ciphermethod.com

The Heartbleed bug, a newly discovered security vulnerability that puts users’ passwords at many popular Web sites at risk, has upended the Web since it was disclosed earlier this week. It’s an extremely serious issue, and as such, there’s a lot of confusion about the bug and its implications as you use the Internet.

Source: Heartbleed bug: What you need to know (FAQ) – CNET

# service vsftpd start
vsftpd start/pre-start, process 19503

# ftp localhost
ftp: connect: Connection refused
ftp>

# tail syslog
Apr 3 19:09:13 posix1c kernel: [5432924.750678] init: vsftpd main process (19514) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.750692] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.753473] init: vsftpd main process (19517) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.753489] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.756226] init: vsftpd main process (19520) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.756240] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.758928] init: vsftpd main process (19523) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.758942] init: vsftpd main process ended, respawning
Apr 3 19:09:13 posix1c kernel: [5432924.761728] init: vsftpd main process (19526) terminated with status 1
Apr 3 19:09:13 posix1c kernel: [5432924.761743] init: vsftpd respawning too fast, stopped

# vsftpd
500 OOPS: unrecognised variable in config file: allow_writeable_chroot

# grep allow_writeable_chroot /etc/vsftpd.conf
allow_writeable_chroot=YES

Comment out:
# grep allow_writeable_chroot /etc/vsftpd.conf
#allow_writeable_chroot=YES

# service vsftpd start
vsftpd start/running, process 19652

Service stays up:
# ftp localhost
Connected to localhost.
220 (vsFTPd 2.3.5)
Name (localhost:user):

# rpm -qa –qf “%{n}.%{arch}\n”
pciutils-devel.x86_64
pkgconfig.x86_64
libusb.x86_64
info.x86_64
desktop-file-utils.x86_64
m4.x86_64
ORBit2.x86_64
perl-Compress-Zlib.x86_64
mkisofs.x86_64
ttmkfdir.x86_64
…

# rpm -qa –qf “%{n}.%{arch}\n” | grep i386 | head
glib2.i386
libSM.i386
audiofile.i386
gmp.i386
pcsc-lite-libs.i386
libXrandr.i386
libXdamage.i386
pcsc-lite-devel.i386
libogg-devel.i386
db4-devel.i386
…

# yum list | grep i386 | head
GConf2.i386 2.14.0-9.el5 installed
NetworkManager.i386 1:0.7.0-13.el5 installed
NetworkManager-glib.i386 1:0.7.0-13.el5 installed
ORBit2.i386 2.14.3-5.el5 installed
OpenIPMI-libs.i386 2.0.16-16.el5 installed
aex-nsclt.i386 6.2-1378 installed
alsa-lib.i386 1.0.17-1.el5 installed
apr.i386 1.2.7-11.el5_6.5 installed
apr-util.i386 1.2.7-11.el5_5.2 installed
aspell.i386 12:0.60.3-13 installed

All web sites have been moved back to the old VM.


1. # passwd <userid>
2. # chsec -f /etc/security/lastlog -a unsuccessful_login_count=0 -s <userid>
3. # chuser account_locked=false <userid>