December 2016 - Roundtable

latest kernel needs setcap even as root??
by Trevor Cordes 05 Jan '17

05 Jan '17

Just upgraded a few boxes to kernel 4.8.8-100.fc23. It seems this latest kernel (or maybe 1 or 2 versions going back 1-2 months) changed something. I have a script that generates pings (using SOCK_RAW to make its own packets) that I run as root. Worked fine until now. In the new kernel I get "Operation not permitted" on the socket() call. Digging around the net, I found that I need to do: setcap cap_net_raw+p /foo/myscript Then when I run it, it works fine. Ok, great, but *** I'm running the script as root ***!!! Huh? Since when did root need to specify capabilities to run stuff as root? What is this, Windows? Is there some major paradigm change in the latest kernels where this is a "feature" and not a bug? Just wanted to do a sanity check before I file a bz. Oh ya, selinux is disabled, so that's not the problem. Lots of chatter on the net about this problem but everyone talking about it is talking about the non-root use case. It would appear my issue is something brand new. Aside: As for the script, I'm doing really wacky stuff on purpose, and I really needed direct control over the packet, so I can't just abandon SOCK_RAW.

4 12

Unix Stickers, Pins, etc
by Frank H 16 Dec '16

16 Dec '16

Would you like to order some linux stickers or other merch? I recently ordered some stickers from Stickers, T-shirts, Mugs on UNIX & Programming | unixstickers | | | | | | | | | | | Stickers, T-shirts, Mugs on UNIX & Programming | unixstickers The largest store for high quality and finely printed stickers, t-shirts, mugs, posters and pins on unix, linux,... | | | | Keyboard stickers that I am using both for Super keys and to label distros on usb keys. Some of my stickers are on back order so I've arranged free shipping on my next order. Would you like to add to that order? They don't have sku's I can see so send the URL and qty desired. If interested, please do so by JAN 1 2017. Happy Holidays,Frank

1 1

Free ebook: Ten Steps to Linux Survival
by Gilbert E. Detillieux 15 Dec '16

15 Dec '16

FYI, this may be of interest to some of you, if you're just starting out with Linux (or know a friend who is)... --------------------------------------- Ten Steps to Linux Survival <http://post.oreilly.com/rd/9z1zaoeoicrcp65dcg163geu3ckj1b1ec3gpqr20c18> There's really no such thing as a "pure Windows" shop. Linux systems can appear as virtual machines or in the cloud, including web servers, databases, mobile device managers, version control, and monitoring systems. When one of them falters, it may fall on you to jump in and fix things. But what if you have no Linux knowledge? /Ten Steps to Linux Survival/ <http://post.oreilly.com/rd/9z1zfdeeg476sunspiksst5a0tdfniutkb35f5ns26o> by James Lehmer provides tips to help you survive. This free, 74-page primer walks you through diagnostic and recovery tasks so you can quickly get your systems up and running. From "Don't Panic!" to navigating the filesystems and, if necessary, where to go for more help, this nifty guide will make you look and feel like a Linux wizard. Get your free copy now → <http://post.oreilly.com/rd/9z1z1qsc4v5avrb28risiq0jg1k1v3gnqdup03qj3mg> Cheers! Rachel Roumeliotis Strategic Content Director, Programming P.S. Linux is here to stay, along with many other open source technologies that fuel today's software and business systems. Learn useful skills, languages, and best practices at the O'Reilly Open Source Convention <http://post.oreilly.com/rd/9z1zhdl1s6bnugivdulsubk13ot08umsr2g942boo00>, aka OSCON, happening May 8–11, 2017 in Austin, TX. ... To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000 -- Manitoba UNIX User Group E-mail: c/o Gilbert E. Detillieux Web: http://www.muug.mb.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

3 2

Pico ITX system
by Trevor Cordes 15 Dec '16

15 Dec '16

A lot of people asked me about buying the Pico ITX-sized VIA Artigo system I brought for the gadget show&tell at the meeting, so I thought I'd post the info here. You can still find a few online, or I can also still get them from my suppliers (I run a computer reseller business) brand new for $130+tax. I don't stock them so I need several weeks notice, but you may find it convenient to pick up at a meeting. It's a kit so you need to assemble some of the parts yourself, but it's super easy with paper instructions with lots of pics. For a few bucks more I can assemble it (I also stock compatible SSDs and can get RAM). It comes as a near-complete system, all you need to add is a DDR2 SO-DIMM RAM stick (any leftovers from an old laptop will work), and a notebook hard drive (SATA or IDE) or any modern 2.5" SSD. Why would someone want this box? It's a full x86-compatible system so it runs any normal i386 distro (not ARM, so you can run Windows if you need to). It also has SATA and IDE ports, which was why I wanted one originally (Pi-like things don't have this). It turns out it has a VIA C7 1GHz processor; 1GB RAM max capacity; onboard 100 ethernet, audio, usb, vga, dvi. All in about 6x4x1.5". I doubt these will be around much longer. If you want one, email me privately and make sure "muug" is in the subject. Thanks!

2 1

Fiery anyone?
by Trevor Cordes 14 Dec '16

14 Dec '16

I know it's obscure... but does anyone have access to a Ricoh Fiery box (network controller for Ricoh printer)? I have one that has a HD with bad sectors where the OS lives and would be willing to pay to get the data that goes on those sectors. If you have a working Fiery, let me know the model #, and/or if you're willing to sell it, and/or let me borrow it briefly (or use it at your place). Please email me privately and include MUUG in the subject, thanks! P.S. if you have a Fiery or any other printer with a built-in hard drive, I strongly advise you backup (image) its hard drive, because when the drive starts to fail, it's a real pain, especially when the printer is long ago discontinued. $10,000 printer becomes useless because of $50 part.

1 0

(Simple?) Perl question
by Kevin McGregor 13 Dec '16

13 Dec '16

I'm trying to decipher some Perl code which runs on a Windows server, and I ran into this: $cmd = "./psexec.exe \\\\\\\\" . $server_name I think the idea is to end up with ./psexec.exe \\server but WTF eight backslashes? Does that make any sense? If so, can someone ELI5? Kevin

3 5

WTB: notebook IDE cable (old style)
by Trevor Cordes 11 Dec '16

11 Dec '16

If anyone has an old cable for a notebook IDE hard drive sitting around, I'd like to buy it. I know most notebooks didn't use cables, but you could buy them separately for bench testing, etc. I need anything that has the dense/small notebook style 44-pin (22x2) ~45mm width *FEMALE* connector. The other side is irrelevant, whether it's dense F or M or normal IDE (desktop) size. But the important side has to be female, and it has to be a cable, NOT an adapter on that end (due to space constraints). If you find one, bring it to the muug meeting on Tue and/or notify me by email. I can also pick up if required. Thanks!

1 0

MUUG Meeting, Dec 13, 7:30pm -- Designing Passwords, Gadget Show and Tell
by Gilbert E. Detillieux 06 Dec '16

06 Dec '16

The Manitoba UNIX User Group (MUUG) will be holding its next monthly meeting on Tuesday, December 13. The meeting topic for this month is as follows: Designing Passwords - The Mnemonic Evolution of Password Generation 17-year MUUG member Ihor Jakowec will present some interesting techniques for remembering long passwords by taking advantage of visual memory hints and kinesthetic memory (or "dance moves" as he calls it). Round-table, Gadget Show and Tell, Mingling and Munchies As 2016 draws to a close, MUUG continues our recent tradition of turning the December meeting into more of a social event. Bring your favourite gadget! We will have the usual round-table session, followed by a gadget show & tell, a short presentation, and then some time for mingling, eating, and drinking. This will be a pot-luck snack event. Cookies and pop will be provided by MUUG, but members are encouraged to bring their own finger food to sample and share. Feel free to bring your own drink as well if you want something particular - just remember that we don't have a liquor license! Winnipeg Harvest Food Drive Also as in previous years, we will combine our pot luck with a food drive for Winnipeg Harvest. This month, any member who brings at least 1 item for Winnipeg Harvest to the December meeting will be given an entry into the door prize draw! Winnipeg Harvest has information about what they're looking for on their website: http://winnipegharvest.org/donate-food/ The group holds its general meetings at 7:30pm on the second Tuesday of every month from September to June. (There are no meetings in July and August.) Meetings are open to the general public; you don't have to be a MUUG member to attend. ****************************************************************** Please note our *NEW* meeting location for this month: *Room 1M28* Manitoba Hall, University of Winnipeg, entrance on Ellice Ave. between Spence St. and Balmoral St. Parking is available on the surrounding streets and in the lots on nearby streets. Look for signage once you're at the building, or ask a security guard. ****************************************************************** For more information about MUUG, and its monthly meetings, check out their web server: http://www.muug.mb.ca/ Help us promote this month's meeting, by putting this poster up on your workplace bulletin board or other suitable public message board: http://www.muug.mb.ca/meetings/MUUGmeeting.pdf -- Manitoba UNIX User Group E-mail: <gedetil(a)muug.mb.ca> c/o Gilbert E. Detillieux Web: http://www.muug.mb.ca/ University of Manitoba Phone: (204)474-8161 Winnipeg MB CANADA R3T 2N2 Fax: (204)474-7609

1 0

Looking for a used ~42U server cabinet
by Wyatt Zacharias 06 Dec '16

06 Dec '16

Wondering if anyone has a spare full height (around 42U) server cabinet they're looking sell? Needs to have front and back rails, threaded or square hole, and have side panels and a front door. -- Wyatt Zacharias

2 1

Fwd: Come join DC204 for OpenChaos night at SkullSpace! (Talks/food/security!)
by Colin Stanners 02 Dec '16

02 Dec '16

Thought MUUG would be interested in this, sorry for the late notice. ---------- Forwarded message ---------- From: Ron Bowes <ron(a)skullsecurity.net> Date: Wed, Nov 23, 2016 at 2:11 PM Subject: Come join DC204 for OpenChaos night at SkullSpace! (Talks/food/security!) To: SkullSpace <announce(a)skullspace.ca>, discuss <discuss(a)skullspace.ca>, doers(a)dc204.ca, announce(a)dc204.ca Hey everybody! You're invited to come join DC204 for OpenChaos night on Friday, December 2 at SkullSpace! It's a chance to see some talks, network with other security professionals/hobbiests, or grab some food and hide behind a potted plant. :) We're going to kick things off by opening doors and getting some food at 6:30pm, then starting talks at about 7. The talks are, in no particular order (actually, in alphabetical order): - Ron Bowes: Abusing DNS - Robert Keizer: Securely updating prod with Continuous Integration - Russ Schreyer: Introduction to Aircrack - Alex Weber: Analysis of an OpenSSL DoS bug: CVE-2015-3194 After the talks, you're welcome to hang around SkullSpace to chat, or to join us next door at the Yellow Dog for drinks. *FAQ* Why are you emailing me!? If you're getting this email, you're probably on a big list of people that I (or others in the group) thought might be interested! Feel free to contact me (ron(a)skullsecurity.net, or just reply to this email) if you don't want to hear from us again. What the heck is DC204? DC204 is a local Winnipeg Defcon Group <https://defcongroups.org/dcpages.html> we are trying to build. It's a loose-knit group of security professionals and hobbiests that meets irregularly to talk about security. There's no formal registration or membership, just come hang out! Is there a DC431 group? No, stop asking!! :) What is OpenChaos? Just a random cool-sounding name, taken from the Hackerspaces Wiki. What's it cost? Nothing! This is free, and we'll have some food, so come by and hang out! Of course, if you join us for drinks afterwards, you're on your own for your bar tab. Okay, you sold me. How do I RSVP? Please tell Ron! It'll help for planning food. You can either do that by replying to this email, or by emailing ron(a)skullsecurity.net directly. If you don't RSVP, you're still welcome to come, but please try to let me know. One last question: How do I get there? We're hosting this at SkullSpace. It's at 374 Donald St. Let yourself in the door (if it's locked, give me a call 502-409-0320 <(502)%20409-0320>), and go up to the second floor. From there, follow signs - we'll be the big group of folks Hope to see you there! - Ron

1 0