我身邊不少朋友都對我曾經介紹過的英國吉百利電視廣告(兩個小朋友跟著音樂慼眉)媽聲四起，今次為大家介紹的這個系列，來自阿根廷，希望大家不會覺得太無厘頭(查實我卻獨愛無厘頭)。a
這系列廣告概念簡單直接卻有
隨便寫寫
我用google的閱讀器訂閱了過百個別人blog，儘管每日都會讀到其他作者更新他們的blog，但其實很有一種“沒落”的感覺了，可能大多數人在facebook消磨時間交朋結友覺得更快活，也許不久的將來，寫作又變成只是傳統作者的事了，全民都
Limitations on custom NFS mount authorization on Solaris
As it turns out, there are some limitations with our custom NFS mountauthorization hack that we've discovered.First, Solaris 10 puts some security restrictions on what mountd cando; the specific bit that we ran into is it can't fork() and exec() shell scripts. Mountd can make outgoing socket connections, so we gotaround this by putting most of the complex work in an inetd-spawned'daemon'. (There is probably a way to turn this security feature off,
What you can't do before you drop setuid permissions
Let us suppose that you have a program that is setuid root but thatusually drops its setuid status and reverts to running as the user thatran it. Of course you want to do this as early as possible to reducethe potential security risks, but at the same time you might want dosome operations while still root (for reasons of either necessity orconvenience in your code structure).
Consider the following tempting sequence, presented in pseudo-code:
chdir(pw->pw_dir);
drop-
Toys
My wife and I seldom pay attention to the roving exhibitions in shopping arcades. This said, I admit there are good ones around. The other day, for example, we were walking home when we saw an exhibition about local toys from the days of yore. It's hard to walk away without staying behind to go over the sweet memories of long-ago toys.
Years passed. Five. Ten. And decades. Some childhood memories – in particular, with our toys – are engraved in a way we
Years passed. Five. Ten. And decades. Some childhood memories – in particular, with our toys – are engraved in a way we
Lady First 專欄 (55)
香港書展，與我何干？
恒指如四叔所言突破兩萬點，不少死唔斷氣的 IPO 又死灰復燃。我們律師做到手軟，約人午飯，也由到四季歎茶，大幅簡化為到麥奀記匆匆吃碗雲吞麵。
「Hello Daisy！你那本《蘭開夏道II》，在書展賣了多少？」朋友 Daniel 不懷好意的笑
「Hello Daisy！你那本《蘭開夏道II》，在書展賣了多少？」朋友 Daniel 不懷好意的笑
Using SystemTap to trace the system calls of setuid programs on Linux
Suppose that you have a setuid program that is failing mysteriouslyand you want to see what it's doing. With normal programs you can use strace , but not even root can strace a setuid program (if you try,the program runs non-setuid).
(Yes, strace has the -u option, but it doesn't help if the setuidprogram is being run as part of a whole chain of processes in a specificenvironment and you can't just run it directly. It would be