Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Gentoo security tips for noob. Advice pls
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2  
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54212
Location: 56N 3W

PostPosted: Sat Nov 12, 2022 3:02 pm    Post subject: Reply with quote

Spanik,

Its unlikely you even have telnet installed.

Code:
eix telnet
...
[I] net-misc/netkit-telnetd
     Available versions:  0.17-r13{tbz2}
     Installed versions:  0.17-r13{tbz2}(08:53:37 01/03/22)
     Homepage:            https://wiki.linuxfoundation.org/networking/netkit
     Description:         Standard Linux telnet client and server

* net-misc/telnet-bsd
     Available versions:  1.2-r2 1.2-r4 {nls xinetd}
     Homepage:            ftp://ftp.suse.com/pub/people/kukuk/ipv6/
     Description:         Telnet and telnetd ported from OpenBSD with IPv6 support

* net-misc/utelnetd
     Available versions:  (~)0.1.11-r3
     Homepage:            https://wiki.gentoo.org/wiki/No_homepage
     Description:         Small telnet daemon derived from the Axis tools
...

Even if its installed. its is two parts.
1. A client, which is good for testing snmp. It looks like
Code:
$ telnet -h
telnet: invalid option -- 'h'
Usage: telnet [-4] [-6] [-8] [-E] [-L] [-a] [-d] [-e char] [-l user]
   [-n tracefile] [ -b addr ] [-r] [host-name [port]]

The client is harmless but everything is sent in clear text. Usernames ... passwords ... everything.

Then there is the server, telnetd. Runnnig that is a verybadthing.
It usually runs behind sys-apps/xinetd which you probably don't have either.

Code:
netstat -a
stould not list anything listening on the telnet port. That's port 23.
Had you changed the port, you would know.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
NeverSloppy
n00b
n00b


Joined: 03 Nov 2022
Posts: 29

PostPosted: Sun Nov 13, 2022 6:53 am    Post subject: Reply with quote

SO I got tired of the Virtual machine and went ahead and installed Gentoo.

I picked the Stage3-musl-hardened but I'm not exactly sure what it's supposed
to be doing under the hood. I have some reading to do :)

Managed to get wayland/sway working only after adding X, xwayland, qtwayland to
my use flags. Not exactly what I wanted.
Back to top
View user's profile Send private message
Juippisi
Developer
Developer


Joined: 30 Sep 2005
Posts: 723
Location: /home

PostPosted: Sun Nov 13, 2022 7:02 am    Post subject: Reply with quote

NeverSloppy wrote:

I picked the Stage3-musl-hardened but I'm not exactly sure what it's supposed
to be doing under the hood.


if this is your first Gentoo installation, then picking musl is like starting a game with hard difficulty. It's most likely not going to work out-of-the-box like normal glibc profiles, and it's going to require actions from you, the user. Like searching patches from upstream / Gentoo's bugzilla to get things compiling.
Back to top
View user's profile Send private message
NeverSloppy
n00b
n00b


Joined: 03 Nov 2022
Posts: 29

PostPosted: Sun Nov 13, 2022 7:21 am    Post subject: Reply with quote

Can you tell me if this error I'm getting is a result of picking musl. I'm trying to install laptop mode tools:

Code:

x86_64-gentoo-linux-musl-gcc -DHAVE_CONFIG_H -I. -I..  -iquote ../include -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64   -Wall -W  -march=znver2 -O2 -pipe -c -o sg_map.o sg_map.c
sg_dd.c: In function 'main':
sg_dd.c:2402:17: error: unknown type name 'uint'; did you mean 'int'?
 2402 |                 uint off;
      |                 ^~~~
      |                 int
make[2]: *** [Makefile:1176: sg_dd.o] Error 1
make[2]: *** Waiting for unfinished jobs....
make[2]: Leaving directory '/var/tmp/portage/sys-apps/sg3_utils-1.47/work/sg3_utils-1.47/src'
make[1]: *** [Makefile:405: all-recursive] Error 1
make[1]: Leaving directory '/var/tmp/portage/sys-apps/sg3_utils-1.47/work/sg3_utils-1.47'
make: *** [Makefile:337: all] Error 2
 * ERROR: sys-apps/sg3_utils-1.47::gentoo failed (compile phase):
 *   emake failed
 *
 * If you need support, post the output of `emerge --info '=sys-apps/sg3_utils-1.47::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=sys-apps/sg3_utils-1.47::gentoo'`.
 * The complete build log is located at '/var/tmp/portage/sys-apps/sg3_utils-1.47/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/sys-apps/sg3_utils-1.47/temp/environment'.
 * Working directory: '/var/tmp/portage/sys-apps/sg3_utils-1.47/work/sg3_utils-1.47'
 * S: '/var/tmp/portage/sys-apps/sg3_utils-1.47/work/sg3_utils-1.47'


It seems this is a bug that needs patching https://bugs.gentoo.org/828897

Maybe I'm biting off more than I can chew :(
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54212
Location: 56N 3W

PostPosted: Sun Nov 13, 2022 1:51 pm    Post subject: Reply with quote

NeverSloppy,

If you don't have a reason to use musl for your libc start over with a more mainstream install.
Once you are comfortable with how Gentoo works and finding patches, play with musl in a VM.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
NeverSloppy
n00b
n00b


Joined: 03 Nov 2022
Posts: 29

PostPosted: Sun Nov 13, 2022 6:55 pm    Post subject: Reply with quote

Quote:
If you don't have a reason to use musl for your libc


Well.. my goal is securing my box and learning new security stuff.

Am I wrong in thinking musl is safer over glibc?

I'm fine with a small performance hit as I don't game too often.

Currently what I am doing to make laptop tools install (not sure if this will fix it):

Code:

root emerge --ask app-eselect/eselect-repository
root #eselect repository enable musl
root #emerge --sync musl

// and now I am waiting for this command to finish

emerge -1euDN @world


Am I doing things right?
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54212
Location: 56N 3W

PostPosted: Sun Nov 13, 2022 7:19 pm    Post subject: Reply with quote

NeverSloppy,

musl will have different issues to glibc.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Leonardo.b
Apprentice
Apprentice


Joined: 10 Oct 2020
Posts: 294

PostPosted: Mon Nov 14, 2022 1:42 am    Post subject: Reply with quote

NeverSloppy wrote:
Maybe I'm biting off more than I can chew

It is much more relaxing to work from a comfortable GUI enviroment, maybe with a binary kernel, and a Virtual Machine for tests.
Later, step by step, you can tweak/change everything as you wish.
Otherwise you are forced to fix things from the console. You can do it, but I think it is very stressful. Just that.

Then... well, you know:
"People give good advice, when they aren't busy giving bad example."
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum