http://security.fnal.gov Whats New from the FNAL Computer Security Team en-us jklemenc@fnal.gov webmaster.gov http://security.fnal.gov/computersecurity.gif http://security.fnal.gov The Fermilab Computer Security Team administers the laboratory's computer security program and provides the Fermilab community with technical expertise and up-to-date information and resources for improving computer security. http://security.fnal.gov/krb5.conf Updated the krb5.conf template file to match the Kits version (V1.16) restoring the PILOT.FNAL.GOV realm definitions. http://computing.fnal.gov/CriticalVuln/openpbs-10-23-2006.html Critical Vulnerability in OpenPBS/Torque http://computing.fnal.gov../cookbook/SSHonMacOSX.html Added topage on current SSH problems, the information on the test release of OpenSSH for Scientific Linux Fermi and information on how to get these updates and install them. https://shamus.fnal.gov/nessquik Nessquik available for production use. Please send all comments, questions, bug reports and feature requests to CST. http://computing.fnal.gov../cookbook/TrustingCertificates.html New How-To Guide on Trusting Certificates and downloading the CA Certificates added. http://computing.fnal.gov../cookbook/SSHonMacOSX.html Added a page on current SSH problems with Mac OS X and Scientific Linux. http://security.fnal.gov/CriticalVuln/ms06-040.html Critical Vulnerability: MS06-040 - MS Server Service https://security.fnal.gov/pki/Get-KCA-Cert.html#cacertinstall Updated roaster's SSL certificate. You will need to remove your old KCA trusted authority, and install the new authority if you havent already done so (see this link), or else you will be prompted to accept and trust the certificate offered everytime you start up your browser. http://vmsstreamer1.fnal.gov/VMS_Site_03/Lectures/ComputerSecurityAwareness/060607Trumbo/index.htm Sysadmin Roundtable: Oracle Mitigations video is now available for those who missed it http://vmsstreamer1.fnal.gov/VMS_Site_03/Lectures/ComputerSecurityAwareness/060607Klemencic/vf001.htm Sysadmin Roundtable: Oracle Demonstration video is now available for those who missed it http://security.fnal.gov/tools/get-cert-proto.tar.gz Prototype version of get-cert for Mac OSX that supports inserting certificates into Firefox is available. Please report any issues. Download it here get-cert-proto.tar.gz http://computing.fnal.gov, 2006: Security page modified to remove mouse over drop list in sidemenu. Please report display or navigation errors to us so we can Security page modified to remove mouse over drop list in sidemenu. Please report display or navigation errors to us so we can fix them. http://security.fnal.gov/scanmenow.html Perform a ScanMeNow from outside the FNAL border