.
How can I change it?
ls there single user mode as linux when booting? How
Thank you
--
Scott Rotondo
Senior Principal Engineer, Oracle Database Security
Phone: +1 650 506 0138
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
profile using usermod -P. Better yet, create a
new profile containing just the command(s) that need to run with
privilege and assign that to the user.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 408 276 6987
automatically modifies your breakpoint request, you
don't have to worry about this. If it literally sets the breakpoint
where you tell it, you have to be aware of this little trick.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted
- needing to break at
function+3 so that the frame pointer is set up before you try to
examine arguments or local variables?
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 408 276 6987 (Internal x66987
On 07/30/10 03:49 PM, David Brodbeck wrote:
On Jul 30, 2010, at 3:31 PM, Scott Rotondo wrote:
Regarding the expansion of the attack surface, remember that
assuming the root role requires logging in to a user account first
and then providing the root password.
Well, yes and no. It's true
the root password to boot in single-user mode, even when root is a role.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786 6309 (Internal x86309
user account by running
rolemod -K type=normal root
but I wouldn't recommend that unless you can't find another solution.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786 6309 (Internal x86309
(or
non-existent) passwords, the situation is no worse than it was with a
single root user account.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786 6309 (Internal x86309
. I suspect it
tries to look up userIDs via LDAP first and has a long timeout. Best
to su to root in that situation.
Have a look at /etc/nsswitch.conf. The search order is configurable.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted
or a process that directly writes to the file in
/var/spool/cron/crontab.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786 6309 (Internal x86309)
___
opensolaris
in a handful of additional files I haven't
integrated yet.
Note that I'm talking about syntactic correctness only; I haven't tried
to run the resulting binaries.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786
Please don't speculate about anyone's departure, including whether it was
voluntary or not.
I won't comment on any individual, but suffice it to say that Oracle is not
actively sending away senior Solaris engineers.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
Is there any particular reason you thought it would be something other than the
standard JVM?
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786 6309 (Internal x86309)
On Jun 20, 2010, at 12:36 PM, W. Wayne Liauh w
SMF profiles to enable and disable the specific
services and apply them with svccfg apply.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone: +1 650 786 6309 (Internal x86309
.
If that's not true, then you won't be able to reach ipkg.sfbay since
it's an internal system.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Core OS Engineering
President, Trusted Computing Group
Phone/FAX: +1 650 786 6309 (Internal x86309
are essentially
equivalent. However, I believe there are minor differences between what
elfcmp considers the same and what IPS does.
That may be fine for your purposes; just don't expect matching results
100% of the time.
Scott
--
Scott Rotondo
Senior Principal Engineer, Solaris Engineering
on which the service that I'm trying to start depends on?
Sure: svcadm enable -r. See svcadm(1M).
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
, the arguments you see in ptree show the
child script. If it fails (because there is no #! line), the child
process interprets the script, but the process args still match those of
the parent.
Have a look at shell_execve() in the bash sources for details.
Scott
--
Scott Rotondo
Principal
Cyril Plisko wrote:
http://www.oracle.com/us/products/servers-storage/servers/blades/index.html
Oh well...
I don't see it. Maybe it's been fixed already?
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408
/products/view/Printers/Lexmark-C543dn/catId=cat10006-categoryprodId=4609-product
I realize this doesn't help with the original inkjet question, but I
thought the rest of opensolaris-discuss might be interested.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
Sven Aluoor wrote:
Hi folks
[Please add me CC]
How to redirect command --help to file?
Why normal way doesn't work?
keytool --help /tmp/keytool
The help text is written to stderr, not stdout. From sh or ksh, try
keytool --help 2/tmp/keytool
instead.
Scott
--
Scott
to run with privilege) are direct results of overwriting
those files.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)
___
opensolaris-discuss
this way out of the box, but given that
he followed those steps earlier it all makes sense.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
/user_attr will include type=role.
[2] The regular user account must be authorized to assume the root role,
indicated by roles=root in its /etc/user_attr entry.
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal
password.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
that may break
whenever the underlying OS changes.
It's a far more effective programming model to simply issue the commands
and see if they succeed or not.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850
some operation. A much better approach is to have
the script/program just try the operation and report an error if it
doesn't succeed.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
and dozens of times.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
Shawn Walker wrote:
Scott Rotondo wrote:
Yes, I think there is no getting away from arbitrary scripting, though
I understand the desire to move it out of the installation context.
That's funny, last I checked there have been OpenSolaris 200x releases
since 2008.05 without relying
haven't personally tried the A605, but I assume that it would run
OpenSolaris equally well.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
the forums to see if the Toshiba R600 uses a
special OpenSolaris build.
I can't comment on the other Toshiba models, but I can answer your
second question. I have personally installed an R600 using the standard
2009.06 CD.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security
is to create the new pool and then use zfs
send/receive for each filesystem.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)
___
opensolaris
the I am not a programmer statement above. So someone may
not be you. I might be interested in trying this for fun, but I'm not
sure how soon I'd get around to it.
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655
translator, but I didn't find anything. Looks
like you had better luck.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)
___
opensolaris
CPU?
Scissors cuts Paper, so Fujitsu doesn't stand a chance. But Rock
crushes Scissors, so maybe the Rock will win after all?
http://en.wikipedia.org/wiki/Rock_scissors_paper
I suggest Spock.
http://www.samkass.com/theories/RPSSL.html
Scott
--
Scott Rotondo
Principal Engineer, Solaris
as
someone does the work to update ON to build using later versions. Which
I'd imagine will have to happen at some point.
You can at least compile ON with gcc 4.x now, though that's a recent
development. See CR 6795209.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security
behavior while still
compiling with -Xa. Anyone know of a not-so-obvious Sun Studio option to
do that?
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
the X server, have documentation on
their man pages about how to enable remote use.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
Harry Putnam wrote:
Scott Rotondo scott.roto...@sun.com writes:
casper@sun.com wrote:
The most broken part of bash is its signal handling:
cd /net/somehost/file/dir ; rm -rf *
somehost hangs; now you type a ^C to interrupt the cd.
What happens?
bash-3.2$ sleep 10; echo foo
this and used it to view and print a handful of PDF
files. This is so much better than the 20th century Acroread 4.x we had
before that it's hard to describe. Now I never have to run Evince again!
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing
that has been suggested here.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278)
___
opensolaris-discuss mailing list
opensolaris-discuss
, for example.
Obviously your birthdate isn't really secret, but you may want to
consider this before posting it on a website.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal x68278
.
I'd be surprised if a later build of Solaris makes any difference. From
what I've seen, FF3 is unbelievably slow everywhere, even on Windows.
Scott
--
Scott Rotondo
Principal Engineer, Solaris Security Technologies
President, Trusted Computing Group
Phone/FAX: +1 408 850 3655 (Internal
andrew wrote:
I have started to create a page to explain some of the jargon that is
specific to Solaris and/or Sun but I'm stock on a few terms. Can some
knowledgeable folk possibly have a look and reply here with definitions for
those I've not got meanings for, and also check I've got the
Dennis Clarke wrote:
Dennis Clarke wrote:
Here are some key terms. The FCS or GA release and the ABI, the SPI and
API.
I have always been curious what the difference was between FCS and GA. I
think that GA means General Availability and perhaps is the same as FCS.
FCS stands for First
Vincent Boisard wrote:
2. I want to disable services for two reasons: improving security and
reducing resource usage.
I have already disabled, for example, the web management console, to
avoid running a JVM (I don't use the web console: it currently only
manages ZFS and CLI tools are just
Vincent Boisard wrote:
Hello,
I am currently trying to reduce the number of services running on my headless
server.
My main problem is that for most of them, I can't find info on what they do
so I don't know if I
need them or not. My system is headless so no X server, only cli.
1. You
Joerg Schilling wrote:
Scott Rotondo [EMAIL PROTECTED] wrote:
Joerg Schilling wrote:
Does it help to intialize the pointers to NULL?
Sure. This code
943 if (fsp)
944 kmem_free(fsp, sizeof (*fsp));
945 if (svp)
946 kmem_free(svp
Joerg Schilling wrote:
Juergen Keil [EMAIL PROTECTED] wrote:
Hmm, in usr/src/uts/common/fs/hsfs/hsfs_vfsops.c function hs_mountfs(),
whenever we use one of the first three |goto cleanup|, the local variables
|svp| and |jvp| are uninitialized. That should corrupt the kernel heap
when we
Shawn Walker wrote:
Not only that, is uptime really an indicator of operating system
reliability, or hardware reliability and system administration
policies?
Or lack of system use?
Scott
___
opensolaris-discuss mailing list
Andrew Watkins wrote:
Come on folks! The first answer should be What has this got to do
with OpenSolaris?
But you are presuming that the file has only the 4 lines in it. What
happens if the crontab is much longer
# more data here 0 0 * * * /usr/bin/true #Start of lines added by
SUNWscu
Jennifer Pioch wrote:
On 1/30/08, James Carlson [EMAIL PROTECTED] wrote:
Jennifer Pioch writes:
On 1/30/08, Richard Zhao [EMAIL PROTECTED] wrote:
I just come to solaris from linux, and find Tab auto-completion doesn't
work in console.
why?
# cp /usr/bin/i86/ksh93 /sbin/sh
will fix your
Alan Coopersmith wrote:
Thommy M. Malmström wrote:
Seems as if there was a change in default behaviour of the less command
between b72 and b76. It now clears the screen at exit which I find most
annoying. Or is it the GNOME terminal that has changed???
Anyway, why have the behaviour
Edward Pilatowicz wrote:
given the total file count i'd guess that these numbers are
just for ON, which is only one component of opensolaris.
ed
Good point. I did my count on the ON usr/src tree because I had it
conveniently available (/ws/onnv-clone/usr/src at Sun).
Scott
Anil Gulecha wrote:
Total 40012 files, 8793366 lines
Thats funny, I remember seeing '11m' mentioned in some opensolaris
slides. Marketing to blame?
Remember my example about cat.c, where wc -l shows 630 lines, but my
tool reports 379 lines?
It's likely that the 11M number is
Jim Grisanzio wrote:
hey ... anyone have an updated count of the number of lines of code in
the OpenSolaris source?
Jim
(Ada) 33 files,18944 lines
(Tcl) 6 files, 1028 lines
(make) 5016 files, 101157 lines
(other) 2520 files, 805011 lines
Brian Gupta wrote:
Here's the basic truth about Apple and OpenSource:
http://ezine.daemonnews.org/200602/apple.html
The first half-dozen paragraphs, describing the obstacles facing
external developers when the Apple source was still reasonably open,
seem eerily familiar.
s/Apple/Sun/g
Anne wrote:
All
When I start Xwindows from my workstation and connect to my Solaris 10
boxes, and I choose the Sun Java Desktop (not the classic CDE), I can't
use the
backup space key in the terminal windows. It's terribly annoying and in
fact, I have to run CDE from now on because of it.
Ian Collins wrote:
sprintf (start_command,%s, /opt/SUNWdsee/start-slapd);
(void) system(start_command);
In addition to the other reply, you shouldn't have to use the ghastly
(void)system() just to silence lint warnings.
Well, you *could* examine the return
Steven Xie wrote:
echo EFG|/usr/xpg4/bin/tr '[EFG]' '[pBC]'
Segmentation Fault (core dumped)
echo EFG|/usr/xpg6/bin/tr '[EFG]' '[pBC]'
Segmentation Fault (core dumped)
echo EFG|/usr/bin/tr '[EFG]' '[pBC]'
pBC
hard to pick now.
This is crazy. Has anybody filed a bug yet?
Scott
Donald Brownlee wrote:
I installed update 3 Saturday.
I think that I had to check the box other than the
one that was checked by default -- maybe I misread
the explanation?
No, you're correct. In Solaris 10, you need to give a non-default answer
to the install question in order to get the
Darren J Moffat wrote:
Eric Boutilier wrote:
Thanks, Wyllys. Your proposal has been seconded. I'll contact
you offline to get you set up.
Given the project is more than just a driver for the TPM chip to plugin
to the crypto framework can we *please* use a project name that reflects
that,
Wyllys Ingersoll wrote:
I would like to propose a new project for OpenSolaris.org.
The project will be called Solaris TPM Drivers.
The goal is to create TPM (Trusted Platform Module)
kernel drivers and cryptographic framework plugins
for OpenSolaris to facilitate future secure computing
work.
Darren J Moffat wrote:
Wyllys Ingersoll wrote:
I would like to propose a new project for OpenSolaris.org.
The project will be called Solaris TPM Drivers.
The goal is to create TPM (Trusted Platform Module)
kernel drivers and cryptographic framework plugins
for OpenSolaris to facilitate future
Stephen Harpster wrote:
We're wondering if this would increase participation. There are a lot
of GPL bigots out there. If OpenSolaris were available under GPL, would
there be more people willing to participate who have to date ignored us
because we're CDDL only?
That seems unlikely. At
Deepak Bhatia wrote:
When we do
#cc test.c
We get a.out file but it is again ELF File format file.
A.out is the name of a binary format that predates ELF. This compiler
always produces ELF output files, even if the file name happens to be
a.out.
Hi,
I am working on a project related
wb wrote:
Hi.
I have a /tmp FS for swap, and a really big file crout* inside. The /tmp was
95% up.
I decided to remove the crout file.
The problem, is the /tmp is not decreasing, but still growing.
How could I make it decrease?
Removing the file just deletes the directory entry in /tmp.
Darren J Moffat wrote:
Patrick wrote:
just wondering if there is any free software to back-up and keep
up-to-date certain folders on my hard drive to external hard drive?
basically i need to be able to plug in my external USB HD and be able
to tell which files have changed and which files
James Hardwick wrote:
So I have been working in Solaris, and *nix in general recently for the
first time in a long long while. Trying to do various things which may
be easy to you guys, but not so much to me. Anyways, here goes it...
I am currently running in Solaris 10 w/ TX, build 42. I
[EMAIL PROTECTED] wrote:
#!/bin/csh
Refuses to run if real and effective uids don't match.
#!/bin/csh -b
Runs set-uid scripts just tine
Yes, to be complete I should have included csh -b. The point I wanted to
emphasize, however, is that csh (with no options) will refuse to
70 matches
Mail list logo
