I'm with Glenn Brunette, Dave Walker and Gile Gravier at RSA Europe 2005 conference in Vienna, Austria this week.This is day two and we have had great intrest...
I'm with Glenn Brunette, Dave Walker and Gile Gravier at RSA Europe 2005 conference in Vienna, Austria this week.This is day two and we have had great intrest in Solaris security features. We have given awayseveral DVDs for Solaris 10. Several people have congratulated Sun on making the source to Solarisavailable under and open source license.We have been doing live demos and talking about SMF, Zones and the Cryptographic Framework . In particular our demo is of an SSL...
I'm with Glenn Brunette, Dave Walker and Gile Gravier at RSA Europe 2005 conference in Vienna, Austria this week.This is day two and we have had great intrest in Solaris security features. We have...
There are 3 basic usage styles for using OpenSolaris RBAC to giveout privilege to "normal" users.Privileged Command/Daemon: Authorisation ChecksThe command is...
There are 3 basic usage styles for using OpenSolaris RBAC to giveout privilege to "normal" users.Privileged Command/Daemon: Authorisation ChecksThe command is setuid and thus privileged (cdrw is an example),or it talks to a privileged daemon over a secure transport suchas doors and is not itself privileged (svcadm/svccfg are theperfect examples of this style).In this style the app (or the daemon) would use RBAC Authoristaionsto do the checking and then use its privilege on...
There are 3 basic usage styles for using OpenSolaris RBAC to giveout privilege to "normal" users.Privileged Command/Daemon: Authorisation ChecksThe command is setuid and thus privileged (cdrw is an...
I'm happy to announce that the new Approachability community is now live on OpenSolaris.The initial content there is some basic background on improving the...
I'm happy to announce that the new Approachability community is now live on OpenSolaris.The initial content there is some basic background on improving the Solaris networking experience, a program we've been referring to internally as "Network Automagic". As most Solaris users will attest, networking configuration on Solaris is much too difficult. The primary reason is that many of the basic assumptions go back 15 or more years, and we haven't updated the core architecture to...
I'm happy to announce that the new Approachability community is now live on OpenSolaris.The initial content there is some basic background on improving the Solaris networking experience, a program...
Solaris Express Developer Edition (snv_24) includes a new feature in the assembler (/usr/ccs/bin/as) that automatically inserts an ELF section that identifies...
Solaris Express Developer Edition (snv_24) includes a new feature in the assembler (/usr/ccs/bin/as) that automatically inserts an ELF section that identifies if any hardware specific features have been used. One example of this would be the use of SSE or MMX instructions on x86 systems. Prior to snv_24 it one had to manually tag the binaries using a linker mapfile.This is a great feature since it greatly assists in the creation of $HWCAP libraries, such as optimised versions...
Solaris Express Developer Edition (snv_24) includes a new feature in the assembler (/usr/ccs/bin/as) that automatically inserts an ELF section that identifies if any hardware specific features...
[Also posted to OpenSolaris X Window System forum/mailing list.] To help whet your appetite while waiting for our source release, I've posted the change logs...
[Also posted to OpenSolaris X Window System forum/mailing list.] To help whet your appetite while waiting for our source release, I've posted the change logs for the X Consolidation for the Nevada builds so far, so you can see what's changed since Solaris 10 already: http://opensolaris.org/os/community/x_win/changelogs/ For now, this is just a list of bug ids included in each build - once we get the source up, we can start including which files are changed for new builds. As...
[Also posted to OpenSolaris X Window System forum/mailing list.] To help whet your appetite while waiting for our source release, I've posted the change logs for the X Consolidation for the...
Tonight (Tuesday 27th September) is the first meeting of the Irish OpenSolaris Users Group (iosug).Thanks to Jamie O'Leary of DIT Netsoc we have a venue...
Tonight (Tuesday 27th September) is the first meeting of the Irish OpenSolaris Users Group (iosug).Thanks to Jamie O'Leary of DIT Netsoc we have a venue available for the first Irish OpenSolaris meeting.So, the time and venue: DIT, Kevin St @ 6:30, Tuesday 27th SeptI'll be the main speaker tonight. I'll be giving the same talk I gave on 1st June at the Bay Area OpenSolaris users group.
Tonight (Tuesday 27th September) is the first meeting of the Irish OpenSolaris Users Group (iosug).Thanks to Jamie O'Leary of DIT Netsoc we have a venue available for the first Irish...
I'm sad to say that I've just spent the last ten minutes deleting spam comments from a blog entry I updated this week.It seems like the basic arithmetic check...
I'm sad to say that I've just spent the last ten minutes deleting spam comments from a blog entry I updated this week.It seems like the basic arithmetic check that roller provides just isn't enough anymore.SPAMers - you guys need to go get a life; it isn't cool; it isn't funny; it isn't clever; it is just down right anoying!So as of today comments are disabled on my blog. I really do want feedback on my entries so if you want to send feedback please do it by email and I'll...
I'm sad to say that I've just spent the last ten minutes deleting spam comments from a blog entry I updated this week.It seems like the basic arithmetic check that roller provides just isn't...
To switch to using GDM instead of dtlogin you can do the following:Select "Command Line" login from the dtlogin screen.Login as root and run the following...
To switch to using GDM instead of dtlogin you can do the following:Select "Command Line" login from the dtlogin screen.Login as root and run the following commands.# /usr/dt/bin/dtconfig -kill# /usr/dt/bin/dtconfig -d# ((sleep 5 && svcadm enable -s gdm2-login)&) ; exitGDM will start now, the sleep and backgrounding are to ensure your shellexits. GDM will be the graphic login manager on subsequent reboots.Note that the FMRI for GDM may change in a future release of Solaris as...
To switch to using GDM instead of dtlogin you can do the following:Select "Command Line" login from the dtlogin screen.Login as root and run the following commands.# /usr/dt/bin/dtconfig -kill#...
[This text was originaly posted to Sun's internal security community inresponse to Radia Perlman asking if we could do better web security, Ithought it was...
[This text was originaly posted to Sun's internal security community inresponse to Radia Perlman asking if we could do better web security, Ithought it was worth sharing my thoughts with the rest of the world ]One of the things that we really should be trying to stamp out isallowing otherwise reputable sites to download pages with login screensover non https connections[1]. Many of them try to justify that theHTTP POST goes to an https URL but that doesn't matter one tiny bit...
[This text was originaly posted to Sun's internal security community inresponse to Radia Perlman asking if we could do better web security, Ithought it was worth sharing my thoughts with the rest of...
