As some of you might have read between the lines on the forum, the public development of sidux has lately come to a halt. The reason for this are ongoing problems between the developers and sidux e.V. (the german foundation) that need to be settled before we can move on. We are in the process of doing so. On 2010-08-14 there will be a member meeting of the foundation to see if problems can be solved. Please give us the time needed to solve these problems. We will keep you posted after the meeting.

The University of Leipzig is now hosting a sidux mirror in the Free State of Saxony reachable via IPv4 and IPv6 on a massively fast pipe:

Jesse Smith from Distrowatch has written and published a very objective sidux review, which is worth reading.

Ladislav and Jesse have always treated us very fair over the last years – Thanks!

Greetings,

Chris

Happy Birthday sidux!

3 years ago sidux was born. Those of us who gave birth to it, together with all those who have additionally joined the team since that, hearty congratulate. Stay free and sexy, honey!

For the sidux Team,
Chris (slam) Hildebrandt

First Forum Post, First News Article - Comments and gifts welcome ;-)

The current Kernel exploit will be published very soon and so become exploitable.

Current sidux kernels are not affected.

Every user can test easily by running:  sysctl vm.mmap_min_addr

 This should return a non-zero value

If it returns zero (possible with quite old sidux kernels) please update your kernel immediately

Should it be zero with a current sidux kernel (because an application, e.g. wine has set it to 0) do:

 # echo "vm.mmap_min_addr = 4096" > /etc/sysctl.d/mmap_min_addr.conf

 # /etc/init.d/procps restart

 

Thanks to Cybermirror, we have a new fast mirror at http://sidux.cybermirror.org/

Today, while refactoring the sidux installer, a potential local privilege escalation issue has been discovered, which leaves a copy of the installer's configuration file on the target system. This configuration file also contains the salted MD5 password hashes for root and the first user account (UID 1000) and remains readable for local users. While this does not reveal these passwords directly, it can be used for a brute force attack against them.

Affected releases:

• 2007-01 Χάος
• 2007-02 Τάρταρς
• 2007-03/ 2007-03.1 Γάια
• 2007-04/ 2007-04.5 Έρως
• 2008-01 Νυξ
• 2008-02 Έρεβος
• 2008-03 Ουρέα

Fix:

# find /root /home -maxdepth 2 -type f -name '.sidconf*' -delete

Especially on multi-user systems, it is recommended to change the passwords for root and the first user (UID 1000) as well, this can be done using "passwd" as root/ user.

The cause for this issue has been found and upcoming releases will not be affected.

The Greek -el (Ελληνικά) version of the the sidux Operating System manual hits the sidux site with

grigris and edhunter as the translators and maintainers.

Hi folks! It's that time again, when we ask sidux users to break out the stylus' and create something spectacular for the annual sidux User Wallpaper Competition. The competition winner will have their creation included as the default wallpaper for the upcoming 2008-03 "Ουρέα" release