Re: RHEL setterm question
$ uname -a Linux rh89-mongodb 4.18.0-513.9.1.el8_9.s390x #1 SMP Thu Nov 16 09:49:25 EST 2023 s390x s390x s390x GNU/Linux $ which setterm /usr/bin/setterm On 4/8/24 10:10, Cortes, Marcy D. wrote: Can someone who has RHEL on s390x tell me if the setterm command is available as part of the util-linux package? -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2024 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: zip for vm
On 1/3/24 11:22, Alan Altmark wrote: I'm a fan of VMARC, as the files in it can be viewed on a Windows laptop with an app called "vmagui" (dunno if it's available for Linux or Mac). vmagui for windows seems to have gone missing with homerow.net For Linux and MacOS there's https://github.com/rvjansen/vma -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2023 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: red-hat open shift on zlinux
On 9/27/22 10:33 AM, Jack Woehr wrote: Jake got me started. I'm setting this up on my LinuxONE RHEL 8.6 virtual server. We'll see how far I get :) https://docs.openshift.com/container-platform/4.11/installing/installing_ibm_z/installing-ibm-z-kvm.html#host-machine-resource-requirements_installing-ibm-z-kvm Oops not enough resources. Scratch that :( -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2022 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: red-hat open shift on zlinux
Jake got me started. I'm setting this up on my LinuxONE RHEL 8.6 virtual server. We'll see how far I get :) On 9/27/22 10:10 AM, Jim Elliott wrote: Jake: There are several presentations from this year's VM Workshop on Red Hat OpenShift which may help. http://www.vmworkshop.org/2022pres.shtml Jim Elliott Senior IT Consultant - GlassHouse Systems Inc. On Tue, Sep 27, 2022 at 11:47 AM Jake Anderson wrote: Hello Has anyone created and configured REDHAT openshift on redhat linux distribution ? What is the use case of this environment? how are you making use of redhat openshift in z environment ? I am Just trying to understand the benefit of REDHAT openshift in zlinux Jake -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390 -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2022 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: red-hat open shift on zlinux
Try it yourself. Red Hat offers a 60-day self-managed trial https://console.redhat.com/openshift/create/datacenter?trial=ocp On 9/27/22 9:46 AM, Jake Anderson wrote: Hello Has anyone created and configured REDHAT openshift on redhat linux distribution ? What is the use case of this environment? how are you making use of redhat openshift in z environment ? I am Just trying to understand the benefit of REDHAT openshift in zlinux Jake -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390 -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2022 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Fwd: Neale Ferguson's fsiucv package
On 7/13/22 8:17 AM, Dave Jones wrote: I'm using Ubuntu 20.04 Linux here and there is no "/var/log/messages" file to be found, sorry. /var/log/syslog on Ubuntu -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2022 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Fwd: Neale Ferguson's fsiucv package
On 7/13/22 8:25 AM, Dave Jones wrote: Thanks Frank. A bit frustrating that the different distros don't put the information in the same places. /var/log/syslog is "modern" in the era of distributed syslog -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021-2022 # Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Today's funny....
On 12/14/21 8:38 AM, Edgington, Jerry wrote: Sorry, Jack, but I would have to disagree with you on this. It wouldn't "buy a car", it would be buy multiple cars, just in case the first one fails.:) The chair accepts that as a friendly amendment to the motion! -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021# Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Today's funny....
On 12/14/21 7:14 AM, Dave Jones wrote: The Windows IT engineer says: "Hey guys, I have an idea, how about we all get out of the car and get back in" The Windows IT engineer says, "What you say we just buy a new car." -- Jack Woehr # Zen is a finger pointing at the moon. IBM Champion 2021# Some want to see the moon. http://www.softwoehr.com # Some want to discuss the finger. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: [EXTERNAL] Could Microsoft be en route to dumping Windows in favor of Linux?
On 10/13/20 8:32 PM, Ron Wells wrote: LOL...would have to admit failure Not failure. Natural evolution. Validation of Richard M. Stallman's insight in the GNU Manifesto (1985): *Restricting copying is not the only basis for business in software ...** **If it were prohibited, or rejected by the customer, software business** **would move to other bases of organization ...* Now the question is, can we /keep/ software free while the megacorps rush in and will inevitably try to "enclose the commons"? -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Article on 20 years of Linux in z
https://newsroom.ibm.com/Bringing-Linux-to-IBM-Z Here's the very long article I wrote at the time based on interviews and get-togethers at SHARE 94 in Anaheim in the year 2000. https://www.drdobbs.com/open-source/linux-on-the-ibm-s390/184404406 -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Missing jni.h
On 8/4/20 9:37 AM, David Spiegel wrote: Also, there is no include directory and no SDK in /alternatives Hmm, I find it in /usr/lib/jvm/java-1.8.0-ibm-1.8.0.6.10-1jpp.1.el7.s390x/include/jni.h No /usr/lib/jvm directory? -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Missing jni.h
On 8/4/20 8:48 AM, David Spiegel wrote: Hi Jack, I have /usr/lib/jvm/java-1.8.0-ibm-1.8.0.6.10-1jpp.1.el7.s390x but, there is no include directory: David, when you asked your question, I went to an LPAR that did not have it installed and installed it just like I said. sudo yum install java-1.8.0-ibm-devel This is what yum said it was installing: == Package Arch Version Repository Size == Installing: java-1.8.0-ibm-devel s390x 1:1.8.0.6.10-1jpp.1.el7 rhel7-supp 8.8 M Installing for dependencies: copy-jdk-configs noarch 3.3-10.el7_5 rhel7-base 21 k dejavu-fonts-common noarch 2.33-6.el7 rhel7-base 64 k dejavu-sans-fonts noarch 2.33-6.el7 rhel7-base 1.4 M fontconfig s390x 2.13.0-4.3.el7 rhel7-base 253 k fontpackages-filesystem noarch 1.44-8.el7 rhel7-base 9.9 k java-1.8.0-ibm s390x 1:1.8.0.6.10-1jpp.1.el7 rhel7-supp 109 M javapackages-tools noarch 3.4.1-11.el7 rhel7-base 73 k libX11 s390x 1.6.7-2.el7 rhel7-base 596 k libX11-common noarch 1.6.7-2.el7 rhel7-base 164 k libXau s390x 1.0.8-2.1.el7 rhel7-base 29 k libXext s390x 1.3.3-3.el7 rhel7-base 38 k libXft s390x 2.3.2-2.el7 rhel7-base 59 k libXi s390x 1.7.9-1.el7 rhel7-base 39 k libXrender s390x 0.9.10-1.el7 rhel7-base 26 k libXtst s390x 1.2.3-1.el7 rhel7-base 20 k libxcb s390x 1.13-1.el7 rhel7-base 210 k python-javapackages noarch 3.4.1-11.el7 rhel7-base 31 k You might check to see you have the more obvious RPMs installed, e.g. * java-1.8.0-ibm * javapackages-tools Also, do the find command from root that both of us have shown you (with slight variations) just to see if it's hiding somewhere. -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Missing jni.h
On 8/4/20 8:44 AM, David Spiegel wrote: I tried that, but, got: Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-manager No package java-1.8.0-ibm-devel available. Okay, but it installed with no dependency failure messages? One of my colleagues recommended to download manually and do: yum localinstall java-1.8.0-ibm-devel-1.8.0.6.10-1jpp.1.el7.s390x.rpm Did you find jni.h like I showed you? -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Missing jni.h
On 8/4/20 8:32 AM, Jack Woehr wrote: On 8/4/20 8:15 AM, David Spiegel wrote: Hi, I have installed Red Hat 7.6 as Guest under z/VM. I downloaded and installed JDK java-1.8.0-ibm-devel-1.8.0.6.10-1jpp.1.el7.s390x.rpm You did download using sudo yum install java-1.8.0-ibm-devel Right? -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Missing jni.h
On 8/4/20 8:15 AM, David Spiegel wrote: Hi, I have installed Red Hat 7.6 as Guest under z/VM. I downloaded and installed JDK java-1.8.0-ibm-devel-1.8.0.6.10-1jpp.1.el7.s390x.rpm Users cannot find jni.h and suspect that I installed a JRE instead of a JDK. Questions: - Did I download the correct rpm (from Red Hat)? Yes. - If yes, how do I find jni.h? cd / ; sudo find . | grep 'jni\.h' /usr/lib/jvm/java-1.8.0-ibm-1.8.0.6.10-1jpp.1.el7.s390x/include/jni.h -- Jack Woehr # Woehr's Asymptote: The ratio of the time spent Box 51, Golden CO 80402 # administering productivity software over the time http://www.softwoehr.com # saved by said software eventually approximates 1. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www2.marist.edu/htbin/wlvindex?LINUX-390
Re: Used MP3000
McKown, John wrote: At one time, I had a PDF which was on the TIMI (Technology Independent Machine Interface), which vaguely corresponds to the z's assembly language. shudder It sort of reminds me of Java byte code or other high level assembly instructions. The iSeries is very cool. It is indeed like Java only more so. Java runs nicely on iSeries. Don't dis the iSeries. It's VM's own offspring, conceptually, and very attractive in its own right. From 1995-2000 I participated in a lot of ultimately pointless discussion about WIBNI IBM were to open up VM to the world and make the POPS a pop platform. Maybe IBM would now own the turf which VMWare owns had that happened. -- Jack J. Woehr# Reality is unpredictable, and no amount of computer technology http://www.well.com/~jax # is going to change that. - David Brooks, conservative pundit, http://www.softwoehr.com # The God That Fails, 2009-12-31 New York Times -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Install of SLES 11 via FTP...
Frank M. Ramaekers wrote: Yeah, I did try /pub/outgoing/Suse as well (just didn't show it in the post). Didn't read previous thread non-standard port for the FTP server? -- Jack J. Woehr# Reality is unpredictable, and no amount of computer technology http://www.well.com/~jax # is going to change that. - David Brooks, conservative pundit, http://www.softwoehr.com # The God That Fails, 2009-12-31 New York Times -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: A wee bit of Filk...
John Campbell wrote: (TTTO I'm a Lumberjack and I'm OK, from Monty Python) SysAdmin... I'm a sysadmin and I'm okay I get beeped at night and I work all day Quickly. Put. The. Mouse. Down. And. Walk. Outside. Breathe deeply There, feel better? :) Happy Gnu Ear Everyone -- Jack J. Woehr# Religion has actually convinced people that there's an http://www.well.com/~jax # invisible man living in the sky who watches everything http://www.softwoehr.com # you do, every minute of every day. - George Carlin -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: java SDK
Frank M. Ramaekers wrote: Okay, that seemed to have worked just fine. (Now I have to rediscover alternatives to be able to switch between the original 1.4.2 and the new SDK 1.6.0.) Toggle your path, that's sufficient. The java executables know the rest. Weird font, dude :) -- Jack J. Woehr# Religion has actually convinced people that there's an http://www.well.com/~jax # invisible man living in the sky who watches everything http://www.softwoehr.com # you do, every minute of every day. - George Carlin -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: java SDK
Frank M. Ramaekers wrote: Now I'm puzzled as to why the IMB SDK is so much slower that the installed java 1.4: Try it twice in a row. You could have had the libraries of the former in cache. -- Jack J. Woehr# Religion has actually convinced people that there's an http://www.well.com/~jax # invisible man living in the sky who watches everything http://www.softwoehr.com # you do, every minute of every day. - George Carlin -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: java SDK
Frank M. Ramaekers wrote: Hmmm...doing a search, it appears that I do have it: Add those directories to the LD_LIBRARY_PATH of the account trying to do the install. -- Jack J. Woehr# Religion has actually convinced people that there's an http://www.well.com/~jax # invisible man living in the sky who watches everything http://www.softwoehr.com # you do, every minute of every day. - George Carlin -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: java SDK
Frank M. Ramaekers wrote: # yum localinstall ibm-java-s390x-sdk-6.0-7.0.s390x.rpm I don't know 'yum'. What happens if you just use 'rpm' ? -- Jack J. Woehr# Religion has actually convinced people that there's an http://www.well.com/~jax # invisible man living in the sky who watches everything http://www.softwoehr.com # you do, every minute of every day. - George Carlin -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux software development question
McKown, John wrote: Is there a convention for using stderr in place of an output file name? Or is it not expected to want to direct file type output to stderr? Very common use case, usually handled not by the command but by the shell that launches it, e.g., ls 12 in sh bash and ksh will send the output of the command ls to stderr. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux software development question
McKown, John wrote: app in1 in2 in3 output.file would become app in1 in2 in3 /dev/fd/2 and I could do an fopen() on that, or just detect that as my convention and use file descriptor 3 directly. Stick me with a fork, I'm done! Would look bizarre to an experienced user. These sorts of things are done frequently in Unix apps. You should * look at how the shells works to obviate most of this complexity * look at the io and file classes in Java * look at the 'tee' command in Unix before you consider your application design finalized. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: assembler and LINUX
ghochrei...@tsys.com wrote: I am an experienced assembler programmer, BUT I do not have any clue how to write , assemble etc. in LINUX , where do I start ?? Any help is appreciated . Thanks Gunter The sources for the kernel and libc have extensive bodies in assembler. The assembler is called 'as' (traditional Unix assembler name) or 'gas' (for 'GNU assembler). Brief hi-performance or specialty routines that can be coded in assembly files or, if brief enough, inline right in your C source GNU C is the lowest-level language commonly used for Linux programming off-z. Your needs may be different than the world at large. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: FatELF killed
David Boyes wrote: On 11/13/09 1:20 AM, Shane ibm-m...@tpg.com.au wrote: Maybe Con K wasn't the only person to get rubbed the wrong way. As I commented in my Ohio Linuxfest presentation, the culture of the Linux community is beginning to feed on itself. We need a Melinda Varian. You need to discover OpenBSD. Theo DeRaadt is not nearly as lovely and charming as Melinda, but he manages an open source Unix-like operating system project which is much simpler. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: FatELF killed
Rodger Donaldson wrote: You know you've spent too long on the Internet if you can't tell whether someone describing Theo as lovely and charming is being profoundly sarcastic or not. Theo, like Richard Stallman, is a force of nature :) -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Alan Altmark wrote: Ah, semantics. :-) People arbitrate (decide). Machines obey. The mere presence of a user account does not justify its existence. The justification is the shopwork rule, If it ain't broke, don't fix it! In a Unix system, having a process to ensure that you *don't* orphan files when deleting an account would seem to be de riguer. Would seem to, wouldn't it? Some do. Some don't. The one constant is change and so I suggest that no auditor or sysadmin will know all necessary and not necessary accounts, and that they must work together to turn the unknown into the known. Don't mess with accounts[uid 100] installed by the default install is not a bad rule. Same thing on z/VM: If you don't remove the objects created by or for a user, and scrub all of your authorization lists when you delete a virtual machine, you shouldn't ever reuse a z/VM user ID. Example: SFS directories. Good procedure. No one sane would re-use the games uid anyway, it's 100 and thus customary on your flavor of Linux. Break custom at yer own risk! -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: DHCP
Thang Pham wrote: but I want to know how to configure new Linux systems to use DHCP. http://www.redhat.com/docs/manuals/linux/RHL-8.0-Manual/custom-guide/s1-dhcp-configuring-client.html -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
R P Herrold wrote: They are doing a job without any discretion to vary the rules; There's a wonderful story from Roman imperial history about the Roman official in, I think it was Belgium, who rigidly interpreted a tax-in-kind of hides as ox-hides, a very expensive commodity, leading to the impoverishment and subsequent rebellion of the province, resulting in thousands of deaths and untold property destruction. I'm sure that when questioned about his decision, he used the perennial, tried-and-true rationale of the incompetent bureaucrat :I have no discretion to vary the rules. The term of art for this kind of behavior, whether it be exhibited in statecraft or information management, is /self-defeating stupidity/. It has been chronicled exhaustively by wiser and witter persons than myself, from Jonathan Swift to Dr. Raymond Peter to Scott Adams. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Alan Altmark wrote: Marcy's question wasn't unreasonable and neither is the policy to remove unnecessary account ... But to implement the policy, *someone* has to be the arbiter of necessary, and I don't think it should be the system that's being audited! In the specific instance, most estimable Alan, your general guidance is wrong. Marcy was asking for help in deleting accounts she did not know the purpose of, /and/ the system /is/ the arbiter in that these system accounts own system files which are orphaned if the system accounts are deleted. In a worst-case scenario (that's what security planning is about, right?) 1. ftp system files are orphaned by deleting the account 2. a user account re-using the uid number for the vanished ftp account is accidentally created 3. Joe User gets control of FTP. /That's/ the sort of security result you get from dutifully following directives issued by ignorami endowed with Papal Infallibility. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Edmund R. MacKenty wrote: . I don't think the UID/GID can be re-used, as your vendor controls their assignments for system accounts and useradd(8) will not assign UID/GID values below 500 That number-below-which is controlled by the contents of /etc/login.defs I believe, which is an editable text file, not a hard limit. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
PAUL WILLIAMSON wrote: how about imparting some of that vast knowledge you seem to be harboring in that horse of yours? I already gave her the best technical advice she's gotten yet. I said, Don't do that , it doesn't add to your system security and it's dangerous. Why does the user games have to exist on a linux system? It owns some files. It can't login, that is why something like /sbin/nologin (from memory) is its shell. The more kozmik issue is that all sorts of utilities and regimens think that certain well-known system accounts do exist. Due to the open source context, it thus becomes a Halting Problem to determine whether you're going to get surprises if you delete these accounts. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Scott Rohling wrote: I'm glad you wouldn't be disturbed by user/accounts that you, the sysprog, deleted and finding them magically restored. User accounts, yes. System accounts, no ... one is curious, but the answer is pretty obvious, One of the first posters in the discussoon nailed it, anyway, so I thought that was a dead issue. I am, Marcy is - and you are not helping. I'm more disturbed that this kind of snipe hunt, the deleting of well-known no-login system accounts that date back in Unix history to the 1980's, is viewed by the Linux 390 community as a useful or rational activity that can be mandated by management without your laughing in their faces. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Mark Post wrote: No one has said it's rational or useful (at least I haven't), but it is necessary, for the numerous reasons everyone has been relating. Technicians don't get to ignore executive management mandates. They can, and do, criticize them and complain about them, but for something like this that is pretty small potatoes in the grand scheme of things, they do their job as directed. There have been issues in the past where I would have refused to do as directed, but not for something this petty. Well, in any case, now Marcy is committed to: * removing the accounts * validating that pam.conf disallows the reassignment of these accounts * searching for and removing the files and directories, if any, owned by the accounts o alternatively, finding a safe owner for them o Oh, and we haven't even dicussed /group/ memberships yet :) * /altering/ the install files for /each and every upgrade/ of her system so these accounts aren't recreated * /validating the behavior /of any admin utilities she uses which /may /presume the account existence (e.g., said install files) * /deducing/ the connection between any surprising later incident and the removal of the accounts Please do post back, Marcy, should you discover any /more /work you've been inadvertently committed to by this interesting management directive. A better use of the time you'll be spending on this is /reading the system security logs/. Mention that at your next committee meeting! -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Edmund R. MacKenty wrote: It's actually a lot simplier than this, Jack. The length of your post is itself indicative of how much effort is required to perform this unnecessary task :) How is PAM involved in this? PAM doesn't assign accounts, it is just an authentication layer. There's nothing to do with PAM. Methinks pam.conf determines x, y where only (y uid x) will be created by useradd. Correct me if I'm wrong, please. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Edmund R. MacKenty wrote: , this task is necessary simply because it was ordered by those with the authority to assign tasks. Yo ree oh, ree oh rum! (The song of the Winkies at the castle of the Wicked Witch of the West) It's /etc/login.defs where those values are defined. We don't want to change those. Nah, that's obsolete. /etc/login.defs still exists, but it's not used by useradd in systems with pam. The actual value used by useradd is found in /etc/pam.conf nowadays. Again, that's methinks ... the 'man' command is your friend! -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Alan Altmark wrote: the best Bad Things can and do masquerade as Good Things. Hey, I thought we were going to avoid politics! :) In a Unix system, having a process to ensure that you *don't* orphan files when deleting an account would seem to be de riguer. Empirically: * 733T Unix weenies are disinclined to delete system accounts * Users tend to have their files in two places: o /home/~username -- solution, delete their home dir o /some/wellknown/shared/work/dir -- chown their files If any file exists to which said uid has privileges, then why would you delete the account until you clean up the files? You wouldn't. I'm not a Unix sysadmin, but I presume that there are admin packages that handle this sort of thing for you. When you discover that the admin tools is about to delete /sys/bin/important, Nothing in /bin /usr/bin /sbin or /usr/sbin is owned by a non-system account on any sane Unix installation. The one constant is change and so I suggest that no auditor or sysadmin will know all necessary and not necessary accounts, and that they must work together to turn the unknown into the known. The response to that is: * The default /system/ accounts on a modern Linux system are not inherently a security exposure * Don't delete /system/ accounts because it's a lot of work and it does /nothing/ for you * Deleting the /files/ on the other hand, e.g., in /usr/games, can save space at least. * 2. a user account re-using the uid number for the vanished ftp account is accidentally created Hey, if you're going to introduce sloppy sysadmins into the mix The questioner didn't know to look in the control files for the numerical limits on uid's. Just one more reason not to mess with system defaults without a genuine business case. Same thing on z/VM: If you don't remove the objects created by or for a user, and scrub all of your authorization lists when you delete a virtual machine, you shouldn't ever reuse a z/VM user ID. Example: SFS directories. Absotively. The questioner came to the task without that insight as it pertains to Unix. But the overarching insight is that the hapless questioner is being tasked to hop over cracks in the pavement in fear that otherwise someone's mother's back will get broken. Wasted human effort. Pfaugh. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Jerry Whitteridge wrote: I'd agree with Marcy here. I'd have a hard time justifying an ID or Group on a business server that called itself games, Believe me, I understand. My granddaughter still separates the mushrooms out of her spaghetti sauce one by one. :) Thanks for the chat, all! -- Jack J. Woehr# ?'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'? - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Marcy Cortes wrote: Jack, this Linux 390 community consists of folks running Linux on very expensive hardware purchased by companies that view security as a very top priority. And the nologin 'games' account on those very expensive machines is still not a security exposure :) I wanted to make sure the implementations I am in charge of meet the policies as written and that I am able to answer questions with answers that I feel are valid. Well, you're a very dutiful employee and they're lucky to have you. You still should kick 'em in the butt once in a while so they don't start to think that the reason you obey them is that they're smarter than the average fifth grader! -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Marcy Cortes wrote: I keep getting rid of this userid /etc/passwd, and something puts it back. SLES 10. How do I make it stop doing that? If you have to ask this question, you should not delete userids installed by the default install of a Unix system! Maybe you could delete MAINT from the VM Directory instead if you feel a need to remove default entries :) -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Scott Rohling wrote: Hit 'send' too soon... just wanted to ask how you'd feel if you deleted FTPSERVE on zVM -- only to find it came back the next day? Same thing here.. Couldn't happen to me because I don't screw around with working default installations without a) having a real business case and b) taking the time to learn what I'm actually going to do to the system by doing so. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Marcy Cortes wrote: I keep getting rid of this userid /etc/passwd, and something puts it back. SLES 10. How do I make it stop doing that? Also uucp and ftp. Bad bad bad. Linux is the Windows of the Unix world. It's user friendly. That's why I use OpenBSD :) Not bad bad bad. Linux is trying to save you from hosing your installation, probably. I shouldn't tell you this and empower you to go break things, but I'll bet one of the daily scripts or one of the startup scripts puts these uids back if you mistakenly delete them. Leave them there. They're part of the system design. You CAN get rid of them and keep the system running but there's no sane reason to. Why ever would you want to expend work to do something you shouldn't do and have no reason to do? Delete the contents of /usr/games if you want, but don't delete the user id. And leave uucp and ftp userids alone on pain of You'll Be Sorry Someday And Not Know Why. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Marcy Cortes wrote: You can restrict them up the wazoo but if someone has written a security law that says remove unnecessary accounts, you'd like them to stay removed when you remove them. Someone needs a beginner book on Unix. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Mark Post wrote: If your management chain, all the way to the top, isn't willing to fight stupidity, the poor technicians have no option but to bend with the wind. Which is why the open source community exists. Which is why Linux exists. Which is why Linux did not, could never have, emerged from the classic corporate environment that is VM's natural home. Which is why I reflexively snarl I hear about fools masquerading as computer security personnel handing down such guidelines. They do to Linux like Kurt Vonnegut Jr.'s story about the bureaucracy in charge of putting lead weights on the ankles of ballerinas so the ballerinas wouldn't make less talented folks look bad. The problem for you with these security charlatans working from checklists is that * they /don't actually make //anything more secure/ * they /munge systems/ out of /sheer ignorance/ of the architecture * they /stifle productivity/ by creating busywork for you I have peered the glass house environment, but never really grokked it. It seems to regard under-achievement as a /virtue/. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Where does games come from?
Mark Post wrote: It was the open systems auditors that had the long, long list of hard and fast rules that no one could argue with. Well, as they say, genius has it limits, but stupidity knows none. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ldd arbitrary code execution - good coders code, great reuse
McKown, John wrote: This is a scary article. I don't have a Linux on z system to test it out on. http://www.catonmat.net/blog/ldd-arbitrary-code-execution/ Oh, jeez, guys. This is a kid's trick. The victim has to be stupid enough to execute ldd against a binary in the scamming user's write permission domain. And it doesn't run as root when it runs, just as the moron who executed this idiotic command, ldd ~jwoehr/hacks/bogus_binary ? Keep users who would do such things out of shell access. Let 'em use the web interface you provide them instead, it's safer that way. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ldd arbitrary code execution - good coders code, great reuse
Also if you are now shying away from running ldd, just make sure the binary is of type ELF and you are safe, the examination not the execution will take place. To make sure something you are about to ldd is ELF, just do this sort of thing: $ od -c /usr/bin/grep | head -1 000 177 E L F 001 001 001 \0 \0 \0 \0 \0 \0 \0 \0 \0 Because ELF binaries ident themselves $ man elf ELF(5)OpenBSD Programmer's Manual ELF(5) NAME elf - format of ELF executable binary files SYNOPSIS #include elf_abi.h DESCRIPTION The header file elf_abi.h defines the format of ELF executable binary files. Amongst these files are normal executable files, relocatable ob- ject files, core files and shared libraries. etc. Jack Woehr wrote: McKown, John wrote: This is a scary article. I don't have a Linux on z system to test it out on. http://www.catonmat.net/blog/ldd-arbitrary-code-execution/ Oh, jeez, guys. This is a kid's trick. The victim has to be stupid enough to execute ldd against a binary in the scamming user's write permission domain. And it doesn't run as root when it runs, just as the moron who executed this idiotic command, ldd ~jwoehr/hacks/bogus_binary ? Keep users who would do such things out of shell access. Let 'em use the web interface you provide them instead, it's safer that way. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ldd arbitrary code execution - good coders code, great reuse
McKown, John wrote: Problem is, I've known such. And, to be brutally honest, I could have been caught myself simply due to ignorance about how/what ldd works. Of course. Everyone does once. Some how the Unix world survives. Like you guys somehow survived with your indescribably lame password system on VM :) Stuff happens. You fix it and go on. I'm z/OS internals oriented, not Linux internals. So well known Linux/UNIX hacks like this could be run against me. Yes. They could. Which is why Real Unix Users don't log on as root and mostly use sudo to execute well-thought-out commands. If you can't learn to partition your world thusly, and back up regularly, you really shouldn't use Unix. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ldd arbitrary code execution - good coders code, great reuse
McKown, John wrote: Problem is, I've known such. And, to be brutally honest, I could have been caught myself simply due to ignorance about how/what ldd works. There are more subtle attacks on Linux integrity. In any case, chmod 700 ldd if ldd is too powerful w/r/t the sophistication of your user crowd. Examine chroot also for user accounts and use it to provide a select subset of user commands to the novices. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Young Developers Get Old Mainframers¹ Job s
Howard Rifkind wrote: There is a whole bunch of highly experienced z/Mainframe systems and applications people out there without jobs. It's time, in the immortal words of the Firesign Theatre, to climb a tree, take off your shoes, and learn to play the flute! -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ISV Software List for Linux/390
Mark Post wrote: Well, it took me way too long to get around to it, and then it took me way too long to get it into viewable condition, but the list of ISV software that used to be on one of IBM's web pages is now on the Wiki. It was last updated in mid-2007, so it's pretty old and probably misleading, given all that's happened since then. I decided to put it up on the Wiki instead of a static web page on linuxvm.org because it just seemed more likely to get updates to it that way. If anyone has changes to make, please create and account and whack away at it. Took a look. First you should lock it and replace the HTML formatting with wikitext formatting. The unix tool sed or find-and-replace in a good editor should be a help in that. Otherwise it will become an edit nightmare and no-one will touch it. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
[no subject]
Gary Cox wrote: Previous message HELP Miss typed and not intended to click send It was the most interesting message of the day. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
Stephen Frazier wrote: Martha McConaghy wrote: Whether or not you are willing to trust the information provided on the wiki is totally up to each individual. Just because some wiki's are full of crap isn't really a good reason not to try this one. Extensive history suggests that Wikis serving a dedicated and participatory audience improve dramatically over time. I've watched the music and the quantum physics pages on Wikipedia go from humorous to marvellous over the last few years. A Wiki is not a free lunch. If the audience habituates to editing and correcting mistakes on the spot, and further, about 3% of this audience routinely works on general maintenance (e.g., keeping pages of their interest on their watchlist so they catch vandalism within a day and roll back the changes) a Wiki works well. As a delivery system to a non-participatory passive audience a Wiki does not work well. Lets use the list for new questions /problems and put the old ones on the Wiki. Use them bot for what they were designed for. Amen, Stephen -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
John Summerfield wrote: David, Jack was referring to the discussion of the wiki itself when he was talking about discussion on the wiki. That's correct, and that's all I was saying. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
John Summerfield wrote: Who should, sensibly, assume that this site speaks for any part of the Linux community? Well, the Linux on z/VM community. It needs a wiki. It's a good idea. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
John Summerfield wrote: Jack Woehr wrote: John Summerfield wrote: Who should, sensibly, assume that this site speaks for any part of the Linux community? Well, the Linux on z/VM community. It needs a wiki. It's a good idea. It's a shame you quoted me without context. Wasn't the intent, John. I was springboarding off of a line of your prose to say something I wanted to say about the Wiki itself. Not arguing with you, more like a relay handoff. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
David Boyes wrote: 3. Redirect discussion of what should be on the Wiki to discussion pages of the Wiki itself!!! * Like, uh, that's what Wikis are for :) What's wrong with discussing it here, What's wrong with keeping all the source files in your computer program on different computers? A Wiki is self-contained, info and rationale, rolled into one. That's about half of why they're so useful. Instead of a website filled with assertion, they're sites filled with assertion and justification. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
Mark Post wrote: If you think those would be good topics, then you could add them to the list of starter topics on the main page. Just because someone (you in this case) doesn't have enough background to write articles, doesn't mean they can't contribute by pointing out what information would be useful to them. Knowing what is needed is a big part of the battle. Three suggestions: 1. Informative online articles about Linux z/VM * Of course I'd think of this because I write such :) 2. More and more links to all things related elsewhere online * Herc, freeware, etc. 3. Redirect discussion of what should be on the Wiki to discussion pages of the Wiki itself!!! * Like, uh, that's what Wikis are for :) -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux and z/VM Wiki
Mark Post wrote: On 9/21/2009 at 2:36 PM, Jack Woehr j...@well.com wrote: -snip- 3. Redirect discussion of what should be on the Wiki to discussion pages of the Wiki itself!!! * Like, uh, that's what Wikis are for :) Making that happen is the end goal. The reality of the moment is that we need to direct people there from the places they currently inhabit. Awesome. Already started the other two ideas. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: intrusion detection on the zLinux Platform
CHAPLIN, JAMES (CTR) wrote: Is there a host based intrusion detection agent like Symantec's CSP for the s390x platform? We have hit a road block in that Symantec does not support the mainframe Linux. Right now they want us to route our syslogs to a windows box or Blade server($$$) to capture any data, and we do not like it. There is a world of open source security tools out there. Look at Snort. http://www.snort.org/ -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Quest re: Subversion on SLES 11.0
Jack Woehr wrote: If you really feel compelled to learn more, redirect, capture and read the output of the build. You'll get to do this anyway. If ports isn't already ported to your platform, porting it will give you a set of Makefiles that /almost/ work for Linux on z. It's really faster to fix the Makefiles and check them into the Open Source world than to spend your time manually downloading the dependencies and figuring out the ./config arguments, except where you are forced to do so in order to make an almost-pertinent Makefile correct for z. So if ports ain't ported to your favorite Lin on Z that's the best use of your time, /even if what you are trying to do is build Subversion once/. Because the partial automation, the dependency tree, is 99% correct out of the box for your platform and is a fabulous time saver for prodigal dependency trees //like that of Subversion. *It's not an economic use of one's time* now that porting is automated. I meant economical of course. Excuse me. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Quest re: Subversion on SLES 11.0
Michael -- 1. I issue './configure...' to configure Subversion. './configure...' stops and tell me that the configure/make for 'zlib' had errors. I 'cd' to the zlib directory .. etc. Your experience is normal if you build Subversion by hand. No one actually does this in the real open source Unix world. We have system like OpenBSD ports system that have compound makefiles to download and build the *dependencies*. Attached at the end of this email, just as an example of how it is done, is the (heavily macroized) 'make' file in the ports tree of OpenBSD for Subversion. It won't work on your system but it really shows how it works. The macros are literate programming enough you should grok the intent easily enough. My recommendation: 1. Build Subversion from scratch using the ports system from OpenBSD or a Macintosh * OpenBSD has ports builtin * get on the web the Darwin project 'ports' tool to do this for Mac 2. Redirect the output of the 'ports' run to a text file and study. Mainframe Linuxers need for their sanity to have a couple of open source operating systems on cheap PC's, maybe several under some pc virtualization system. It really speeds up self-taught problem-solving if you have several open source OS'es handy to try things on until something works in a very revealing manner. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Quest re: Subversion on SLES 11.0
Jack Woehr wrote:
Michael --
1. I issue './configure...' to configure Subversion.
Oops forgot the makefile. Here it is.
You are to be commended. One never understands an open source system
until one builds it from
scratch, every component, every tool.
Go get 'em!!
# $OpenBSD: Makefile,v 1.44 2008/02/22 19:16:49 naddy Exp $
COMMENT-main=subversion revision control system
COMMENT-perl=perl interface to subversion
COMMENT-python=python interface to subversion
COMMENT-ruby=ruby interface to subversion
COMMENT-ap2=apache2 subversion modules
VERSION=1.4.4
DISTNAME=subversion-${VERSION}
PKGNAME=${DISTNAME}
PKGNAME-main=${DISTNAME}
PKGNAME-perl=p5-SVN-${VERSION}
PKGNAME-python=py-subversion-${VERSION}p1
PKGNAME-ruby=ruby-subversion-${VERSION}p1
PKGNAME-ap2=ap2-subversion-${VERSION}
SO_VERSION=1.0
SVN_LIBS=svn_client-1 svn_delta-1 svn_diff-1 svn_fs-1 \
svn_fs_base-1 svn_fs_fs-1 svn_ra-1 svn_ra_dav-1 \
svn_ra_local-1 svn_ra_svn-1 svn_repos-1 svn_subr-1 svn_wc-1
.for _lib in ${SVN_LIBS} svn_swig_perl-1 svn_swig_py-1 svn_swig_ruby-1
SHARED_LIBS+=${_lib} ${SO_VERSION}
.endfor
CATEGORIES=devel
HOMEPAGE=http://subversion.tigris.org/
MAINTAINER=Sigfred Haversen bsdl...@mumak.com
# BSD alike + Apache License 2.0
PERMIT_PACKAGE_CDROM=Yes
PERMIT_PACKAGE_FTP=Yes
PERMIT_DISTFILES_CDROM=Yes
PERMIT_DISTFILES_FTP=Yes
MASTER_SITES=${HOMEPAGE}/tarballs/
PSEUDO_FLAVORS=no_bindings no_ap2
FLAVOR?=
MODULES=devel/gettext
WANTLIB=apr-1 expat db z
LIB_DEPENDS=neon.=24:neon-=0.24.7:net/neon \
aprutil-1::devel/apr-util
MULTI_PACKAGES=-main
WANTLIB-main=${WANTLIB} c crypto m ssl xml2
RUN_DEPENDS-main= ${MODGETTEXT_RUN_DEPENDS}
.if !${FLAVOR:L:Mno_ap2}
MULTI_PACKAGES+=-ap2
WANTLIB-ap2=${WANTLIB} iconv aprutil-1 expat
LIB_DEPENDS-ap2=${MODGETTEXT_LIB_DEPENDS}
. for _lib in svn_delta-1 svn_fs-1 svn_fs_base-1 svn_fs_fs-1 \
svn_repos-1 svn_subr-1
LIB_DEPENDS-ap2+=
${_lib}.=${SO_VERSION}:subversion-${VERSION}:devel/subversion,-main
BUILD_DEPENDS+=::www/apache-httpd
RUN_DEPENDS-ap2=::www/apache-httpd
. endfor
.endif
.if !${FLAVOR:L:Mno_bindings}
MULTI_PACKAGES+=-perl -python -ruby
SHARED_ONLY=Yes
WANTLIB-perl=${WANTLIB} aprutil-1
RUN_DEPENDS-perl=${MODGETTEXT_RUN_DEPENDS}
LIB_DEPENDS-perl=${MODGETTEXT_LIB_DEPENDS}
. for _lib in svn_diff-1 svn_ra-1 svn_delta-1 svn_subr-1 svn_fs-1 \
svn_repos-1 svn_wc-1 svn_client-1
LIB_DEPENDS-perl+=
${_lib}.=${SO_VERSION}:subversion-${VERSION}:devel/subversion,-main
. endfor
WANTLIB-python=${WANTLIB} crypto m ssl neon xml2 aprutil-1
RUN_DEPENDS-python=${MODPY_RUN_DEPENDS}
LIB_DEPENDS-python=${MODPY_LIB_DEPENDS} ${MODGETTEXT_LIB_DEPENDS}
. for _lib in ${SVN_LIBS}
LIB_DEPENDS-python+=
${_lib}.=${SO_VERSION}:subversion-${VERSION}:devel/subversion,-main
. endfor
WANTLIB-ruby=${WANTLIB} crypto expat m ssl neon xml2 aprutil-1
RUN_DEPENDS-ruby=${MODRUBY_RUN_DEPENDS}
LIB_DEPENDS-ruby=${MODGETTEXT_LIB_DEPENDS}
. for _lib in ${SVN_LIBS}
LIB_DEPENDS-ruby+=
${_lib}.=${SO_VERSION}:subversion-${VERSION}:devel/subversion,-main
. endfor
MODULES+=lang/ruby lang/python
BUILD_DEPENDS+=::devel/swig
.endif
USE_LIBTOOL=Yes
SEPARATE_BUILD=simple
CONFIGURE_STYLE=gnu
CONFIGURE_ENV=PYTHON2=${MODPY_BIN}
CONFIGURE_ARGS+=${CONFIGURE_SHARED} \
--with-neon=${LOCALBASE} \
--with-apr=${LOCALBASE} \
--with-apr-util=${LOCALBASE} \
--with-zlib \
--without-jdk
.if !${FLAVOR:L:Mno_bindings}
CONFIGURE_ARGS+=--enable-swig-bindings=perl,python,ruby \
--with-swig=${LOCALBASE}
.else
CONFIGURE_ARGS+=--disable-swig-bindings \
--without-swig
.endif
.if !${FLAVOR:L:Mno_ap2}
CONFIGURE_ARGS+=--with-apxs=${LOCALBASE}/sbin/apxs2
.else
CONFIGURE_ARGS+=--without-apxs
.endif
REGRESS_DEPENDS=::lang/python/${MODPY_VERSION}
MODPY_VERSION?=2.5
pre-configure:
@perl -pi -e s,!!LOCALBASE!!,${LOCALBASE}, ${WRKSRC}/configure
@perl -pi -e s,!!MODPY_VERSION!!,${MODPY_VERSION}, ${WRKSRC}/configure
pre-build:
@perl -pi -e s,!!MODPY_VERSION!!,${MODPY_VERSION},
${WRKBUILD}/Makefile
.if !${FLAVOR:L:Mno_bindings}
REGRESS_DEPENDS+=::devel/p5-IO-String \
:${PKGNAME-python}:devel/subversion,-python \
:${PKGNAME-ruby}:devel/subversion,-ruby
post-build:
@cd ${WRKBUILD} ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} \
${MAKE_FLAGS} swig-py
@cd ${WRKBUILD} ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} \
${MAKE_FLAGS} swig-pl
@cd ${WRKBUILD} ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} \
${MAKE_FLAGS} swig-rb
do-regress:
@cd ${WRKBUILD} ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} \
${ALL_REGRESS_FLAGS} check FS_TYPE=bdb
@cd ${WRKBUILD} ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM} \
${ALL_REGRESS_FLAGS} check FS_TYPE=fsfs
@cd ${WRKBUILD} ${SETENV} ${MAKE_ENV} ${MAKE_PROGRAM
Re: Quest re: Subversion on SLES 11.0
Mark Post wrote: On 8/28/2009 at 4:05 PM, Jack Woehr j...@well.com wrote: No one actually does this in the real open source Unix world. I do. It's not all that hard, once you accept the idea that you're now a Linux developer, not a Linux user. That means installing a lot of packages you might not normally have, among other things. Well, I've done it too, literally hundreds of times, probably thousands. Must be over a thousand. But that was mostly in the 1990's and early 2000's, that manual download of the dependencies. No civilized operating system requires that any more in the Open Source world. for the learning experience or a personal kinkiness :) There's a ports kinda thingy for Ubuntu Linux. 'ports' itself should be ported to the Linux on z. That will build Subversion and all the dependencies. If you really feel compelled to learn more, redirect, capture and read the output of the build. Honestly, it' s been at least 6 years since most Linux/Solaris/BSD developers gave up downloading manually and building manually huge Open Source dependency chains. *It's not an economic use of one's time* now that porting is automated. -- Jack J. Woehr# «'I know what it means well enough, when I find http://www.well.com/~jax # a thing,' said the Duck: 'it's generally a frog or http://www.softwoehr.com # a worm.'» - Lewis Carroll, _Alice in Wonderland_ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: IBM, Novell to slash Linux prices for mainframes
Neale Ferguson wrote: http://www.theregister.co.uk/2009/07/27/novell_linux_mainframe_deal/ ³With System z mainframe revenues down 39 per cent - and MIPS mainframe capacity shipments off 20 percent in the second quarter - IBM is keen on boosting mainframe sales. And it wants to use Linux as a lever. So the price on Linux for one year is down from $12,000 to $8,000. That's pretty funny. To me, at least. Then again, I don't live in the Glass House so I can throw stones :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Control-D from 3270 ?
Lionel B Dyck wrote: I entered 'exit' and nothing. here is my console log: From your log, you're already committed to fsck. You've made no changes. It will hurt nothing to force a shutdown externally, just yank the rug out from under the darn thing, restart and do your fsck. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Control-D from 3270 ?
Lionel B Dyck wrote: Here is what happened: Access the file system device from another Linux instance and fsck it from superuser on the foreign instance. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: 45th anniversary of the mainframe today!
Dave Jones wrote: Yup, I think this calls for a day off, don't you? Hmm, following this group could easily give one the impression that the management trend in mainframing is definitely towards giving mainframers days off ... :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Stopping java based applications
CHAPLIN, JAMES (CTR) wrote: We want anyone in the group level to be able to also issue the kill command (in the script). Is there a way to allow users in a group to kill each other's started processes. You can have a script or program * with the setuid bit set * with the write permissions off * with group execute perms but no user execute perms -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Stopping java based applications
CHAPLIN, JAMES (CTR) wrote: -r--rwsr--+ 1 user group 500 Jan 21 16:23 stopServer.sh The setuid is set on group level. It has to be setuid to root because only root can send signal to other user's processes. So it has to be owned by root and should be something like -r-sr-x--- Oh, minor terminological pedanticism: when the set is on the group we call it setgid to differentiate from setuid. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Stopping java based applications
Mark Post wrote: Oh, minor terminological pedanticism: when the set is on the group we call it setgid to differentiate from setuid. Hardly minor, since the behavior it enables is completely different from setuid. True, but I was trying not to be /breathless/ about it, just hinting to the poster that he should dig in that direction for more info. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Stopping java based applications
Erik N Johnson wrote: This is generally considered highly insecure. The usual caveat about running userland apps as root. In fact, the generally accepted practice amongst most Linux admins is: ALWAYS issue administrative commands using sudo. This and Everything Erik says is True. I posted in the vein of answer the question asked first, thus gaining cred for the lecture you intend to follow up the answer with. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
The Real Reason setuid is insecure
There are any number of thousands of pieces on the web about this, but the real problem with setuid is that it is a hinged chopstick. A command that you execute because you can is one security risk. You fix that by auditing the code and installing the executable such that only root almighty can write over it. A setuid command has a hinge in it, a second vulnerability. Who gets to execute it in any scenario. A setuid script is two hinges in it: Who gets to execute, and who gets to edit the script. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ypserv on zLinux (s390x)
Ayer, Paul W wrote: service ypserv does not support chkconfig chkconfig is the rubric for installing startup scripts in the init.d hierarchy. Apparently the post-install in the rpm failed to set up the services for boot startup, noticed it and threw an exit code. Probably the tools are installed, you may just manually have to figure out how to start them up at boot. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Root Password
Kittendorf, Craig X. wrote: Hi, I just started back at a shop with SuSE 7.2 installed in an LPAR on a z10 and no experienced sysadmin. The root password was changed and no one knows what it is. We do not have VM, another Linux LPAR, or the installation materials. Is there a way to resolve this? http://www.linuxquestions.org/questions/linux-software-2/forgot-password-suse-linux-10-434891/ And there's also the (easiest) option of booting with init=/bin/bash which lets you become root ... -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Migration Off Reiser
Scully, William P wrote: Does anyone know of a document which describes a well-accepted technique for migrating a server's file systems from one format to another? The classic one is to boot off cd and move stuff. If you are booted to a ramdisk and have one file system (e.g., the real hardddrive root file system) mounted as /old and the new filesystem mounted as /new then in the Bourne shell or bash you can do something like: $ cd /old; tar cf - . | (cd /new; tar xf -) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: RHEL 5.2 Native LPAR install problem: Anaconda reports rpm 'corruption' error when attempting to install first package
bruce woodley wrote: Package Installation Error The file system-config-services-0.9.4-1.e15.noarch.rpm cannot be opened. This is due to a missing file, a corrupt package, or a missing header Please verify your installation source.. etc. REBOOT RETRY One think you could check is whether or not the file system-config-services-0.9.4-1.e15.noarch.rpm is or is not present anywhere on the DVD. If it is not you can probably find it somewhere and compose yourself a new ISO with the missing file present. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
BNZ deploys Red Hat's Enterprise Linux 5 on IBM System z mainframes
BNZ deploys Red Hat's Enterprise Linux 5 on IBM System z mainframes https://research.scottrade.com/research/stocks/news/news.asp?docKey=100-035x1169-1 -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: SUSE 10 hour offset
ones, Russell wrote: Date command on my SUSE 10 system is showing the correct date, time zone, and minute, but the hour is off by 6 hours. How do I change the hour offset? Two choices: * Move the host to Greenwich, England :) * Set your time zone http://www.wikihow.com/Change-the-Timezone-in-Linux -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Duplicate IP question
Tom Duerbusch wrote: What happens in the Linux world? The network suffers. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Good editor for under the 3270 console interface
Tom Duerbusch wrote: What is a good line mode editor? ex is the traditional Unix line mode editor, written for just such environments. It's the dark side of vi :) man ex -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Security question and using scp
John Summerfield wrote: If you have a dozen public keys in there, how do you know whose key was used, and that was done? I quite like the idea of locking root's account The normal practice is the Unix world is to disallow ssh logins to root ... root users must log in under a user account and su or sudo to root. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Mark Post wrote: On 1/22/2009 at 1:58 AM, Jack Woehr j...@well.com wrote: -snip- I've been looking at that paper Mark wrote about 500 Linux Servers and thinking of trying to factor that into SMAPI and see what it would take to implement. Just for accuracy, that was Mike MacIsaac. Oops. Apologies. It was late ... :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Disable makewhatis ?
Adam Thornton wrote: Does makewhatis rebuild the index from scratch each time? If not, then there's no real harm in leaving it enabled. If it does then you might want to run it by hand when you add commands. The other one you want to look for in cron is the locate.updatedb or whatever that rebuilds the 'locate' database (man locate). It's useful, but it reads a lot of the file system every time it runs! -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Barton Robinson wrote: Velocity Software is announcing zPRO, a portal for z/VM systems management. Barton, from the description on the cited page, you go well beyond what SMAPI does (out of the box) ... Since it's a native app, do you use SMAPI or do your own protocol or some mixture of same? -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Barton Robinson wrote: We use SMAPI partially. It's too slow to be really useful. It's useful to /me/! I'm having a great deal of fun with it :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Scott Rohling wrote: Gonna qualify that at all, Barton? What's too slow to be 'really' useful? SMAPI in general or certain functions? And since when did usefulness necessarily have anything to do with speed? And shouldn't a moderately busy SMAPI server respond a bit quicker than an relatively idle one on a busy machine due to caching of recently used calls? -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Scott Rohling wrote: Anyway - I was mostly curious if SMAPI in general is 'too slow' or particular functions and what those things might be - and what kind of speed/response we're talking about. Just little more specification... It's .. um ... a /little/ slow. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Scott Rohling wrote: Anyway - I was mostly curious if SMAPI in general is 'too slow' or particular functions and what those things might be - and what kind of speed/response we're talking about. Just little more specification... All kidding aside: seconds, sometimes many, for a busy query. QueryAPIFunctionalLevel takes a couple of seconds on a round trip on a reasonably powerful box, and that's the simplest call there is. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Scott Rohling wrote: Well - I did say 'necessarily'.. sure there's a value to speed, but it doesn't 'necessarily' translate to 'usefulness'. Value comes in different forms. Exactly. You can write an entire (somewhat slow) operations navigator in SMAPI. Which is what I'm doing. Slowly :) * PigIron the class lib took 4.5 months. * PigLet the servlet took 1.5 months. * I think PigView the navigator will take 4-6 mos. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Barton Robinson wrote: on a z9 IFL, SMAPI is painfully slow from what I've seen. And this is not creating linux servers in 30 seconds - which would be disk operation, not SMAPI. Scott Rohling wrote: Well - I did say 'necessarily'.. sure there's a value to speed, but it doesn't 'necessarily' translate to 'usefulness'. Value comes in different forms. Here's the Nice Stuff about SMAPI : * It's good code from an accuracy point of view. * The architecture is well factored. * It's easy to extend. * It's officially supported and really supported because IBM uses it themselves. SMAPI with custom extension can be the backend of a complete remote system management solution. Maybe it's too slow to be practical for certain kinds of things. I don't think that's the case but my definition of too slow is would cause a browser accessing the PigLet servlet to time out waiting for the return document and that's NOT what's happening for me. Everything is dandy. SMAPI is very nice, it's straightforward, and since I didn't know better, I've already written a complete open source client for it. So I intend to continue down that path towards a PigView Web 2.0-style operations navigator. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: zPRO (tm) Product Announcement
Barton Robinson wrote: on a z9 IFL, SMAPI is painfully slow from what I've seen. And this is not creating linux servers in 30 seconds - which would be disk operation, not SMAPI. I've been looking at that paper Mark wrote about 500 Linux Servers and thinking of trying to factor that into SMAPI and see what it would take to implement. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Anybody using PigIron z/VM SMAPI client?
Alan Altmark wrote: On Friday, 01/16/2009 at 08:07 EST, Patrick Spinler spinler.patr...@mayo.edu wrote: Specifically, I'd like to be able to remotely query various dirmaint functions for capacity reporting purposes (e.g. dirmaint dirmap, dirmaint user nopass) When SMAPI was originally written, it had a generic command interface in it. We ripped it out specifically to prevent apps from being written that were dependent on a specific directory manager. Which does not prevent the user from writing their own command interface, since SMAPI is easy to extend on the Host side. Also, Alan, /who/ would write apps dependent on a specific dirm? Is someone other than IBM writing apps based on SMAPI (other than yours truly?) I ask in profound ignorance of vendor space and app space in the VM world. BTW, I've discovered Google Web Toolkit and am beginning to code a PigIron/SMAPI-based VM operations navigator as a Web 2.0-style AJAX up using GWT. Very cool. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Anybody using PigIron z/VM SMAPI client?
David Boyes wrote: I really like what you've done with PigIron, but I can't run it on CMS because we don't have a supported Java. I can see the fun in that, but is there really a use case? Nobody (methinks) is sitting in front of a real 3270 using CMS anymore. There's always a shell window somewhere that can use ObjectRexx to drive PigIron, n'est-ce pas? Neat. Planning an Android/iPhone version? That would be really cool. GWT already has support in the widgets for adjusting screen sizes, so it would be a matter of enabling the support. Huh. I'll keep that in mind as I work on the app. I'm not terribly tiny-mobile-device aware myself. Maybe I should get one of these things and learn how to use it so I don't become a fuddy-duddy :) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Anybody using PigIron z/VM SMAPI client?
Alan Altmark wrote: As an aside, given the nature of the data flows, consider an option to provide an SSL session to protect them. PigIron supports SSL already. In the Builder you just check the SSL checkbox. In code, you set the SSL flag true. In JSON, you set the object member ssl : true -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Anybody using PigIron z/VM SMAPI client?
Alan Altmark wrote: And, yes, there are non-IBM exploiters of SMAPI. Well, I'd like to get in on the exploitation :) I wrote PigIron not because I have any use for it, but because I like VM and the VM community and a friend said that an Open Source VM GUI OpsNav might be interesting. Discovering extensible SMAPI, it appears the obvious route for that sort of thing. If anyone has needs that PigIron seems to fill, I'm happy to listen to input on direction. I'm also happy to do spot consulting if anyone wants any actual real-time service and support on this API and growing stack of application software which I'm working on full-time during the days (before I change persona in the evening to perform as a musician!) -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Anybody using PigIron z/VM SMAPI client?
David Boyes wrote: Yes, there is. There are a lot of things where Linux or other systems don't have effective API access to CMS or CP functions yet, but CMS (and REXX) does. If Rexx does, SMAPI does. Writing a SMAPI function and adding it to SMAPI is not terribly difficult. If SMAPI has it, Linux has it. Adding a new SMAPI function to PigIron is automated. You write a description file and regenerate. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Reasons PigIron z/VM SMAPI client
My take on Why does SMAPI exist is shaped by experience with i/OS + JT400 / JTOpen. JTOpen offers pretty complete programmatic operations access to the i/Series. IBM was enthusiastic enough to provide an overly-complete-to-the-point-of-bloating Java client API for the TCP/IP services that provide the host side of the access. So on discovering SMAPI, and finding that, in this instance, IBM omitted to write the Java client, I wrote the Java client. That is PigIron (http://pigiron.sourceforge.net) Then a friend says, People will want to use this in web applications. So I wrote PigLet, the servlet that accepts requests formatted in JSON (a popular browser-to-webserver data interchange format http://json.org) and delivers PigIron functionality, i.e., SMAPI, returning the results in JSON to the web app. Then the friend says, Well, actually, what people will want is an intelligent navigator so VM newbies can do admin chores from drag-and-drop. So now I'm starting work on PigView. Incidentally, the fun thing about SMAPI vs. JTOpen is that the VM sysprog can easily extend SMAPI, whereas the i/OS programmer can't (easily) extend the server side of JTOpen. VM, creaking under the weight of years as it is, still remains the coolest OS IBM supports. -- Jack J. Woehr# I run for public office from time to time. It's like http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get http://www.softwoehr.com # anywhere, and you fall asleep easily afterwards. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
