noexec can be easily circumvented. Read here for more information.
Relevant example:
alex@joker:/tmp# mount | grep tmp/dev/hda7 on/tmp type ext2 (rw,noexec,nosuid,nodev)
alex@joker:/tmp#./date
bash:./date: Permission denied
alex@joker:/tmp#/lib/ld-linux.so.2./date
Sun Dec 3 17:49:23 CET 2000
For those interested, I'll elaborate a bit about Skolelinux:
Skolelinux (School Linux in Norwegian) is a customized Debian distribution. It's based on Woody, but a version based on Sarge is in the works.
The philosophy of Skolelinux is that it should be super easy to install and -- most importantly -- maintain. The installer asks three questions -- language, password and a profile, where the profile is either "Main server", "Thin client server" or "Workstation". Then, centralized authentication and file storage, backups, mail, DNS, etc. is configured automagically.
The thin client part of Skolelinux has been a real success, allowing lots of schools to use old equipment they recieve for free.
Take a look at this report for a governmental report on benefits of Skolelinux; including economically, or just poke around on its homepage for more information.
Missing on that list is "Snøfrix" (just in Norwegian), a Live-CD to introduce Linux to Norwegian school kids.
Snøfrix has gained quite some popularity recently, as quite a few libraries are now distributing Snøfrix, in addition to it being mentioned in the largest Norwegian TV channel (NRK), on a program dedicated to protecting consumers right -- this time comparing Linux to Windows.
The name is a mix of "Knoppix" upon which is it based, and "Snøfrix", the name of the 11 (or so) year old daughter of its creator, deciding what should be on the CD.
>Now if only those KDE devs would port the Safari rendering engine us Linux users would be happy.
I see this is a joke, but for those who doesn't know, Apple is indeed contributing their enhancements of KHTML -- on which Safari is based -- back to the KTHML-team.
I see your point, but how would I, by downloading the advertisements and consuming the web site's bandwith, but by ignoring the advertisements on the page, help them? By being number in statistics?
I can't remember to ever have bought anything as a result of seeing an advertisement on the web. If I want something, I go out and look for it myself.:)
I might not be the perfect consumer, but blocking such ads gives me a better surfing experience and I don't consume their expensive bandwith unnecessarily.
I can't believe that you got moderated "Informative" for such rant.
First of all, it's not about "every X weeks". FC1 was released 5 November 2003, FC2 was released 18 May 2004. FC3 is due 18 October 2004.
Secondly, nobody forces you to upgrade. These people are doing their best to improve free (as in libre) software, while you scoff at them. Give me a break.
If you're afraid of it breaking anything at all, you probably don't want to use it.
If you on the other hand want to help the developers find the bugs at an early stage so they can squeeze the bugs, download it immediately, start testing and report bugs.
Mac OS X integrates very well in a Skolelinux network, as Skolelinux uses NFS and LDAP.
Guidelines on how to make an OS X machine part of a Skolelinux network are available in Norwegian - translations to English will definitely follow shortly.
See http://developer.skolelinux.no/~klaus/notater/a280 4.html
The book Klaus refers to is being translated these days.
> It' nice to hear that Norwegians pioneer on a such linux distro as this. After all, the man who started it all (Linus Torvalds) is Norwegian himself and speaks Norwegian.
Uuuh. I guess you're trolling about Linus, but anyhow - there are many developers from Germany, France and Denmark, as well as Latvia and Brazil to mention a few.
Skolelinux is a Norwegian project only by its name and origin.
> Wow, yet another distro. One year from now, half the original contributors will have lost interest and no one will want to maintai it any more, and the poor users will spend their lives under the hood.
The number of schools showing interest for Linux and Skolelinux has surged.
http://www.skolelinux.no/testskoler.php?lang=en
The project is three years old, and now is when Linux is really starting to take of in Norway - not too long ago, Bergen became one of Europe's greatest switchers.
> Linux needs a couple of well maintained distros, not willions of roll-your-owns
Skolelinux is based on Debian, which is well-maintained and stable. Skolelinux is just adaptions and Debian made easy.
Slashdot Mirror
noexec can be easily circumvented. Read here for more information.
/dev/hda7 on /tmp type ext2 (rw,noexec,nosuid,nodev) ./date ./date: Permission denied /lib/ld-linux.so.2 ./date
Relevant example:
alex@joker:/tmp# mount | grep tmp
alex@joker:/tmp#
bash:
alex@joker:/tmp#
Sun Dec 3 17:49:23 CET 2000
For those interested, I'll elaborate a bit about Skolelinux:
Skolelinux (School Linux in Norwegian) is a customized Debian distribution. It's based on Woody, but a version based on Sarge is in the works.
The philosophy of Skolelinux is that it should be super easy to install and -- most importantly -- maintain. The installer asks three questions -- language, password and a profile, where the profile is either "Main server", "Thin client server" or "Workstation". Then, centralized authentication and file storage, backups, mail, DNS, etc. is configured automagically.
The thin client part of Skolelinux has been a real success, allowing lots of schools to use old equipment they recieve for free.
Take a look at this report for a governmental report on benefits of Skolelinux; including economically, or just poke around on its homepage for more information.
(Slashdot coverage of the 1.0-release)
Missing on that list is "Snøfrix" (just in Norwegian), a Live-CD to introduce Linux to Norwegian school kids.
:( ) as well.
Snøfrix has gained quite some popularity recently, as quite a few libraries are now distributing Snøfrix, in addition to it being mentioned in the largest Norwegian TV channel (NRK), on a program dedicated to protecting consumers right -- this time comparing Linux to Windows.
The name is a mix of "Knoppix" upon which is it based, and "Snøfrix", the name of the 11 (or so) year old daughter of its creator, deciding what should be on the CD.
It recently won NUUG's (Norwegian Unix User Group) price for promotion of free software (only in Norwegian too
Hm. On my 10.3.5, I have these settings, which are perfectly sane:
/Library/StartupItems/ /Library/StartupItems/
$ id
uid=501(alex) gid=501(alex) groups=501(alex), 79(appserverusr), 80(admin), 81(appserveradm)
$ ls -ld
drwxr-xr-x 3 root wheel 102 4 Aug 11:12
I can't remember changing the modes and ownership my self.
As opposed to WYSIWYS -- what you see is what you see. :-)
>Now if only those KDE devs would port the Safari rendering engine us Linux users would be happy.
I see this is a joke, but for those who doesn't know, Apple is indeed contributing their enhancements of KHTML -- on which Safari is based -- back to the KTHML-team.
I see your point, but how would I, by downloading the advertisements and consuming the web site's bandwith, but by ignoring the advertisements on the page, help them? By being number in statistics?
:)
I can't remember to ever have bought anything as a result of seeing an advertisement on the web. If I want something, I go out and look for it myself.
I might not be the perfect consumer, but blocking such ads gives me a better surfing experience and I don't consume their expensive bandwith unnecessarily.
I can't believe that you got moderated "Informative" for such rant.
First of all, it's not about "every X weeks". FC1 was released 5 November 2003, FC2 was released 18 May 2004. FC3 is due 18 October 2004.
Secondly, nobody forces you to upgrade. These people are doing their best to improve free (as in libre) software, while you scoff at them. Give me a break.
If you read the release schedule, you'll notice that FC3 isn't due until 18 October.
8 6.torrent.
The link to the torrent can be found in the article text, actually. But since this is Slashdot: http://torrent.linux.duke.edu/FC3-test1-binary-i3
It's test1.
If you're afraid of it breaking anything at all, you probably don't want to use it.
If you on the other hand want to help the developers find the bugs at an early stage so they can squeeze the bugs, download it immediately, start testing and report bugs.
Sorry for being inaccurate first.
It wasn't really Safari being exploitable, but "LaunchServices":
Impact: LaunchServices automatically registers applications, which could be used to cause the system to run unexpected applications.
The flaw basically worked the same way as the shell://-exploit -- making the OS decide what to do with the protocol.
Mac OS X' Safari had a very similar flaw, where one could use disk:// to mount a disk image, which could execute whatever it wanted to.
That flaw was fixed with the 2004-06-07 security update.
http://d.skolelinux.no/~runesk/skolelinux-i386-rel ease-1.0.iso.torrent
On Ulsrud Videregående Skole in Oslo, they have two LTSP-servers serving 45 thin clients each - which works fine.
It mainly depends on the amount of memory you've got in the servers.
Yes, we will definitely make torrents on a later occasion like this. :-)
Mac OS X integrates very well in a Skolelinux network, as Skolelinux uses NFS and LDAP.
0 4.html
Guidelines on how to make an OS X machine part of a Skolelinux network are available in Norwegian - translations to English will definitely follow shortly.
See http://developer.skolelinux.no/~klaus/notater/a28
The book Klaus refers to is being translated these days.
> AlexB: What would it take to maintain your own packages?
:-)
Time we can use on enhancing Skolelinux in other ways - Skolelinux is not at all a perfect product.
KDE is such an important component in the distribution, that it has to be maintained well and just work.
There's work in progress on using sarge and sid as the base distribution for Skolelinux, but that's at earliest 1.2
> It' nice to hear that Norwegians pioneer on a such linux distro as this. After all, the man who started it all (Linus Torvalds) is Norwegian himself and speaks Norwegian.
Uuuh. I guess you're trolling about Linus, but anyhow - there are many developers from Germany, France and Denmark, as well as Latvia and Brazil to mention a few.
Skolelinux is a Norwegian project only by its name and origin.
No, it's not, but the media in Norway always write it that way.
The name is "Skolelinux" - with a capital "S" and a small "l".
http://www.skolelinux.org/no/press/
> lol thats just what I thought when I read it. "Are these guys stupid, stoned, or both" Then I saw it was norwiegian or something =)
So...
Which one was it?
It's the other way around.
;-)
:)
Tux had to adapt to Norwegian school kids
In other news: Toy stores are all sold out of those fluffy penguins.
Seriously, the school kids love tux.
No. Bergen has chosen to use Novell SuSE, not Skolelinux, on the _server side_.
Bergen is only using Linux on their _servers_ - hopefully Linux clients will follow shortly.
> Wow, yet another distro. One year from now, half the original contributors will have lost interest and no one will want to maintai it any more, and the poor users will spend their lives under the hood.
The number of schools showing interest for Linux and Skolelinux has surged.
http://www.skolelinux.no/testskoler.php?lang=en
The project is three years old, and now is when Linux is really starting to take of in Norway - not too long ago, Bergen became one of Europe's greatest switchers.
> Linux needs a couple of well maintained distros, not willions of roll-your-owns
Skolelinux is based on Debian, which is well-maintained and stable. Skolelinux is just adaptions and Debian made easy.
Skolelinux is Norwegian for "school linux".
Skolelinux also goes under the name "Debian-Edu" (as in Education), as it's a modded Debian distribution - tailored for schools.
Due to the nature of this project, we have expected to be slashdotted.
I have set up a combination of Squid and Apache to be able to survive such load.
If you try to use the dynamic pages, you'1l get an error from Squid.
I'll document the setup on those pages later on.