> I'm aware that pfkeys "may" not
> function properly so I may need to use 1 instead of PF1 etc..., yet I
still
> find myself getting hung or not being able to invoke the proper function
> keys at the right time.
> I think what I have defined is valid.
> Has anyone run into these problems and actua
Hello All,
Ever since I started working with SuSe Linux on z/Series I have always been
plagued
by problems with keystroke functionality within YAST.
My TERM variable is VT100. My Hummingbird TN/3270 profile is setup as vt100
with a sceen height of 25 and width of 80. I'm aware that pfkeys "may" n
On Thu, 31 Oct 2002 00:01, you wrote:
> I admire efforts to reduce wasted bandwidth, but I think you trimmed a bit
> too much from the post to which you're referring.
>
>
> Unrelated to that... I tried to get to the phrack site, and got our "THE
> SITE YOU HAVE TRIED TO ACCESS IS RESTRICTED BY SEC
At 11:08 10/30/2002 -0500, Post, Mark K wrote:
And the key point here is that "getting in" simply requires modifying known
exploits against vulnerable software with an S/390-specific payload.
But it didn't have to be this way. If Linas Vepstas et al. had been able
to finish the "Bigfoot" i370 p
On Thu, 31 Oct 2002 02:03, you wrote:
> One of the problems we face in our trial here is
> compiling sources and finding missing libraries.
I must say I'm a bit surprised at the amount of package rebuilding that goes
on round here, but I've not taken a lot of notice of what's being compiled
(thou
Hi...
I believe you mentioned that you are running MPROUTE. Does that depend
on broadcast or multicast datagrams to exchange routing information ?
If so, then you will need to add explicit IP Address information to your
PROFILE TCPIP file used by the z/VM TCP/IP guest.
Our CP simulation of Hipe
Redhat, sponsered by IBM, is putting on a roadshow. They will be going
cross country in a Winnebago, giving presentations and demos on Redhat and
the xSeries machines. They will be stopping at our office. I would like
to put an invitiation on this list, so if anyone in the Southern California
a
Ah, but it's not binary stuff, which is why the masking is necessary. x'00'
= end of string and x'0a' = line feed, so ASCII bash scripts that are going
to be executed can't have them embedded directly.
As far as being an indirect cause of rising healthcare costs, do I also get
the credit for redu
Yes.. I am using VM/TCPIP stack as a ROUTER to rest of network:
Linux1 |
Linux2 |
}-VM/TCPIP ->
Linuxn.. | (MPROUTE)
I've found ed to be pretty good for editing small files, but a bear at large
ones (like rc.config). Perhaps it is bourne more in midunderstanding or
maybe also bad memories of edlin.
I've had an opportunity to write a couple of rudimentary cloning scripts that
use sed:
sed s/oldipaddr/newipaddr/
Regarding credit for reducing healthcare costs... I'd gladly give you
credit, but first, we'd have to USE such a system for at least one
mission-critical application. In the words of our regarding Linux, "Additional operating systems would not only
further dilute our current capabilities, but woul
> They will be goingcross country in a Winnebago, giving presentations
and demos on > Redhat and the xSeries machines.
With a Winnebago, they probably have room for a pSeries, iSeries AND
zSeries ... why stop at the xSeries? ;-)
pct
Steve Arden wrote:
>Dumping a trace here is a bit large, but after java does a fork/execve, it
>successfully opens and reads from /lib/libc.so.6, closes it, and tries
>/usr/lib/libc.so.6 which doesn't exist, although in desperation we copied it
>there just to see what would happen. It didn't help.
Donna,
I update my SuSE guests from a 3270 console, using the ed editor.
Files are /etc/chandev.conf
/etc/modules.con - add alias for eth0 to point to new dasd driver, eg.
alias eth0 qeth
/etc/route.conf
/etc/rc.config- run /sbin/SuSEconfig after changing
run ifconfig or reboot
Betsie Spann
VM
> I don't think you're going to find too much in the way of "user
> modifications/extensions." I for one am too busy just trying to get
things
> working as distributed. I don't have the time to think about trying to
mess
> with adding/modifying functionality.
I'd also add that much of the enhanc
Did you also add the interface aliases on /etc/modules.conf and the device
parameters to /etc/chandev.conf?
On Wednesday 30 October 2002 01:51 pm, you wrote:
> I did.. I try both... On the linux side I issue "route add -host
> ip_address gw ip_address_of_VM_TCPIP " and "route ad
I am trying to clone my SLE system running in LPAR mode to another LPAR. My
lan addresses are different as well as the IP address. I am able to do a
DFDSS backup of the volumes, restore them to new addresses, IPL from the
CDROM, update PARMFILE, ZIPL, and IPL successfully on the new DASD and LPAR
Carlos,
I installed the BastilleCurses and Tk rpms, and used the
Bastille-1.3.0.tar.bz2 method per the directions. I am now receiving
numerous errors, such as:
RAW ERROR: Bareword "A_BOLD" not allowed while "strict subs" in use at
/usr/lib/perl5/site_perl/Curses/Widgets.pm line 162.
Have you be
> Out of curiosity has anyone tried the Linux patches for RSBAC
> and/or NSA
> SELinux (Debian actually has packages for some of this stuff
> now btw) on
> an S/390
The SELinux patches apply, but have some problems on 390 so far. The
DMCA prevents further comment.
-- db
This is the first time my innocent eyes have been tempted to look in this
direction... I find it amusing that the technique requires masking x'00' and
x'0A' - I'd think that no matter what platform, you'd have this problem when
cramming binary stuff down the system's throat. I suppose to these fol
A hipersocket Guest LAN uses HIPERS as the device type and QDIOIP as the link
type. Try:
DEVICE HIPERDEC HIPERS A000 PORTNAME HSI1 AUTORESTART
LINKHIPERLECQDIOIP HIPERDEC
Also make sure that the portname is specified correctly in Linux.
On Wednesday 30 October 2002 12:56 pm, you
Alan,
I haven't. But SELinux is another one of those "some day I'd like to"
things. :(
Mark Post
-Original Message-
From: Alan Cox [mailto:alan@;lxorguk.ukuu.org.uk]
Sent: Wednesday, October 30, 2002 2:38 PM
To: [EMAIL PROTECTED]
Subject: Re: Probably the first published shell code exa
I did.. I try both... On the linux side I issue "route add -host
ip_address gw ip_address_of_VM_TCPIP " and "route add default
gw ip_address_of_VM_TCPIP"
Chris,
I think monthly may be asking too much. I think a quarterly edition would
have a better chance of containing enough information to interest a wide
cross-section. I'd be interested in things like:
- Summaries of kernel and related updates and bug reports of significance to
S390
- Analysis of
I don't recall seeing this go by in the forum, but there's no guarantee I was
always paying attention.
We are trying to move most of our Linux S390 systems from 2.4.7 to 2.4.17. We
started with a Suse 7.2 as a base. The upgrades were done, with a lot of help
from others on the forum, as recommende
On Wed, 2002-10-30 at 16:08, Post, Mark K wrote:
> We all have to keep in mind that the security systems we're used to having
> protect us, such as RACF, ACF2, VM Secure, etc., aren't at work in the
> Linux/390 world, in most cases. This is UNIX/Linux software requiring the
> same attention to sec
I am running TCP/IP 420 and Kernel 2.4..7(SuSE 7.0) and I can't get
them connect(ping).
I did the following:
ON ZVM(TCPIP) side:
-define lan hsi1 owned system
-define nic a000 hiper
-couple a000 system hsi1
Runing: MPROUTE
The TCPIP con
Chris - here is a possible article for
your Linux journal. Given that 99%+ of the mainframe linux installs
will be under z/vm this might be helpful.
Let me know if this is something you're
interested in publishing.
Lionel B.
I'm sorry that I replied to Chris's note without thinking causing my reply
with attachment to go to the entire list.
Lionel B. Dyck, Systems Software Lead
Kaiser Permanente Information Technology
25 N. Via Monte Ave
Walnut Creek,
Greetings;
By all means install ntpd and friends.
I have one l/390 guest setup as a stratum 3 server and
I synch the other linux machines as well as several PCs
with it.
My stratum 3 synchs to three or four stratum 2 servers.
You can find a list of public access stratum 2 servers
at http://www.
I think a quarterly issue would do the job. Like Mark,
most of the questions I see posed here are more linux
stuff than linux on s390 ones.
The topics that I think will be more beneficial to
users and probably will bring more issues specific to
the Linux/S390 are implementation and user
modificati
Thanks to Mark Post and Willem Konynenberg.
Since "Linux keeps its own system clock in software, which is initialised
at IPL time from the hardware clock," the simplest thing to do is to just
set up ntpd because I only have a handful of Linux guests.
Bill Barr
Hi Mark
Thanks for your thoughtful comments - what you say makes good sense.
>I'll try to give you a better answer later.
Any further thoughts you have would be most welcome - thanks.
We're canvassing our newsletter lists (about 12,000 people in all, mostly
in the enterprise systems sector, tho
Bill,
If you're only talking a few guests, then yes, just get ntpd running.
Mark Post
-Original Message-
From: Barr Bill P [mailto:Bill.P.Barr@;irs.gov]
Sent: Wednesday, October 30, 2002 11:18 AM
To: [EMAIL PROTECTED]
Subject: Clock Drift
Would someone kindly point me to a reference ab
Paul, here is a piece of the workbook that we are using in class:
The site recommends using version is 1.3.0 RPMs, however, they do
not work with the s390 architecture, so the source tar file,
Bastille-1.3.0.tar.bz2, is used. Also you need to install Perl
curses or
Thanks much!
--
John McKown
Senior Technical Specialist
UICI Insurance Center
Applications & Solutions Team
+1.817.255.3225
> -Original Message-
> From: Ferguson, Neale [mailto:Neale.Ferguson@;SoftwareAG-USA.com]
> Sent: Wednesday, October 30, 2002 9:05 AM
> To: [EMAIL PROTECTED]
> Subjec
or use Debian and run apt-get update; apt-get upgrade every day. On stable
all you will get is security updates.
If you want to review the fixes before installing them use --download-only
on the upgrade and then you can
install them at your leasure and have them downloaded ready for you every
morn
Would someone kindly point me to a reference about how the Linux guest gets
its time from the underlying VM host? Should I just set up ntpd on Linux and
forget about it?
On Wed, Oct 30, 2002 at 09:12:33AM -0500, Terry Spaulding wrote:
> Looking for VPN solutions (Server) for Linux on S/390 or Linux Intel.
> Clients can be Win95, Win98, Win2000, Win/XP, Linux.
> Would be interested in hearing what is being used and what effort was
> needed to install and setup ?
If
And the key point here is that "getting in" simply requires modifying known
exploits against vulnerable software with an S/390-specific payload. Now
that the discussion has begun in the cracker world, it will not be long
before we start seeing that happen. How many of the readers of this mailing
Hi, Carlos.
No problems ... I just started looking for this yesterday and all I
could find was an i386 RPM.
Just wondering if others on this list knew of an s390 RPM or how they
went about installing.
Thanks,
Paul
Ron,
I admire efforts to reduce wasted bandwidth, but I think you trimmed a bit
too much from the post to which you're referring.
Unrelated to that... I tried to get to the phrack site, and got our "THE
SITE YOU HAVE TRIED TO ACCESS IS RESTRICTED BY SECURITY
ADMINISTRATOR." from our corporate fi
good point
> Where can I read up on zFCP support? We are going to put up a number of
> Linux/390 systems under z/VM. If we could use the SAN, that would releive
> the pressure on the mainframe DASD pool.
The announcement letters are on the free portion of IBMlink
(www.ibmlink.ibm.com, choose your country). K
On Wednesday, 10/30/2002 at 08:33 CST, Dennis Wicks <[EMAIL PROTECTED]>
wrote:
> Greetings;
>
> They key phrase here is "(if they get in)".
>
> The article itself isn't even up to the "Assembler For Dummies"
> level and doesn't reveal any great secrets about getting into
> the system.
>
> This is j
Go to:
1.
"http://publib-b.boulder.ibm.com/Redbooks.nsf/9445fa5b416f6e32852569ae006bb6
5f/ba5484ca336f840285256ba50062f762?OpenDocument&Highlight=0,fcp" Getting
Started with zSeries Fibre Channel Protocol
2. "http://www.linuxvm.org/presentations/"; Look for link to 9305 SCSI on
Linux for zSeries -
Robert,
Where can I read up on zFCP support? We are going to put up a number of
Linux/390 systems under z/VM. If we could use the SAN, that would releive
the pressure on the mainframe DASD pool.
--
John McKown
Senior Technical Specialist
UICI Insurance Center
Applications & Solutions Team
+1.817.2
Greetings;
They key phrase here is "(if they get in)".
The article itself isn't even up to the "Assembler For Dummies"
level and doesn't reveal any great secrets about getting into
the system.
This is just the latest in a long string of writings by someone
who doesn't know much about S/390 syste
Looking for VPN solutions (Server) for Linux on S/390 or Linux Intel.
Clients can be Win95, Win98, Win2000, Win/XP, Linux.
Would be interested in hearing what is being used and what effort was
needed to install and setup ?
Thanks
Regards,
Terry L. Spaulding
IBM Global Services
[EMAI
I was about to comment but after 35 years in the field , all I can say is
OH WELL
Time to get aware of security concerns about Linux on 390.
The last issue of the phrack magazine (a famous hacker magazine)
has an article on how to write a shellcode on the Linux 390
platform with a complete working example.
Here is the URL of the article about the shellcode:
http://www.phrack.org
We have Bastille running on SuSE. RedHat is supposed to be the distro for
Bastille. What problems are you having? Carlos :-)
Saying goes: Great minds think alike - I say: Great minds think for
themselves!
Carlos A. Ordonez
IBM Corporation
Server Consolidation
|-+--
52 matches
Mail list logo
