Wednesday, November 24, 2004

Using Portindex to Generate INDEX-5

Now that we've seen how to keep cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree up-to-date using tools like Portsnap, and seen how to generate an INDEX-5 file with 'make index', I'd like to offer an alternative INDEX-5 generation mechanism. Matcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365w Seaman's Portindex is a Perl tool replacing a similar application of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same name. The old version was pulled from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 developer started acting strangely.

Here's cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 problem Portindex solves. If you use CVSup to update your ports tree, you will not have an INDEX-5 file. The INDEX-5 file included in CVS was reportedly always out-of-date, so you had to issue a command like 'portsdb -U' or 'make index' to create cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 INDEX-5 file. This was very time-consuming.

Portindex is a much faster alternative, once you've set up cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 system. Portindex is available in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree as sysutils/p5-FreeBSD-Portindex , so installation is easy (as long as your ports tree is updated!) My installation is based on Matcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365w's excellent documentation at his site and in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Portindex man pages.

Once installed, you need to ininitalize cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cache Portindex uses:

janney:/root# cache-init
Processing make describe output for path "/usr/ports": .........[1000].........F
reeBSD::Portindex::Tree::_scan_makefiles(): Can't open Makefile in /usr/ports/de
vel/jude_community -- No such file or directory at /usr/local/bin/cache-init lin
e 100
[2000].........[3000].........[4000].........[5000].........[6000].........[7000
].........[8000].........[9000].......FreeBSD::Portindex::Tree::_scan_makefiles(
): Can't open Makefile in /usr/ports/textproc/csv2txt -- No such file or directo
ry at /usr/local/bin/cache-init line 100
..[10000].........[11000].........<11993>

This took a long time -- hours -- on my dual PIII system. Once done, I had cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se new files:

janney:/var/db/portindex$ ls -al
total 9966
drwxrwxr-x 2 root operator 512 Nov 24 18:25 .
drwxr-xr-x 9 root wheel 512 Nov 24 18:22 ..
-rw-r--r-- 1 root operator 8192 Nov 24 21:10 __db.001
-rw-r--r-- 1 root operator 270336 Nov 24 21:10 __db.002
-rw-r--r-- 1 root operator 344064 Nov 24 21:10 __db.003
-rw-r----- 1 root operator 9617408 Nov 24 21:10 portindex-cache.db
-rw-r--r-- 1 root operator 25 Nov 24 18:25 portindex-timestamp

Next I had to update cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree and give Portindex cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 output in a form it could use:

janney:/root# script /tmp/cvsup.out cvsup -g -L2 -h cvsup2.freebsd.org
/usr/local/etc/ports-supfile
Script started, output file is /tmp/cvsup.out
Parsing supfile "/usr/local/etc/ports-supfile"
Connecting to cvsup2.freebsd.org
Connected to cvsup2.freebsd.org
Server software version: SNAP_16_1h
Negotiating file attribute support
Exchanging collection information
Establishing multiplexed-mode data connection
Running
Updating collection ports-all/cvs
Delete ports/INDEX-5
Edit ports/Tools/portbuild/scripts/buildscript
Add delta 1.17 2004.11.25.00.02.38 kris
...edited...
Checkout ports/x11-wm/ratpoison/files/ratpoison.desktop
Edit ports/x11-wm/ratpoison/pkg-plist
Add delta 1.6 2004.11.24.17.32.29 hq
Shutting down connection to server
Finished successfully

Script done, output file is /tmp/cvsup.out

Notice that at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 end of this process, INDEX-5 is gone:

janney:/root# ls -al /usr/ports/IND*
-rw-r--r-- 1 root wheel 12250112 Nov 24 08:11 /usr/ports/INDEX.db

We saw earlier that CVS executed ' Delete ports/INDEX-5' when updating /usr/ports.

Now run 'cache-update' against cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 CVS output:

janney:/root# cache-update -i /tmp/cvsup.out
cache-update:1: Updating cached data for /usr/ports/audio/daapd
cache-update:2: Updating cached data for /usr/ports/audio/libsidplay2
cache-update:3: Updating cached data for /usr/ports/chinese/MT
cache-update:4: Updating cached data for /usr/ports/chinese/zhcon
cache-update:5: Updating cached data for /usr/ports/comms/efax-gtk
cache-update:6: Updating cached data for /usr/ports/comms/libticables
cache-update:7: Updating cached data for /usr/ports/comms/minicom
cache-update:8: Updating cached data for /usr/ports/databases/myodbc
cache-update:9: Updating cached data for /usr/ports/databases/slony1
cache-update:10: Updating cached data for /usr/ports/deskutils/hot-babe
cache-update:11: Updating cached data for /usr/ports/devel/bison
cache-update:12: Updating cached data for /usr/ports/devel/gettext
...edited...
cache-update:78: Updating cached data for /usr/ports/x11-wm/ratpoison
cache-update:79: Updating cached data for /usr/ports/x11/xextensions

Finally run 'portindex' to create INDEX-5:

janney:/root# portindex -o /usr/ports/INDEX-5
Accumulating dependency information: .........[1000].........[2000].........[300
0].........[4000].........[5000].........[6000].........[7000].........[8000]...
......[9000].........[10000].........[11000].........[12000]<12000>
Writing INDEX file: .........[1000].........[2000].........[3000].........[4000]
.........[5000].........[6000].........[7000].........[8000].........[9000].....
....[10000].........[11000].........[12000]<12000>
janney:/root# ls -al /usr/ports/IND*
-rw-r--r-- 1 root wheel 5959708 Nov 24 21:47 /usr/ports/INDEX-5
-rw-r--r-- 1 root wheel 12250112 Nov 24 08:11 /usr/ports/INDEX.db

I'm not sure if I will continue to use this method. As I just described it, you must use CVSup. Matcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365w offers 'find-updated' as a way to scan cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 /usr/ports tree and discover differences. I believe this could be paired with Portsnap to let Portsnap update cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tree and Portindex update INDEX-5. That will probably be anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r Blog entry...

Installing Java on FreeBSD

In January I explained how I installed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 java/jdk14 port on FreeBSD 5.2. Today I installed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 java/jdk14 port on one 5.3 RELEASE system, janney, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n used packages built during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 install process to install cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 JDK on my 5.3 RELEASE laptop, orr.

The FreeBSD project cannot distribute packages of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 latest Java software due to Sun's licensing restrictions. (Really old 1.3.1 binary packages are offered from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FreeBSD Foundation.) I can create my own packages for personal use as I have read and accepted Sun's licenses. I cannot redistribute those packages for ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs to use.

First I ensured my ports tree was updated. Next I placed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 necessary archives for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 installation in /usr/ports/distfiles. These included:

bsd-jdk14-patches-6.tar.gz
j2re-1_4_2_06-linux-i586.bin
j2sdk-1_4_2-bin-scsl.zip
j2sdk-1_4_2-mozilla_headers-unix.zip
j2sdk-1_4_2-src-scsl.zip
j2sdk-1_4_2_06-linux-i586.bin

The first is available at EyesBeyond.com. The second is available as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 J2SE v 1.4.2_06 JRE. The next three are available on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365
Java 2 Platform, Standard Edition (J2SE) Sun Community Source License - Download
page. The last is posted as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 J2SE v 1.4.2_06 SDK.

I also knew I had to have linprocfs already loaded. This meant that my /etc/fstab needed this entry:

linprocfs /compat/linux/proc linprocfs rw 0 0

I found that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 best way to handle this was to add cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 entry to /etc/fstab and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n reboot cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 system. I tried to manually follow cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se instructions to enable linprocfs:

kldload linprocfs
mount /compat/linux/proc

This did not work for me, since cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re was no /compat/linux/proc directory. I ended up creating a /compat/linux/proc directory by hand. (To be completely honest I lost track of how I ended up getting linprocfs to work, since my notes are blank at that point. I'd be interested in hearing if ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs had similar problems. I didn't seem to have any issues on 5.2 in January.)

Matcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365w Seaman's freebsd-java post explains that "in order to build JDK 1.4.2 you need a working JDK 1.4.x to compile everything. As things stand, that means at some point you have to use a Linux JDK to do an initial compilation."

A preview of what happens once you start cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 build process confirms Matcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365w's assertion:

===> jdk-1.4.2p6_6 depends on file: /usr/local/linux-sun-jdk1.4.2/bin/javac -
not found
===> Verifying install for /usr/local/linux-sun-jdk1.4.2/bin/javac in
/usr/ports/java/linux-sun-jdk14
======================================================================
Warning: This JDK may be unstable. You are advised to use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 native
FreeBSD JDK, in ports/java/jdk14.

This Java VM will attempt to obtain some system information by
accessing files in linux's procfs. You must install cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Linux
emulation procfs filesystem for this to work correctly. The JVM
will exhibit various problems ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rwise. This can be accomplished
by adding cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following line to your /etc/fstab file:

linprocfs /compat/linux/proc linprocfs rw 0 0

and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n, as root, executing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 commands:
kldload linprocfs
mount /compat/linux/proc

======================================================================
===> Vulnerability check disabled
===> Extracting for linux-sun-jdk-1.4.2.06
>> Checksum OK for j2sdk-1_4_2_06-linux-i586.bin.
...truncated...


Matcá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365w continues: "Once you've compiled cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 JDK one time using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Linux emulation, you can discard cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 linux bits and use your native JDK to compile any updates... You can also take an installed native JDK 1.4.2 and create a package out of it." That's what we're going to do. Building java/jdk14 on host janney requires Linux emulation, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 package on laptop orr won't.

To start cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 build process I entered cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 /usr/ports/java/jdk14 directory and ran this command:

janney:/usr/ports/java/jdk14# make package-recursive DISABLE_VULNERABILITIES=true

The 'package-recursive' directive tells cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 make process to create cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 java/jdk14 package, as well as packages for all of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 java/jdk14 dependencies. When cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 process is finished, you'll have packages (.tbz files) in /usr/ports/packages/All.

The 'DISABLE_VULNERABILITIES=true' directive disables vulnerability checking provided via cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 portaudit tool. I generally do not advocate this step because you are potentially installing software with vulnerabilities. For example, I originally executed 'make package-recursive' and had this result:

===> jdk-1.4.2p6_6 depends on file: /usr/X11R6/lib/libXm.so - not found
===> Verifying install for /usr/X11R6/lib/libXm.so in /usr/ports/x11-toolkits
/open-motif
===> open-motif-2.2.3 has known vulnerabilities:
>> xpm -- image decoding vulnerabilities.
Reference: http://www.FreeBSD.org/ports/portaudit/ef253f8b-0727-11d9-b45d-000c41e2cdad.html
>> Please update your ports tree and try again.
*** Error code 1

Stop in /usr/ports/x11-toolkits/open-motif.
*** Error code 1

Stop in /usr/ports/java/jdk14.

A visit to www.freshports.org/x11-toolkits/open-motif shows a new feature -- cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "skull icon" indicating a security vulnerability in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 desginated version of x11-toolkits/open-motif. Although OpenMotif 2.2.4, patching cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 hole, is available, it has not been integrated into cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FreeBSD ports tree. According to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 portaudit and VuXML reports, X11R6.8.1 fixes cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 problem. A look through cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 freebsd-x11 mailing list shows that a port of xorg 6.8.1 is in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 works but not finished.

There's a second security issue to consider. Sun released an advisory warning customers to not use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "SDK and JRE [versions] 1.4.2_05 and earlier, all 1.4.1 and 1.4.0 releases, and [version] 1.3.1_12 and earlier." This follows a post to full-disclosure, publicizing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 issue. FreeBSD Java patch set developer Greg Lewis committed an update marking cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 java/jdk14 port "forbidden" when building cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 browser plug-in because of this vulnerability. In fact, you'd see this warning even if yo do disable vulnerability checks:

===> jdk-1.4.2p6_6 is forbidden: Vulnerabilities in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 browser plugin.

In an email exchange Greg assured me that "vulnerability exists in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 current patchset and will do so until we find a fix for it." Besides invoking 'DISABLE_VULNERABILITIES=true', one could also build java.jdk14 with 'MINIMAL=true', as that directive says 'don't build/install mozilla java plugin, javaws and JDK demos'.

Since I was deploying Java to support some applications, and not run in a browser, I wasn't worried about reading eicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r malicious images (affecting xpm) or applets (affecting cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Java JRE).

When cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 build process is done, execute 'make install' to install java/jdk14.

If you're sucessful, you'll find jdk-1.4.2p6_6.tbz plus ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r packages in /usr/ports/packages/All. I chose to install cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se on my laptop my NFS mounting /usr/ports from build server janney as /mnt on laptop orr:

orr:/root# mount -t nfs janney:/usr/ports /mnt
orr:/root# mount | grep janney
janney:/usr/ports on /mnt (nfs)

Now I could install cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 package and its dependencies on orr:

orr:/root# pkg_add -v /mnt/packages/All/jdk-1.4.2p6_6.tbz

A successful installation can be checked with this command:

orr:/root# java -version
java version "1.4.2-p6"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2-p6-root_24_nov_2004_10_37)
Java HotSpot(TM) Client VM (build 1.4.2-p6-root_24_nov_2004_10_37, mixed mode)

I like this method of building time-intensive, complicated ports elsewhere (on more robust systems) and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n installing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m as packages via NFS on end-user systems. Had a precomplied package been available from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FreeBSD project or elsewhere, I would have used that. (That's how I installed OpenOffice.org, anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r bear to compile from source.) This system works well when you really do need to "roll your own." Thankfully cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FreeBSD ports tree simplifies that process.

CERT/CC Publishes Principles of Survivability and Information Assurance

CERT/CC just published ten Principles of Survivability and Information Assurance. They are:

1. Survivability is an enterprise-wide concern.

2. Everything is data.

3. Not all data is of equal value to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 enterprise – risk must be managed.

4. Information assurance policy governs actions.

5. Identification of users, computer systems, and network infrastructure components is critical.

6. Survivable Functional Units (SFUs) are a helpful way to think about an enterprise’s networks.

7. Security Knowledge in Practice (SKiP) provides a structured approach.

8. The road map guides implementation choices (all technology is not equal).

9. Challenge assumptions to understand risk. (Think like an intruder.)

10. Communication skill is critical to reach all constituencies.

Some of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se principles are backed up by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir own papers or CERT practices. They are a good starting point to measure an organization's overall security posture.

Informit.com Publishes Sguil Chapter

My buddy Keith McCammon told me he found Informit.com serving up chapter 10 from The Tao of Network Security Monitoring as Why Sguil Is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Best Option for Network Security Monitoring Data. Controversial, and not my doing. :) Still, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 whole chapter is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re in browsable HTML, along with embedded screenshots. We are still testing Sguil 0.5.3 but expect to release it soon.

Using FreeBSD Update to Patch FreeBSD

When cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FreeBSD Security team released an advisory for fetch(1), I knew I could turn to Colin Percival's FreeBSD Update for binary security upgrades.

Installation is simple. Here's how to installing via package:

pkg_add -vr freebsd-update
mkdir /usr/local/freebsd-update
cp /usr/local/etc/freebsd-update.conf.sample /usr/local/etc/freebsd-update.conf

Here is how FreeBSD Update patched cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fetch(1) vulnerability:

orr:/root# freebsd-update fetch
Fetching public key...
Fetching updates signature...
Fetching updates...
Fetching hash list signature...
Fetching hash list...
Examining local system...
Fetching updates...
/usr/bin/fetch...
Updates fetched

To install cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se updates, run: '/usr/local/sbin/freebsd-update install'
orr:/root# freebsd-update install
Backing up /usr/bin/fetch...
Installing new /usr/bin/fetch...


That's it. I didn't need to CVSup to STABLE or manually patch cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fetch(1) binary. FreeBSD Update handled it, and with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 change being to userland, no reboot is necessary.
The traditional means to update cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FreeBSD ports tree involves using CVSup in a manner described well by Dru Lavigne. After cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sysutils/cvsup
port is installed, and ports-supfile modified to point to a real CVSup server (e.g. *default host=cvsup8.FreeBSD.org'), you run commands like this:

cvsup -g -L 2 /usr/local/etc/ports-supfile
portsdb -uU

The first command updates cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree in /usr/ports. The second command creates or updates cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 INDEX file (via cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 'U') and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n creates or updates cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 INDEX.db file (via cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 'u') from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 INDEX.

There is now an alternative to CVSup available in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree: Portsnap, written by FreeBSD-update author Colin Percival. Installation via packages is easy:

orr:/root# setenv PACKAGESITE ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5-stable/Latest/
orr:/root# pkg_add -vr portsnap
...edited...
Package portsnap-0.2_1 registered in /var/db/pkg/portsnap-0.2_1

Before you can use portsnap, you will have to create an update configuration
file specifying cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 server from which to fetch snapshots and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sha1 hash
of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 RSA public key which is trusted to sign cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 snapshots.

A sample configuration file has been installed in

/usr/local/etc/portsnap.conf.sample

which will fetch snapshots built and signed by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 author. If you want to
use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se updates, copy that file to

/usr/local/etc/portsnap.conf

ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rwise, create that file as appropriate.

orr:/root# cp /usr/local/etc/portsnap.conf.sample /usr/local/etc/portsnap.conf
orr:/root# mkdir /usr/local/portsnap

Once installed, see what options Portsnap offers:

orr:/root# portsnap -h
usage: portsnap [options] command [URL]

Options:
-d workdir -- Store working files in workdir
(default: /usr/local/portsnap/)
-f conffile -- Read configuration options from conffile
(default: /usr/local/etc/portsnap.conf)
-k KEY -- Trust an RSA key with SHA1 hash of KEY.
-p portsdir -- Location of uncompressed ports tree
(default: /usr/ports/)
URL -- Fetch updates from given URL.
Commands:
fetch -- Fetch a compressed snapshot of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ports tree,
or update an existing snapshot.
cron -- Sleep rand(3600) seconds, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n fetch updates.
extract -- Extract snapshot of ports tree, replacing existing
files and directories.
update -- Update ports tree to match current snapshot, replacing
files and directories which have changed.

Here is a sample run:

orr:/root# portsnap fetch
Fetching public key... done.
Fetching snapshot tag... done.
Fetching snapshot generated at Sun Oct 24 14:21:27 EDT 2004:
c2246a9802a7155d099dd37fdfcbbc0f77b5864a.tgz 3% of 31 MB 192 kBps
Extracting snapshot... done.
Verifying snapshot integrity... done.
Fetching updated snapshot tag... done.
Updating from Sun Oct 24 14:21:27 EDT 2004 to Wed Nov 24 10:04:58 EST 2004.
Attempting to generate index via delta compression... success.
Generating list of updates needed... 2401 files or ports need to be updated.
Attempting to fetch 2210 patches... 2209 fetched.
Attempting to apply patches... done.
Attempting to fetch 192 new files or ports... done.

orr:/root# portsnap extract
/usr/ports/.cvsignore
/usr/ports/CHANGES
/usr/ports/LEGAL
/usr/ports/MOVED
/usr/ports/Makefile
/usr/ports/Mk/bsd.autotools.mk
/usr/ports/Mk/bsd.emacs.mk
/usr/ports/Mk/bsd.gnome.mk
...edited...
/usr/ports/x11/yalias/
/usr/ports/x11/yelp/
/usr/ports/x11/zenity/

After cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 initial 'extract', future updates just use 'update':

orr:/root# portsnap fetch
Fetching updated snapshot tag... done.
Updating from Wed Nov 24 15:36:20 EST 2004 to Wed Nov 24 17:36:13 EST 2004.
Attempting to generate index via delta compression... success.
Generating list of updates needed... 8 files or ports need to be updated.
Attempting to fetch 8 patches... 8 fetched.
Attempting to apply patches... done.
Attempting to fetch 0 new files or ports... done.
orr:/root# portsnap update
Removing old files and directories... done.
Extracting new files:
/usr/ports/chinese/zhcon/
/usr/ports/comms/minicom/
/usr/ports/devel/gettext/
/usr/ports/games/wolfpack/
/usr/ports/math/ndiff/
/usr/ports/science/mmtk/
/usr/ports/textproc/libxml2/
/usr/ports/textproc/py-docutils/

That's it. Now, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 INDEX-5 file hasn't been updated. A great way to do that is to use 'make fetchindex'. Here's a subsequent run of Portsnap followed by 'make index':

orr:/root# portsnap fetch
Fetching updated snapshot tag... done.
Updating from Wed Nov 24 17:36:13 EST 2004 to Wed Nov 24 19:36:13 EST 2004.
Attempting to generate index via delta compression... success.
Generating list of updates needed... 20 files or ports need to be updated.
Attempting to fetch 17 patches... 17 fetched.
Attempting to apply patches... done.
Attempting to fetch 3 new files or ports... done.
orr:/root# portsnap update
Removing old files and directories... done.
Extracting new files:
/usr/ports/Tools/portbuild/
/usr/ports/audio/libsidplay2/
/usr/ports/chinese/MT/
/usr/ports/comms/libticables/
/usr/ports/devel/bison/
/usr/ports/devel/libmcve/
/usr/ports/devel/libtifiles/
/usr/ports/java/linux-blackdown-jdk14/
/usr/ports/lang/gcc28/
/usr/ports/lang/nickle/
/usr/ports/net/jit/
/usr/ports/net/libicq2000/
/usr/ports/www/opera/
/usr/ports/x11-cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mes/Makefile
/usr/ports/x11-cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mes/kde-icons-cezanne/
/usr/ports/x11-cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mes/kde-icons-gartoon-blue-svg/
/usr/ports/x11-cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mes/kde-icons-gartoon-svg/
/usr/ports/x11-cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mes/kde-icons-noia/
/usr/ports/x11-cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mes/kde-icons-sparkling/
/usr/ports/x11/xextensions/
orr:/root# ls -al /usr/ports/IND*
-rw-r--r-- 1 root wheel 5089899 Apr 30 2004 /usr/ports/INDEX
-rw-r--r-- 1 root wheel 6018417 Nov 19 21:02 /usr/ports/INDEX-5
-rw-r--r-- 1 root wheel 12334080 Nov 19 22:22 /usr/ports/INDEX.db
orr:/root# cd /usr/ports
orr:/usr/ports# make fetchindex
INDEX-5.bz2 100% of 589 kB 159 kBps
orr:/usr/ports# ls -al /usr/ports/IND*
-rw-r--r-- 1 root wheel 5089899 Apr 30 2004 /usr/ports/INDEX
-rw-r--r-- 1 root wheel 6040505 Nov 24 21:03 /usr/ports/INDEX-5
-rw-r--r-- 1 root wheel 12334080 Nov 19 22:22 /usr/ports/INDEX.db

Notice how Portsnap did not affect INDEX-5, but 'make fetchindex' brings a new INDEX-5. To update INDEX.db, run 'portsdb -u':

orr:/usr/ports# portsdb -u
[Updating cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 portsdb in /usr/ports ... - 11999 port entries found ...
......1000.........2000.........3000.........4000.........5000
.........6000.........7000.........8000.........9000.........10000.....
....11000......... ..... done]
orr:/usr/ports# ls -al /usr/ports/IND*
-rw-r--r-- 1 root wheel 5089899 Apr 30 2004 /usr/ports/INDEX
-rw-r--r-- 1 root wheel 6040505 Nov 24 21:03 /usr/ports/INDEX-5
-rw-r--r-- 1 root wheel 12364800 Nov 24 21:21 /usr/ports/INDEX.db

Notice that we're only one port away from 12,000!

Tuesday, November 23, 2004

Prof Kerr on KeyKatcher Case

I always enjoy reading Professor Orin Kerr's Computer Crime Case Updates. This week he comments on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 dismissed wiretapping case mentioned by SecurityFocus.com and Slashdot. Although some commentary from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 likes of Slashdot is helpful, I prefer reading cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opinions of a Harvard Law graduate and former Supreme Court clerk.

The case is simple: does use of a keystroke logger constitute a wiretap? The judge in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 case said no. I agree with Prof Kerr's assessment that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opinion is wrong. If someone listens in on a phone between cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 handset and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 base unit, it's still a wiretap. It's no different if someone collects keystrokes using a device between a keyboard and CPU.

However, I disagree with Prof Kerr's reasoning concerning interstate commerce. Plenty of judges disagree with me, but I don't think connecting to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Internet makes a system automatically engaged in "interstate commerce." I think cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 use of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 so-called Interstate Commerce Clause allows Congress to pass laws that far exceed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir true Constitutional mandate.

If you've never read Prof Kerr's opinions, I recommend you browse his mailing list archives. They're incredibly enlightening.