/etc/make.conf:
SUP_UPDATE=YESSUPHOST=\ cvsup.br.FreeBSD.orgSUPFILE=/seu/supfile
# cd /usr/src# make update# cd /usr/ports# make update
Two tools which have become the norm in Linux- and Unix-based environments are SSH for secure communications, and sudo for performing administrative tasks. These are independent programs with substantially different purposes, but they are often used in conjunction. In this talk, I describe a flaw in their interaction, and then present our solution called public-key sudo.
Public-key sudo is an extension to the sudo authentication mechanism which allows for public key authentication using the SSH public key framework. I describe our implementation of a generic SSH authentication module and the sudo modifications required to use this module.
Bio: Matthew Burnside is a Ph.D. student in the Computer Science department at Columbia University, in New York. He works for Professor Angelos Keromytis in the Network Security Lab. He received his B.A and M.Eng from MIT in 2000, and 2002, respectively. His research interests are in network anonymity, trust management, and enterprise-scale policy enforcement.
Configuration Management with Cfengine
Cfengine is a policy-based configuration management system. Its primary function is to provide automated configuration and maintenance of computers, from a policy specification.
The cfengine project was started in 1993 as a reaction to the complexity and non-portability of shell scripting for Unix configuration management, and continues today. The aim was to absorb frequently used coding paradigms into a declarative, domain-specific language that would offer self-documenting configuration.
about the speaker: Steven Kreuzer has been working with Open Source technologies since as long as he can remember, starting out with a 486 salvaged from a dumpster behind his neighborhood computer store. In his spare time he enjoys doing things with technology that have absolutely no redeeming social value.
root@neely:/usr/local/src# ls -d /opt/optroot@neely:/usr/local/src# rmdir /optroot@neely:/usr/local/src# ln -s /var/opt /opt
root@neely:/usr/local/src# dpkg -i splunk-3.3.1-39933-linux-2.6-intel.deb Selecting previously deselected package splunk.(Reading database ... 142815 files and directories currently installed.)Unpacking splunk (from splunk-3.3.1-39933-linux-2.6-intel.deb) ...Setting up splunk (3.3.1-39933) ...----------------------------------------------------------------------Splunk has been installed in: /opt/splunkTo start Splunk, run the command: /opt/splunk/bin/splunk startTo use the Splunk Web interface, point your browser at: http://neely:8000Complete documentation is at http://www.splunk.com/r/docs----------------------------------------------------------------------
root@neely:/usr/local/src# /opt/splunk/bin/splunk startSplunk Free Software License AgreementTHIS SPLUNK SOFTWARE LICENSE AGREEMENT (THE "AGREEMENT") GOVERNS ALL SOFTWARE PR...edited...ditions of this Agreement will remain in full force and effect.Do you agree with this license? [y/n]: yCopying '/var/opt/splunk/etc/myinstall/splunkd.xml.default' to '/var/opt/splunk/etc/myinstall/splunkd.xml'.Copying '/var/opt/splunk/etc/modules/distributedSearch/config.xml.default' to '/var/opt/splunk/etc/modules/distributedSearch/config.xml'./var/opt/splunk/etc/auth/audit/private.pem/var/opt/splunk/etc/auth/audit/public.pem/var/opt/splunk/etc/auth/audit/private.pem generated./var/opt/splunk/etc/auth/audit/public.pem generated./var/opt/splunk/etc/auth/audit/private.pem/var/opt/splunk/etc/auth/audit/public.pem/var/opt/splunk/etc/auth/audit/private.pem generated./var/opt/splunk/etc/auth/audit/public.pem generated.This appears to be your first time running this version of Splunk.Validating databases... Creating /var/opt/splunk/var/lib/splunk/audit/thaweddb Creating /var/opt/splunk/var/lib/splunk/blockSignature/thaweddb Creating /var/opt/splunk/var/lib/splunk/_internaldb/thaweddb Creating /var/opt/splunk/var/lib/splunk/fishbucket/thaweddb Creating /var/opt/splunk/var/lib/splunk/historydb/thaweddb Creating /var/opt/splunk/var/lib/splunk/defaultdb/thaweddb Creating /var/opt/splunk/var/lib/splunk/sampledata/thaweddb Creating /var/opt/splunk/var/lib/splunk/splunkloggerdb/thaweddb Creating /var/opt/splunk/var/lib/splunk/summarydb/thaweddbValidated databases: _audit, _blocksignature, _internal, _thefishbucket, history, main, sampledata, splunklogger, summaryChecking prerequisites...Checking http port [8000]: openChecking mgmt port [8089]: openVerifying configuration. This may take a while...Finished verifying configuration.Checking index directory...Verifying databases...Verified databases: _audit, _blocksignature, _internal, _thefishbucket, history, main, sampledata, splunklogger, summaryChecking index filesAll index checks passed.All preliminary checks passed.Starting splunkd...Starting splunkweb.../var/opt/splunk/share/splunk/certs does not exist. Will createGenerating certs for splunkweb serverGenerating a 1024 bit RSA private key.......++++++...............................++++++writing new private key to 'privkeySecure.pem'-----Signature oksubject=/CN=neely/O=SplunkUserGetting CA Private Keywriting RSA keySplunk Server started. The Splunk web interface is at http://neely:8000 If you get stuck, we're here to help. Feel free to email us at 'support@splunk.com'.
Amazon SimpleDB measures the machine utilization of each request and charges based on the amount of machine capacity used to complete the particular request [...]