amuck-landowner

Search results

  1. Geek

    Xen Security Advisories

    http://xenbits.xen.org/xsa/advisory-122.html ISSUE DESCRIPTION ================= The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall fails to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents...
  2. Geek

    OpenVZ Template Updates (Req 042stab102.9)

    OpenVZ project announces an update to official precreated templates. Changes ======= * New templates (in beta -- please test): ** Ubuntu 14.10 x86 and x86_64 ** Fedora 21 x86_64 only ** openSUSE 13.2 x86_64 only ** NOTE new templates require kernel >= 042stab102.9 * Added bsdutils to Debian 7...
  3. Geek

    [OpenVZ] Ploop 1.12.2

    FYI. -John
  4. Geek

    What's the going rate to store 1T of adult content?

    I've got one of those nerd-critical situations on my hands.  About an hour ago I received an interesting phone call from a guy who apparently drives by my office every day for work but he's too embarassed to come in.  From what he's told me, he's the stereotypical nerd with a large porn...
  5. Geek

    'vzctl destroy' could erase the wrong container ...yay

    I'm in the middle of retiring a HWN right now, and I migrated about 20 containers from QA over to the replacement, one was a copy of a personal CT. All went fine until I went to remove a low numbered container and vzctl removed one with a larger number. Happened to be the copy of my CT that it...
  6. Geek

    OpenVZ to become "Virtuozzo Core" after PCS Merger Announcement

    From Kir Kolyshkin's Blog: http://openvz.livejournal.com/49158.html Looking forward to 2015, we have very exciting news to share on the future on OpenVZ. But first, let's take a quick look into OpenVZ history. Linux Containers is an ancient technology, going back to last century. Indeed it...
  7. Geek

    [OpenVZ] Kernel 042stab094.8

    Issue date: 2014-12-17 https://openvz.org/Download/kernel/rhel6/042stab094.8 Since 042stab094.7: Security fix for CVE-2014-9322 http://kb.sp.parallels.com/en/123961 A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from an #SS (stack...
  8. Geek

    [OpenVZ] Ploop, Fuse, ext4 improvements in new test kernel

    For those who wish to test the Ploop and fuse changes in the upcoming kernel release. https://openvz.org/Download/kernel/rhel6-testing/042stab101.5 Rebase to RHEL6.6 kernel 2.6.32-504.el6 (security, bug fixes, and enhancements, see link below) ve/net: add a separate field for NETIF_F_VIRTUAL...
  9. Geek

    New OpenVZ/RHEL6 kernel 042stab094.7 addresses CT breakout

    FYI for those still not yet patched.  :) -John https://openvz.org/Download/kernel/rhel6/042stab094.7 Since 042stab093.5: [security] fix access to the host filesystem from inside a container (#PSBM-29594) ms/net/ipv4: dst_entry leak in ip_send_reply() (#2672, PSBM-29405) cpt: Fix nfct->use...
  10. Geek

    10/28/14 Virtuozzo Container Breakout (#PSBM-29594

    http://kb.sp.parallels.com/en/123301 --- will probably start to see patches from KC/KS in the next couple hours (hopefully) A vulnerability in the RHEL6-based kernel discovered during internal security audit could allow access to the host filesystem from inside a Container. Only the kernels...
  11. Geek

    Output of lscpu on a CentOS OpenVZ Container

    So on the node level the lscpu output is fine, but if you try the same command in a CentOS* container, an error is thrown. Then there's a weird thing going on with a couple of the dual L5520s which, using Ubuntu templates, gives an lscpu output displays an incorrect core/thread total (would...
  12. Geek

    Early rumors of a nasty vuln in SSL 3.0

    The Register published this about 45 mins ago....?  No other mention of it so far...not sure if I should hold my breath on this one... don't know much about The Reg... http://www.theregister.co.uk/2014/10/14/nasty_ssl_30_vulnerability_to_drop_tomorrow/
  13. Geek

    vzctl 4.8

    https://wiki.openvz.org/Download/vzctl/4.8 Changes Since 4.7.2: New functionality vzctl set: add NUMA --nodemask (sponsored by FastVPS) vzmigrate: speed up by using se ploop copy with feedback if available vzmigrate: speed up by reusing ssh connection init.d/vz: show CT stop status init.d/vz...
  14. Geek

    I'm Comic Sans, Asshole.

      Too funny not to share.  Happy Friday.  By this guy: http://www.mcsweeneys.net/articles/im-comic-sans-asshole     - - - - I’m Comic Sans, Asshole. BY MIKE LACHER - - - -     Listen up. I know the shit you’ve been saying behind my back. You think I’m stupid. You think I’m immature...
  15. Geek

    [OpenVZ] RHEL5 Kernel Branch End of Life

    I doubt anyone here is crazy enough to be screwing around with UBC knobs and parameters ... but if you have an intimate relationship with "Burst RAM", OpenVZ is about to break up with you. https://lists.openvz.org/pipermail/announce/2014-July/000521.html Though it's pretty painless to make...
  16. Geek

    Honeypots

    I've got a handful of leftover IP4's in my current Q.A. box. Not wanting them to go to waste, I kicked around the idea of spooling up a couple of containers and turning them into honeypots, and yesterday evening I configured Kippo. I liked the idea, you know, making them look like mail servers...
Top
amuck-landowner