c0t0d0s0.org

A larger putback found it's way into OpenSolaris. It's headlined with the introduction of the changes introduced by PSARC case 2009/377 In-kernel pfexec implementation.. This PSARC case removes the old mechanism of proving profile shells to a new kernel-integrated one:

The implementation of pfexec(1) is changed such that is add the PRIV_PFEXEC credential flag and then executes the program. The execve() system call will notice the PRIV_PFEXEC flag and it will ask the pfexecd daemon whether the file can be executed and which changes to the credential are required

Another interesting change introduces by the PSARC is a different behaviour in the case of setuid-ed binaries:

Additional, this project will deliver "Forced Privileges" through the exec_attr database:
- Unsafe privileges are not required to execute ping, traceroute, etc. (If an executable is set-uid root, then the kernel will lookup the Forced Privileges for that executable)
- Set-uid applications in that list will not start as root, instead they run with the appropriate privileges.

One big advantage of the new in-kernel implementation is the point, that profile shells ( are simple to implement now: So there will be an pfbash, pfzsh and pftcsh. A profile shell is a hardlink to a regualar Solaris shells that enables checking privileges that are assigned to the role. The shell code has to be aware of the RBAC configuration. This wasn't the case in the past for bash, zsh and tcsh. Now that this part has moved into the kernel, all shells use the common infrastructure.

Another interesting feature of this change: The introduction of the FILE_READ and FILE_WRITE privileges due to the code putback of the results of PSARC case 2009/378 enables you to create read-only and write-only processes.

Da war man ja wirklich mal für eine Sekunde beeindruckt, das Wulff eine türkisch-stämmige Bürgerin in seine Landesregierung in Niedersachsen geholt hat. Das schöne an der CDU ist aber, das sie gleich alles wieder einreisst, was sie sich aufgebaut hat. Zum einen hat man Frau Özkan sehr schnell wieder zurückgerufen, als sie das Kruzifix nebst Kopftuch (den zweiten Teil haben viele unterschlagen) aus der Schule verbannt sehen wollte. Zum andere hat sich wieder mal gezeigt, das die CDU trotz allem Mitte-Gerede immer noch die beton-konservative Partei ist, die sie schon immer war.

PS: Ein Gedanke ... wenn man bedenkt, das das Verfassungsgericht eindeutig gesagt hat, das Kruzifixe an bekenntnisfreien Schulen grundgesetzwidrig sind und weiterhin bedenkt, das anscheinend eine ausreichend grosse Mehrheit innerhalb der CDU diesem Urteil feindlich gegenübersteht (bis hin zur Nichtwahl einer Ministerin, in deren Ressort dieses Thema garnicht fällt), so zeichnet das doch ein interessantes Bild von der Gedankenlage der CDU. Politische Mitte, my ass.

This video shows the resurgence of commercial aviation when the airspace was freed again after the the volcanic ash close-down.



There seems to be no data for France, as the complete country stays black in the video.

So ... you may think that Jörg got totally insane given that his taste of music gone totally haywire now. But i want to remember you, that i flew once to London to hear the massive choir with hundreds voices in the Requiem of Hector Berlioz. Okay, this music is made by a choir, that isn't that large, but the repertoire is much more modern.

By pure luck i found the music of the danish a cappella choir "Vocal Line" in iTunes today. Their version of Peter Gabriel's "Mercy Street" is just awesome. The acappella interpretation of Tori Amos "Crucify" is excellent as well. And i'm surely prefer their version of "Jóga" as i don't like the voice of Bjork. Another recommended tracks is the a cappella version of "Don't give up". Just give it a try

PS: Remember that choir music just works with good speakers and a lot of volume

Sorry, but the weather is just too nice to sit in home office and to write long articles about technology

Michiel points in a comment to interesting photos of an jet engine that ingested volcanic ash : "PICTURES: Finnish F-18 engine check reveals effects of volcanic dust". Perhaps the airline managers should keep this in mind when they are upset about the closed airports.

The location is normaly directly below a frequently used aviation route. By the way: What a great weather!

I'm so used to see at least a few condensation trails in the sky, that it grabs my attention when there isn't a single one in the sky due to to close-down of almost all airports in germany due to the volcanic ash cloud.

This is the Departure Table of the Airport in Hamburg. Due to the volcanic ash cloud over Europe the airport in hamburg was totally closed down. I think it's safe to assume, that using a plane is a bad idea today.

I just want to write about a error message people see when they try to force a program to use a different library. Sometimes that's nescessary, because you want to ensure that an application uses a certain variant of your shared library or you want to use preload a library implementing a system call in a more efficient manner. One example is the improved, multi-thread enabled memory allocator libumem. But somehow you don't get additional performance but just the error/warning message open failed: No such file in secure directories.

The days gets longer, the nights shorter, but my taste of music didn't move out of the shadows so far. I've found an interesting album by accident yesterday while searching for the song from the end credits of "Ghost in the Shell - Stand Alone Complex".

I wasn't able to find it, but i stubled about this music: It's "Shape a new sharp" by Act noir. These guys from Italy seem to be influenced from a lot of groups and created an interesting combination out of it. At some times the music remembers me of Nine Inch Nails, sometimes of Tool. The last track of album could count as Prog, except it isn't 20 minutes long Not the worst inspriations.

Of course i want to recommend some songs here: "The Higher I went, The Deeper I fell" is a good piece of music, "2008" is at heavy rotation today. Another track worth of listening is "Shape A New Start".

PS: Despite of being in business since the nineties of last century, they just published two albums. Their debut long player "Automatisme psychique" is worth listening as well..

I think most of us travelled in a Boeing 737 at least once. So you have an impression about the size of that bird. Well, when you look at this photo of a 737 in front of an A380, you might get an impression how large the Airbus A380 really is.

My condolences goes to the people of Poland for their loss. However, when various reports are correct, the cause for this crash deserves a collective *facepalm*: Thick fog (500m visibility), airport closed, two other airports suggest as alternates, no instrument landing system, already three go-arounds, the fourth attempt to land did lead to the crash. I thought, someone would be more cautious with so many passengers counting to the polish elite. That's outright horrible.