Hey There Simdol,

Thanks for replying.

Let me apologize for a bit of imprecision in my original post. The dock I have from Dell uses Thunderbolt v3. This is something I'm learning as I go along; there are multiple versions of the Thunderbolt protocol in the wild. Version 3 is latest in the line of ...

There is a semi-recent thread (from 2015) that discusses efforts to configure and test Thunderbolt device support for things such as display link, ethernet, USB daisy chaining, etc. Here is the thread:

https://forums.gentoo.org/viewtopic-t-1010232-highlight-.html

I figured rather than ...

Have you tried to set up the guest using Spice & QXL? I think you'll have a better graphics experience with that approach as opposed to standard VGA. Take a look at the following link:

http://www.linux-kvm.org/page/SPICE

AFAIK bash is the default shell for more Linux distros than just Gentoo. /bin/sh points to bash on my Arch laptop. This is also the case for my CentOS servers and IIRC for OpenSUSE too.

I think as it relates to DHCP, the vulnerability depends on the behavior of the client. Certain clients can be configured, upon connecting to DHCP servers, to run a bash shell to do things like configure interfaces and run commands, consuming environment variables as part of the process. This is ...

Thanks Hu, as always. That pretty much aligns with my thinking.

I don't ~think~ I have many assets that would constitute a viable attack vector for the Shellshock bash bug, but that doesn't mean my understanding is not incomplete or misinformed.

I have a few remote hosts to which I have ssh access. On two of them, I have deployed git repos. For one of the hosts ...

http://seclists.org/oss-sec/2014/q3/649

yup, disable ssh or update....

<shamus397> try this: LC_TIME='() { :;}; echo vulnerable' ssh <your systems hostname here>

Seems like patching should take priority, but is disabling sshd really necessary? FWICT only sshd configs with ForceCommand enabled ...

I also use & can recommend FireTray.

I'm trying to use Vim for programming, specifically for c++ but with no luck. I want to install vim-addon-manager so i can install some plugins to use vim as an IDE. If anyone has done this or can point me in the right direction please. Google didn't solve my problem
Balisong ... I've not used vim ...

How does the "systemd" USE flag influence this situation?

I have -systemd set in make.conf.

When I look at the dependency graph for the current stable upower (0.9.23-r2), which I have installed, I see:


* dependency graph for sys-power/upower-0.9.23-r2
`-- sys-power/upower-0.9.23-r2 amd64 ...

Hi Rich, I did read your blog as well. Thanks for putting time into breaking down how to create our own images. I actually may eventually go that route instead of using a pre-canned AMI so I can have better control over its contents.

I think my confusion stems from what I thought was an added ...

I've some experience administering EC2 instances for work. I'm considering trying to build out a Gentoo instance on Amazon, but I'm a little unsure if I can use a Gentoo AMI to run in the free usage tier. The guys at Dowd & Associates have put together a few Gentoo Amazon AMIs, but I would prefer to ...

amne wrote:Bug 99096.

I found SYNC host is like HIGHLANDER THIER CAN ONLY BE ONE

I almost fell out of bed laughing so hard with the above bug report.

I don't believe that would have saved us in this instance. Like eccerr0r said, the overflow could end up overlapping live address space. Not only were private keys vulnerable, but user authen information, and possibly worst of all session cookie IDs. If the attacker got hold of a session cookie ID ...

Thanks Anon-E-moose.

Yeah, my usage pattern is a bit different, I tend to perform --syncs much less frequently. This is my desktop PC, but it is not always on, and I might go days or even a week without powering it on. I would think that even though most people seem to incrementally sync & emerge ...

I ran emerge --sync for the first time in around a month or so today.

This time, I sync'd as root, and I tee'd the sync output into a log file to capture trace information from rsync, just in case there was another issue. Sure enough, the same problem occurs, which is some deletion failure, so ...

This is insane.

After waiting an hour or so after my initial --sync, I again ran --sync, and this time it seems portage successfully deleted all the old files.

I compared the sync logs, and even though there is no obvious file troubles that would suggest a cause for the reported IO error, e.g ...

I ran emerge --sync for the first time in around a month or so today.

This time, I sync'd as root, and I tee'd the sync output into a log file to capture trace information from rsync, just in case there was another issue. Sure enough, the same problem occurs, which is some deletion failure, so none ...

Maybe try a different guest, other than Cent OS, and see if that changes anything? It seems like you've tried everything already, so I'll bet you've probably done that as well.

I'm stumped. Sorry I couldn't be more help, but VM is merely a hobby for me, and a way to reconcile Linux environments w ...

You could try switching to a different image format to see what that yields. I use raw myself, after moving away from qcow2. However, that doesn't seem like it would make that large of a difference.

The only other thing is perhaps there is some parameter to tune mysql, letting it know that the ...

Presumably you are using the virtio block drivers? If not, that would the first thing I'd put in place. If yes, are you using the default I/O tuning parameters, or writethrough caching, etc? The I/O tuning parameters can have an impact on disk performance, AFAIK.

Also, what image format are you ...

I recently made an attempt to pull it from github and build it. The build sh script didn't work, and the CMake files are not in a good state with respect to necessary dependencies. I resolved to follow along with their progress on github, but AFAICT it's still a pretty raw project.

How much do I rely on Windows & its related software?

The answer is, more than I'd care to.

There are two primary things that keep me tethered to Microsoft.

1) My company's dev platform is .NET w/ SQL Server. I have entertained the thought of moving all of my development tools into Mono and then ...

I'm interested in trying out this new merger between lxde and razor-qt, but I think the project is still a little raw.