Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 434 of 808  Not logged in ELOG logo
IDdown Date Icon Author Author Email Category OS ELOG Version Subject
  66335   Wed Apr 29 18:20:38 2009 Reply Dongwook Jangdwjang@fnal.govQuestionLinux2.7.6Re: elogd runs by a user but not by root

Stefan Ritt wrote:

 

Dongwook Jang wrote:

Hi,

I really don't understand why elogd cannot run by root but it runs by a user.

I've put elog deamon in /etc/init.d. So it didn't bring up, but it runs if I run it by user interactively.

Thanks,

Dongwook

 

That's a security issue. If elogd runs under a user and gets hacked, the hacker obtains just the user rights, which can be limited. If it runs under root, the hacker will automatically get root rights, which is bad. Technically, there is no reason why elogd cannot be run as root. Just put

Usr = root

Grp = root

into elogd.cfg. 

 Hi,

I wonder how others manage this situation because deamons in /etc/init.d is excercuted by root. So I cannot run in /etc/init.d/elogd when the system starts up.

What do you think?

Thanks,

Dongwook

  66334   Wed Apr 29 12:28:13 2009 Question mike ciancimike2.cianci@comcast.netQuestionWindows2.7.5-2185Database Like - ELOG Format

Stefan,

I am using the Database Like - ELOG format and on the list page, the the last two columns (on the right side) are, "Text" and "Attachments (the paperclip)".

Both of which I have deleted from the input page.

Is there anyway to remove them from the List page?

Thanks,      Mike

  66333   Wed Apr 29 07:52:57 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.6Re: elogd runs by a user but not by root

 

Dongwook Jang wrote:

Hi,

I really don't understand why elogd cannot run by root but it runs by a user.

I've put elog deamon in /etc/init.d. So it didn't bring up, but it runs if I run it by user interactively.

Thanks,

Dongwook

 

That's a security issue. If elogd runs under a user and gets hacked, the hacker obtains just the user rights, which can be limited. If it runs under root, the hacker will automatically get root rights, which is bad. Technically, there is no reason why elogd cannot be run as root. Just put

Usr = root

Grp = root

into elogd.cfg. 

  66332   Tue Apr 28 21:25:31 2009 Question Dongwook Jangdwjang@fnal.govQuestionLinux2.7.6elogd runs by a user but not by root

Hi,

I really don't understand why elogd cannot run by root but it runs by a user.

I've put elog deamon in /etc/init.d. So it didn't bring up, but it runs if I run it by user interactively.

Thanks,

Dongwook

  66331   Tue Apr 28 07:53:37 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.2-3Re: Error: Failed dependencies:

 

Rob Snihur wrote:

 

Carl Shirey wrote:

 

Stefan Ritt wrote:

 

Carl Shirey wrote:

I went to upgrade to the new version of elog I receive a error message that is.

error: Failed dependencies:
libssl.so.6 is needed by elog-2.7.5-1.i386
rtld(GNU_HASH) is needed by elog-2.7.5-1.i386

Do I need these dependencies for elog to work? If I do need them where do I get them for Suse 10.2.

Thank you for any help.

Carl

 

 Starting from 2.7.5, elog needs libssl for any https:// connection. Just install the RPM like you install any other RPM. Now I'm not familar with SUSE, but I found links like that:

http://lenz.homelinux.org/RPMs/

from where you can obtain RPMs. You might have to adjust your YaST installation sources. The package you need should be named opensll-xxx where xxx is some number.

 

 Thank you

I will look into it.

Carl

 

 Hi,

I just tried to install the latest elog on linux Fedora 10.  I also get an error saying that libssl.so.6 is needed.

But I already have libssl.so.7 installed.  Should I also install libssl.so.6 ?

thx,

-rob

 

[snihur@nunllap01 ~]$ rpm -qa | grep ssl
qca-ossl-2.0.0-0.4.beta3.fc10.i386
openssl-0.9.8g-12.fc10.i686
docbook-style-dsssl-1.79-5.fc9.noarch
nss_compat_ossl-0.9.4-2.fc10.i386
openssl-devel-0.9.8g-12.fc10.i386
[snihur@nunllap01 ~]$ rpm -q --provides openssl
config(openssl) = 0.9.8g-12.fc10
lib4758cca.so 
libaep.so 
libatalla.so 
libchil.so 
libcrypto.so.7 
libcswift.so 
libgmp.so 
libnuron.so 
libssl.so.7 
libsureware.so 
libubsec.so 
openssl = 0.9.8g-12.fc10
openssl(x86-32) = 0.9.8g-12.fc10

 

The RPM system is a bit picky about which version is required. I believe you have to install libssl.so.7 or compile elog from the sources, which is very simple. 

  66330   Tue Apr 28 05:53:19 2009 Reply Rob Snihursnihur@fnal.govQuestionLinux2.7.2-3Re: Error: Failed dependencies:

Carl Shirey wrote:

Stefan Ritt wrote:

 

Carl Shirey wrote:

I went to upgrade to the new version of elog I receive a error message that is.

error: Failed dependencies:
libssl.so.6 is needed by elog-2.7.5-1.i386
rtld(GNU_HASH) is needed by elog-2.7.5-1.i386

Do I need these dependencies for elog to work? If I do need them where do I get them for Suse 10.2.

Thank you for any help.

Carl

 

 Starting from 2.7.5, elog needs libssl for any https:// connection. Just install the RPM like you install any other RPM. Now I'm not familar with SUSE, but I found links like that:

http://lenz.homelinux.org/RPMs/

from where you can obtain RPMs. You might have to adjust your YaST installation sources. The package you need should be named opensll-xxx where xxx is some number.

 Thank you

I will look into it.

Carl

 Hi,

I just tried to install the latest elog on linux Fedora 10.  I also get an error saying that libssl.so.6 is needed.

But I already have libssl.so.7 installed.  Should I also install libssl.so.6 ?

thx,

-rob

 

[snihur@nunllap01 ~]$ rpm -qa | grep ssl
qca-ossl-2.0.0-0.4.beta3.fc10.i386
openssl-0.9.8g-12.fc10.i686
docbook-style-dsssl-1.79-5.fc9.noarch
nss_compat_ossl-0.9.4-2.fc10.i386
openssl-devel-0.9.8g-12.fc10.i386
[snihur@nunllap01 ~]$ rpm -q --provides openssl
config(openssl) = 0.9.8g-12.fc10
lib4758cca.so 
libaep.so 
libatalla.so 
libchil.so 
libcrypto.so.7 
libcswift.so 
libgmp.so 
libnuron.so 
libssl.so.7 
libsureware.so 
libubsec.so 
openssl = 0.9.8g-12.fc10
openssl(x86-32) = 0.9.8g-12.fc10

  66329   Fri Apr 24 12:25:16 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.6-219Re: mail to localhost?

 

Mike wrote:

Nevermind!

 

 What was your problem (maybe others could benefit from this information...) ???

  66328   Fri Apr 24 09:03:05 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows2.7.6Re: Is there a way to import old log messages

 

Joseph Le wrote:

I update my elog from version 2.7.5 to 2.7.6 and mistakenly replace configuration file. so i have to reconfigure everything from ground up.  when my elog back online, old log messages are not show up. is there a way to import old log messages from old log book to new one.

 

thanks

 

You don't have to import old log book messages, they should be shown automatically (as long as you don't overwrite your configuration file mistakenly). If you had a different logbook name (not "demo") your files will still be there under c:\Program Files\ELOG\logbooks\<logbook name>.  Just add the proper name in elogd.cfg, restart elogd and you will see your old messages.

ELOG V3.1.5-3fb85fa6