Re: [SLUG] Ubuntu 10.04 Linux, Evolution 2.28.3 and ecxhange 2007?

2011-03-30 Thread dave b
Perhaps you can convince the admin to enable IMAP etc. ?
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Debian 6

2011-03-07 Thread dave b
On 8 March 2011 11:33, Heracles herac...@iprimus.com.au wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 How do you get Debian 6.0.0 to see a network card?

 I have installed Ubuntu 10.10, Fedora core 14 and SuSE 11.3 and all of
 them detected and were able to use both my ethernet card (built in
 gigabit) and my Linksys wireless card (as rt61 PCI) with me only having
 to supply the encryption key.

It should just work tm. However, if it isn't there (in the
/sbin/ifconfig output) then you may need to install
firmware-linux-nonfree  firmware-linux-free.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Which Virtualisation, and why?

2011-01-12 Thread dave b
Also has anyone looked at LXC :P ?

Having run identical kvm guests, I found that KSM actually wasn't that
much of a benefit as a 'cpu user' (while it doesn't seem to use much
... potentially the cpu could down clock to save power instead of
running KSM).
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Which Virtualisation, and why?

2011-01-11 Thread dave b
Hum ... easy virtualisation for those who don't want to do it manually ...
http://www.proxmox.com/ - you can use both kvm and openvz and it has a
nice webgui.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Hardware problem

2011-01-09 Thread dave b
It sounds like the nvidia graphics card maybe the problem but it could
be a change to some other component of opensuse...
On 11.3 were you using the proprietary nvidia drivers?
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Python, XML, and Splitting a 750M XML File?

2011-01-05 Thread dave b
On 6 January 2011 13:51, Tom Deckert tdeck...@fastwire-group.com wrote:

 G'Day,

 Any easy XML (Python or otherwise) tools for splitting a 750M
 XML file down into smaller portions?

 Because the file is so large
 and exceeds memory size, I think the tool needs to be a 'streaming'
 tool.  On IBM DeveloperWorks site, I found an article detailing
 using XSLT, but in other places it states XSLT tools usually
 aren't streaming, so I'm guessing none of the XSLT processors
 (xalan, saxon) will succeed.  (Not to mention its been more than
 10 years since I last worked with XSLT.)

 Original file looks like:
 ?xml version=1.0?
 !DOCTYPE BigFile SYSTEM BigFile.dtd
 BigFile
 TrivialHeader blah /TrivialHeader
 Datum A couple hundred thousand Datum elements./Datum
 Datum 'Datum' are non-trivial, containing extensive subtrees./Datum
 Datum ...etc... /Datum
 TrivialFooter blah /TrivialFooter
 /BigFile


 I'd like a tool to split that into maybe
 10 different, valid XML files, all of which have the BigFile,
 TrivialHeader and TrivialFooter tags,
 but 1/10th as many Datums per file.


 The problem is that on my 4Gig laptop, I run out of memory
 for any tool which tries to read in the whole tree at
 one time.  In my case, Python's ElementTree fails, ala:

 fin  = open(BigFile.xml, r)
 tree = xml.etree.ElementTree.parse(fin)  -- Out of Memory


 Solution doesn't have to be Python, but it would be nicest
 if it were, as rest of the processing is all done in
 a Python script.

Out of interest is it just one large xml file or multiple xml files
within one file ?

Also, have you tried lxml? [0]

[0] - http://codespeak.net/lxml/
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Python, XML, and Splitting a 750M XML File?

2011-01-05 Thread dave b
Sorry, I misread your email.

Have you tried sax parsing?
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] linked in - please block

2011-01-02 Thread dave b
James, doesn't the slug committee already filter out other spam emails?
(If not - then doesn't this list use some sort of 'computer' assisted
filtering).
Spam by its very nature is not desired. It should be blocked.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] How do I get the Win key to actually Do something in Gnome ?

2010-12-24 Thread dave b
On 25 December 2010 13:24, Minh Van Le mva...@tpg.com.au wrote:
 Hello :)

 I've been searching the net all morning and can't seem to find a way to
 get my laptop's Win key (the key on the keyboard that has the MS
 Windows logo on it) to actually do something.

 I'm using Fedora 13.

 I want to be able to just press the Win key so that it opens the
 Fedora Application menu.

 I can map my Win key with other keys using Fedora's Keyboard
 Shortcuts menu (eg. Win+e to run Nautilus etc) but I can't get the
 Win key on its own to actually do something.

 I think my problem is that Fedora is treating my Win key as a
 modifier.

 I've used xev to find out that my Win key's keycode is 133. I've
 tried putting in ~/.xmodmap:

        Control_L Escape
        F14

 and ran xmodmap ~/.xmodmap and/or put it in
 /etc/X11/xinit/Xessions ... but I sitll can't get the desired effect.

 Does anybody know how to get the Win key (the key on the keyboard that
 has the MS Windows logo on it) to actually do something eg. open the
 Fedora Application menu ?


Does anyone else find this ironic :P .. has the MS Windows logo on
it) to actually do something.
Nope I thought is what it was supposed to do :P
Sorry I can't be of more help, but what window manager/environment are
you using ?
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Debian/Ubuntu way of having multiple memcached daemon's

2010-12-21 Thread dave b
 Dave I'll not pound the point :-) but why would one invent another way of
 doing standard stuff? From old maps Here be Dragons

 The whole SytsV init and upstart hierarchy is well tried. Ignore it and use
 another way to ... be kewl ?  Not Clever
 James

Well if you know a neat / nicer way please let us know ^ ^ . I often
want to run multiple daemons of software X and No I don't want a gui
to manage this.

--
My only love sprung from my only hate!Too early seen unknown, and
known too late! -- William Shakespeare, Romeo and Juliet
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Debian/Ubuntu way of having multiple memcached daemon's

2010-12-20 Thread dave b
On 21 December 2010 13:04, Jam j...@tigger.ws wrote:
 On Tuesday 21 December 2010 09:00:04 slug-requ...@slug.org.au wrote:
 Using apt-get, you can automagically install memcached. It's great as
 it starts a daemon and that daemon will start on boot.

 Though for Christmas I need two daemons running on different ports:
 11211 and 11212.

 I've duplicated the following files and tweaked them, so a second
 daemon can start.

 /etc/init.d/memcached - /etc/init.d/memcached_11212
 /etc/memcached.conf - /etc/memcached_11212.conf
 /usr/share/memcached/scripts/start-memcached -
 /usr/local/share/memcached/scripts/start-memcached

 Using update-rc.d the above daemon starts on boot as well (great).

 Now if memcached has a security update, apt-get will restart the
 original packaged daemon, not my second instance. How can I make my
 second instance upgrade friendly?

 Disclaimer: My new found obsession is upgrade friendliness, so my
 intentions are not strictly memcached related, but it's the simplest
 example I can think of.

 Simon, utter respect, but this sounds like UADUFMBS (Unadulterated Unmitigated
 ..) The normal way (even with upstart) it to put the daemon start script in
 /etc/init.d [There are skeleton and example files]

 Then you can do the distro equivalent of rcmyapp start/stop/restart etc.
 I like SuSE's rc[app] paradigsm, so I do
 ln -s /etc/init.d/myapp /usr/sbin/rcmyapp
 but that is just detail. Whatever works for you.

 In any even, doing it the standard way means no worry about upgrade etc and it
 complies with KISS (keep it simple ..)


Well that seems ok - at least to me.
He would just need to ensure that the lock and or run files are kept separate.

--
The better part of valor is discretion. -- William Shakespeare, Henry 
IV
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] linked in - please block

2010-12-16 Thread dave b
No one should be signing up using a mailing list email address.
However, if a user lets linkedin 'borrow' their email addresses then
this problem (mailing list get spammed) will occur time and time
again.
imho are just a bunch of spammers. - note you cannot permanently opt
out of *all* linkedin email (afaik) .(hell even facebook has / had
that option).

I don't see any point in shaming those who get tricked by linkedin's
spammy practices.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Just one more step to get started on Facebook

2010-12-16 Thread dave b
It would appear that someone is trolling this list.
I *highly* doubt that -- http://www.bdo.com.au/people/sidney-lim /
http://au.linkedin.com/pub/sidney-lim/9/787/7b4 signed up with the
slug list address to facebook.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Doco

2010-12-05 Thread dave b
On 6 December 2010 12:36, Sridhar Dhanapalan srid...@dhanapalan.com wrote:
 We're working on putting a version online, but given copyrights, etc.
 this may take some time. I have a master copy but can't distribute it
 openly.

 Maybe we can do a screening at a SLUG meeting?

That sounds like a good idea.

--
I do desire we may be better strangers. -- William Shakespeare, As You 
Like It
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Dynamic WEP (802.1x) with TLS

2010-11-24 Thread dave b
I am not familiar Dynamic WEP.
However, have you tried using network-manager to connect to this network?
(It will probably provide a method for you to provide the 'certnew.cer' file.)
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] SAMBA config experts?

2010-11-16 Thread dave b
On 17 November 2010 14:38, DaZZa dagi...@gmail.com wrote:
 Folks.

 I'm trying to setup a completely basic SAMBA server on a CentOS box
 which has been delivered for demonstration purposes.

 I want something dead simple - one directory, world writable to anyone
 who browses to it.

 I've put the following smb.conf file on the box

 [global]
        workgroup = demo
        server string = SAMBA Server
        load printers = no
        log file = /var/log/log.%m
        max log size = 0
        security = share
        encrypt passwords = no
        unix password sync = no
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        dns proxy= no
        host msdfs = no
        passdb backend = smbpasswd

 [transfer]
        comment = Export
        path = /home/demo/dirwatched/
        read only = no
        public = yes
        browsable = yes
        writable = yes


put guest ok = yes
(you may need global, guest account = nobody)
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: XecureBrowser - looks like snake oil to me.

2010-11-10 Thread dave b
If you want a browser for banking.

1. Go and get firefox from
https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/latest-3.6/linux-i686/en-GB/

2. disable all browser extensions and plugins (NO FLASH, JAVA ETC.)

3. install noscript.

4. ENSURE THAT YOU ARE GOING TO LOGIN TO HTTPS:// and not HTTP://


Also, if you are using anz you might want to get them to have a look
at https://www.anz.com/crossdomain.xml   ^ ^

--
The lunatic, the lover, and the poet,Are of imagination all
compact...  -- Wm. Shakespeare, A Midsummer Night's Dream
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Banning non Australian IP's from Aussie ecommerce site

2010-10-11 Thread dave b
1. Change the ssh port
2. disable password login
3. where do you keep the cookie jar?
4. well you have a number of options - using the geoip database,
blockfinder and or other software to block other countries netblocks.

Do remember that you might also block people in australia visiting
your website...
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Listing local wifi access points?

2010-10-04 Thread dave b
 * get a windows box with a wireless card
 * grab inssider
 * run inssider
 * done/done.


... Yes that works. However, imho the windows part is a real turn off ;)
You know kismet runs on a lot of os's ...
http://www.kismetwireless.net/screenshot.shtml

--
Suspicion always haunts the guilty mind.-- Wm. Shakespeare
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Listing local wifi access points?

2010-10-03 Thread dave b
On 3 October 2010 16:10, Erik de Castro Lopo mle+s...@mega-nerd.com wrote:
 Erik de Castro Lopo wrote:

 Does anyone know tool to list all local wifi access points with their
 channel numbers and encryption types? Preferably command line (but I'm
 running Gnome with network manager on a Debian system if there is
 something that fits in with that).

 Thanks for ctd on #slug for applying the cluebat. Its simple:

    iwlist $interface scan


kismet is also fairly useful ;)

--
Kiss me, Kate, we will be married o' Sunday.-- William Shakespeare,
The Taming of the Shrew
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] RRDtool efficiency

2010-09-18 Thread dave b
On 19 September 2010 07:50, Jim Donovan j...@aptnsw.org.au wrote:
 Daniel Pitman said [in the context of Centos updating]

That will not help unless you rebuild Cacti to use the older version of
RRDTool.  (Also, are you /sure/ it is RRDTool and not something else in the
Cacti stack that causes the performance problems?  RRDTool is crazy-efficient,
so I wouldn't pick it as the first point to suspect.  OTOH, if you measured it
and found it was the cause then you measured it and all.

 I used to work for an organisation with over 100,000 RRDB files, each updated 
 every five minutes. It struck me that we could save many gigabytes of disc, 
 and probably quite a lot of I-O, if the basic data storage type was float 
 rather than double. We had absolutely no use for either the extra precision 
 nor the extra range of double. I emailed Tobi Oetiker saying so and he 
 replied that no-one had ever thought of that. AFAIK, there's still no way 
 round using double.

rrd is an insanely stupid dataformat. See
http://collectd.org/wiki/index.php/Inside_the_RRDtool_plugin
On a cheap vps I was having 'fun' on ;) with nagios grapher with just very few
hosts and rm -rf * ing the rrd files the system would still stall up
and hit load average 10 just by trying to display some rrd charts.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] High I/O file systems

2010-08-31 Thread dave b
On 31 August 2010 22:41, Max Wright maxwrigh...@gmail.com wrote:
 Tony - The Oracle one is btrfs, and others are here -
 http://www.desktoplinux.com/news/NS7212048164.html

btrfs is fast. However, there are still problems in the linux kernel ...

see
http://thread.gmane.org/gmane.linux.kernel.mm/51444
and http://article.gmane.org/gmane.linux.kernel.mm/51445

--
The first thing we do, let's kill all the lawyers.  -- Wm.
Shakespeare, Henry VI, Part IV
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Using a DNS with Dynamic IP

2010-08-28 Thread dave b
On 28 August 2010 23:16, Mike Andy beatbreake...@gmail.com wrote:
 Hi

 I've used dyndns for hosting my home server for a while now, but I've
 finally bitting the bullet and gotten my own real domain with crazy
 domains now (was dirt cheap) the problem is that I'm not sure I know
 how to get it to work with my home connection and the dynamic IP i'm
 using at the moment.

 the two choices are obviously DYNDNS and no-ip in this situation, but
 I'm wondering if there's a way around this?

 I think I might be able to use ddclient on my server and have it
 somehow point to my crazy domains page and make sure it updates it
 with the right IP, but i'm not sure it it'll actually be able to do it
 right http://sourceforge.net/projects/ddclient/ - I know the program
 does work with a dyndns account but has anyone used something like
 that to keep updating generic domain names with dynamic home IPs?
 Anyway i've installed it on my Linux server that's running apache but
 I'm not sure if i can configure it for this situation.


You can use a cname for your domain (foo.com) and point that to the
dyndns / dynamic dns  record using ddclient.



 Any other suggestions?
Well first tell us what you are hosting etc. and then we can make a
better suggestion / comment.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Re: [SLUG-ANNOUNCE] Re: SLUG monthly meeting: 27 August 2010

2010-08-24 Thread dave b
On 24 August 2010 21:18, James Polley presid...@slug.org.au wrote:
 The good news is that this month's SLUG meet is only three sleeps away
 - and if we're especially lucky, we might even have national a
 government by then!

 The bad news is that we already have a main talk (Repositories,
 Package Management  Package Creation — by Samuel Marks) and only four
 lightning talk slots left, so you'll need to get in quick if you want
 to take one of the remaining slots!

James while your concept of 'time' is fun, you should try to get it
consistent with the rest of our 'time'.
3 sleeps ... um.
Lets list them out:
1. Wednesday(today!) (sleep)
2. Thursday(tomorrow) (sleep)
3. Friday(day after ...) (sleep)
so that means the next slug is on Saturday!

--
To be or not to be. -- ShakespeareTo do is to be.   -- 
NietzscheTo be
is to do.   -- SartreDo be do be do.-- Sinatra
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Talks for this Friday and suggestions for the future

2010-08-23 Thread dave b
On 23 August 2010 13:59, elliott-brennan m...@elliott-brennan.id.au wrote:
 Okay, so it may be that some of you are leaving it
 to the last minute...but just in case.

 Each SLUG meeting is your opportunity to socialise
 and hang-out...and that's all fine.

 However, it is also made up of presentations and
 displays and the opportunity to learn something new.

 So, come on down to:

 http://wiki.slug.org.au/august2010lightningtalks

 Register and enter the talks/presentation/display
 you would like to give.

 You can also add something in 'Talks I'd like to
 see. This can be totally anonymous if you'd like,
 just in case you're concerned that others may be
 surprised that you don't already know! :))

 Remember, each SLUG meeting is an opportunity to
 both give and receive...hmm...Christmas...Santa...

 The meetings are there for all of us to enjoy but
 they are also there for you to show us
 something...so go on, take a chance! Those
 attending and the committee members are very
 supportive and happy to help out.

 Regards,

 Patrick EB
Sounds good!


Also, my friend is being rather 'tireless' on irc about the fact that
http://slug.eventbrite.com/ has not been update correctly.
It would probably be a good thing to update it so that under 'when' it
doesn't say Tuesday, September 21, 2010 from 1:00 PM - 4:00 PM
(GMT+1000) but some time in August. Ditto at the top ( where it
says SLUG Monthly Meeting: 27 August 2010 ... Tuesday, September 21,
2010 from 1:00 PM - 4:00 PM... ).


--
Thank you
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Re: Discussion about SLUG meetings and format

2010-08-04 Thread dave b
On 4 August 2010 13:19, elliott-brennan elliottbren...@gmail.com wrote:
 On 03/08/10 21:09, elliott-brennan wrote:

 and a wife who has late clients

 Jon J wrote:
 So she's an undertaker?

 Jon.



 Boom Tish!

 Clin Psych.

 If you can't afford one, marry one - that's my motto!

 ;)


James  - it would have been better to have a wiki page for this --.
the email thread is a bit :/
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple server roles on one box

2010-07-28 Thread dave b
On 28 July 2010 12:23, Matthew Hannigan m...@zip.com.au wrote:
 On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote:
 [  ]
 How about a DNS, squid and web server with multiple name based
 virtual domains on the same box?

 Is doing the above really dangerous on a fully patched and up to
 date system?
lso depends on the webapp.
 I'd be more comfortable with java (especially with security
 manager on) which is after all another form of vm.

 With php (wordpress, drupal, moodle, or home grown) definitely not 
 confortable.

While I also dislike php, what did the last pm's website use ? drupal.
What the president of the united states use - drupal. I can keep on
going :)
Java is like php, there are also language flaws coming out to bite you
real soon. /me mutters something about OH MY THEY ESCAPED FROM THE
JVM.
Also, if you really care about the security of the system - install
grsecurity[1]. You shouldn't be taking any chances :P - you should
install it either in the guests, guests and the host,
or only on the 'host' (-if no vms in use).

[1] http://www.grsecurity.net/
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple server roles on one box

2010-07-28 Thread dave b
On 29 July 2010 14:40, Daniel Pittman dan...@rimspace.net wrote:
 dave b db.pub.m...@gmail.com writes:
 On 28 July 2010 12:23, Matthew Hannigan m...@zip.com.au wrote:
 On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote:
 [  ]
 How about a DNS, squid and web server with multiple name based
 virtual domains on the same box?

 Is doing the above really dangerous on a fully patched and up to
 date system?
lso depends on the webapp.
 I'd be more comfortable with java (especially with security
 manager on) which is after all another form of vm.
 Java is like php, there are also language flaws coming out to bite you real
 soon. /me mutters something about OH MY THEY ESCAPED FROM THE JVM.

 Do you have a reference for that?

Here is a recent example :)
http://blog.cr0.org/2009/05/write-once-own-everyone.html
You can finder older examples as well :)


 ...but why?  What actual security value does that add, compared to the vanilla
 kernels which do, oh, everything listed in their bullet point feature list,
 and out of the box covers over eighty percent of them?

Good :) - but not chroot break out prevention, further aslr improvements etc.

 Pro tip: asserting that an RBAC system will increase security is silly without
 actually understanding how it will be used; people can do things just as badly
 with RBAC as without.

Sure, but grsecurity also has some other features :)
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple server roles on one box

2010-07-28 Thread dave b
On 29 July 2010 15:42, dave b db.pub.m...@gmail.com wrote:
 On 29 July 2010 14:40, Daniel Pittman dan...@rimspace.net wrote:
 dave b db.pub.m...@gmail.com writes:
 On 28 July 2010 12:23, Matthew Hannigan m...@zip.com.au wrote:
 On Tue, Jul 27, 2010 at 04:04:05PM +1000, Ben Donohue wrote:
 [  ]
 How about a DNS, squid and web server with multiple name based
 virtual domains on the same box?
 Do you have a reference for that?

 Here is a recent example :)
 http://blog.cr0.org/2009/05/write-once-own-everyone.html
Sorry I meant to include this example ---
http://slightlyrandombrokenthoughts.blogspot.com/2010/04/java-trusted-method-chaining-cve-2010.html

It is the more recent example :)
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Multiple server roles on one box

2010-07-27 Thread dave b
On 27 July 2010 16:05, Ben Donohue donoh...@icafe.com.au wrote:
 Sorry should also have said that they are seen by the outside world.

 On 27/07/2010 4:04 PM, Ben Donohue wrote:

 Hi all,

 just a question...

 I'm looking at the possibility of consolidating some servers for a client.

 If an internal box with DNS and squid were combined, would this be a
 security risk... as in risky way above normal?

 How about a DNS, squid and web server with multiple name based virtual
 domains on the same box?

 Is doing the above really dangerous on a fully patched and up to date
 system?

 Any advice please?

You can use xen or kvm if you want too. So long as you don't run
anything insecure in the dom-0 that should be ok. To also consider the
network 'security' as well.
You probably want to use varnish[1] over squid - it is a lot nicer :)

[1] http://varnish-cache.org/
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Reply-to address on SLUG posts

2010-07-26 Thread dave b
On 27 July 2010 14:08, Jon Jermey jonjer...@gmail.com wrote:
 I've been caught by that a few times, mainly because this is the only
 mailing list I currently subscribe to (out of a dozen or so) that doesn't
 automatically set the reply-to address to the list. I have a vague memory of
 this issue being raised before, and I'm sure there were good reasons given
 why that was the case. But I still find it really annoying. Is there any
 support for a re-think on this?

Really? - lots of lists I know don't do this - or perhaps gmail picks
up on the addresses anyway...
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Reply-to address on SLUG posts

2010-07-26 Thread dave b
On 27 July 2010 15:13, Erik de Castro Lopo mle+s...@mega-nerd.com wrote:
 Michael Chesterton wrote:

 Personally I find lists and people setting reply-to annoying. I mean
 how important are you that you can't be disturbed by an email in your
 in box.

 Thats an extremely short-sighted view.

 I am on a well over 50 mailing lists, some of which can have
 high volumes (the kernel mailing list can peak at over 50 emails
 an hour). Having that torrent end up in my inbox is completely out
 of the question as I also receive emails directly to me that need
 to be acted on at relatively short notice.

 There's also the option of filtering the direct emails so you never
 have to see them.

 I do this filtering using procmail triggered by the List-Id.

 The problem is that if I send a email to this list and I set a
 Reply-To (and no, Mail-Followup-To is not well supported) and
 someone does a reply-to-all a two things can happen depending
 on the list setup:

  a) I get two copies, the direct one and via the list software.
     The first ends up in my inbox, and the second in the correct
     folder.


  b) The list software recognises that I was CCed and doesn't send
     me a copy so I only get the direct copy, which ends up in my
     inbox.

 For case a) I have to remember whether I can delete it for this
 list or whether I should manually move it to the correct folder.

 This whole problem becomes far worse if I get CCed a copy on
 discussion thread of hundreds of messages where everyone is
 CC-ing me.

Sure but this has problem with the first issue :)
a) - because you probably want that email to not be filtered / tagged
like the others. How well does setting that reply-to work in mutt if I
want follow a list - but I am more interested in replies to what I
have sent? ... (gmail does this better I think - but I am not sure).

--
Suspicion always haunts the guilty mind.-- Wm. Shakespeare
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Fwd: RE-ANNOUNCE: July Sydney DevOps Meeting - Thursday 22 July

2010-07-19 Thread dave b
-- Forwarded message --
From: Mick Pollard aussielu...@gmail.com
Date: Jul 19, 9:01 am
Subject: RE-ANNOUNCE: July Sydney DevOps Meeting - Thursday 22 July
To: DevOps Australia


Hi All,

On Fri, Jul 16, 2010 at 2:26 PM, Lindsay Holmwood lind...@holmwood.id.auwrote:

 Hey all,
 There's been a date change, so I'm re-announcing the July Sydney DevOps
 Meeting:

  When: THURSDAY, July 22nd, doors open 18.15 for 18.30 start
  Where: Atlassian, 173-185 Sussex St, Sydney

 The meeting will be 45 minutes of talks, then heading off to the
 Redoak for drinks and dinner.

 Tentative speakers include:

  - Mick Pollard on bootstrapping your devs with libvirt, kickstart and
 Puppet

Just to extend on this a little.
At $WORK we let our devs choose the OS (*nix) for their workstation and set
it up the way that suits them best.
This helps with their productivity as they get to work with their favourite
tools etc but it presents the problem that they are no longer developing on
systems that look like a customers Prod. environment.
With mostly all machines of today having a ton of RAM and KVM being in the
mainline kernel now it became easy to give them access to what's needed to
build their own VM's that mimic the customers production environment.

This Thursday  I will demonstrate how we make use of libvirt,(plus assoc.
tools), kickstart, a yum mirror and puppet to accomplish this.

Feel free to bring a laptop with libvirt + the packages that provide
'virt-install + virsh + virt-viewer' and participate.

There's an excellent video + presentation up at [1] by R.I. Pienaar that
talks about this subject that's worth watching if you haven't already.

 - Tim Moore on Lightweight Monitoring and Information Radiators

  - Lindsay Holmwood on Visage

 See you there!

 Lindsay

See you all Thursday

Mick
@_lunix_

[1]http://www.infoq.com/presentations/Enabling-Development-Accessible-Pl...
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] today's scary thought

2010-07-17 Thread dave b
 Hope this helps. (Understanding, that is -- I know it doesn't help solve
 anything.)
Talk is cheap. Show me the code.  Linus.
So when is google docs getting the time spent actively viewing count
for a document?

This would be a neat thing to have. So who is going to add this
feature to bzr or hg ;P ?
However, Jeff's  zeitgeis is pretty neat.
self._cursor.execute(INSERT OR IGNORE INTO uri (value) %s
...???...  perhaps I didn't want to see the code ;P
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] today's scary thought

2010-07-17 Thread dave b
On 18 July 2010 03:29, dave b db.pub.m...@gmail.com wrote:
 ...???...  perhaps I didn't want to see the code ;P


Bah copy pasta fail - the rest of the email is this:

Sure it is neat to talk about stuff like nosql etc.  - you still have
the interesting syncing problem. imho http://github.com/apenwarr/bup
looks pretty neat. That with git torrent could be rather 'awesome' ;P


--
Something's rotten in the state of Denmark. -- Shakespeare
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] SLUG monthly meeting: 26 June 2010

2010-06-22 Thread dave b
 Tor is a security tool that allows people to access with internet with
 privacy and security. This presentation will describe how it works,
 how to set it up as a user, how to set up Firefox to use Tor, how to
 set up a Tor relay and how to help the Tor project.

I will be interested in hearing how tor is a security tool.
Tor can help you against an attacker on the *local* network, but it
can also introduce problems if you do not understand what is 'secure'
on the web and what is not.

What tor really needs *now* is:
*more* *bridges* !
*not* *relays* !
http://www.torproject.org/bridges

http://metrics.torproject.org/graphs.html
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] ubuntu 10.04

2010-06-17 Thread dave b
On 15 June 2010 22:08, Craig Warner coolum.surfl...@gmail.com wrote:
 I don't know whether this is correct or not but its working for now

 add to the following script

 /etc/network/if-up.d/mtu

 #!/bin/sh
 ifconfig eth0 mtu 1300

 restart networking

 now wireshark is not reporting the error and I can sent emails and
 access https sites


I would suggest using iptables to perform MSS clamping.
https://blue-labs.org/howto/mtu-mss.php
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Error in Time() command

2010-05-27 Thread dave b
On 24 May 2010 03:41, Glen Turner g...@gdt.id.au wrote:
 On Sun, 2010-05-23 at 17:02 +0800, tenz...@iinet.net.au wrote:
 I'm seeking a preferably citeable reference to the amount of error
 in the returned result from a Time() command. I want to be
 able to quote the level of error in timing the execution speed
 of my project.
Why don't you use http://www.eclipse.org/tptp/ if this is for java...
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] SLUG Membership decline

2010-04-05 Thread dave b
From my perspective, the talks given at atlassian were always good or
interesting. Some of the talks when slug has been at google have been
less interesting.
While there have been a few BOF's which have been great - like the
multimedia one which would be an interesting talk on its own, there
seems to be a reduction in interesting or informative talks. I
remember listening to a talk on video editing which was really
informative from some one who was more of an end user of linux than a
dev. When people get busy / have other things on they are less likely
to attend unless there is good a social side or an interest side.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html