message in PO file. 1132: "If Debian's default value is too permissive for your system you... WARNING: Un-translated message in PO file. 1135: "This change is set by defining a proper umasklogin the U... WARNING: Un-translated message in PO file. 1141: "Don't forget to review and maybe modify the dotfiles under umasklibpam-umask package adjusts the... WARNING: Un-translated message in PO file. 1155: "Finally, you should consider changing root's default 022 umask ... WARNING: Un-translated message in PO file. 1164: "If you need to grant users access to the system with a shell th... WARNING: Un-translated message in PO file. 1167: "some configuration files in /etc. However,... WARNING: Un-translated message in PO file. 1173: "as superuser." WARNING: Un-translated message in PO file. 1176: "your installed packages, either by looking at the package datab... WARNING: Un-translated message in PO file. 1179: "some log files at /var/log. Note also that... WARNING: Un-translated message in PO file. 1185: ") and some are even only available to the root user (try" WARNING: Un-translated message in PO file. 1196: "What can a user see in your system? Probably quite a lot of thi... WARNING: Un-translated message in PO file. 1208: "The output is the list of files that a user can see$HOME directories are create... WARNING: Un-translated message in PO file. 1223: "You can change this behavior so that user creation provides dif... WARNING: Un-translated message in PO file. 1226: "Users can still share information, but not directly in their Passwd does not allow non-interactive assign... WARNING: Un-translated message in PO file. 1244: "User passwords can sometimes become the weakest link<... WARNING: Un-translated message in PO file. 1247: "A system administrator must, given a big number of users, check... WARNING: Un-translated message in PO file. 1250: "An administrator can use john or bash is the user shell, a system ... WARNING: Un-translated message in PO file. 1274: "Install timeoutd and configure autolog and configure it to ... WARNING: Un-translated message in PO file. 1280: "The timeoutd or autolog d... WARNING: Un-translated message in PO file. 1286: "TCP wrappers were developed when there were no real packet filt... WARNING: Un-translated message in PO file. 1298: "On the one hand, for services configured in /etc/inet... WARNING: Un-translated message in PO file. 1301: "To see which packages use tcpwrappers On older... WARNING: Un-translated message in PO file. 1347: "Debian GNU/Linux provides some tools to perform log analysis, m... WARNING: Un-translated message in PO file. 1363: "To colorize the logs, you could take a look at col... WARNING: Un-translated message in PO file. 1369: "The logcheck package in Debian is divided in... WARNING: Un-translated message in PO file. 1375: "The best way to configure logcheck is to edi... WARNING: Un-translated message in PO file. 1378: "Once this is done you might want to check the mails that are se... WARNING: Un-translated message in PO file. 1402: "A loghost is a host which collects syslog data remotely over th... WARNING: Un-translated message in PO file. 1408: "and a new loghost is born. In order to do this permanently in D... WARNING: Un-translated message in PO file. 1440: "into your syslog.conf. Logging remotely as... WARNING: Un-translated message in PO file. 1446: "It is not only important to decide how alerts are used, but als... WARNING: Un-translated message in PO file. 1473: "To customize how log files are created you will probably have t... WARNING: Un-translated message in PO file. 1482: "Linux Intrusion DetectionLinux Trustees<... WARNING: Un-translated message in PO file. 1488: "NSA Enhanced Linux (in package selinuxGrsecurity patch<... WARNING: Un-translated message in PO file. 1497: "The kernel-patch-adamantix provides ... WARNING: Un-translated message in PO file. 1500: "cryptoloop-source. This patches allo... WARNING: Un-translated message in PO file. 1503: "IPSEC kernel support (in package linux-patch-opens... WARNING: Un-translated message in PO file. 1506: "The following security kernel patches are only available for ol... WARNING: Un-translated message in PO file. 1509: "kernel-patch-int. This patch also ad... WARNING: Un-translated message in PO file. 1518: "However, some patches have not been provided in Debian yet. If ... WARNING: Un-translated message in PO file. 1524: "Buffer overflow is the name of a common at... WARNING: Un-translated message in PO file. 1527: "There are mainly four methods to protect against buffer overflo... WARNING: Un-translated message in PO file. 1530: "patch the kernel to prevent stack execution. You can use either... WARNING: Un-translated message in PO file. 1533: "fix the source code by using tools to find fragments of it that... WARNING: Un-translated message in PO file. 1536: "recompile the source code to introduce proper checks that preve... WARNING: Un-translated message in PO file. 1539: "Debian GNU/Linux, as of the 3.0 release, provides software to i... WARNING: Un-translated message in PO file. 1542: "Notice that even if Debian provided a compiler which featured s... WARNING: Un-translated message in PO file. 1545: "In any case, be aware that even these workarounds might not pre... WARNING: Un-translated message in PO file. 1548: "If you want to test out your buffer overflow protection once yo... WARNING: Un-translated message in PO file. 1554: "Kernel patches related to buffer overflows include the Openwall... WARNING: Un-translated message in PO file. 1557: "Testing programs for overflows" WARNING: Un-translated message in PO file. 1560: "The use of tools to detect buffer overflows requires, in any ca... WARNING: Un-translated message in PO file. 1566: "During normal system administration one usually needs to transf... WARNING: Un-translated message in PO file. 1569: "Any of these methods need special clients. Debian does provide ... WARNING: Un-translated message in PO file. 1572: "Note that using scp provides access to the u... WARNING: Un-translated message in PO file. 1599: "Every partition or directory to which users have full write acc... WARNING: Un-translated message in PO file. 1613: "for a /home file system)." WARNING: Un-translated message in PO file. 1616: "Restart quota by doing" WARNING: Un-translated message in PO file. 1619: "/etc/init.d/quota stop;/etc/init.d/quota\n st... WARNING: Un-translated message in PO file. 1623: ". Now quota should be running, and quota sizes can be set." WARNING: Un-translated message in PO file. 1626: "Editing quotas for a specific user can be done by" WARNING: Un-translated message in PO file. 1632: ". Group quotas can be modified with" WARNING: Un-translated message in PO file. 1638: ". Then set the soft and hard quota and/or inode quotas as neede... WARNING: Un-translated message in PO file. 1644: "The ext2 filesystem specific attributes (chattrlcap CAP_LINUX_IMMUTABLEsxid,... WARNING: Un-translated message in PO file. 1695: "You might want to use locate to index the wh... WARNING: Un-translated message in PO file. 1698: "You might want to use bsign or checksecurity package pro... WARNING: Un-translated message in PO file. 1719: "Many features of the kernel can be modified while running by ec... WARNING: Un-translated message in PO file. 1725: "(see sysctlWindows emulator because it acts... WARNING: Un-translated message in PO file. 1736: "If you want to prevent you system from answering ICMP echo requ... WARNING: Un-translated message in PO file. 1752: "For more information on what things can be done with ... WARNING: Un-translated message in PO file. 1755: "Configuring syncookies" WARNING: Un-translated message in PO file. 1758: "This option is a double-edged sword. On the one hand it protect... WARNING: Un-translated message in PO file. 1766: "If you want to change this option each time the kernel is worki... WARNING: Un-translated message in PO file. 1774: "This option will only be available if the kernel is compiled wi... WARNING: Un-translated message in PO file. 1786: "For more information on TCP syncookies read /etc/sysctl.conf configura... WARNING: Un-translated message in PO file. 1801: "\n#\n# /etc/sysctl.conf - Configuration file for setting system... WARNING: Un-translated message in PO file. 1857: "To use the script you need to first create the script, for exam... WARNING: Un-translated message in PO file. 1879: "In this example, before the interface eth0 is enabled the scrip... WARNING: Un-translated message in PO file. 1947: "Notice that you can actually have per-interface scripts that wi... WARNING: Un-translated message in PO file. 1955: "And use a script which will only apply changes to a specific in... WARNING: Un-translated message in PO file. 2037: "An alternative solution is to create an init.d The fact that thi... WARNING: Un-translated message in PO file. 2089: "kernel patching. There are some patches availa... WARNING: Un-translated message in PO file. 2092: "Along this text there will be many occasions in which it is sho... WARNING: Un-translated message in PO file. 2104: "When you don't trust the other boxes on your LAN (which should ... WARNING: Un-translated message in PO file. 2107: "As you know the ARP protocol is used to link IP addresses to MA... WARNING: Un-translated message in PO file. 2110: "Those attacks (ARP cache poisoning, ARP spoofing...) allow the ... WARNING: Un-translated message in PO file. 2113: "However, there is always a solution:" WARNING: Un-translated message in PO file. 2116: "Use a static ARP cache. You can set up \"static\" entries in yo... WARNING: Un-translated message in PO file. 2128: "By setting static entries for each important host in your netwo... WARNING: Un-translated message in PO file. 2131: "Detect suspicious ARP traffic. You can use arpwatc... WARNING: Un-translated message in PO file. 2134: "Implement IP traffic filtering validating the MAC address." WARNING: Un-translated message in PO file. 2137: "Taking a snapshot of the system" WARNING: Un-translated message in PO file. 2140: "Before putting the system into production system you could take... WARNING: Un-translated message in PO file. 2143: "For this you can use a writable removable-media that can be set... WARNING: Un-translated message in PO file. 2146: "The following script creates such a snapshot:" WARNING: Un-translated message in PO file. 2149: "\n#!/bin/bash\n/bin/mount /dev/fd0 /mnt/floppy\ntrap \"/bin/umo... WARNING: Un-translated message in PO file. 2182: "Note that the md5sum binary (and sha1sum, if available) is plac... WARNING: Un-translated message in PO file. 2185: "The snapshot does not include the files under /var/li... WARNING: Un-translated message in PO file. 2188: "the md5sums files include the md5sum of all files provided by t... WARNING: Un-translated message in PO file. 2191: "not all Debian packages provide md5sums for the files installed... WARNING: Un-translated message in PO file. 2199: "Once the snapshot is done you should make sure to set the mediu... WARNING: Un-translated message in PO file. 2202: "If you do not want to setup a manual check you can always use a...  Merging es-ES/05_services.po >> en-US/05_services.xml -> tmp/es-ES/xml_tmp//05_services.xml WARNING: Un-translated message in PO file. 30: "Regarding the services running from inetd (<... WARNING: Un-translated message in PO file. 80: "Port 666 or ListenAddress 192.168.0... WARNING: Un-translated message in PO file. 83: "PermitEmptyPasswords no Empty passwords make... WARNING: Un-translated message in PO file. 86: "AllowUsers alex ref me@somewhere Allow only ... WARNING: Un-translated message in PO file. 95: "Disable any form of authentication you do not really need, if y... WARNING: Un-translated message in PO file. 98: "Protocol 2 Disable the protocol version 1, s... WARNING: Un-translated message in PO file. 101: "Banner /etc/some_filep... WARNING: Un-translated message in PO file. 107: "\nauth required pam_listfile.so sense=allow onerr=fai... WARNING: Un-translated message in PO file. 117: "Chrooting ssh" WARNING: Un-translated message in PO file. 120: "Currently OpenSSH does not provide a way to chroot automaticall... WARNING: Un-translated message in PO file. 123: "In you can find several opt... WARNING: Un-translated message in PO file. 126: "Ssh clients" WARNING: Un-translated message in PO file. 129: "If you are using an SSH client against the SSH server you must ... WARNING: Un-translated message in PO file. 132: "Disallowing file transfers" WARNING: Un-translated message in PO file. 135: "If you do not want users to transfer files... WARNING: Un-translated message in PO file. 138: "You can also chroot users (using libpam-chrootscponlysquidtaild - Squid log monitoring pr... WARNING: Un-translated message in PO file. 226: "When using Squid in Accelerator Mode it acts as a web server to... WARNING: Un-translated message in PO file. 258: "A much more secure solution, though, is to use ssh to tunnel X ... WARNING: Un-translated message in PO file. 281: "If you are using XDM set /etc/X11/xdm/Xserversxscr... WARNING: Un-translated message in PO file. 292: "(which is the default in Debian) to:" WARNING: Un-translated message in PO file. 320: "For GDM there should be in your gdm.conf:" WARNING: Un-translated message in PO file. 403: "If you have exim you do not need the daemon ... WARNING: Un-translated message in PO file. 406: "Configuring a Nullmailer" WARNING: Un-translated message in PO file. 409: "You might want to have a local mailer daemon so that it can rel... WARNING: Un-translated message in PO file. 412: "Such a relay-only system should be configu... WARNING: Un-translated message in PO file. 415: "The following configuration steps only need to be taken to conf... WARNING: Un-translated message in PO file. 418: "In a Debian 3.0 system using exim, y... WARNING: Un-translated message in PO file. 448: "In any case, to reject mail relay attempts at the SMTP level, y... WARNING: Un-translated message in PO file. 456: "Even if your mail server will not relay the message, this kind ... WARNING: Un-translated message in PO file. 459: "If you want a relay-only setup, however, you can consider chang... WARNING: Un-translated message in PO file. 462: "Providing secure access to mailboxes" WARNING: Un-translated message in PO file. 465: "If you want to give remote access to mailboxes there are a numb... WARNING: Un-translated message in PO file. 468: "Try, for example, to configure as your inbox path {ser... WARNING: Un-translated message in PO file. 471: "Of the IMAP servers in Debian the cyrus serv... WARNING: Un-translated message in PO file. 474: "Also, you might want to run an IMAP server that does not need v... WARNING: Un-translated message in PO file. 531: "Bind configuration to avoid misuse" WARNING: Un-translated message in PO file. 575: "A sample named.conf configuration file mig... WARNING: Un-translated message in PO file. 699: "Please (again) check the Bug Tracking System regarding Bind, sp... WARNING: Un-translated message in PO file. 702: "Changing BIND's user" WARNING: Un-translated message in PO file. 708: "Notice, in any case, that this only applies to BIND version 8. ... WARNING: Un-translated message in PO file. 725: "Notice that the user named will be quite res... WARNING: Un-translated message in PO file. 741: "toNote that depending on your bind version you ... WARNING: Un-translated message in PO file. 749: "Or you can change (create it if it does not exit) the default c... WARNING: Un-translated message in PO file. 757: "Change the permissions of files that are used by Bind, includin... WARNING: Un-translated message in PO file. 765: "and where bind creates its pidfile, using, for example, does not run as root... WARNING: Un-translated message in PO file. 835: "Chrooting the name server" WARNING: Un-translated message in PO file. 838: "To achieve maximum BIND security, now build a chroot jail (see ... WARNING: Un-translated message in PO file. 868: "Also, you can find more information regarding Bind chrooting in... WARNING: Un-translated message in PO file. 871: "If you are setting up a full chroot jail (i.e. not just syslogd listen on $... WARNING: Un-translated message in PO file. 908: "If you want to avoid problems with dynamic libraries, you can c... WARNING: Un-translated message in PO file. 932: "After installation, you will need to move around the files to t... WARNING: Un-translated message in PO file. 935: "For more information on how to set up chroots see ... WARNING: Un-translated message in PO file. 995: "However, if the module was linked statically (you can list the ... WARNING: Un-translated message in PO file. 1003: "An attacker might still do user enumeration, since the answer o... WARNING: Un-translated message in PO file. 1009: "Apache logfiles, since 1.3.22-1, are owned by user 'root' and g... WARNING: Un-translated message in PO file. 1012: "Published web files" WARNING: Un-translated message in PO file. 1015: "Apache files are located under /var/www. J... WARNING: Un-translated message in PO file. 1048: "Many services running as daemons could benefit from this sort o... WARNING: Un-translated message in PO file. 1051: "This includes: name servers (such as bind), ... WARNING: Un-translated message in PO file. 1054: "However, Debian does provide some software that can help set up... WARNING: Un-translated message in PO file. 1057: "Anyway, if you run any service on your system, you should consi... WARNING: Un-translated message in PO file. 1063: "Making chrooted environments automatically" WARNING: Un-translated message in PO file. 1066: "There are several programs to chroot automatically servers and ... WARNING: Un-translated message in PO file. 1069: "Some of these tools can be used to set up the chroot environmen... WARNING: Un-translated message in PO file. 1099: "Securing RPC services" WARNING: Un-translated message in PO file. 1102: "You should disable RPC if you do not need it." WARNING: Un-translated message in PO file. 1105: "Remote Procedure Call (RPC) is a protocol that programs can use... WARNING: Un-translated message in PO file. 1108: "RPC-based services have had a bad record of security holes, alt... WARNING: Un-translated message in PO file. 1111: "You only need RPC if you are using an RPC-based service. The mo... WARNING: Un-translated message in PO file. 1114: "NFS services are quite important in some networks. If that is t... WARNING: Un-translated message in PO file. 1123: "Notice that some desktop environments (notably, GNOME) use RPC ... WARNING: Un-translated message in PO file. 1129: "Unfortunately, in some cases removing RPC services from the sys... WARNING: Un-translated message in PO file. 1132: "There are several ways to limit access to the portmapper and to... WARNING: Un-translated message in PO file. 1135: "Block access to the ports used by these services with a local f... WARNING: Un-translated message in PO file. 1138: "Block access to these services using tcp wrappers, since the po... WARNING: Un-translated message in PO file. 1141: "Since version 5-5, the portmap packa... WARNING: Un-translated message in PO file. 1147: "The Debian GNU/Linux operating system has the built-in capabili... WARNING: Un-translated message in PO file. 1159: "On the other hand, having firewall rules on the local system al... WARNING: Un-translated message in PO file. 1162: "Thus, a proper firewall setup would be one with a default deny ... WARNING: Un-translated message in PO file. 1165: "incoming connections are allowed only to local services by allo... WARNING: Un-translated message in PO file. 1168: "outgoing connections are only allowed to services used by your ... WARNING: Un-translated message in PO file. 1171: "the forward rule denies everything (unless you are protecting o... WARNING: Un-translated message in PO file. 1180: "A Debian firewall can also be installed in order to protect, wi... WARNING: Un-translated message in PO file. 1183: "You can even set up a Debian GNU/Linux box as a bridge firewall... WARNING: Un-translated message in PO file. 1189: "The default Debian installation, unlike other Linux distributio... WARNING: Un-translated message in PO file. 1192: "Of course, the configuration of the firewall is always system a... WARNING: Un-translated message in PO file. 1195: "The tools can easily be misused, causing enormous amo... WARNING: Un-translated message in PO file. 1198: "Remember this: just installing the iptablesfirestarter, a GNOME application ori... WARNING: Un-translated message in PO file. 1222: "guarddog, a KDE based firewall confi... WARNING: Un-translated message in PO file. 1225: "knetfilter, a KDE GUI to manage fire... WARNING: Un-translated message in PO file. 1228: "fireflier, an interactive tool to create iptables rules based o... WARNING: Un-translated message in PO file. 1231: "For servers (headless) systems:" WARNING: Un-translated message in PO file. 1234: "fwbuilder, an object oriented GUI wh... WARNING: Un-translated message in PO file. 1237: "shorewall, a firewall configuration ... WARNING: Un-translated message in PO file. 1240: "bastille, this hardening application... WARNING: Un-translated message in PO file. 1243: "Lots of other iptables frontends come with Debian; an extensive... WARNING: Un-translated message in PO file. 1246: "Notice that some of the packages outlined previously will intro... WARNING: Un-translated message in PO file. 1249: "As mentioned before, some programs, like firestart... WARNING: Un-translated message in PO file. 1252: "There is yet another type of firewall application: application ... WARNING: Un-translated message in PO file. 1255: "Manual init.d configuration" WARNING: Un-translated message in PO file. 1258: "Another possibility is to manually configure your firewall rule... WARNING: Un-translated message in PO file. 1261: "Review the script below and adapt it to your needs." WARNING: Un-translated message in PO file. 1264: "Test the script and review the syslog messages to see which tra... WARNING: Un-translated message in PO file. 1267: "Move the script to /etc/init.d/myfirewall" WARNING: Un-translated message in PO file. 1270: "The below script takes advantage of Debian's use (since Squeeze... WARNING: Un-translated message in PO file. 1603: "Instead of including all of the iptables rules in the init.d sc... WARNING: Un-translated message in PO file. 1606: "Configuring firewall rules through ifup" WARNING: Un-translated message in PO file. 1609: "You can use also the network configuration in /etc/ne... WARNING: Un-translated message in PO file. 1612: "Create your firewalling ruleset for when the interface is activ... WARNING: Un-translated message in PO file. 1615: "Save your ruleset with iptables-save to a fi... WARNING: Un-translated message in PO file. 1618: "Configure /etc/network/interfaces to use t... WARNING: Un-translated message in PO file. 1634: "You can optionally also setup a set of rules to be applied when... WARNING: Un-translated message in PO file. 1642: "For more advanced firewall configuration scripts through > en-US/06_automatic.xml -> tmp/es-ES/xml_tmp//06_automatic.xml WARNING: Un-translated message in PO file. 27: "The harden package tries to make it more eas... WARNING: Un-translated message in PO file. 45: "harden-nids: helps to install a network intr... WARNING: Un-translated message in PO file. 48: "harden-surveillance: helps to install tools ... WARNING: Un-translated message in PO file. 51: "Useful packages which are not a dependence:" WARNING: Un-translated message in PO file. 54: "harden-doc: provides this same manual and ot... WARNING: Un-translated message in PO file. 57: "harden-development: development tools for cr... WARNING: Un-translated message in PO file. 92: "Answer questions step by step regarding the desired security of... WARNING: Un-translated message in PO file. 98: "Take a predefined configuration file (could be provided by Bast...  Merging es-ES/07_infrastructure.po >> en-US/07_infrastructure.xml -> tmp/es-ES/xml_tmp//07_infrastructure.xml WARNING: Un-translated message in PO file. 21: "Debian has a Security Team, that handles security in the debsecan uses the information in... WARNING: Un-translated message in PO file. 132: "Debian Security Build Infrastructure" WARNING: Un-translated message in PO file. 135: "Since Debian is currently supported in a large number of archit... WARNING: Un-translated message in PO file. 138: "Packages in the security archive are autobuilt, just like the r... WARNING: Un-translated message in PO file. 141: "Thus, the security upload archive works with the following proc... WARNING: Un-translated message in PO file. 144: "Someone finds a security problem." WARNING: Un-translated message in PO file. 147: "Someone fixes the problem, and makes an upload to security-mast... WARNING: Un-translated message in PO file. 150: "The upload gets checked and processed by a Debian system and mo... WARNING: Un-translated message in PO file. 153: "Security-enabled buildds pick up the source package (prioritize... WARNING: Un-translated message in PO file. 156: "The security team reply to the logs, and the newly built packag... WARNING: Un-translated message in PO file. 159: "When the security team find the source package acceptable (i.e.... WARNING: Un-translated message in PO file. 162: "installs the package into the security archive." WARNING: Un-translated message in PO file. 165: "updates the Packages, SourcesRelease file is downloaded by ... WARNING: Un-translated message in PO file. 222: "This scheme is etch<... WARNING: Un-translated message in PO file. 234: "These changes are based on the patch for apt... WARNING: Un-translated message in PO file. 237: "Secure apt works by checking the distribution through the gpg is the tool used in secure apt to sign f... WARNING: Un-translated message in PO file. 270: "apt-key is a program that is used to manage ... WARNING: Un-translated message in PO file. 273: "Release checksums" WARNING: Un-translated message in PO file. 276: "A Debian archive contains a Release file, ... WARNING: Un-translated message in PO file. 294: "The Release files also include SHA-1 check... WARNING: Un-translated message in PO file. 297: "Now if we look inside a Packages file, we'... WARNING: Un-translated message in PO file. 300: "\n Package: uqm\n Priority: optional\n ...\n Filena... WARNING: Un-translated message in PO file. 310: "These two checksums can be used to verify that you have downloa... WARNING: Un-translated message in PO file. 313: "None of this is new in secure apt, but it does provide the foun... WARNING: Un-translated message in PO file. 316: "Verification of the Release file" WARNING: Un-translated message in PO file. 319: "To verify the Release file, a gpg signatur... WARNING: Un-translated message in PO file. 341: "Check of Release.gpg by aptRelease.gpg fi... WARNING: Un-translated message in PO file. 347: "\nW: GPG error: http://ftp.us.debian.org testing Release: The f... WARNING: Un-translated message in PO file. 353: "Note that the second half of the long number is the key id of t... WARNING: Un-translated message in PO file. 356: "If you ignore that warning and try to install a package later, ... WARNING: Un-translated message in PO file. 359: "\nWARNING: The following packages cannot be authenticated!\n l... WARNING: Un-translated message in PO file. 366: "If you say Y here you have no way to know if the file you're ge... WARNING: Un-translated message in PO file. 369: "Note that you can disable these checks by running apt with --al... WARNING: Un-translated message in PO file. 372: "It's also worth noting that newer versions of the Debian instal... WARNING: Un-translated message in PO file. 375: "How to tell apt what to trust" WARNING: Un-translated message in PO file. 378: "So the security of the whole system depends on there being a apt trust the official Debian... WARNING: Un-translated message in PO file. 405: "Finding the key for a repository" WARNING: Un-translated message in PO file. 408: "The debian-archive-keyring package is used to distribute keys t... WARNING: Un-translated message in PO file. 411: "For other archives, there is not yet a standard location where ... WARNING: Un-translated message in PO file. 414: "The Debian archive signing key is available at gpg itself has a standard way to distribute ... WARNING: Un-translated message in PO file. 437: "You can then export that key from your own keyring and feed it ... WARNING: Un-translated message in PO file. 451: "The \"gpg: no ultimately trusted keys found\" warning means tha... WARNING: Un-translated message in PO file. 457: "By adding a key to apt's keyring, you're telling apt to trust e... WARNING: Un-translated message in PO file. 460: "It's good to be paranoid in security, but verifying things from... WARNING: Un-translated message in PO file. 463: "If you can't afford this level of paranoia, do whatever feels a... WARNING: Un-translated message in PO file. 469: "You can verify the fingerprint as well as the signatures on the... WARNING: Un-translated message in PO file. 472: "\n$ GET http://ftp-master.debian.org/ziyi_key_2006.asc | gpg --... WARNING: Un-translated message in PO file. 493: "and then ... WARNING: Un-translated message in PO file. 517: "In January 2006, a new key for 2006 was made and the Release fi... WARNING: Un-translated message in PO file. 520: "Known release checking problems" WARNING: Un-translated message in PO file. 523: "One not so obvious problem is that if your clock is very far of... WARNING: Un-translated message in PO file. 526: "\nW: GPG error: http://archive.progeny.com sid Release: Unknown... WARNING: Un-translated message in PO file. 530: "Although apt-key list will make the problem ... WARNING: Un-translated message in PO file. 546: "If it's set to a date too far in the future, apt will treat the... WARNING: Un-translated message in PO file. 549: "Another problem you may encouter if using testing or unstable i... WARNING: Un-translated message in PO file. 552: "Manual per distribution release check" WARNING: Un-translated message in PO file. 555: "In case you want to add now the additional security checks and ... WARNING: Un-translated message in PO file. 598: "This is the example code for apt-check-sigs,... WARNING: Un-translated message in PO file. 1066: "You might need to apply the following patch for sid... WARNING: Un-translated message in PO file. 1118: "\n$ rm -f dists/unstable/Release\n$ apt-ftparchive release dist... WARNING: Un-translated message in PO file. 1131: "This package signing scheme can be implemented using d... WARNING: Un-translated message in PO file. 1134: "Latest dpkg versions (since 1.9.21) incorpor... WARNING: Un-translated message in PO file. 1140: "NOTE2: Signatures from developers are currently stripped when t...  Merging es-ES/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/es-ES/xml_tmp//08_sec-tools.xml WARNING: Un-translated message in PO file. 21: "Debian provides also a number of security tools that can make a... WARNING: Un-translated message in PO file. 24: "Since Debian 3.0 (woody), the distribution... WARNING: Un-translated message in PO file. 30: "The tools provided by Debian to perform remote vulnerability as... WARNING: Un-translated message in PO file. 33: "nessus" WARNING: Un-translated message in PO file. 36: "raccess" WARNING: Un-translated message in PO file. 39: "nikto (whisker's ... WARNING: Un-translated message in PO file. 45: "nikto is a web-only vulnerability as... WARNING: Un-translated message in PO file. 54: "nmap" WARNING: Un-translated message in PO file. 57: "xprobe" WARNING: Un-translated message in PO file. 60: "p0f" WARNING: Un-translated message in PO file. 63: "knocker" WARNING: Un-translated message in PO file. 66: "isic" WARNING: Un-translated message in PO file. 69: "hping2" WARNING: Un-translated message in PO file. 72: "icmpush" WARNING: Un-translated message in PO file. 75: "nbtscan (for SMB /NetBIOS audits)" WARNING: Un-translated message in PO file. 78: "fragrouter" WARNING: Un-translated message in PO file. 81: "strobe (in the netdiagirpas" WARNING: Un-translated message in PO file. 93: "On the other hand, fragrouter can be... WARNING: Un-translated message in PO file. 114: "flawfinder" WARNING: Un-translated message in PO file. 117: "rats" WARNING: Un-translated message in PO file. 120: "splint" WARNING: Un-translated message in PO file. 123: "pscan" WARNING: Un-translated message in PO file. 129: "A virtual private network (VPN) is a group of two or more compu... WARNING: Un-translated message in PO file. 135: "vtun" WARNING: Un-translated message in PO file. 138: "tunnelv (non-US section)" WARNING: Un-translated message in PO file. 141: "cipe-source, cipe-commo... WARNING: Un-translated message in PO file. 144: "tinc" WARNING: Un-translated message in PO file. 147: "secvpn" WARNING: Un-translated message in PO file. 150: "pptpd" WARNING: Un-translated message in PO file. 153: "openvpn" WARNING: Un-translated message in PO file. 156: "openswan (... WARNING: Un-translated message in PO file. 249: "mailscanner an e-mail gateway virus ... WARNING: Un-translated message in PO file. 252: "libfile-scan-perl which provides Fil... WARNING: Un-translated message in PO file. 255: "exiscan, an e-mail virus scanner wri... WARNING: Un-translated message in PO file. 267: "blackhole-qmail a spam filter for Qm... WARNING: Un-translated message in PO file. 270: "Some gateway daemons support already tools extensions to build ... WARNING: Un-translated message in PO file. 273: "Debian currently provide clamav as the only ... WARNING: Un-translated message in PO file. 276: "Some other free software antivirus projects which might be incl... WARNING: Un-translated message in PO file. 285: "However, Debian will never provide propiet... WARNING: Un-translated message in PO file. 288: "For more information on how to set up a virus detection system ... WARNING: Un-translated message in PO file. 291: "GPG agent" WARNING: Un-translated message in PO file. 294: "It is very common nowadays to digitally sign (and sometimes enc... WARNING: Un-translated message in PO file. 297: "Debian GNU/Linux provides a number of e-mail clients with built... WARNING: Un-translated message in PO file. 300: "evolution." WARNING: Un-translated message in PO file. 303: "mutt." WARNING: Un-translated message in PO file. 306: "kmail." WARNING: Un-translated message in PO file. 309: "icedove (rebranded version of Mozill... WARNING: Un-translated message in PO file. 312: "sylpheed. Depending on how the stabl... WARNING: Un-translated message in PO file. 315: "gnus, which when installed with the ... WARNING: Un-translated message in PO file. 318: "kuvert, which provides this function... WARNING: Un-translated message in PO file. 321: "Key servers allow you to download published public keys so that... WARNING: Un-translated message in PO file. 329: "Most key servers are linked, so that when your public key is ad... WARNING: Un-translated message in PO file. 335: "> en-US/09_developer.xml -> tmp/es-ES/xml_tmp//09_developer.xml WARNING: Un-translated message in PO file. 15: "Developer's Best Practices for OS Security" WARNING: Un-translated message in PO file. 18: "This chapter introduces some best secure coding practices for d... WARNING: Un-translated message in PO file. 21: "Best practices for security review and design" WARNING: Un-translated message in PO file. 24: "Developers that are packaging software should make a best effor... WARNING: Un-translated message in PO file. 27: "In order to do so, they should make their best to review the so... WARNING: Un-translated message in PO file. 30: "The programming bugs which lead to security bugs typically incl... WARNING: Un-translated message in PO file. 33: "Some of these issues might not be easy to spot unless you are a... WARNING: Un-translated message in PO file. 36: "There are a set of tools available to assist to the security co... WARNING: Un-translated message in PO file. 39: "When packaging software developers have to make sure that they ... WARNING: Un-translated message in PO file. 42: "The software runs with the minimum privileges it needs:" WARNING: Un-translated message in PO file. 45: "The package does install binaries setuid or setgid. Li... WARNING: Un-translated message in PO file. 48: "The daemons the package provide run with a low privilege user (... WARNING: Un-translated message in PO file. 51: "Programmed (i.e., cron) tasks running in the... WARNING: Un-translated message in PO file. 54: "If you have to do any of the above make sure the programs that ... WARNING: Un-translated message in PO file. 57: "For more information, specific to secure programming, make sure... WARNING: Un-translated message in PO file. 60: "Creating users and groups for software daemons" WARNING: Un-translated message in PO file. 63: "If your software runs a daemon that does not need root privileg... WARNING: Un-translated message in PO file. 66: "In the first case, you need to ask for a user or group id to th... WARNING: Un-translated message in PO file. 69: "In the second case, you need to create the system user either i... WARNING: Un-translated message in PO file. 72: "The following example code creates the user and group the daemo... WARNING: Un-translated message in PO file. 75: "\n[...]\ncase \"$1\" in\n install|upgrade)\n\n # If the packa... WARNING: Un-translated message in PO file. 141: "You have to make sure that the init.d script file:" WARNING: Un-translated message in PO file. 144: "Starts the daemon dropping privileges: if the software does not... WARNING: Un-translated message in PO file. 147: "Stops the daemon only if the user id matches, you can use the <... WARNING: Un-translated message in PO file. 150: "Does not run if either the user or the group do not exist:" WARNING: Un-translated message in PO file. 153: "\n if ! getent passwd | grep -q \"^server_userpostrm... WARNING: Un-translated message in PO file. 171: "Running programs with a user with limited privileges makes sure...  Merging es-ES/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/es-ES/xml_tmp//10_before-compromise.xml WARNING: Un-translated message in PO file. 21: "You should strive to keep your system secure by monitoring its ... WARNING: Un-translated message in PO file. 24: "Tracking security vulnerabilities" WARNING: Un-translated message in PO file. 27: "Although most administrators are aware of security vulnerabilit... WARNING: Un-translated message in PO file. 30: "This typically includes subscribing to the announcement mailing... WARNING: Un-translated message in PO file. 33: "In order to track known vulnerabilities affecting the Debian di... WARNING: Un-translated message in PO file. 36: "The tracker has searchable interfaces (by lenny Debian provides and... WARNING: Un-translated message in PO file. 103: "In a stable system updates are only available when a security p... WARNING: Un-translated message in PO file. 106: "The notification is not intrusive and users are not forced to i... WARNING: Un-translated message in PO file. 109: "This application works by checking the package database and com... WARNING: Un-translated message in PO file. 112: "Apt installs such a task (/etc/cro... WARNING: Un-translated message in PO file. 115: "If the system is set to download the packages list daily but no... WARNING: Un-translated message in PO file. 118: "\nAPT::Periodic::Update-Package-Lists \"1\";\nAPT::Periodic::Do... WARNING: Un-translated message in PO file. 124: "You can use a different cron task, such as the one installed by... WARNING: Un-translated message in PO file. 127: "Users of the KDE desktop environment will probably prefer to in... WARNING: Un-translated message in PO file. 130: "Automatically checking for updates with cron-apt" WARNING: Un-translated message in PO file. 133: "Another method for automatic security updates is the use of debsecan program evaluates the security ... WARNING: Un-translated message in PO file. 148: "Upon installing the Debian package debsecan,... WARNING: Un-translated message in PO file. 151: "Notice, however, that the Security Team tracks many vulnerabili... WARNING: Un-translated message in PO file. 154: "More information is available at the apticron, which, similarly... WARNING: Un-translated message in PO file. 163: "You might also want to take a look at unstabletesting branch, there... WARNING: Un-translated message in PO file. 187: "When a security fix is prepared, the Security Team backports th... WARNING: Un-translated message in PO file. 190: "Security updates are available for the unstableunstableapt so that those packages that yo... WARNING: Un-translated message in PO file. 227: "To pin the packages under a given release, you must edit cron-apt as described in -y option will have aptdebconf so no questions will be as... WARNING: Un-translated message in PO file. 253: "Check the results of the cron execution, whi... WARNING: Un-translated message in PO file. 256: "A safer alternative might be to use the -d (... WARNING: Un-translated message in PO file. 259: "In order to accomplish any of these tasks, the system must be p... WARNING: Un-translated message in PO file. 262: "However, this is not recommended for unstablestablesnort is a flexible packet sniffer or logger... WARNING: Un-translated message in PO file. 313: "There are other, simpler tools that can be used to detect netwo... WARNING: Un-translated message in PO file. 316: "You can test any of these tools with the Debian package tiger is an older intrusion detection tool w... WARNING: Un-translated message in PO file. 328: "Log analysis tools, such as logcheck can als... WARNING: Un-translated message in PO file. 331: "In addition, packages which monitor file system integrity (see ... WARNING: Un-translated message in PO file. 340: "Loadable kernel modules are files containing dynamically loadab... WARNING: Un-translated message in PO file. 343: "LKM back doors are more sophisticated and less detectable than ... WARNING: Un-translated message in PO file. 349: "There are two approaches to defending your system against LKM r... WARNING: Un-translated message in PO file. 355: "The advantage of this kind of defense is that it prevents damag... WARNING: Un-translated message in PO file. 358: "Debian GNU/Linux has a few packages that can be used to mount a... WARNING: Un-translated message in PO file. 361: "lcap - A user friendly interface to remove <... WARNING: Un-translated message in PO file. 364: "If you don't really need many kernel features on your GNU/Linux... WARNING: Un-translated message in PO file. 370: "The advantage of a reactive defense is that it does not overloa... WARNING: Un-translated message in PO file. 373: "Detection of some root-kits in Debian can be accomplished with ... WARNING: Un-translated message in PO file. 379: "This is probably the most unstable and funny section, since I h... WARNING: Un-translated message in PO file. 388: "CD distribution. This idea is very easy to realize and offers p... WARNING: Un-translated message in PO file. 397: "Change file attributes using chattr (taken f... WARNING: Un-translated message in PO file. 412: "Play with UTP cabling in a way that you cut 2 or 4 wires and ma... WARNING: Un-translated message in PO file. 418: "A honeypot is a system designed to teach system administrators ... WARNING: Un-translated message in PO file. 421: "Debian GNU/Linux systems can easily be used to setup a honeynet... WARNING: Un-translated message in PO file. 427: "syslog-ng, useful for sending logs from the ... WARNING: Un-translated message in PO file. 433: "osh, a SETUID root, security enhanced, restr... WARNING: Un-translated message in PO file. 436: "Of course, all the daemons you will be using for your fake serv... WARNING: Un-translated message in PO file. 442: "honeyd and farpd to setup... WARNING: Un-translated message in PO file. 445: "tinyhoneypot to setup a simple honeypot serv... WARNING: Un-translated message in PO file. 448: "If you cannot use spare systems to build up the honeypots and t... WARNING: Un-translated message in PO file. 451: "You can read more about building honeypots in Lanze Spitzner's ...  Merging es-ES/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/es-ES/xml_tmp//11_after-compromise.xml WARNING: Un-translated message in PO file. 15: "After the compromise (incident response)" WARNING: Un-translated message in PO file. 21: "If you are physically present when an attack is happening, your... WARNING: Un-translated message in PO file. 24: "However, some tools installed by rootkits, trojans and, even, a... WARNING: Un-translated message in PO file. 27: "The most recommended method for recovering a compromised system... WARNING: Un-translated message in PO file. 30: "If you really want to fix the compromise quickly, you should re... WARNING: Un-translated message in PO file. 33: "Some common questions on how to handle a compromised Debian GNU... WARNING: Un-translated message in PO file. 48: "Contact your local CERT" WARNING: Un-translated message in PO file. 51: "The CERT (Computer and Emergency Response Team) is an organizat... WARNING: Un-translated message in PO file. 54: "Providing your local CERT (or the CERT coordination center) wit... WARNING: Un-translated message in PO file. 57: "You can also use less formal mechanisms if you need help for re... WARNING: Un-translated message in PO file. 63: "If you wish to gather more information, the tct> en-US/12_faq.xml -> tmp/es-ES/xml_tmp//12_faq.xml WARNING: Un-translated message in PO file. 30: "For a collection of data regarding security vulnerabilities for... WARNING: Un-translated message in PO file. 33: "Is Debian more secure than other Linux distributions (such as R... WARNING: Un-translated message in PO file. 36: "There are not really many differences between Linux distributio... WARNING: Un-translated message in PO file. 39: "For example, Red Hat was unlucky and shipped when foo 1.2.3 was... WARNING: Un-translated message in PO file. 42: "There is a lot of collaboration between the respective security... WARNING: Un-translated message in PO file. 45: "One of Debian's main advantages with regards to security is the... WARNING: Un-translated message in PO file. 48: "Debian provides more security tools than other distributions, s... WARNING: Un-translated message in PO file. 51: "Debian's standard installation is smaller (less functionality),... WARNING: Un-translated message in PO file. 54: "Debian documents best security practices in documents like this... WARNING: Un-translated message in PO file. 60: "The Debian distribution boasts a large and growing number of so... WARNING: Un-translated message in PO file. 66: "Bugs that are present in the Debian distribution usually affect... WARNING: Un-translated message in PO file. 69: "Does Debian have any certification related to security?" WARNING: Un-translated message in PO file. 72: "Short answer: no." WARNING: Un-translated message in PO file. 75: "Long answer: certification costs money (specially a s... WARNING: Un-translated message in PO file. 78: "There are currently at least two linux distributions certified ... WARNING: Un-translated message in PO file. 90: "I want to run XYZ service, which one should I choose?" WARNING: Un-translated message in PO file. 93: "One of Debian's great strengths is the wide variety of choice a... WARNING: Un-translated message in PO file. 96: "Is the software maintained upstream? When was the last release?... WARNING: Un-translated message in PO file. 99: "Is the package mature? The version number really does ssh... WARNING: Un-translated message in PO file. 130: "The Debian security team cannot possibly analyze all the packag... WARNING: Un-translated message in PO file. 139: "Why are some log files/configuration files world-readable, isn'... WARNING: Un-translated message in PO file. 142: "Of course, you can change the default Debian permissions on you... WARNING: Un-translated message in PO file. 145: "Be careful if you do make changes since:" WARNING: Un-translated message in PO file. 148: "Processes might not be able to write to log files if you restri... WARNING: Un-translated message in PO file. 151: "Some applications may not work if the configuration file they d... WARNING: Un-translated message in PO file. 154: "FIXME: Check if this is written in the Policy. Some packages (i... WARNING: Un-translated message in PO file. 157: "Why does /root/ (or UserX) have 755 permissions?" WARNING: Un-translated message in PO file. 160: "As a matter of fact, the same questions stand for any other use... WARNING: Un-translated message in PO file. 163: "This Debian security mailing list dm... WARNING: Un-translated message in PO file. 178: "\n KLOGD=\"\"" WARNING: Un-translated message in PO file. 185: "\n KLOGD=\"-c 4\"" WARNING: Un-translated message in PO file. 189: "Use a lower number for -c if you are still s... WARNING: Un-translated message in PO file. 192: "\n #define LOG_EMERG 0 /* system is unusable */\n ... WARNING: Un-translated message in PO file. 210: "Yes and no. Debian comes with some predefined users (user id (U... WARNING: Un-translated message in PO file. 213: "To easily find users who don't own any files, execute the follo... WARNING: Un-translated message in PO file. 351: "I removed a system user! How can I recover?" WARNING: Un-translated message in PO file. 354: "If you have removed a system user and have not made a backup of... WARNING: Un-translated message in PO file. 360: "The 'adm' group are usually administrators, and this group perm... WARNING: Un-translated message in PO file. 363: "Why is there a new group when I add a new user? (or Why does De... WARNING: Un-translated message in PO file. 366: "The default behavior in Debian is that each user has its own, p... WARNING: Un-translated message in PO file. 369: "Debian's scheme solves this problem by assigning each user to t... WARNING: Un-translated message in PO file. 372: "You can, however, change this behavior by modifying /... WARNING: Un-translated message in PO file. 384: "There has been much discussion on Debian mailing lists (both at... WARNING: Un-translated message in PO file. 387: "Can I remove inetd?" WARNING: Un-translated message in PO file. 399: "In versions of the portmap package later tha... WARNING: Un-translated message in PO file. 402: "What use is identd (port 113) for?" WARNING: Un-translated message in PO file. 405: "Identd service is an authentication service that identifies the... WARNING: Un-translated message in PO file. 408: "There has been extensive discussion on the security of netstat -an and ... WARNING: Un-translated message in PO file. 417: "\n Active Internet connections (servers and established)\n Pr... WARNING: Un-translated message in PO file. 428: "You are not seeing processes listening on ... WARNING: Un-translated message in PO file. 431: "I found the port XYZ open, can I close it?" WARNING: Un-translated message in PO file. 437: "Will removing services from /etc/services ... WARNING: Un-translated message in PO file. 443: "Common security issues" WARNING: Un-translated message in PO file. 455: "Once you have enabled booting from a CD-ROM or diskette enable,... WARNING: Un-translated message in PO file. 480: "This will remove the forgotten root password, contained in the ... WARNING: Un-translated message in PO file. 486: "Once LILO is unrestricted, try the following:" WARNING: Un-translated message in PO file. 492: "Type linux single, linux init=/bin/... WARNING: Un-translated message in PO file. 498: "Re-mount read/write the root (/) partition, using the mount com... WARNING: Un-translated message in PO file. 509: "How do I accomplish setting up a service for my users without g... WARNING: Un-translated message in PO file. 512: "For example, if you want to set up a POP service, you don't nee... WARNING: Un-translated message in PO file. 520: "to, for example, ldap:" WARNING: Un-translated message in PO file. 528: "In the case of LDAP directories, some services provide LDAP sch... WARNING: Un-translated message in PO file. 531: "\n (user_id, user_name, realname, shell, password, UID, GID, h... WARNING: Un-translated message in PO file. 535: "By making the services attributes boolean fields, you can use t... WARNING: Un-translated message in PO file. 541: "/etc/pam.d/qpopper:where=pop=1/etc/nss-mysql*.conf:users.where_... WARNING: Un-translated message in PO file. 547: "/etc/proftpd.conf: SQLWhereClause... WARNING: Un-translated message in PO file. 550: "My system is vulnerable! (Are you sure?)" WARNING: Un-translated message in PO file. 553: "Vulnerability assessment scanner X says my Debian system is vul... WARNING: Un-translated message in PO file. 556: "Many vulnerability assessment scanners give false positives whe... WARNING: Un-translated message in PO file. 559: "If you think your system is up to date with security patches, y... WARNING: Un-translated message in PO file. 562: "I've seen an attack in my system's logs. Is my system compromis... WARNING: Un-translated message in PO file. 565: "A trace of an attack does not always mean that your system has ... WARNING: Un-translated message in PO file. 568: "I have found strange 'MARK' lines in my logs: Am I compromised?... WARNING: Un-translated message in PO file. 571: "You might find the following lines in your system logs:" WARNING: Un-translated message in PO file. 585: "This does not indicate any kind of compromise, and users changi... WARNING: Un-translated message in PO file. 588: "\n -m interval\n The syslogd logs a mark tim... WARNING: Un-translated message in PO file. 598: "I found users using 'su' in my logs: Am I compromised?" WARNING: Un-translated message in PO file. 604: "\n Apr 1 09:25:01 server su[30315]: + ??? root-nobody\n Apr ... WARNING: Un-translated message in PO file. 629: "I have found 'possible SYN flooding' in my logs: Am I under att... WARNING: Un-translated message in PO file. 632: "If you see entries like these in your logs:" WARNING: Un-translated message in PO file. 648: "Check if there is a high number of connections to the server us... WARNING: Un-translated message in PO file. 660: "This is an indication of a denial of service (DoS) attack again... WARNING: Un-translated message in PO file. 663: "I have found strange root sessions in my logs: Am I compromised... WARNING: Un-translated message in PO file. 666: "You might see these kind of entries in your /var/log/... WARNING: Un-translated message in PO file. 669: "\n May 2 11:55:02 linux PAM_unix[1477]: (cron) session closed ... WARNING: Un-translated message in PO file. 678: "These are due to a cron job being executed (... WARNING: Un-translated message in PO file. 684: "There are several steps you might want to take in case of a bre... WARNING: Un-translated message in PO file. 687: "Check if your system is up to date with security patches for pu... WARNING: Un-translated message in PO file. 690: "Read this document, especially the portsentry, there are a lot... WARNING: Un-translated message in PO file. 732: "That's just the way portsentry works. It ope... WARNING: Un-translated message in PO file. 738: "The security team keeps its list of Frequently Asked Questions ...  Merging es-ES/99_appendix.po >> en-US/99_appendix.xml -> tmp/es-ES/xml_tmp//99_appendix.xml WARNING: Un-translated message in PO file. 15: "Appendix" WARNING: Un-translated message in PO file. 21: "Below is a post-installation, step-by-step procedure for harden... WARNING: Un-translated message in PO file. 24: "Install the system, taking into account the information regardi... WARNING: Un-translated message in PO file. 36: "Make a list of services currently running on your system. Try:" WARNING: Un-translated message in PO file. 53: "In order to remove unnecessary services, first determine what p... WARNING: Un-translated message in PO file. 81: "Once you find any unwanted services, remove the associated pack... WARNING: Un-translated message in PO file. 84: "For inetd services (launched by the superdaemon), check which s... WARNING: Un-translated message in PO file. 92: "Then disable those services that are not needed by commenting o... WARNING: Un-translated message in PO file. 98: "If the server uses more than one external interface, depending ... WARNING: Un-translated message in PO file. 121: "Use the following shell command to determine what user each ava... WARNING: Un-translated message in PO file. 135: "Consider changing these services to a specific user/group and m... WARNING: Un-translated message in PO file. 147: "Install network and host intrusion measures like snort... WARNING: Un-translated message in PO file. 162: "Using a network scanner, check outbound connections from the sy... WARNING: Un-translated message in PO file. 180: "Enable a password in the BIOS." WARNING: Un-translated message in PO file. 183: "Disable floppy/cdrom/... booting in the system's BIOS." WARNING: Un-translated message in PO file. 237: "Tighten up /etc/pam.d/login" WARNING: Un-translated message in PO file. 243: "Disable network root login; use su... WARNING: Un-translated message in PO file. 285: "Disable or remove in.telnetd, if installed" WARNING: Un-translated message in PO file. 291: "Disable other gratuitous network services; ftp, DNS, WWW etc sh... WARNING: Un-translated message in PO file. 300: "Configure firewall and tcpwrappers (i.e. Typi... WARNING: Un-translated message in PO file. 375: "BASE is currently packaged for Debian in acidbasema... WARNING: Un-translated message in PO file. 412: "\n[*] Network packet filtering (replaces ipchains)\n[ ] Netwo... WARNING: Un-translated message in PO file. 420: "Caution: you must disable this if you want to apply some firewa... WARNING: Un-translated message in PO file. 423: "\n[ ] Network packet filtering debugging (NEW)" WARNING: Un-translated message in PO file. 427: "Next, add the correct options in the section IP: Netf... WARNING: Un-translated message in PO file. 430: "Once these steps are complete, you can complete the configurati... WARNING: Un-translated message in PO file. 433: "A bridge providing NAT and firewall capabilities" WARNING: Un-translated message in PO file. 436: "The first configuration uses the bridge as a firewall with netw... WARNING: Un-translated message in PO file. 439: "\nInternet ---- router ( 62.3.3.25 ) ---- bridge (62.3.3.26 gw ... WARNING: Un-translated message in PO file. 450: "The following commands show how this bridge can be configured." WARNING: Un-translated message in PO file. 453: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Un-translated message in PO file. 482: "A second possible configuration is a system that is set up as a... WARNING: Un-translated message in PO file. 485: "\nInternet ---- router (62.3.3.25) ---- bridge (62.3.3.26)\n ... WARNING: Un-translated message in PO file. 450: "The following commands show how this bridge can be configured." WARNING: Un-translated message in PO file. 496: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Un-translated message in PO file. 518: "If you traceroute the Linux Mail Server, you won't see the brid... WARNING: Un-translated message in PO file. 521: "Basic IPtables rules" WARNING: Un-translated message in PO file. 524: "This is an example of the basic rules that could be used for ei... WARNING: Un-translated message in PO file. 530: "\niptables -F FORWARD\niptables -P FORWARD DROP\niptables -A FO... WARNING: Un-translated message in PO file. 570: "Sample script to change the default Bind installation." WARNING: Un-translated message in PO file. 573: "This script automates the procedure for changing the b... WARNING: Un-translated message in PO file. 576: "This script is here for historical purposes and to show how you... WARNING: Un-translated message in PO file. 579: "You can also create the users manually and use the patch availa... WARNING: Un-translated message in PO file. 582: "\n #!/bin/sh\n # Change the default Debian bind v8 configurat... WARNING: Un-translated message in PO file. 730: "The previous script, run on Woody's (Debian 3.0) custom DROP policy in the INPUT cha... WARNING: Un-translated message in PO file. 787: "Of course, you should disable any backdoors before getting the ... WARNING: Un-translated message in PO file. 790: "FIXME: This needs DNS to be working properly since it is requir... WARNING: Un-translated message in PO file. 793: "FIXME: this will only work with HTTP URLs since ftp might need ... WARNING: Un-translated message in PO file. 796: "Chroot environment for SSH" WARNING: Un-translated message in PO file. 799: "Creating a restricted environment for SSHlibpam-chroot" WARNING: Un-translated message in PO file. 823: "Probably the easiest way is to use the libpam-chroot/etc/pam.d/ssh to use this PAM modu... WARNING: Un-translated message in PO file. 834: "set a proper chroot environment for the user. You can try using... WARNING: Un-translated message in PO file. 837: "Configure /etc/security/chroot.conf so tha... WARNING: Un-translated message in PO file. 840: "Configure SSH: Depending on your OpenSSH version the chroot env... WARNING: Un-translated message in PO file. 843: "\nUsePrivilegeSeparation no" WARNING: Un-translated message in PO file. 847: "Notice that this will lower the security of your system since t... WARNING: Un-translated message in PO file. 850: "If you don't disable Privilege Separation ... WARNING: Un-translated message in PO file. 853: "If you have Privilege Separation set to /proc filesystem needs to be mounted i... WARNING: Un-translated message in PO file. 873: "The necessary /dev/pts/ devices need to ex... WARNING: Un-translated message in PO file. 876: "The user's home directory has to exist in the chroot, otherwise... WARNING: Un-translated message in PO file. 879: "You can debug all these issues if you use the debugssh server" WARNING: Un-translated message in PO file. 888: "Debian's sshd does not allow restriction of ... WARNING: Un-translated message in PO file. 891: "After applying the patch, modify /etc/passwdsshd daemon insi... WARNING: Un-translated message in PO file. 1002: "\nUsePrivilegeSeparation yes" WARNING: Un-translated message in PO file. 1006: "That way the remote daemon will do as few things as possible as... WARNING: Un-translated message in PO file. 1009: "Notice, also, that in order for SSH to work in that location, t... WARNING: Un-translated message in PO file. 1012: "Setup a minimal system (the really easy way)" WARNING: Un-translated message in PO file. 1015: "You can use debootstrap to setup a minimal e... WARNING: Un-translated message in PO file. 1018: "Automatically making the environment (the easy way)" WARNING: Un-translated message in PO file. 1021: "You can easily create a restricted environment with the ... WARNING: Un-translated message in PO file. 1027: "To set up the environment using makejail's p... WARNING: Un-translated message in PO file. 1030: "\n # makejail /usr/share/doc/makejail/examples/sshd.py" WARNING: Un-translated message in PO file. 1034: "This will setup the chroot in the /var/chroot/sshdprocfs filesystem in /... WARNING: Un-translated message in PO file. 1040: "\n# mount -t proc proc /var/chroot/sshd/proc" WARNING: Un-translated message in PO file. 1044: "You can also have it be mounted automatically by editing /dev/log ... WARNING: Un-translated message in PO file. 1054: "Read the sample file to see what other changes need to be made ... WARNING: Un-translated message in PO file. 1057: "The following sample environment has been (slightly) tested in ... WARNING: Un-translated message in PO file. 1060: "\n.\n|-- bin\n| |-- ash\n| |-- bash\n| |-- chgrp\n| |--... WARNING: Un-translated message in PO file. 1251: "For Debian release 3.1 you have to make sure that the environme... WARNING: Un-translated message in PO file. 1254: "\n$ ls /etc/pam.d/common-*\n/etc/pam.d/common-account /etc/pam... WARNING: Un-translated message in PO file. 1261: "Manually creating the environment (the hard way)" WARNING: Un-translated message in PO file. 1264: "It is possible to create an environment, using a trial-and-erro... WARNING: Un-translated message in PO file. 1267: "\n.:\ntotal 36\ndrwxr-xr-x 9 root root 4096 Jun 5 10:05 ./\ndrw... WARNING: Un-translated message in PO file. 1511: "Chroot environment for Apache" WARNING: Un-translated message in PO file. 1517: "The chroot utility is often used to jail a d... WARNING: Un-translated message in PO file. 1520: "FIXME: Apache can also be chrooted using root and create a new jail directo... WARNING: Un-translated message in PO file. 1538: "\n$ mkdir -p /var/chroot/apache" WARNING: Un-translated message in PO file. 1542: "Create a new user and a new group. The chrooted Apache server w... WARNING: Un-translated message in PO file. 1545: " \n $ adduser --home /var/chroot/apache --shell /bin/false \\\n... WARNING: Un-translated message in PO file. 1552: "FIXME: is a new user needed? (Apache already runs as the apache... WARNING: Un-translated message in PO file. 1555: "Install Apache as usual on Debian: apt-get install apa... WARNING: Un-translated message in PO file. 1558: "Set up Apache (e.g. define your subdomains, etc.). In the makejail (available in Debian/testin... WARNING: Un-translated message in PO file. 1564: "Copy the sample configuration file for Apache to the ... WARNING: Un-translated message in PO file. 1567: " \n # cp /usr/share/doc/makejail/examples/apache.py /etc/makeja... WARNING: Un-translated message in PO file. 1573: "Edit /etc/makejail/apache.py. You need to ... WARNING: Un-translated message in PO file. 1576: "\nchroot=\"/var/chroot/apache\"\ntestCommandsInsideJail=[\"/usr... WARNING: Un-translated message in PO file. 1597: "FIXME: some options do not seem to work pr... WARNING: Un-translated message in PO file. 1600: "Create the chroot tree: makejail /etc/makejail/apache.... WARNING: Un-translated message in PO file. 1603: "If /etc/password and /etc/group<... WARNING: Un-translated message in PO file. 1606: "\n $ grep chrapach /etc/passwd > /var/chroot/apache/etc... WARNING: Un-translated message in PO file. 1613: "to replace them with filtered copies." WARNING: Un-translated message in PO file. 1616: "Copy the Web site pages and the logs into the jail. These files... WARNING: Un-translated message in PO file. 1619: "\n # cp -Rp /var/www /var/chroot/apache/var\n # cp -R... WARNING: Un-translated message in PO file. 1626: "Edit the startup script for the system logging daemon so that i... WARNING: Un-translated message in PO file. 1629: "Edit the Apache startup script (/etc/init.d/apacheCHRDIR variable at the top of th... WARNING: Un-translated message in PO file. 1635: "edit the start, stop,... WARNING: Un-translated message in PO file. 1638: "add a line to mount and unmount the /proc ... WARNING: Un-translated message in PO file. 1641: "\n#! /bin/bash\n#\n# apache Start the apache HTTP server... WARNING: Un-translated message in PO file. 1726: "FIXME: should the first Apache process be ... WARNING: Un-translated message in PO file. 1729: "Replace in /etc/logrotate.d/apache /etc/init.d/apache start) and ... WARNING: Un-translated message in PO file. 1735: "Type ps aux | grep apache to make sure Apach... WARNING: Un-translated message in PO file. 1738: "\n root 180 0.0 1.1 2936 1436 ? S 04:03 0:00 /usr/sbin/apa... WARNING: Un-translated message in PO file. 1749: "Make sure the Apache processes are running chrooted by looking ... WARNING: Un-translated message in PO file. 1752: "\n drwxr-sr-x 10 root staff 240 Dec 2 16:06 .\n drwxrwsr-... WARNING: Un-translated message in PO file. 1767: "To automate this test, you can type:ls -la /proc/`cat ... WARNING: Un-translated message in PO file. 1770: "FIXME: Add other tests that can be run to ... WARNING: Un-translated message in PO file. 1773: "The reason I like this is because setting up the jail is not ve... WARNING: Un-translated message in PO file. 1776: " \napt-get update && apt-get install apache\nmakejail /... WARNING: Un-translated message in PO file. 1782: "See also" WARNING: Un-translated message in PO file. 1785: "If you are looking for more information you can consider these ...  Merging es-ES/Author_Group.po >> en-US/Author_Group.xml -> tmp/es-ES/xml_tmp//Author_Group.xml Merging es-ES/Book_Info.po >> en-US/Book_Info.xml -> tmp/es-ES/xml_tmp//Book_Info.xml Merging es-ES/Revision_History.po >> en-US/Revision_History.xml -> tmp/es-ES/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 24: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 27: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 30: "Thijs" WARNING: Un-translated message in PO file. 33: "Kinkhorst" WARNING: Un-translated message in PO file. 36: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 39: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 42: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 45: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 48: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 51: "Use LSB headers for firewall script. Patch by Dominic Walden." WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 57: "Fernández-Sanguino Peña." WARNING: Un-translated message in PO file. 60: "Indicate that the document is not updated with latest versions.... WARNING: Un-translated message in PO file. 63: "Update pointers to current location of sources." WARNING: Un-translated message in PO file. 66: "Update information on security updates for newer releases." WARNING: Un-translated message in PO file. 69: "Point information for Developers to online sources instead of k... WARNING: Un-translated message in PO file. 72: "Extend the information regarding securing console access, inclu... WARNING: Un-translated message in PO file. 75: "Update the information related to PAM modules including how to ... WARNING: Un-translated message in PO file. 78: "Reference some of the PAM modules available to use double facto... WARNING: Un-translated message in PO file. 81: "Fix shell script example in Appendix." WARNING: Un-translated message in PO file. 84: "Fix reference errors." WARNING: Un-translated message in PO file. 87: "Point to the Basille sourceforge project instead of the bastill... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 93: "Change reference to Log Analysis' website as this is no longer ... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 96: "Change the section related to choosing a filesystem: note that ... WARNING: Un-translated message in PO file. 99: "Change the name of the packages related to enigmail to reflect ... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 102: "Change URLs pointing to Bastille Linux to www.Bastille-UNIX.org... WARNING: Un-translated message in PO file. 105: "Fix pointers to Linux Ramen and Lion worms." WARNING: Un-translated message in PO file. 108: "Use linux-image in the examples instead of the (old) kernel-ima... WARNING: Un-translated message in PO file. 111: "Fix typos spotted by Francesco Poli." WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 114: "Update the information related to security updates. Drop the te... WARNING: Un-translated message in PO file. 117: "Divide the firewall applications based on target users and add ... WARNING: Un-translated message in PO file. 120: "Remove references to libsafe, it's not in the archive any longe... WARNING: Un-translated message in PO file. 123: "Fix the location of syslog's configuration, thanks to John Talb... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 126: "Thanks go to Francesco Poli for his extensive review of the doc... WARNING: Un-translated message in PO file. 129: "Remove most references to the woody release as it is no longer ... WARNING: Un-translated message in PO file. 132: "Describe how to restrict users so that they can only do file tr... WARNING: Un-translated message in PO file. 135: "Added a note regarding the debian-private declasiffication deci... WARNING: Un-translated message in PO file. 138: "Updated link of incident handling guides." WARNING: Un-translated message in PO file. 141: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 141: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 144: "Fix references to the master security server." WARNING: Un-translated message in PO file. 147: "Add pointers to additional APT-secure documentation." WARNING: Un-translated message in PO file. 150: "Improve the description of APT signatures." WARNING: Un-translated message in PO file. 153: "Comment out some things which are not yet final related to the ... WARNING: Un-translated message in PO file. 156: "Fixed name of the Debian Testing Security Team." WARNING: Un-translated message in PO file. 159: "Remove reference to sarge in an example." WARNING: Un-translated message in PO file. 162: "Update the antivirus section, clamav is now available on the re... WARNING: Un-translated message in PO file. 165: "Removes all references to freeswan as it is obsolete." WARNING: Un-translated message in PO file. 168: "Describe issues related to ruleset changes to the firewall if d... WARNING: Un-translated message in PO file. 171: "Update the information related to the IDS installation, mention... WARNING: Un-translated message in PO file. 174: "Rewrite the \"running bind as a non-root user\" section as this... WARNING: Un-translated message in PO file. 177: "Remove the obsolete way to setup iptables rulesets as woody is ... WARNING: Un-translated message in PO file. 180: "Revert the advice regarding LOG_UNKFAIL_ENAB it should be set t... WARNING: Un-translated message in PO file. 183: "Added more information related to updating the system with desk... WARNING: Un-translated message in PO file. 186: "Updated the contents of the FAQ and remove redundant paragraphs... WARNING: Un-translated message in PO file. 189: "Review and update the section related to forensic analysis of m... WARNING: Un-translated message in PO file. 192: "Remove or fix some dead links." WARNING: Un-translated message in PO file. 195: "Fix many typos and gramatical errors reported by Francesco Poli... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 198: "Provide examples using apt-cache's rdepends as suggested by Oze... WARNING: Un-translated message in PO file. 201: "Fix location of Squid's user's manual because of its relocation... WARNING: Un-translated message in PO file. 204: "Fix information regarding umask, it's logins.defs (and not limi... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 207: "Add information on how to track security vulnerabilities and ad... WARNING: Un-translated message in PO file. 210: "Add more information on the security support for testing." WARNING: Un-translated message in PO file. 213: "Fix a large number of typos with a patch provided by Simon Bran... WARNING: Un-translated message in PO file. 216: "Added section on how to disable root prompt on initramfs provid... WARNING: Un-translated message in PO file. 219: "Remove references to queso." WARNING: Un-translated message in PO file. 222: "Note that testing is now security-supported in the introduction... WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 225: "Rewrote the information on how to setup ssh chroots to clarify ... WARNING: Un-translated message in PO file. 228: "Fix lsof call as suggested by Christophe Sahut." WARNING: Un-translated message in PO file. 231: "Include patches for typo fixes from Uwe Hermann." WARNING: Un-translated message in PO file. 234: "Fix typo in reference spotted by Moritz Naumann." WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 237: "Add a section on Debian Developer's best practices for security... WARNING: Un-translated message in PO file. 240: "Ammended firewall script with comments from WhiteGhost." WARNING: Un-translated message in PO file. 54: "Javier" WARNING: Un-translated message in PO file. 90: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 243: "Included a patch from Thomas Sjögren which describes that apt-ftparchive is in apt-utilsSSHssh protocol ve... WARNING: Un-translated message in PO file. 663: "Added two subsections related to Apache secure configuration (t... WARNING: Un-translated message in PO file. 666: "Added a new FAQ related to raw sockets, one related to /root, a... WARNING: Un-translated message in PO file. 669: "Added a pointer to a bug in libpam-cracklib that might still be... WARNING: Un-translated message in PO file. 672: "Added more information regarding forensics analysis (pending mo... WARNING: Un-translated message in PO file. 675: "Changed the \"what should I do regarding compromise\" into a bu... WARNING: Un-translated message in PO file. 678: "Added some information on how to set up the Xscreensaver to loc... WARNING: Un-translated message in PO file. 681: "Added a note related to the utilities you should not install in... WARNING: Un-translated message in PO file. 684: "Added information on lvm and journalling file systems, ext3 rec... WARNING: Un-translated message in PO file. 687: "Added a link to the online text version (check)." WARNING: Un-translated message in PO file. 690: "Added some more stuff to the information on firewalling the loc... WARNING: Un-translated message in PO file. 693: "Added more information on PAM limits and pointers to Kurt Seifr... WARNING: Un-translated message in PO file. 696: "As suggested by Julián Muñoz, provided more information on the ... WARNING: Un-translated message in PO file. 699: "Included a note in the BIOS password section due to a comment f... WARNING: Un-translated message in PO file. 702: "Included patches provided by Alfred E. Heggestad fixing many of... WARNING: Un-translated message in PO file. 705: "Added a pointer to the changelog in the Credits section since m... WARNING: Un-translated message in PO file. 708: "Added a few more notes to the chattr section and a new section ... WARNING: Un-translated message in PO file. 711: "Added a new section after installation just to remind users to ... WARNING: Un-translated message in PO file. 714: "Added some more TODO items provided by Korn Andras." WARNING: Un-translated message in PO file. 717: "Added a pointer to the NIST's guidelines on how to secure DNS p... WARNING: Un-translated message in PO file. 720: "Added a small paragraph regarding Debian's SSL certificates inf... WARNING: Un-translated message in PO file. 723: "Added Daniel Quinlan's suggestions regarding sshMARK heartbeat tmp/es-ES/xml/Common_Content/Conventions.xml Processing file tmp/es-ES/xml/Common_Content/Feedback.xml -> tmp/es-ES/xml/Common_Content/Feedback.xml Processing file tmp/es-ES/xml/Common_Content/Legal_Notice.xml -> tmp/es-ES/xml/Common_Content/Legal_Notice.xml Processing file tmp/es-ES/xml/Common_Content/Program_Listing.xml -> tmp/es-ES/xml/Common_Content/Program_Listing.xml Processing file tmp/es-ES/xml/Common_Content/Revision_History.xml -> tmp/es-ES/xml/Common_Content/Revision_History.xml Processing file tmp/es-ES/xml_tmp/01_intro.xml -> tmp/es-ES/xml/01_intro.xml Processing file tmp/es-ES/xml_tmp/02_before-begin.xml -> tmp/es-ES/xml/02_before-begin.xml Processing file tmp/es-ES/xml_tmp/03_before-install.xml -> tmp/es-ES/xml/03_before-install.xml Processing file tmp/es-ES/xml_tmp/04_after-install.xml -> tmp/es-ES/xml/04_after-install.xml Processing file tmp/es-ES/xml_tmp/05_services.xml -> tmp/es-ES/xml/05_services.xml Processing file tmp/es-ES/xml_tmp/06_automatic.xml -> tmp/es-ES/xml/06_automatic.xml Processing file tmp/es-ES/xml_tmp/07_infrastructure.xml -> tmp/es-ES/xml/07_infrastructure.xml Processing file tmp/es-ES/xml_tmp/08_sec-tools.xml -> tmp/es-ES/xml/08_sec-tools.xml Processing file tmp/es-ES/xml_tmp/09_developer.xml -> tmp/es-ES/xml/09_developer.xml Processing file tmp/es-ES/xml_tmp/10_before-compromise.xml -> tmp/es-ES/xml/10_before-compromise.xml Processing file tmp/es-ES/xml_tmp/11_after-compromise.xml -> tmp/es-ES/xml/11_after-compromise.xml Processing file tmp/es-ES/xml_tmp/12_faq.xml -> tmp/es-ES/xml/12_faq.xml Processing file tmp/es-ES/xml_tmp/99_appendix.xml -> tmp/es-ES/xml/99_appendix.xml Processing file tmp/es-ES/xml_tmp/Author_Group.xml -> tmp/es-ES/xml/Author_Group.xml Processing file tmp/es-ES/xml_tmp/Book_Info.xml -> tmp/es-ES/xml/Book_Info.xml Processing file tmp/es-ES/xml_tmp/Revision_History.xml -> tmp/es-ES/xml/Revision_History.xml Processing file tmp/es-ES/xml_tmp/Securing_Debian_Manual.xml -> tmp/es-ES/xml/Securing_Debian_Manual.xml Beginning work on es-ES DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/es-ES/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=fr-FR Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up fr-FR Merging fr-FR/01_intro.po >> en-US/01_intro.xml -> tmp/fr-FR/xml_tmp//01_intro.xml Merging fr-FR/02_before-begin.po >> en-US/02_before-begin.xml -> tmp/fr-FR/xml_tmp//02_before-begin.xml Merging fr-FR/03_before-install.po >> en-US/03_before-install.xml -> tmp/fr-FR/xml_tmp//03_before-install.xml Merging fr-FR/04_after-install.po >> en-US/04_after-install.xml -> tmp/fr-FR/xml_tmp//04_after-install.xml WARNING: Un-translated message in PO file. 91: "From Debian Jessie and up, you can install...  Merging fr-FR/05_services.po >> en-US/05_services.xml -> tmp/fr-FR/xml_tmp//05_services.xml WARNING: Un-translated message in PO file. 1315: "The below script takes advantage of Debian's use (since Squeeze...  Merging fr-FR/06_automatic.po >> en-US/06_automatic.xml -> tmp/fr-FR/xml_tmp//06_automatic.xml Merging fr-FR/07_infrastructure.po >> en-US/07_infrastructure.xml -> tmp/fr-FR/xml_tmp//07_infrastructure.xml Merging fr-FR/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/fr-FR/xml_tmp//08_sec-tools.xml Merging fr-FR/09_developer.po >> en-US/09_developer.xml -> tmp/fr-FR/xml_tmp//09_developer.xml WARNING: Un-translated message in PO file. 243: "Maintainers that want to remove users in their postrm...  Merging fr-FR/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/fr-FR/xml_tmp//10_before-compromise.xml Merging fr-FR/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/fr-FR/xml_tmp//11_after-compromise.xml Merging fr-FR/12_faq.po >> en-US/12_faq.xml -> tmp/fr-FR/xml_tmp//12_faq.xml WARNING: Un-translated message in PO file. 775: "The security team keeps its list of Frequently Asked Questions ...  Merging fr-FR/99_appendix.po >> en-US/99_appendix.xml -> tmp/fr-FR/xml_tmp//99_appendix.xml Merging fr-FR/Author_Group.po >> en-US/Author_Group.xml -> tmp/fr-FR/xml_tmp//Author_Group.xml Merging fr-FR/Book_Info.po >> en-US/Book_Info.xml -> tmp/fr-FR/xml_tmp//Book_Info.xml Merging fr-FR/Revision_History.po >> en-US/Revision_History.xml -> tmp/fr-FR/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 23: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 26: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 35: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 38: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 41: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 44: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 47: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 50: "Use LSB headers for firewall script. Patch by Dominic Walden."  PO file 'fr-FR/Securing_Debian_Manual.po' not found! Using base XML!  Processing file tmp/fr-FR/xml/Common_Content/Conventions.xml -> tmp/fr-FR/xml/Common_Content/Conventions.xml Processing file tmp/fr-FR/xml/Common_Content/Feedback.xml -> tmp/fr-FR/xml/Common_Content/Feedback.xml Processing file tmp/fr-FR/xml/Common_Content/Legal_Notice.xml -> tmp/fr-FR/xml/Common_Content/Legal_Notice.xml Processing file tmp/fr-FR/xml/Common_Content/Program_Listing.xml -> tmp/fr-FR/xml/Common_Content/Program_Listing.xml Processing file tmp/fr-FR/xml/Common_Content/Revision_History.xml -> tmp/fr-FR/xml/Common_Content/Revision_History.xml Processing file tmp/fr-FR/xml_tmp/01_intro.xml -> tmp/fr-FR/xml/01_intro.xml Processing file tmp/fr-FR/xml_tmp/02_before-begin.xml -> tmp/fr-FR/xml/02_before-begin.xml Processing file tmp/fr-FR/xml_tmp/03_before-install.xml -> tmp/fr-FR/xml/03_before-install.xml Processing file tmp/fr-FR/xml_tmp/04_after-install.xml -> tmp/fr-FR/xml/04_after-install.xml Processing file tmp/fr-FR/xml_tmp/05_services.xml -> tmp/fr-FR/xml/05_services.xml Processing file tmp/fr-FR/xml_tmp/06_automatic.xml -> tmp/fr-FR/xml/06_automatic.xml Processing file tmp/fr-FR/xml_tmp/07_infrastructure.xml -> tmp/fr-FR/xml/07_infrastructure.xml Processing file tmp/fr-FR/xml_tmp/08_sec-tools.xml -> tmp/fr-FR/xml/08_sec-tools.xml Processing file tmp/fr-FR/xml_tmp/09_developer.xml -> tmp/fr-FR/xml/09_developer.xml Processing file tmp/fr-FR/xml_tmp/10_before-compromise.xml -> tmp/fr-FR/xml/10_before-compromise.xml Processing file tmp/fr-FR/xml_tmp/11_after-compromise.xml -> tmp/fr-FR/xml/11_after-compromise.xml Processing file tmp/fr-FR/xml_tmp/12_faq.xml -> tmp/fr-FR/xml/12_faq.xml Processing file tmp/fr-FR/xml_tmp/99_appendix.xml -> tmp/fr-FR/xml/99_appendix.xml Processing file tmp/fr-FR/xml_tmp/Author_Group.xml -> tmp/fr-FR/xml/Author_Group.xml Processing file tmp/fr-FR/xml_tmp/Book_Info.xml -> tmp/fr-FR/xml/Book_Info.xml Processing file tmp/fr-FR/xml_tmp/Revision_History.xml -> tmp/fr-FR/xml/Revision_History.xml Processing file tmp/fr-FR/xml_tmp/Securing_Debian_Manual.xml -> tmp/fr-FR/xml/Securing_Debian_Manual.xml Beginning work on fr-FR DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/fr-FR/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=it-IT Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up it-IT Merging it-IT/01_intro.po >> en-US/01_intro.xml -> tmp/it-IT/xml_tmp//01_intro.xml WARNING: Fuzzy message in PO file. 29: "The current maintainer of this document is Javier Fernández-San... WARNING: Fuzzy message in PO file. 33: "This manual was started as a HOWTO by Alex... WARNING: Fuzzy message in PO file. 70: "You can download or view the latest version of the Securing Deb... WARNING: Un-translated message in PO file. 80: "This document is part of the documents distributed by the $ svn co svn://svn.... WARNING: Fuzzy message in PO file. 101: "The installation of Debian GNU/Linux is not very difficult and ... WARNING: Un-translated message in PO file. 114: "This document has yet to be updated based on the latest Debian ... WARNING: Fuzzy message in PO file. 117: "Expand the incident response information, maybe add some ideas ... WARNING: Fuzzy message in PO file. 121: "Write about remote monitoring tools (to check for system availa... WARNING: Fuzzy message in PO file. 128: "Check if NSA Enhanced Linu... WARNING: Fuzzy message in PO file. 217: "Talk about pam_chroot (see > en-US/02_before-begin.xml -> tmp/it-IT/xml_tmp//02_before-begin.xml WARNING: Fuzzy message in PO file. 47: "The > en-US/03_before-install.xml -> tmp/it-IT/xml_tmp//03_before-install.xml WARNING: Fuzzy message in PO file. 38: "Any directory tree which a user has write permissions to, such ... WARNING: Fuzzy message in PO file. 60: "During the system partitioning you also have to decide which fi... WARNING: Un-translated message in PO file. 76: "Notice, however, that there are some partitions that might not ... WARNING: Fuzzy message in PO file. 94: "Setting a good root password is the most basic requirement for ... WARNING: Un-translated message in PO file. 98: "Plenty of information on choosing good passwords can be found o... WARNING: Fuzzy message in PO file. 119: "invoke-rc.d support is mandatory in Debian, ... WARNING: Fuzzy message in PO file. 126: "Disabling a daemon service is quite simple. You either remove t... WARNING: Fuzzy message in PO file. 130: "You can remove these links manually or using update-rc... WARNING: Un-translated message in PO file. 134: "\n # update-rc.d name stop XXXX is a number that determines when ... WARNING: Fuzzy message in PO file. 142: "\n If any files /etc/rcrunlevel.d/[SK]??nam... WARNING: Fuzzy message in PO file. 161: "\n # sysv-rc-conf foobar off" WARNING: Fuzzy message in PO file. 169: "\n # sysv-rc-conf foobar on" WARNING: Fuzzy message in PO file. 174: "Other (less recommended) methods of disabling services are:" WARNING: Un-translated message in PO file. 178: "Removing the /etc/init.d/service_namename remove" WARNING: Fuzzy message in PO file. 185: "Move the script file (/etc/init.d/service_na... WARNING: Fuzzy message in PO file. 189: "Remove the execute permission from the /etc/init.d//etc/init.d/service_name<... WARNING: Fuzzy message in PO file. 197: "Nevertheless, the files under /etc/init.d ... WARNING: Fuzzy message in PO file. 201: "Unlike other (UNIX) operating systems, services in Debian canno... WARNING: Fuzzy message in PO file. 220: "\n /usr/sbin/update-inetd --disable telnet" WARNING: Fuzzy message in PO file. 231: "Debian comes with a lot of software, for e... WARNING: Fuzzy message in PO file. 244: "providing tools that could help the attacker to use the comprom... WARNING: Fuzzy message in PO file. 254: "\nPackage Size\n------------------------+---... WARNING: Fuzzy message in PO file. 301: "You must take into account that removing perl> en-US/04_after-install.xml -> tmp/it-IT/xml_tmp//04_after-install.xml WARNING: Un-translated message in PO file. 47: "During installation security updates are configured for your sy... WARNING: Un-translated message in PO file. 50: "To manually update the system, put the following line in your <... WARNING: Un-translated message in PO file. 82: "If you like, you can add the deb-src lines to /etc/ap... WARNING: Un-translated message in PO file. 88: "Once you have executed a security update you might need to rest... WARNING: Un-translated message in PO file. 91: "From Debian Jessie and up, you can install... WARNING: Fuzzy message in PO file. 100: "Excercise caution when dealing with security upgrades if you ar... WARNING: Fuzzy message in PO file. 119: "If your kernel is not being managed you will see a message sayi... WARNING: Fuzzy message in PO file. 123: "The installation system of recent Debian releases will handle t... WARNING: Fuzzy message in PO file. 127: "\n$ COLUMNS=150 dpkg -l 'linux-image*' | awk '$1 ~ /ii/ { print... WARNING: Un-translated message in PO file. 135: "\n$ kernfile=`readlink -f /vmlinuz`\n$ kernel=`dpkg -S $kernfil... WARNING: Fuzzy message in PO file. 151: "If you need to do a system reboot (because of a kernel upgrade)... WARNING: Un-translated message in PO file. 167: "Anybody can easily get a root-shell and change your passwords b... WARNING: Un-translated message in PO file. 170: "<name-of-your-bootimage> init=/bin/sh/etc/lilo.c... WARNING: Fuzzy message in PO file. 183: "\n image=/boot/2.2.14-vmlinuz\n label=Linux\n read-onl... WARNING: Fuzzy message in PO file. 234: "Linux 2.6 kernels provide a way to access a root shell while bo... WARNING: Fuzzy message in PO file. 243: "In order to remove this behavior you need to set the following ... WARNING: Fuzzy message in PO file. 256: "\n Press ENTER to obtain a shell (waits 5 seconds)" WARNING: Fuzzy message in PO file. 264: "\n # DELAY The number of seconds the linuxrc script should ... WARNING: Fuzzy message in PO file. 298: "Some security policies might force administrators to log in to ... WARNING: Un-translated message in PO file. 302: "/etc/pam.d/login In older Debian releases ... WARNING: Fuzzy message in PO file. 305: "securetty The /etc/securettyallowed users ca... WARNING: Un-translated message in PO file. 332: "disable this feature completely." WARNING: Un-translated message in PO file. 335: "If you want to restrict this, you must check the /etc... WARNING: Un-translated message in PO file. 338: "The default in Debian includes this switch:" WARNING: Un-translated message in PO file. 346: "The -a switch, as the init q after making any ... WARNING: Un-translated message in PO file. 355: "Restricting the use of the Magic SysRq key" WARNING: Un-translated message in PO file. 358: "The Magic SysRq key is a key combination t... WARNING: Un-translated message in PO file. 361: "Since the Etch release, the Magic SysRq key feature is enabled ... WARNING: Un-translated message in PO file. 373: "The default value shown above allows all of the SysRq functions... WARNING: Un-translated message in PO file. 376: "You should disable this functionality ifaccess to the console i... WARNING: Un-translated message in PO file. 379: "\n# Disables the magic SysRq key\nkernel.sysrq = 0" WARNING: Un-translated message in PO file. 385: "For more information, read Ext file system (e... WARNING: Un-translated message in PO file. 403: "only applies to ext2 or ext3/tmp<... WARNING: Fuzzy message in PO file. 462: "\n/dev/sda6 /usr ext3 defaults,ro,nodev 0 ... WARNING: Fuzzy message in PO file. 492: "Be careful if setting /tmp noexec when you... WARNING: Fuzzy message in PO file. 505: "\n DPkg\n {\n Pre-Invoke { \"mount /usr -o remount,rw\"... WARNING: Fuzzy message in PO file. 523: "\n# lsof +L1" WARNING: Fuzzy message in PO file. 528: "Stop or restart these programs and run the Post-Invoke manually... WARNING: Un-translated message in PO file. 553: "The following description is far from complete, for more inform... WARNING: Fuzzy message in PO file. 556: "PAM offers you the possibility to go through several authentica... WARNING: Un-translated message in PO file. 560: "Password security in PAM" WARNING: Un-translated message in PO file. 563: "Review the /etc/pam.d/common-password, inc... WARNING: Un-translated message in PO file. 566: "You have to make sure that the pam_unix.so module uses the \"sh... WARNING: Un-translated message in PO file. 569: "The line with the definition of the pam_unix module will look s... WARNING: Un-translated message in PO file. 572: "\n password [success=1 default=ignore] pam_unix.so null... WARNING: Un-translated message in PO file. 578: "This definition:" WARNING: Un-translated message in PO file. 581: "Enforces password encryption when storing passwords, using the ... WARNING: Un-translated message in PO file. 584: "Enables password complexity checks (option obscuremin/etc/pam.d/lo... WARNING: Fuzzy message in PO file. 648: "\n session required pam_limits.so" WARNING: Un-translated message in PO file. 656: "Control of su in PAM" WARNING: Fuzzy message in PO file. 659: "If you want to protect su, so that only some... WARNING: Fuzzy message in PO file. 663: "\n auth requisite pam_wheel.so group=wheel debug" WARNING: Fuzzy message in PO file. 671: "If you want only certain users to authenticate at a PAM service... WARNING: Fuzzy message in PO file. 675: "\n auth required pam_listfile.so item=user sense=all... WARNING: Un-translated message in PO file. 680: "Temporary directories in PAM" WARNING: Fuzzy message in PO file. 683: "Since there have been a number of so called insecure tempfile v... WARNING: Fuzzy message in PO file. 687: "\n session optional pam_tmpdir.so" WARNING: Fuzzy message in PO file. 692: "There has also been a discussion about adding this by default i... WARNING: Un-translated message in PO file. 696: "Configuration for undefined PAM applications" WARNING: Fuzzy message in PO file. 699: "Finally, but not least, create /etc/pam.d/other/etc/login.defs" WARNING: Fuzzy message in PO file. 881: "The next step is to edit the basic configuration and action upo... WARNING: Fuzzy message in PO file. 885: "\n FAILLOG_ENAB yes" WARNING: Fuzzy message in PO file. 914: "The same as SYSLOG_SU_ENAB but applies to th... WARNING: Un-translated message in PO file. 923: "As stated above, encrypted passwords greatly reduce the problem... WARNING: Fuzzy message in PO file. 926: "User login actions: edit /etc/pam.d/login" WARNING: Un-translated message in PO file. 930: "You can adjust the login configuration file to implement an str... WARNING: Un-translated message in PO file. 933: "\nauth optional pam_faildelay.so delay=3000000" WARNING: Un-translated message in PO file. 937: "Increasing the delay value to a higher val... WARNING: Un-translated message in PO file. 940: "In this file you can also set the system to present a message t... WARNING: Un-translated message in PO file. 943: "\n# auth required pam_issue.so issue=/etc/issue" WARNING: Un-translated message in PO file. 947: "If required by your security policy, this file can be used to s... WARNING: Un-translated message in PO file. 950: "setting rules for which users can access at which times, by ena... WARNING: Un-translated message in PO file. 953: "setup login sessions to use user limits as defined in /etc/motd and /... WARNING: Fuzzy message in PO file. 974: "\n$ awk -F : '{if ($3<1000) print $1}' /etc/passwd > /etc... WARNING: Fuzzy message in PO file. 988: "sudo allows the user to execute defined comm... WARNING: Fuzzy message in PO file. 1001: "\n -:wheel:ALL EXCEPT LOCAL" WARNING: Fuzzy message in PO file. 1006: "Remember to enable the pam_access mo... WARNING: Fuzzy message in PO file. 1016: "If users need to be created and the system can be accessed remo... WARNING: Fuzzy message in PO file. 1020: "Debian currently provides in the unstable release (and might be... WARNING: Fuzzy message in PO file. 1042: "\numask 077\nexec script -q -a \"/var/log/sessions/$USER\"" WARNING: Fuzzy message in PO file. 1059: "\numask 077\nexec script -q -a \"/var/log/sessions/$USER-`date ... WARNING: Fuzzy message in PO file. 1073: "For example, for bash, the /etc/profile co... WARNING: Fuzzy message in PO file. 1077: "\n HISTFILE=~/.bash_history\n HISTSIZE=10000\n HISTFILESIZE=... WARNING: Fuzzy message in PO file. 1108: "For this to work, the user can only append information to umask/etc. However,... WARNING: Un-translated message in PO file. 1191: "find /etc -type f -a -perm 600 -a -uid 0... WARNING: Un-translated message in PO file. 1194: "as superuser." WARNING: Un-translated message in PO file. 1200: "some log files at /var/log. Note also that... WARNING: Un-translated message in PO file. 1203: "find /var/log -type f -a -perm 640" WARNING: Un-translated message in PO file. 1206: ") and some are even only available to the root user (try" WARNING: Un-translated message in PO file. 1209: "find /var/log -type f -a -perm\n 600 -a -uid 0see$HOME directories are create... WARNING: Fuzzy message in PO file. 1244: "You can change this behavior so that user creation provides dif... WARNING: Fuzzy message in PO file. 1248: "Users can still share information, but not directly in their Passwd does not allow non-interactive assign... WARNING: Fuzzy message in PO file. 1272: "A system administrator must, given a big number of users, check... WARNING: Fuzzy message in PO file. 1288: "because an attacker might be able to re-attach to a closed netw... WARNING: Fuzzy message in PO file. 1298: "If bash is the user shell, a system ... WARNING: Fuzzy message in PO file. 1314: "TCP wrappers were developed when there were no real packet filt... WARNING: Fuzzy message in PO file. 1330: "To see which packages use tcpwrappers On older... WARNING: Fuzzy message in PO file. 1334: "\n $ apt-cache rdepends libwrap0" WARNING: Fuzzy message in PO file. 1342: "Now, here comes a small trick, and probably the smallest intrus... WARNING: Fuzzy message in PO file. 1346: "\n ALL: ALL: SPAWN ( \\\n echo -e \"\\n\\\n TCP Wrappers... WARNING: Fuzzy message in PO file. 1378: "Debian GNU/Linux provides some tools to perform log analysis, m... WARNING: Fuzzy message in PO file. 1382: "\n daemon,mail.*;\\\n news.=crit;news.=err;news.=notice... WARNING: Fuzzy message in PO file. 1395: "To colorize the logs, you could take a look at col... WARNING: Fuzzy message in PO file. 1411: "Once this is done you might want to check the mails that are se... WARNING: Fuzzy message in PO file. 1418: "Debian comes with a standard syslog ... WARNING: Un-translated message in PO file. 1437: "A loghost is a host which collects syslog data remotely over th... WARNING: Un-translated message in PO file. 1440: "syslogd -r" WARNING: Un-translated message in PO file. 1443: "and a new loghost is born. In order to do this permanently in D... WARNING: Fuzzy message in PO file. 1446: "\nSYSLOGD=\"\"" WARNING: Fuzzy message in PO file. 1454: "\nSYSLOGD=\"-r\"" WARNING: Fuzzy message in PO file. 1462: "\n facility.level @your_loghost" WARNING: Fuzzy message in PO file. 1470: "\n *.* @your_loghost" WARNING: Un-translated message in PO file. 1475: "into your syslog.conf. Logging remotely as... WARNING: Fuzzy message in PO file. 1481: "It is not only important to decide how alerts are used, but als... WARNING: Fuzzy message in PO file. 1488: "\n # find /var/log -type f -exec ls -l {} \\; | cut -c 17-35 ... WARNING: Fuzzy message in PO file. 1518: "Linux Intrusion DetectionLinux Trustees<... WARNING: Fuzzy message in PO file. 1526: "NSA Enhanced Linux (in package selinuxGrsecurity patch<... WARNING: Fuzzy message in PO file. 1538: "The kernel-patch-adamantix provides ... WARNING: Fuzzy message in PO file. 1578: "recompile the source code to introduce proper checks that preve... WARNING: Fuzzy message in PO file. 1582: "Debian GNU/Linux, as of the 3.0 release, provides software to i... WARNING: Fuzzy message in PO file. 1589: "In any case, be aware that even these workarounds might not pre... WARNING: Fuzzy message in PO file. 1650: "Enabling quota for the respective file systems is as easy as mo... WARNING: Un-translated message in PO file. 1654: "touch\n/home/quota.user /home/quota.group/home file system)." WARNING: Un-translated message in PO file. 1661: "Restart quota by doing" WARNING: Un-translated message in PO file. 1664: "/etc/init.d/quota stop;/etc/init.d/quota\n st... WARNING: Un-translated message in PO file. 1668: ". Now quota should be running, and quota sizes can be set." WARNING: Un-translated message in PO file. 1671: "Editing quotas for a specific user can be done by" WARNING: Un-translated message in PO file. 1674: "edquota -u <user>" WARNING: Un-translated message in PO file. 1677: ". Group quotas can be modified with" WARNING: Un-translated message in PO file. 1680: "edquota -g <group>" WARNING: Un-translated message in PO file. 1683: ". Then set the soft and hard quota and/or inode quotas as neede... WARNING: Un-translated message in PO file. 1689: "The ext2 filesystem specific attributes (chattrlcap CAP_LINUX_IMMUTABLElocate to index the wh... WARNING: Fuzzy message in PO file. 1757: "The default behavior does not send this information to the supe... WARNING: Un-translated message in PO file. 1770: "Many features of the kernel can be modified while running by ec... WARNING: Un-translated message in PO file. 1773: "/sbin/sysctl -w variable=value" WARNING: Un-translated message in PO file. 1776: "(see sysctl... WARNING: Fuzzy message in PO file. 1813: "\nnet/ipv4/tcp_syncookies = 1" WARNING: Fuzzy message in PO file. 1818: "If you want to change this option each time the kernel is worki... WARNING: Fuzzy message in PO file. 1822: "\necho 1 > /proc/sys/net/ipv4/tcp_syncookies " WARNING: Fuzzy message in PO file. 1830: "\n$ sysctl -A |grep syncookies\nnet/ipv4/tcp_syncookies = 1" WARNING: Fuzzy message in PO file. 1847: "There are actually two ways to configure your network at boot t... WARNING: Fuzzy message in PO file. 1854: "\n#\n# /etc/sysctl.conf - Configuration file for setting system... WARNING: Fuzzy message in PO file. 1967: "\nauto eth0\niface eth0 inet static\n address xxx.xxx.xx... WARNING: Fuzzy message in PO file. 2146: "An alternative solution is to create an init.d The fact that thi... WARNING: Fuzzy message in PO file. 2203: "kernel patching. There are some patches availa... WARNING: Fuzzy message in PO file. 2207: "Along this text there will be many occasions in which it is sho... WARNING: Fuzzy message in PO file. 2223: "As you know the ARP protocol is used to link IP addresses to MA... WARNING: Fuzzy message in PO file. 2236: "\n arp -s host_name hdwr_addr \n " WARNING: Fuzzy message in PO file. 2246: "Detect suspicious ARP traffic. You can use arpwatc... WARNING: Fuzzy message in PO file. 2265: "\n#!/bin/bash\n/bin/mount /dev/fd0 /mnt/floppy\ntrap \"/bin/umo...  Merging it-IT/05_services.po >> en-US/05_services.xml -> tmp/it-IT/xml_tmp//05_services.xml WARNING: Fuzzy message in PO file. 29: "Regarding the services running from inetd (<... WARNING: Fuzzy message in PO file. 33: "\nservice nntp\n{\n socket_type = stream\n pr... WARNING: Fuzzy message in PO file. 74: "ListenAddress 192.168.0.1 Have ssh listen on... WARNING: Fuzzy message in PO file. 78: "PermitRootLogin no Try not to permit Root Lo... WARNING: Un-translated message in PO file. 82: "Port 666 or ListenAddress 192.168.0... WARNING: Un-translated message in PO file. 85: "PermitEmptyPasswords no Empty passwords make... WARNING: Fuzzy message in PO file. 88: "AllowUsers alex ref me@somewhere Allow only ... WARNING: Fuzzy message in PO file. 92: "AllowGroups wheel admin Allow only certain g... WARNING: Fuzzy message in PO file. 96: "PasswordAuthentication yes It is completely ... WARNING: Fuzzy message in PO file. 100: "Disable any form of authentication you do not really need, if y... WARNING: Fuzzy message in PO file. 104: "Protocol 2 Disable the protocol version 1, s... WARNING: Fuzzy message in PO file. 108: "Banner /etc/some_file/etc/X11/xdm/Xserversdoes not run as root... WARNING: Fuzzy message in PO file. 895: "To achieve maximum BIND security, now build a chroot jail (see ... WARNING: Fuzzy message in PO file. 899: "\ndev/null\netc/bind/ - should hold named.conf and all th... WARNING: Fuzzy message in PO file. 926: "Also, you can find more information regarding Bind chrooting in... WARNING: Fuzzy message in PO file. 933: "\ndev/log - syslogd should be listening here\ndev/null\netc/bin... WARNING: Fuzzy message in PO file. 970: "\n$ apt-get source bind\n# apt-get build-dep bind\n$ cd bind-8.... WARNING: Fuzzy message in PO file. 1012: "\nListen 127.0.0.1:80" WARNING: Fuzzy message in PO file. 1020: "\nBindAddress 127.0.0.1" WARNING: Fuzzy message in PO file. 1046: "\nLoadModule userdir_module /usr/lib/apache/1.3/mod_userdir.so" WARNING: Fuzzy message in PO file. 1057: "\nUserdir disabled" WARNING: Fuzzy message in PO file. 1104: "chroot is one of the most powerful possibili... WARNING: Fuzzy message in PO file. 1108: "Many services running as daemons could benefit from this sort o... WARNING: Fuzzy message in PO file. 1151: "If you need password sharing between machines, you might want t... WARNING: Fuzzy message in PO file. 1155: "You can read more about NIS security in the The tools can easily be misused, causing enormous amo... WARNING: Fuzzy message in PO file. 1271: "If you do not know much about firewalling you should start by r... WARNING: Un-translated message in PO file. 1338: "The below script takes advantage of Debian's use (since Squeeze... WARNING: Un-translated message in PO file. 1341: "\n# insserv myfirewall" WARNING: Fuzzy message in PO file. 1348: "\n#!/bin/sh\n### BEGIN INIT INFO\n# Provides: myfirewa... WARNING: Fuzzy message in PO file. 1681: "\niface eth0 inet static\n address x.x.x.x\n [.. ... WARNING: Fuzzy message in PO file. 1697: "\n post-down iptables-restore < /etc/iptables.down.rules" WARNING: Fuzzy message in PO file. 1702: "For more advanced firewall configuration scripts through > en-US/06_automatic.xml -> tmp/it-IT/xml_tmp//06_automatic.xml WARNING: Fuzzy message in PO file. 20: "Since woody (Debian 3.0) there are two specific packages that a... WARNING: Fuzzy message in PO file. 27: "The harden package tries to make it more eas... WARNING: Fuzzy message in PO file. 31: "harden-tools: tools to enhance system securi... WARNING: Fuzzy message in PO file. 35: "harden-environment: helps configure a harden... WARNING: Fuzzy message in PO file. 39: "harden-servers: removes servers considered i... WARNING: Fuzzy message in PO file. 43: "harden-clients: removes clients considered i... WARNING: Fuzzy message in PO file. 47: "harden-remoteaudit: tools to remotely audit ... WARNING: Fuzzy message in PO file. 51: "harden-nids: helps to install a network intr... WARNING: Fuzzy message in PO file. 55: "harden-surveillance: helps to install tools ... WARNING: Fuzzy message in PO file. 62: "harden-doc: provides this same manual and ot... WARNING: Fuzzy message in PO file. 66: "harden-development: development tools for cr... WARNING: Fuzzy message in PO file. 70: "Be careful because if you have software you need (and which you... WARNING: Fuzzy message in PO file. 74: "\n# apt-get install telnetd \nThe following packages will be RE... WARNING: Fuzzy message in PO file. 97: "> en-US/07_infrastructure.xml -> tmp/it-IT/xml_tmp//07_infrastructure.xml WARNING: Fuzzy message in PO file. 20: "Debian has a Security Team, that handles security in the debsecan uses the information in... WARNING: Un-translated message in PO file. 145: "Packages in the security archive are autobuilt, just like the r... WARNING: Un-translated message in PO file. 148: "Thus, the security upload archive works with the following proc... WARNING: Fuzzy message in PO file. 178: "forwards the packages to the appropriate proposed-updates so th... WARNING: Un-translated message in PO file. 188: "Debian developers that need to coordinate with the security tea... WARNING: Fuzzy message in PO file. 194: "This section could also be titled \"how to upgrade/update safel... WARNING: Un-translated message in PO file. 198: "FIXME: probably the Internet Explorer vulnerability handling. c... WARNING: Un-translated message in PO file. 201: "Debian does not provide signed packages but provides a mechanis... WARNING: Fuzzy message in PO file. 207: "The current scheme for package signature checks" WARNING: Fuzzy message in PO file. 232: "This scheme is etch<... WARNING: Fuzzy message in PO file. 246: "These changes are based on the patch for apt... WARNING: Fuzzy message in PO file. 253: "This feature is still under development, if you believe you fin... WARNING: Un-translated message in PO file. 257: "You can find more information at apt trust the official Debian... WARNING: Fuzzy message in PO file. 442: "The Debian archive signing key is available at ... WARNING: Fuzzy message in PO file. 1193: "\n$ rm -f dists/unstable/Release\n$ apt-ftparchive release dist... WARNING: Fuzzy message in PO file. 1210: "This package signing scheme can be implemented using d... WARNING: Fuzzy message in PO file. 1214: "Latest dpkg versions (since 1.9.21) incorpor...  Merging it-IT/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/it-IT/xml_tmp//08_sec-tools.xml WARNING: Fuzzy message in PO file. 29: "The tools provided by Debian to perform remote vulnerability as... WARNING: Fuzzy message in PO file. 99: "FIXME add information based on ... WARNING: Fuzzy message in PO file. 267: "never provide propiet... WARNING: Un-translated message in PO file. 325: "icedove (rebranded version of Mozill... WARNING: Fuzzy message in PO file. 337: "Key servers allow you to download published public keys so that... WARNING: Fuzzy message in PO file. 341: "\nkeyserver wwwkeys.pgp.net" WARNING: Un-translated message in PO file. 352: "> en-US/09_developer.xml -> tmp/it-IT/xml_tmp//09_developer.xml WARNING: Fuzzy message in PO file. 17: "This chapter introduces some best secure coding practices for d... WARNING: Fuzzy message in PO file. 27: "In order to do so, they should make their best to review the so... WARNING: Fuzzy message in PO file. 31: "The programming bugs which lead to security bugs typically incl... WARNING: Fuzzy message in PO file. 35: "Some of these issues might not be easy to spot unless you are a... WARNING: Un-translated message in PO file. 39: "There are a set of tools available to assist to the security co... WARNING: Fuzzy message in PO file. 48: "The package does install binaries setuid or setgid. Li... WARNING: Fuzzy message in PO file. 58: "If you have to do any of the above make sure the programs that ... WARNING: Un-translated message in PO file. 62: "For more information, specific to secure programming, make sure... WARNING: Fuzzy message in PO file. 68: "If your software runs a daemon that does not need root privileg... WARNING: Fuzzy message in PO file. 72: "In the first case, you need to ask for a user or group id to th... WARNING: Fuzzy message in PO file. 76: "In the second case, you need to create the system user either i... WARNING: Fuzzy message in PO file. 83: "\n[...]\ncase \"$1\" in\n install|upgrade)\n\n # If the packa... WARNING: Un-translated message in PO file. 217: "Starts the daemon dropping privileges: if the software does not... WARNING: Fuzzy message in PO file. 226: "\n if ! getent passwd | grep -q \"^server_userpostrm... WARNING: Fuzzy message in PO file. 254: "Running programs with a user with limited privileges makes sure...  Merging it-IT/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/it-IT/xml_tmp//10_before-compromise.xml WARNING: Fuzzy message in PO file. 29: "This typically includes subscribing to the announcement mailing... WARNING: Fuzzy message in PO file. 33: "In order to track known vulnerabilities affecting the Debian di... WARNING: Fuzzy message in PO file. 37: "The tracker has searchable interfaces (by lenny Debian provides and... WARNING: Fuzzy message in PO file. 139: "\nAPT::Periodic::Update-Package-Lists \"1\";\nAPT::Periodic::Do... WARNING: Fuzzy message in PO file. 147: "You can use a different cron task, such as the one installed by... WARNING: Fuzzy message in PO file. 151: "Users of the KDE desktop environment will probably prefer to in... WARNING: Fuzzy message in PO file. 158: "Another method for automatic security updates is the use of debsecan program evaluates the security ... WARNING: Fuzzy message in PO file. 175: "Upon installing the Debian package debsecan,... WARNING: Fuzzy message in PO file. 182: "More information is available at the apticron, which, similarly... WARNING: Fuzzy message in PO file. 193: "You might also want to take a look at apt so that those packages that yo... WARNING: Un-translated message in PO file. 266: "To pin the packages under a given release, you must edit cron-apt as described in snort is a flexible packet sniffer or logger... WARNING: Fuzzy message in PO file. 357: "Debian's snort package has many security che... WARNING: Fuzzy message in PO file. 361: "There are other, simpler tools that can be used to detect netwo... WARNING: Fuzzy message in PO file. 365: "You can test any of these tools with the Debian package tiger is an older intrusion detection tool w... WARNING: Fuzzy message in PO file. 379: "Log analysis tools, such as logcheck can als... WARNING: Fuzzy message in PO file. 413: "lcap - A user friendly interface to remove <... WARNING: Fuzzy message in PO file. 426: "Detection of some root-kits in Debian can be accomplished with ... WARNING: Fuzzy message in PO file. 430: "Genius/Paranoia Ideas - what you could do" WARNING: Fuzzy message in PO file. 434: "This is probably the most unstable and funny section, since I h... WARNING: Fuzzy message in PO file. 456: "This strategy will help limit the damage that you can do when l... WARNING: Fuzzy message in PO file. 463: "One inconvenience of this strategy arises during building and i... WARNING: Fuzzy message in PO file. 485: "syslog-ng, useful for sending logs from the ... WARNING: Fuzzy message in PO file. 489: "snort, to set up capture of all the incoming... WARNING: Fuzzy message in PO file. 493: "osh, a SETUID root, security enhanced, restr... WARNING: Fuzzy message in PO file. 500: "Integrity checkers (see ) and T... WARNING: Fuzzy message in PO file. 504: "honeyd and farpd to setup... WARNING: Fuzzy message in PO file. 508: "tinyhoneypot to setup a simple honeypot serv... WARNING: Fuzzy message in PO file. 512: "If you cannot use spare systems to build up the honeypots and t...  Merging it-IT/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/it-IT/xml_tmp//11_after-compromise.xml WARNING: Fuzzy message in PO file. 23: "However, some tools installed by rootkits, trojans and, even, a... WARNING: Fuzzy message in PO file. 27: "The most recommended method for recovering a compromised system... WARNING: Fuzzy message in PO file. 34: "Some common questions on how to handle a compromised Debian GNU... WARNING: Fuzzy message in PO file. 53: "The CERT (Computer and Emergency Response Team) is an organizat... WARNING: Fuzzy message in PO file. 57: "Providing your local CERT (or the CERT coordination center) wit... WARNING: Fuzzy message in PO file. 61: "You can also use less formal mechanisms if you need help for re... WARNING: Fuzzy message in PO file. 68: "If you wish to gather more information, the tct> en-US/12_faq.xml -> tmp/it-IT/xml_tmp//12_faq.xml WARNING: Fuzzy message in PO file. 26: "A system is only as secure as its administrator is capable of m... WARNING: Fuzzy message in PO file. 30: "For a collection of data regarding security vulnerabilities for... WARNING: Fuzzy message in PO file. 52: "Debian's standard installation is smaller (less functionality),... WARNING: Fuzzy message in PO file. 80: "There are currently at least two linux distributions certified ... WARNING: Fuzzy message in PO file. 87: "Yes. ssh... WARNING: Fuzzy message in PO file. 182: "To reduce messages sent to the console, you can use dm... WARNING: Fuzzy message in PO file. 186: "\n KLOGD=\"\"" WARNING: Fuzzy message in PO file. 194: "\n KLOGD=\"-c 4\"" WARNING: Fuzzy message in PO file. 202: "\n #define LOG_EMERG 0 /* system is unusable */\n ... WARNING: Fuzzy message in PO file. 229: "Yes and no. Debian comes with some predefined users (user id (U... WARNING: Fuzzy message in PO file. 236: "\n cut -f 1 -d : /etc/passwd | \\\n while read i; do find / -... WARNING: Fuzzy message in PO file. 244: "These users are provided by base-passwd. Loo... WARNING: Fuzzy message in PO file. 374: "If you have removed a system user and have not made a backup of... WARNING: Fuzzy message in PO file. 411: "Inetd is not easy to remove since n... WARNING: Fuzzy message in PO file. 421: "In versions of the portmap package later tha... WARNING: Fuzzy message in PO file. 431: "There has been extensive discussion on the security of not seeing processes listening on ... WARNING: Fuzzy message in PO file. 503: "\n root:asdfjl290341274075:XXXX:X:XXXX:X::: (X=any number)" WARNING: Fuzzy message in PO file. 508: "\n root::XXXX:X:XXXX:X:::" WARNING: Fuzzy message in PO file. 534: "\n # mount -o remount,rw / " WARNING: Fuzzy message in PO file. 545: "For example, if you want to set up a POP service, you don't nee... WARNING: Fuzzy message in PO file. 549: " \n auth required pam_unix_auth.so shadow nullok use_firs... WARNING: Fuzzy message in PO file. 557: "\n auth required pam_ldap.so " WARNING: Fuzzy message in PO file. 565: "\n (user_id, user_name, realname, shell, password, UID, GID, h... WARNING: Fuzzy message in PO file. 609: "\n Dec 30 07:33:36 debian -- MARK --\n Dec 30 07:53:36 debian... WARNING: Fuzzy message in PO file. 620: "This does not indicate any kind of compromise, and users changi... WARNING: Fuzzy message in PO file. 624: "\n -m interval\n The syslogd logs a mark tim... WARNING: Fuzzy message in PO file. 646: "\n Apr 1 09:25:01 server su[30315]: + ??? root-nobody\n Apr ... WARNING: Fuzzy message in PO file. 657: "\n $ grep 25 /etc/crontab\n 25 9 * * * root test -e /... WARNING: Fuzzy message in PO file. 679: "\n May 1 12:35:25 linux kernel: possible SYN flooding on port ... WARNING: Fuzzy message in PO file. 695: "\n linux:~# netstat -ant | grep SYN_RECV | wc -l\n 9000" WARNING: Fuzzy message in PO file. 712: "\n May 2 11:55:02 linux PAM_unix[1477]: (cron) session closed ... WARNING: Fuzzy message in PO file. 759: "If no information seems to be published, please send e-mail abo... WARNING: Fuzzy message in PO file. 772: "proftpd is vulnerable to a Denial of Service... WARNING: Fuzzy message in PO file. 779: "After installing portsentry, there are a lot... WARNING: Un-translated message in PO file. 789: "The security team keeps its list of Frequently Asked Questions ...  Merging it-IT/99_appendix.po >> en-US/99_appendix.xml -> tmp/it-IT/xml_tmp//99_appendix.xml WARNING: Un-translated message in PO file. 14: "Appendix" WARNING: Fuzzy message in PO file. 23: "Install the system, taking into account the information regardi... WARNING: Fuzzy message in PO file. 39: "\n $ ps aux\n $ netstat -pn -l -A inet \n # /usr/sbin/lsof -... WARNING: Fuzzy message in PO file. 50: "You will need to install lsof-2.2 for the th... WARNING: Fuzzy message in PO file. 57: "\n#!/bin/sh\n# FIXME: this is quick and dirty; replace with a m... WARNING: Fuzzy message in PO file. 88: "\n $ grep -v \"^#\" /etc/inetd.conf | sort -u" WARNING: Fuzzy message in PO file. 105: "\n # init 1\n (....)\n # init 2" WARNING: Fuzzy message in PO file. 125: "\n # for i in `/usr/sbin/lsof -i |grep LISTEN |cut -d \" \" -f... WARNING: Fuzzy message in PO file. 145: "Check the system using a vulnerability assessment scanner (like... WARNING: Un-translated message in PO file. 149: "Install network and host intrusion measures like snort... WARNING: Fuzzy message in PO file. 173: "This appendix briefly reiterates points from other sections in ... WARNING: Un-translated message in PO file. 240: "Tighten up /etc/pam.d/login" WARNING: Un-translated message in PO file. 246: "Disable network root login; use su... WARNING: Fuzzy message in PO file. 270: "Set up file integrity (see ). I... WARNING: Un-translated message in PO file. 304: "Configure firewall and tcpwrappers (i.e. apt for security updates -- add to... WARNING: Fuzzy message in PO file. 366: "You can easily set up a dedicated Debian system as a stand-alon... WARNING: Fuzzy message in PO file. 382: "BASE is currently packaged for Debian in acidbaseIP: Netf... WARNING: Fuzzy message in PO file. 465: "\nInternet ---- router ( 62.3.3.25 ) ---- bridge (62.3.3.26 gw ... WARNING: Fuzzy message in PO file. 487: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Fuzzy message in PO file. 542: "\nInternet ---- router (62.3.3.25) ---- bridge (62.3.3.26)\n ... WARNING: Fuzzy message in PO file. 561: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Fuzzy message in PO file. 614: "\niptables -F FORWARD\niptables -P FORWARD DROP\niptables -A FO... WARNING: Fuzzy message in PO file. 696: "This script automates the procedure for changing the b... WARNING: Fuzzy message in PO file. 703: "You can also create the users manually and use the patch availa... WARNING: Fuzzy message in PO file. 707: "\n #!/bin/sh\n # Change the default Debian bind v8 configurat... WARNING: Fuzzy message in PO file. 1009: "However, as soon as you connect to the Internet you are exposin... WARNING: Fuzzy message in PO file. 1019: "\n # iptables -F\n # iptables -L\n Chain INPUT (policy ACCEP... WARNING: Fuzzy message in PO file. 1088: "Note: Using a DROP policy in the INPUT cha... WARNING: Un-translated message in PO file. 1092: "Of course, you should disable any backdoors before getting the ... WARNING: Un-translated message in PO file. 1101: "Chroot environment for SSH" WARNING: Fuzzy message in PO file. 1104: "Creating a restricted environment for SSHlibpam-chroot" WARNING: Fuzzy message in PO file. 1129: "Probably the easiest way is to use the libpam-chrootPrivilege Separation set to sshd does not allow restriction of ... WARNING: Fuzzy message in PO file. 1211: "\n joeuser:x:1099:1099:Joe Random User:/home/joe/./:/bin/bash" WARNING: Fuzzy message in PO file. 1222: "\n./bin:\ntotal 660\ndrwxr-xr-x 2 root root 4096... WARNING: Fuzzy message in PO file. 1249: "\n./etc:\ntotal 24\ndrwxr-xr-x 2 root root 4096 ... WARNING: Fuzzy message in PO file. 1270: "\n./lib:\ntotal 1848\ndrwxr-xr-x 2 root root 409... WARNING: Fuzzy message in PO file. 1309: "\n./usr:\ntotal 16\ndrwxr-xr-x 4 root root 4096 ... WARNING: Fuzzy message in PO file. 1326: "\n./usr/bin:\ntotal 340\ndrwxr-xr-x 2 root root ... WARNING: Fuzzy message in PO file. 1351: "\n./usr/lib:\ntotal 852\ndrwxr-xr-x 2 root root ... WARNING: Fuzzy message in PO file. 1378: "\n # chroot /var/chroot/ssh /sbin/sshd -f /etc/sshd_config" WARNING: Fuzzy message in PO file. 1386: "\nUsePrivilegeSeparation yes" WARNING: Fuzzy message in PO file. 1400: "You can use debootstrap to setup a minimal e... WARNING: Fuzzy message in PO file. 1407: "You can easily create a restricted environment with the /dev/log ... WARNING: Fuzzy message in PO file. 1448: "The following sample environment has been (slightly) tested in ... WARNING: Fuzzy message in PO file. 1452: "\n.\n|-- bin\n| |-- ash\n| |-- bash\n| |-- chgrp\n| |--... WARNING: Fuzzy message in PO file. 1834: "\n$ ls /etc/pam.d/common-*\n/etc/pam.d/common-account /etc/pam... WARNING: Fuzzy message in PO file. 1848: "It is possible to create an environment, using a trial-and-erro... WARNING: Fuzzy message in PO file. 1852: "\n.:\ntotal 36\ndrwxr-xr-x 9 root root 4096 Jun 5 10:05 ./\ndrw... WARNING: Un-translated message in PO file. 2337: "Chroot environment for Apache" WARNING: Fuzzy message in PO file. 2346: "FIXME: Apache can also be chrooted using /etc/init.d/apacheCHRDIR variable at the top of th... WARNING: Un-translated message in PO file. 2470: "edit the start, stop,... WARNING: Un-translated message in PO file. 2473: "add a line to mount and unmount the /proc ... WARNING: Un-translated message in PO file. 2476: "\n#! /bin/bash\n#\n# apache Start the apache HTTP server... WARNING: Un-translated message in PO file. 2561: "FIXME: should the first Apache process be ... WARNING: Un-translated message in PO file. 2564: "Replace in /etc/logrotate.d/apache /etc/init.d/apache start) and ... WARNING: Un-translated message in PO file. 2570: "Type ps aux | grep apache to make sure Apach... WARNING: Un-translated message in PO file. 2573: "\n root 180 0.0 1.1 2936 1436 ? S 04:03 0:00 /usr/sbin/apa... WARNING: Un-translated message in PO file. 2584: "Make sure the Apache processes are running chrooted by looking ... WARNING: Un-translated message in PO file. 2587: "\n drwxr-sr-x 10 root staff 240 Dec 2 16:06 .\n drwxrwsr-... WARNING: Un-translated message in PO file. 2602: "To automate this test, you can type:ls -la /proc/`cat ... WARNING: Un-translated message in PO file. 2605: "FIXME: Add other tests that can be run to ... WARNING: Un-translated message in PO file. 2608: "The reason I like this is because setting up the jail is not ve... WARNING: Un-translated message in PO file. 2611: " \napt-get update && apt-get install apache\nmakejail /... WARNING: Un-translated message in PO file. 2617: "See also" WARNING: Un-translated message in PO file. 2620: "If you are looking for more information you can consider these ...  Merging it-IT/Author_Group.po >> en-US/Author_Group.xml -> tmp/it-IT/xml_tmp//Author_Group.xml Merging it-IT/Book_Info.po >> en-US/Book_Info.xml -> tmp/it-IT/xml_tmp//Book_Info.xml Merging it-IT/Revision_History.po >> en-US/Revision_History.xml -> tmp/it-IT/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 14: "Changelog/History" WARNING: Un-translated message in PO file. 17: "Marcos" WARNING: Un-translated message in PO file. 20: "Fouces" WARNING: Un-translated message in PO file. 23: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 26: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 29: "Thijs" WARNING: Un-translated message in PO file. 32: "Kinkhorst" WARNING: Un-translated message in PO file. 35: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 38: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 41: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 44: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 47: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 50: "Use LSB headers for firewall script. Patch by Dominic Walden." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 56: "Fernández-Sanguino Peña." WARNING: Un-translated message in PO file. 59: "Indicate that the document is not updated with latest versions.... WARNING: Un-translated message in PO file. 62: "Update pointers to current location of sources." WARNING: Un-translated message in PO file. 65: "Update information on security updates for newer releases." WARNING: Un-translated message in PO file. 68: "Point information for Developers to online sources instead of k... WARNING: Un-translated message in PO file. 71: "Extend the information regarding securing console access, inclu... WARNING: Un-translated message in PO file. 74: "Update the information related to PAM modules including how to ... WARNING: Un-translated message in PO file. 77: "Reference some of the PAM modules available to use double facto... WARNING: Un-translated message in PO file. 80: "Fix shell script example in Appendix." WARNING: Un-translated message in PO file. 83: "Fix reference errors." WARNING: Un-translated message in PO file. 86: "Point to the Basille sourceforge project instead of the bastill... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 92: "Change reference to Log Analysis' website as this is no longer ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 95: "Change the section related to choosing a filesystem: note that ... WARNING: Un-translated message in PO file. 98: "Change the name of the packages related to enigmail to reflect ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 101: "Change URLs pointing to Bastille Linux to www.Bastille-UNIX.org... WARNING: Un-translated message in PO file. 104: "Fix pointers to Linux Ramen and Lion worms." WARNING: Un-translated message in PO file. 107: "Use linux-image in the examples instead of the (old) kernel-ima... WARNING: Un-translated message in PO file. 110: "Fix typos spotted by Francesco Poli." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 113: "Update the information related to security updates. Drop the te... WARNING: Un-translated message in PO file. 116: "Divide the firewall applications based on target users and add ... WARNING: Un-translated message in PO file. 119: "Remove references to libsafe, it's not in the archive any longe... WARNING: Un-translated message in PO file. 122: "Fix the location of syslog's configuration, thanks to John Talb... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 125: "Thanks go to Francesco Poli for his extensive review of the doc... WARNING: Un-translated message in PO file. 128: "Remove most references to the woody release as it is no longer ... WARNING: Un-translated message in PO file. 131: "Describe how to restrict users so that they can only do file tr... WARNING: Un-translated message in PO file. 134: "Added a note regarding the debian-private declasiffication deci... WARNING: Un-translated message in PO file. 137: "Updated link of incident handling guides." WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 143: "Fix references to the master security server." WARNING: Un-translated message in PO file. 146: "Add pointers to additional APT-secure documentation." WARNING: Un-translated message in PO file. 149: "Improve the description of APT signatures." WARNING: Un-translated message in PO file. 152: "Comment out some things which are not yet final related to the ... WARNING: Un-translated message in PO file. 155: "Fixed name of the Debian Testing Security Team." WARNING: Un-translated message in PO file. 158: "Remove reference to sarge in an example." WARNING: Un-translated message in PO file. 161: "Update the antivirus section, clamav is now available on the re... WARNING: Un-translated message in PO file. 164: "Removes all references to freeswan as it is obsolete." WARNING: Un-translated message in PO file. 167: "Describe issues related to ruleset changes to the firewall if d... WARNING: Un-translated message in PO file. 170: "Update the information related to the IDS installation, mention... WARNING: Un-translated message in PO file. 173: "Rewrite the \"running bind as a non-root user\" section as this... WARNING: Un-translated message in PO file. 176: "Remove the obsolete way to setup iptables rulesets as woody is ... WARNING: Un-translated message in PO file. 179: "Revert the advice regarding LOG_UNKFAIL_ENAB it should be set t... WARNING: Un-translated message in PO file. 182: "Added more information related to updating the system with desk... WARNING: Un-translated message in PO file. 185: "Updated the contents of the FAQ and remove redundant paragraphs... WARNING: Un-translated message in PO file. 188: "Review and update the section related to forensic analysis of m... WARNING: Un-translated message in PO file. 191: "Remove or fix some dead links." WARNING: Un-translated message in PO file. 194: "Fix many typos and gramatical errors reported by Francesco Poli... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 197: "Provide examples using apt-cache's rdepends as suggested by Oze... WARNING: Un-translated message in PO file. 200: "Fix location of Squid's user's manual because of its relocation... WARNING: Un-translated message in PO file. 203: "Fix information regarding umask, it's logins.defs (and not limi... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 206: "Add information on how to track security vulnerabilities and ad... WARNING: Un-translated message in PO file. 209: "Add more information on the security support for testing." WARNING: Un-translated message in PO file. 212: "Fix a large number of typos with a patch provided by Simon Bran... WARNING: Un-translated message in PO file. 215: "Added section on how to disable root prompt on initramfs provid... WARNING: Un-translated message in PO file. 218: "Remove references to queso." WARNING: Un-translated message in PO file. 221: "Note that testing is now security-supported in the introduction... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 224: "Rewrote the information on how to setup ssh chroots to clarify ... WARNING: Un-translated message in PO file. 227: "Fix lsof call as suggested by Christophe Sahut." WARNING: Un-translated message in PO file. 230: "Include patches for typo fixes from Uwe Hermann." WARNING: Un-translated message in PO file. 233: "Fix typo in reference spotted by Moritz Naumann." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 236: "Add a section on Debian Developer's best practices for security... WARNING: Un-translated message in PO file. 239: "Ammended firewall script with comments from WhiteGhost." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 242: "Included a patch from Thomas Sjögren which describes that apt-ftparchive is in apt-utilsSSHssh protocol ve... WARNING: Un-translated message in PO file. 662: "Added two subsections related to Apache secure configuration (t... WARNING: Un-translated message in PO file. 665: "Added a new FAQ related to raw sockets, one related to /root, a... WARNING: Un-translated message in PO file. 668: "Added a pointer to a bug in libpam-cracklib that might still be... WARNING: Un-translated message in PO file. 671: "Added more information regarding forensics analysis (pending mo... WARNING: Un-translated message in PO file. 674: "Changed the \"what should I do regarding compromise\" into a bu... WARNING: Un-translated message in PO file. 677: "Added some information on how to set up the Xscreensaver to loc... WARNING: Un-translated message in PO file. 680: "Added a note related to the utilities you should not install in... WARNING: Un-translated message in PO file. 683: "Added information on lvm and journalling file systems, ext3 rec... WARNING: Un-translated message in PO file. 686: "Added a link to the online text version (check)." WARNING: Un-translated message in PO file. 689: "Added some more stuff to the information on firewalling the loc... WARNING: Un-translated message in PO file. 692: "Added more information on PAM limits and pointers to Kurt Seifr... WARNING: Un-translated message in PO file. 695: "As suggested by Julián Muñoz, provided more information on the ... WARNING: Un-translated message in PO file. 698: "Included a note in the BIOS password section due to a comment f... WARNING: Un-translated message in PO file. 701: "Included patches provided by Alfred E. Heggestad fixing many of... WARNING: Un-translated message in PO file. 704: "Added a pointer to the changelog in the Credits section since m... WARNING: Un-translated message in PO file. 707: "Added a few more notes to the chattr section and a new section ... WARNING: Un-translated message in PO file. 710: "Added a new section after installation just to remind users to ... WARNING: Un-translated message in PO file. 713: "Added some more TODO items provided by Korn Andras." WARNING: Un-translated message in PO file. 716: "Added a pointer to the NIST's guidelines on how to secure DNS p... WARNING: Un-translated message in PO file. 719: "Added a small paragraph regarding Debian's SSL certificates inf... WARNING: Un-translated message in PO file. 722: "Added Daniel Quinlan's suggestions regarding sshMARK heartbeatAfter installation section... WARNING: Un-translated message in PO file. 881: "Wrote information on how to set up firewalls with the standard ... WARNING: Un-translated message in PO file. 884: "Small paragraph explaining why installing connected to the Inte... WARNING: Un-translated message in PO file. 887: "Small paragraph on timely patching referencing to IEEE paper." WARNING: Un-translated message in PO file. 890: "Appendix on how to set up a Debian snort box, based on what Vla... WARNING: Un-translated message in PO file. 893: "Information on how logcheck is set up in Debian and how it can ... WARNING: Un-translated message in PO file. 896: "Information on user accounting and profile analysis." WARNING: Un-translated message in PO file. 899: "Included apt.conf configuration for read-only /usr copied from ... WARNING: Un-translated message in PO file. 902: "New section on VPN with some pointers and the packages availabl... WARNING: Un-translated message in PO file. 905: "Small note regarding some programs to automatically build chroo... WARNING: Un-translated message in PO file. 908: "New FAQ item regarding identd based on a discussion in the debi... WARNING: Un-translated message in PO file. 911: "New FAQ item regarding inetd based o... WARNING: Un-translated message in PO file. 914: "Introduced note on rcconf in the \"disabling services\" section... WARNING: Un-translated message in PO file. 917: "Varied the approach regarding LKM, thanks to Philipe Gaspar." WARNING: Un-translated message in PO file. 920: "Added pointers to CERT documents and Counterpane resources." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 923: "Added a new FAQ item regarding time to fix security vulnerabili... WARNING: Un-translated message in PO file. 926: "Reorganized FAQ sections." WARNING: Un-translated message in PO file. 929: "Started writing a section regarding firewalling in Debian GNU/L... WARNING: Un-translated message in PO file. 932: "Fixed typos sent by Matt Kraai." WARNING: Un-translated message in PO file. 935: "Fixed DNS information." WARNING: Un-translated message in PO file. 938: "Added information on whisker and nbtscan to the auditing sectio... WARNING: Un-translated message in PO file. 941: "Fixed some wrong URLs." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 944: "Added a new section regarding auditing using Debian GNU/Linux." WARNING: Un-translated message in PO file. 947: "Added info regarding finger daemon taken from the security mail... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 950: "Fixed link for Linux Trustees." WARNING: Un-translated message in PO file. 953: "Fixed typos (patches from Oohara Yuuma and Pedro Zorzenon)." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 956: "Reorganized service installation and removal and added some new... WARNING: Un-translated message in PO file. 959: "Added some notes regarding using integrity checkers as intrusio... WARNING: Un-translated message in PO file. 962: "Added a chapter regarding package signatures." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 965: "Added notes regarding Squid security sent by Philipe Gaspar." WARNING: Un-translated message in PO file. 968: "Fixed rootkit links thanks to Philipe Gaspar." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 971: "Added some notes regarding Apache and Lpr/lpng." WARNING: Un-translated message in PO file. 974: "Added some information regarding noexec and read-only partition... WARNING: Un-translated message in PO file. 977: "Rewrote how users can help in Debian security issues (FAQ item)... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 980: "Fixed location of mail program." WARNING: Un-translated message in PO file. 983: "Added some new items to the FAQ." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 986: "Added a small section on how Debian handles security." WARNING: Un-translated message in PO file. 989: "Clarified MD5 passwords (thanks to `rocky')." WARNING: Un-translated message in PO file. 992: "Added some more information regarding harden-X from Stephen van... WARNING: Un-translated message in PO file. 983: "Added some new items to the FAQ." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 995: "Added some forensics information sent by Yotam Rubin." WARNING: Un-translated message in PO file. 998: "Added information on how to build a honeynet using Debian GNU/L... WARNING: Un-translated message in PO file. 1001: "Added some more TODOS." WARNING: Un-translated message in PO file. 1004: "Fixed more typos (thanks Yotam!)." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1007: "Added patch to fix misspellings and some new information (contr... WARNING: Un-translated message in PO file. 1010: "Added references to other online (and offline) documentation bo... WARNING: Un-translated message in PO file. 1013: "Added some information on configuring Bind options to restrict ... WARNING: Un-translated message in PO file. 1016: "Added information on how to automatically harden a Debian syste... WARNING: Un-translated message in PO file. 1019: "Removed some done TODOs and added some new ones." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1022: "Added the default user/group list provided by Joey Hess to the ... WARNING: Un-translated message in PO file. 1025: "Added information on LKM root-kits () c... WARNING: Un-translated message in PO file. 1028: "Added information on Proftp contributed by Emmanuel Lacour." WARNING: Un-translated message in PO file. 1031: "Recovered the checklist Appendix from Era Eriksson." WARNING: Un-translated message in PO file. 1034: "Added some new TODO items and removed other fixed ones." WARNING: Un-translated message in PO file. 1037: "Manually included Era's patches since they were not all include... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1040: "Era" WARNING: Un-translated message in PO file. 1043: "Eriksson" WARNING: Un-translated message in PO file. 1046: "Typo fixes and wording changes." WARNING: Un-translated message in PO file. 1049: "Minor changes to tags in order to keep on removing the tt tags ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1052: "Added pointer to document as published in the DDP (should super... WARNING: Un-translated message in PO file. 1055: "Started a mini-FAQ (should be expanded) with some questions rec... WARNING: Un-translated message in PO file. 1058: "Added general information to consider while securing." WARNING: Un-translated message in PO file. 1061: "Added a paragraph regarding local (incoming) mail delivery." WARNING: Un-translated message in PO file. 1064: "Added some pointers to more information." WARNING: Un-translated message in PO file. 1067: "Added information regarding the printing service." WARNING: Un-translated message in PO file. 1070: "Added a security hardening checklist." WARNING: Un-translated message in PO file. 1073: "Reorganized NIS and RPC information." WARNING: Un-translated message in PO file. 1076: "Added some notes taken while reading this document on my new Vi... WARNING: Un-translated message in PO file. 1079: "Fixed some badly formatted lines." WARNING: Un-translated message in PO file. 770: "Fixed some typos." WARNING: Un-translated message in PO file. 1082: "Added a Genius/Paranoia idea contributed by Gaby Schilders." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1085: "Josip" WARNING: Un-translated message in PO file. 1088: "Rodin" WARNING: Un-translated message in PO file. 1091: "Added paragraphs related to BIND and some FIXMEs." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1094: "Small setuid check paragraph" WARNING: Un-translated message in PO file. 1097: "Various minor cleanups." WARNING: Un-translated message in PO file. 1100: "Found out how to use sgml2txt -f for the txt... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1103: "Added a security update after installation paragraph." WARNING: Un-translated message in PO file. 1106: "Added a proftpd paragraph." WARNING: Un-translated message in PO file. 1109: "This time really wrote something about XDM, sorry for last time... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1112: "Lots of grammar corrections by James Treacy, new XDM paragraph.... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1115: "Typo fixes, miscellaneous additions." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1118: "Initial release."  PO file 'it-IT/Securing_Debian_Manual.po' not found! Using base XML!  Processing file tmp/it-IT/xml/Common_Content/Conventions.xml -> tmp/it-IT/xml/Common_Content/Conventions.xml Processing file tmp/it-IT/xml/Common_Content/Feedback.xml -> tmp/it-IT/xml/Common_Content/Feedback.xml Processing file tmp/it-IT/xml/Common_Content/Legal_Notice.xml -> tmp/it-IT/xml/Common_Content/Legal_Notice.xml Processing file tmp/it-IT/xml/Common_Content/Program_Listing.xml -> tmp/it-IT/xml/Common_Content/Program_Listing.xml Processing file tmp/it-IT/xml/Common_Content/Revision_History.xml -> tmp/it-IT/xml/Common_Content/Revision_History.xml Processing file tmp/it-IT/xml_tmp/01_intro.xml -> tmp/it-IT/xml/01_intro.xml Processing file tmp/it-IT/xml_tmp/02_before-begin.xml -> tmp/it-IT/xml/02_before-begin.xml Processing file tmp/it-IT/xml_tmp/03_before-install.xml -> tmp/it-IT/xml/03_before-install.xml Processing file tmp/it-IT/xml_tmp/04_after-install.xml -> tmp/it-IT/xml/04_after-install.xml Processing file tmp/it-IT/xml_tmp/05_services.xml -> tmp/it-IT/xml/05_services.xml Processing file tmp/it-IT/xml_tmp/06_automatic.xml -> tmp/it-IT/xml/06_automatic.xml Processing file tmp/it-IT/xml_tmp/07_infrastructure.xml -> tmp/it-IT/xml/07_infrastructure.xml Processing file tmp/it-IT/xml_tmp/08_sec-tools.xml -> tmp/it-IT/xml/08_sec-tools.xml Processing file tmp/it-IT/xml_tmp/09_developer.xml -> tmp/it-IT/xml/09_developer.xml Processing file tmp/it-IT/xml_tmp/10_before-compromise.xml -> tmp/it-IT/xml/10_before-compromise.xml Processing file tmp/it-IT/xml_tmp/11_after-compromise.xml -> tmp/it-IT/xml/11_after-compromise.xml Processing file tmp/it-IT/xml_tmp/12_faq.xml -> tmp/it-IT/xml/12_faq.xml Processing file tmp/it-IT/xml_tmp/99_appendix.xml -> tmp/it-IT/xml/99_appendix.xml Processing file tmp/it-IT/xml_tmp/Author_Group.xml -> tmp/it-IT/xml/Author_Group.xml Processing file tmp/it-IT/xml_tmp/Book_Info.xml -> tmp/it-IT/xml/Book_Info.xml Processing file tmp/it-IT/xml_tmp/Revision_History.xml -> tmp/it-IT/xml/Revision_History.xml Processing file tmp/it-IT/xml_tmp/Securing_Debian_Manual.xml -> tmp/it-IT/xml/Securing_Debian_Manual.xml Beginning work on it-IT DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/it-IT/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=pt-BR Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up pt-BR Merging pt-BR/01_intro.po >> en-US/01_intro.xml -> tmp/pt-BR/xml_tmp//01_intro.xml WARNING: Message missing from PO file, consider updating your POT and PO files. "This manual was started as a HOWTO by Alexander Reelsen. After it was published on the Internet, Javier Fernández-Sanguino Peña incorporated it into the Debian Documentation Project. A number of people have contributed to this manual (all contributions are listed in the changelog) but the following deserve special mention since they have provided significant contributions (full sections, chapters or appendices):" WARNING: Un-translated message in PO file. 65: "Where to get the manual (and available formats)" WARNING: Message missing from PO file, consider updating your POT and PO files. "You can download or view the latest version of the Securing Debian Manual from the Debian Documentation Project. If you are reading a copy from another site, please check the primary copy in case it provides new information. If you are reading a translation, please review the version the translation refers to to the latest version available. If you find that the version is behind please consider using the original copy or review the to see what has changed." WARNING: Message missing from PO file, consider updating your POT and PO files. "If you want a full copy of the manual you can either download the text version or the PDF version from the Debian Documentation Project's site. These versions might be more useful if you intend to copy the document over to a portable device for offline reading or you want to print it out. Be forewarned, the manual is over two hundred pages long and some of the code fragments, due to the formatting tools used, are not wrapped in the PDF version and might be printed incomplete." WARNING: Message missing from PO file, consider updating your POT and PO files. "The document is also provided in text, html and PDF formats in the harden-doc package. Notice, however, that the package maybe not be completely up to date with the document provided on the Debian site (but you can always use the source package to build an updated version yourself)." WARNING: Message missing from PO file, consider updating your POT and PO files. "This document is part of the documents distributed by the Debian Documentation Project. You can review the changes introduced in the document using a web browser and obtaining information from the version control logs online. You can also checkout the code using SVN with the following call in the command line:" WARNING: Un-translated message in PO file. 80: "$ svn co svn://svn.... WARNING: Un-translated message in PO file. 110: "This document has yet to be updated based on the latest Debian ... WARNING: Message missing from PO file, consider updating your POT and PO files. "Expand the incident response information, maybe add some ideas derived from Red Hat's Security Guide's chapter on incident response." WARNING: Message missing from PO file, consider updating your POT and PO files. "Write about remote monitoring tools (to check for system availability) such as monit, daemontools and mon. See Sysamin Guide." WARNING: Message missing from PO file, consider updating your POT and PO files. "Check if this site has relevant info not yet covered here." WARNING: Message missing from PO file, consider updating your POT and PO files. "Add information on how to set up a laptop with Debian, look here." WARNING: Un-translated message in PO file. 131: "Add information on setting up a proxy firewall with Debian GNU/... WARNING: Message missing from PO file, consider updating your POT and PO files. "NSA Enhanced Linux" WARNING: Message missing from PO file, consider updating your POT and PO files. "Talk about chrooting services, some more info on this Linux Focus article." WARNING: Un-translated message in PO file. 239: "setting up ftp over ssh." WARNING: Un-translated message in PO file. 272: "Describe situation wrt to FreeSwan (orphaned) and OpenSwan. VPN... WARNING: Un-translated message in PO file. 275: "Add a specific section about databases, current installation de... WARNING: Un-translated message in PO file. 278: "Add a section about the usefulness of virtual servers (Xen et a... WARNING: Un-translated message in PO file. 281: "Explain how to use some integrity checkers (AIDE, integrit or s... WARNING: Un-translated message in PO file. 290: "added more info to the original doc." WARNING: Un-translated message in PO file. 314: "Francois Bayart provided the appendix describing how to set up ... WARNING: Message missing from PO file, consider updating your POT and PO files. "Joey Hess wrote the section describing how Secure Apt works on the Debian Wiki." WARNING: Un-translated message in PO file. 320: "Martin F. Krafft wrote some information on his blog regarding f... WARNING: Un-translated message in PO file. 323: "Francesco Poli did an extensive review of the manual and provid...  Merging pt-BR/02_before-begin.po >> en-US/02_before-begin.xml -> tmp/pt-BR/xml_tmp//02_before-begin.xml WARNING: Un-translated message in PO file. 47: "The doc-linux-text (text version) or doc-linux-html (HTML version). After installation these documents will be available at the /usr/share/doc/HOWTO/en-txt and /usr/share/doc/HOWTO/en-html directories, respectively." WARNING: Un-translated message in PO file. 110: "> en-US/03_before-install.xml -> tmp/pt-BR/xml_tmp//03_before-install.xml WARNING: Un-translated message in PO file. 59: "During the system partitioning you also have to decide which fi... WARNING: Un-translated message in PO file. 74: "Notice, however, that there are some partitions that might not ... WARNING: Un-translated message in PO file. 107: "As you may already know, when you install a given service the d... WARNING: Un-translated message in PO file. 113: "If you want to keep some services but use them rarely, use the ... WARNING: Un-translated message in PO file. 116: "invoke-rc.d support is mandatory in Debian, ... WARNING: Un-translated message in PO file. 122: "Disabling a daemon service is quite simple. You either remove t... WARNING: Un-translated message in PO file. 125: "You can remove these links manually or using update-rc... WARNING: Un-translated message in PO file. 152: "You can use the TUI (Text User Interface) provided by /etc/init.d/service_name/etc/init.d/service_na... WARNING: Un-translated message in PO file. 182: "Remove the execute permission from the /etc/init.d//etc/init.d/service_name<... WARNING: Un-translated message in PO file. 188: "Nevertheless, the files under /etc/init.d ... WARNING: Un-translated message in PO file. 203: "You should stop all unneeded Inetd services on your system, lik... WARNING: Un-translated message in PO file. 238: "Please notice that a default installation of Debian s... WARNING: Un-translated message in PO file. 241: "\nPackage Size\n------------------------+---... WARNING: Un-translated message in PO file. 263: "This is something that is fixed in releases post-sarge, see /usr/bin/replay of package bs... WARNING: Un-translated message in PO file. 311: "/usr/bin/grog of package grof... WARNING: Un-translated message in PO file. 314: "/usr/sbin/adduser of package ... WARNING: Un-translated message in PO file. 320: "/usr/sbin/deluser of package ... WARNING: Un-translated message in PO file. 329: "/usr/sbin/exigrep of package ... WARNING: Un-translated message in PO file. 332: "/usr/sbin/eximconfig of package /usr/sbin/eximstats of package /usr/sbin/exiqsumm of package /usr/sbin/liloconfig of package > en-US/04_after-install.xml -> tmp/pt-BR/xml_tmp//04_after-install.xml WARNING: Fuzzy message in PO file. 17: "Once the system is installed you can still do more to secure th... WARNING: Fuzzy message in PO file. 21: "Before connecting to any network, especially if it's a public o... WARNING: Fuzzy message in PO file. 28: "In order to receive information on available security updates y... WARNING: Fuzzy message in PO file. 35: "You should consider, also, subscribing to the Note: If you are using the testi... WARNING: Un-translated message in PO file. 67: "Once you've done this you can use multiple tools to upgrade you... WARNING: Un-translated message in PO file. 70: "If you want to use aptitude's text i... WARNING: Un-translated message in PO file. 73: "\n# aptitude update\n# aptitude upgrade" WARNING: Un-translated message in PO file. 79: "If you want to use apt do just like ... WARNING: Fuzzy message in PO file. 82: "If you want to use dselect then firs... WARNING: Un-translated message in PO file. 86: "If you like, you can add the deb-src lines to /etc/ap... WARNING: Un-translated message in PO file. 89: "Security update of libraries" WARNING: Un-translated message in PO file. 92: "Once you have executed a security update you might need to rest... WARNING: Un-translated message in PO file. 95: "From Debian Jessie and up, you can install... WARNING: Un-translated message in PO file. 98: "Some packages (like libc6) will do t... WARNING: Un-translated message in PO file. 101: "Bringing the system to run level 1 (single user) and then back ... WARNING: Un-translated message in PO file. 104: "Excercise caution when dealing with security upgrades if you ar... WARNING: Un-translated message in PO file. 107: "Security update of the kernel" WARNING: Un-translated message in PO file. 110: "First, make sure your kernel is being managed through the packa... WARNING: Un-translated message in PO file. 113: "\n$ dpkg -S `readlink -f /vmlinuz`\nlinux-image-2.6.18-4-686: /... WARNING: Un-translated message in PO file. 119: "If your kernel is not being managed you will see a message sayi... WARNING: Un-translated message in PO file. 122: "The installation system of recent Debian releases will handle t... WARNING: Un-translated message in PO file. 125: "\n$ COLUMNS=150 dpkg -l 'linux-image*' | awk '$1 ~ /ii/ { print... WARNING: Un-translated message in PO file. 129: "To see if your kernel needs to be updated run:" WARNING: Un-translated message in PO file. 132: "\n$ kernfile=`readlink -f /vmlinuz`\n$ kernel=`dpkg -S $kernfil... WARNING: Un-translated message in PO file. 145: "If you are doing a security update which includes the kernel im... WARNING: Message missing from PO file, consider updating your POT and PO files. "If you need to do a system reboot (because of a kernel upgrade) you should make sure that the kernel will boot up correctly and network connectivity will be restored, specially if the security upgrade is done over a remote connection like ssh. For the former you can configure your boot loader to reboot to the original kernel in the event of a failure (for more detailed information read Remotely rebooting Debian GNU/Linux machines). For the latter you have to introduce a network connectivity test script that will check if the kernel has started up the network subsystem properly and reboot the system if it did notA sample script called testnet is available in the Remotely rebooting Debian GNU/Linux machines article. A more elaborate network connectivity testing script is available in this Testing network connectivity article.. This should prevent nasty surprises like updating the kernel and then realizing, after a reboot, that it did not detect or configure the network hardware properly and you need to travel a long distance to bring the system up again. Of course, having the system serial console Setting up a serial console is beyond the scope of this document, for more information read the Serial HOWTO and the Remote Serial Console HOWTO. in the system connected to a console or terminal server should also help debug reboot issues remotely." WARNING: Fuzzy message in PO file. 154: "Remember ? Well, then you shoul... WARNING: Un-translated message in PO file. 164: "Anybody can easily get a root-shell and change your passwords b... WARNING: Un-translated message in PO file. 167: "<name-of-your-bootimage> init=/bin/sh/etc/lilo.c... WARNING: Fuzzy message in PO file. 181: "\n image=/boot/2.2.14-vmlinuz\n label=Linux\n read-onl... WARNING: Fuzzy message in PO file. 196: "Then, make sure that the configuration file is not world readab... WARNING: Fuzzy message in PO file. 200: "If you use GRUB instead of LILO, edit /boot/grub/menu... WARNING: Fuzzy message in PO file. 204: "\n timeout 3\n password hackme" WARNING: Fuzzy message in PO file. 212: "To further harden the integrity of the password, you may store ... WARNING: Fuzzy message in PO file. 216: "\n timeout 3\n password --md5 $1$bw0ez$tljnxxKLfMzmnDVaQWgjP0... WARNING: Fuzzy message in PO file. 224: "The --md5 parameter was added to instruct grubinitramfs-tools generated initramfs. The following message will appear:" WARNING: Un-translated message in PO file. 238: "\n \"ALERT! /dev/sda1 does not exist. Dropping to a shell!" WARNING: Un-translated message in PO file. 242: "In order to remove this behavior you need to set the following ... WARNING: Un-translated message in PO file. 248: "Note: This does not apply to the kernels provided for Debian 3.... WARNING: Fuzzy message in PO file. 251: "Linux 2.4 kernels provide a way to access a root shell while bo... WARNING: Un-translated message in PO file. 255: "\n Press ENTER to obtain a shell (waits 5 seconds)" WARNING: Fuzzy message in PO file. 259: "In order to remove this behavior you need to change /... WARNING: Fuzzy message in PO file. 263: "\n # DELAY The number of seconds the linuxrc script should ... WARNING: Fuzzy message in PO file. 277: "\n # cd /boot\n # mkinitrd -o initrd.img-2.4.18-k7 /lib/modul... WARNING: Fuzzy message in PO file. 288: "\n # dpkg-reconfigure -plow kernel-image-2.4.x-yz" WARNING: Fuzzy message in PO file. 296: "Some security policies might force administrators to log in to ... WARNING: Un-translated message in PO file. 300: "/etc/pam.d/login In older Debian releases ... WARNING: Message missing from PO file, consider updating your POT and PO files. "securetty The /etc/securetty is a configuration file that belongs to the login package. by adding/removing the terminals to which root access will be allowed. If you wish to allow only local console access then you need console, ttyX Or ttyvX in GNU/FreeBSD, and ttyE0 in GNU/KNetBSD. and vc/X (if using devfs devices), you might want to add also ttySX Or comX in GNU/Hurd, cuaaX in GNU/FreeBSD, and ttyXX in GNU/KNetBSD. if you are using a serial console for local access (where X is an integer, you might want to have multiple instances. The default configuration for Wheezy The default configuration in woody includes 12 local tty and vc consoles, as well as the console device but does not allow remote logins. In sarge the default configuration provides 64 consoles for tty and vc consoles. includes many tty devices, serial ports, vc consoles as well as the X server and the console device. You can safely adjust this if you are not using that many consoles. You can confirm the virtual consoles and the tty devices you have by reviewing /etc/inittab Look for the getty calls. . For more information on terminal devices read the Text-Terminal-HOWTO " WARNING: Fuzzy message in PO file. 306: "When using PAM, other changes to the login process, which might... WARNING: Fuzzy message in PO file. 310: "\n auth required pam_unix.so nullok" WARNING: Un-translated message in PO file. 318: "If your system has a keyboard attached to it anyone (yes allowed users ca... WARNING: Un-translated message in PO file. 330: "disable this feature completely." WARNING: Un-translated message in PO file. 333: "If you want to restrict this, you must check the /etc... WARNING: Un-translated message in PO file. 336: "The default in Debian includes this switch:" WARNING: Fuzzy message in PO file. 339: "\n ca:12345:ctrlaltdel:/sbin/shutdown -t1 -a -r now" WARNING: Un-translated message in PO file. 344: "The -a switch, as the init q after making any ... WARNING: Un-translated message in PO file. 353: "Restricting the use of the Magic SysRq key" WARNING: Un-translated message in PO file. 356: "The Magic SysRq key is a key combination t... WARNING: Un-translated message in PO file. 359: "Since the Etch release, the Magic SysRq key feature is enabled ... WARNING: Un-translated message in PO file. 362: "\n$ cat /proc/sys/kernel/sysrq \n438" WARNING: Un-translated message in PO file. 368: "The default value shown above allows all of the SysRq functions... WARNING: Un-translated message in PO file. 371: "You should disable this functionality ifaccess to the console i... WARNING: Un-translated message in PO file. 374: "\n# Disables the magic SysRq key\nkernel.sysrq = 0" WARNING: Message missing from PO file, consider updating your POT and PO files. "For more information, read security chapter in the Remote Serial Console HOWTO, Kernel SysRQ documentation. and the Magic_SysRq_key wikipedia entry." WARNING: Un-translated message in PO file. 386: "When mounting an Ext file system (e... WARNING: Fuzzy message in PO file. 389: "\n /dev/hda7 /tmp ext2 defaults,nosuid,noexec,nodev ... WARNING: Fuzzy message in PO file. 394: "You see the difference in the options sections. The option ext2 or ext3noexec option prevents binaries from bei... WARNING: Fuzzy message in PO file. 407: "\n alex@joker:/tmp# mount | grep tmp\n /dev/hda7 on /tmp type... WARNING: Un-translated message in PO file. 424: "Newer versions of the kernel do however handle the noe... WARNING: Un-translated message in PO file. 427: "\n angrist:/tmp# mount | grep /tmp\n /dev/hda3 on /tmp type e... WARNING: Fuzzy message in PO file. 438: "However, many script kiddies have exploits which try to create ... WARNING: Fuzzy message in PO file. 442: "Also be forewarned, some script might depend on /tmp<... WARNING: Fuzzy message in PO file. 446: "The following is a more thorough example. A note, though: /tmp noexec" WARNING: Fuzzy message in PO file. 481: "Be careful if setting /tmp noexec when you... WARNING: Fuzzy message in PO file. 488: "If you set /usr read-only you will not be ... WARNING: Fuzzy message in PO file. 492: "To do this modify /etc/apt/apt.conf and ad... WARNING: Fuzzy message in PO file. 496: "\n DPkg\n {\n Pre-Invoke { \"mount /usr -o remount,rw\"... WARNING: Un-translated message in PO file. 511: "Note that the Post-Invoke may fail with a \"/usr busy\" error m... WARNING: Un-translated message in PO file. 514: "\n# lsof +L1" WARNING: Message missing from PO file, consider updating your POT and PO files. "Stop or restart these programs and run the Post-Invoke manually. Beware! This means you'll likely need to restart your X session (if you're running one) every time you do a major upgrade of your system. You might want to reconsider whether a read-only /usr is suitable for your system. See also this discussion on debian-devel about read-only." WARNING: Fuzzy message in PO file. 527: "PAM (Pluggable Authentication Modules) allows system administra... WARNING: Fuzzy message in PO file. 531: "Each application with PAM support provides a configuration file... WARNING: Message missing from PO file, consider updating your POT and PO files. "The following description is far from complete, for more information you might want to read the Linux-PAM Guides as a reference. This documentation is available in the system if you install the libpam-doc at /usr/share/doc/libpam-doc/html/." WARNING: Fuzzy message in PO file. 547: "PAM offers you the possibility to go through several authentica... WARNING: Un-translated message in PO file. 551: "Password security in PAM" WARNING: Un-translated message in PO file. 554: "Review the /etc/pam.d/common-password, inc... WARNING: Un-translated message in PO file. 557: "You have to make sure that the pam_unix.so module uses the \"sh... WARNING: Un-translated message in PO file. 560: "The line with the definition of the pam_unix module will look s... WARNING: Un-translated message in PO file. 563: "\n password [success=1 default=ignore] pam_unix.so null... WARNING: Un-translated message in PO file. 569: "This definition:" WARNING: Un-translated message in PO file. 572: "Enforces password encryption when storing passwords, using the ... WARNING: Un-translated message in PO file. 575: "Enables password complexity checks (option obscureminpam_cracklib8 manpage and the article Linux Password Security with pam_cracklib by Hal Pomeranz." WARNING: Un-translated message in PO file. 608: "By enabling the cracklib PAM module you setup a policy that for... WARNING: Un-translated message in PO file. 611: "Alternatively, you can setup and configure PAM modules to use d... WARNING: Un-translated message in PO file. 614: "Please note that these restrictions apply to all users but /etc/pam.d/lo... WARNING: Fuzzy message in PO file. 640: "\n session required pam_limits.so" WARNING: Fuzzy message in PO file. 645: "This restricts the system resources that users are allowed (see... WARNING: Un-translated message in PO file. 649: "Control of su in PAM" WARNING: Fuzzy message in PO file. 652: "If you want to protect su, so that only some... WARNING: Fuzzy message in PO file. 656: "\n auth requisite pam_wheel.so group=wheel debug" WARNING: Fuzzy message in PO file. 661: "This makes sure that only people from the group \"wheel\" can u... WARNING: Fuzzy message in PO file. 665: "If you want only certain users to authenticate at a PAM service... WARNING: Fuzzy message in PO file. 669: "\n auth required pam_listfile.so item=user sense=all... WARNING: Un-translated message in PO file. 674: "Temporary directories in PAM" WARNING: Message missing from PO file, consider updating your POT and PO files. "Since there have been a number of so called insecure tempfile vulnerabilities, thttpd is one example (see DSA-883-1), the libpam-tmpdir is a good package to install. All you have to do is add the following to /etc/pam.d/common-session:" WARNING: Un-translated message in PO file. 680: "\n session optional pam_tmpdir.so" WARNING: Un-translated message in PO file. 684: "There has also been a discussion about adding this by default i... WARNING: Un-translated message in PO file. 687: "Configuration for undefined PAM applications" WARNING: Fuzzy message in PO file. 690: "Finally, but not least, create /etc/pam.d/otherlimits.conf f... WARNING: Un-translated message in PO file. 732: "You should really take a serious look into this file. Here you ... WARNING: Un-translated message in PO file. 735: "If you do not restrict resource usage, any... WARNING: Un-translated message in PO file. 738: "There is a way to add resource limits to some shells (for examp... WARNING: Un-translated message in PO file. 741: "Resource limits are imposed by the kernel, but they need to be ... WARNING: Un-translated message in PO file. 744: "\n$ find /etc/pam.d/ \\! -name \"*.dpkg*\" | xargs -- grep limi... WARNING: Un-translated message in PO file. 748: "Commonly, login, ssh ... WARNING: Un-translated message in PO file. 751: "The specific limits settings you might want to enforce depend o... WARNING: Un-translated message in PO file. 754: "For example, the configuration example below enforces a 100 pro... WARNING: Un-translated message in PO file. 757: "\n* soft core 0\n* hard... WARNING: Un-translated message in PO file. 775: "These would be the limits a default user (including system daem... WARNING: Un-translated message in PO file. 778: "\n$ ulimit -a\ncore file size (blocks, -c) 0\ndata seg s... WARNING: Un-translated message in PO file. 794: "And these are the limits for an administrative user:" WARNING: Un-translated message in PO file. 797: "\n$ ulimit -a\ncore file size (blocks, -c) 0\ndata seg s... WARNING: Message missing from PO file, consider updating your POT and PO files. " PAM reference guide for available modules" WARNING: Message missing from PO file, consider updating your POT and PO files. "PAM configuration article." WARNING: Message missing from PO file, consider updating your POT and PO files. " Seifried's Securing Linux Step by Step on the Limiting users overview section." WARNING: Message missing from PO file, consider updating your POT and PO files. "LASG in the Limiting and monitoring users section." WARNING: Fuzzy message in PO file. 832: "The next step is to edit the basic configuration and action upo... WARNING: Fuzzy message in PO file. 836: "\n FAILLOG_ENAB yes" WARNING: Fuzzy message in PO file. 844: "\n LOG_UNKFAIL_ENAB no" WARNING: Un-translated message in PO file. 849: "If you set this variable to 'yes' it will record unknown userna... WARNING: Fuzzy message in PO file. 852: "\n SYSLOG_SU_ENAB yes" WARNING: Fuzzy message in PO file. 857: "This one enables logging of su attempts to <... WARNING: Fuzzy message in PO file. 861: "\n SYSLOG_SG_ENAB yes" WARNING: Fuzzy message in PO file. 866: "The same as SYSLOG_SU_ENAB but applies to th... WARNING: Un-translated message in PO file. 870: "\n ENCRYPT_METHOD SHA512" WARNING: Un-translated message in PO file. 874: "As stated above, encrypted passwords greatly reduce the problem... WARNING: Fuzzy message in PO file. 877: "User login actions: edit /etc/pam.d/login" WARNING: Un-translated message in PO file. 881: "You can adjust the login configuration file to implement an str... WARNING: Un-translated message in PO file. 884: "\nauth optional pam_faildelay.so delay=3000000" WARNING: Un-translated message in PO file. 888: "Increasing the delay value to a higher val... WARNING: Un-translated message in PO file. 891: "In this file you can also set the system to present a message t... WARNING: Un-translated message in PO file. 894: "\n# auth required pam_issue.so issue=/etc/issue" WARNING: Un-translated message in PO file. 898: "If required by your security policy, this file can be used to s... WARNING: Un-translated message in PO file. 901: "setting rules for which users can access at which times, by ena... WARNING: Un-translated message in PO file. 904: "setup login sessions to use user limits as defined in /etc/motd and /... WARNING: Fuzzy message in PO file. 913: "Restricting ftp: editing /etc/ftpusers" WARNING: Fuzzy message in PO file. 917: "The /etc/ftpusers file contains a list of ... WARNING: Fuzzy message in PO file. 921: "FIXME (BUG): Is it a bug that the default ftpusers/e... WARNING: Un-translated message in PO file. 928: "\n$ awk -F : '{if ($3<1000) print $1}' /etc/passwd > /etc... WARNING: Fuzzy message in PO file. 935: "If you really need users to become the super user on your syste... WARNING: Fuzzy message in PO file. 942: "sudo allows the user to execute defined comm... WARNING: Fuzzy message in PO file. 949: "You should also modify /etc/security/access.conf/etc/security/a... WARNING: Fuzzy message in PO file. 957: "\n -:wheel:ALL EXCEPT LOCAL" WARNING: Fuzzy message in PO file. 962: "Remember to enable the pam_access mo... WARNING: Fuzzy message in PO file. 972: "If users need to be created and the system can be accessed remo... WARNING: Fuzzy message in PO file. 976: "Debian currently provides in the unstable release (and might be... WARNING: Fuzzy message in PO file. 980: "If you wish to restrict when users can acc... WARNING: Fuzzy message in PO file. 984: "Information on how to chroot users accessing... WARNING: Fuzzy message in PO file. 997: "You can use the script command to audit both... WARNING: Fuzzy message in PO file. 1001: "\numask 077\nexec script -q -a \"/var/log/sessions/$USER\"" WARNING: Fuzzy message in PO file. 1009: "Of course, if you do this system wide it means that the shell w... WARNING: Fuzzy message in PO file. 1013: "You also need to setup the files in the audit directory (in the... WARNING: Fuzzy message in PO file. 1020: "\numask 077\nexec script -q -a \"/var/log/sessions/$USER-`date ... WARNING: Fuzzy message in PO file. 1031: "If you want to review what does the user type in the shell (but... WARNING: Fuzzy message in PO file. 1035: "For example, for bash, the /etc/profile co... WARNING: Fuzzy message in PO file. 1039: "\n HISTFILE=~/.bash_history\n HISTSIZE=10000\n HISTFILESIZE=... WARNING: Fuzzy message in PO file. 1070: "For this to work, the user can only append information to see what users are actually... WARNING: Un-translated message in PO file. 1109: "Depending on your user policy you might want to change how info... WARNING: Un-translated message in PO file. 1112: "Debian's default umask setting is ... WARNING: Un-translated message in PO file. 1115: "If Debian's default value is too permissive for your system you... WARNING: Un-translated message in PO file. 1118: "This change is set by defining a proper umasklogin the U... WARNING: Un-translated message in PO file. 1124: "Don't forget to review and maybe modify the dotfiles under umasklibpam-umask package adjusts the... WARNING: Un-translated message in PO file. 1134: "\nsession optional pam_umask.so umask=077" WARNING: Un-translated message in PO file. 1138: "Finally, you should consider changing root's default 022 umask ... WARNING: Un-translated message in PO file. 1144: "FIXME: Content needed. Describe the consequences of changing pa... WARNING: Fuzzy message in PO file. 1147: "If you need to grant users access to the system with a shell th... WARNING: Fuzzy message in PO file. 1151: "some configuration files in /etc. However,... WARNING: Un-translated message in PO file. 1155: "find /etc -type f -a -perm 600 -a -uid 0... WARNING: Un-translated message in PO file. 1158: "as superuser." WARNING: Fuzzy message in PO file. 1161: "your installed packages, either by looking at the package datab... WARNING: Un-translated message in PO file. 1165: "some log files at /var/log. Note also that... WARNING: Un-translated message in PO file. 1168: "find /var/log -type f -a -perm 640" WARNING: Un-translated message in PO file. 1171: ") and some are even only available to the root user (try" WARNING: Un-translated message in PO file. 1174: "find /var/log -type f -a -perm\n 600 -a -uid 0see$HOME directories are create... WARNING: Fuzzy message in PO file. 1209: "You can change this behavior so that user creation provides dif... WARNING: Fuzzy message in PO file. 1213: "Users can still share information, but not directly in their Passwd does not allow non-interactive assign... WARNING: Fuzzy message in PO file. 1235: "User passwords can sometimes become the weakest link<... WARNING: Fuzzy message in PO file. 1239: "A system administrator must, given a big number of users, check... WARNING: Fuzzy message in PO file. 1243: "An administrator can use john or bash is the user shell, a system ... WARNING: Fuzzy message in PO file. 1271: "Install timeoutd and configure autolog and configure it to ... WARNING: Fuzzy message in PO file. 1279: "The timeoutd or autolog d... WARNING: Fuzzy message in PO file. 1286: "TCP wrappers were developed when there were no real packet filt... WARNING: Fuzzy message in PO file. 1293: "launched through the tcpwrapper service (tcpd/etc/inet... WARNING: Un-translated message in PO file. 1303: "To see which packages use tcpwrappers On older... WARNING: Un-translated message in PO file. 1306: "\n $ apt-cache rdepends libwrap0" WARNING: Fuzzy message in PO file. 1310: "Take this into account when running tcpdchk ... WARNING: Fuzzy message in PO file. 1314: "Now, here comes a small trick, and probably the smallest intrus... WARNING: Fuzzy message in PO file. 1318: "\n ALL: ALL: SPAWN ( \\\n echo -e \"\\n\\\n TCP Wrappers... WARNING: Fuzzy message in PO file. 1341: "Beware: The above printed example is open ... WARNING: Fuzzy message in PO file. 1351: "Debian GNU/Linux provides some tools to perform log analysis, m... WARNING: Fuzzy message in PO file. 1355: "\n daemon,mail.*;\\\n news.=crit;news.=err;news.=notice... WARNING: Un-translated message in PO file. 1368: "To colorize the logs, you could take a look at col... WARNING: Fuzzy message in PO file. 1371: "Using and customizing logcheck" WARNING: Fuzzy message in PO file. 1375: "The logcheck package in Debian is divided in... WARNING: Fuzzy message in PO file. 1379: "This tool can be quite useful if properly customized to alert t... WARNING: Fuzzy message in PO file. 1383: "The best way to configure logcheck is to edi... WARNING: Fuzzy message in PO file. 1387: "Once this is done you might want to check the mails that are se... WARNING: Fuzzy message in PO file. 1394: "Debian comes with a standard syslog ... WARNING: Fuzzy message in PO file. 1401: "Root's mail should be considered also, many security controls (... WARNING: Fuzzy message in PO file. 1408: "FIXME: It would be interesting to tell how a Debian system can ... WARNING: Un-translated message in PO file. 1415: "A loghost is a host which collects syslog data remotely over th... WARNING: Un-translated message in PO file. 1418: "syslogd -r" WARNING: Un-translated message in PO file. 1421: "and a new loghost is born. In order to do this permanently in D... WARNING: Fuzzy message in PO file. 1424: "\nSYSLOGD=\"\"" WARNING: Fuzzy message in PO file. 1432: "\nSYSLOGD=\"-r\"" WARNING: Fuzzy message in PO file. 1437: "Next, configure the other machines to send data to the loghost.... WARNING: Fuzzy message in PO file. 1441: "\n facility.level @your_loghost" WARNING: Fuzzy message in PO file. 1446: "See the documentation for what to use in place of fac... WARNING: Fuzzy message in PO file. 1450: "\n *.* @your_loghost" WARNING: Un-translated message in PO file. 1455: "into your syslog.conf. Logging remotely as... WARNING: Fuzzy message in PO file. 1461: "It is not only important to decide how alerts are used, but als... WARNING: Fuzzy message in PO file. 1465: "Some log file permissions are not perfect after the installatio... WARNING: Fuzzy message in PO file. 1469: "\n # find /var/log -type f -exec ls -l {} \\; | cut -c 17-35 ... WARNING: Message missing from PO file, consider updating your POT and PO files. "Linux Intrusion Detection provided in the kernel-patch-2.4-lids package. This kernel patch makes the process of hardening your Linux system easier by allowing you to restrict, hide and protect processes, even from root. It implements mandatory access control capabilities." WARNING: Message missing from PO file, consider updating your POT and PO files. "Linux Trustees, provided in package trustees. This patch adds a decent advanced permissions management system to your Linux kernel. Special objects (called trustees) are bound to every file or directory, and are stored in kernel memory, which allows fast lookup of all permissions." WARNING: Message missing from PO file, consider updating your POT and PO files. "NSA Enhanced Linux (in package selinux). Backports of the SElinux-enabled packages are available at . More information available at SElinux in Debian Wiki page, at Manoj Srivastava's and Russell Cookers's SElinux websites." WARNING: Un-translated message in PO file. 1508: "The kernel patch Grsecurity patch, provided by the kernel-patch-2.4-grsecurity and kernel-patch-grsecurity2 packages Notice that this patch conflicts with patches already included in Debian's 2.4 kernel source package. You will need to use the stock vanilla kernel. You can do this with the following steps: # apt-get install kernel-source-2.4.22 kernel-patch-debian-2.4.22 # tar xjf /usr/src/kernel-source-2.4.22.tar.bz2 # cd kernel-source-2.4.22 # /usr/src/kernel-patches/all/2.4.22/unpatch/debian For more information see , , , , , , , and the implements Mandatory Access Control through RBAC, provides buffer overflow protection through PaX, ACLs, network randomness (to make OS fingerprinting more difficult) and many more features." WARNING: Message missing from PO file, consider updating your POT and PO files. "The kernel-patch-adamantix provides the patches developed for Adamantix, a Debian-based distribution. This kernel patch for the 2.4.x kernel releases introduces some security features such as a non-executable stack through the use of and mandatory access control based on . Other features include: , AES encrypted loop device, MPPE support and an IPSEC v2.6 backport." WARNING: Fuzzy message in PO file. 1517: "cryptoloop-source. This patches allo... WARNING: Fuzzy message in PO file. 1521: "IPSEC kernel support (in package linux-patch-opens... WARNING: Un-translated message in PO file. 1525: "The following security kernel patches are only available for ol... WARNING: Un-translated message in PO file. 1528: "kernel-patch-int. This patch also ad... WARNING: Fuzzy message in PO file. 1538: "However, some patches have not been provided in Debian yet. If ... WARNING: Fuzzy message in PO file. 1545: "Buffer overflow is the name of a common at... WARNING: Un-translated message in PO file. 1552: "patch the kernel to prevent stack execution. You can use either... WARNING: Un-translated message in PO file. 1558: "recompile the source code to introduce proper checks that preve... WARNING: Fuzzy message in PO file. 1561: "Debian GNU/Linux, as of the 3.0 release, provides software to i... WARNING: Fuzzy message in PO file. 1565: "Notice that even if Debian provided a compiler which featured s... WARNING: Fuzzy message in PO file. 1569: "In any case, be aware that even these workarounds might not pre... WARNING: Un-translated message in PO file. 1573: "If you want to test out your buffer overflow protection once yo... WARNING: Un-translated message in PO file. 1579: "Kernel patches related to buffer overflows include the Openwall... WARNING: Fuzzy message in PO file. 1585: "The use of tools to detect buffer overflows requires, in any ca... WARNING: Fuzzy message in PO file. 1592: "During normal system administration one usually needs to transf... WARNING: Fuzzy message in PO file. 1596: "Any of these methods need special clients. Debian does provide ... WARNING: Fuzzy message in PO file. 1600: "Note that using scp provides access to the u... WARNING: Fuzzy message in PO file. 1604: "File system limits and control" WARNING: Fuzzy message in PO file. 1626: "Use quotas on all user-writable areas, on /hometouch\n/home/quota.user /home/quota.group/home file system)." WARNING: Un-translated message in PO file. 1648: "Restart quota by doing" WARNING: Un-translated message in PO file. 1651: "/etc/init.d/quota stop;/etc/init.d/quota\n st... WARNING: Un-translated message in PO file. 1655: ". Now quota should be running, and quota sizes can be set." WARNING: Un-translated message in PO file. 1658: "Editing quotas for a specific user can be done by" WARNING: Un-translated message in PO file. 1661: "edquota -u <user>" WARNING: Un-translated message in PO file. 1664: ". Group quotas can be modified with" WARNING: Un-translated message in PO file. 1667: "edquota -g <group>" WARNING: Un-translated message in PO file. 1670: ". Then set the soft and hard quota and/or inode quotas as neede... WARNING: Un-translated message in PO file. 1673: "For more information about quotas, read the quota man page, and... WARNING: Un-translated message in PO file. 1676: "The ext2 filesystem specific attributes (chattrlcap CAP_LINUX_IMMUTABLE/bin/login on your hard drive... WARNING: Fuzzy message in PO file. 1729: "The only method to have some kind of protection is to check you... WARNING: Un-translated message in PO file. 1733: "Common tools used for this are sxid,... WARNING: Fuzzy message in PO file. 1736: "You might want to use locate to index the wh... WARNING: Un-translated message in PO file. 1740: "You might want to use bsign or checksecurity package pro... WARNING: Fuzzy message in PO file. 1749: "The default behavior does not send this information to the supe... WARNING: Fuzzy message in PO file. 1756: "FIXME: More (Debian-specific) content needed." WARNING: Un-translated message in PO file. 1763: "Many features of the kernel can be modified while running by ec... WARNING: Un-translated message in PO file. 1766: "/sbin/sysctl -w variable=value" WARNING: Un-translated message in PO file. 1769: "(see sysctlWindows emulator because it acts... WARNING: Fuzzy message in PO file. 1784: "\nnet/ipv4/icmp_echo_ignore_all = 1" WARNING: Fuzzy message in PO file. 1792: "\n/proc/sys/net/ipv4/conf/all/log_martians = 1" WARNING: Fuzzy message in PO file. 1797: "For more information on what things can be done with ... WARNING: Fuzzy message in PO file. 1801: "Configuring syncookies" WARNING: Fuzzy message in PO file. 1808: "\nnet/ipv4/tcp_syncookies = 1" WARNING: Fuzzy message in PO file. 1813: "If you want to change this option each time the kernel is worki... WARNING: Fuzzy message in PO file. 1817: "\necho 1 > /proc/sys/net/ipv4/tcp_syncookies " WARNING: Fuzzy message in PO file. 1822: "This option will only be available if the kernel is compiled wi... WARNING: Fuzzy message in PO file. 1826: "\n$ sysctl -A |grep syncookies\nnet/ipv4/tcp_syncookies = 1" WARNING: Fuzzy message in PO file. 1834: "For more information on TCP syncookies read /etc/sysctl.conf configura... WARNING: Un-translated message in PO file. 1850: "\n#\n# /etc/sysctl.conf - Configuration file for setting system... WARNING: Fuzzy message in PO file. 1906: "To use the script you need to first create the script, for exam... WARNING: Fuzzy message in PO file. 1910: "\nauto eth0\niface eth0 inet static\n address xxx.xxx.xx... WARNING: Un-translated message in PO file. 1929: "In this example, before the interface eth0 is enabled the scrip... WARNING: Fuzzy message in PO file. 1932: "\n#!/bin/sh -e\n# Script-name: /etc/network/interface-secure\n#... WARNING: Un-translated message in PO file. 2000: "Notice that you can actually have per-interface scripts that wi... WARNING: Un-translated message in PO file. 2003: "\npre-up /etc/network/interface-secure $IFACE" WARNING: Un-translated message in PO file. 2007: "And use a script which will only apply changes to a specific in... WARNING: Un-translated message in PO file. 2010: "\n#!/bin/sh -e\n# Script-name: /etc/network/interface-secure\n#... WARNING: Un-translated message in PO file. 2051: "An alternative solution is to create an init.dweak end host in RFC1122, (in the section 3.3.4.2). Remember, IP addresses have nothing to do with physical interfaces." WARNING: Fuzzy message in PO file. 2086: "\n# echo 1 > /proc/sys/net/ipv4/conf/all/hidden\n# echo 1 &g... WARNING: Fuzzy message in PO file. 2105: "properly configured routing. The fact that thi... WARNING: Fuzzy message in PO file. 2109: "kernel patching. There are some patches availa... WARNING: Fuzzy message in PO file. 2113: "Along this text there will be many occasions in which it is sho... WARNING: Fuzzy message in PO file. 2117: "FIXME: Comments on Bugtraq indicate there is a Linux specific m... WARNING: Fuzzy message in PO file. 2130: "As you know the ARP protocol is used to link IP addresses to MA... WARNING: Fuzzy message in PO file. 2134: "Those attacks (ARP cache poisoning, ARP spoofing...) allow the ... WARNING: Fuzzy message in PO file. 2141: "Use a static ARP cache. You can set up \"static\" entries in yo... WARNING: Fuzzy message in PO file. 2154: "By setting static entries for each important host in your netwo... WARNING: Un-translated message in PO file. 2158: "Detect suspicious ARP traffic. You can use arpwatc... WARNING: Fuzzy message in PO file. 2167: "Before putting the system into production system you could take... WARNING: Fuzzy message in PO file. 2171: "For this you can use a writable removable-media that can be set... WARNING: Un-translated message in PO file. 2178: "\n#!/bin/bash\n/bin/mount /dev/fd0 /mnt/floppy\ntrap \"/bin/umo... WARNING: Un-translated message in PO file. 2211: "Note that the md5sum binary (and sha1sum, if available) is plac... WARNING: Fuzzy message in PO file. 2214: "The snapshot does not include the files under /var/li... WARNING: Un-translated message in PO file. 2218: "the md5sums files include the md5sum of all files provided by t... WARNING: Un-translated message in PO file. 2221: "not all Debian packages provide md5sums for the files installed... WARNING: Un-translated message in PO file. 2224: "\n# debsums --generate=missing,keep" WARNING: Fuzzy message in PO file. 2228: "Once the snapshot is done you should make sure to set the mediu... WARNING: Un-translated message in PO file. 2232: "If you do not want to setup a manual check you can always use a... WARNING: Fuzzy message in PO file. 2241: "SVGAlib is very nice for console lovers like me, but in the pas...  Merging pt-BR/05_services.po >> en-US/05_services.xml -> tmp/pt-BR/xml_tmp//05_services.xml WARNING: Un-translated message in PO file. 29: "Regarding the services running from inetd (<... WARNING: Un-translated message in PO file. 79: "Port 666 or ListenAddress 192.168.0... WARNING: Un-translated message in PO file. 82: "PermitEmptyPasswords no Empty passwords make... WARNING: Un-translated message in PO file. 94: "Disable any form of authentication you do not really need, if y... WARNING: Un-translated message in PO file. 135: "If you do not want users to transfer files... WARNING: Un-translated message in PO file. 138: "You can also chroot users (using libpam-chrootscponlysarg - Squid Analysis Report Generat... WARNING: Un-translated message in PO file. 321: "If you are using XDM set /etc/X11/xdm/Xserversexim, y... WARNING: Un-translated message in PO file. 748: "Notice, in any case, that this only applies to BIND version 8. ... WARNING: Un-translated message in PO file. 789: "Or you can change (create it if it does not exit) the default c... WARNING: Un-translated message in PO file. 829: "Also, in order to avoid running anything as root, change the ... WARNING: Un-translated message in PO file. 1035: "However, if the module was linked statically (you can list the ... WARNING: Un-translated message in PO file. 1133: "You can read more about NIS security in the firestarter, a GNOME application ori... WARNING: Un-translated message in PO file. 1262: "guarddog, a KDE based firewall confi... WARNING: Un-translated message in PO file. 1265: "knetfilter, a KDE GUI to manage fire... WARNING: Un-translated message in PO file. 1268: "fireflier, an interactive tool to create iptables rules based o... WARNING: Un-translated message in PO file. 1271: "For servers (headless) systems:" WARNING: Un-translated message in PO file. 1274: "fwbuilder, an object oriented GUI wh... WARNING: Un-translated message in PO file. 1277: "shorewall, a firewall configuration ... WARNING: Un-translated message in PO file. 1280: "bastille, this hardening application... WARNING: Un-translated message in PO file. 1283: "Lots of other iptables frontends come with Debian; an extensive... WARNING: Un-translated message in PO file. 1286: "Notice that some of the packages outlined previously will intro... WARNING: Un-translated message in PO file. 1289: "As mentioned before, some programs, like firestart... WARNING: Un-translated message in PO file. 1292: "There is yet another type of firewall application: application ... WARNING: Un-translated message in PO file. 1295: "Manual init.d configuration" WARNING: Un-translated message in PO file. 1298: "Another possibility is to manually configure your firewall rule... WARNING: Un-translated message in PO file. 1301: "Review the script below and adapt it to your needs." WARNING: Un-translated message in PO file. 1304: "Test the script and review the syslog messages to see which tra... WARNING: Un-translated message in PO file. 1307: "Move the script to /etc/init.d/myfirewall" WARNING: Un-translated message in PO file. 1310: "The below script takes advantage of Debian's use (since Squeeze... WARNING: Un-translated message in PO file. 1318: "This is the sample firewall script:" WARNING: Un-translated message in PO file. 1321: "\n#!/bin/sh\n### BEGIN INIT INFO\n# Provides: myfirewa... WARNING: Un-translated message in PO file. 1484: "Instead of including all of the iptables rules in the init.d sc... WARNING: Un-translated message in PO file. 1487: "Configuring firewall rules through ifup" WARNING: Un-translated message in PO file. 1490: "You can use also the network configuration in /etc/ne... WARNING: Un-translated message in PO file. 1493: "Create your firewalling ruleset for when the interface is activ... WARNING: Un-translated message in PO file. 1496: "Save your ruleset with iptables-save to a fi... WARNING: Un-translated message in PO file. 1499: "Configure /etc/network/interfaces to use t... WARNING: Un-translated message in PO file. 1502: "\niface eth0 inet static\n address x.x.x.x\n [.. ... WARNING: Un-translated message in PO file. 1510: "You can optionally also setup a set of rules to be applied when... WARNING: Un-translated message in PO file. 1518: "For more advanced firewall configuration scripts through > en-US/06_automatic.xml -> tmp/pt-BR/xml_tmp//06_automatic.xml WARNING: Message missing from PO file, consider updating your POT and PO files. "Since woody (Debian 3.0) there are two specific packages that are useful for security hardening. The harden package which takes an approach based on the package dependencies to quickly install valuable security packages and remove those with flaws, configuration of the packages must be done by the administrator. The bastille package that implements a given security policy on the local system based on previous configuration by the administrator (the building of the configuration can be a guided process done with simple yes/no questions)." WARNING: Message missing from PO file, consider updating your POT and PO files. "The harden package tries to make it more easy to install and administer hosts that need good security. This package should be used by people that want some quick help to enhance the security of the system. It automatically installs some tools that should enhance security in some way: intrusion detection tools, security analysis tools, etc. Harden installs the following virtual packages (i.e. no contents, just dependencies or recommendations on others):" WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-tools: tools to enhance system security (integrity checkers, intrusion detection, kernel patches...)" WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-environment: helps configure a hardened environment (currently empty)." WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-servers: removes servers considered insecure for some reason." WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-clients: removes clients considered insecure for some reason." WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-remoteaudit: tools to remotely audit a system." WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-nids: helps to install a network intrusion detection system." WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-surveillance: helps to install tools for monitoring of networks and services." WARNING: Un-translated message in PO file. 50: "Useful packages which are not a dependence:" WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-doc: provides this same manual and other security-related documentation packages." WARNING: Message missing from PO file, consider updating your POT and PO files. "harden-development: development tools for creating more secure programs." WARNING: Message missing from PO file, consider updating your POT and PO files. "Be careful because if you have software you need (and which you do not wish to uninstall for some reason) and it conflicts with some of the packages above you might not be able to fully use harden. The harden packages do not (directly) do a thing. They do have, however, intentional package conflicts with known non-secure packages. This way, the Debian packaging system will not approve the installation of these packages. For example, when you try to install a telnet daemon with harden-servers, apt will say:" WARNING: Message missing from PO file, consider updating your POT and PO files. " is an automatic hardening tool originally oriented towards the Red Hat and Mandrake Linux distributions. However, the bastille package provided in Debian (since woody) is patched in order to provide the same functionality for Debian GNU/Linux systems." WARNING: Un-translated message in PO file. 91: "Answer questions step by step regarding the desired security of... WARNING: Un-translated message in PO file. 97: "Take a predefined configuration file (could be provided by Bast...  Merging pt-BR/07_infrastructure.po >> en-US/07_infrastructure.xml -> tmp/pt-BR/xml_tmp//07_infrastructure.xml WARNING: Un-translated message in PO file. 23: "Also, the Debian Security Team is the contact point for problem... WARNING: Un-translated message in PO file. 62: "DSAs are published both on debsecan uses the information in... WARNING: Un-translated message in PO file. 137: "Packages in the security archive are autobuilt, just like the r... WARNING: Un-translated message in PO file. 140: "Thus, the security upload archive works with the following proc... WARNING: Un-translated message in PO file. 164: "updates the Packages, Sourcesetch<... WARNING: Un-translated message in PO file. 233: "These changes are based on the patch for apt... WARNING: Un-translated message in PO file. 236: "Secure apt works by checking the distribution through the apt package." WARNING: Un-translated message in PO file. 242: "You can find more information at gpg is the tool used in secure apt to sign f... WARNING: Un-translated message in PO file. 269: "apt-key is a program that is used to manage ... WARNING: Un-translated message in PO file. 272: "Release checksums" WARNING: Un-translated message in PO file. 275: "A Debian archive contains a Release file, ... WARNING: Un-translated message in PO file. 278: "\nMD5Sum:\n 6b05b392f792ba5a436d590c129de21f 3453 Pa... WARNING: Un-translated message in PO file. 287: "The Release files also include SHA-1 check... WARNING: Un-translated message in PO file. 290: "Now if we look inside a Packages file, we'... WARNING: Un-translated message in PO file. 293: "\n Package: uqm\n Priority: optional\n ...\n Filena... WARNING: Un-translated message in PO file. 303: "These two checksums can be used to verify that you have downloa... WARNING: Un-translated message in PO file. 306: "None of this is new in secure apt, but it does provide the foun... WARNING: Un-translated message in PO file. 309: "Verification of the Release file" WARNING: Un-translated message in PO file. 312: "To verify the Release file, a gpg signatur... WARNING: Un-translated message in PO file. 315: "\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.1 (GNU/Lin... WARNING: Un-translated message in PO file. 326: "Check of Release.gpg by aptRelease.gpg fi... WARNING: Un-translated message in PO file. 332: "\nW: GPG error: http://ftp.us.debian.org testing Release: The f... WARNING: Un-translated message in PO file. 338: "Note that the second half of the long number is the key id of t... WARNING: Un-translated message in PO file. 341: "If you ignore that warning and try to install a package later, ... WARNING: Un-translated message in PO file. 344: "\nWARNING: The following packages cannot be authenticated!\n l... WARNING: Un-translated message in PO file. 351: "If you say Y here you have no way to know if the file you're ge... WARNING: Un-translated message in PO file. 354: "Note that you can disable these checks by running apt with --al... WARNING: Un-translated message in PO file. 357: "It's also worth noting that newer versions of the Debian instal... WARNING: Un-translated message in PO file. 360: "How to tell apt what to trust" WARNING: Un-translated message in PO file. 363: "So the security of the whole system depends on there being a apt trust the official Debian... WARNING: Un-translated message in PO file. 384: "Finding the key for a repository" WARNING: Un-translated message in PO file. 387: "The debian-archive-keyring package is used to distribute keys t... WARNING: Un-translated message in PO file. 390: "For other archives, there is not yet a standard location where ... WARNING: Un-translated message in PO file. 393: "The Debian archive signing key is available at gpg itself has a standard way to distribute ... WARNING: Un-translated message in PO file. 399: "\n$ gpg --keyserver pgpkeys.mit.edu --recv-key 2D230C5F\ngpg: r... WARNING: Un-translated message in PO file. 409: "You can then export that key from your own keyring and feed it ... WARNING: Un-translated message in PO file. 412: "\n$ gpg -a --export 2D230C5F | sudo apt-key add -\ngpg: no ulti... WARNING: Un-translated message in PO file. 419: "The \"gpg: no ultimately trusted keys found\" warning means tha... WARNING: Un-translated message in PO file. 422: "Safely adding a key" WARNING: Un-translated message in PO file. 425: "By adding a key to apt's keyring, you're telling apt to trust e... WARNING: Un-translated message in PO file. 428: "It's good to be paranoid in security, but verifying things from... WARNING: Un-translated message in PO file. 431: "If you can't afford this level of paranoia, do whatever feels a... WARNING: Un-translated message in PO file. 434: "Verifying key integrity" WARNING: Un-translated message in PO file. 437: "You can verify the fingerprint as well as the signatures on the... WARNING: Un-translated message in PO file. 440: "\n$ GET http://ftp-master.debian.org/ziyi_key_2006.asc | gpg --... WARNING: Un-translated message in PO file. 461: "and then ... WARNING: Un-translated message in PO file. 482: "In January 2006, a new key for 2006 was made and the Release fi... WARNING: Un-translated message in PO file. 485: "Known release checking problems" WARNING: Un-translated message in PO file. 488: "One not so obvious problem is that if your clock is very far of... WARNING: Un-translated message in PO file. 491: "\nW: GPG error: http://archive.progeny.com sid Release: Unknown... WARNING: Un-translated message in PO file. 495: "Although apt-key list will make the problem ... WARNING: Un-translated message in PO file. 498: "\ngpg: key 2D230C5F was created 192324901 seconds in the future... WARNING: Un-translated message in PO file. 506: "If it's set to a date too far in the future, apt will treat the... WARNING: Un-translated message in PO file. 509: "Another problem you may encouter if using testing or unstable i... WARNING: Un-translated message in PO file. 512: "Manual per distribution release check" WARNING: Un-translated message in PO file. 1099: "Release check of non Debian sources" WARNING: Message missing from PO file, consider updating your POT and PO files. "Notice that, when using the latest apt version (with secure apt) no extra effort should be required on your part unless you use non-Debian sources, in which case an extra confirmation step will be required by apt-get. This is avoided by providing Release and Release.gpg files in the non-Debian sources. The Release file can be generated with apt-ftparchive (available in apt-utils 0.5.0 and later), the Release.gpg is just a detached signature. To generate both follow this simple procedure:" WARNING: Message missing from PO file, consider updating your POT and PO files. "This package signing scheme can be implemented using debsig-verify and debsigs. These two packages can sign and verify embedded signatures in the .deb itself. Debian already has the capability to do this now, but there is no feature plan to implement the policy or other tools since the archive signing scheme is prefered. These tools are available for users and archive administrators that would rather use this scheme instead." WARNING: Message missing from PO file, consider updating your POT and PO files. "Latest dpkg versions (since 1.9.21) incorporate a that provides this functionality as soon as debsig-verify is installed."  Merging pt-BR/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/pt-BR/xml_tmp//08_sec-tools.xml WARNING: Un-translated message in PO file. 32: "nessus" WARNING: Un-translated message in PO file. 35: "raccess" WARNING: Un-translated message in PO file. 38: "nikto (whisker's ... WARNING: Un-translated message in PO file. 53: "nmap" WARNING: Un-translated message in PO file. 56: "xprobe" WARNING: Un-translated message in PO file. 59: "p0f" WARNING: Un-translated message in PO file. 62: "knocker" WARNING: Un-translated message in PO file. 65: "isic" WARNING: Un-translated message in PO file. 68: "hping2" WARNING: Un-translated message in PO file. 71: "icmpush" WARNING: Un-translated message in PO file. 74: "nbtscan (for SMB /NetBIOS audits)" WARNING: Un-translated message in PO file. 77: "fragrouter" WARNING: Un-translated message in PO file. 80: "strobe (in the netdiagirpas" WARNING: Un-translated message in PO file. 113: "flawfinder" WARNING: Un-translated message in PO file. 116: "rats" WARNING: Un-translated message in PO file. 119: "splint" WARNING: Un-translated message in PO file. 122: "pscan" WARNING: Un-translated message in PO file. 134: "vtun" WARNING: Un-translated message in PO file. 137: "tunnelv (non-US section)" WARNING: Un-translated message in PO file. 140: "cipe-source, cipe-commo... WARNING: Un-translated message in PO file. 143: "tinc" WARNING: Un-translated message in PO file. 146: "secvpn" WARNING: Un-translated message in PO file. 149: "pptpd" WARNING: Un-translated message in PO file. 152: "openvpn" WARNING: Un-translated message in PO file. 155: "openswan (clamav as the only ... WARNING: Un-translated message in PO file. 281: "Some other free software antivirus projects which might be incl... WARNING: Un-translated message in PO file. 284: "FIXME: Is there a package that provides a script to download th... WARNING: Un-translated message in PO file. 290: "However, Debian will never provide propiet... WARNING: Un-translated message in PO file. 314: "icedove (rebranded version of Mozill... WARNING: Un-translated message in PO file. 320: "gnus, which when installed with the ... WARNING: Un-translated message in PO file. 349: "> en-US/09_developer.xml -> tmp/pt-BR/xml_tmp//09_developer.xml WARNING: Un-translated message in PO file. 14: "Developer's Best Practices for OS Security" WARNING: Un-translated message in PO file. 17: "This chapter introduces some best secure coding practices for d... WARNING: Un-translated message in PO file. 20: "Best practices for security review and design" WARNING: Un-translated message in PO file. 23: "Developers that are packaging software should make a best effor... WARNING: Un-translated message in PO file. 26: "In order to do so, they should make their best to review the so... WARNING: Un-translated message in PO file. 29: "The programming bugs which lead to security bugs typically incl... WARNING: Un-translated message in PO file. 32: "Some of these issues might not be easy to spot unless you are a... WARNING: Message missing from PO file, consider updating your POT and PO files. "There are a set of tools available to assist to the security code review phase. These include rats, flawfinder and pscan. For more information, read the ." WARNING: Un-translated message in PO file. 38: "When packaging software developers have to make sure that they ... WARNING: Un-translated message in PO file. 41: "The software runs with the minimum privileges it needs:" WARNING: Un-translated message in PO file. 44: "The package does install binaries setuid or setgid. Li... WARNING: Un-translated message in PO file. 47: "The daemons the package provide run with a low privilege user (... WARNING: Un-translated message in PO file. 50: "Programmed (i.e., cron) tasks running in the... WARNING: Un-translated message in PO file. 53: "If you have to do any of the above make sure the programs that ... WARNING: Un-translated message in PO file. 56: "For more information, specific to secure programming, make sure... WARNING: Un-translated message in PO file. 59: "Creating users and groups for software daemons" WARNING: Message missing from PO file, consider updating your POT and PO files. "If your software runs a daemon that does not need root privileges, you need to create a user for it. There are two kind of Debian users that can be used by packages: static uids (assigned by base-passwd, for a list of static users in Debian see ) and dynamic uids in the range assigned to system users." WARNING: Message missing from PO file, consider updating your POT and PO files. "In the first case, you need to ask for a user or group id to the base-passwd. Once the user is available there the package needs to be distributed including a proper versioned depends to the base-passwd package." WARNING: Un-translated message in PO file. 68: "In the second case, you need to create the system user either i... WARNING: Un-translated message in PO file. 71: "The following example code creates the user and group the daemo... WARNING: Un-translated message in PO file. 74: "\n[...]\ncase \"$1\" in\n install|upgrade)\n\n # If the packa... WARNING: Un-translated message in PO file. 140: "You have to make sure that the init.d script file:" WARNING: Un-translated message in PO file. 143: "Starts the daemon dropping privileges: if the software does not... WARNING: Un-translated message in PO file. 146: "Stops the daemon only if the user id matches, you can use the <... WARNING: Un-translated message in PO file. 149: "Does not run if either the user or the group do not exist:" WARNING: Un-translated message in PO file. 152: "\n if ! getent passwd | grep -q \"^server_userpostrm... WARNING: Un-translated message in PO file. 170: "Running programs with a user with limited privileges makes sure...  Merging pt-BR/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/pt-BR/xml_tmp//10_before-compromise.xml WARNING: Un-translated message in PO file. 17: "Keep your system secure" WARNING: Un-translated message in PO file. 20: "You should strive to keep your system secure by monitoring its ... WARNING: Un-translated message in PO file. 23: "Tracking security vulnerabilities" WARNING: Un-translated message in PO file. 26: "Although most administrators are aware of security vulnerabilit... WARNING: Un-translated message in PO file. 29: "This typically includes subscribing to the announcement mailing... WARNING: Un-translated message in PO file. 32: "In order to track known vulnerabilities affecting the Debian di... WARNING: Message missing from PO file, consider updating your POT and PO files. "The tracker has searchable interfaces (by name and package name) and some tools (such as debsecan, see ) use that database to provide information of vulnerabilities affecting a given system which have not yet been addressed (i.e. those who are pending a fix)." WARNING: Un-translated message in PO file. 38: "Concious administrators can use that information to determine w... WARNING: Un-translated message in PO file. 41: "Security issues tracked for releases supported by the Debian Se... WARNING: Un-translated message in PO file. 44: "Notice, however, that the information tracked by the Debian Tes... WARNING: Un-translated message in PO file. 62: "\n# apt-get update\n# apt-get upgrade -s\n[ ... review packages... WARNING: Un-translated message in PO file. 72: "And restart those services whose libraries have been updated if... WARNING: Message missing from PO file, consider updating your POT and PO files. "In this example, you can see that the system needs to be updated with new cvs and cupsys packages which are being retrieved from woody's security update archive. If you want to understand why these packages are needed, you should go to and check which recent Debian Security Advisories have been published related to these packages. In this case, the related DSAs are (for cvs) and (for cupsys)." WARNING: Un-translated message in PO file. 102: "Notice that you will need to reboot your system if there has be... WARNING: Un-translated message in PO file. 105: "Checking for updates at the Desktop" WARNING: Message missing from PO file, consider updating your POT and PO files. "Since Debian 4.0 lenny Debian provides and installs in a default installation update-notifier. This is a GNOME application that will startup when you enter your Desktop and can be used to keep track of updates available for your system and install them. It uses update-manager for this." WARNING: Un-translated message in PO file. 111: "In a stable system updates are only available when a security p... WARNING: Un-translated message in PO file. 114: "The notification is not intrusive and users are not forced to i... WARNING: Un-translated message in PO file. 117: "This application works by checking the package database and com... WARNING: Un-translated message in PO file. 120: "Apt installs such a task (/etc/cro... WARNING: Un-translated message in PO file. 123: "If the system is set to download the packages list daily but no... WARNING: Message missing from PO file, consider updating your POT and PO files. "You can use a different cron task, such as the one installed by cron-apt (see ). You can also just manually check for upgrades using this application." WARNING: Message missing from PO file, consider updating your POT and PO files. "Users of the KDE desktop environment will probably prefer to install adept and adept-notifier instead which offers a similar functionality but is not part of the standard installation." WARNING: Message missing from PO file, consider updating your POT and PO files. "Another method for automatic security updates is the use of cron-apt. This package provides a tool to update the system at regular intervals (using a cron job), and can also be configured to send mails to the system administrator using the local mail transport agent. It will just update the package list and download new packages by default but it can be configured to automatically install new updates." WARNING: Un-translated message in PO file. 150: "More information is available at the debsecan program evaluates the security status of by reporting both missing security updates and security vulnerabilities. Unlike cron-apt, which only provides information related to security updates available, but this tool obtains information from the security vulnerability database maintained by the Debian Security Team which includes also information on vulnerabilities which are not yet fixed through a security update. Consequently, it is more efficient at helping administrators track security vulnerabilities (as described in )." WARNING: Message missing from PO file, consider updating your POT and PO files. "Upon installing the Debian package debsecan, and if the administrator consents to it, it will generate a cron task that will make it run and send the output to a specific user whenever it finds a vulnerable package. It will also download the information from the Internet. The location of the security database is also part of the questions ask on installation and are later defined /etc/default/debsecan, it can be easily adjusted for systems that do not have Internet access so that they all pull from a local mirror so that there is a single point that access the vulnerability database." WARNING: Un-translated message in PO file. 162: "Notice, however, that the Security Team tracks many vulnerabili... WARNING: Un-translated message in PO file. 165: "More information is available at the apticron, which, similarly to cron-apt will check for updates and send mails to the administrator. More information on apticron is available at the ." WARNING: Un-translated message in PO file. 174: "You might also want to take a look at apt so that those packages that yo... WARNING: Un-translated message in PO file. 238: "To pin the packages under a given release, you must edit cron-apt as described in and enable it to install downloaded packages or add a cron entry yourself so that the update is run daily, for example:" WARNING: Un-translated message in PO file. 314: "An interesting source of information is snort is a flexible packet sniffer or logger that detects attacks using an attack signature dictionary. It detects a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, and much more. snort also has real-time alerting capability. You can use snort for a range of hosts on your network as well as for your own host. This is a tool which should be installed on every router to keep an eye on your network. Just install it with apt-get install snort, follow the questions, and watch it log. For a little broader security framework, see ." WARNING: Message missing from PO file, consider updating your POT and PO files. "Debian's snort package has many security checks enabled by default. However, you should customize the setup to take into account the particular services you run on your system. You may also want to seek additional checks specific to these services." WARNING: Message missing from PO file, consider updating your POT and PO files. "There are other, simpler tools that can be used to detect network attacks. portsentry is an interesting package that can tip you off to port scans against your hosts. Other tools like ippl or iplogger will also detect some IP (TCP and ICMP) attacks, even if they do not provide the kind of advanced techniques snort does." WARNING: Message missing from PO file, consider updating your POT and PO files. "You can test any of these tools with the Debian package idswakeup, a shell script which generates false alarms, and includes many common attack signatures." WARNING: Message missing from PO file, consider updating your POT and PO files. "tiger is an older intrusion detection tool which has been ported to Debian since the Woody branch. tiger provides checks of common issues related to security break-ins, like password strength, file system problems, communicating processes, and other ways root might be compromised. This package includes new Debian-specific security checks including: MD5sums checks of installed files, locations of files not belonging to packages, and analysis of local listening processes. The default installation sets up tiger to run each day, generating a report that is sent to the superuser about possible compromises of the system." WARNING: Message missing from PO file, consider updating your POT and PO files. "Log analysis tools, such as logcheck can also be used to detect intrusion attempts. See ." WARNING: Message missing from PO file, consider updating your POT and PO files. "lcap - A user friendly interface to remove capabilities (kernel-based access control) in the kernel, making the system more secure. For example, executing lcap CAP_SYS_MODULE There are over 28 capabilities including: CAP_BSET, CAP_CHOWN, CAP_FOWNER, CAP_FSETID, CAP_FS_MASK, CAP_FULL_SET, CAP_INIT_EFF_SET, CAP_INIT_INH_SET, CAP_IPC_LOCK, CAP_IPC_OWNER, CAP_KILL, CAP_LEASE, CAP_LINUX_IMMUTABLE, CAP_MKNOD, CAP_NET_ADMIN, CAP_NET_BIND_SERVICE, CAP_NET_RAW, CAP_SETGID, CAP_SETPCAP, CAP_SETUID, CAP_SYS_ADMIN, CAP_SYS_BOOT, CAP_SYS_CHROOT, CAP_SYS_MODULE, CAP_SYS_NICE, CAP_SYS_PACCT, CAP_SYS_PTRACE, CAP_SYS_RAWIO, CAP_SYS_RESOURCE, CAP_SYS_TIME, and CAP_SYS_TTY_CONFIG. All of them can be de-activated to harden your kernel. will remove module loading capabilities (even for the root user). You don't need to install lcap to do this, but it's easier than setting /proc/sys/kernel/cap-bound by hand. There is some (old) information on capabilities at Jon Corbet's section on LWN (dated December 1999)." WARNING: Message missing from PO file, consider updating your POT and PO files. "Detection of some root-kits in Debian can be accomplished with the chkrootkit package. The program checks for signs of several known root-kits on the target system, but is not a definitive test." WARNING: Message missing from PO file, consider updating your POT and PO files. "syslog-ng, useful for sending logs from the honeypot to a remote syslog server." WARNING: Message missing from PO file, consider updating your POT and PO files. "snort, to set up capture of all the incoming network traffic to the honeypot and detect the attacks." WARNING: Message missing from PO file, consider updating your POT and PO files. "osh, a SETUID root, security enhanced, restricted shell with logging (see Lance Spitzner's article below)." WARNING: Un-translated message in PO file. 452: "Of course, all the daemons you will be using for your fake serv... WARNING: Message missing from PO file, consider updating your POT and PO files. "Integrity checkers (see ) and The Coroner's Toolkit (tct) to do post-attack audits." WARNING: Message missing from PO file, consider updating your POT and PO files. "honeyd and farpd to setup a honeypot that will listen to connections to unused IP addresses and forward them to scripts simulating live services. Also check out iisemulator." WARNING: Message missing from PO file, consider updating your POT and PO files. "tinyhoneypot to setup a simple honeypot server with fake services." WARNING: Message missing from PO file, consider updating your POT and PO files. "If you cannot use spare systems to build up the honeypots and the network systems to protect and control it you can use the virtualisation technology available in xen or uml (User-Mode-Linux). If you take this route you will need to patch your kernel with either kernel-patch-xen or kernel-patch-uml." WARNING: Un-translated message in PO file. 467: "You can read more about building honeypots in Lanze Spitzner's ...  Merging pt-BR/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/pt-BR/xml_tmp//11_after-compromise.xml WARNING: Message missing from PO file, consider updating your POT and PO files. "The most recommended method for recovering a compromised system is to use a live-filesystem on CD-ROM with all the tools (and kernel modules) you might need to access the compromised system. You can use the mkinitrd-cd package to build such a CD-ROM>In fact, this is the tool used to build the CD-ROMs for the project (a firewall on a live CD-ROM based on the Debian distribution).. You might find the (Computer Aided Investigative Environment) CD-ROM useful here too, since it's also a live CD-ROM under active development with forensic tools useful in these situations. There is not (yet) a Debian-based tool such as this, nor an easy way to build the CD-ROM using your own selection of Debian packages and mkinitrd-cd (so you'll have to read the documentation provided with it to make your own CD-ROMs)." WARNING: Message missing from PO file, consider updating your POT and PO files. "If you wish to gather more information, the tct (The Coroner's Toolkit from Dan Farmer and Wietse Venema) package contains utilities which perform a post mortem analysis of a system. tct allows the user to collect information about deleted files, running processes and more. See the included documentation for more information. These same utilities and some others can be found in by Brian Carrier, which provides a web front-end for forensic analysis of disk images. In Debian you can find both sleuthkit (the tools) and autopsy (the graphical front-end)." WARNING: Un-translated message in PO file. 68: "You will find more information on forensic analysis in Dan Farm... WARNING: Un-translated message in PO file. 80: "Analysis of malware" WARNING: Un-translated message in PO file. 83: "Some other tools that can be used for forensic analysis provide... WARNING: Message missing from PO file, consider updating your POT and PO files. "Any of these packages can be used to analyze rogue binaries (such as back doors), in order to determine how they work and what they do to the system. Some other common tools include ldd (in libc6), strings and objdump (both in binutils)." WARNING: Message missing from PO file, consider updating your POT and PO files. "If you try to do forensic analysis with back doors or suspected binaries retrieved from compromised systems, you should do so in a secure environment (for example in a bochs or xen image or a chroot'ed environment using a user with low privileges>Be very careful if using chroots, since if the binary uses a kernel-level exploit to increase its privileges it might still be able to infect your system). Otherwise your own system can be back doored/r00ted too!" WARNING: Un-translated message in PO file. 92: "If you are interested in malware analysis then you should read ...  Merging pt-BR/12_faq.po >> en-US/12_faq.xml -> tmp/pt-BR/xml_tmp//12_faq.xml WARNING: Message missing from PO file, consider updating your POT and PO files. "There are currently at least two linux distributions certified at different levels. Notice that some of the CC tests are being integrated into the which is available in Debian in the ltp." WARNING: Message missing from PO file, consider updating your POT and PO files. "Yes. , originally oriented toward other Linux distributions (Red Hat and Mandrake), it currently works also for Debian. Steps are being taken to integrate the changes made to the upstream version into the Debian package, named bastille." WARNING: Message missing from PO file, consider updating your POT and PO files. "Other software is not as easy to change. ssh will need to be recompiled in order to change the version that it prints. Take care not to remove the first part (SSH-2.0) of the banner, which clients use to identify which protocol(s) is supported by your package." WARNING: Un-translated message in PO file. 175: "To reduce messages sent to the console, you can use dm... WARNING: Un-translated message in PO file. 224: "To easily find users who don't own any files, execute the follo... WARNING: Message missing from PO file, consider updating your POT and PO files. "These users are provided by base-passwd. Look in its documentation for more information on how these users are handled in Debian. The list of default users (with a corresponding group) follows:" WARNING: Un-translated message in PO file. 362: "I removed a system user! How can I recover?" WARNING: Un-translated message in PO file. 365: "If you have removed a system user and have not made a backup of... WARNING: Un-translated message in PO file. 398: "Can I remove inetd?" WARNING: Message missing from PO file, consider updating your POT and PO files. "Inetd is not easy to remove since netbase depends on the package that provides it (netkit-inetd). If you want to remove it, you can either disable it (see ) or remove the package by using the equivs package." WARNING: Message missing from PO file, consider updating your POT and PO files. "In versions of the portmap package later than 5-5 you can actually have the portmapper installed but listening only on localhost (by modifying /etc/default/portmap)" WARNING: Message missing from PO file, consider updating your POT and PO files. "You are not seeing processes listening on TCP/UDP port 1 and 6. In fact, you are seeing a process listening on a raw socket for protocols 1 (ICMP) and 6 (TCP). Such behavior is common to both legitimate software like intrustion detection systems, such as iplogger and portsentry, but some trojans have also been known yo use them. If you have the mentioned packages simply remove them to close the port. If you do not, try netstat's -p (process) option to see which process is running these listeners." WARNING: Message missing from PO file, consider updating your POT and PO files. "For example, if you want to set up a POP service, you don't need to set up a user account for each user accessing it. It's best to set up directory-based authentication through an external service (like Radius, LDAP or an SQL database). Just install the appropriate PAM library (libpam-radius-auth, libpam-ldap, libpam-pgsql or libpam-mysql), read the documentation (for starters, see ) and configure the PAM-enabled service to use the back end you have chosen. This is done by editing the files under /etc/pam.d/ for your service and modifying the" WARNING: Message missing from PO file, consider updating your POT and PO files. "proftpd is vulnerable to a Denial of Service attack." WARNING: Message missing from PO file, consider updating your POT and PO files. "After installing portsentry, there are a lot of ports open." WARNING: Un-translated message in PO file. 773: "The security team keeps its list of Frequently Asked Questions ...  Merging pt-BR/99_appendix.po >> en-US/99_appendix.xml -> tmp/pt-BR/xml_tmp//99_appendix.xml WARNING: Un-translated message in PO file. 14: "Appendix" WARNING: Un-translated message in PO file. 179: "Enable a password in the BIOS." WARNING: Un-translated message in PO file. 182: "Disable floppy/cdrom/... booting in the system's BIOS." WARNING: Un-translated message in PO file. 194: "Set nosuid,noexec,nodev mount options in /etc/pam.d/login" WARNING: Un-translated message in PO file. 242: "Disable network root login; use su... WARNING: Un-translated message in PO file. 284: "Disable or remove in.telnetd, if installed" WARNING: Un-translated message in PO file. 290: "Disable other gratuitous network services; ftp, DNS, WWW etc sh... WARNING: Un-translated message in PO file. 299: "Configure firewall and tcpwrappers (i.e. Typi... WARNING: Un-translated message in PO file. 374: "BASE is currently packaged for Debian in acidbaseb... WARNING: Un-translated message in PO file. 683: "This script is here for historical purposes and to show how you... WARNING: Un-translated message in PO file. 686: "You can also create the users manually and use the patch availa... WARNING: Un-translated message in PO file. 980: "The following example can be use to setup a restricted firewall... WARNING: Un-translated message in PO file. 1052: "Note: Using a DROP policy in the INPUT cha... WARNING: Un-translated message in PO file. 1055: "Of course, you should disable any backdoors before getting the ... WARNING: Un-translated message in PO file. 1064: "Chroot environment for SSH" WARNING: Un-translated message in PO file. 1067: "Creating a restricted environment for SSHlibpam-chroot" WARNING: Un-translated message in PO file. 1091: "Probably the easiest way is to use the libpam-chroot/etc/pam.d/ssh to use this PAM modu... WARNING: Un-translated message in PO file. 1102: "set a proper chroot environment for the user. You can try using... WARNING: Un-translated message in PO file. 1105: "Configure /etc/security/chroot.conf so tha... WARNING: Un-translated message in PO file. 1108: "Configure SSH: Depending on your OpenSSH version the chroot env... WARNING: Un-translated message in PO file. 1116: "Notice that this will lower the security of your system since t... WARNING: Un-translated message in PO file. 1119: "If you don't disable Privilege Separation ... WARNING: Un-translated message in PO file. 1122: "If you have Privilege Separation set to /proc filesystem needs to be mounted i... WARNING: Un-translated message in PO file. 1142: "The necessary /dev/pts/ devices need to ex... WARNING: Un-translated message in PO file. 1145: "The user's home directory has to exist in the chroot, otherwise... WARNING: Un-translated message in PO file. 1148: "You can debug all these issues if you use the debugssh server" WARNING: Un-translated message in PO file. 1157: "Debian's sshd does not allow restriction of ... WARNING: Un-translated message in PO file. 1160: "After applying the patch, modify /etc/passwdsshd daemon insi... WARNING: Un-translated message in PO file. 1343: "That way the remote daemon will do as few things as possible as... WARNING: Un-translated message in PO file. 1346: "Notice, also, that in order for SSH to work in that location, t... WARNING: Un-translated message in PO file. 1349: "Setup a minimal system (the really easy way)" WARNING: Un-translated message in PO file. 1352: "You can use debootstrap to setup a minimal e... WARNING: Un-translated message in PO file. 1364: "To set up the environment using makejail's p... WARNING: Un-translated message in PO file. 1372: "This will setup the chroot in the /var/chroot/sshdprocfs filesystem in /... WARNING: Un-translated message in PO file. 1383: "You can also have it be mounted automatically by editing /dev/log ... WARNING: Un-translated message in PO file. 1779: "For Debian release 3.1 you have to make sure that the environme... WARNING: Un-translated message in PO file. 1793: "Manually creating the environment (the hard way)" WARNING: Un-translated message in PO file. 2284: "Chroot environment for Apache" WARNING: Un-translated message in PO file. 2353: "Edit /etc/makejail/apache.py. You need to ... WARNING: Un-translated message in PO file. 2693: "If you are looking for more information you can consider these ...  Merging pt-BR/Author_Group.po >> en-US/Author_Group.xml -> tmp/pt-BR/xml_tmp//Author_Group.xml Merging pt-BR/Book_Info.po >> en-US/Book_Info.xml -> tmp/pt-BR/xml_tmp//Book_Info.xml Merging pt-BR/Revision_History.po >> en-US/Revision_History.xml -> tmp/pt-BR/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 23: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 26: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 35: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 38: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 41: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 44: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 47: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 50: "Use LSB headers for firewall script. Patch by Dominic Walden." WARNING: Un-translated message in PO file. 59: "Indicate that the document is not updated with latest versions.... WARNING: Un-translated message in PO file. 62: "Update pointers to current location of sources." WARNING: Un-translated message in PO file. 65: "Update information on security updates for newer releases." WARNING: Un-translated message in PO file. 68: "Point information for Developers to online sources instead of k... WARNING: Un-translated message in PO file. 71: "Extend the information regarding securing console access, inclu... WARNING: Un-translated message in PO file. 74: "Update the information related to PAM modules including how to ... WARNING: Un-translated message in PO file. 77: "Reference some of the PAM modules available to use double facto... WARNING: Un-translated message in PO file. 80: "Fix shell script example in Appendix." WARNING: Un-translated message in PO file. 83: "Fix reference errors." WARNING: Un-translated message in PO file. 86: "Point to the Basille sourceforge project instead of the bastill... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 92: "Change reference to Log Analysis' website as this is no longer ... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 95: "Change the section related to choosing a filesystem: note that ... WARNING: Un-translated message in PO file. 98: "Change the name of the packages related to enigmail to reflect ... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 101: "Change URLs pointing to Bastille Linux to www.Bastille-UNIX.org... WARNING: Un-translated message in PO file. 104: "Fix pointers to Linux Ramen and Lion worms." WARNING: Un-translated message in PO file. 107: "Use linux-image in the examples instead of the (old) kernel-ima... WARNING: Un-translated message in PO file. 110: "Fix typos spotted by Francesco Poli." WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 113: "Update the information related to security updates. Drop the te... WARNING: Un-translated message in PO file. 116: "Divide the firewall applications based on target users and add ... WARNING: Un-translated message in PO file. 119: "Remove references to libsafe, it's not in the archive any longe... WARNING: Un-translated message in PO file. 122: "Fix the location of syslog's configuration, thanks to John Talb... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 125: "Thanks go to Francesco Poli for his extensive review of the doc... WARNING: Un-translated message in PO file. 128: "Remove most references to the woody release as it is no longer ... WARNING: Un-translated message in PO file. 131: "Describe how to restrict users so that they can only do file tr... WARNING: Un-translated message in PO file. 134: "Added a note regarding the debian-private declasiffication deci... WARNING: Un-translated message in PO file. 137: "Updated link of incident handling guides." WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 143: "Fix references to the master security server." WARNING: Un-translated message in PO file. 146: "Add pointers to additional APT-secure documentation." WARNING: Un-translated message in PO file. 149: "Improve the description of APT signatures." WARNING: Un-translated message in PO file. 152: "Comment out some things which are not yet final related to the ... WARNING: Un-translated message in PO file. 155: "Fixed name of the Debian Testing Security Team." WARNING: Un-translated message in PO file. 158: "Remove reference to sarge in an example." WARNING: Un-translated message in PO file. 161: "Update the antivirus section, clamav is now available on the re... WARNING: Un-translated message in PO file. 164: "Removes all references to freeswan as it is obsolete." WARNING: Un-translated message in PO file. 167: "Describe issues related to ruleset changes to the firewall if d... WARNING: Un-translated message in PO file. 170: "Update the information related to the IDS installation, mention... WARNING: Un-translated message in PO file. 173: "Rewrite the \"running bind as a non-root user\" section as this... WARNING: Un-translated message in PO file. 176: "Remove the obsolete way to setup iptables rulesets as woody is ... WARNING: Un-translated message in PO file. 179: "Revert the advice regarding LOG_UNKFAIL_ENAB it should be set t... WARNING: Un-translated message in PO file. 182: "Added more information related to updating the system with desk... WARNING: Un-translated message in PO file. 185: "Updated the contents of the FAQ and remove redundant paragraphs... WARNING: Un-translated message in PO file. 188: "Review and update the section related to forensic analysis of m... WARNING: Un-translated message in PO file. 191: "Remove or fix some dead links." WARNING: Un-translated message in PO file. 194: "Fix many typos and gramatical errors reported by Francesco Poli... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 197: "Provide examples using apt-cache's rdepends as suggested by Oze... WARNING: Un-translated message in PO file. 200: "Fix location of Squid's user's manual because of its relocation... WARNING: Un-translated message in PO file. 203: "Fix information regarding umask, it's logins.defs (and not limi... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 206: "Add information on how to track security vulnerabilities and ad... WARNING: Un-translated message in PO file. 209: "Add more information on the security support for testing." WARNING: Un-translated message in PO file. 212: "Fix a large number of typos with a patch provided by Simon Bran... WARNING: Un-translated message in PO file. 215: "Added section on how to disable root prompt on initramfs provid... WARNING: Un-translated message in PO file. 218: "Remove references to queso." WARNING: Un-translated message in PO file. 221: "Note that testing is now security-supported in the introduction... WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 224: "Rewrote the information on how to setup ssh chroots to clarify ... WARNING: Un-translated message in PO file. 227: "Fix lsof call as suggested by Christophe Sahut." WARNING: Un-translated message in PO file. 230: "Include patches for typo fixes from Uwe Hermann." WARNING: Un-translated message in PO file. 233: "Fix typo in reference spotted by Moritz Naumann." WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 236: "Add a section on Debian Developer's best practices for security... WARNING: Un-translated message in PO file. 239: "Ammended firewall script with comments from WhiteGhost." WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 242: "Included a patch from Thomas Sjögren which describes that apt-ftparchive is in apt-utils, not in apt (thanks to Emmanuel Chantreau for pointing this out)." WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 482: "Frédéric" WARNING: Un-translated message in PO file. 485: "Schütz" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 482: "Frédéric" WARNING: Un-translated message in PO file. 485: "Schütz" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 569: "Cris" WARNING: Un-translated message in PO file. 572: "Tillman" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1040: "Era" WARNING: Un-translated message in PO file. 1043: "Eriksson" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1085: "Josip" WARNING: Un-translated message in PO file. 1088: "Rodin" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña"  PO file 'pt-BR/Securing_Debian_Manual.po' not found! Using base XML!  Processing file tmp/pt-BR/xml/Common_Content/Conventions.xml -> tmp/pt-BR/xml/Common_Content/Conventions.xml Processing file tmp/pt-BR/xml/Common_Content/Feedback.xml -> tmp/pt-BR/xml/Common_Content/Feedback.xml Processing file tmp/pt-BR/xml/Common_Content/Legal_Notice.xml -> tmp/pt-BR/xml/Common_Content/Legal_Notice.xml Processing file tmp/pt-BR/xml/Common_Content/Program_Listing.xml -> tmp/pt-BR/xml/Common_Content/Program_Listing.xml Processing file tmp/pt-BR/xml/Common_Content/Revision_History.xml -> tmp/pt-BR/xml/Common_Content/Revision_History.xml Processing file tmp/pt-BR/xml_tmp/01_intro.xml -> tmp/pt-BR/xml/01_intro.xml Processing file tmp/pt-BR/xml_tmp/02_before-begin.xml -> tmp/pt-BR/xml/02_before-begin.xml Processing file tmp/pt-BR/xml_tmp/03_before-install.xml -> tmp/pt-BR/xml/03_before-install.xml Processing file tmp/pt-BR/xml_tmp/04_after-install.xml -> tmp/pt-BR/xml/04_after-install.xml Processing file tmp/pt-BR/xml_tmp/05_services.xml -> tmp/pt-BR/xml/05_services.xml Processing file tmp/pt-BR/xml_tmp/06_automatic.xml -> tmp/pt-BR/xml/06_automatic.xml Processing file tmp/pt-BR/xml_tmp/07_infrastructure.xml -> tmp/pt-BR/xml/07_infrastructure.xml Processing file tmp/pt-BR/xml_tmp/08_sec-tools.xml -> tmp/pt-BR/xml/08_sec-tools.xml Processing file tmp/pt-BR/xml_tmp/09_developer.xml -> tmp/pt-BR/xml/09_developer.xml Processing file tmp/pt-BR/xml_tmp/10_before-compromise.xml -> tmp/pt-BR/xml/10_before-compromise.xml Processing file tmp/pt-BR/xml_tmp/11_after-compromise.xml -> tmp/pt-BR/xml/11_after-compromise.xml Processing file tmp/pt-BR/xml_tmp/12_faq.xml -> tmp/pt-BR/xml/12_faq.xml Processing file tmp/pt-BR/xml_tmp/99_appendix.xml -> tmp/pt-BR/xml/99_appendix.xml Processing file tmp/pt-BR/xml_tmp/Author_Group.xml -> tmp/pt-BR/xml/Author_Group.xml Processing file tmp/pt-BR/xml_tmp/Book_Info.xml -> tmp/pt-BR/xml/Book_Info.xml Processing file tmp/pt-BR/xml_tmp/Revision_History.xml -> tmp/pt-BR/xml/Revision_History.xml Processing file tmp/pt-BR/xml_tmp/Securing_Debian_Manual.xml -> tmp/pt-BR/xml/Securing_Debian_Manual.xml Beginning work on pt-BR DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/pt-BR/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=zh-CN Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up zh-CN Merging zh-CN/01_intro.po >> en-US/01_intro.xml -> tmp/zh-CN/xml_tmp//01_intro.xml WARNING: Fuzzy message in PO file. 29: "The current maintainer of this document is Javier Fernández-San... WARNING: Fuzzy message in PO file. 33: "This manual was started as a HOWTO by Alex... WARNING: Un-translated message in PO file. 67: "Where to get the manual (and available formats)" WARNING: Un-translated message in PO file. 70: "You can download or view the latest version of the Securing Deb... WARNING: Un-translated message in PO file. 73: "If you want a full copy of the manual you can either download t... WARNING: Un-translated message in PO file. 76: "The document is also provided in text, html and PDF formats in ... WARNING: Un-translated message in PO file. 79: "This document is part of the documents distributed by the kernel-patch-2.4-lidsNSA Enhanced Linu... WARNING: Un-translated message in PO file. 193: "linux-patch-openswan" WARNING: Fuzzy message in PO file. 220: "Switching off the GNOME IP things." WARNING: Fuzzy message in PO file. 224: "Talk about pam_chroot (see compartm... WARNING: Fuzzy message in PO file. 238: "'advanced' routing (traffic policing is security related)." WARNING: Fuzzy message in PO file. 251: "secure ways of providing networked sound in addition to network... WARNING: Fuzzy message in PO file. 264: "ncrypting the entire file system." WARNING: Fuzzy message in PO file. 274: "using LDAP to manage users. There is a HOWTO of ldap+kerberos f... WARNING: Fuzzy message in PO file. 278: "How to remove information of reduced utility in production syst... WARNING: Fuzzy message in PO file. 282: "More information on lcap based on the packages README file (wel... WARNING: Fuzzy message in PO file. 286: "Add Colin's article on how to setup a chroot environment for a ... WARNING: Fuzzy message in PO file. 290: "Add information on running multiple snort se... WARNING: Fuzzy message in PO file. 294: "Add information on setting up a honeypot (honeyd> en-US/02_before-begin.xml -> tmp/zh-CN/xml_tmp//02_before-begin.xml WARNING: Fuzzy message in PO file. 47: "The > en-US/03_before-install.xml -> tmp/zh-CN/xml_tmp//03_before-install.xml WARNING: Fuzzy message in PO file. 20: "Before you install any operating system on your computer, set u... WARNING: Fuzzy message in PO file. 39: "Any directory tree which a user has write permissions to, such ... WARNING: Fuzzy message in PO file. 52: "In the case of a mail server it is important to have a separate... WARNING: Fuzzy message in PO file. 62: "During the system partitioning you also have to decide which fi... WARNING: Fuzzy message in PO file. 72: "Leaving aside the performance issues regarding journalling file... WARNING: Un-translated message in PO file. 79: "Notice, however, that there are some partitions that might not ... WARNING: Fuzzy message in PO file. 97: "Setting a good root password is the most basic requirement for ... WARNING: Fuzzy message in PO file. 101: "Plenty of information on choosing good passwords can be found o... WARNING: Un-translated message in PO file. 114: "As you may already know, when you install a given service the d... WARNING: Un-translated message in PO file. 120: "If you want to keep some services but use them rarely, use the ... WARNING: Un-translated message in PO file. 123: "invoke-rc.d support is mandatory in Debian, ... WARNING: Un-translated message in PO file. 129: "Disabling a daemon service is quite simple. You either remove t... WARNING: Un-translated message in PO file. 132: "You can remove these links manually or using update-rc... WARNING: Un-translated message in PO file. 135: "\n # update-rc.d name stop XXXX is a number that determines when ... WARNING: Fuzzy message in PO file. 143: "\n If any files /etc/rcrunlevel.d/[SK]??nam... WARNING: Un-translated message in PO file. 156: "You can use the TUI (Text User Interface) provided by /etc/init.d/service_namename remove" WARNING: Un-translated message in PO file. 180: "Move the script file (/etc/init.d/service_na... WARNING: Un-translated message in PO file. 183: "Remove the execute permission from the /etc/init.d//etc/init.d/service_name<... WARNING: Un-translated message in PO file. 189: "Nevertheless, the files under /etc/init.d ... WARNING: Fuzzy message in PO file. 192: "Unlike other (UNIX) operating systems, services in Debian canno... WARNING: Fuzzy message in PO file. 196: "FIXME: Add more information on handling daemons using a lot of software, for e... WARNING: Fuzzy message in PO file. 237: "providing tools that could help the attacker to use the comprom... WARNING: Un-translated message in PO file. 244: "Please notice that a default installation of Debian s... WARNING: Un-translated message in PO file. 247: "\nPackage Size\n------------------------+---... WARNING: Un-translated message in PO file. 269: "This is something that is fixed in releases post-sarge, see perl> en-US/04_after-install.xml -> tmp/zh-CN/xml_tmp//04_after-install.xml WARNING: Fuzzy message in PO file. 14: "After installation" WARNING: Fuzzy message in PO file. 18: "Once the system is installed you can still do more to secure th... WARNING: Fuzzy message in PO file. 25: "Subscribe to the Debian Security Announce mailing list" WARNING: Fuzzy message in PO file. 35: "You should consider, also, subscribing to the Note: If you are using the testi... WARNING: Un-translated message in PO file. 68: "Once you've done this you can use multiple tools to upgrade you... WARNING: Un-translated message in PO file. 71: "If you want to use aptitude's text i... WARNING: Un-translated message in PO file. 74: "\n# aptitude update\n# aptitude upgrade" WARNING: Un-translated message in PO file. 80: "If you want to use apt do just like ... WARNING: Un-translated message in PO file. 86: "If you like, you can add the deb-src lines to /etc/ap... WARNING: Un-translated message in PO file. 89: "Security update of libraries" WARNING: Un-translated message in PO file. 92: "Once you have executed a security update you might need to rest... WARNING: Un-translated message in PO file. 95: "From Debian Jessie and up, you can install... WARNING: Un-translated message in PO file. 98: "Some packages (like libc6) will do t... WARNING: Un-translated message in PO file. 101: "Bringing the system to run level 1 (single user) and then back ... WARNING: Un-translated message in PO file. 104: "Excercise caution when dealing with security upgrades if you ar... WARNING: Un-translated message in PO file. 107: "Security update of the kernel" WARNING: Un-translated message in PO file. 110: "First, make sure your kernel is being managed through the packa... WARNING: Un-translated message in PO file. 122: "If your kernel is not being managed you will see a message sayi... WARNING: Un-translated message in PO file. 125: "The installation system of recent Debian releases will handle t... WARNING: Un-translated message in PO file. 133: "To see if your kernel needs to be updated run:" WARNING: Un-translated message in PO file. 136: "\n$ kernfile=`readlink -f /vmlinuz`\n$ kernel=`dpkg -S $kernfil... WARNING: Un-translated message in PO file. 149: "If you are doing a security update which includes the kernel im... WARNING: Un-translated message in PO file. 152: "If you need to do a system reboot (because of a kernel upgrade)... WARNING: Un-translated message in PO file. 167: "Anybody can easily get a root-shell and change your passwords b... WARNING: Un-translated message in PO file. 173: "at the boot prompt. After changing the passwords and rebooting ... WARNING: Fuzzy message in PO file. 179: "For LILO you need to edit the config file /etc/lilo.c... WARNING: Fuzzy message in PO file. 198: "Then, make sure that the configuration file is not world readab... WARNING: Fuzzy message in PO file. 202: "If you use GRUB instead of LILO, edit /boot/grub/menu... WARNING: Fuzzy message in PO file. 215: "To further harden the integrity of the password, you may store ... WARNING: Fuzzy message in PO file. 228: "The --md5 parameter was added to instruct grubinitrd's linuxrc. The following message will appear:" WARNING: Fuzzy message in PO file. 257: "\n Press ENTER to obtain a shell (waits 5 seconds)" WARNING: Fuzzy message in PO file. 265: "\n # DELAY The number of seconds the linuxrc script should ... WARNING: Fuzzy message in PO file. 299: "Some security policies might force administrators to log in to ... WARNING: Un-translated message in PO file. 303: "/etc/pam.d/login In older Debian releases ... WARNING: Fuzzy message in PO file. 306: "securetty The /etc/securettyallowed users ca... WARNING: Un-translated message in PO file. 333: "disable this feature completely." WARNING: Un-translated message in PO file. 336: "If you want to restrict this, you must check the /etc... WARNING: Un-translated message in PO file. 339: "The default in Debian includes this switch:" WARNING: Un-translated message in PO file. 347: "The -a switch, as the init q after making any ... WARNING: Un-translated message in PO file. 356: "Restricting the use of the Magic SysRq key" WARNING: Un-translated message in PO file. 359: "The Magic SysRq key is a key combination t... WARNING: Un-translated message in PO file. 362: "Since the Etch release, the Magic SysRq key feature is enabled ... WARNING: Un-translated message in PO file. 374: "The default value shown above allows all of the SysRq functions... WARNING: Un-translated message in PO file. 377: "You should disable this functionality ifaccess to the console i... WARNING: Un-translated message in PO file. 380: "\n# Disables the magic SysRq key\nkernel.sysrq = 0" WARNING: Un-translated message in PO file. 386: "For more information, read Ext file system (e... WARNING: Fuzzy message in PO file. 401: "You see the difference in the options sections. The option ext2 or ext3noexec option prevents binaries from bei... WARNING: Fuzzy message in PO file. 415: "\n alex@joker:/tmp# mount | grep tmp\n /dev/hda7 on /tmp type... WARNING: Un-translated message in PO file. 432: "Newer versions of the kernel do however handle the noe... WARNING: Un-translated message in PO file. 435: "\n angrist:/tmp# mount | grep /tmp\n /dev/hda3 on /tmp type e... WARNING: Fuzzy message in PO file. 446: "However, many script kiddies have exploits which try to create ... WARNING: Fuzzy message in PO file. 450: "Also be forewarned, some script might depend on /tmp<... WARNING: Fuzzy message in PO file. 457: "\n/dev/sda6 /usr ext3 defaults,ro,nodev 0 ... WARNING: Fuzzy message in PO file. 487: "Be careful if setting /tmp noexec when you... WARNING: Fuzzy message in PO file. 494: "If you set /usr read-only you will not be ... WARNING: Fuzzy message in PO file. 501: "\n DPkg\n {\n Pre-Invoke { \"mount /usr -o remount,rw\"... WARNING: Un-translated message in PO file. 516: "Note that the Post-Invoke may fail with a \"/usr busy\" error m... WARNING: Un-translated message in PO file. 519: "\n# lsof +L1" WARNING: Un-translated message in PO file. 523: "Stop or restart these programs and run the Post-Invoke manually... WARNING: Fuzzy message in PO file. 532: "PAM (Pluggable Authentication Modules) allows system administra... WARNING: Un-translated message in PO file. 548: "The following description is far from complete, for more inform... WARNING: Fuzzy message in PO file. 551: "PAM offers you the possibility to go through several authentica... WARNING: Un-translated message in PO file. 555: "Password security in PAM" WARNING: Un-translated message in PO file. 558: "Review the /etc/pam.d/common-password, inc... WARNING: Un-translated message in PO file. 561: "You have to make sure that the pam_unix.so module uses the \"sh... WARNING: Un-translated message in PO file. 564: "The line with the definition of the pam_unix module will look s... WARNING: Un-translated message in PO file. 567: "\n password [success=1 default=ignore] pam_unix.so null... WARNING: Un-translated message in PO file. 573: "This definition:" WARNING: Un-translated message in PO file. 576: "Enforces password encryption when storing passwords, using the ... WARNING: Un-translated message in PO file. 579: "Enables password complexity checks (option obscuremin/etc/pam.d/lo... WARNING: Fuzzy message in PO file. 642: "\n session required pam_limits.so" WARNING: Fuzzy message in PO file. 647: "This restricts the system resources that users are allowed (see... WARNING: Un-translated message in PO file. 651: "Control of su in PAM" WARNING: Fuzzy message in PO file. 654: "If you want to protect su, so that only some... WARNING: Fuzzy message in PO file. 658: "\n auth requisite pam_wheel.so group=wheel debug" WARNING: Fuzzy message in PO file. 666: "If you want only certain users to authenticate at a PAM service... WARNING: Fuzzy message in PO file. 670: "\n auth required pam_listfile.so item=user sense=all... WARNING: Un-translated message in PO file. 675: "Temporary directories in PAM" WARNING: Un-translated message in PO file. 678: "Since there have been a number of so called insecure tempfile v... WARNING: Un-translated message in PO file. 681: "\n session optional pam_tmpdir.so" WARNING: Un-translated message in PO file. 685: "There has also been a discussion about adding this by default i... WARNING: Un-translated message in PO file. 688: "Configuration for undefined PAM applications" WARNING: Fuzzy message in PO file. 691: "Finally, but not least, create /etc/pam.d/otherany... WARNING: Un-translated message in PO file. 738: "There is a way to add resource limits to some shells (for examp... WARNING: Un-translated message in PO file. 741: "Resource limits are imposed by the kernel, but they need to be ... WARNING: Un-translated message in PO file. 744: "\n$ find /etc/pam.d/ \\! -name \"*.dpkg*\" | xargs -- grep limi... WARNING: Un-translated message in PO file. 748: "Commonly, login, ssh ... WARNING: Un-translated message in PO file. 751: "The specific limits settings you might want to enforce depend o... WARNING: Un-translated message in PO file. 754: "For example, the configuration example below enforces a 100 pro... WARNING: Un-translated message in PO file. 757: "\n* soft core 0\n* hard... WARNING: Un-translated message in PO file. 775: "These would be the limits a default user (including system daem... WARNING: Un-translated message in PO file. 778: "\n$ ulimit -a\ncore file size (blocks, -c) 0\ndata seg s... WARNING: Un-translated message in PO file. 794: "And these are the limits for an administrative user:" WARNING: Un-translated message in PO file. 797: "\n$ ulimit -a\ncore file size (blocks, -c) 0\ndata seg s... WARNING: Un-translated message in PO file. 816: "LASG in ... WARNING: Fuzzy message in PO file. 832: "The next step is to edit the basic configuration and action upo... WARNING: Fuzzy message in PO file. 836: "\n FAILLOG_ENAB yes" WARNING: Fuzzy message in PO file. 844: "\n LOG_UNKFAIL_ENAB no" WARNING: Un-translated message in PO file. 849: "If you set this variable to 'yes' it will record unknown userna... WARNING: Fuzzy message in PO file. 852: "\n SYSLOG_SU_ENAB yes" WARNING: Fuzzy message in PO file. 860: "\n SYSLOG_SG_ENAB yes" WARNING: Fuzzy message in PO file. 865: "The same as SYSLOG_SU_ENAB but applies to th... WARNING: Un-translated message in PO file. 869: "\n ENCRYPT_METHOD SHA512" WARNING: Un-translated message in PO file. 873: "As stated above, encrypted passwords greatly reduce the problem... WARNING: Fuzzy message in PO file. 876: "User login actions: edit /etc/pam.d/login" WARNING: Un-translated message in PO file. 880: "You can adjust the login configuration file to implement an str... WARNING: Un-translated message in PO file. 883: "\nauth optional pam_faildelay.so delay=3000000" WARNING: Un-translated message in PO file. 887: "Increasing the delay value to a higher val... WARNING: Un-translated message in PO file. 890: "In this file you can also set the system to present a message t... WARNING: Un-translated message in PO file. 893: "\n# auth required pam_issue.so issue=/etc/issue" WARNING: Un-translated message in PO file. 897: "If required by your security policy, this file can be used to s... WARNING: Un-translated message in PO file. 900: "setting rules for which users can access at which times, by ena... WARNING: Un-translated message in PO file. 903: "setup login sessions to use user limits as defined in /etc/motd and /... WARNING: Un-translated message in PO file. 921: "A convenient way to add all system accounts to the /e... WARNING: Un-translated message in PO file. 924: "\n$ awk -F : '{if ($3<1000) print $1}' /etc/passwd > /etc... WARNING: Fuzzy message in PO file. 937: "sudo allows the user to execute defined comm... WARNING: Fuzzy message in PO file. 950: "\n -:wheel:ALL EXCEPT LOCAL" WARNING: Un-translated message in PO file. 955: "Remember to enable the pam_access mo... WARNING: Fuzzy message in PO file. 964: "If users need to be created and the system can be accessed remo... WARNING: Fuzzy message in PO file. 968: "Debian currently provides in the unstable release (and might be... WARNING: Fuzzy message in PO file. 990: "\numask 077\nexec script -q -a \"/var/log/sessions/$USER\"" WARNING: Fuzzy message in PO file. 1007: "\numask 077\nexec script -q -a \"/var/log/sessions/$USER-`date ... WARNING: Fuzzy message in PO file. 1018: "If you want to review what does the user type in the shell (but... WARNING: Fuzzy message in PO file. 1022: "For example, for bash, the /etc/profile co... WARNING: Fuzzy message in PO file. 1026: "\n HISTFILE=~/.bash_history\n HISTSIZE=10000\n HISTFILESIZE=... WARNING: Fuzzy message in PO file. 1057: "For this to work, the user can only append information to umask setting is ... WARNING: Un-translated message in PO file. 1099: "If Debian's default value is too permissive for your system you... WARNING: Un-translated message in PO file. 1102: "This change is set by defining a proper umasklogin the U... WARNING: Un-translated message in PO file. 1108: "Don't forget to review and maybe modify the dotfiles under umasklibpam-umask package adjusts the... WARNING: Un-translated message in PO file. 1118: "\nsession optional pam_umask.so umask=077" WARNING: Un-translated message in PO file. 1122: "Finally, you should consider changing root's default 022 umask ... WARNING: Fuzzy message in PO file. 1128: "FIXME: Content needed. Describe the consequences of changing pa... WARNING: Fuzzy message in PO file. 1135: "some configuration files in /etc. However,... WARNING: Un-translated message in PO file. 1139: "find /etc -type f -a -perm 600 -a -uid 0... WARNING: Un-translated message in PO file. 1142: "as superuser." WARNING: Un-translated message in PO file. 1148: "some log files at /var/log. Note also that... WARNING: Un-translated message in PO file. 1151: "find /var/log -type f -a -perm 640" WARNING: Un-translated message in PO file. 1154: ") and some are even only available to the root user (try" WARNING: Un-translated message in PO file. 1157: "find /var/log -type f -a -perm\n 600 -a -uid 0see$HOME directories are create... WARNING: Fuzzy message in PO file. 1192: "You can change this behavior so that user creation provides dif... WARNING: Fuzzy message in PO file. 1196: "Users can still share information, but not directly in their Passwd does not allow non-interactive assign... WARNING: Fuzzy message in PO file. 1220: "A system administrator must, given a big number of users, check... WARNING: Fuzzy message in PO file. 1236: "because an attacker might be able to re-attach to a closed netw... WARNING: Fuzzy message in PO file. 1246: "If bash is the user shell, a system ... WARNING: Fuzzy message in PO file. 1262: "TCP wrappers were developed when there were no real packet filt... WARNING: Fuzzy message in PO file. 1275: "On the one hand, for services configured in /etc/inet... WARNING: Un-translated message in PO file. 1279: "To see which packages use tcpwrappers On older... WARNING: Un-translated message in PO file. 1282: "\n $ apt-cache rdepends libwrap0" WARNING: Fuzzy message in PO file. 1289: "Now, here comes a small trick, and probably the smallest intrus... WARNING: Fuzzy message in PO file. 1293: "\n ALL: ALL: SPAWN ( \\\n echo -e \"\\n\\\n TCP Wrappers... WARNING: Fuzzy message in PO file. 1325: "Debian GNU/Linux provides some tools to perform log analysis, m... WARNING: Fuzzy message in PO file. 1329: "\n daemon,mail.*;\\\n news.=crit;news.=err;news.=notice... WARNING: Fuzzy message in PO file. 1342: "To colorize the logs, you could take a look at col... WARNING: Fuzzy message in PO file. 1358: "Once this is done you might want to check the mails that are se... WARNING: Fuzzy message in PO file. 1365: "Debian comes with a standard syslog ... WARNING: Fuzzy message in PO file. 1378: "FIXME: It would be interesting to tell how a Debian system can ... WARNING: Un-translated message in PO file. 1385: "A loghost is a host which collects syslog data remotely over th... WARNING: Un-translated message in PO file. 1388: "syslogd -r" WARNING: Un-translated message in PO file. 1391: "and a new loghost is born. In order to do this permanently in D... WARNING: Fuzzy message in PO file. 1394: "\nSYSLOGD=\"\"" WARNING: Fuzzy message in PO file. 1402: "\nSYSLOGD=\"-r\"" WARNING: Fuzzy message in PO file. 1410: "\n facility.level @your_loghost" WARNING: Fuzzy message in PO file. 1418: "\n *.* @your_loghost" WARNING: Un-translated message in PO file. 1423: "into your syslog.conf. Logging remotely as... WARNING: Fuzzy message in PO file. 1429: "It is not only important to decide how alerts are used, but als... WARNING: Fuzzy message in PO file. 1436: "\n # find /var/log -type f -exec ls -l {} \\; | cut -c 17-35 ... WARNING: Un-translated message in PO file. 1466: "Linux Intrusion DetectionLinux Trustees<... WARNING: Un-translated message in PO file. 1472: "NSA Enhanced Linux (in package selinuxGrsecurity patch<... WARNING: Un-translated message in PO file. 1482: "The kernel-patch-adamantix provides ... WARNING: Fuzzy message in PO file. 1485: "cryptoloop-source. This patches allo... WARNING: Fuzzy message in PO file. 1489: "IPSEC kernel support (in package linux-patch-opens... WARNING: Un-translated message in PO file. 1493: "The following security kernel patches are only available for ol... WARNING: Un-translated message in PO file. 1496: "kernel-patch-int. This patch also ad... WARNING: Fuzzy message in PO file. 1506: "However, some patches have not been provided in Debian yet. If ... WARNING: Fuzzy message in PO file. 1513: "Buffer overflow is the name of a common at... WARNING: Un-translated message in PO file. 1520: "patch the kernel to prevent stack execution. You can use either... WARNING: Un-translated message in PO file. 1526: "recompile the source code to introduce proper checks that preve... WARNING: Fuzzy message in PO file. 1529: "Debian GNU/Linux, as of the 3.0 release, provides software to i... WARNING: Fuzzy message in PO file. 1533: "Notice that even if Debian provided a compiler which featured s... WARNING: Fuzzy message in PO file. 1537: "In any case, be aware that even these workarounds might not pre... WARNING: Un-translated message in PO file. 1541: "If you want to test out your buffer overflow protection once yo... WARNING: Un-translated message in PO file. 1547: "Kernel patches related to buffer overflows include the Openwall... WARNING: Fuzzy message in PO file. 1553: "The use of tools to detect buffer overflows requires, in any ca... WARNING: Fuzzy message in PO file. 1560: "During normal system administration one usually needs to transf... WARNING: Fuzzy message in PO file. 1570: "File system limits and control" WARNING: Fuzzy message in PO file. 1601: "Enabling quota for the respective file systems is as easy as mo... WARNING: Un-translated message in PO file. 1605: "touch\n/home/quota.user /home/quota.group/home file system)." WARNING: Un-translated message in PO file. 1612: "Restart quota by doing" WARNING: Un-translated message in PO file. 1615: "/etc/init.d/quota stop;/etc/init.d/quota\n st... WARNING: Un-translated message in PO file. 1619: ". Now quota should be running, and quota sizes can be set." WARNING: Un-translated message in PO file. 1622: "Editing quotas for a specific user can be done by" WARNING: Un-translated message in PO file. 1625: "edquota -u <user>" WARNING: Un-translated message in PO file. 1628: ". Group quotas can be modified with" WARNING: Un-translated message in PO file. 1631: "edquota -g <group>" WARNING: Un-translated message in PO file. 1634: ". Then set the soft and hard quota and/or inode quotas as neede... WARNING: Fuzzy message in PO file. 1637: "For more information about quotas, read the quota man page, and... WARNING: Un-translated message in PO file. 1641: "The ext2 filesystem specific attributes (chattrlcap CAP_LINUX_IMMUTABLEsxid,... WARNING: Fuzzy message in PO file. 1698: "You might want to use locate to index the wh... WARNING: Un-translated message in PO file. 1702: "You might want to use bsign or checksecurity package pro... WARNING: Fuzzy message in PO file. 1711: "The default behavior does not send this information to the supe... WARNING: Fuzzy message in PO file. 1718: "FIXME: More (Debian-specific) content needed." WARNING: Un-translated message in PO file. 1725: "Many features of the kernel can be modified while running by ec... WARNING: Un-translated message in PO file. 1728: "/sbin/sysctl -w variable=value" WARNING: Un-translated message in PO file. 1731: "(see sysctlWindows emulator because it acts... WARNING: Fuzzy message in PO file. 1746: "\nnet/ipv4/icmp_echo_ignore_all = 1" WARNING: Fuzzy message in PO file. 1754: "\n/proc/sys/net/ipv4/conf/all/log_martians = 1" WARNING: Fuzzy message in PO file. 1759: "For more information on what things can be done with ... WARNING: Fuzzy message in PO file. 1763: "Configuring syncookies" WARNING: Fuzzy message in PO file. 1770: "\nnet/ipv4/tcp_syncookies = 1" WARNING: Fuzzy message in PO file. 1775: "If you want to change this option each time the kernel is worki... WARNING: Fuzzy message in PO file. 1779: "\necho 1 > /proc/sys/net/ipv4/tcp_syncookies " WARNING: Fuzzy message in PO file. 1787: "\n$ sysctl -A |grep syncookies\nnet/ipv4/tcp_syncookies = 1" WARNING: Un-translated message in PO file. 1804: "There are actually two ways to configure your network at boot t... WARNING: Un-translated message in PO file. 1807: "An example of a /etc/sysctl.conf configura... WARNING: Un-translated message in PO file. 1810: "\n#\n# /etc/sysctl.conf - Configuration file for setting system... WARNING: Fuzzy message in PO file. 1866: "To use the script you need to first create the script, for exam... WARNING: Fuzzy message in PO file. 1870: "\nauto eth0\niface eth0 inet static\n address xxx.xxx.xx... WARNING: Un-translated message in PO file. 1889: "In this example, before the interface eth0 is enabled the scrip... WARNING: Fuzzy message in PO file. 1892: "\n#!/bin/sh -e\n# Script-name: /etc/network/interface-secure\n#... WARNING: Un-translated message in PO file. 1958: "Notice that you can actually have per-interface scripts that wi... WARNING: Un-translated message in PO file. 1961: "\npre-up /etc/network/interface-secure $IFACE" WARNING: Un-translated message in PO file. 1965: "And use a script which will only apply changes to a specific in... WARNING: Un-translated message in PO file. 1968: "\n#!/bin/sh -e\n# Script-name: /etc/network/interface-secure\n#... WARNING: Fuzzy message in PO file. 2009: "An alternative solution is to create an init.d The fact that thi... WARNING: Fuzzy message in PO file. 2067: "kernel patching. There are some patches availa... WARNING: Fuzzy message in PO file. 2071: "Along this text there will be many occasions in which it is sho... WARNING: Fuzzy message in PO file. 2075: "FIXME: Comments on Bugtraq indicate there is a Linux specific m... WARNING: Fuzzy message in PO file. 2088: "As you know the ARP protocol is used to link IP addresses to MA... WARNING: Fuzzy message in PO file. 2092: "Those attacks (ARP cache poisoning, ARP spoofing...) allow the ... WARNING: Fuzzy message in PO file. 2099: "Use a static ARP cache. You can set up \"static\" entries in yo... WARNING: Fuzzy message in PO file. 2103: "\n arp -s host_name hdwr_addr \n " WARNING: Fuzzy message in PO file. 2110: "By setting static entries for each important host in your netwo... WARNING: Fuzzy message in PO file. 2114: "Detect suspicious ARP traffic. You can use arpwatc... WARNING: Fuzzy message in PO file. 2124: "Before putting the system into production system you could take... WARNING: Fuzzy message in PO file. 2128: "For this you can use a writable removable-media that can be set... WARNING: Un-translated message in PO file. 2135: "\n#!/bin/bash\n/bin/mount /dev/fd0 /mnt/floppy\ntrap \"/bin/umo... WARNING: Un-translated message in PO file. 2168: "Note that the md5sum binary (and sha1sum, if available) is plac... WARNING: Fuzzy message in PO file. 2171: "The snapshot does not include the files under /var/li... WARNING: Un-translated message in PO file. 2175: "the md5sums files include the md5sum of all files provided by t... WARNING: Un-translated message in PO file. 2178: "not all Debian packages provide md5sums for the files installed... WARNING: Un-translated message in PO file. 2181: "\n# debsums --generate=missing,keep" WARNING: Un-translated message in PO file. 2188: "If you do not want to setup a manual check you can always use a...  Merging zh-CN/05_services.po >> en-US/05_services.xml -> tmp/zh-CN/xml_tmp//05_services.xml WARNING: Fuzzy message in PO file. 26: "Restricting services so that they can only be accessed from a g... WARNING: Fuzzy message in PO file. 30: "Regarding the services running from inetd (<... WARNING: Fuzzy message in PO file. 75: "ListenAddress 192.168.0.1 Have ssh listen on... WARNING: Fuzzy message in PO file. 79: "PermitRootLogin no Try not to permit Root Lo... WARNING: Un-translated message in PO file. 83: "Port 666 or ListenAddress 192.168.0... WARNING: Un-translated message in PO file. 86: "PermitEmptyPasswords no Empty passwords make... WARNING: Fuzzy message in PO file. 89: "AllowUsers alex ref me@somewhere Allow only ... WARNING: Fuzzy message in PO file. 93: "AllowGroups wheel admin Allow only certain g... WARNING: Fuzzy message in PO file. 97: "PasswordAuthentication yes It is completely ... WARNING: Fuzzy message in PO file. 101: "Disable any form of authentication you do not really need, if y... WARNING: Un-translated message in PO file. 105: "Protocol 2 Disable the protocol version 1, s... WARNING: Fuzzy message in PO file. 108: "Banner /etc/some_filep... WARNING: Fuzzy message in PO file. 124: "You can read more information on how to set up SSH with PAM sup... WARNING: Fuzzy message in PO file. 134: "In you can find several opt... WARNING: Fuzzy message in PO file. 147: "If you do not want users to transfer files... WARNING: Un-translated message in PO file. 151: "You can also chroot users (using libpam-chrootscponlysarg - Squid Analysis Report Generat... WARNING: Fuzzy message in PO file. 281: "When using Squid in Accelerator Mode it acts as a web server to... WARNING: Fuzzy message in PO file. 291: "\nDefaultRoot ~" WARNING: Fuzzy message in PO file. 296: "Restart ProFTPd by /etc/init.d/proftpd restart/etc/X11/xdm/Xserverscups, the print data is transferr... WARNING: Fuzzy message in PO file. 451: "This configuration file can be modified to add some more featur... WARNING: Fuzzy message in PO file. 455: "FIXME: Add more content (the article on exim, y... WARNING: Fuzzy message in PO file. 528: "If you want a relay-only setup, however, you can consider chang... WARNING: Fuzzy message in PO file. 535: "If you want to give remote access to mailboxes there are a numb... WARNING: Fuzzy message in PO file. 542: "Of the IMAP servers in Debian the cyrus serv... WARNING: Fuzzy message in PO file. 546: "Also, you might want to run an IMAP server that does not need v... WARNING: Fuzzy message in PO file. 550: "FIXME: Check: uw-imapd might be conf... WARNING: Fuzzy message in PO file. 557: "Reading/receiving mail is the most common clear-text protocol. ... WARNING: Fuzzy message in PO file. 580: "The preconnect is the important line. It fires up an ssh sessio... WARNING: Fuzzy message in PO file. 592: "This command wraps the provided daemon (-l) to the port (-d) an... WARNING: Fuzzy message in PO file. 602: "configuring the daemon itself properly so it cannot be misused ... WARNING: Fuzzy message in PO file. 606: "limit the access of the daemon to the server itself so if it is... WARNING: Fuzzy message in PO file. 613: "You should restrict some of the information that is served from... WARNING: Fuzzy message in PO file. 620: "\noptions {\n allow-query { 192.168.1/24; } ;\n ... WARNING: Fuzzy message in PO file. 644: "The version.bind record in the chaos class contains the version... WARNING: Fuzzy message in PO file. 648: " options { ... various options here ...\nversion \"Not availabl... WARNING: Fuzzy message in PO file. 660: "\nacl internal {\n 127.0.0.1/32; // localhost\... WARNING: Fuzzy message in PO file. 781: "Please (again) check the Bug Tracking System regarding Bind, sp... WARNING: Fuzzy message in PO file. 788: "Regarding limiting BIND's privileges you must be aware that if ... WARNING: Un-translated message in PO file. 792: "Notice, in any case, that this only applies to BIND version 8. ... WARNING: Fuzzy message in PO file. 798: "\naddgroup named\nadduser --system --home /home/named --no-crea... WARNING: Fuzzy message in PO file. 812: "\nadduser --system --ingroup named named" WARNING: Fuzzy message in PO file. 817: "Now you can either edit /etc/init.d/bind w... WARNING: Fuzzy message in PO file. 821: "\nstart-stop-daemon --start" WARNING: Fuzzy message in PO file. 826: "toNote that depending on your bind version you ... WARNING: Fuzzy message in PO file. 830: "\nstart-stop-daemon --start --quiet --exec /usr/sbin/named -- -... WARNING: Un-translated message in PO file. 835: "Or you can change (create it if it does not exit) the default c... WARNING: Un-translated message in PO file. 838: "\nOPTIONS=\"-u named -g named\"" WARNING: Fuzzy message in PO file. 845: "\n-rw-r----- 1 root named 77 Jan 4 01:02 rndc.... WARNING: Fuzzy message in PO file. 853: "\n$ mkdir /var/run/named\n$ chown named.named /var/run/named\n$... WARNING: Fuzzy message in PO file. 874: "Also, in order to avoid running anything as root, change the /etc/ini... WARNING: Fuzzy message in PO file. 909: "\nSep 4 15:11:08 nexus named[13439]: group = named\nSep 4 15:... WARNING: Fuzzy message in PO file. 917: "Voilà! Your named now does not run as root... WARNING: Fuzzy message in PO file. 924: "To achieve maximum BIND security, now build a chroot jail (see ... WARNING: Fuzzy message in PO file. 928: "\ndev/null\netc/bind/ - should hold named.conf and all th... WARNING: Fuzzy message in PO file. 951: "Also, you can find more information regarding Bind chrooting in... WARNING: Un-translated message in PO file. 955: "If you are setting up a full chroot jail (i.e. not just syslogd listen on $... WARNING: Un-translated message in PO file. 996: "\n$ apt-get source bind\n# apt-get build-dep bind\n$ cd bind-8.... WARNING: Fuzzy message in PO file. 1008: "After installation, you will need to move around the files to t... WARNING: Fuzzy message in PO file. 1015: "FIXME: Merge info from ... WARNING: Un-translated message in PO file. 1076: "However, if the module was linked statically (you can list the ... WARNING: Fuzzy message in PO file. 1079: "\nUserdir disabled" WARNING: Fuzzy message in PO file. 1084: "An attacker might still do user enumeration, since the answer o... WARNING: Fuzzy message in PO file. 1091: "Apache logfiles, since 1.3.22-1, are owned by user 'root' and g... WARNING: Fuzzy message in PO file. 1098: "Apache files are located under /var/www. J... WARNING: Fuzzy message in PO file. 1120: "xfingerd - BSD-like finger daemon with qmail support." WARNING: Fuzzy message in PO file. 1130: "chroot is one of the most powerful possibili... WARNING: Fuzzy message in PO file. 1134: "Many services running as daemons could benefit from this sort o... WARNING: Fuzzy message in PO file. 1138: "This includes: name servers (such as bind), ... WARNING: Fuzzy message in PO file. 1154: "There are several programs to chroot automatically servers and ... WARNING: Fuzzy message in PO file. 1158: "Some of these tools can be used to set up the chroot environmen... WARNING: Fuzzy message in PO file. 1177: "You should not use NIS, the Network Information Service, if pos... WARNING: Fuzzy message in PO file. 1181: "If you need password sharing between machines, you might want t... WARNING: Fuzzy message in PO file. 1185: "You can read more about NIS security in the portmap packa... WARNING: Un-translated message in PO file. 1240: "The Debian GNU/Linux operating system has the built-in capabili... WARNING: Fuzzy message in PO file. 1246: "You can use firewall rules as a way to secure the access to you... WARNING: Fuzzy message in PO file. 1262: "outgoing connections are only allowed to services used by your ... WARNING: Fuzzy message in PO file. 1275: "A Debian firewall can also be installed in order to protect, wi... WARNING: Fuzzy message in PO file. 1279: "You can even set up a Debian GNU/Linux box as a bridge firewall... WARNING: Un-translated message in PO file. 1283: "Setting up a firewall" WARNING: Un-translated message in PO file. 1286: "The default Debian installation, unlike other Linux distributio... WARNING: Fuzzy message in PO file. 1289: "Of course, the configuration of the firewall is always system a... WARNING: Fuzzy message in PO file. 1293: "The tools can easily be misused, causing enormous amo... WARNING: Un-translated message in PO file. 1300: "If you do not have a clue on how to set up your firewall rules ... WARNING: Un-translated message in PO file. 1303: "If you do not know much about firewalling you should start by r... WARNING: Fuzzy message in PO file. 1306: "Using firewall packages" WARNING: Fuzzy message in PO file. 1310: "Setting up manually a firewall can be complicated for novice (a... WARNING: Un-translated message in PO file. 1317: "For desktop systems:" WARNING: Un-translated message in PO file. 1320: "firestarter, a GNOME application ori... WARNING: Un-translated message in PO file. 1323: "guarddog, a KDE based firewall confi... WARNING: Un-translated message in PO file. 1326: "knetfilter, a KDE GUI to manage fire... WARNING: Un-translated message in PO file. 1329: "fireflier, an interactive tool to create iptables rules based o... WARNING: Un-translated message in PO file. 1332: "For servers (headless) systems:" WARNING: Un-translated message in PO file. 1335: "fwbuilder, an object oriented GUI wh... WARNING: Un-translated message in PO file. 1338: "shorewall, a firewall configuration ... WARNING: Un-translated message in PO file. 1341: "bastille, this hardening application... WARNING: Un-translated message in PO file. 1344: "Lots of other iptables frontends come with Debian; an extensive... WARNING: Un-translated message in PO file. 1347: "Notice that some of the packages outlined previously will intro... WARNING: Un-translated message in PO file. 1350: "As mentioned before, some programs, like firestart... WARNING: Un-translated message in PO file. 1353: "There is yet another type of firewall application: application ... WARNING: Un-translated message in PO file. 1356: "Manual init.d configuration" WARNING: Un-translated message in PO file. 1359: "Another possibility is to manually configure your firewall rule... WARNING: Un-translated message in PO file. 1362: "Review the script below and adapt it to your needs." WARNING: Un-translated message in PO file. 1365: "Test the script and review the syslog messages to see which tra... WARNING: Un-translated message in PO file. 1368: "Move the script to /etc/init.d/myfirewall" WARNING: Un-translated message in PO file. 1371: "The below script takes advantage of Debian's use (since Squeeze... WARNING: Un-translated message in PO file. 1374: "\n# insserv myfirewall" WARNING: Un-translated message in PO file. 1378: "This is the sample firewall script:" WARNING: Un-translated message in PO file. 1381: "\n#!/bin/sh\n### BEGIN INIT INFO\n# Provides: myfirewa... WARNING: Un-translated message in PO file. 1544: "Instead of including all of the iptables rules in the init.d sc... WARNING: Un-translated message in PO file. 1547: "Configuring firewall rules through ifup" WARNING: Un-translated message in PO file. 1550: "You can use also the network configuration in /etc/ne... WARNING: Un-translated message in PO file. 1553: "Create your firewalling ruleset for when the interface is activ... WARNING: Un-translated message in PO file. 1556: "Save your ruleset with iptables-save to a fi... WARNING: Un-translated message in PO file. 1559: "Configure /etc/network/interfaces to use t... WARNING: Un-translated message in PO file. 1562: "\niface eth0 inet static\n address x.x.x.x\n [.. ... WARNING: Un-translated message in PO file. 1570: "You can optionally also setup a set of rules to be applied when... WARNING: Un-translated message in PO file. 1573: "\n post-down iptables-restore < /etc/iptables.down.rules" WARNING: Un-translated message in PO file. 1577: "For more advanced firewall configuration scripts through > en-US/06_automatic.xml -> tmp/zh-CN/xml_tmp//06_automatic.xml WARNING: Fuzzy message in PO file. 17: "After reading through all the information in the previous chapt... WARNING: Fuzzy message in PO file. 21: "Since woody (Debian 3.0) there are two specific packages that a... WARNING: Un-translated message in PO file. 28: "The harden package tries to make it more eas... WARNING: Fuzzy message in PO file. 31: "harden-tools: tools to enhance system securi... WARNING: Fuzzy message in PO file. 35: "harden-environment: helps configure a harden... WARNING: Fuzzy message in PO file. 39: "harden-servers: removes servers considered i... WARNING: Fuzzy message in PO file. 43: "harden-clients: removes clients considered i... WARNING: Fuzzy message in PO file. 47: "harden-remoteaudit: tools to remotely audit ... WARNING: Un-translated message in PO file. 51: "harden-nids: helps to install a network intr... WARNING: Un-translated message in PO file. 54: "harden-surveillance: helps to install tools ... WARNING: Un-translated message in PO file. 57: "Useful packages which are not a dependence:" WARNING: Fuzzy message in PO file. 60: "harden-doc: provides this same manual and ot... WARNING: Un-translated message in PO file. 64: "harden-development: development tools for cr... WARNING: Fuzzy message in PO file. 67: "Be careful because if you have software you need (and which you... WARNING: Fuzzy message in PO file. 71: "\n# apt-get install telnetd \nThe following packages will be RE... WARNING: Fuzzy message in PO file. 94: "> en-US/07_infrastructure.xml -> tmp/zh-CN/xml_tmp//07_infrastructure.xml WARNING: Fuzzy message in PO file. 20: "Debian has a Security Team, that handles security in the debsecan uses the information in... WARNING: Un-translated message in PO file. 154: "Packages in the security archive are autobuilt, just like the r... WARNING: Un-translated message in PO file. 157: "Thus, the security upload archive works with the following proc... WARNING: Fuzzy message in PO file. 163: "Someone fixes the problem, and makes an upload to security-mast... WARNING: Fuzzy message in PO file. 182: "updates the Packages, SourcesRelease file includes the MD5 sum of <... WARNING: Fuzzy message in PO file. 230: "This signed Release file is downloaded by ... WARNING: Fuzzy message in PO file. 234: "When a package is going to be installed, it is first downloaded... WARNING: Fuzzy message in PO file. 238: "The signed Release file is checked (signat... WARNING: Fuzzy message in PO file. 242: "If the MD5 sum from the downloaded package is the same as the o... WARNING: Un-translated message in PO file. 249: "This scheme is etch<... WARNING: Un-translated message in PO file. 261: "These changes are based on the patch for apt... WARNING: Un-translated message in PO file. 264: "Secure apt works by checking the distribution through the gpg is the tool used in secure apt to sign f... WARNING: Un-translated message in PO file. 297: "apt-key is a program that is used to manage ... WARNING: Un-translated message in PO file. 300: "Release checksums" WARNING: Un-translated message in PO file. 303: "A Debian archive contains a Release file, ... WARNING: Un-translated message in PO file. 306: "\nMD5Sum:\n 6b05b392f792ba5a436d590c129de21f 3453 Pa... WARNING: Un-translated message in PO file. 315: "The Release files also include SHA-1 check... WARNING: Un-translated message in PO file. 318: "Now if we look inside a Packages file, we'... WARNING: Un-translated message in PO file. 321: "\n Package: uqm\n Priority: optional\n ...\n Filena... WARNING: Un-translated message in PO file. 331: "These two checksums can be used to verify that you have downloa... WARNING: Un-translated message in PO file. 334: "None of this is new in secure apt, but it does provide the foun... WARNING: Un-translated message in PO file. 337: "Verification of the Release file" WARNING: Un-translated message in PO file. 340: "To verify the Release file, a gpg signatur... WARNING: Un-translated message in PO file. 343: "\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.1 (GNU/Lin... WARNING: Un-translated message in PO file. 354: "Check of Release.gpg by aptRelease.gpg fi... WARNING: Un-translated message in PO file. 360: "\nW: GPG error: http://ftp.us.debian.org testing Release: The f... WARNING: Un-translated message in PO file. 366: "Note that the second half of the long number is the key id of t... WARNING: Un-translated message in PO file. 369: "If you ignore that warning and try to install a package later, ... WARNING: Un-translated message in PO file. 372: "\nWARNING: The following packages cannot be authenticated!\n l... WARNING: Un-translated message in PO file. 379: "If you say Y here you have no way to know if the file you're ge... WARNING: Un-translated message in PO file. 382: "Note that you can disable these checks by running apt with --al... WARNING: Un-translated message in PO file. 385: "It's also worth noting that newer versions of the Debian instal... WARNING: Un-translated message in PO file. 388: "How to tell apt what to trust" WARNING: Un-translated message in PO file. 391: "So the security of the whole system depends on there being a apt trust the official Debian... WARNING: Un-translated message in PO file. 412: "Finding the key for a repository" WARNING: Un-translated message in PO file. 415: "The debian-archive-keyring package is used to distribute keys t... WARNING: Un-translated message in PO file. 418: "For other archives, there is not yet a standard location where ... WARNING: Un-translated message in PO file. 421: "The Debian archive signing key is available at gpg itself has a standard way to distribute ... WARNING: Un-translated message in PO file. 427: "\n$ gpg --keyserver pgpkeys.mit.edu --recv-key 2D230C5F\ngpg: r... WARNING: Un-translated message in PO file. 437: "You can then export that key from your own keyring and feed it ... WARNING: Un-translated message in PO file. 440: "\n$ gpg -a --export 2D230C5F | sudo apt-key add -\ngpg: no ulti... WARNING: Un-translated message in PO file. 447: "The \"gpg: no ultimately trusted keys found\" warning means tha... WARNING: Un-translated message in PO file. 450: "Safely adding a key" WARNING: Un-translated message in PO file. 453: "By adding a key to apt's keyring, you're telling apt to trust e... WARNING: Un-translated message in PO file. 456: "It's good to be paranoid in security, but verifying things from... WARNING: Un-translated message in PO file. 459: "If you can't afford this level of paranoia, do whatever feels a... WARNING: Un-translated message in PO file. 462: "Verifying key integrity" WARNING: Un-translated message in PO file. 465: "You can verify the fingerprint as well as the signatures on the... WARNING: Un-translated message in PO file. 468: "\n$ GET http://ftp-master.debian.org/ziyi_key_2006.asc | gpg --... WARNING: Un-translated message in PO file. 489: "and then ... WARNING: Un-translated message in PO file. 510: "In January 2006, a new key for 2006 was made and the Release fi... WARNING: Un-translated message in PO file. 513: "Known release checking problems" WARNING: Un-translated message in PO file. 516: "One not so obvious problem is that if your clock is very far of... WARNING: Un-translated message in PO file. 519: "\nW: GPG error: http://archive.progeny.com sid Release: Unknown... WARNING: Un-translated message in PO file. 523: "Although apt-key list will make the problem ... WARNING: Un-translated message in PO file. 526: "\ngpg: key 2D230C5F was created 192324901 seconds in the future... WARNING: Un-translated message in PO file. 534: "If it's set to a date too far in the future, apt will treat the... WARNING: Un-translated message in PO file. 537: "Another problem you may encouter if using testing or unstable i... WARNING: Un-translated message in PO file. 540: "Manual per distribution release check" WARNING: Fuzzy message in PO file. 543: "In case you want to add now the additional security checks and ... WARNING: Fuzzy message in PO file. 550: "\n# apt-get update\n# apt-check-sigs\n(...results...)\n# apt-ge... WARNING: Fuzzy message in PO file. 566: "get the keys the archive software uses to sign Releas... WARNING: Fuzzy message in PO file. 570: "\n gpg --no-default-keyring --keyring trustedkeys.gpg --import... WARNING: Fuzzy message in PO file. 580: "be prepared to ignore the fact that Debian security updates don... WARNING: Fuzzy message in PO file. 590: "\n#!/bin/bash\n\n# Copyright (c) 2001 Anthony Towns <ajt@deb... WARNING: Fuzzy message in PO file. 1085: "\n@@ -37,7 +37,7 @@\n local LOOKUP=\"$2\"\n\n Y=\... WARNING: Un-translated message in PO file. 1127: "Release check of non Debian sources" WARNING: Fuzzy message in PO file. 1130: "Notice that, when using the latest apt version (with ... WARNING: Fuzzy message in PO file. 1134: "\n$ rm -f dists/unstable/Release\n$ apt-ftparchive release dist... WARNING: Fuzzy message in PO file. 1148: "The additional scheme of signing each and every packages allows... WARNING: Un-translated message in PO file. 1152: "This package signing scheme can be implemented using d... WARNING: Fuzzy message in PO file. 1155: "Latest dpkg versions (since 1.9.21) incorpor...  Merging zh-CN/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/zh-CN/xml_tmp//08_sec-tools.xml WARNING: Fuzzy message in PO file. 20: "Debian provides also a number of security tools that can make a... WARNING: Fuzzy message in PO file. 30: "The tools provided by Debian to perform remote vulnerability as... WARNING: Un-translated message in PO file. 40: "nikto (whisker's ... WARNING: Fuzzy message in PO file. 46: "nikto is a web-only vulnerability as... WARNING: Un-translated message in PO file. 56: "nmap" WARNING: Un-translated message in PO file. 59: "xprobe" WARNING: Un-translated message in PO file. 62: "p0f" WARNING: Un-translated message in PO file. 65: "knocker" WARNING: Un-translated message in PO file. 68: "isic" WARNING: Un-translated message in PO file. 71: "hping2" WARNING: Un-translated message in PO file. 74: "icmpush" WARNING: Un-translated message in PO file. 77: "nbtscan (for SMB /NetBIOS audits)" WARNING: Un-translated message in PO file. 80: "fragrouter" WARNING: Un-translated message in PO file. 83: "strobe (in the netdiagirpas" WARNING: Fuzzy message in PO file. 89: "While xprobe provide only remote ope... WARNING: Fuzzy message in PO file. 93: "Designed specifically for SMB networks, nbtscantunnelv (non-US section)" WARNING: Un-translated message in PO file. 162: "openswan (... WARNING: Fuzzy message in PO file. 273: "mailscanner an e-mail gateway virus ... WARNING: Fuzzy message in PO file. 280: "clamav as the only ... WARNING: Un-translated message in PO file. 304: "Some other free software antivirus projects which might be incl... WARNING: Un-translated message in PO file. 307: "FIXME: Is there a package that provides a script to download th... WARNING: Fuzzy message in PO file. 310: "FIXME: Check if scannerdaemon is the same as the open antivirus... WARNING: Un-translated message in PO file. 314: "However, Debian will never provide propiet... WARNING: Fuzzy message in PO file. 317: "For more information on how to set up a virus detection system ... WARNING: Un-translated message in PO file. 339: "icedove (rebranded version of Mozill... WARNING: Fuzzy message in PO file. 351: "Key servers allow you to download published public keys so that... WARNING: Fuzzy message in PO file. 355: "\nkeyserver wwwkeys.pgp.net" WARNING: Un-translated message in PO file. 366: "> en-US/09_developer.xml -> tmp/zh-CN/xml_tmp//09_developer.xml WARNING: Un-translated message in PO file. 14: "Developer's Best Practices for OS Security" WARNING: Un-translated message in PO file. 17: "This chapter introduces some best secure coding practices for d... WARNING: Un-translated message in PO file. 20: "Best practices for security review and design" WARNING: Un-translated message in PO file. 23: "Developers that are packaging software should make a best effor... WARNING: Un-translated message in PO file. 26: "In order to do so, they should make their best to review the so... WARNING: Un-translated message in PO file. 29: "The programming bugs which lead to security bugs typically incl... WARNING: Un-translated message in PO file. 32: "Some of these issues might not be easy to spot unless you are a... WARNING: Fuzzy message in PO file. 35: "There are a set of tools available to assist to the security co... WARNING: Un-translated message in PO file. 39: "When packaging software developers have to make sure that they ... WARNING: Un-translated message in PO file. 42: "The software runs with the minimum privileges it needs:" WARNING: Un-translated message in PO file. 45: "The package does install binaries setuid or setgid. Li... WARNING: Un-translated message in PO file. 48: "The daemons the package provide run with a low privilege user (... WARNING: Un-translated message in PO file. 51: "Programmed (i.e., cron) tasks running in the... WARNING: Un-translated message in PO file. 54: "If you have to do any of the above make sure the programs that ... WARNING: Un-translated message in PO file. 57: "For more information, specific to secure programming, make sure... WARNING: Un-translated message in PO file. 60: "Creating users and groups for software daemons" WARNING: Fuzzy message in PO file. 63: "If your software runs a daemon that does not need root privileg... WARNING: Fuzzy message in PO file. 67: "In the first case, you need to ask for a user or group id to th... WARNING: Un-translated message in PO file. 71: "In the second case, you need to create the system user either i... WARNING: Un-translated message in PO file. 74: "The following example code creates the user and group the daemo... WARNING: Un-translated message in PO file. 77: "\n[...]\ncase \"$1\" in\n install|upgrade)\n\n # If the packa... WARNING: Un-translated message in PO file. 143: "You have to make sure that the init.d script file:" WARNING: Un-translated message in PO file. 146: "Starts the daemon dropping privileges: if the software does not... WARNING: Un-translated message in PO file. 149: "Stops the daemon only if the user id matches, you can use the <... WARNING: Un-translated message in PO file. 152: "Does not run if either the user or the group do not exist:" WARNING: Un-translated message in PO file. 155: "\n if ! getent passwd | grep -q \"^server_userpostrm... WARNING: Un-translated message in PO file. 173: "Running programs with a user with limited privileges makes sure...  Merging zh-CN/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/zh-CN/xml_tmp//10_before-compromise.xml WARNING: Un-translated message in PO file. 17: "Keep your system secure" WARNING: Un-translated message in PO file. 20: "You should strive to keep your system secure by monitoring its ... WARNING: Un-translated message in PO file. 23: "Tracking security vulnerabilities" WARNING: Un-translated message in PO file. 26: "Although most administrators are aware of security vulnerabilit... WARNING: Un-translated message in PO file. 29: "This typically includes subscribing to the announcement mailing... WARNING: Un-translated message in PO file. 32: "In order to track known vulnerabilities affecting the Debian di... WARNING: Un-translated message in PO file. 35: "The tracker has searchable interfaces (by lenny Debian provides and... WARNING: Un-translated message in PO file. 114: "In a stable system updates are only available when a security p... WARNING: Un-translated message in PO file. 117: "The notification is not intrusive and users are not forced to i... WARNING: Un-translated message in PO file. 120: "This application works by checking the package database and com... WARNING: Un-translated message in PO file. 123: "Apt installs such a task (/etc/cro... WARNING: Un-translated message in PO file. 126: "If the system is set to download the packages list daily but no... WARNING: Un-translated message in PO file. 129: "\nAPT::Periodic::Update-Package-Lists \"1\";\nAPT::Periodic::Do... WARNING: Un-translated message in PO file. 135: "You can use a different cron task, such as the one installed by... WARNING: Un-translated message in PO file. 138: "Users of the KDE desktop environment will probably prefer to in... WARNING: Un-translated message in PO file. 144: "Another method for automatic security updates is the use of debsecan program evaluates the security ... WARNING: Un-translated message in PO file. 160: "Upon installing the Debian package debsecan,... WARNING: Un-translated message in PO file. 163: "Notice, however, that the Security Team tracks many vulnerabili... WARNING: Un-translated message in PO file. 166: "More information is available at the apticron, which, similarly... WARNING: Un-translated message in PO file. 176: "You might also want to take a look at unstableapt so that those packages that yo... WARNING: Un-translated message in PO file. 245: "To pin the packages under a given release, you must edit cron-apt as described in -y option will have aptdebconf so no questions will be as... WARNING: Fuzzy message in PO file. 292: "If you have a mixed distribution, that is, a stablesnort is a flexible packet sniffer or logger... WARNING: Fuzzy message in PO file. 343: "Debian's snort package has many security che... WARNING: Fuzzy message in PO file. 347: "There are other, simpler tools that can be used to detect netwo... WARNING: Fuzzy message in PO file. 351: "You can test any of these tools with the Debian package tiger is an older intrusion detection tool w... WARNING: Fuzzy message in PO file. 365: "Log analysis tools, such as logcheck can als... WARNING: Fuzzy message in PO file. 393: "The advantage of this kind of defense is that it prevents damag... WARNING: Fuzzy message in PO file. 400: "lcap - A user friendly interface to remove <... WARNING: Fuzzy message in PO file. 413: "Detection of some root-kits in Debian can be accomplished with ... WARNING: Fuzzy message in PO file. 417: "Genius/Paranoia Ideas - what you could do" WARNING: Fuzzy message in PO file. 421: "This is probably the most unstable and funny section, since I h... WARNING: Fuzzy message in PO file. 437: "Logging through serial cable (contributed by Gaby Schilders). A... WARNING: Fuzzy message in PO file. 441: "Change file attributes using chattr (taken f... WARNING: Fuzzy message in PO file. 445: "This strategy will help limit the damage that you can do when l... WARNING: Fuzzy message in PO file. 452: "One inconvenience of this strategy arises during building and i... WARNING: Fuzzy message in PO file. 468: "Debian GNU/Linux systems can easily be used to setup a honeynet... WARNING: Fuzzy message in PO file. 475: "syslog-ng, useful for sending logs from the ... WARNING: Fuzzy message in PO file. 479: "snort, to set up capture of all the incoming... WARNING: Fuzzy message in PO file. 483: "osh, a SETUID root, security enhanced, restr... WARNING: Un-translated message in PO file. 487: "Of course, all the daemons you will be using for your fake serv... WARNING: Fuzzy message in PO file. 490: "Integrity checkers (see ) and T... WARNING: Un-translated message in PO file. 494: "honeyd and farpd to setup... WARNING: Un-translated message in PO file. 497: "tinyhoneypot to setup a simple honeypot serv... WARNING: Un-translated message in PO file. 500: "If you cannot use spare systems to build up the honeypots and t... WARNING: Fuzzy message in PO file. 503: "You can read more about building honeypots in Lanze Spitzner's ...  Merging zh-CN/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/zh-CN/xml_tmp//11_after-compromise.xml WARNING: Fuzzy message in PO file. 23: "However, some tools installed by rootkits, trojans and, even, a... WARNING: Fuzzy message in PO file. 27: "The most recommended method for recovering a compromised system... WARNING: Fuzzy message in PO file. 31: "If you really want to fix the compromise quickly, you should re... WARNING: Fuzzy message in PO file. 35: "Some common questions on how to handle a compromised Debian GNU... WARNING: Fuzzy message in PO file. 42: "Remember that if you are sure the system has been compromised y... WARNING: Fuzzy message in PO file. 46: "The best thing to do is a complete file system backup copy (usi... WARNING: Fuzzy message in PO file. 50: "If you are sure that the only compromise is a Trojan kernel mod... WARNING: Fuzzy message in PO file. 57: "The CERT (Computer and Emergency Response Team) is an organizat... WARNING: Fuzzy message in PO file. 61: "Providing your local CERT (or the CERT coordination center) wit... WARNING: Fuzzy message in PO file. 65: "You can also use less formal mechanisms if you need help for re... WARNING: Un-translated message in PO file. 72: "If you wish to gather more information, the tct> en-US/12_faq.xml -> tmp/zh-CN/xml_tmp//12_faq.xml WARNING: Fuzzy message in PO file. 26: "A system is only as secure as its administrator is capable of m... WARNING: Fuzzy message in PO file. 30: "For a collection of data regarding security vulnerabilities for... WARNING: Fuzzy message in PO file. 34: "Is Debian more secure than other Linux distributions (such as R... WARNING: Fuzzy message in PO file. 38: "There are not really many differences between Linux distributio... WARNING: Fuzzy message in PO file. 42: "For example, Red Hat was unlucky and shipped when foo 1.2.3 was... WARNING: Fuzzy message in PO file. 46: "There is a lot of collaboration between the respective security... WARNING: Fuzzy message in PO file. 56: "Debian's standard installation is smaller (less functionality),... WARNING: Fuzzy message in PO file. 81: "Long answer: certification costs money (specially a s... WARNING: Fuzzy message in PO file. 85: "There are currently at least two linux distributions certified ... WARNING: Fuzzy message in PO file. 92: "Yes. ssh... WARNING: Fuzzy message in PO file. 175: "This Debian security mailing list dm... WARNING: Fuzzy message in PO file. 200: "\n KLOGD=\"-c 4\"" WARNING: Fuzzy message in PO file. 236: "Yes and no. Debian comes with some predefined users (user id (U... WARNING: Un-translated message in PO file. 240: "To easily find users who don't own any files, execute the follo... WARNING: Fuzzy message in PO file. 252: "These users are provided by base-passwd. Loo... WARNING: Fuzzy message in PO file. 298: "www-data: Some web servers run as www-data. Web content should ... WARNING: Fuzzy message in PO file. 371: "video: This group can be used locally to give a set of users ac... WARNING: Un-translated message in PO file. 381: "I removed a system user! How can I recover?" WARNING: Un-translated message in PO file. 384: "If you have removed a system user and have not made a backup of... WARNING: Fuzzy message in PO file. 405: "Questions regarding services and open ports" WARNING: Fuzzy message in PO file. 421: "Inetd is not easy to remove since n... WARNING: Fuzzy message in PO file. 431: "In versions of the portmap package later tha... WARNING: Fuzzy message in PO file. 441: "There has been extensive discussion on the security of not seeing processes listening on ... WARNING: Fuzzy message in PO file. 513: "\n root:asdfjl290341274075:XXXX:X:XXXX:X::: (X=any number)" WARNING: Fuzzy message in PO file. 518: "\n root::XXXX:X:XXXX:X:::" WARNING: Fuzzy message in PO file. 544: "\n # mount -o remount,rw / " WARNING: Fuzzy message in PO file. 555: "For example, if you want to set up a POP service, you don't nee... WARNING: Fuzzy message in PO file. 559: " \n auth required pam_unix_auth.so shadow nullok use_firs... WARNING: Fuzzy message in PO file. 567: "\n auth required pam_ldap.so " WARNING: Fuzzy message in PO file. 575: "\n (user_id, user_name, realname, shell, password, UID, GID, h... WARNING: Fuzzy message in PO file. 610: "A trace of an attack does not always mean that your system has ... WARNING: Fuzzy message in PO file. 620: "\n Dec 30 07:33:36 debian -- MARK --\n Dec 30 07:53:36 debian... WARNING: Fuzzy message in PO file. 631: "This does not indicate any kind of compromise, and users changi... WARNING: Fuzzy message in PO file. 635: "\n -m interval\n The syslogd logs a mark tim... WARNING: Fuzzy message in PO file. 657: "\n Apr 1 09:25:01 server su[30315]: + ??? root-nobody\n Apr ... WARNING: Fuzzy message in PO file. 668: "\n $ grep 25 /etc/crontab\n 25 9 * * * root test -e /... WARNING: Fuzzy message in PO file. 684: "I have found 'possible SYN flooding' in my logs: Am I under att... WARNING: Fuzzy message in PO file. 691: "\n May 1 12:35:25 linux kernel: possible SYN flooding on port ... WARNING: Fuzzy message in PO file. 749: "Check if your system is up to date with security patches for pu... WARNING: Fuzzy message in PO file. 759: "Notify your local proftpd is vulnerable to a Denial of Service... WARNING: Fuzzy message in PO file. 794: "Add DenyFilter \\*.*/ to your configuration ... WARNING: Fuzzy message in PO file. 798: "After installing portsentry, there are a lot... WARNING: Un-translated message in PO file. 808: "The security team keeps its list of Frequently Asked Questions ...  Merging zh-CN/99_appendix.po >> en-US/99_appendix.xml -> tmp/zh-CN/xml_tmp//99_appendix.xml WARNING: Un-translated message in PO file. 14: "Appendix" WARNING: Fuzzy message in PO file. 23: "Install the system, taking into account the information regardi... WARNING: Fuzzy message in PO file. 39: "\n $ ps aux\n $ netstat -pn -l -A inet \n # /usr/sbin/lsof -... WARNING: Fuzzy message in PO file. 50: "You will need to install lsof-2.2 for the th... WARNING: Fuzzy message in PO file. 57: "\n#!/bin/sh\n# FIXME: this is quick and dirty; replace with a m... WARNING: Fuzzy message in PO file. 88: "\n $ grep -v \"^#\" /etc/inetd.conf | sort -u" WARNING: Fuzzy message in PO file. 102: "Re-boot the machine, or switch to single user mode and then bac... WARNING: Fuzzy message in PO file. 106: "\n # init 1\n (....)\n # init 2" WARNING: Fuzzy message in PO file. 126: "\n # for i in `/usr/sbin/lsof -i |grep LISTEN |cut -d \" \" -f... WARNING: Fuzzy message in PO file. 146: "Check the system using a vulnerability assessment scanner (like... WARNING: Un-translated message in PO file. 150: "Install network and host intrusion measures like snort... WARNING: Fuzzy message in PO file. 174: "This appendix briefly reiterates points from other sections in ... WARNING: Un-translated message in PO file. 184: "Enable a password in the BIOS." WARNING: Un-translated message in PO file. 187: "Disable floppy/cdrom/... booting in the system's BIOS." WARNING: Fuzzy message in PO file. 199: "Set nosuid,noexec,nodev mount options in /etc/pam.d/login" WARNING: Un-translated message in PO file. 248: "Disable network root login; use su... WARNING: Fuzzy message in PO file. 269: "Consider making some log files append-only and configuration fi... WARNING: Fuzzy message in PO file. 273: "Set up file integrity (see ). I... WARNING: Un-translated message in PO file. 292: "Disable or remove in.telnetd, if installed" WARNING: Un-translated message in PO file. 298: "Disable other gratuitous network services; ftp, DNS, WWW etc sh... WARNING: Un-translated message in PO file. 307: "Configure firewall and tcpwrappers (i.e. apt for security updates -- add to... WARNING: Un-translated message in PO file. 369: "You can easily set up a dedicated Debian system as a stand-alon... WARNING: Un-translated message in PO file. 375: "Install one of the Snort versions with database support and con... WARNING: Un-translated message in PO file. 378: "Download and install BASE (Basic Analysis and Security Engine),... WARNING: Un-translated message in PO file. 381: "Download and install the necessary packagesTypi... WARNING: Un-translated message in PO file. 384: "BASE is currently packaged for Debian in acidbaseIP: Netf... WARNING: Fuzzy message in PO file. 457: "\nInternet ---- router ( 62.3.3.25 ) ---- bridge (62.3.3.26 gw ... WARNING: Fuzzy message in PO file. 483: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Fuzzy message in PO file. 538: "\nInternet ---- router (62.3.3.25) ---- bridge (62.3.3.26)\n ... WARNING: Fuzzy message in PO file. 557: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Fuzzy message in PO file. 601: "Basic IPtables rules" WARNING: Fuzzy message in PO file. 608: "Basic Iptables rules" WARNING: Fuzzy message in PO file. 612: "\niptables -F FORWARD\niptables -P FORWARD DROP\niptables -A FO... WARNING: Un-translated message in PO file. 692: "This script automates the procedure for changing the b... WARNING: Un-translated message in PO file. 695: "This script is here for historical purposes and to show how you... WARNING: Un-translated message in PO file. 698: "You can also create the users manually and use the patch availa... WARNING: Fuzzy message in PO file. 701: "\n #!/bin/sh\n # Change the default Debian bind v8 configurat... WARNING: Fuzzy message in PO file. 977: "The previous script, run on Woody's (Debian 3.0) custom DROP policy in the INPUT cha... WARNING: Un-translated message in PO file. 1069: "Of course, you should disable any backdoors before getting the ... WARNING: Un-translated message in PO file. 1072: "FIXME: This needs DNS to be working properly since it is requir... WARNING: Un-translated message in PO file. 1078: "Chroot environment for SSH" WARNING: Un-translated message in PO file. 1081: "Creating a restricted environment for SSHlibpam-chroot" WARNING: Un-translated message in PO file. 1105: "Probably the easiest way is to use the libpam-chroot/etc/pam.d/ssh to use this PAM modu... WARNING: Un-translated message in PO file. 1111: "\nsession required pam_chroot.so" WARNING: Un-translated message in PO file. 1115: "set a proper chroot environment for the user. You can try using... WARNING: Un-translated message in PO file. 1118: "Configure /etc/security/chroot.conf so tha... WARNING: Un-translated message in PO file. 1121: "Configure SSH: Depending on your OpenSSH version the chroot env... WARNING: Un-translated message in PO file. 1124: "\nUsePrivilegeSeparation no" WARNING: Un-translated message in PO file. 1128: "Notice that this will lower the security of your system since t... WARNING: Un-translated message in PO file. 1131: "If you don't disable Privilege Separation ... WARNING: Un-translated message in PO file. 1134: "If you have Privilege Separation set to /proc filesystem needs to be mounted i... WARNING: Un-translated message in PO file. 1154: "The necessary /dev/pts/ devices need to ex... WARNING: Un-translated message in PO file. 1157: "The user's home directory has to exist in the chroot, otherwise... WARNING: Un-translated message in PO file. 1160: "You can debug all these issues if you use the debugssh server" WARNING: Un-translated message in PO file. 1169: "Debian's sshd does not allow restriction of ... WARNING: Un-translated message in PO file. 1172: "After applying the patch, modify /etc/passwdsshd daemon insi... WARNING: Un-translated message in PO file. 1284: "\nUsePrivilegeSeparation yes" WARNING: Un-translated message in PO file. 1288: "That way the remote daemon will do as few things as possible as... WARNING: Un-translated message in PO file. 1291: "Notice, also, that in order for SSH to work in that location, t... WARNING: Un-translated message in PO file. 1294: "Setup a minimal system (the really easy way)" WARNING: Un-translated message in PO file. 1297: "You can use debootstrap to setup a minimal e... WARNING: Fuzzy message in PO file. 1303: "You can easily create a restricted environment with the makejail's p... WARNING: Fuzzy message in PO file. 1314: "\n # makejail /usr/share/doc/makejail/examples/sshd.py" WARNING: Un-translated message in PO file. 1319: "This will setup the chroot in the /var/chroot/sshdprocfs filesystem in /... WARNING: Un-translated message in PO file. 1325: "\n# mount -t proc proc /var/chroot/sshd/proc" WARNING: Un-translated message in PO file. 1329: "You can also have it be mounted automatically by editing /dev/log ... WARNING: Fuzzy message in PO file. 1339: "Read the sample file to see what other changes need to be made ... WARNING: Fuzzy message in PO file. 1343: "The following sample environment has been (slightly) tested in ... WARNING: Fuzzy message in PO file. 1347: "\n.\n|-- bin\n| |-- ash\n| |-- bash\n| |-- chgrp\n| |--... WARNING: Un-translated message in PO file. 1726: "For Debian release 3.1 you have to make sure that the environme... WARNING: Un-translated message in PO file. 1729: "\n$ ls /etc/pam.d/common-*\n/etc/pam.d/common-account /etc/pam... WARNING: Un-translated message in PO file. 1736: "Manually creating the environment (the hard way)" WARNING: Fuzzy message in PO file. 1739: "It is possible to create an environment, using a trial-and-erro... WARNING: Fuzzy message in PO file. 1743: "\n.:\ntotal 36\ndrwxr-xr-x 9 root root 4096 Jun 5 10:05 ./\ndrw... WARNING: Un-translated message in PO file. 2228: "Chroot environment for Apache" WARNING: Fuzzy message in PO file. 2234: "The chroot utility is often used to jail a d... WARNING: Fuzzy message in PO file. 2238: "FIXME: Apache can also be chrooted using makejail (available in Debian/testin... WARNING: Fuzzy message in PO file. 2293: " \n # cp /usr/share/doc/makejail/examples/apache.py /etc/makeja... WARNING: Fuzzy message in PO file. 2300: "Edit /etc/makejail/apache.py. You need to ... WARNING: Un-translated message in PO file. 2304: "\nchroot=\"/var/chroot/apache\"\ntestCommandsInsideJail=[\"/usr... WARNING: Fuzzy message in PO file. 2325: "FIXME: some options do not seem to work pr... WARNING: Fuzzy message in PO file. 2335: "\n $ grep chrapach /etc/passwd > /var/chroot/apache/etc... WARNING: Fuzzy message in PO file. 2350: "\n # cp -Rp /var/www /var/chroot/apache/var\n # cp -R... WARNING: Fuzzy message in PO file. 2359: "Edit the startup script for the system logging daemon so that i... WARNING: Fuzzy message in PO file. 2375: "\n#! /bin/bash\n#\n# apache Start the apache HTTP server... WARNING: Fuzzy message in PO file. 2548: "Start Apache (/etc/init.d/apache start) and ... WARNING: Fuzzy message in PO file. 2555: "\n root 180 0.0 1.1 2936 1436 ? S 04:03 0:00 /usr/sbin/apa... WARNING: Fuzzy message in PO file. 2573: "Make sure the Apache processes are running chrooted by looking ... WARNING: Fuzzy message in PO file. 2577: "\n drwxr-sr-x 10 root staff 240 Dec 2 16:06 .\n drwxrwsr-... WARNING: Fuzzy message in PO file. 2612: " \napt-get update && apt-get install apache\nmakejail /... WARNING: Un-translated message in PO file. 2623: "If you are looking for more information you can consider these ...  Merging zh-CN/Author_Group.po >> en-US/Author_Group.xml -> tmp/zh-CN/xml_tmp//Author_Group.xml Merging zh-CN/Book_Info.po >> en-US/Book_Info.xml -> tmp/zh-CN/xml_tmp//Book_Info.xml Merging zh-CN/Revision_History.po >> en-US/Revision_History.xml -> tmp/zh-CN/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 14: "Changelog/History" WARNING: Un-translated message in PO file. 17: "Marcos" WARNING: Un-translated message in PO file. 20: "Fouces" WARNING: Un-translated message in PO file. 23: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 26: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 29: "Thijs" WARNING: Un-translated message in PO file. 32: "Kinkhorst" WARNING: Un-translated message in PO file. 35: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 38: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 41: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 44: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 47: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 50: "Use LSB headers for firewall script. Patch by Dominic Walden." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 56: "Fernández-Sanguino Peña." WARNING: Un-translated message in PO file. 59: "Indicate that the document is not updated with latest versions.... WARNING: Un-translated message in PO file. 62: "Update pointers to current location of sources." WARNING: Un-translated message in PO file. 65: "Update information on security updates for newer releases." WARNING: Un-translated message in PO file. 68: "Point information for Developers to online sources instead of k... WARNING: Un-translated message in PO file. 71: "Extend the information regarding securing console access, inclu... WARNING: Un-translated message in PO file. 74: "Update the information related to PAM modules including how to ... WARNING: Un-translated message in PO file. 77: "Reference some of the PAM modules available to use double facto... WARNING: Un-translated message in PO file. 80: "Fix shell script example in Appendix." WARNING: Un-translated message in PO file. 83: "Fix reference errors." WARNING: Un-translated message in PO file. 86: "Point to the Basille sourceforge project instead of the bastill... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 92: "Change reference to Log Analysis' website as this is no longer ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 95: "Change the section related to choosing a filesystem: note that ... WARNING: Un-translated message in PO file. 98: "Change the name of the packages related to enigmail to reflect ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 101: "Change URLs pointing to Bastille Linux to www.Bastille-UNIX.org... WARNING: Un-translated message in PO file. 104: "Fix pointers to Linux Ramen and Lion worms." WARNING: Un-translated message in PO file. 107: "Use linux-image in the examples instead of the (old) kernel-ima... WARNING: Un-translated message in PO file. 110: "Fix typos spotted by Francesco Poli." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 113: "Update the information related to security updates. Drop the te... WARNING: Un-translated message in PO file. 116: "Divide the firewall applications based on target users and add ... WARNING: Un-translated message in PO file. 119: "Remove references to libsafe, it's not in the archive any longe... WARNING: Un-translated message in PO file. 122: "Fix the location of syslog's configuration, thanks to John Talb... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 125: "Thanks go to Francesco Poli for his extensive review of the doc... WARNING: Un-translated message in PO file. 128: "Remove most references to the woody release as it is no longer ... WARNING: Un-translated message in PO file. 131: "Describe how to restrict users so that they can only do file tr... WARNING: Un-translated message in PO file. 134: "Added a note regarding the debian-private declasiffication deci... WARNING: Un-translated message in PO file. 137: "Updated link of incident handling guides." WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 143: "Fix references to the master security server." WARNING: Un-translated message in PO file. 146: "Add pointers to additional APT-secure documentation." WARNING: Un-translated message in PO file. 149: "Improve the description of APT signatures." WARNING: Un-translated message in PO file. 152: "Comment out some things which are not yet final related to the ... WARNING: Un-translated message in PO file. 155: "Fixed name of the Debian Testing Security Team." WARNING: Un-translated message in PO file. 158: "Remove reference to sarge in an example." WARNING: Un-translated message in PO file. 161: "Update the antivirus section, clamav is now available on the re... WARNING: Un-translated message in PO file. 164: "Removes all references to freeswan as it is obsolete." WARNING: Un-translated message in PO file. 167: "Describe issues related to ruleset changes to the firewall if d... WARNING: Un-translated message in PO file. 170: "Update the information related to the IDS installation, mention... WARNING: Un-translated message in PO file. 173: "Rewrite the \"running bind as a non-root user\" section as this... WARNING: Un-translated message in PO file. 176: "Remove the obsolete way to setup iptables rulesets as woody is ... WARNING: Un-translated message in PO file. 179: "Revert the advice regarding LOG_UNKFAIL_ENAB it should be set t... WARNING: Un-translated message in PO file. 182: "Added more information related to updating the system with desk... WARNING: Un-translated message in PO file. 185: "Updated the contents of the FAQ and remove redundant paragraphs... WARNING: Un-translated message in PO file. 188: "Review and update the section related to forensic analysis of m... WARNING: Un-translated message in PO file. 191: "Remove or fix some dead links." WARNING: Un-translated message in PO file. 194: "Fix many typos and gramatical errors reported by Francesco Poli... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 197: "Provide examples using apt-cache's rdepends as suggested by Oze... WARNING: Un-translated message in PO file. 200: "Fix location of Squid's user's manual because of its relocation... WARNING: Un-translated message in PO file. 203: "Fix information regarding umask, it's logins.defs (and not limi... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 206: "Add information on how to track security vulnerabilities and ad... WARNING: Un-translated message in PO file. 209: "Add more information on the security support for testing." WARNING: Un-translated message in PO file. 212: "Fix a large number of typos with a patch provided by Simon Bran... WARNING: Un-translated message in PO file. 215: "Added section on how to disable root prompt on initramfs provid... WARNING: Un-translated message in PO file. 218: "Remove references to queso." WARNING: Un-translated message in PO file. 221: "Note that testing is now security-supported in the introduction... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 224: "Rewrote the information on how to setup ssh chroots to clarify ... WARNING: Un-translated message in PO file. 227: "Fix lsof call as suggested by Christophe Sahut." WARNING: Un-translated message in PO file. 230: "Include patches for typo fixes from Uwe Hermann." WARNING: Un-translated message in PO file. 233: "Fix typo in reference spotted by Moritz Naumann." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 236: "Add a section on Debian Developer's best practices for security... WARNING: Un-translated message in PO file. 239: "Ammended firewall script with comments from WhiteGhost." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 242: "Included a patch from Thomas Sjögren which describes that apt-ftparchive is in apt-utilsSSHssh protocol ve... WARNING: Un-translated message in PO file. 662: "Added two subsections related to Apache secure configuration (t... WARNING: Un-translated message in PO file. 665: "Added a new FAQ related to raw sockets, one related to /root, a... WARNING: Un-translated message in PO file. 668: "Added a pointer to a bug in libpam-cracklib that might still be... WARNING: Un-translated message in PO file. 671: "Added more information regarding forensics analysis (pending mo... WARNING: Un-translated message in PO file. 674: "Changed the \"what should I do regarding compromise\" into a bu... WARNING: Un-translated message in PO file. 677: "Added some information on how to set up the Xscreensaver to loc... WARNING: Un-translated message in PO file. 680: "Added a note related to the utilities you should not install in... WARNING: Un-translated message in PO file. 683: "Added information on lvm and journalling file systems, ext3 rec... WARNING: Un-translated message in PO file. 686: "Added a link to the online text version (check)." WARNING: Un-translated message in PO file. 689: "Added some more stuff to the information on firewalling the loc... WARNING: Un-translated message in PO file. 692: "Added more information on PAM limits and pointers to Kurt Seifr... WARNING: Un-translated message in PO file. 695: "As suggested by Julián Muñoz, provided more information on the ... WARNING: Un-translated message in PO file. 698: "Included a note in the BIOS password section due to a comment f... WARNING: Un-translated message in PO file. 701: "Included patches provided by Alfred E. Heggestad fixing many of... WARNING: Un-translated message in PO file. 704: "Added a pointer to the changelog in the Credits section since m... WARNING: Un-translated message in PO file. 707: "Added a few more notes to the chattr section and a new section ... WARNING: Un-translated message in PO file. 710: "Added a new section after installation just to remind users to ... WARNING: Un-translated message in PO file. 713: "Added some more TODO items provided by Korn Andras." WARNING: Un-translated message in PO file. 716: "Added a pointer to the NIST's guidelines on how to secure DNS p... WARNING: Un-translated message in PO file. 719: "Added a small paragraph regarding Debian's SSL certificates inf... WARNING: Un-translated message in PO file. 722: "Added Daniel Quinlan's suggestions regarding sshMARK heartbeatAfter installation section... WARNING: Un-translated message in PO file. 881: "Wrote information on how to set up firewalls with the standard ... WARNING: Un-translated message in PO file. 884: "Small paragraph explaining why installing connected to the Inte... WARNING: Un-translated message in PO file. 887: "Small paragraph on timely patching referencing to IEEE paper." WARNING: Un-translated message in PO file. 890: "Appendix on how to set up a Debian snort box, based on what Vla... WARNING: Un-translated message in PO file. 893: "Information on how logcheck is set up in Debian and how it can ... WARNING: Un-translated message in PO file. 896: "Information on user accounting and profile analysis." WARNING: Un-translated message in PO file. 899: "Included apt.conf configuration for read-only /usr copied from ... WARNING: Un-translated message in PO file. 902: "New section on VPN with some pointers and the packages availabl... WARNING: Un-translated message in PO file. 905: "Small note regarding some programs to automatically build chroo... WARNING: Un-translated message in PO file. 908: "New FAQ item regarding identd based on a discussion in the debi... WARNING: Un-translated message in PO file. 911: "New FAQ item regarding inetd based o... WARNING: Un-translated message in PO file. 914: "Introduced note on rcconf in the \"disabling services\" section... WARNING: Un-translated message in PO file. 917: "Varied the approach regarding LKM, thanks to Philipe Gaspar." WARNING: Un-translated message in PO file. 920: "Added pointers to CERT documents and Counterpane resources." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 923: "Added a new FAQ item regarding time to fix security vulnerabili... WARNING: Un-translated message in PO file. 926: "Reorganized FAQ sections." WARNING: Un-translated message in PO file. 929: "Started writing a section regarding firewalling in Debian GNU/L... WARNING: Un-translated message in PO file. 932: "Fixed typos sent by Matt Kraai." WARNING: Un-translated message in PO file. 935: "Fixed DNS information." WARNING: Un-translated message in PO file. 938: "Added information on whisker and nbtscan to the auditing sectio... WARNING: Un-translated message in PO file. 941: "Fixed some wrong URLs." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 944: "Added a new section regarding auditing using Debian GNU/Linux." WARNING: Un-translated message in PO file. 947: "Added info regarding finger daemon taken from the security mail... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 950: "Fixed link for Linux Trustees." WARNING: Un-translated message in PO file. 953: "Fixed typos (patches from Oohara Yuuma and Pedro Zorzenon)." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 956: "Reorganized service installation and removal and added some new... WARNING: Un-translated message in PO file. 959: "Added some notes regarding using integrity checkers as intrusio... WARNING: Un-translated message in PO file. 962: "Added a chapter regarding package signatures." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 965: "Added notes regarding Squid security sent by Philipe Gaspar." WARNING: Un-translated message in PO file. 968: "Fixed rootkit links thanks to Philipe Gaspar." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 971: "Added some notes regarding Apache and Lpr/lpng." WARNING: Un-translated message in PO file. 974: "Added some information regarding noexec and read-only partition... WARNING: Un-translated message in PO file. 977: "Rewrote how users can help in Debian security issues (FAQ item)... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 980: "Fixed location of mail program." WARNING: Un-translated message in PO file. 983: "Added some new items to the FAQ." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 986: "Added a small section on how Debian handles security." WARNING: Un-translated message in PO file. 989: "Clarified MD5 passwords (thanks to `rocky')." WARNING: Un-translated message in PO file. 992: "Added some more information regarding harden-X from Stephen van... WARNING: Un-translated message in PO file. 983: "Added some new items to the FAQ." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 995: "Added some forensics information sent by Yotam Rubin." WARNING: Un-translated message in PO file. 998: "Added information on how to build a honeynet using Debian GNU/L... WARNING: Un-translated message in PO file. 1001: "Added some more TODOS." WARNING: Un-translated message in PO file. 1004: "Fixed more typos (thanks Yotam!)." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1007: "Added patch to fix misspellings and some new information (contr... WARNING: Un-translated message in PO file. 1010: "Added references to other online (and offline) documentation bo... WARNING: Un-translated message in PO file. 1013: "Added some information on configuring Bind options to restrict ... WARNING: Un-translated message in PO file. 1016: "Added information on how to automatically harden a Debian syste... WARNING: Un-translated message in PO file. 1019: "Removed some done TODOs and added some new ones." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1022: "Added the default user/group list provided by Joey Hess to the ... WARNING: Un-translated message in PO file. 1025: "Added information on LKM root-kits () c... WARNING: Un-translated message in PO file. 1028: "Added information on Proftp contributed by Emmanuel Lacour." WARNING: Un-translated message in PO file. 1031: "Recovered the checklist Appendix from Era Eriksson." WARNING: Un-translated message in PO file. 1034: "Added some new TODO items and removed other fixed ones." WARNING: Un-translated message in PO file. 1037: "Manually included Era's patches since they were not all include... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1040: "Era" WARNING: Un-translated message in PO file. 1043: "Eriksson" WARNING: Un-translated message in PO file. 1046: "Typo fixes and wording changes." WARNING: Un-translated message in PO file. 1049: "Minor changes to tags in order to keep on removing the tt tags ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1052: "Added pointer to document as published in the DDP (should super... WARNING: Un-translated message in PO file. 1055: "Started a mini-FAQ (should be expanded) with some questions rec... WARNING: Un-translated message in PO file. 1058: "Added general information to consider while securing." WARNING: Un-translated message in PO file. 1061: "Added a paragraph regarding local (incoming) mail delivery." WARNING: Un-translated message in PO file. 1064: "Added some pointers to more information." WARNING: Un-translated message in PO file. 1067: "Added information regarding the printing service." WARNING: Un-translated message in PO file. 1070: "Added a security hardening checklist." WARNING: Un-translated message in PO file. 1073: "Reorganized NIS and RPC information." WARNING: Un-translated message in PO file. 1076: "Added some notes taken while reading this document on my new Vi... WARNING: Un-translated message in PO file. 1079: "Fixed some badly formatted lines." WARNING: Un-translated message in PO file. 770: "Fixed some typos." WARNING: Un-translated message in PO file. 1082: "Added a Genius/Paranoia idea contributed by Gaby Schilders." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1085: "Josip" WARNING: Un-translated message in PO file. 1088: "Rodin" WARNING: Un-translated message in PO file. 1091: "Added paragraphs related to BIND and some FIXMEs." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1094: "Small setuid check paragraph" WARNING: Un-translated message in PO file. 1097: "Various minor cleanups." WARNING: Un-translated message in PO file. 1100: "Found out how to use sgml2txt -f for the txt... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1103: "Added a security update after installation paragraph." WARNING: Un-translated message in PO file. 1106: "Added a proftpd paragraph." WARNING: Un-translated message in PO file. 1109: "This time really wrote something about XDM, sorry for last time... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1112: "Lots of grammar corrections by James Treacy, new XDM paragraph.... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1115: "Typo fixes, miscellaneous additions." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1118: "Initial release."  PO file 'zh-CN/Securing_Debian_Manual.po' not found! Using base XML!  Processing file tmp/zh-CN/xml/Common_Content/Conventions.xml -> tmp/zh-CN/xml/Common_Content/Conventions.xml Processing file tmp/zh-CN/xml/Common_Content/Feedback.xml -> tmp/zh-CN/xml/Common_Content/Feedback.xml Processing file tmp/zh-CN/xml/Common_Content/Legal_Notice.xml -> tmp/zh-CN/xml/Common_Content/Legal_Notice.xml Processing file tmp/zh-CN/xml/Common_Content/Program_Listing.xml -> tmp/zh-CN/xml/Common_Content/Program_Listing.xml Processing file tmp/zh-CN/xml/Common_Content/Revision_History.xml -> tmp/zh-CN/xml/Common_Content/Revision_History.xml Processing file tmp/zh-CN/xml_tmp/01_intro.xml -> tmp/zh-CN/xml/01_intro.xml Processing file tmp/zh-CN/xml_tmp/02_before-begin.xml -> tmp/zh-CN/xml/02_before-begin.xml Processing file tmp/zh-CN/xml_tmp/03_before-install.xml -> tmp/zh-CN/xml/03_before-install.xml Processing file tmp/zh-CN/xml_tmp/04_after-install.xml -> tmp/zh-CN/xml/04_after-install.xml Processing file tmp/zh-CN/xml_tmp/05_services.xml -> tmp/zh-CN/xml/05_services.xml Processing file tmp/zh-CN/xml_tmp/06_automatic.xml -> tmp/zh-CN/xml/06_automatic.xml Processing file tmp/zh-CN/xml_tmp/07_infrastructure.xml -> tmp/zh-CN/xml/07_infrastructure.xml Processing file tmp/zh-CN/xml_tmp/08_sec-tools.xml -> tmp/zh-CN/xml/08_sec-tools.xml Processing file tmp/zh-CN/xml_tmp/09_developer.xml -> tmp/zh-CN/xml/09_developer.xml Processing file tmp/zh-CN/xml_tmp/10_before-compromise.xml -> tmp/zh-CN/xml/10_before-compromise.xml Processing file tmp/zh-CN/xml_tmp/11_after-compromise.xml -> tmp/zh-CN/xml/11_after-compromise.xml Processing file tmp/zh-CN/xml_tmp/12_faq.xml -> tmp/zh-CN/xml/12_faq.xml Processing file tmp/zh-CN/xml_tmp/99_appendix.xml -> tmp/zh-CN/xml/99_appendix.xml Processing file tmp/zh-CN/xml_tmp/Author_Group.xml -> tmp/zh-CN/xml/Author_Group.xml Processing file tmp/zh-CN/xml_tmp/Book_Info.xml -> tmp/zh-CN/xml/Book_Info.xml Processing file tmp/zh-CN/xml_tmp/Revision_History.xml -> tmp/zh-CN/xml/Revision_History.xml Processing file tmp/zh-CN/xml_tmp/Securing_Debian_Manual.xml -> tmp/zh-CN/xml/Securing_Debian_Manual.xml Beginning work on zh-CN DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/zh-CN/Debian_Security_Guide/3.19/html/harden-doc/index.html ./build/build-html --lang=ja-JP Use of uninitialized value in concatenation (.) or string at /usr/bin/publican line 1003, line 13. Setting up ja-JP Merging ja-JP/01_intro.po >> en-US/01_intro.xml -> tmp/ja-JP/xml_tmp//01_intro.xml WARNING: Un-translated message in PO file. 26: "Authors" WARNING: Un-translated message in PO file. 29: "The current maintainer of this document is Javier Fernández-San... WARNING: Un-translated message in PO file. 32: "This manual was started as a HOWTO by Alex... WARNING: Un-translated message in PO file. 65: "Where to get the manual (and available formats)" WARNING: Un-translated message in PO file. 68: "You can download or view the latest version of the Securing Deb... WARNING: Un-translated message in PO file. 71: "If you want a full copy of the manual you can either download t... WARNING: Un-translated message in PO file. 74: "The document is also provided in text, html and PDF formats in ... WARNING: Un-translated message in PO file. 77: "This document is part of the documents distributed by the kernel-patch-2.4-lidsNSA Enhanced Linu... WARNING: Un-translated message in PO file. 179: "linux-patch-openswan" WARNING: Un-translated message in PO file. 197: "Issues with file sharing servers such as Samba and NFS?" WARNING: Un-translated message in PO file. 209: "Talk about pam_chroot (see compartm... WARNING: Un-translated message in PO file. 218: "More information regarding log analysis software (i.e. logcheck... WARNING: Un-translated message in PO file. 221: "'advanced' routing (traffic policing is security related)." WARNING: Un-translated message in PO file. 224: "limiting ssh access to running certain comma... WARNING: Un-translated message in PO file. 227: "using dpkg-statoverride." WARNING: Un-translated message in PO file. 230: "secure ways to share a CD burner among users." WARNING: Un-translated message in PO file. 233: "secure ways of providing networked sound in addition to network... WARNING: Un-translated message in PO file. 236: "securing web browsers." WARNING: Un-translated message in PO file. 239: "setting up ftp over ssh." WARNING: Un-translated message in PO file. 242: "using crypto loopback file systems." WARNING: Un-translated message in PO file. 245: "ncrypting the entire file system." WARNING: Un-translated message in PO file. 248: "steganographic tools." WARNING: Un-translated message in PO file. 251: "setting up a PKA for an organization." WARNING: Un-translated message in PO file. 254: "using LDAP to manage users. There is a HOWTO of ldap+kerberos f... WARNING: Un-translated message in PO file. 257: "How to remove information of reduced utility in production syst... WARNING: Un-translated message in PO file. 260: "More information on lcap based on the packages README file (wel... WARNING: Un-translated message in PO file. 263: "Add Colin's article on how to setup a chroot environment for a ... WARNING: Un-translated message in PO file. 266: "Add information on running multiple snort se... WARNING: Un-translated message in PO file. 269: "Add information on setting up a honeypot (honeyd> en-US/02_before-begin.xml -> tmp/ja-JP/xml_tmp//02_before-begin.xml WARNING: Un-translated message in PO file. 29: "Limit users and permissions in your system." WARNING: Un-translated message in PO file. 50: "The > en-US/03_before-install.xml -> tmp/ja-JP/xml_tmp//03_before-install.xml WARNING: Un-translated message in PO file. 27: "Note: many BIOSes have well known default master passwords, and... WARNING: Un-translated message in PO file. 30: "Partitioning the system" WARNING: Un-translated message in PO file. 39: "Any directory tree which a user has write permissions to, such ... WARNING: Un-translated message in PO file. 51: "In the case of a mail server it is important to have a separate... WARNING: Un-translated message in PO file. 54: "Also, for partitions in which you cannot be sure of the needed ... WARNING: Un-translated message in PO file. 57: "Selecting the appropriate file systems" WARNING: Un-translated message in PO file. 60: "During the system partitioning you also have to decide which fi... WARNING: Un-translated message in PO file. 63: "for laptops in all the file systems installed. That way if you ... WARNING: Un-translated message in PO file. 66: "for production systems which store large amounts of data (like ... WARNING: Un-translated message in PO file. 69: "Leaving aside the performance issues regarding journalling file... WARNING: Un-translated message in PO file. 72: "In any case, data integrity might be better under ext3... WARNING: Un-translated message in PO file. 75: "Notice, however, that there are some partitions that might not ... WARNING: Un-translated message in PO file. 93: "Setting a good root password is the most basic requirement for ... WARNING: Un-translated message in PO file. 96: "Plenty of information on choosing good passwords can be found o... WARNING: Un-translated message in PO file. 108: "As you may already know, when you install a given service the d... WARNING: Un-translated message in PO file. 114: "If you want to keep some services but use them rarely, use the ... WARNING: Un-translated message in PO file. 117: "invoke-rc.d support is mandatory in Debian, ... WARNING: Un-translated message in PO file. 123: "Disabling a daemon service is quite simple. You either remove t... WARNING: Un-translated message in PO file. 126: "You can remove these links manually or using update-rc... WARNING: Un-translated message in PO file. 155: "You can use the TUI (Text User Interface) provided by /etc/init.d/service_name/etc/init.d/service_na... WARNING: Un-translated message in PO file. 191: "Remove the execute permission from the /etc/init.d//etc/init.d/service_name<... WARNING: Un-translated message in PO file. 197: "Nevertheless, the files under /etc/init.d ... WARNING: Un-translated message in PO file. 206: "Disabling inetd or its services" WARNING: Un-translated message in PO file. 209: "You should check if you really need the inetda lot of software, for e... WARNING: Un-translated message in PO file. 234: "Since you already know what the system is for (don't you?) you ... WARNING: Un-translated message in PO file. 237: "The presence, for example, of development utilities (a C compil... WARNING: Un-translated message in PO file. 240: "allowing him to do privilege escalation. It's easier, for examp... WARNING: Un-translated message in PO file. 243: "providing tools that could help the attacker to use the comprom... WARNING: Un-translated message in PO file. 246: "Of course, an intruder with local shell access can download his... WARNING: Un-translated message in PO file. 249: "Please notice that a default installation of Debian s... WARNING: Un-translated message in PO file. 293: "This is something that is fixed in releases post-sarge, see perlperl? You can see for yo... WARNING: Un-translated message in PO file. 314: "These include the following utilities in packages with priority... WARNING: Un-translated message in PO file. 317: "/usr/bin/chkdupexe of package /usr/bin/replay of package bs... WARNING: Un-translated message in PO file. 323: "/usr/sbin/cleanup-info of package /usr/sbin/dpkg-divert of package /usr/sbin/dpkg-statoverride of package /usr/sbin/install-info of package /usr/sbin/update-alternatives of package <... WARNING: Un-translated message in PO file. 338: "/usr/sbin/update-rc.d of package /usr/bin/grog of package grof... WARNING: Un-translated message in PO file. 344: "/usr/sbin/adduser of package ... WARNING: Un-translated message in PO file. 347: "/usr/sbin/debconf-show of package /usr/sbin/deluser of package ... WARNING: Un-translated message in PO file. 353: "/usr/sbin/dpkg-preconfigure of package /usr/sbin/dpkg-reconfigure of package /usr/sbin/exigrep of package ... WARNING: Un-translated message in PO file. 362: "/usr/sbin/eximconfig of package /usr/sbin/eximstats of package /usr/sbin/exim-upgrade-to-r3 of package /usr/sbin/exiqsumm of package /usr/sbin/keytab-lilo of package /usr/sbin/liloconfig of package /usr/sbin/lilo_find_mbr of package /usr/sbin/syslogd-listfiles of package /usr/sbin/syslog-facility of package /usr/sbin/update-inetd of package > en-US/04_after-install.xml -> tmp/ja-JP/xml_tmp//04_after-install.xml WARNING: Un-translated message in PO file. 18: "Once the system is installed you can still do more to secure th... WARNING: Un-translated message in PO file. 21: "Before connecting to any network, especially if it's a public o... WARNING: Un-translated message in PO file. 24: "Subscribe to the Debian Security Announce mailing list" WARNING: Un-translated message in PO file. 27: "In order to receive information on available security updates y... WARNING: Un-translated message in PO file. 30: "DSAs are signed with the Debian Security Team's signature which... WARNING: Un-translated message in PO file. 33: "You should consider, also, subscribing to the Note: If you are using the testi... WARNING: Un-translated message in PO file. 62: "Once you've done this you can use multiple tools to upgrade you... WARNING: Un-translated message in PO file. 65: "If you want to use aptitude's text i... WARNING: Un-translated message in PO file. 77: "If you want to use apt do just like ... WARNING: Un-translated message in PO file. 80: "If you want to use dselect then firs... WARNING: Un-translated message in PO file. 83: "If you like, you can add the deb-src lines to /etc/ap... WARNING: Un-translated message in PO file. 86: "Security update of libraries" WARNING: Un-translated message in PO file. 89: "Once you have executed a security update you might need to rest... WARNING: Un-translated message in PO file. 92: "From Debian Jessie and up, you can install... WARNING: Un-translated message in PO file. 95: "Some packages (like libc6) will do t... WARNING: Un-translated message in PO file. 98: "Bringing the system to run level 1 (single user) and then back ... WARNING: Un-translated message in PO file. 101: "Excercise caution when dealing with security upgrades if you ar... WARNING: Un-translated message in PO file. 104: "Security update of the kernel" WARNING: Un-translated message in PO file. 107: "First, make sure your kernel is being managed through the packa... WARNING: Un-translated message in PO file. 119: "If your kernel is not being managed you will see a message sayi... WARNING: Un-translated message in PO file. 122: "The installation system of recent Debian releases will handle t... WARNING: Un-translated message in PO file. 132: "To see if your kernel needs to be updated run:" WARNING: Un-translated message in PO file. 158: "If you are doing a security update which includes the kernel im... WARNING: Un-translated message in PO file. 161: "If you need to do a system reboot (because of a kernel upgrade)... WARNING: Un-translated message in PO file. 164: "Change the BIOS (again)" WARNING: Un-translated message in PO file. 167: "Remember ? Well, then you shoul... WARNING: Un-translated message in PO file. 170: "Another less secure but more convenient way is to change the se... WARNING: Un-translated message in PO file. 176: "Anybody can easily get a root-shell and change your passwords b... WARNING: Un-translated message in PO file. 188: "For LILO you need to edit the config file /etc/lilo.c... WARNING: Un-translated message in PO file. 206: "Then, make sure that the configuration file is not world readab... WARNING: Un-translated message in PO file. 236: "Disable root prompt on the initramfs" WARNING: Un-translated message in PO file. 239: "Note: This applies to the default kernels provided for releases... WARNING: Un-translated message in PO file. 242: "Linux 2.6 kernels provide a way to access a root shell while bo... WARNING: Un-translated message in PO file. 245: "\n \"ALERT! /dev/sda1 does not exist. Dropping to a shell!" WARNING: Un-translated message in PO file. 250: "In order to remove this behavior you need to set the following ... WARNING: Un-translated message in PO file. 253: "Remove root prompt on the kernel" WARNING: Un-translated message in PO file. 256: "Note: This does not apply to the kernels provided for Debian 3.... WARNING: Un-translated message in PO file. 259: "Linux 2.4 kernels provide a way to access a root shell while bo... WARNING: Un-translated message in PO file. 262: "\n Press ENTER to obtain a shell (waits 5 seconds)" WARNING: Un-translated message in PO file. 267: "In order to remove this behavior you need to change /... WARNING: Un-translated message in PO file. 270: "\n # DELAY The number of seconds the linuxrc script should ... WARNING: Un-translated message in PO file. 277: "Then regenerate your ramdisk image. You can do this for example... WARNING: Un-translated message in PO file. 289: "or (preferred):" WARNING: Un-translated message in PO file. 305: "/etc/pam.d/login In older Debian releases ... WARNING: Un-translated message in PO file. 308: "securetty The /etc/securettyallowed users ca... WARNING: Un-translated message in PO file. 336: "disable this feature completely." WARNING: Un-translated message in PO file. 339: "If you want to restrict this, you must check the /etc... WARNING: Un-translated message in PO file. 342: "The default in Debian includes this switch:" WARNING: Un-translated message in PO file. 352: "The -a switch, as the init q after making any ... WARNING: Un-translated message in PO file. 361: "Restricting the use of the Magic SysRq key" WARNING: Un-translated message in PO file. 364: "The Magic SysRq key is a key combination t... WARNING: Un-translated message in PO file. 367: "Since the Etch release, the Magic SysRq key feature is enabled ... WARNING: Un-translated message in PO file. 379: "The default value shown above allows all of the SysRq functions... WARNING: Un-translated message in PO file. 382: "You should disable this functionality ifaccess to the console i... WARNING: Un-translated message in PO file. 385: "\n# Disables the magic SysRq key\nkernel.sysrq = 0" WARNING: Un-translated message in PO file. 391: "For more information, read Ext file system (e... WARNING: Un-translated message in PO file. 410: "only applies to ext2 or ext3noe... WARNING: Un-translated message in PO file. 464: "The following is a more thorough example. A note, though: /tmp noexec" WARNING: Un-translated message in PO file. 524: "Note that the Post-Invoke may fail with a \"/usr busy\" error m... WARNING: Un-translated message in PO file. 534: "Stop or restart these programs and run the Post-Invoke manually... WARNING: Un-translated message in PO file. 537: "Providing secure user access" WARNING: Un-translated message in PO file. 543: "PAM (Pluggable Authentication Modules) allows system administra... WARNING: Un-translated message in PO file. 546: "Each application with PAM support provides a configuration file... WARNING: Un-translated message in PO file. 549: "what backend is used for authentication." WARNING: Un-translated message in PO file. 552: "what backend is used for sessions." WARNING: Un-translated message in PO file. 555: "how do password checks behave." WARNING: Un-translated message in PO file. 558: "The following description is far from complete, for more inform... WARNING: Un-translated message in PO file. 564: "Password security in PAM" WARNING: Un-translated message in PO file. 567: "Review the /etc/pam.d/common-password, inc... WARNING: Un-translated message in PO file. 570: "You have to make sure that the pam_unix.so module uses the \"sh... WARNING: Un-translated message in PO file. 573: "The line with the definition of the pam_unix module will look s... WARNING: Un-translated message in PO file. 585: "This definition:" WARNING: Un-translated message in PO file. 588: "Enforces password encryption when storing passwords, using the ... WARNING: Un-translated message in PO file. 591: "Enables password complexity checks (option obscuremin/etc/pam.d/lo... WARNING: Un-translated message in PO file. 664: "Control of su in PAM" WARNING: Un-translated message in PO file. 690: "Temporary directories in PAM" WARNING: Un-translated message in PO file. 693: "Since there have been a number of so called insecure tempfile v... WARNING: Un-translated message in PO file. 703: "There has also been a discussion about adding this by default i... WARNING: Un-translated message in PO file. 706: "Configuration for undefined PAM applications" WARNING: Un-translated message in PO file. 746: "Limiting resource usage: the limits.conf f... WARNING: Un-translated message in PO file. 749: "You should really take a serious look into this file. Here you ... WARNING: Un-translated message in PO file. 752: "If you do not restrict resource usage, any... WARNING: Un-translated message in PO file. 755: "There is a way to add resource limits to some shells (for examp... WARNING: Un-translated message in PO file. 758: "Resource limits are imposed by the kernel, but they need to be ... WARNING: Un-translated message in PO file. 768: "Commonly, login, ssh ... WARNING: Un-translated message in PO file. 771: "The specific limits settings you might want to enforce depend o... WARNING: Un-translated message in PO file. 774: "For example, the configuration example below enforces a 100 pro... WARNING: Un-translated message in PO file. 810: "These would be the limits a default user (including system daem... WARNING: Un-translated message in PO file. 813: "\n$ ulimit -a\ncore file size (blocks, -c) 0\ndata seg s... WARNING: Un-translated message in PO file. 829: "And these are the limits for an administrative user:" WARNING: Un-translated message in PO file. 832: "\n$ ulimit -a\ncore file size (blocks, -c) 0\ndata seg s... WARNING: Un-translated message in PO file. 848: "For more information read:" WARNING: Un-translated message in PO file. 851: "LASG in ... WARNING: Un-translated message in PO file. 863: "User login actions: edit /etc/login.defs" WARNING: Un-translated message in PO file. 866: "The next step is to edit the basic configuration and action upo... WARNING: Un-translated message in PO file. 886: "If you set this variable to 'yes' it will record unknown userna... WARNING: Un-translated message in PO file. 916: "As stated above, encrypted passwords greatly reduce the problem... WARNING: Un-translated message in PO file. 919: "User login actions: edit /etc/pam.d/login" WARNING: Un-translated message in PO file. 922: "You can adjust the login configuration file to implement an str... WARNING: Un-translated message in PO file. 932: "Increasing the delay value to a higher val... WARNING: Un-translated message in PO file. 935: "In this file you can also set the system to present a message t... WARNING: Un-translated message in PO file. 945: "If required by your security policy, this file can be used to s... WARNING: Un-translated message in PO file. 948: "setting rules for which users can access at which times, by ena... WARNING: Un-translated message in PO file. 951: "setup login sessions to use user limits as defined in /etc/motd and /... WARNING: Un-translated message in PO file. 960: "Restricting ftp: editing /etc/ftpusers" WARNING: Un-translated message in PO file. 966: "FIXME (BUG): Is it a bug that the default ftpusers/e... WARNING: Un-translated message in PO file. 991: "Disallow remote administrative access" WARNING: Un-translated message in PO file. 994: "You should also modify /etc/security/access.conf/etc/security/a... WARNING: Un-translated message in PO file. 1007: "Remember to enable the pam_access mo... WARNING: Un-translated message in PO file. 1019: "Debian currently provides in the unstable release (and might be... WARNING: Un-translated message in PO file. 1025: "Information on how to chroot users accessing... WARNING: Un-translated message in PO file. 1028: "User auditing" WARNING: Un-translated message in PO file. 1031: "If you are really paranoid you might want to add a system-wide ... WARNING: Un-translated message in PO file. 1034: "Input and output audit with script" WARNING: Un-translated message in PO file. 1037: "You can use the script command to audit both... WARNING: Un-translated message in PO file. 1049: "Of course, if you do this system wide it means that the shell w... WARNING: Un-translated message in PO file. 1052: "You also need to setup the files in the audit directory (in the... WARNING: Un-translated message in PO file. 1055: "A useful alternative for sysadmins, which includes date informa... WARNING: Un-translated message in PO file. 1067: "Using the shell history file" WARNING: Un-translated message in PO file. 1070: "If you want to review what does the user type in the shell (but... WARNING: Un-translated message in PO file. 1073: "For example, for bash, the /etc/profile co... WARNING: Un-translated message in PO file. 1076: "\n HISTFILE=~/.bash_history\n HISTSIZE=10000\n HISTFILESIZE=... WARNING: Un-translated message in PO file. 1093: "For this to work, the user can only append information to umask setting is ... WARNING: Un-translated message in PO file. 1132: "If Debian's default value is too permissive for your system you... WARNING: Un-translated message in PO file. 1135: "This change is set by defining a proper umasklogin the U... WARNING: Un-translated message in PO file. 1141: "Don't forget to review and maybe modify the dotfiles under umasklibpam-umask package adjusts the... WARNING: Un-translated message in PO file. 1157: "Finally, you should consider changing root's default 022 umask ... WARNING: Un-translated message in PO file. 1160: "Limiting what users can see/access" WARNING: Un-translated message in PO file. 1163: "FIXME: Content needed. Describe the consequences of changing pa... WARNING: Un-translated message in PO file. 1166: "If you need to grant users access to the system with a shell th... WARNING: Un-translated message in PO file. 1169: "some configuration files in /etc. However,... WARNING: Un-translated message in PO file. 1175: "as superuser." WARNING: Un-translated message in PO file. 1178: "your installed packages, either by looking at the package datab... WARNING: Un-translated message in PO file. 1181: "some log files at /var/log. Note also that... WARNING: Un-translated message in PO file. 1187: ") and some are even only available to the root user (try" WARNING: Un-translated message in PO file. 1200: "What can a user see in your system? Probably quite a lot of thi... WARNING: Un-translated message in PO file. 1212: "The output is the list of files that a user can see$HOME directories are create... WARNING: Un-translated message in PO file. 1227: "You can change this behavior so that user creation provides dif... WARNING: Un-translated message in PO file. 1230: "Users can still share information, but not directly in their Passwd does not allow non-interactive assign... WARNING: Un-translated message in PO file. 1245: "Checking user passwords" WARNING: Un-translated message in PO file. 1248: "User passwords can sometimes become the weakest link<... WARNING: Un-translated message in PO file. 1251: "A system administrator must, given a big number of users, check... WARNING: Un-translated message in PO file. 1254: "An administrator can use john or bash is the user shell, a system ... WARNING: Un-translated message in PO file. 1278: "Install timeoutd and configure autolog and configure it to ... WARNING: Un-translated message in PO file. 1284: "The timeoutd or autolog d... WARNING: Un-translated message in PO file. 1290: "TCP wrappers were developed when there were no real packet filt... WARNING: Un-translated message in PO file. 1302: "On the one hand, for services configured in /etc/inet... WARNING: Un-translated message in PO file. 1305: "To see which packages use tcpwrappers On older... WARNING: Un-translated message in PO file. 1308: "\n $ apt-cache rdepends libwrap0" WARNING: Un-translated message in PO file. 1351: "Debian GNU/Linux provides some tools to perform log analysis, m... WARNING: Un-translated message in PO file. 1354: "\n daemon,mail.*;\\\n news.=crit;news.=err;news.=notice... WARNING: Un-translated message in PO file. 1362: "To colorize the logs, you could take a look at col... WARNING: Un-translated message in PO file. 1365: "Using and customizing logcheck" WARNING: Un-translated message in PO file. 1368: "The logcheck package in Debian is divided in... WARNING: Un-translated message in PO file. 1374: "The best way to configure logcheck is to edi... WARNING: Un-translated message in PO file. 1377: "Once this is done you might want to check the mails that are se... WARNING: Un-translated message in PO file. 1401: "A loghost is a host which collects syslog data remotely over th... WARNING: Un-translated message in PO file. 1404: "syslogd -r" WARNING: Un-translated message in PO file. 1407: "and a new loghost is born. In order to do this permanently in D... WARNING: Un-translated message in PO file. 1417: "to" WARNING: Un-translated message in PO file. 1447: "into your syslog.conf. Logging remotely as... WARNING: Un-translated message in PO file. 1453: "It is not only important to decide how alerts are used, but als... WARNING: Un-translated message in PO file. 1459: "\n # find /var/log -type f -exec ls -l {} \\; | cut -c 17-35 ... WARNING: Un-translated message in PO file. 1471: "To customize how log files are created you will probably have t... WARNING: Un-translated message in PO file. 1480: "Linux Intrusion DetectionLinux Trustees<... WARNING: Un-translated message in PO file. 1486: "NSA Enhanced Linux (in package selinuxGrsecurity patch<... WARNING: Un-translated message in PO file. 1495: "The kernel-patch-adamantix provides ... WARNING: Un-translated message in PO file. 1498: "cryptoloop-source. This patches allo... WARNING: Un-translated message in PO file. 1501: "IPSEC kernel support (in package linux-patch-opens... WARNING: Un-translated message in PO file. 1504: "The following security kernel patches are only available for ol... WARNING: Un-translated message in PO file. 1507: "kernel-patch-int. This patch also ad... WARNING: Un-translated message in PO file. 1516: "However, some patches have not been provided in Debian yet. If ... WARNING: Un-translated message in PO file. 1519: "Protecting against buffer overflows" WARNING: Un-translated message in PO file. 1522: "Buffer overflow is the name of a common at... WARNING: Un-translated message in PO file. 1525: "There are mainly four methods to protect against buffer overflo... WARNING: Un-translated message in PO file. 1528: "patch the kernel to prevent stack execution. You can use either... WARNING: Un-translated message in PO file. 1531: "fix the source code by using tools to find fragments of it that... WARNING: Un-translated message in PO file. 1534: "recompile the source code to introduce proper checks that preve... WARNING: Un-translated message in PO file. 1537: "Debian GNU/Linux, as of the 3.0 release, provides software to i... WARNING: Un-translated message in PO file. 1540: "Notice that even if Debian provided a compiler which featured s... WARNING: Un-translated message in PO file. 1543: "In any case, be aware that even these workarounds might not pre... WARNING: Un-translated message in PO file. 1546: "If you want to test out your buffer overflow protection once yo... WARNING: Un-translated message in PO file. 1549: "Kernel patch protection for buffer overflows" WARNING: Un-translated message in PO file. 1552: "Kernel patches related to buffer overflows include the Openwall... WARNING: Un-translated message in PO file. 1555: "Testing programs for overflows" WARNING: Un-translated message in PO file. 1558: "The use of tools to detect buffer overflows requires, in any ca... WARNING: Un-translated message in PO file. 1564: "During normal system administration one usually needs to transf... WARNING: Un-translated message in PO file. 1567: "Any of these methods need special clients. Debian does provide ... WARNING: Un-translated message in PO file. 1570: "Note that using scp provides access to the u... WARNING: Un-translated message in PO file. 1594: "Use quotas on all user-writable areas, on /hometouch\n/home/quota.user /home/quota.group/home file system)." WARNING: Un-translated message in PO file. 1614: "Restart quota by doing" WARNING: Un-translated message in PO file. 1617: "/etc/init.d/quota stop;/etc/init.d/quota\n st... WARNING: Un-translated message in PO file. 1622: ". Now quota should be running, and quota sizes can be set." WARNING: Un-translated message in PO file. 1625: "Editing quotas for a specific user can be done by" WARNING: Un-translated message in PO file. 1628: "edquota -u <user>" WARNING: Un-translated message in PO file. 1631: ". Group quotas can be modified with" WARNING: Un-translated message in PO file. 1634: "edquota -g <group>" WARNING: Un-translated message in PO file. 1637: ". Then set the soft and hard quota and/or inode quotas as neede... WARNING: Un-translated message in PO file. 1643: "The ext2 filesystem specific attributes (chattrlcap CAP_LINUX_IMMUTABLEsxid,... WARNING: Un-translated message in PO file. 1694: "You might want to use locate to index the wh... WARNING: Un-translated message in PO file. 1697: "You might want to use bsign or checksecurity package pro... WARNING: Un-translated message in PO file. 1709: "Securing network access" WARNING: Un-translated message in PO file. 1712: "FIXME: More (Debian-specific) content needed." WARNING: Un-translated message in PO file. 1718: "Many features of the kernel can be modified while running by ec... WARNING: Un-translated message in PO file. 1721: "/sbin/sysctl -w variable=value" WARNING: Un-translated message in PO file. 1724: "(see sysctlWindows emulator because it acts... WARNING: Un-translated message in PO file. 1737: "If you want to prevent you system from answering ICMP echo requ... WARNING: Un-translated message in PO file. 1757: "For more information on what things can be done with ... WARNING: Un-translated message in PO file. 1760: "Configuring syncookies" WARNING: Un-translated message in PO file. 1763: "This option is a double-edged sword. On the one hand it protect... WARNING: Un-translated message in PO file. 1773: "If you want to change this option each time the kernel is worki... WARNING: Un-translated message in PO file. 1776: "\necho 1 > /proc/sys/net/ipv4/tcp_syncookies " WARNING: Un-translated message in PO file. 1781: "This option will only be available if the kernel is compiled wi... WARNING: Un-translated message in PO file. 1784: "\n$ sysctl -A |grep syncookies\nnet/ipv4/tcp_syncookies = 1" WARNING: Un-translated message in PO file. 1790: "For more information on TCP syncookies read /etc/sysctl.conf configura... WARNING: Un-translated message in PO file. 1805: "\n#\n# /etc/sysctl.conf - Configuration file for setting system... WARNING: Un-translated message in PO file. 1861: "To use the script you need to first create the script, for exam... WARNING: Un-translated message in PO file. 1883: "In this example, before the interface eth0 is enabled the scrip... WARNING: Un-translated message in PO file. 1886: "\n#!/bin/sh -e\n# Script-name: /etc/network/interface-secure\n#... WARNING: Un-translated message in PO file. 1920: "Notice that you can actually have per-interface scripts that wi... WARNING: Un-translated message in PO file. 1923: "\npre-up /etc/network/interface-secure $IFACE" WARNING: Un-translated message in PO file. 1928: "And use a script which will only apply changes to a specific in... WARNING: Un-translated message in PO file. 1931: "\n#!/bin/sh -e\n# Script-name: /etc/network/interface-secure\n#... WARNING: Un-translated message in PO file. 1972: "An alternative solution is to create an init.d The fact that thi... WARNING: Un-translated message in PO file. 2019: "kernel patching. There are some patches availa... WARNING: Un-translated message in PO file. 2022: "Along this text there will be many occasions in which it is sho... WARNING: Un-translated message in PO file. 2025: "FIXME: Comments on Bugtraq indicate there is a Linux specific m... WARNING: Un-translated message in PO file. 2028: "FIXME: Submit a bug against netbase so that the routing fix is ... WARNING: Un-translated message in PO file. 2031: "Protecting against ARP attacks" WARNING: Un-translated message in PO file. 2034: "When you don't trust the other boxes on your LAN (which should ... WARNING: Un-translated message in PO file. 2037: "As you know the ARP protocol is used to link IP addresses to MA... WARNING: Un-translated message in PO file. 2040: "Those attacks (ARP cache poisoning, ARP spoofing...) allow the ... WARNING: Un-translated message in PO file. 2043: "However, there is always a solution:" WARNING: Un-translated message in PO file. 2046: "Use a static ARP cache. You can set up \"static\" entries in yo... WARNING: Un-translated message in PO file. 2049: "\n arp -s host_name hdwr_addr \n " WARNING: Un-translated message in PO file. 2055: "By setting static entries for each important host in your netwo... WARNING: Un-translated message in PO file. 2058: "Detect suspicious ARP traffic. You can use arpwatc... WARNING: Un-translated message in PO file. 2061: "Implement IP traffic filtering validating the MAC address." WARNING: Un-translated message in PO file. 2064: "Taking a snapshot of the system" WARNING: Un-translated message in PO file. 2067: "Before putting the system into production system you could take... WARNING: Un-translated message in PO file. 2070: "For this you can use a writable removable-media that can be set... WARNING: Un-translated message in PO file. 2073: "The following script creates such a snapshot:" WARNING: Message missing from PO file, consider updating your POT and PO files. "\n#!/bin/bash\n/bin/mount /dev/fd0 /mnt/floppy\ntrap \"/bin/umount /dev/fd0\" 0 1 2 3 9 13 15\nif [ ! -f /usr/bin/md5sum ] ; then\n echo \"Cannot find md5sum. Aborting.\"\n exit 1\nfi\n/bin/cp /usr/bin/md5sum /mnt/floppy\necho \"Calculating md5 database\"\n>/mnt/floppy/md5checksums.txt\nfor dir in /bin/ /sbin/ /usr/bin/ /usr/sbin/ /lib/ /usr/lib/\ndo\n find $dir -type f | xargs /usr/bin/md5sum >>/mnt/floppy/md5checksums-lib.txt\ndone\necho \"post installation md5 database calculated\"\nif [ ! -f /usr/bin/sha1sum ] ; then\n echo \"Cannot find sha1sum\"\n echo \"WARNING: Only md5 database will be stored\"\nelse\n /bin/cp /usr/bin/sha1sum /mnt/floppy\n echo \"Calculating SHA-1 database\"\n >/mnt/floppy/sha1checksums.txt\n for dir in /bin/ /sbin/ /usr/bin/ /usr/sbin/ /lib/ /usr/lib/\n do\n find $dir -type f | xargs /usr/bin/sha1sum >>/mnt/floppy/sha1checksums-lib.txt\n done\n echo \"post installation sha1 database calculated\"\nfi\nexit 0" WARNING: Un-translated message in PO file. 2109: "Note that the md5sum binary (and sha1sum, if available) is plac... WARNING: Un-translated message in PO file. 2112: "The snapshot does not include the files under /var/li... WARNING: Un-translated message in PO file. 2115: "the md5sums files include the md5sum of all files provided by t... WARNING: Un-translated message in PO file. 2118: "not all Debian packages provide md5sums for the files installed... WARNING: Un-translated message in PO file. 2121: "\n# debsums --generate=missing,keep" WARNING: Un-translated message in PO file. 2126: "Once the snapshot is done you should make sure to set the mediu... WARNING: Un-translated message in PO file. 2129: "If you do not want to setup a manual check you can always use a...  Merging ja-JP/05_services.po >> en-US/05_services.xml -> tmp/ja-JP/xml_tmp//05_services.xml WARNING: Un-translated message in PO file. 30: "Regarding the services running from inetd (<... WARNING: Un-translated message in PO file. 80: "Port 666 or ListenAddress 192.168.0... WARNING: Un-translated message in PO file. 83: "PermitEmptyPasswords no Empty passwords make... WARNING: Un-translated message in PO file. 86: "AllowUsers alex ref me@somewhere Allow only ... WARNING: Un-translated message in PO file. 95: "Disable any form of authentication you do not really need, if y... WARNING: Un-translated message in PO file. 98: "Protocol 2 Disable the protocol version 1, s... WARNING: Un-translated message in PO file. 101: "Banner /etc/some_filep... WARNING: Un-translated message in PO file. 107: "\nauth required pam_listfile.so sense=allow onerr=fai... WARNING: Un-translated message in PO file. 118: "Chrooting ssh" WARNING: Un-translated message in PO file. 121: "Currently OpenSSH does not provide a way to chroot automaticall... WARNING: Un-translated message in PO file. 124: "In you can find several opt... WARNING: Un-translated message in PO file. 127: "Ssh clients" WARNING: Un-translated message in PO file. 130: "If you are using an SSH client against the SSH server you must ... WARNING: Un-translated message in PO file. 133: "Disallowing file transfers" WARNING: Un-translated message in PO file. 136: "If you do not want users to transfer files... WARNING: Un-translated message in PO file. 139: "You can also chroot users (using libpam-chrootscponlysquidtaild - Squid log monitoring pr... WARNING: Un-translated message in PO file. 227: "When using Squid in Accelerator Mode it acts as a web server to... WARNING: Un-translated message in PO file. 252: "However, if you still maintain the FTP server while making user... WARNING: Un-translated message in PO file. 261: "A much more secure solution, though, is to use ssh to tunnel X ... WARNING: Un-translated message in PO file. 267: "\n$ startx -- -nolisten tcp" WARNING: Un-translated message in PO file. 284: "If you are using XDM set /etc/X11/xdm/Xserversxscr... WARNING: Un-translated message in PO file. 290: "\n*lock: False" WARNING: Un-translated message in PO file. 295: "(which is the default in Debian) to:" WARNING: Un-translated message in PO file. 298: "\n*lock: True" WARNING: Un-translated message in PO file. 303: "FIXME: Add information on how to disable the screensavers which... WARNING: Un-translated message in PO file. 325: "For GDM there should be in your gdm.conf:" WARNING: Un-translated message in PO file. 328: "\n[xdmcp]\nEnable=false" WARNING: Un-translated message in PO file. 340: "Imagine, you arrive at work, and the printer is spitting out en... WARNING: Un-translated message in PO file. 343: "In any UNIX printing architecture, there has to be a way to get... WARNING: Un-translated message in PO file. 358: "In cups, the print data is transferr... WARNING: Un-translated message in PO file. 371: "There are many other security options like allowing or denying ... WARNING: Un-translated message in PO file. 374: "\n<Location />\n Order Deny,Allow\n Deny From All\n Allow... WARNING: Un-translated message in PO file. 383: "This configuration file can be modified to add some more featur... WARNING: Un-translated message in PO file. 386: "FIXME: Add more content (the article on exim you do not need the daemon ... WARNING: Un-translated message in PO file. 404: "Configuring a Nullmailer" WARNING: Un-translated message in PO file. 407: "You might want to have a local mailer daemon so that it can rel... WARNING: Un-translated message in PO file. 410: "Such a relay-only system should be configu... WARNING: Un-translated message in PO file. 413: "The following configuration steps only need to be taken to conf... WARNING: Un-translated message in PO file. 416: "In a Debian 3.0 system using exim, y... WARNING: Un-translated message in PO file. 452: "In any case, to reject mail relay attempts at the SMTP level, y... WARNING: Un-translated message in PO file. 455: "\nreceiver_verify = true" WARNING: Un-translated message in PO file. 460: "Even if your mail server will not relay the message, this kind ... WARNING: Un-translated message in PO file. 463: "If you want a relay-only setup, however, you can consider chang... WARNING: Un-translated message in PO file. 466: "Providing secure access to mailboxes" WARNING: Un-translated message in PO file. 469: "If you want to give remote access to mailboxes there are a numb... WARNING: Un-translated message in PO file. 472: "Try, for example, to configure as your inbox path {ser... WARNING: Un-translated message in PO file. 475: "Of the IMAP servers in Debian the cyrus serv... WARNING: Un-translated message in PO file. 478: "Also, you might want to run an IMAP server that does not need v... WARNING: Un-translated message in PO file. 481: "FIXME: Check: uw-imapd might be conf... WARNING: Un-translated message in PO file. 537: "Bind configuration to avoid misuse" WARNING: Un-translated message in PO file. 585: "A sample named.conf configuration file mig... WARNING: Un-translated message in PO file. 588: "\nacl internal {\n 127.0.0.1/32; // localhost\... WARNING: Un-translated message in PO file. 650: "Please (again) check the Bug Tracking System regarding Bind, sp... WARNING: Un-translated message in PO file. 653: "Changing BIND's user" WARNING: Un-translated message in PO file. 659: "Notice, in any case, that this only applies to BIND version 8. ... WARNING: Un-translated message in PO file. 665: "\naddgroup named\nadduser --system --home /home/named --no-crea... WARNING: Un-translated message in PO file. 672: "Notice that the user named will be quite res... WARNING: Un-translated message in PO file. 692: "toNote that depending on your bind version you ... WARNING: Un-translated message in PO file. 702: "Or you can change (create it if it does not exit) the default c... WARNING: Un-translated message in PO file. 705: "\nOPTIONS=\"-u named -g named\"" WARNING: Un-translated message in PO file. 710: "Change the permissions of files that are used by Bind, includin... WARNING: Un-translated message in PO file. 713: "\n-rw-r----- 1 root named 77 Jan 4 01:02 rndc.... WARNING: Un-translated message in PO file. 718: "and where bind creates its pidfile, using, for example, does not run as root... WARNING: Un-translated message in PO file. 771: "Chrooting the name server" WARNING: Un-translated message in PO file. 774: "To achieve maximum BIND security, now build a chroot jail (see ... WARNING: Un-translated message in PO file. 806: "If you are setting up a full chroot jail (i.e. not just syslogd listen on $... WARNING: Un-translated message in PO file. 843: "If you want to avoid problems with dynamic libraries, you can c... WARNING: Un-translated message in PO file. 846: "\n$ apt-get source bind\n# apt-get build-dep bind\n$ cd bind-8.... WARNING: Un-translated message in PO file. 858: "After installation, you will need to move around the files to t... WARNING: Un-translated message in PO file. 861: "For more information on how to set up chroots see ... WARNING: Un-translated message in PO file. 925: "However, if the module was linked statically (you can list the ... WARNING: Un-translated message in PO file. 928: "\nUserdir disabled" WARNING: Un-translated message in PO file. 933: "An attacker might still do user enumeration, since the answer o... WARNING: Un-translated message in PO file. 939: "Apache logfiles, since 1.3.22-1, are owned by user 'root' and g... WARNING: Un-translated message in PO file. 942: "Published web files" WARNING: Un-translated message in PO file. 945: "Apache files are located under /var/www. J... WARNING: Un-translated message in PO file. 978: "Many services running as daemons could benefit from this sort o... WARNING: Un-translated message in PO file. 981: "This includes: name servers (such as bind), ... WARNING: Un-translated message in PO file. 984: "However, Debian does provide some software that can help set up... WARNING: Un-translated message in PO file. 987: "Anyway, if you run any service on your system, you should consi... WARNING: Un-translated message in PO file. 993: "Making chrooted environments automatically" WARNING: Un-translated message in PO file. 996: "There are several programs to chroot automatically servers and ... WARNING: Un-translated message in PO file. 999: "Some of these tools can be used to set up the chroot environmen... WARNING: Un-translated message in PO file. 1029: "Securing RPC services" WARNING: Un-translated message in PO file. 1032: "You should disable RPC if you do not need it." WARNING: Un-translated message in PO file. 1035: "Remote Procedure Call (RPC) is a protocol that programs can use... WARNING: Un-translated message in PO file. 1038: "RPC-based services have had a bad record of security holes, alt... WARNING: Un-translated message in PO file. 1041: "You only need RPC if you are using an RPC-based service. The mo... WARNING: Un-translated message in PO file. 1044: "NFS services are quite important in some networks. If that is t... WARNING: Un-translated message in PO file. 1053: "Notice that some desktop environments (notably, GNOME) use RPC ... WARNING: Un-translated message in PO file. 1056: "Limiting access to RPC services" WARNING: Un-translated message in PO file. 1059: "Unfortunately, in some cases removing RPC services from the sys... WARNING: Un-translated message in PO file. 1062: "There are several ways to limit access to the portmapper and to... WARNING: Un-translated message in PO file. 1065: "Block access to the ports used by these services with a local f... WARNING: Un-translated message in PO file. 1068: "Block access to these services using tcp wrappers, since the po... WARNING: Un-translated message in PO file. 1071: "Since version 5-5, the portmap packa... WARNING: Un-translated message in PO file. 1077: "The Debian GNU/Linux operating system has the built-in capabili... WARNING: Un-translated message in PO file. 1089: "On the other hand, having firewall rules on the local system al... WARNING: Un-translated message in PO file. 1092: "Thus, a proper firewall setup would be one with a default deny ... WARNING: Un-translated message in PO file. 1095: "incoming connections are allowed only to local services by allo... WARNING: Un-translated message in PO file. 1098: "outgoing connections are only allowed to services used by your ... WARNING: Un-translated message in PO file. 1101: "the forward rule denies everything (unless you are protecting o... WARNING: Un-translated message in PO file. 1104: "all other incoming or outgoing connections are denied." WARNING: Un-translated message in PO file. 1110: "A Debian firewall can also be installed in order to protect, wi... WARNING: Un-translated message in PO file. 1113: "You can even set up a Debian GNU/Linux box as a bridge firewall... WARNING: Un-translated message in PO file. 1116: "Setting up a firewall" WARNING: Un-translated message in PO file. 1119: "The default Debian installation, unlike other Linux distributio... WARNING: Un-translated message in PO file. 1122: "Of course, the configuration of the firewall is always system a... WARNING: Un-translated message in PO file. 1125: "The tools can easily be misused, causing enormous amo... WARNING: Un-translated message in PO file. 1128: "Remember this: just installing the iptablesfirestarter, a GNOME application ori... WARNING: Un-translated message in PO file. 1152: "guarddog, a KDE based firewall confi... WARNING: Un-translated message in PO file. 1155: "knetfilter, a KDE GUI to manage fire... WARNING: Un-translated message in PO file. 1158: "fireflier, an interactive tool to create iptables rules based o... WARNING: Un-translated message in PO file. 1161: "For servers (headless) systems:" WARNING: Un-translated message in PO file. 1164: "fwbuilder, an object oriented GUI wh... WARNING: Un-translated message in PO file. 1167: "shorewall, a firewall configuration ... WARNING: Un-translated message in PO file. 1170: "bastille, this hardening application... WARNING: Un-translated message in PO file. 1173: "Lots of other iptables frontends come with Debian; an extensive... WARNING: Un-translated message in PO file. 1176: "Notice that some of the packages outlined previously will intro... WARNING: Un-translated message in PO file. 1179: "As mentioned before, some programs, like firestart... WARNING: Un-translated message in PO file. 1182: "There is yet another type of firewall application: application ... WARNING: Un-translated message in PO file. 1185: "Manual init.d configuration" WARNING: Un-translated message in PO file. 1188: "Another possibility is to manually configure your firewall rule... WARNING: Un-translated message in PO file. 1191: "Review the script below and adapt it to your needs." WARNING: Un-translated message in PO file. 1194: "Test the script and review the syslog messages to see which tra... WARNING: Un-translated message in PO file. 1197: "Move the script to /etc/init.d/myfirewall" WARNING: Un-translated message in PO file. 1200: "The below script takes advantage of Debian's use (since Squeeze... WARNING: Un-translated message in PO file. 1210: "This is the sample firewall script:" WARNING: Un-translated message in PO file. 1536: "Instead of including all of the iptables rules in the init.d sc... WARNING: Un-translated message in PO file. 1539: "Configuring firewall rules through ifup" WARNING: Un-translated message in PO file. 1542: "You can use also the network configuration in /etc/ne... WARNING: Un-translated message in PO file. 1545: "Create your firewalling ruleset for when the interface is activ... WARNING: Un-translated message in PO file. 1548: "Save your ruleset with iptables-save to a fi... WARNING: Un-translated message in PO file. 1551: "Configure /etc/network/interfaces to use t... WARNING: Un-translated message in PO file. 1567: "You can optionally also setup a set of rules to be applied when... WARNING: Un-translated message in PO file. 1577: "For more advanced firewall configuration scripts through > en-US/06_automatic.xml -> tmp/ja-JP/xml_tmp//06_automatic.xml WARNING: Un-translated message in PO file. 27: "The harden package tries to make it more eas... WARNING: Un-translated message in PO file. 45: "harden-nids: helps to install a network intr... WARNING: Un-translated message in PO file. 48: "harden-surveillance: helps to install tools ... WARNING: Un-translated message in PO file. 51: "Useful packages which are not a dependence:" WARNING: Un-translated message in PO file. 57: "harden-development: development tools for cr... WARNING: Un-translated message in PO file. 92: "Answer questions step by step regarding the desired security of... WARNING: Un-translated message in PO file. 98: "Take a predefined configuration file (could be provided by Bast...  Merging ja-JP/07_infrastructure.po >> en-US/07_infrastructure.xml -> tmp/ja-JP/xml_tmp//07_infrastructure.xml WARNING: Un-translated message in PO file. 15: "Debian Security Infrastructure" WARNING: Un-translated message in PO file. 18: "The Debian Security Team" WARNING: Un-translated message in PO file. 21: "Debian has a Security Team, that handles security in the debsecan uses the information in... WARNING: Un-translated message in PO file. 132: "Debian Security Build Infrastructure" WARNING: Un-translated message in PO file. 135: "Since Debian is currently supported in a large number of archit... WARNING: Un-translated message in PO file. 138: "Packages in the security archive are autobuilt, just like the r... WARNING: Un-translated message in PO file. 141: "Thus, the security upload archive works with the following proc... WARNING: Un-translated message in PO file. 144: "Someone finds a security problem." WARNING: Un-translated message in PO file. 147: "Someone fixes the problem, and makes an upload to security-mast... WARNING: Un-translated message in PO file. 150: "The upload gets checked and processed by a Debian system and mo... WARNING: Un-translated message in PO file. 153: "Security-enabled buildds pick up the source package (prioritize... WARNING: Un-translated message in PO file. 156: "The security team reply to the logs, and the newly built packag... WARNING: Un-translated message in PO file. 159: "When the security team find the source package acceptable (i.e.... WARNING: Un-translated message in PO file. 162: "installs the package into the security archive." WARNING: Un-translated message in PO file. 165: "updates the Packages, SourcesRelease file is downloaded by ... WARNING: Un-translated message in PO file. 222: "This scheme is etch<... WARNING: Un-translated message in PO file. 234: "These changes are based on the patch for apt... WARNING: Un-translated message in PO file. 237: "Secure apt works by checking the distribution through the gpg is the tool used in secure apt to sign f... WARNING: Un-translated message in PO file. 270: "apt-key is a program that is used to manage ... WARNING: Un-translated message in PO file. 273: "Release checksums" WARNING: Un-translated message in PO file. 276: "A Debian archive contains a Release file, ... WARNING: Un-translated message in PO file. 279: "\nMD5Sum:\n 6b05b392f792ba5a436d590c129de21f 3453 Pa... WARNING: Un-translated message in PO file. 288: "The Release files also include SHA-1 check... WARNING: Un-translated message in PO file. 291: "Now if we look inside a Packages file, we'... WARNING: Un-translated message in PO file. 311: "These two checksums can be used to verify that you have downloa... WARNING: Un-translated message in PO file. 314: "None of this is new in secure apt, but it does provide the foun... WARNING: Un-translated message in PO file. 317: "Verification of the Release file" WARNING: Un-translated message in PO file. 320: "To verify the Release file, a gpg signatur... WARNING: Un-translated message in PO file. 342: "Check of Release.gpg by aptRelease.gpg fi... WARNING: Un-translated message in PO file. 348: "\nW: GPG error: http://ftp.us.debian.org testing Release: The f... WARNING: Un-translated message in PO file. 354: "Note that the second half of the long number is the key id of t... WARNING: Un-translated message in PO file. 357: "If you ignore that warning and try to install a package later, ... WARNING: Un-translated message in PO file. 360: "\nWARNING: The following packages cannot be authenticated!\n l... WARNING: Un-translated message in PO file. 367: "If you say Y here you have no way to know if the file you're ge... WARNING: Un-translated message in PO file. 370: "Note that you can disable these checks by running apt with --al... WARNING: Un-translated message in PO file. 373: "It's also worth noting that newer versions of the Debian instal... WARNING: Un-translated message in PO file. 376: "How to tell apt what to trust" WARNING: Un-translated message in PO file. 379: "So the security of the whole system depends on there being a apt trust the official Debian... WARNING: Un-translated message in PO file. 406: "Finding the key for a repository" WARNING: Un-translated message in PO file. 409: "The debian-archive-keyring package is used to distribute keys t... WARNING: Un-translated message in PO file. 412: "For other archives, there is not yet a standard location where ... WARNING: Un-translated message in PO file. 415: "The Debian archive signing key is available at gpg itself has a standard way to distribute ... WARNING: Un-translated message in PO file. 421: "\n$ gpg --keyserver pgpkeys.mit.edu --recv-key 2D230C5F\ngpg: r... WARNING: Un-translated message in PO file. 431: "You can then export that key from your own keyring and feed it ... WARNING: Un-translated message in PO file. 434: "\n$ gpg -a --export 2D230C5F | sudo apt-key add -\ngpg: no ulti... WARNING: Un-translated message in PO file. 441: "The \"gpg: no ultimately trusted keys found\" warning means tha... WARNING: Un-translated message in PO file. 444: "Safely adding a key" WARNING: Un-translated message in PO file. 447: "By adding a key to apt's keyring, you're telling apt to trust e... WARNING: Un-translated message in PO file. 450: "It's good to be paranoid in security, but verifying things from... WARNING: Un-translated message in PO file. 453: "If you can't afford this level of paranoia, do whatever feels a... WARNING: Un-translated message in PO file. 456: "Verifying key integrity" WARNING: Un-translated message in PO file. 459: "You can verify the fingerprint as well as the signatures on the... WARNING: Un-translated message in PO file. 462: "\n$ GET http://ftp-master.debian.org/ziyi_key_2006.asc | gpg --... WARNING: Un-translated message in PO file. 483: "and then ... WARNING: Un-translated message in PO file. 504: "In January 2006, a new key for 2006 was made and the Release fi... WARNING: Un-translated message in PO file. 507: "Known release checking problems" WARNING: Un-translated message in PO file. 510: "One not so obvious problem is that if your clock is very far of... WARNING: Un-translated message in PO file. 513: "\nW: GPG error: http://archive.progeny.com sid Release: Unknown... WARNING: Un-translated message in PO file. 518: "Although apt-key list will make the problem ... WARNING: Un-translated message in PO file. 521: "\ngpg: key 2D230C5F was created 192324901 seconds in the future... WARNING: Un-translated message in PO file. 529: "If it's set to a date too far in the future, apt will treat the... WARNING: Un-translated message in PO file. 532: "Another problem you may encouter if using testing or unstable i... WARNING: Un-translated message in PO file. 535: "Manual per distribution release check" WARNING: Un-translated message in PO file. 538: "In case you want to add now the additional security checks and ... WARNING: Un-translated message in PO file. 563: "\n gpg --no-default-keyring --keyring trustedkeys.gpg --import... WARNING: Un-translated message in PO file. 578: "This is the example code for apt-check-sigs,... WARNING: Un-translated message in PO file. 1074: "You might need to apply the following patch for sid... WARNING: Un-translated message in PO file. 1106: "\n$ rm -f dists/unstable/Release\n$ apt-ftparchive release dist... WARNING: Un-translated message in PO file. 1119: "This package signing scheme can be implemented using d... WARNING: Un-translated message in PO file. 1122: "Latest dpkg versions (since 1.9.21) incorpor... WARNING: Un-translated message in PO file. 1128: "NOTE2: Signatures from developers are currently stripped when t...  Merging ja-JP/08_sec-tools.po >> en-US/08_sec-tools.xml -> tmp/ja-JP/xml_tmp//08_sec-tools.xml WARNING: Un-translated message in PO file. 20: "Debian provides also a number of security tools that can make a... WARNING: Un-translated message in PO file. 23: "Since Debian 3.0 (woody), the distribution... WARNING: Un-translated message in PO file. 29: "The tools provided by Debian to perform remote vulnerability as... WARNING: Un-translated message in PO file. 38: "nikto (whisker's ... WARNING: Un-translated message in PO file. 53: "nmap" WARNING: Un-translated message in PO file. 56: "xprobe" WARNING: Un-translated message in PO file. 59: "p0f" WARNING: Un-translated message in PO file. 62: "knocker" WARNING: Un-translated message in PO file. 65: "isic" WARNING: Un-translated message in PO file. 68: "hping2" WARNING: Un-translated message in PO file. 71: "icmpush" WARNING: Un-translated message in PO file. 74: "nbtscan (for SMB /NetBIOS audits)" WARNING: Un-translated message in PO file. 77: "fragrouter" WARNING: Un-translated message in PO file. 80: "strobe (in the netdiagirpas" WARNING: Un-translated message in PO file. 92: "On the other hand, fragrouter can be... WARNING: Un-translated message in PO file. 95: "FIXME: Check tunnelv (non-US section)" WARNING: Un-translated message in PO file. 161: "The OpenSWAN package is probably the best choice overall, since... WARNING: Un-translated message in PO file. 167: "Also worth checking out is ... WARNING: Un-translated message in PO file. 248: "mailscanner an e-mail gateway virus ... WARNING: Un-translated message in PO file. 251: "libfile-scan-perl which provides Fil... WARNING: Un-translated message in PO file. 254: "exiscan, an e-mail virus scanner wri... WARNING: Un-translated message in PO file. 266: "blackhole-qmail a spam filter for Qm... WARNING: Un-translated message in PO file. 269: "Some gateway daemons support already tools extensions to build ... WARNING: Un-translated message in PO file. 272: "Debian currently provide clamav as the only ... WARNING: Un-translated message in PO file. 275: "Some other free software antivirus projects which might be incl... WARNING: Un-translated message in PO file. 278: "FIXME: Is there a package that provides a script to download th... WARNING: Un-translated message in PO file. 281: "FIXME: Check if scannerdaemon is the same as the open antivirus... WARNING: Un-translated message in PO file. 284: "However, Debian will never provide propiet... WARNING: Un-translated message in PO file. 287: "For more information on how to set up a virus detection system ... WARNING: Un-translated message in PO file. 290: "GPG agent" WARNING: Un-translated message in PO file. 293: "It is very common nowadays to digitally sign (and sometimes enc... WARNING: Un-translated message in PO file. 296: "Debian GNU/Linux provides a number of e-mail clients with built... WARNING: Un-translated message in PO file. 308: "icedove (rebranded version of Mozill... WARNING: Un-translated message in PO file. 311: "sylpheed. Depending on how the stabl... WARNING: Un-translated message in PO file. 314: "gnus, which when installed with the ... WARNING: Un-translated message in PO file. 317: "kuvert, which provides this function... WARNING: Un-translated message in PO file. 320: "Key servers allow you to download published public keys so that... WARNING: Un-translated message in PO file. 323: "\nkeyserver wwwkeys.pgp.net" WARNING: Un-translated message in PO file. 327: "Most key servers are linked, so that when your public key is ad... WARNING: Un-translated message in PO file. 330: "For more information:" WARNING: Un-translated message in PO file. 333: "> en-US/09_developer.xml -> tmp/ja-JP/xml_tmp//09_developer.xml WARNING: Un-translated message in PO file. 14: "Developer's Best Practices for OS Security" WARNING: Un-translated message in PO file. 17: "This chapter introduces some best secure coding practices for d... WARNING: Un-translated message in PO file. 20: "Best practices for security review and design" WARNING: Un-translated message in PO file. 23: "Developers that are packaging software should make a best effor... WARNING: Un-translated message in PO file. 26: "In order to do so, they should make their best to review the so... WARNING: Un-translated message in PO file. 29: "The programming bugs which lead to security bugs typically incl... WARNING: Un-translated message in PO file. 32: "Some of these issues might not be easy to spot unless you are a... WARNING: Un-translated message in PO file. 35: "There are a set of tools available to assist to the security co... WARNING: Un-translated message in PO file. 38: "When packaging software developers have to make sure that they ... WARNING: Un-translated message in PO file. 41: "The software runs with the minimum privileges it needs:" WARNING: Un-translated message in PO file. 44: "The package does install binaries setuid or setgid. Li... WARNING: Un-translated message in PO file. 47: "The daemons the package provide run with a low privilege user (... WARNING: Un-translated message in PO file. 50: "Programmed (i.e., cron) tasks running in the... WARNING: Un-translated message in PO file. 53: "If you have to do any of the above make sure the programs that ... WARNING: Un-translated message in PO file. 56: "For more information, specific to secure programming, make sure... WARNING: Un-translated message in PO file. 59: "Creating users and groups for software daemons" WARNING: Un-translated message in PO file. 62: "If your software runs a daemon that does not need root privileg... WARNING: Un-translated message in PO file. 65: "In the first case, you need to ask for a user or group id to th... WARNING: Un-translated message in PO file. 68: "In the second case, you need to create the system user either i... WARNING: Un-translated message in PO file. 71: "The following example code creates the user and group the daemo... WARNING: Un-translated message in PO file. 74: "\n[...]\ncase \"$1\" in\n install|upgrade)\n\n # If the packa... WARNING: Un-translated message in PO file. 140: "You have to make sure that the init.d script file:" WARNING: Un-translated message in PO file. 143: "Starts the daemon dropping privileges: if the software does not... WARNING: Un-translated message in PO file. 146: "Stops the daemon only if the user id matches, you can use the <... WARNING: Un-translated message in PO file. 149: "Does not run if either the user or the group do not exist:" WARNING: Un-translated message in PO file. 152: "\n if ! getent passwd | grep -q \"^server_userpostrm... WARNING: Un-translated message in PO file. 170: "Running programs with a user with limited privileges makes sure...  Merging ja-JP/10_before-compromise.po >> en-US/10_before-compromise.xml -> tmp/ja-JP/xml_tmp//10_before-compromise.xml WARNING: Un-translated message in PO file. 17: "Keep your system secure" WARNING: Un-translated message in PO file. 20: "You should strive to keep your system secure by monitoring its ... WARNING: Un-translated message in PO file. 23: "Tracking security vulnerabilities" WARNING: Un-translated message in PO file. 26: "Although most administrators are aware of security vulnerabilit... WARNING: Un-translated message in PO file. 29: "This typically includes subscribing to the announcement mailing... WARNING: Un-translated message in PO file. 32: "In order to track known vulnerabilities affecting the Debian di... WARNING: Un-translated message in PO file. 35: "The tracker has searchable interfaces (by lenny Debian provides and... WARNING: Un-translated message in PO file. 102: "In a stable system updates are only available when a security p... WARNING: Un-translated message in PO file. 105: "The notification is not intrusive and users are not forced to i... WARNING: Un-translated message in PO file. 108: "This application works by checking the package database and com... WARNING: Un-translated message in PO file. 111: "Apt installs such a task (/etc/cro... WARNING: Un-translated message in PO file. 114: "If the system is set to download the packages list daily but no... WARNING: Un-translated message in PO file. 117: "\nAPT::Periodic::Update-Package-Lists \"1\";\nAPT::Periodic::Do... WARNING: Un-translated message in PO file. 123: "You can use a different cron task, such as the one installed by... WARNING: Un-translated message in PO file. 126: "Users of the KDE desktop environment will probably prefer to in... WARNING: Un-translated message in PO file. 129: "Automatically checking for updates with cron-apt" WARNING: Un-translated message in PO file. 132: "Another method for automatic security updates is the use of debsecan program evaluates the security ... WARNING: Un-translated message in PO file. 147: "Upon installing the Debian package debsecan,... WARNING: Un-translated message in PO file. 150: "Notice, however, that the Security Team tracks many vulnerabili... WARNING: Un-translated message in PO file. 153: "More information is available at the apticron, which, similarly... WARNING: Un-translated message in PO file. 162: "You might also want to take a look at unstabletesting branch, there... WARNING: Un-translated message in PO file. 186: "When a security fix is prepared, the Security Team backports th... WARNING: Un-translated message in PO file. 189: "Security updates are available for the unstableunstableapt so that those packages that yo... WARNING: Un-translated message in PO file. 226: "To pin the packages under a given release, you must edit cron-apt as described in -y option will have aptdebconf so no questions will be as... WARNING: Un-translated message in PO file. 252: "Check the results of the cron execution, whi... WARNING: Un-translated message in PO file. 255: "A safer alternative might be to use the -d (... WARNING: Un-translated message in PO file. 258: "In order to accomplish any of these tasks, the system must be p... WARNING: Un-translated message in PO file. 261: "However, this is not recommended for unstablestablesnort is a flexible packet sniffer or logger... WARNING: Un-translated message in PO file. 312: "There are other, simpler tools that can be used to detect netwo... WARNING: Un-translated message in PO file. 315: "You can test any of these tools with the Debian package tiger is an older intrusion detection tool w... WARNING: Un-translated message in PO file. 327: "Log analysis tools, such as logcheck can als... WARNING: Un-translated message in PO file. 339: "Loadable kernel modules are files containing dynamically loadab... WARNING: Un-translated message in PO file. 342: "LKM back doors are more sophisticated and less detectable than ... WARNING: Un-translated message in PO file. 348: "There are two approaches to defending your system against LKM r... WARNING: Un-translated message in PO file. 354: "The advantage of this kind of defense is that it prevents damag... WARNING: Un-translated message in PO file. 357: "Debian GNU/Linux has a few packages that can be used to mount a... WARNING: Un-translated message in PO file. 360: "lcap - A user friendly interface to remove <... WARNING: Un-translated message in PO file. 363: "If you don't really need many kernel features on your GNU/Linux... WARNING: Un-translated message in PO file. 369: "The advantage of a reactive defense is that it does not overloa... WARNING: Un-translated message in PO file. 372: "Detection of some root-kits in Debian can be accomplished with ... WARNING: Un-translated message in PO file. 378: "This is probably the most unstable and funny section, since I h... WARNING: Un-translated message in PO file. 387: "CD distribution. This idea is very easy to realize and offers p... WARNING: Un-translated message in PO file. 396: "Change file attributes using chattr (taken f... WARNING: Un-translated message in PO file. 411: "Play with UTP cabling in a way that you cut 2 or 4 wires and ma... WARNING: Un-translated message in PO file. 417: "A honeypot is a system designed to teach system administrators ... WARNING: Un-translated message in PO file. 420: "Debian GNU/Linux systems can easily be used to setup a honeynet... WARNING: Un-translated message in PO file. 426: "syslog-ng, useful for sending logs from the ... WARNING: Un-translated message in PO file. 432: "osh, a SETUID root, security enhanced, restr... WARNING: Un-translated message in PO file. 435: "Of course, all the daemons you will be using for your fake serv... WARNING: Un-translated message in PO file. 441: "honeyd and farpd to setup... WARNING: Un-translated message in PO file. 444: "tinyhoneypot to setup a simple honeypot serv... WARNING: Un-translated message in PO file. 447: "If you cannot use spare systems to build up the honeypots and t... WARNING: Un-translated message in PO file. 450: "You can read more about building honeypots in Lanze Spitzner's ...  Merging ja-JP/11_after-compromise.po >> en-US/11_after-compromise.xml -> tmp/ja-JP/xml_tmp//11_after-compromise.xml WARNING: Un-translated message in PO file. 14: "After the compromise (incident response)" WARNING: Un-translated message in PO file. 20: "If you are physically present when an attack is happening, your... WARNING: Un-translated message in PO file. 23: "However, some tools installed by rootkits, trojans and, even, a... WARNING: Un-translated message in PO file. 26: "The most recommended method for recovering a compromised system... WARNING: Un-translated message in PO file. 29: "If you really want to fix the compromise quickly, you should re... WARNING: Un-translated message in PO file. 32: "Some common questions on how to handle a compromised Debian GNU... WARNING: Un-translated message in PO file. 47: "Contact your local CERT" WARNING: Un-translated message in PO file. 50: "The CERT (Computer and Emergency Response Team) is an organizat... WARNING: Un-translated message in PO file. 53: "Providing your local CERT (or the CERT coordination center) wit... WARNING: Un-translated message in PO file. 56: "You can also use less formal mechanisms if you need help for re... WARNING: Un-translated message in PO file. 62: "If you wish to gather more information, the tct> en-US/12_faq.xml -> tmp/ja-JP/xml_tmp//12_faq.xml WARNING: Un-translated message in PO file. 30: "For a collection of data regarding security vulnerabilities for... WARNING: Un-translated message in PO file. 33: "Is Debian more secure than other Linux distributions (such as R... WARNING: Un-translated message in PO file. 36: "There are not really many differences between Linux distributio... WARNING: Un-translated message in PO file. 39: "For example, Red Hat was unlucky and shipped when foo 1.2.3 was... WARNING: Un-translated message in PO file. 42: "There is a lot of collaboration between the respective security... WARNING: Un-translated message in PO file. 45: "One of Debian's main advantages with regards to security is the... WARNING: Un-translated message in PO file. 48: "Debian provides more security tools than other distributions, s... WARNING: Un-translated message in PO file. 51: "Debian's standard installation is smaller (less functionality),... WARNING: Un-translated message in PO file. 54: "Debian documents best security practices in documents like this... WARNING: Un-translated message in PO file. 60: "The Debian distribution boasts a large and growing number of so... WARNING: Un-translated message in PO file. 66: "Bugs that are present in the Debian distribution usually affect... WARNING: Un-translated message in PO file. 69: "Does Debian have any certification related to security?" WARNING: Un-translated message in PO file. 72: "Short answer: no." WARNING: Un-translated message in PO file. 75: "Long answer: certification costs money (specially a s... WARNING: Un-translated message in PO file. 78: "There are currently at least two linux distributions certified ... WARNING: Un-translated message in PO file. 84: "Yes. ssh... WARNING: Un-translated message in PO file. 131: "The Debian security team cannot possibly analyze all the packag... WARNING: Un-translated message in PO file. 140: "Why are some log files/configuration files world-readable, isn'... WARNING: Un-translated message in PO file. 143: "Of course, you can change the default Debian permissions on you... WARNING: Un-translated message in PO file. 146: "Be careful if you do make changes since:" WARNING: Un-translated message in PO file. 149: "Processes might not be able to write to log files if you restri... WARNING: Un-translated message in PO file. 152: "Some applications may not work if the configuration file they d... WARNING: Un-translated message in PO file. 155: "FIXME: Check if this is written in the Policy. Some packages (i... WARNING: Un-translated message in PO file. 158: "Why does /root/ (or UserX) have 755 permissions?" WARNING: Un-translated message in PO file. 161: "As a matter of fact, the same questions stand for any other use... WARNING: Un-translated message in PO file. 164: "This Debian security mailing list dm... WARNING: Un-translated message in PO file. 179: "\n KLOGD=\"\"" WARNING: Un-translated message in PO file. 187: "\n KLOGD=\"-c 4\"" WARNING: Un-translated message in PO file. 192: "Use a lower number for -c if you are still s... WARNING: Un-translated message in PO file. 195: "\n #define LOG_EMERG 0 /* system is unusable */\n ... WARNING: Un-translated message in PO file. 213: "Yes and no. Debian comes with some predefined users (user id (U... WARNING: Un-translated message in PO file. 216: "To easily find users who don't own any files, execute the follo... WARNING: Un-translated message in PO file. 228: "These users are provided by base-passwd. Loo... WARNING: Un-translated message in PO file. 279: "operator: Operator is historically (and practically) the only '... WARNING: Un-translated message in PO file. 354: "I removed a system user! How can I recover?" WARNING: Un-translated message in PO file. 357: "If you have removed a system user and have not made a backup of... WARNING: Un-translated message in PO file. 363: "The 'adm' group are usually administrators, and this group perm... WARNING: Un-translated message in PO file. 366: "Why is there a new group when I add a new user? (or Why does De... WARNING: Un-translated message in PO file. 369: "The default behavior in Debian is that each user has its own, p... WARNING: Un-translated message in PO file. 372: "Debian's scheme solves this problem by assigning each user to t... WARNING: Un-translated message in PO file. 375: "You can, however, change this behavior by modifying /... WARNING: Un-translated message in PO file. 387: "There has been much discussion on Debian mailing lists (both at... WARNING: Un-translated message in PO file. 390: "Can I remove inetd?" WARNING: Un-translated message in PO file. 402: "In versions of the portmap package later tha... WARNING: Un-translated message in PO file. 405: "What use is identd (port 113) for?" WARNING: Un-translated message in PO file. 408: "Identd service is an authentication service that identifies the... WARNING: Un-translated message in PO file. 411: "There has been extensive discussion on the security of netstat -an and ... WARNING: Un-translated message in PO file. 420: "\n Active Internet connections (servers and established)\n Pr... WARNING: Un-translated message in PO file. 431: "You are not seeing processes listening on ... WARNING: Un-translated message in PO file. 434: "I found the port XYZ open, can I close it?" WARNING: Un-translated message in PO file. 440: "Will removing services from /etc/services ... WARNING: Un-translated message in PO file. 446: "Common security issues" WARNING: Un-translated message in PO file. 458: "Once you have enabled booting from a CD-ROM or diskette enable,... WARNING: Un-translated message in PO file. 487: "This will remove the forgotten root password, contained in the ... WARNING: Un-translated message in PO file. 493: "Once LILO is unrestricted, try the following:" WARNING: Un-translated message in PO file. 499: "Type linux single, linux init=/bin/... WARNING: Un-translated message in PO file. 505: "Re-mount read/write the root (/) partition, using the mount com... WARNING: Un-translated message in PO file. 518: "How do I accomplish setting up a service for my users without g... WARNING: Un-translated message in PO file. 521: "For example, if you want to set up a POP service, you don't nee... WARNING: Un-translated message in PO file. 531: "to, for example, ldap:" WARNING: Un-translated message in PO file. 541: "In the case of LDAP directories, some services provide LDAP sch... WARNING: Un-translated message in PO file. 551: "By making the services attributes boolean fields, you can use t... WARNING: Un-translated message in PO file. 566: "My system is vulnerable! (Are you sure?)" WARNING: Un-translated message in PO file. 569: "Vulnerability assessment scanner X says my Debian system is vul... WARNING: Un-translated message in PO file. 572: "Many vulnerability assessment scanners give false positives whe... WARNING: Un-translated message in PO file. 575: "If you think your system is up to date with security patches, y... WARNING: Un-translated message in PO file. 578: "I've seen an attack in my system's logs. Is my system compromis... WARNING: Un-translated message in PO file. 581: "A trace of an attack does not always mean that your system has ... WARNING: Un-translated message in PO file. 584: "I have found strange 'MARK' lines in my logs: Am I compromised?... WARNING: Un-translated message in PO file. 587: "You might find the following lines in your system logs:" WARNING: Un-translated message in PO file. 601: "This does not indicate any kind of compromise, and users changi... WARNING: Un-translated message in PO file. 604: "\n -m interval\n The syslogd logs a mark tim... WARNING: Un-translated message in PO file. 614: "I found users using 'su' in my logs: Am I compromised?" WARNING: Un-translated message in PO file. 649: "I have found 'possible SYN flooding' in my logs: Am I under att... WARNING: Un-translated message in PO file. 652: "If you see entries like these in your logs:" WARNING: Un-translated message in PO file. 668: "Check if there is a high number of connections to the server us... WARNING: Un-translated message in PO file. 680: "This is an indication of a denial of service (DoS) attack again... WARNING: Un-translated message in PO file. 683: "I have found strange root sessions in my logs: Am I compromised... WARNING: Un-translated message in PO file. 686: "You might see these kind of entries in your /var/log/... WARNING: Un-translated message in PO file. 704: "These are due to a cron job being executed (... WARNING: Un-translated message in PO file. 710: "There are several steps you might want to take in case of a bre... WARNING: Un-translated message in PO file. 713: "Check if your system is up to date with security patches for pu... WARNING: Un-translated message in PO file. 716: "Read this document, especially the portsentry, there are a lot... WARNING: Un-translated message in PO file. 758: "That's just the way portsentry works. It ope... WARNING: Un-translated message in PO file. 764: "The security team keeps its list of Frequently Asked Questions ...  Merging ja-JP/99_appendix.po >> en-US/99_appendix.xml -> tmp/ja-JP/xml_tmp//99_appendix.xml WARNING: Un-translated message in PO file. 15: "Appendix" WARNING: Un-translated message in PO file. 21: "Below is a post-installation, step-by-step procedure for harden... WARNING: Un-translated message in PO file. 24: "Install the system, taking into account the information regardi... WARNING: Un-translated message in PO file. 36: "Make a list of services currently running on your system. Try:" WARNING: Un-translated message in PO file. 53: "In order to remove unnecessary services, first determine what p... WARNING: Un-translated message in PO file. 81: "Once you find any unwanted services, remove the associated pack... WARNING: Un-translated message in PO file. 84: "For inetd services (launched by the superdaemon), check which s... WARNING: Un-translated message in PO file. 94: "Then disable those services that are not needed by commenting o... WARNING: Un-translated message in PO file. 100: "If the server uses more than one external interface, depending ... WARNING: Un-translated message in PO file. 123: "Use the following shell command to determine what user each ava... WARNING: Un-translated message in PO file. 137: "Consider changing these services to a specific user/group and m... WARNING: Un-translated message in PO file. 149: "Install network and host intrusion measures like snort... WARNING: Un-translated message in PO file. 161: "Re-check the installation with a new vulnerability assessment u... WARNING: Un-translated message in PO file. 164: "Using a network scanner, check outbound connections from the sy... WARNING: Un-translated message in PO file. 167: "FIXME: this procedure considers service hardening but not syste... WARNING: Un-translated message in PO file. 173: "This appendix briefly reiterates points from other sections in ... WARNING: Un-translated message in PO file. 176: "FIXME: This is based on v1.4 of the manual and might need to be... WARNING: Un-translated message in PO file. 182: "Enable a password in the BIOS." WARNING: Un-translated message in PO file. 185: "Disable floppy/cdrom/... booting in the system's BIOS." WARNING: Un-translated message in PO file. 197: "Set nosuid,noexec,nodev mount options in /etc/pam.d/login" WARNING: Un-translated message in PO file. 245: "Disable network root login; use su... WARNING: Un-translated message in PO file. 287: "Disable or remove in.telnetd, if installed" WARNING: Un-translated message in PO file. 293: "Disable other gratuitous network services; ftp, DNS, WWW etc sh... WARNING: Un-translated message in PO file. 302: "Configure firewall and tcpwrappers (i.e. Typi... WARNING: Un-translated message in PO file. 377: "BASE is currently packaged for Debian in acidbasema... WARNING: Un-translated message in PO file. 414: "\n[*] Network packet filtering (replaces ipchains)\n[ ] Netwo... WARNING: Un-translated message in PO file. 422: "Caution: you must disable this if you want to apply some firewa... WARNING: Un-translated message in PO file. 425: "\n[ ] Network packet filtering debugging (NEW)" WARNING: Un-translated message in PO file. 430: "Next, add the correct options in the section IP: Netf... WARNING: Un-translated message in PO file. 433: "Once these steps are complete, you can complete the configurati... WARNING: Un-translated message in PO file. 436: "A bridge providing NAT and firewall capabilities" WARNING: Un-translated message in PO file. 439: "The first configuration uses the bridge as a firewall with netw... WARNING: Un-translated message in PO file. 442: "\nInternet ---- router ( 62.3.3.25 ) ---- bridge (62.3.3.26 gw ... WARNING: Un-translated message in PO file. 453: "The following commands show how this bridge can be configured." WARNING: Un-translated message in PO file. 456: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Un-translated message in PO file. 485: "A second possible configuration is a system that is set up as a... WARNING: Un-translated message in PO file. 488: "\nInternet ---- router (62.3.3.25) ---- bridge (62.3.3.26)\n ... WARNING: Un-translated message in PO file. 453: "The following commands show how this bridge can be configured." WARNING: Un-translated message in PO file. 499: "\n# Create the interface br0\n/usr/sbin/brctl addbr br0\n\n# Ad... WARNING: Un-translated message in PO file. 521: "If you traceroute the Linux Mail Server, you won't see the brid... WARNING: Un-translated message in PO file. 524: "Basic IPtables rules" WARNING: Un-translated message in PO file. 527: "This is an example of the basic rules that could be used for ei... WARNING: Un-translated message in PO file. 533: "\niptables -F FORWARD\niptables -P FORWARD DROP\niptables -A FO... WARNING: Un-translated message in PO file. 573: "Sample script to change the default Bind installation." WARNING: Un-translated message in PO file. 576: "This script automates the procedure for changing the b... WARNING: Un-translated message in PO file. 579: "This script is here for historical purposes and to show how you... WARNING: Un-translated message in PO file. 582: "You can also create the users manually and use the patch availa... WARNING: Un-translated message in PO file. 585: "\n #!/bin/sh\n # Change the default Debian bind v8 configurat... WARNING: Un-translated message in PO file. 733: "The previous script, run on Woody's (Debian 3.0) custom DROP policy in the INPUT cha... WARNING: Un-translated message in PO file. 790: "Of course, you should disable any backdoors before getting the ... WARNING: Un-translated message in PO file. 793: "FIXME: This needs DNS to be working properly since it is requir... WARNING: Un-translated message in PO file. 796: "FIXME: this will only work with HTTP URLs since ftp might need ... WARNING: Un-translated message in PO file. 799: "Chroot environment for SSH" WARNING: Un-translated message in PO file. 802: "Creating a restricted environment for SSHlibpam-chroot" WARNING: Un-translated message in PO file. 826: "Probably the easiest way is to use the libpam-chroot/etc/pam.d/ssh to use this PAM modu... WARNING: Un-translated message in PO file. 839: "set a proper chroot environment for the user. You can try using... WARNING: Un-translated message in PO file. 842: "Configure /etc/security/chroot.conf so tha... WARNING: Un-translated message in PO file. 845: "Configure SSH: Depending on your OpenSSH version the chroot env... WARNING: Un-translated message in PO file. 848: "\nUsePrivilegeSeparation no" WARNING: Un-translated message in PO file. 853: "Notice that this will lower the security of your system since t... WARNING: Un-translated message in PO file. 856: "If you don't disable Privilege Separation ... WARNING: Un-translated message in PO file. 859: "If you have Privilege Separation set to /proc filesystem needs to be mounted i... WARNING: Un-translated message in PO file. 879: "The necessary /dev/pts/ devices need to ex... WARNING: Un-translated message in PO file. 882: "The user's home directory has to exist in the chroot, otherwise... WARNING: Un-translated message in PO file. 885: "You can debug all these issues if you use the debugssh server" WARNING: Un-translated message in PO file. 894: "Debian's sshd does not allow restriction of ... WARNING: Un-translated message in PO file. 897: "After applying the patch, modify /etc/passwdsshd daemon insi... WARNING: Un-translated message in PO file. 1011: "\nUsePrivilegeSeparation yes" WARNING: Un-translated message in PO file. 1016: "That way the remote daemon will do as few things as possible as... WARNING: Un-translated message in PO file. 1019: "Notice, also, that in order for SSH to work in that location, t... WARNING: Un-translated message in PO file. 1022: "Setup a minimal system (the really easy way)" WARNING: Un-translated message in PO file. 1025: "You can use debootstrap to setup a minimal e... WARNING: Un-translated message in PO file. 1028: "Automatically making the environment (the easy way)" WARNING: Un-translated message in PO file. 1031: "You can easily create a restricted environment with the ... WARNING: Un-translated message in PO file. 1037: "To set up the environment using makejail's p... WARNING: Un-translated message in PO file. 1040: "\n # makejail /usr/share/doc/makejail/examples/sshd.py" WARNING: Un-translated message in PO file. 1045: "This will setup the chroot in the /var/chroot/sshdprocfs filesystem in /... WARNING: Un-translated message in PO file. 1051: "\n# mount -t proc proc /var/chroot/sshd/proc" WARNING: Un-translated message in PO file. 1056: "You can also have it be mounted automatically by editing /dev/log ... WARNING: Un-translated message in PO file. 1067: "Read the sample file to see what other changes need to be made ... WARNING: Un-translated message in PO file. 1070: "The following sample environment has been (slightly) tested in ... WARNING: Un-translated message in PO file. 1073: "\n.\n|-- bin\n| |-- ash\n| |-- bash\n| |-- chgrp\n| |--... WARNING: Un-translated message in PO file. 1264: "For Debian release 3.1 you have to make sure that the environme... WARNING: Un-translated message in PO file. 1267: "\n$ ls /etc/pam.d/common-*\n/etc/pam.d/common-account /etc/pam... WARNING: Un-translated message in PO file. 1274: "Manually creating the environment (the hard way)" WARNING: Un-translated message in PO file. 1277: "It is possible to create an environment, using a trial-and-erro... WARNING: Un-translated message in PO file. 1280: "\n.:\ntotal 36\ndrwxr-xr-x 9 root root 4096 Jun 5 10:05 ./\ndrw... WARNING: Un-translated message in PO file. 1524: "Chroot environment for Apache" WARNING: Un-translated message in PO file. 1530: "The chroot utility is often used to jail a d... WARNING: Un-translated message in PO file. 1533: "FIXME: Apache can also be chrooted using root and create a new jail directo... WARNING: Un-translated message in PO file. 1551: "\n$ mkdir -p /var/chroot/apache" WARNING: Un-translated message in PO file. 1556: "Create a new user and a new group. The chrooted Apache server w... WARNING: Un-translated message in PO file. 1559: " \n $ adduser --home /var/chroot/apache --shell /bin/false \\\n... WARNING: Un-translated message in PO file. 1566: "FIXME: is a new user needed? (Apache already runs as the apache... WARNING: Un-translated message in PO file. 1569: "Install Apache as usual on Debian: apt-get install apa... WARNING: Un-translated message in PO file. 1572: "Set up Apache (e.g. define your subdomains, etc.). In the makejail (available in Debian/testin... WARNING: Un-translated message in PO file. 1578: "Copy the sample configuration file for Apache to the ... WARNING: Un-translated message in PO file. 1581: " \n # cp /usr/share/doc/makejail/examples/apache.py /etc/makeja... WARNING: Un-translated message in PO file. 1587: "Edit /etc/makejail/apache.py. You need to ... WARNING: Un-translated message in PO file. 1590: "\nchroot=\"/var/chroot/apache\"\ntestCommandsInsideJail=[\"/usr... WARNING: Un-translated message in PO file. 1611: "FIXME: some options do not seem to work pr... WARNING: Un-translated message in PO file. 1614: "Create the chroot tree: makejail /etc/makejail/apache.... WARNING: Un-translated message in PO file. 1617: "If /etc/password and /etc/group<... WARNING: Un-translated message in PO file. 1620: "\n $ grep chrapach /etc/passwd > /var/chroot/apache/etc... WARNING: Un-translated message in PO file. 1627: "to replace them with filtered copies." WARNING: Un-translated message in PO file. 1630: "Copy the Web site pages and the logs into the jail. These files... WARNING: Un-translated message in PO file. 1633: "\n # cp -Rp /var/www /var/chroot/apache/var\n # cp -R... WARNING: Un-translated message in PO file. 1640: "Edit the startup script for the system logging daemon so that i... WARNING: Un-translated message in PO file. 1643: "Edit the Apache startup script (/etc/init.d/apacheCHRDIR variable at the top of th... WARNING: Un-translated message in PO file. 1649: "edit the start, stop,... WARNING: Un-translated message in PO file. 1652: "add a line to mount and unmount the /proc ... WARNING: Un-translated message in PO file. 1655: "\n#! /bin/bash\n#\n# apache Start the apache HTTP server... WARNING: Un-translated message in PO file. 1740: "FIXME: should the first Apache process be ... WARNING: Un-translated message in PO file. 1743: "Replace in /etc/logrotate.d/apache /etc/init.d/apache start) and ... WARNING: Un-translated message in PO file. 1749: "Type ps aux | grep apache to make sure Apach... WARNING: Un-translated message in PO file. 1752: "\n root 180 0.0 1.1 2936 1436 ? S 04:03 0:00 /usr/sbin/apa... WARNING: Un-translated message in PO file. 1763: "Make sure the Apache processes are running chrooted by looking ... WARNING: Un-translated message in PO file. 1766: "\n drwxr-sr-x 10 root staff 240 Dec 2 16:06 .\n drwxrwsr-... WARNING: Un-translated message in PO file. 1781: "To automate this test, you can type:ls -la /proc/`cat ... WARNING: Un-translated message in PO file. 1784: "FIXME: Add other tests that can be run to ... WARNING: Un-translated message in PO file. 1787: "The reason I like this is because setting up the jail is not ve... WARNING: Un-translated message in PO file. 1790: " \napt-get update && apt-get install apache\nmakejail /... WARNING: Un-translated message in PO file. 1796: "See also" WARNING: Un-translated message in PO file. 1799: "If you are looking for more information you can consider these ...  Merging ja-JP/Author_Group.po >> en-US/Author_Group.xml -> tmp/ja-JP/xml_tmp//Author_Group.xml Merging ja-JP/Book_Info.po >> en-US/Book_Info.xml -> tmp/ja-JP/xml_tmp//Book_Info.xml Merging ja-JP/Revision_History.po >> en-US/Revision_History.xml -> tmp/ja-JP/xml_tmp//Revision_History.xml WARNING: Un-translated message in PO file. 14: "Changelog/History" WARNING: Un-translated message in PO file. 23: "Migrate to Docbook XML." WARNING: Un-translated message in PO file. 26: "Build with Publican. No longer use custom Makefile." WARNING: Un-translated message in PO file. 29: "Thijs" WARNING: Un-translated message in PO file. 32: "Kinkhorst" WARNING: Un-translated message in PO file. 35: "Remove mention of MD5 shadow passwords." WARNING: Un-translated message in PO file. 38: "Do not recommend dselect for holding packages." WARNING: Un-translated message in PO file. 41: "No longer include the Security Team FAQ verbatim, because it du... WARNING: Un-translated message in PO file. 44: "Update section on restart after library upgrades to mention nee... WARNING: Un-translated message in PO file. 47: "Avoid gender-specific language. Patch by Myriam." WARNING: Un-translated message in PO file. 50: "Use LSB headers for firewall script. Patch by Dominic Walden." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 56: "Fernández-Sanguino Peña." WARNING: Un-translated message in PO file. 59: "Indicate that the document is not updated with latest versions.... WARNING: Un-translated message in PO file. 62: "Update pointers to current location of sources." WARNING: Un-translated message in PO file. 65: "Update information on security updates for newer releases." WARNING: Un-translated message in PO file. 68: "Point information for Developers to online sources instead of k... WARNING: Un-translated message in PO file. 71: "Extend the information regarding securing console access, inclu... WARNING: Un-translated message in PO file. 74: "Update the information related to PAM modules including how to ... WARNING: Un-translated message in PO file. 77: "Reference some of the PAM modules available to use double facto... WARNING: Un-translated message in PO file. 80: "Fix shell script example in Appendix." WARNING: Un-translated message in PO file. 83: "Fix reference errors." WARNING: Un-translated message in PO file. 86: "Point to the Basille sourceforge project instead of the bastill... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 92: "Change reference to Log Analysis' website as this is no longer ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 95: "Change the section related to choosing a filesystem: note that ... WARNING: Un-translated message in PO file. 98: "Change the name of the packages related to enigmail to reflect ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 101: "Change URLs pointing to Bastille Linux to www.Bastille-UNIX.org... WARNING: Un-translated message in PO file. 104: "Fix pointers to Linux Ramen and Lion worms." WARNING: Un-translated message in PO file. 107: "Use linux-image in the examples instead of the (old) kernel-ima... WARNING: Un-translated message in PO file. 110: "Fix typos spotted by Francesco Poli." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 113: "Update the information related to security updates. Drop the te... WARNING: Un-translated message in PO file. 116: "Divide the firewall applications based on target users and add ... WARNING: Un-translated message in PO file. 119: "Remove references to libsafe, it's not in the archive any longe... WARNING: Un-translated message in PO file. 122: "Fix the location of syslog's configuration, thanks to John Talb... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 125: "Thanks go to Francesco Poli for his extensive review of the doc... WARNING: Un-translated message in PO file. 128: "Remove most references to the woody release as it is no longer ... WARNING: Un-translated message in PO file. 131: "Describe how to restrict users so that they can only do file tr... WARNING: Un-translated message in PO file. 134: "Added a note regarding the debian-private declasiffication deci... WARNING: Un-translated message in PO file. 137: "Updated link of incident handling guides." WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 140: "Added a note saying that development tools (compilers, etc.) ar... WARNING: Un-translated message in PO file. 143: "Fix references to the master security server." WARNING: Un-translated message in PO file. 146: "Add pointers to additional APT-secure documentation." WARNING: Un-translated message in PO file. 149: "Improve the description of APT signatures." WARNING: Un-translated message in PO file. 152: "Comment out some things which are not yet final related to the ... WARNING: Un-translated message in PO file. 155: "Fixed name of the Debian Testing Security Team." WARNING: Un-translated message in PO file. 158: "Remove reference to sarge in an example." WARNING: Un-translated message in PO file. 161: "Update the antivirus section, clamav is now available on the re... WARNING: Un-translated message in PO file. 164: "Removes all references to freeswan as it is obsolete." WARNING: Un-translated message in PO file. 167: "Describe issues related to ruleset changes to the firewall if d... WARNING: Un-translated message in PO file. 170: "Update the information related to the IDS installation, mention... WARNING: Un-translated message in PO file. 173: "Rewrite the \"running bind as a non-root user\" section as this... WARNING: Un-translated message in PO file. 176: "Remove the obsolete way to setup iptables rulesets as woody is ... WARNING: Un-translated message in PO file. 179: "Revert the advice regarding LOG_UNKFAIL_ENAB it should be set t... WARNING: Un-translated message in PO file. 182: "Added more information related to updating the system with desk... WARNING: Un-translated message in PO file. 185: "Updated the contents of the FAQ and remove redundant paragraphs... WARNING: Un-translated message in PO file. 188: "Review and update the section related to forensic analysis of m... WARNING: Un-translated message in PO file. 191: "Remove or fix some dead links." WARNING: Un-translated message in PO file. 194: "Fix many typos and gramatical errors reported by Francesco Poli... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 197: "Provide examples using apt-cache's rdepends as suggested by Oze... WARNING: Un-translated message in PO file. 200: "Fix location of Squid's user's manual because of its relocation... WARNING: Un-translated message in PO file. 203: "Fix information regarding umask, it's logins.defs (and not limi... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 206: "Add information on how to track security vulnerabilities and ad... WARNING: Un-translated message in PO file. 209: "Add more information on the security support for testing." WARNING: Un-translated message in PO file. 212: "Fix a large number of typos with a patch provided by Simon Bran... WARNING: Un-translated message in PO file. 215: "Added section on how to disable root prompt on initramfs provid... WARNING: Un-translated message in PO file. 218: "Remove references to queso." WARNING: Un-translated message in PO file. 221: "Note that testing is now security-supported in the introduction... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 224: "Rewrote the information on how to setup ssh chroots to clarify ... WARNING: Un-translated message in PO file. 227: "Fix lsof call as suggested by Christophe Sahut." WARNING: Un-translated message in PO file. 230: "Include patches for typo fixes from Uwe Hermann." WARNING: Un-translated message in PO file. 233: "Fix typo in reference spotted by Moritz Naumann." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 236: "Add a section on Debian Developer's best practices for security... WARNING: Un-translated message in PO file. 239: "Ammended firewall script with comments from WhiteGhost." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 242: "Included a patch from Thomas Sjögren which describes that apt-ftparchive is in apt-utilsSSHssh protocol ve... WARNING: Un-translated message in PO file. 662: "Added two subsections related to Apache secure configuration (t... WARNING: Un-translated message in PO file. 665: "Added a new FAQ related to raw sockets, one related to /root, a... WARNING: Un-translated message in PO file. 668: "Added a pointer to a bug in libpam-cracklib that might still be... WARNING: Un-translated message in PO file. 671: "Added more information regarding forensics analysis (pending mo... WARNING: Un-translated message in PO file. 674: "Changed the \"what should I do regarding compromise\" into a bu... WARNING: Un-translated message in PO file. 677: "Added some information on how to set up the Xscreensaver to loc... WARNING: Un-translated message in PO file. 680: "Added a note related to the utilities you should not install in... WARNING: Un-translated message in PO file. 683: "Added information on lvm and journalling file systems, ext3 rec... WARNING: Un-translated message in PO file. 686: "Added a link to the online text version (check)." WARNING: Un-translated message in PO file. 689: "Added some more stuff to the information on firewalling the loc... WARNING: Un-translated message in PO file. 692: "Added more information on PAM limits and pointers to Kurt Seifr... WARNING: Un-translated message in PO file. 695: "As suggested by Julián Muñoz, provided more information on the ... WARNING: Un-translated message in PO file. 698: "Included a note in the BIOS password section due to a comment f... WARNING: Un-translated message in PO file. 701: "Included patches provided by Alfred E. Heggestad fixing many of... WARNING: Un-translated message in PO file. 704: "Added a pointer to the changelog in the Credits section since m... WARNING: Un-translated message in PO file. 707: "Added a few more notes to the chattr section and a new section ... WARNING: Un-translated message in PO file. 710: "Added a new section after installation just to remind users to ... WARNING: Un-translated message in PO file. 713: "Added some more TODO items provided by Korn Andras." WARNING: Un-translated message in PO file. 716: "Added a pointer to the NIST's guidelines on how to secure DNS p... WARNING: Un-translated message in PO file. 719: "Added a small paragraph regarding Debian's SSL certificates inf... WARNING: Un-translated message in PO file. 722: "Added Daniel Quinlan's suggestions regarding sshMARK heartbeatAfter installation section... WARNING: Un-translated message in PO file. 881: "Wrote information on how to set up firewalls with the standard ... WARNING: Un-translated message in PO file. 884: "Small paragraph explaining why installing connected to the Inte... WARNING: Un-translated message in PO file. 887: "Small paragraph on timely patching referencing to IEEE paper." WARNING: Un-translated message in PO file. 890: "Appendix on how to set up a Debian snort box, based on what Vla... WARNING: Un-translated message in PO file. 893: "Information on how logcheck is set up in Debian and how it can ... WARNING: Un-translated message in PO file. 896: "Information on user accounting and profile analysis." WARNING: Un-translated message in PO file. 899: "Included apt.conf configuration for read-only /usr copied from ... WARNING: Un-translated message in PO file. 902: "New section on VPN with some pointers and the packages availabl... WARNING: Un-translated message in PO file. 905: "Small note regarding some programs to automatically build chroo... WARNING: Un-translated message in PO file. 908: "New FAQ item regarding identd based on a discussion in the debi... WARNING: Un-translated message in PO file. 911: "New FAQ item regarding inetd based o... WARNING: Un-translated message in PO file. 914: "Introduced note on rcconf in the \"disabling services\" section... WARNING: Un-translated message in PO file. 917: "Varied the approach regarding LKM, thanks to Philipe Gaspar." WARNING: Un-translated message in PO file. 920: "Added pointers to CERT documents and Counterpane resources." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 923: "Added a new FAQ item regarding time to fix security vulnerabili... WARNING: Un-translated message in PO file. 926: "Reorganized FAQ sections." WARNING: Un-translated message in PO file. 929: "Started writing a section regarding firewalling in Debian GNU/L... WARNING: Un-translated message in PO file. 932: "Fixed typos sent by Matt Kraai." WARNING: Un-translated message in PO file. 935: "Fixed DNS information." WARNING: Un-translated message in PO file. 938: "Added information on whisker and nbtscan to the auditing sectio... WARNING: Un-translated message in PO file. 941: "Fixed some wrong URLs." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 944: "Added a new section regarding auditing using Debian GNU/Linux." WARNING: Un-translated message in PO file. 947: "Added info regarding finger daemon taken from the security mail... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 950: "Fixed link for Linux Trustees." WARNING: Un-translated message in PO file. 953: "Fixed typos (patches from Oohara Yuuma and Pedro Zorzenon)." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 956: "Reorganized service installation and removal and added some new... WARNING: Un-translated message in PO file. 959: "Added some notes regarding using integrity checkers as intrusio... WARNING: Un-translated message in PO file. 962: "Added a chapter regarding package signatures." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 965: "Added notes regarding Squid security sent by Philipe Gaspar." WARNING: Un-translated message in PO file. 968: "Fixed rootkit links thanks to Philipe Gaspar." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 971: "Added some notes regarding Apache and Lpr/lpng." WARNING: Un-translated message in PO file. 974: "Added some information regarding noexec and read-only partition... WARNING: Un-translated message in PO file. 977: "Rewrote how users can help in Debian security issues (FAQ item)... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 980: "Fixed location of mail program." WARNING: Un-translated message in PO file. 983: "Added some new items to the FAQ." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 986: "Added a small section on how Debian handles security." WARNING: Un-translated message in PO file. 989: "Clarified MD5 passwords (thanks to `rocky')." WARNING: Un-translated message in PO file. 992: "Added some more information regarding harden-X from Stephen van... WARNING: Un-translated message in PO file. 983: "Added some new items to the FAQ." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 995: "Added some forensics information sent by Yotam Rubin." WARNING: Un-translated message in PO file. 998: "Added information on how to build a honeynet using Debian GNU/L... WARNING: Un-translated message in PO file. 1001: "Added some more TODOS." WARNING: Un-translated message in PO file. 1004: "Fixed more typos (thanks Yotam!)." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1007: "Added patch to fix misspellings and some new information (contr... WARNING: Un-translated message in PO file. 1010: "Added references to other online (and offline) documentation bo... WARNING: Un-translated message in PO file. 1013: "Added some information on configuring Bind options to restrict ... WARNING: Un-translated message in PO file. 1016: "Added information on how to automatically harden a Debian syste... WARNING: Un-translated message in PO file. 1019: "Removed some done TODOs and added some new ones." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1022: "Added the default user/group list provided by Joey Hess to the ... WARNING: Un-translated message in PO file. 1025: "Added information on LKM root-kits () c... WARNING: Un-translated message in PO file. 1028: "Added information on Proftp contributed by Emmanuel Lacour." WARNING: Un-translated message in PO file. 1031: "Recovered the checklist Appendix from Era Eriksson." WARNING: Un-translated message in PO file. 1034: "Added some new TODO items and removed other fixed ones." WARNING: Un-translated message in PO file. 1037: "Manually included Era's patches since they were not all include... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1040: "Era" WARNING: Un-translated message in PO file. 1043: "Eriksson" WARNING: Un-translated message in PO file. 1046: "Typo fixes and wording changes." WARNING: Un-translated message in PO file. 1049: "Minor changes to tags in order to keep on removing the tt tags ... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1052: "Added pointer to document as published in the DDP (should super... WARNING: Un-translated message in PO file. 1055: "Started a mini-FAQ (should be expanded) with some questions rec... WARNING: Un-translated message in PO file. 1058: "Added general information to consider while securing." WARNING: Un-translated message in PO file. 1061: "Added a paragraph regarding local (incoming) mail delivery." WARNING: Un-translated message in PO file. 1064: "Added some pointers to more information." WARNING: Un-translated message in PO file. 1067: "Added information regarding the printing service." WARNING: Un-translated message in PO file. 1070: "Added a security hardening checklist." WARNING: Un-translated message in PO file. 1073: "Reorganized NIS and RPC information." WARNING: Un-translated message in PO file. 1076: "Added some notes taken while reading this document on my new Vi... WARNING: Un-translated message in PO file. 1079: "Fixed some badly formatted lines." WARNING: Un-translated message in PO file. 770: "Fixed some typos." WARNING: Un-translated message in PO file. 1082: "Added a Genius/Paranoia idea contributed by Gaby Schilders." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1085: "Josip" WARNING: Un-translated message in PO file. 1088: "Rodin" WARNING: Un-translated message in PO file. 1091: "Added paragraphs related to BIND and some FIXMEs." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1094: "Small setuid check paragraph" WARNING: Un-translated message in PO file. 1097: "Various minor cleanups." WARNING: Un-translated message in PO file. 1100: "Found out how to use sgml2txt -f for the txt... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1103: "Added a security update after installation paragraph." WARNING: Un-translated message in PO file. 1106: "Added a proftpd paragraph." WARNING: Un-translated message in PO file. 1109: "This time really wrote something about XDM, sorry for last time... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1112: "Lots of grammar corrections by James Treacy, new XDM paragraph.... WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1115: "Typo fixes, miscellaneous additions." WARNING: Un-translated message in PO file. 53: "Javier" WARNING: Un-translated message in PO file. 89: "Fernández-Sanguino Peña" WARNING: Un-translated message in PO file. 1118: "Initial release."  PO file 'ja-JP/Securing_Debian_Manual.po' not found! Using base XML!  Processing file tmp/ja-JP/xml/Common_Content/Conventions.xml -> tmp/ja-JP/xml/Common_Content/Conventions.xml Processing file tmp/ja-JP/xml/Common_Content/Feedback.xml -> tmp/ja-JP/xml/Common_Content/Feedback.xml Processing file tmp/ja-JP/xml/Common_Content/Legal_Notice.xml -> tmp/ja-JP/xml/Common_Content/Legal_Notice.xml Processing file tmp/ja-JP/xml/Common_Content/Program_Listing.xml -> tmp/ja-JP/xml/Common_Content/Program_Listing.xml Processing file tmp/ja-JP/xml/Common_Content/Revision_History.xml -> tmp/ja-JP/xml/Common_Content/Revision_History.xml Processing file tmp/ja-JP/xml_tmp/01_intro.xml -> tmp/ja-JP/xml/01_intro.xml Processing file tmp/ja-JP/xml_tmp/02_before-begin.xml -> tmp/ja-JP/xml/02_before-begin.xml Processing file tmp/ja-JP/xml_tmp/03_before-install.xml -> tmp/ja-JP/xml/03_before-install.xml Processing file tmp/ja-JP/xml_tmp/04_after-install.xml -> tmp/ja-JP/xml/04_after-install.xml Processing file tmp/ja-JP/xml_tmp/05_services.xml -> tmp/ja-JP/xml/05_services.xml Processing file tmp/ja-JP/xml_tmp/06_automatic.xml -> tmp/ja-JP/xml/06_automatic.xml Processing file tmp/ja-JP/xml_tmp/07_infrastructure.xml -> tmp/ja-JP/xml/07_infrastructure.xml Processing file tmp/ja-JP/xml_tmp/08_sec-tools.xml -> tmp/ja-JP/xml/08_sec-tools.xml Processing file tmp/ja-JP/xml_tmp/09_developer.xml -> tmp/ja-JP/xml/09_developer.xml Processing file tmp/ja-JP/xml_tmp/10_before-compromise.xml -> tmp/ja-JP/xml/10_before-compromise.xml Processing file tmp/ja-JP/xml_tmp/11_after-compromise.xml -> tmp/ja-JP/xml/11_after-compromise.xml Processing file tmp/ja-JP/xml_tmp/12_faq.xml -> tmp/ja-JP/xml/12_faq.xml Processing file tmp/ja-JP/xml_tmp/99_appendix.xml -> tmp/ja-JP/xml/99_appendix.xml Processing file tmp/ja-JP/xml_tmp/Author_Group.xml -> tmp/ja-JP/xml/Author_Group.xml Processing file tmp/ja-JP/xml_tmp/Book_Info.xml -> tmp/ja-JP/xml/Book_Info.xml Processing file tmp/ja-JP/xml_tmp/Revision_History.xml -> tmp/ja-JP/xml/Revision_History.xml Processing file tmp/ja-JP/xml_tmp/Securing_Debian_Manual.xml -> tmp/ja-JP/xml/Securing_Debian_Manual.xml Beginning work on ja-JP DTD Validation OK Starting html Using XML::LibXSLT on /build/harden-doc-KnWLUV/harden-doc-3.19+nmu1/brand/xsl/html.xsl Finished html SUCCESS: publish/ja-JP/Debian_Security_Guide/3.19/html/harden-doc/index.html dh override_dh_auto_build make[1]: Leaving directory '/build/harden-doc-KnWLUV/harden-doc-3.19+nmu1' create-stamp debian/debhelper-build-stamp fakeroot debian/rules binary-indep dh binary-indep dh_testroot -i dh_prep -i dh_installdirs -i debian/rules override_dh_auto_install make[1]: Entering directory '/build/harden-doc-KnWLUV/harden-doc-3.19+nmu1' mkdir -p debian/harden-doc/usr/share/doc/harden-doc/html for lang in de-DE en-US es-ES fr-FR it-IT pt-BR zh-CN ja-JP; do \ mv publish/$lang/Securing_Debian_Manual/3.19/html/Securing_Debian_Manual debian/harden-doc/usr/share/doc/harden-doc/html/$lang; \ done rdfind -makehardlinks true -makeresultsfile false debian/harden-doc/usr/share/doc/harden-doc/html/en-US debian/harden-doc/usr/share/doc/harden-doc/html Now scanning "debian/harden-doc/usr/share/doc/harden-doc/html/en-US", found 200 files. Now scanning "debian/harden-doc/usr/share/doc/harden-doc/html", found 1600 files. Now have 1800 files in total. Removed 200 files due to nonunique device and inode. Total size is 10957961 bytes or 10 MiB Removed 678 files due to unique sizes from list.922 files left. Now eliminating candidates based on first bytes:removed 3 files from list.919 files left. Now eliminating candidates based on last bytes:removed 39 files from list.880 files left. Now eliminating candidates based on sha1 checksum:removed 0 files from list.880 files left. It seems like you have 880 files that are not unique Totally, 2 MiB can be reduced. Now making hard links. Making 770 links. make[1]: Leaving directory '/build/harden-doc-KnWLUV/harden-doc-3.19+nmu1' dh_installdocs -i dh_installchangelogs -i dh_lintian -i dh_perl -i dh_link -i dh_strip_nondeterminism -i dh_compress -i dh_fixperms -i dh_missing -i dh_installdeb -i dh_gencontrol -i dh_md5sums -i dh_builddeb -i dpkg-deb: building package 'harden-doc' in '../harden-doc_3.19+nmu1_all.deb'. dpkg-genbuildinfo --build=all dpkg-genchanges --build=all >../harden-doc_3.19+nmu1_all.changes dpkg-genchanges: info: binary-only arch-indep upload (source code and arch-specific packages not included) dpkg-source --after-build . dpkg-buildpackage: info: binary-only upload (no source included) I: running special hook: sync-out /build/harden-doc-KnWLUV /tmp/harden-doc-3.19+nmu1t_1wlw42 I: cleaning package lists and apt cache... W: deleting files in /tmp: hsperfdata_root I: creating tarball... I: done I: removing tempdir /tmp/mmdebstrap.UgYPe8QbGC... I: success in 848.2256 seconds md5: harden-doc_3.19+nmu1_all.deb: OK sha1: harden-doc_3.19+nmu1_all.deb: OK sha256: harden-doc_3.19+nmu1_all.deb: OK Checksums: OK