Previewing the Next Solaris OS
Eric Boutilier writes "Amy Rich has written an excellent Solaris Express (Solaris 10) how-to and general overview. It covers how the program works, using the community web site, and what's new in Solaris Express." Among many new features, the TCP/IP stack has been redesigned, IPv6 support improved, and both NFSv4 and USB 2.0 support added.
(In case the first post is modded down to hell, that's what it said :-)
:-)
The market for Solaris is very different from Linux, it's datacentre-land, not home user. I still don't see it lasting too long though... One of the microsoft lines that really is true is that Linux is a larger threat to Unix than to MS, at the moment (MS forgot the 'at the moment' bit
Two wars: The desktop and the datacentre. Despite the cliche of fighting a war on two fronts, Linux is porbably uniquely positioned to fight a war on N fronts (where N is a positive, large integer). The way it's set up is to leverage groups of people whilst folding the advances back into the core.
SGI are turning to Linux, Sun will too. There'll be a few releases of both OS's first, though, IMHO.
Simon.
Physicists get Hadrons!
Yeah, apart from the much larger breadth of GNU tools, ssh and much higher performing threading model, 9 really sucked.
# pkginfo SUNWbash
system SUNWbash GNU Bourne-Again shell (bash)
Perhaps not always installed by default, but it is available. That's on Solaris 8, BTW. As for other stuff, check out www.sunfreeware.com
I know this is a trivial thing, but it's a real pain in the butt to have to use ksh all the time because most Solaris boxen I've worked on don't have Bash installed by default.
We keep a local sunfreeware mirror for new sunos installs. Bash, updated Perl with modules, wget, lynx, openssl, bzip, sudo, lsof, openssh, and ncftp. (no gcc) If it wasn't for sunfreeware, I'd go nuts using Solaris. Anyone that has to move/push/alter data, needs common tools on all platforms, thank god for Sunfreeware.
Any OS that is out there that can take away from the 90%+ market share that Microsoft holds is a good thing.
Of course Microsoft's market share won't go down if this OS just replaces one *nix variant with another, but that's another story.
> And when they finally got them here, one of
> the V100s did not boot.
> That's it, we almost ended up with a
> network-enabled FORTH compiler that cost us
> $1500.
My friend bought a new car, and the dealership accidentally gave him the wrong set of keys. That was it, he almost ended up with a sealed glass and metal box that cost him $35000.
One little tiny, easily rectified mistake does not mean the product sucks. If someone dismissed linux because they bought a preinstalled box which didn't boot because of a wrong jumper, would that mean linux was crappy? No. Of course not.
> I'm still glad we didn't wait for tech support
> to react (and I'm pretty sure it would take
> them several more weeks)
Have you ever *used* Sun support? To answer your later question, that's one of the reasons Sun are so expensive. They have great support. If you were on a decent support contract there could have been a guy with you inside an hour with a bag full of V100 parts. If you don't need support, go with linux/bsd or buy Sun kit off ebay.
Once more, FUD-ish Sun-bashing gets modded up as interesting/informative. Replies which dare to defend Sun are usually modded down. Flamebait, troll, whatever. (They should have a "-1 heresy" tag.)
The register has an old story about the new TCP/IP stack in Solaris 10, that is good reading.
A quick summary of the story:
The new stack has:
- Efficient at handling multiple NICs
- Low CPU usage (30% lower than Linux)
- Build for targeting 10/100 Gbps in the future. Has a new construction where it is possible to offload the cpu by routing packet to dedicated packet processing processors.
The last part seems like a preparation for the Sun hardware of tomorrow.
i try with solaris express and I find a cool feature called "ppriv" like this:
/usr/sbin/rpcbind
/etc/shadow /etc/shadow
gta3# ppriv $$
1124: bash
flags = 0x0
E: all
I: basic
P: all
L: all
Ok, so I am root I have all privileges I think
but now look at rpcbind, it is runnign as daemon but has less priviliges even than normal processes
gta3# ppriv 100182
100182:
flags = 0x2
E: net_privaddr,proc_fork,sys_nfs
I: none
P: net_privaddr,proc_fork,sys_nfs
L: all
see, it does not have privilege to do 'exec'... there are 30 or more privileges and it has only 3. So i guess this means some stack attack will not work against it like exec shell
also i can run and see privileges like thids
gta3$ ppriv -D -e cat
cat[100619]: missing privilege "file_dac_read" (euid = 77293, syscall = 225) needed at ufs_iaccess+0xd2
cat: cannot open
not sure what this means?