Re: Virtualization software on Linux

2007-07-11 Thread Alex Behar
Hey guys, linux-vserver is a pretty sweet implementation, as it introduces virtually no latency since the vserver runs in a hacked up version of chroot(). There are however some limitations with that approach. Security-wise, it gives the attackers access to (almost) the whole range of

Re: Virtualization software on Linux

2007-07-10 Thread Alex Behar
Hey guys, I am running Fusion with Unity on my Mac and I have a T60 with a vmx- capable CPU running Linux with VMWare on top. The Linux VMWare setup is working great, I have VMWare 6 running on it and I use it for Windows XP + Office 2007. Even though the T60 is a pretty sleek rig (2gig of

Re: 32Gb servers?

2007-07-10 Thread Alex Behar
Hi guys, you can take a look at some of the Fire series (v440, v880) servers from Sun. Check out anysystem.com for refurbished Sun hardware, or ofcourse, ebay;) You can find gold there sometimes;) Regards, Alex On Jul 4, 2007, at 10:19 AM, Mike Tewner wrote: Have you looked into using

Re: How to meter disk I/O ?

2006-06-28 Thread Alex Behar
Please mind that you also need a 2.6 series kernel for this switch of vmstat to work. On Wednesday 28 June 2006 17:27, you wrote: vmstat -d 1 #(at least version 3.2.1, available in Debian Sarge)? On Wed, 2006-06-28 at 17:07 +0300, Michael Sternberg wrote: Hello, I have written a small

Re: wireless card 2200GB doesn't start.

2006-06-05 Thread Alex Behar
Hi David, I actually helped a friend troubleshoot an ipw2200 card on an Amilo series laptop last week. Make sure you have emerged net-wireless/ipw2200-firmware and have run etc-update prior to loading the driver. Regards, Alex Quoting David Harel [EMAIL PROTECTED]: Thanks for all of you who

Re: chroot(2) by a user.

2005-05-08 Thread Alex Behar
Good morning Amos, LD_DEBUG (as of early glibc 2.3 versions IIRC), LD_LIBRARY_PATH and LD_PRELOAD do not work on SUID binaries, unless you are root. Further more, there are ways to achieve the goal Shaul needs by using capabilities(7). I would recommand a very small hack for chrooting dynamic

Re: K panel on dual-head Redhat

2005-04-14 Thread Alex Behar
Hi Michael, what you need is xinerama. On X(free|org) there are three modes of having two monitors. The first, Xinerama is basically very similar to the dualhead mode in windows - you can move windows in between the two monitors. The only problem is that your window manager has to support it,

Re: mysql question

2005-04-14 Thread Alex Behar
to achieve best performance and suck the most out of your box. Kind regards, Alex Behar On Thursday 14 April 2005 11:48, Miki Lewinger wrote: Hi there. I'm running a bioinformatics server with RH 9.0 on a dual-xeon machine with a mobo intel 7505 motherboard on 2 GB RAM. mysql refuses to use both

Re: I have McGeyver question

2005-03-10 Thread Alex Behar
After you install Win16^H^H32, try installing Partition Magic. Recent versions can create boot loaders which can also boot linux, provided you use the partition and not the MBR to boot it. (reconfigure lilo). Good luck! On Wednesday 02 March 2005 00:01, Kfir Lavi wrote: | I have laptop with no

Re: Research: Windows more secure than Linux

2005-02-20 Thread Alex Behar
On Saturday 19 February 2005 08:29, Tzafrir Cohen wrote: | Hi | | Please stick to the point | | On Sat, Feb 19, 2005 at 02:20:19AM +0200, Alex Behar wrote: | The comments are inline. | | On Friday 18 February 2005 23:19, Tzafrir Cohen wrote: | | Hi | | | | Could anybody give a direct

Re: Research: Windows more secure than Linux

2005-02-18 Thread Alex Behar
Well, it all depends on how he defines security in Linux. RedHat 6.2-secure or Adamantix/Hardened Gentoo-secure? These last two beat Windows-based solutions out of the box any time, and they have a pretty good chance surviving zero-day threats. All that, when Microsoft advertise that they are

Re: Research: Windows more secure than Linux

2005-02-18 Thread Alex Behar
The comments are inline. On Friday 18 February 2005 23:19, Tzafrir Cohen wrote: | Hi | | Could anybody give a direct reference to the lecture notes or something | similar? I have only read the report in the link above | | On Fri, Feb 18, 2005 at 05:58:34PM +0200, Alex Behar wrote: | Well, it all

Hardened slackware packages

2005-01-07 Thread Alex Behar
Dear list, I have been maintaining a repository of slackware packages (slackpacks) for a while now and I decided to share it. It is made of the sources and slackware specific patches from the -current tree, compiled with the ProPolice GCC patch and linked using the binutils patch from the PaX

Re: open ports

2004-12-26 Thread Alex Behar
On Sunday 26 December 2004 12:29, you wrote: | Gabor Szabo wrote: | I am trying to secure a new server and as I am not an a real | security expert I'd be glad to get some inuput. | This is a Fedore-3 based server (I already shut down cupd - | why do they need this in a server anyway ?) | I

Re: kernel bug in inode.c in shutdown

2004-10-12 Thread Alex Behar
On Wednesday 13 October 2004 00:02, Oleg Goldshmidt wrote: | guy keren [EMAIL PROTECTED] writes: | On Tue, 12 Oct 2004, Kobi Cohen-Arazi wrote: | Hi, | | I got kernel bug message while shutdown. There was a data dumped. | However, I didn't know how to preserve that dump. Is it flushed to

Re: Mozilla startup time

2004-09-21 Thread Alex Behar
On Tuesday 21 September 2004 16:08, you wrote: | You can always use Gentoo instead ( ;-) ) or compile Mozilla yourself | with optimizations switches. The default package is optimized enough. The whole gentoo gcc optimization can boost your performance with a 1-2% rate, which is not worth the 12+

Re: Kernel news source

2004-08-17 Thread Alex Behar
On Tuesday 17 August 2004 14:16, you wrote: | Hi, list, | I'm a newbie in the linux kernel programming. I can see that things | constantly undergo pretty drastic changes. Is there a single source of | information where I can recieve news like 2.6.x is out, this API and that | API are changed, you

Re: tcp reassembly on gateway

2004-07-24 Thread Alex Behar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sunday 25 July 2004 03:03, you wrote: El sáb, 24-07-2004 a las 18:22, [EMAIL PROTECTED] escribió: Simple: use transparent proxy support of IPTables to get the stream delivered to a chosen port on the gateway, analyze to your heart

Re: tcp reassembly on gateway

2004-07-23 Thread Alex Behar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 23 July 2004 00:52, you wrote: Hi all. I need to build some packet analyzing application. It will be executed on linux gateway. I need to read stream of data after tcp reassembly. Is their any way kernel can provide me with

Re: A Segmentation fault in many programs on debian unstable

2004-06-26 Thread Alex Behar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 26 June 2004 19:54, you wrote: On Saturday 26 June 2004 18:59, Noam L. wrote: Sounds to me like a lib is too new for your system and its APIs have changed.. I also think so, ldd shows alot of common libraries between all of the

Re: cmd -p password. How the password can be hidden?

2004-06-26 Thread Alex Behar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sunday 27 June 2004 00:32, Tzafrir Cohen wrote: On Sun, Jun 27, 2004 at 12:00:55AM +0300, Shaul Karl wrote: when one issues some_command -p password the password will be shown by ps and probably in other places, like /proc.

Re: Optimal number of mount points (was: Re: Question on making the partitions)

2004-06-10 Thread Alex Behar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 10 June 2004 14:44, you wrote: On Thu, Jun 10, 2004, Omer Zak wrote about Optimal number of mount points (was: Re: Question on making the partitions): My opinion is different. You should have several mount points, at least separate

Re: secured uploads

2004-06-05 Thread Alex Behar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 05 June 2004 02:27, Diego Iastrubni wrote: Hi all, I have a problem I think some people here will be able to help me with. I want some users to be able to upload files to some site.The solution used right now, is getting the private