5,108 reputation
41439
bio website wirespeed.xs4all.nl/mediawiki
location Eindhoven, Netherlands
age 44
visits member for 2 years, 9 months
seen 7 hours ago

Do you love your Pets as much as I do? Check the Q&A proposal!

I'm into:

  • Linux;
  • Networking;
  • IT Security;
  • Perl;
  • System integration;
  • Arduino;
  • ATtiny & ATmega Microcontrollers;
  • Analog electronics;

Nov
23
comment Should all other versions of BASH be uninstalled after patching with the latest version?
It is not so much if you need to uninstall old versions, you do have to figure out why the old version is still called while a new version is already available on your system. I am unfamiliar with your distribution, but removing software that is in active use can be dangerous.
Sep
26
comment What does env x='() { :;}; command' bash do and why is it insecure?
Nice explanation. This question is receiving a lot of views (probably not everybody being as proficient in bash as the others) and I believe no-one yet spent a couple words on what { :;}; actually says. That would be a nice addition to your answer in my opinion. May explain how you get from your example to the original command in the question?
Sep
25
comment What does env x='() { :;}; command' bash do and why is it insecure?
Up until this moment there has not been an accepted answer. I'll probably wait for another couple days before accepting one. The downside of this answer is that it doesn't break down the original command, nor discusses how to get from the original command in the question to the commands in this answer, showing they are identical. Apart from that it is a good explanation.
Sep
25
comment CVE-2014-6271 Bash Vulnerability example
Related: unix.stackexchange.com/questions/157381/…
Dec
5
comment udev rule not working
you can check what is happening with unbuffer udevadm monitor --environment. unbuffer is in expect-dev and ensures that your output is continuously updated (rather than buffered in 4kB blocks causing you sometimes to mis the last messages).
Dec
5
comment How do I find the offset of an ext4 filesystem?
photorec will probably be able to get your files off the disk, but filenames and pathnames will be lost. If you manage to mount the filesystem that is of course your better option, but if testdisk didn't find any, chances are that the start of the filesystem is corrupted too.
Dec
5
comment How do I find the offset of an ext4 filesystem?
Try testdisk and the accompanying photorec.
Nov
6
comment How to list all the files used during Linux boot
Would auditing be an option or will that start too late during boot?
Oct
5
comment Typical use case for a group password
Maybe I should send Ken an email, asking for his consideration during the design phase ;o)
Oct
2
comment Typical use case for a group password
That is just an example, it has an 'x' and there are no group members other than ntp user itself. I just don't get what problem you are solving by setting the password field to !
Oct
1
comment Typical use case for a group password
Not sure what you mean. Eg. I can't newgrp ntp already, how does !-locking change that?
Oct
1
comment Typical use case for a group password
You already mention sudo and ACLs. I guess udev comes with a similar story, of course with a focus on devices. Interesting read.
Aug
29
comment mbcache documentation
Interesting. I wonder if bcache has good resilience after a power outage. One of the problems I face with flashcache is that it takes a fairly long time to flush the cache to my RAID set. A large cache may take longer than my UPS is able to sustain power to the system. However slight chance of this happening, it does influence the size of the cache that I can use.
Aug
28
comment Solaris 11 and syslog over TLS
No I haven't tried that because at the moment I don't have access to a server and my colleagues who do are all early birds ... @Solaris 11.1 interesting find, absolutely. I have to double check with Oracle I guess, I don't like betting in 24×7 enterprise environments. At least it confirms the bits of information I found online.
Aug
28
comment Solaris 11 and syslog over TLS
I know the developers of rsyslog support Solaris, but the big question in an enterprise environment is will Oracle support my Solaris 11 server if I replaced the the standard syslog with rsyslog. And the other part of the question is if perhaps rsyslog is already installed by default (I doubt it, but haven't been able to find a reference).
Aug
17
comment TERM=(linux|xterm) vi in an xterm or the AAABBBBBBCCDDD-problem
@StephaneChazelas Here is an interensting find: ls -l /etc/alternatives/vi which outputs /usr/bin/vim.tiny which in turn explains a lot of the strange behaviour. I solved it with sudo update-alternatives --config vi.
Aug
15
comment TERM=(linux|xterm) vi in an xterm or the AAABBBBBBCCDDD-problem
Yeah I figured out the "don't use arrow keys in insert mode when in vi compatibility"-option myself, but I didn't like that ;o)
Aug
14
comment TERM=(linux|xterm) vi in an xterm or the AAABBBBBBCCDDD-problem
maybe worth an answer ...
Aug
14
comment TERM=(linux|xterm) vi in an xterm or the AAABBBBBBCCDDD-problem
@StephaneChazelas Insert mode and before I do set nocp, yes.
Aug
14
comment TERM=(linux|xterm) vi in an xterm or the AAABBBBBBCCDDD-problem
Clean install on Ubuntu.