Re: [osol-discuss] Does xVM can work in VMWare virtual machine?
Hi Richard Liu wrote: > After install nv91 in VMWare when boot with xVM the machine will be auto > restarted when system init, does xVM kernel can boot in VMWare? Thanks. No, in general stacking one type 2 hypervisor on top of another does not work. Gavin ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] where is the information of package placed.
> the S9 is runing on disk0, and I need to upgrade the > S10 in disk1. in the meanwhile all services are > working . then I reboot the machine to disk1, so that > I can make the services down as short as possible. > In such process, My request comes out. In that case, Solaris Live Upgrade might be just the thing for you. Read all about it here: http://docs.sun.com/ This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] My Ideas -please read
> The FOSS systems went from the model Solaris is still > using, with > package-specific directory trees - to a flatter > model, folding pretty > much all the applications into /usr (GNU/Linux) or > their equivalent of > /opt (the various BSDs). And yes, that includes > making /opt/X* > symlinks to /opt to keep older software happy. Actually, that's due to people being generally clueless about the LSB specification, and even more clueless about System V. It has nothing to do with convenience, and everything to do with incompetence. According to the LSB spec, 3rd party and unbundled software are to end up in /opt, even on GNU/Linux. The Linux LSB spec is almost completely identical to the System V layout as found on Solaris (and HP-UX, and IRIX). This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Oracle 10g on OpenSolaris (Solaris 5.11)
> It helps Larry understand why Sun bought Mysql. At any rate it looks like Larry understands a hell of a lot more than Sun management does. Much to his credit, actually. This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Oracle 10g on OpenSolaris (Solaris 5.11)
> Hi people, > > Finally, I am able to run Oracle 10g on my > OpenSolaris installation. :-) But it is tricky and > here is how I did it: > > 1) I installed Solaris 10 (x86) on my another laptop. > Installed & configured Oracle 10g on it successfully > in /export/home/oracle. There was no need to pull all that Voodoo-hoodoo-what-you-don't-dare-do-people. ./runInstaller -ignorePreReq -ignoreSysPrereqs More details about using OUI fully are on http://tahiti.oracle.com and http://metalink.oracle.com. > 2) Now, on my acer laptop, which has OpenSolaris on > it, copied all /export/home/oracle directory > recuresively. Actually, for a clean, System V compliant Oracle install: - Oracle should have been installed in /opt/oracle/ - Oracle data (DB data) should be in /var/opt/oracle/ user "oracle" would remain in /export/home/oracle, but would be almost empty, or, depending on the installation concept, would perhaps contain the oraInventory. This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
[osol-discuss] pkg -v -R /mnt image-update fails but ...
The placement of the -v parameter to pkg should not be position
depenedant. So long as it does not get inthe way of a parameter that
requires some data/tag/token after it like -R thus :
-bash-3.2# beadm create opensolaris-2
-bash-3.2# beadm mount opensolaris-2 /mnt
-bash-3.2# pkg version
1bd9f1e17690
-bash-3.2# pkg refresh
-bash-3.2#
-bash-3.2# beadm list -a
BEActive Active on Mountpoint Space
Name reboot Used
-- - -- -
opensolaris-1 yesyes / 5.60G
Datasets Mountpoint Space Used
-- --
opensolaris-1/opt /opt 1012.92M
Snapshots Policy Date created
- --
opensolaris-1/[EMAIL PROTECTED]:-:2008-07-02-03:20:17 static 2008-07-02
03:20:17
opensolaris-1/[EMAIL PROTECTED]:-:2008-07-15-01:43:22 static 2008-07-15
01:43:22
opensolaris-1/[EMAIL PROTECTED] static 2008-06-16
07:56:38
opensolaris-1/[EMAIL PROTECTED]static 2008-07-15 02:17:50
[EMAIL PROTECTED]static 2008-07-15 02:17:50
[EMAIL PROTECTED]:-:2008-07-02-03:20:17 static 2008-07-02 03:20:17
[EMAIL PROTECTED]:-:2008-07-15-01:43:22 static 2008-07-15 01:43:22
[EMAIL PROTECTED] static 2008-06-16 07:56:38
BEActive Active on Mountpoint Space
Name reboot Used
-- - -- -
opensolaris-2 no no/mnt 351.5K
Datasets Mountpoint Space Used
-- --
opensolaris-2/opt /mnt/opt 0
BEActive Active on Mountpoint Space
Name reboot Used
-- - -- -
opensolaris no no- 53.43M
Datasets Mountpoint Space Used
-- --
opensolaris/opt - 105.0K
-bash-3.2#
-bash-3.2# pkg -v -R /mnt image-update
pkg: illegal global option -- v
Usage:
pkg [options] command [cmd_options] [operands]
Basic subcommands:
pkg install [-nvq] package...
pkg uninstall [-nrvq] package...
pkg list [-aHsuv] [package...]
pkg image-update [-nvq]
pkg refresh [--full]
pkg version
pkg help
Advanced subcommands:
pkg info [-lr] [--license] [pkg_fmri_pattern ...]
pkg search [-lr] [-s server] token
pkg verify [-fHqv] [pkg_fmri_pattern ...]
pkg contents [-Hmr] [-o attribute ...] [-s sort_key] [-t
action_type ... ]
pkg_fmri_pattern [...]
pkg image-create [-FPUz] [--full|--partial|--user] [--zone]
[-k ssl_key] [-c ssl_cert] -a = dir
pkg set-authority [-P] [-k ssl_key] [-c ssl_cert]
[-O origin_url] authority
pkg unset-authority authority ...
pkg authority [-HP] [authname]
Options:
-R dir
Environment:
PKG_IMAGE
-bash-3.2# pkg -R /mnt image-update -v
this is seen as acceptable .. but "pkg -v -R /mnt image-update" is not.
The -v option is valid for image-update and thus it is acceptable as
an option. The order of placement on the command line should not
matter.
Dennis
___
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org
[osol-discuss] Need help diagnosing failed boot after update
I ve had little or no problems using live update and ufs with solaris 10. had a new machine so i installed opensolaris from the live dvd. it installed as one slice on an entire disk. added a dns server to the list in resolv.conf zpool attach rpool c6d0s0 c7d0 - to mirror on another disk. list and status came out aok. ran package manager from the gnome interface, added open office and punched update all. downloaded about 4 gigs, they installed with no errors. rebooted, saw that snv_93 was part of the updated packages now the boot fails, machine reboots to fast to see the errors, tried adding -v to the grub boot lines and can see that i get into , i think maybe, the modules. still cant slow the bugger down from rebooting anyone please tell me how to 1. maybe mount the zfs file system from the live cd soi ran read the logs etc, or 2. do some kind of step by step boot up thru the modules or 3. how can i best reconfigure the zfs file system and create a backup BE. sorry not real familar with zfs. thanks for any help. i got work to do and am gonna be real cranky if I have to go back to windows or unbuntu tomorrow to do it. hehe This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
[osol-discuss] Sound Juicer /Gstreamer Problem!
Sound Juicer doesn't want to start at all. When I try to make it start, I receive the following error: "Could not start Sound Juicer" "Reason: The plugin necessary for CD access was not found. Please consult the documentation for assistance." The output in the terminal: ( sound-juicer:885): GLib-GObject-WARNING **: cannot register existing type `GstBaseSrc' (sound-juicer:885): GLib-GObject-CRITICAL **: file gtype.c: line 2249: assertion `parent_type > 0' failed (sound-juicer:885): GLib-GObject-CRITICAL **: file gtype.c: line 2249: assertion `parent_type > 0' failed (sound-juicer:885): GLib-GObject-CRITICAL **: file gtype.c: line 2314: assertion `G_TYPE_IS_INSTANTIATABLE (instance_type)' failed (sound-juicer:885): GLib-GObject-CRITICAL **: file gtype.c: line 2249: assertion `parent_type > 0' failed (sound-juicer:885): GStreamer-CRITICAL **: file gstelementfactory.c: line 279: assertion `g_type_is_a (type, GST_TYPE_ELEMENT)' failed It appears to be a GStreamer error. The way I went about with installing GStreamer was that I had gotten it from blastwave.org, and merely moved it to my "/usr/lib/gstreamer-0.10" and overwrote all the included Gstreamer files from the CD. Yes, a dumb idea. All of my media works. Heck, I'm even also able to mount data CDs. But when I put an Audio CD in, I get the above error messages. When I try to navigate to them in nautilus, they don't show anything on them. What do I need to do to fix this? This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Any lsof tool for nv ?
On Sun, Jul 13, 2008 at 11:31 AM, Peter Schow <[EMAIL PROTECTED]> wrote: > On Sun, Jul 13, 2008 at 10:06:44AM -0700, Karl Dalen wrote: > > or is there any other tool that can find information about > > what process is using port X ? On Solaris 10, I used to run > > for example: > > /usr/local/bin/lsof -i :49155 > > Something like this may work for you: > > # cd /proc > # pfiles * > /tmp/pout > > And then look in /tmp/pout for your port 49155 I also came across this script a while ago: http://www.unix.ms/pcp/ It puts a nice wrapper around the pfiles method described above to look for a process using a specific port, or to list all of the ports a process is using, and supports a similar syntax to lsof (-p instead of -i) for this purpose. -Matthew ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Any lsof tool for nv ?
> > I have used lsof before, but can't recollect all > the output > etails. Before I start > digging, just out of curiosity what info does lsof > provide that > files does not ? lsof provided mored detailed information about socket state and protocol including whether it uses UDP or TCP and if the socket was CLOSE_WAIT. I used lsof primarily to chase port usage (Solaris 10) for example: # /usr/local/bin/lsof -i :49155 As I noticed using pfiles in combination with 'netstat -n | grep CLOSE_WAIT' probably will enable similar information to be extracted. Thanks, /Karl This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Any lsof tool for nv ?
> > Has lsof been ported for nevada ? > > lsof is wonderful. There are situations in which it > can tell you exactly what you need to know. > Thanks a lot for your information, Indeed, lsof is wonderful and has helped me a lot in finding processes that owned sockets that were in close_WAIT state and never closed. As suggested here by several posters: # pfiles /proc/* >/tmp/pfiles.out seems to give enough information about the PID's of those processes holding sockets so I suppose that will work fine for me. /Karl > lsof is also utterly evil; it finds these things out > by means that are undocumented, > unsupported, unreliable, could conceivably crash or > corrupt your system (although it > may almost never happen), and subject to change at > any time, which is why only certain > versions of lsof work on certain versions of some > OSs; and any change to the OS internals that > lsof depends on for that particular OS will break > lsof and require that someone figure out how > to update it to keep working. It is not reasonable > to require the OS developers to be > responsible for doing that; but few others would know > how. > > > There are alternatives, although they produce a lot > more uninteresting output. For example, > what you're trying to find out could probably be > discovered by running (as root) > > pfiles /proc/* >/tmp/pfiles.out > This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Open Solaris Community Edition NV93 Java Error
Hi Bill, This sounds like it cannot find the java archive it needs to unpack in to memory to enable the installer. Can you mount the image and send me the data about what is in it, specifically under Solaris_11/Tools/Boot, or /boot is fine. thanks, sarah *** Bill Nevis wrote: > Has anyone else seen an error when > > Installing Open Solaris x86 > 1. Solaris Interactive (default) and > 3. Solaris Interactive Text (Desktop > 4. Solaris Interactive (Console) modes > Menu options 1,3,4. > > Error: Cannot find Java software, Exiting to shell > > > This message posted from opensolaris.org > ___ > opensolaris-discuss mailing list > opensolaris-discuss@opensolaris.org > ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
[osol-discuss] Open Solaris Community Edition NV93 Java Error
Has anyone else seen an error when Installing Open Solaris x86 1. Solaris Interactive (default) and 3. Solaris Interactive Text (Desktop 4. Solaris Interactive (Console) modes Menu options 1,3,4. Error: Cannot find Java software, Exiting to shell This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] root: role or account?
On Tue, Jul 15, 2008 at 12:34 AM, Joerg Schilling <[EMAIL PROTECTED]> wrote: > "Moinak Ghosh" <[EMAIL PROTECTED]> wrote: > >> >> >insecure applications like firefox into /etc/security/exec_attr >> >> >that takes away this to be defined PRIV_PROC_PFEXEC privilege >> >> >from these applications. >> >> >> >>This is a good point but I do not think that a new pfexec privilege is >> >>needed. Rather why not just add entries for firefox that drop all >> >> except >> >>the basic privileges ? >> > >> > Do you believe it is possible to drop "profiles" from a user just for a >> > called >> > program? >> > >> > I thought that the profiles currently are bound to the login. >> >>limitprivs can be used to assign the limit set of privileges for the >> command. > > OK, so I would guess that you confuse privileges with profiles. > > Profiles are data base entries for pfexec and tell pfexec how to set up privs > for specific programs. I know of no eay to disable a profile for specific > program families. > > You could clear the privilege PRIV_PROC_SETID to make pfexec disfunctional, > but then > even programs like ping would no longer work. My response was probably too short. I meant setting that privilege in an entry for the profile. Now Primary Administrator profile grants all commands to be run with effective uid == 0 which is too much. Maybe another profile is needed that allows Primary Admin privileges but some apps being dropped out of the list. Regards, Moinak. > Jörg > > -- > EMail:[EMAIL PROTECTED] (home) Jörg Schilling D-13353 Berlin > [EMAIL PROTECTED](uni) > [EMAIL PROTECTED] (work) Blog: http://schily.blogspot.com/ > URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily > ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] grub boot order
I was able to get hold of a utility and a boot back to opensolaris. I then modified the /rboot/grub/menu.lst to include the XP. >From another post I read. > title Windows XP Professional > root (hd0,1) > chainloader +1 Now it boots to opensolaris and xp fine. This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] root: role or account?
"Moinak Ghosh" <[EMAIL PROTECTED]> wrote: > >> >insecure applications like firefox into /etc/security/exec_attr > >> >that takes away this to be defined PRIV_PROC_PFEXEC privilege > >> >from these applications. > >> > >>This is a good point but I do not think that a new pfexec privilege is > >>needed. Rather why not just add entries for firefox that drop all except > >>the basic privileges ? > > > > Do you believe it is possible to drop "profiles" from a user just for a > > called > > program? > > > > I thought that the profiles currently are bound to the login. > >limitprivs can be used to assign the limit set of privileges for the > command. OK, so I would guess that you confuse privileges with profiles. Profiles are data base entries for pfexec and tell pfexec how to set up privs for specific programs. I know of no eay to disable a profile for specific program families. You could clear the privilege PRIV_PROC_SETID to make pfexec disfunctional, but then even programs like ping would no longer work. Jörg -- EMail:[EMAIL PROTECTED] (home) Jörg Schilling D-13353 Berlin [EMAIL PROTECTED](uni) [EMAIL PROTECTED] (work) Blog: http://schily.blogspot.com/ URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] root: role or account?
On Mon, Jul 14, 2008 at 10:52 PM, Joerg Schilling <[EMAIL PROTECTED]> wrote: > "Moinak Ghosh" <[EMAIL PROTECTED]> wrote: > >> > - Add a new privileges(5) privilege that allows to disallow to use >> >pfexec. >> > >> >This would be needed in order prevent unwanted use of pfexec from >> >privileged accounts. I recommend to add an entry for exposed or >> >insecure applications like firefox into /etc/security/exec_attr >> >that takes away this to be defined PRIV_PROC_PFEXEC privilege >> >from these applications. >> >>This is a good point but I do not think that a new pfexec privilege is >>needed. Rather why not just add entries for firefox that drop all except >>the basic privileges ? > > Do you believe it is possible to drop "profiles" from a user just for a called > program? > > I thought that the profiles currently are bound to the login. limitprivs can be used to assign the limit set of privileges for the command. Regards, Moinak. > > w~A > ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] root: role or account?
"Moinak Ghosh" <[EMAIL PROTECTED]> wrote: > > - Add a new privileges(5) privilege that allows to disallow to use > >pfexec. > > > >This would be needed in order prevent unwanted use of pfexec from > >privileged accounts. I recommend to add an entry for exposed or > >insecure applications like firefox into /etc/security/exec_attr > >that takes away this to be defined PRIV_PROC_PFEXEC privilege > >from these applications. > >This is a good point but I do not think that a new pfexec privilege is >needed. Rather why not just add entries for firefox that drop all except >the basic privileges ? Do you believe it is possible to drop "profiles" from a user just for a called program? I thought that the profiles currently are bound to the login. w~A ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] root: role or account?
On Mon, Jul 14, 2008 at 8:40 PM, Joerg Schilling <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] (Joerg Schilling) wrote: > > As there is nothing like OpenSolaris Architecture Design, I take this list > > >> James Carlson <[EMAIL PROTECTED]> wrote: >> >> > Doing this should fix the problem: >> > >> > % pfexec pkg install SUNWscp >> >> BTW: I am still interested in an answer for the pfexec usage >> >> If you like to propagate the manual use of pfexec, you would need to >> make the pf*sh shells outdated. >> >> People who have a pf*sh as their shell in /etc/passwd _and_ who >> have the super user role in their account would not need to call "pfexec" >> manually and by default run unintentionally many programs with additional >> privileges. >> >> My impression is that this is a security degradation. > > Meanwhile, I did some tests while I added profile support to my shell (bsh)... > > > Looking at Indiana, it seems that there definitely is a security degradation. > > In order to avoid this security degradation in Indiana, there is a need to > implement at least the following features: > > - Allow the pf* shells to switch between the non-profile mode and the >profile mode in a single login session. > >I implmented this for the Bourne Shell already. The fixed sources are >in: >ftp://ftp.berlios.de/pub/schily/schily-2008-07-14.tar.bz2 > > > - Add a new privileges(5) privilege that allows to disallow to use >pfexec. > >This would be needed in order prevent unwanted use of pfexec from >privileged accounts. I recommend to add an entry for exposed or >insecure applications like firefox into /etc/security/exec_attr >that takes away this to be defined PRIV_PROC_PFEXEC privilege >from these applications. This is a good point but I do not think that a new pfexec privilege is needed. Rather why not just add entries for firefox that drop all except the basic privileges ? Regards, Moinak. > > > Jörg > > -- > EMail:[EMAIL PROTECTED] (home) Jörg Schilling D-13353 Berlin > [EMAIL PROTECTED](uni) > [EMAIL PROTECTED] (work) Blog: http://schily.blogspot.com/ > URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily > ___ > opensolaris-discuss mailing list > opensolaris-discuss@opensolaris.org > ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] how to set IPS from web server to my local box?
2008/7/14 likaijun <[EMAIL PROTECTED]>: > I want down the pkg from http://pkg.opensolaris.org to local machine.but how > can I implement it ?It is so slow when I use the website pkg . > > hg clone ssh://[EMAIL PROTECTED]@hg.opensolari.org/gh/pkg/gate and pkgadd it > .But it show "pkg /export/home/ is not a install image" when I use the > command pkg refresh and so on . Iwant to how to solve it . > is so slow when I use the website pkg . Unfortunately, this is not yet supported. -- Shawn Walker ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Live-CD only in 640x480 mode.
> > I have not installed OpenSolaris, but have started it > > as Live-DVD (yes it is a DVD. From Software-side it > > is the normal CD with a lot of additional software, > > stands in the magazine). > > > > The problem: > > The LiveDVD starts on my computer only in 640x480 > > mode with 50Hz and I can not change the mode. > > Could be the EDID data returned by the monitor. > > My old Iiyama AU4831D returns two modes in EDID > data, 1024x768 and 1600x1200. The nvidia driver > selects the 1024x768 one. Order of the modes as > returned by the monitor is important. A newer model > of the Iiyama panel did swap the modes around, and with > the newer monitor nvidia automatically selects the > 1600x1200 resolution. Hmm.. possible. My computer is ca. 2 years old, but my monitor is ca. 10 years (no LCD or something else). But the monitor can handle lot higher resolution then 1024x768. How can I see which EDID data my monitor returns? And why existing with Linux not the same problems like with OpenSolaris? > Solution was: > > Create an xorg.conf file and add NoDFPNativeResolutionCheck > to the screen section: > > > Section "Screen" > Identifier "Screen0" > Device "Card0" > Monitor"Monitor0" > DefaultDepth24 > ># Work around nvidia problems with AU4831D panel > Option "ModeValidation" "NoDFPNativeResolutionCheck" Thx for the info. But as Live-DVD user I have with the standard-user account (withount installing OpenSolaris) not the rights to edit file. Greatings theuserbl _ Neu: Mit Live Search Ihre Stadt in der Vogelperspektive! http://maps.live.de___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] grub boot order
Johan Hartzenberg wrote: > it is called menu.lst > > Look in /boot/grub And if you have ZFS boot, it is in /rpool/boot/grub ;-) ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] grub boot order
Ok i seem to have an issue now. DT system partition 1 is opensolaris used gpartition and made 2 partitions. XP marked the opensolaris parition inactive. Now when I boot I do not get the boot screen asking me to select an OS to boot. I am guessing I have to make the opensolaris partition back active again. Not sure if I have to do this from XP or boot off the opensolaris cd. I dont want to reload the opensolaris again This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Live-CD only in 640x480 mode.
> I have not installed OpenSolaris, but have started it > as Live-DVD (yes it is a DVD. From Software-side it > is the normal CD with a lot of additional software, > stands in the magazine). > > The problem: > The LiveDVD starts on my computer only in 640x480 > mode with 50Hz and I can not change the mode. Could be the EDID data returned by the monitor. My old Iiyama AU4831D returns two modes in EDID data, 1024x768 and 1600x1200. The nvidia driver selects the 1024x768 one. Order of the modes as returned by the monitor is important. A newer model of the Iiyama panel did swap the modes around, and with the newer monitor nvidia automatically selects the 1600x1200 resolution. Solution was: Create an xorg.conf file and add NoDFPNativeResolutionCheck to the screen section: Section "Screen" Identifier "Screen0" Device "Card0" Monitor"Monitor0" DefaultDepth24 # Work around nvidia problems with AU4831D panel Option "ModeValidation" "NoDFPNativeResolutionCheck" ... This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] root: role or account?
[EMAIL PROTECTED] (Joerg Schilling) wrote: As there is nothing like OpenSolaris Architecture Design, I take this list > James Carlson <[EMAIL PROTECTED]> wrote: > > > Doing this should fix the problem: > > > > % pfexec pkg install SUNWscp > > BTW: I am still interested in an answer for the pfexec usage > > If you like to propagate the manual use of pfexec, you would need to > make the pf*sh shells outdated. > > People who have a pf*sh as their shell in /etc/passwd _and_ who > have the super user role in their account would not need to call "pfexec" > manually and by default run unintentionally many programs with additional > privileges. > > My impression is that this is a security degradation. Meanwhile, I did some tests while I added profile support to my shell (bsh)... Looking at Indiana, it seems that there definitely is a security degradation. In order to avoid this security degradation in Indiana, there is a need to implement at least the following features: - Allow the pf* shells to switch between the non-profile mode and the profile mode in a single login session. I implmented this for the Bourne Shell already. The fixed sources are in: ftp://ftp.berlios.de/pub/schily/schily-2008-07-14.tar.bz2 - Add a new privileges(5) privilege that allows to disallow to use pfexec. This would be needed in order prevent unwanted use of pfexec from privileged accounts. I recommend to add an entry for exposed or insecure applications like firefox into /etc/security/exec_attr that takes away this to be defined PRIV_PROC_PFEXEC privilege from these applications. Jörg -- EMail:[EMAIL PROTECTED] (home) Jörg Schilling D-13353 Berlin [EMAIL PROTECTED](uni) [EMAIL PROTECTED] (work) Blog: http://schily.blogspot.com/ URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Will the new Ati 4850 work?
Just for report, my Ati4850 works, albeit only in 1400x1050 mode right now. I havent experimented with xorg.config file yet. No drivers or nothing was installed, everything worked right out of the box. KMAYS, I will change the resolution, just as you suggested in the sub forum here "x windows" This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] network connectivity problems with nv91 and e1000g
I have a intel Q9450 + P45 mobo + Ati4850. The RTL8111 NIC on the mobo doesnt work with Solaris, so I bought an intel Deskpro Adapter EXPIB300BSTL something. My e1000g works good. Ive never noticed any problems during normal use. This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] grub boot order
it is called menu.lst Look in /boot/grub :-) On Mon, Jul 14, 2008 at 3:42 PM, Cj <[EMAIL PROTECTED]> wrote: > I did a search but cannot seem to find the grub.conf file on the > opensolaris. > > What I want to do is change the timeout and the order. I want (for now) XP > to be my default and opensolaris to be 2nd until i completely configure it. > > I did cannot seem to find anything under /boot/grub/ for a configuration > file. > > What am I missing? > > Thanc > > CJ > > > This message posted from opensolaris.org > ___ > opensolaris-discuss mailing list > opensolaris-discuss@opensolaris.org > -- Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke Afrikaanse Stap Website: http://www.bloukous.co.za My blog: http://initialprogramload.blogspot.com ICQ = 193944626, YahooIM = johan_hartzenberg, GoogleTalk = [EMAIL PROTECTED], AIM = JohanHartzenberg ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] Any lsof tool for nv ?
On Mon, Jul 14, 2008 at 10:19 AM, Richard L. Hamilton <[EMAIL PROTECTED]> wrote: >> Has lsof been ported for nevada ? >> It seems that it was not included in the sunfreeware >> nv iso image >> and the Solaris 10 version does not work on nv >> or is there any other tool that can find information >> about >> what process is using port X ? On Solaris 10, I used >> to run >> for example: >> /usr/local/bin/lsof -i :49155 >> >> Any help would be appreciated, >> >> /Karl > > lsof is wonderful. There are situations in which it can tell you exactly > what you need to know. > > lsof is also utterly evil; it finds these things out by means that are > undocumented, > unsupported, unreliable, could conceivably crash or corrupt your system > (although it > may almost never happen), and subject to change at any time, which is why > only certain > versions of lsof work on certain versions of some OSs; and any change to the > OS internals that > lsof depends on for that particular OS will break lsof and require that > someone figure out how > to update it to keep working. It is not reasonable to require the OS > developers to be > responsible for doing that; but few others would know how. > > The solution would be to have an OS provide safe and supported ways for lsof > to find out > everything that it needed to know. > > But that's a _lot_ easier said than done (or at any rate, than done well); I > don't know > whether _any_ OS that lsof has at one time or another been ported to does a > complete > job of that. > > There are alternatives, although they produce a lot more uninteresting > output. For example, > what you're trying to find out could probably be discovered by running (as > root) > > pfiles /proc/* >/tmp/pfiles.out > > and then using a text editor to search the resulting file for the port number > or whatever it > was you were interested in. > > People have said before that it would be nice to have stable interfaces that > provided all the > info that lsof needs. But as I said, doing it is a lot harder than saying > it, and there are > always more priorities than man-hours; I rather doubt anyone is working on > it. A first step > that might not require extraordinary skills, but just a lot of patience and > attention to detail, > might be to examine lsof to determine just what it needs to know, and then > review all (or > all the relevant) man pages to see what's already available and what's still > missing. You might > want to start with proc(4). :-) I have used lsof before, but can't recollect all the output details. Before I start digging, just out of curiosity what info does lsof provide that pfiles does not ? Regards, Moinak. > > > This message posted from opensolaris.org > ___ > opensolaris-discuss mailing list > opensolaris-discuss@opensolaris.org > ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
[osol-discuss] grub boot order
I did a search but cannot seem to find the grub.conf file on the opensolaris. What I want to do is change the timeout and the order. I want (for now) XP to be my default and opensolaris to be 2nd until i completely configure it. I did cannot seem to find anything under /boot/grub/ for a configuration file. What am I missing? Thanc CJ This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
[osol-discuss] how to set IPS from web server to my local box?
I want down the pkg from http://pkg.opensolaris.org to local machine.but how can I implement it ?It is so slow when I use the website pkg . hg clone ssh://[EMAIL PROTECTED]@hg.opensolari.org/gh/pkg/gate and pkgadd it .But it show "pkg /export/home/ is not a install image" when I use the command pkg refresh and so on . Iwant to how to solve it . is so slow when I use the website pkg . This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
Re: [osol-discuss] pci driver locking
Hi, I have posted a second discussion in the DTRACE area. There I have posted my first results of my dtrace test. You can find it with supject:"dtrace within driver runtime" posted by sigi. I have used the on-cpu and off-cpu probes, but no results. I will try the ::interrupts probe again. thanks sigi This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
[osol-discuss] Does xVM can work in VMWare virtual machine?
After install nv91 in VMWare when boot with xVM the machine will be auto restarted when system init, does xVM kernel can boot in VMWare? Thanks. This message posted from opensolaris.org ___ opensolaris-discuss mailing list opensolaris-discuss@opensolaris.org
