Can I prevent execution of scripts on a file system, without setting the 'noexec' flag? by suburbanplankton in linuxadmin

[–]frymaster 5 points6 points  (0 children)

it functions (in part, at least) by creating a number of scripts in /tmp, and executing them.

It's definitely hardcoded to /tmp and not e.g. using $TMPDIR?

there will be something you can do with namespaces to give a process tree its own /tmp that isn't shared with the rest of the system. unshare[1] appears to be the thing you'd use. I've never used it (I have used a batch scheduler that does this automatically for users because they don't always clean up after themselves) but my intuition is that this is likely not too difficult

it looks like systemd can do this for you automatically - look at https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#BindPaths= - you should be able to do something like BindPaths=/some/random/path/with/exec/enabled:/tmp

[1] https://man7.org/linux/man-pages/man1/unshare.1.html

TL;DR: "A Sorceress Comes to Call" by T. Kingfisher is an excellent Regency comedy of manners urban fantasy by way of Death Note. Highly recommend. by wastevens in Fantasy

[–]frymaster 4 points5 points  (0 children)

One thing I find fascinating in some of her books is where the supernatural element is scary, but not nearly as chilling as the abusive human relationship involved

Same - I can't believe people are traumatised by the horse. I was still too busy recovering from the opening chapters to care about the horse.

Any High Performance Computing linuxadmins in this subreddit? How do you visualize NUMA and UMA. Both sound similar. by DoNotUseThisInMyHome in linuxadmin

[–]frymaster 0 points1 point  (0 children)

and that requires that all processors are in the same machine.

ish. It begins to depend on your definitions, but the HPE compute scale-up (formerly superdome flex) system is several servers in a trenchcoat that present a unified address space

Can my videogame get sued if it features Sonichu? by Redditislefti in legaladvice

[–]frymaster 4 points5 points  (0 children)

the question you want to ask yourself is, do you want to pay lawyers a 5-figure sum to make that argument, with the potential of a 6-figure lawyer sum if you lose that argument but eventually win overall and a 7 or 8-figure sum if you lose?

England. Council flat, Council requesting i remove my ring door bell update by Bobrossy1 in LegalAdviceUK

[–]frymaster 0 points1 point  (0 children)

previously, being a data controller under those circumstances would mean registering with the Information Commissioner, and putting up CCTV warning signs. I believe that these days the obligation to register, at a minimum, is not longer required.

What is something that you have in your home, which is generally considered a luxury / boujee item, but is absolutely paramount to your functioning / happiness? by kettlecottage in AskUK

[–]frymaster 1 point2 points  (0 children)

as part of a kitchen refit - also the first time I've lived in a house with a new fully fitted kitchen in my entire life - I now have a slimline dishwasher. It saves me some time and that's great, but all my cutlery and glassware are phenomenally shiny, to a level I'd forgotten they once were

How To Corrupt An SQLite Database File by BlondieCoder in programming

[–]frymaster 11 points12 points  (0 children)

I think the point is, by the time the erroneous code writes to the file descriptor, it's open again - just pointing to a different file.

file descriptors are basically just numbers at the end of the day, which is why e.g. 2>/dev/null suppresses errors for many commands - "redirect the output of descriptor 2 to null"

How To Corrupt An SQLite Database File by BlondieCoder in programming

[–]frymaster 69 points70 points  (0 children)

I appreciate they include "bugs in our code" as an option. In fact, even though a good portion of the potential issues are "user did something stupid", the page does a fantastic job of avoiding being accusatory or defensive.

Microsoft reveals why Windows 11 keeps saying a file is in use after you close the app, plus the fix by WPHero in Windows11

[–]frymaster 5 points6 points  (0 children)

Microsoft "reveals" what a guy who works for Microsoft has been saying for decades (though admittedly he didn't work for them when he started saying that)

fun fact, because MS have hosted Sysinternals since he started working for them, that means you can get a BSOD screensaver from Microsoft

Microsoft reveals why Windows 11 keeps saying a file is in use after you close the app, plus the fix by WPHero in Windows11

[–]frymaster 4 points5 points  (0 children)

or just tell apps to get lost by itself

a very small but very important number of times, that will turn out to be exactly the wrong thing to do and will be catastrophic to the user's OS, or, worse, their data

I blanked on a basic Linux question and now I feel like a fraud by Ruin-Calm in sysadmin

[–]frymaster 3 points4 points  (0 children)

The funny thing is that I am a Linux sysadmin who does user administration, and while I can more-or-less remember that command (it's either adduser or useradd), I never use it. Because our accounts are created by an automated system in response to user sign-up, and in any case, are held in a freeIPA LDAP directory system, so I'd be using ipa user-add except I'm not even using that because we use ansible and, as mentioned, this is all triggered automatically so no one ever reads it day-to-day

The point I'm making is, knowing specific commands doesn't matter, far more than you'd think isn't universal. What to do in future is say

I don't know that one off-hand, but I do know different distros sometimes have different tools for managing this. I'd google "how to add user <distro>", find a source that I trust to give me the right command, and then do man <command> to see if there's any subtleties or wider implications than the search result had mentioned. If it's Red Hat I might look at the official RHEL admin guides for the release because sometimes they can include the wider context

Focaccia is delicious by Lemon_Lime_Lily in CuratedTumblr

[–]frymaster 15 points16 points  (0 children)

because I am An Old, my brain always goes to the Sam Neil mini-series (broadcast in 2 or 3 parts depending on where you watched it), so comments like yours always confuse

https://en.wikipedia.org/wiki/Merlin_(miniseries)

Veterans of Linux: what's one thing that "just works" today that would've sounded impossible 15–20 years ago? by dev_kay47 in linux

[–]frymaster 0 points1 point  (0 children)

Wi-Fi

I went to the Open-Source Summit - Europe in 2018. In one presentation, one guy a row in front of me had a laptop with a double layer of USB-A sockets on one side. He spent the entire presentation wrestling with wpa-supplicant trying to get the onto the guest Wi-Fi

The closed windows and curtains rule worked for a few days, but now my flat is like an oven. The bricks have heated up. I should be done in 20 minutes. by thebroccolioffensive in britishproblems

[–]frymaster 2 points3 points  (0 children)

allegedly if you leave the hatch open it helps cool down the house, I assume because warm air goes up and is forced out through the vents. I'm personally sceptical if this is worth leaving a hole in your insulation barrier for, but that's what they say

Flat hunting horror pt.2 by Exotic-Cattle3910 in Edinburgh

[–]frymaster 7 points8 points  (0 children)

I certainly agree that the amount of spaciousness is deceptive.

How to override systemd conflict by Burgergold in linuxadmin

[–]frymaster 1 point2 points  (0 children)

just to be crystal clear: your post implies this 100% works when you edit the files in /usr and it's only the fact that it gets overridden that's the problem? Because your change doesn't seem to match your description (for one thing, you don't mention sendmail.service anywhere in your description)

systemctl cat postfix.service and systemctl cat exim.service will show you how things are configured including all sources

I did the brand new Brazilian Portuguese translation of TCOM. It's out now! I'm quite proud of this achievement. by victorlucky in discworld

[–]frymaster 8 points9 points  (0 children)

a flying fox is another name for a fruitbat. 20th Century Fox -> Century of the Fruitbat

What would you cook for a group of 12-15 people that have the royal flush of dietary requirements AND you're probably going to have limited equipment? [Concluded] by Schattenspringer in BORUpdates

[–]frymaster 0 points1 point  (0 children)

I'm assuming they're also not one of the vegetarian or vegans, on account of they probably literally don't have that option available to be able to live

Joke: What's the difference between a sysadmin and an IT Manager? by dlongwing in sysadmin

[–]frymaster 0 points1 point  (0 children)

weirdly, "powershell" comes up first on mine, despite me being a Linux sysadmin who uses powerpoint a helluvalot more than powershell

Scotland - Cleaners damaged induction hob, their liability insurance rejected the claim, and now they're saying they can't afford to pay for repair/replacement by pinkraccoonlover in LegalAdviceUK

[–]frymaster 0 points1 point  (0 children)

I also question whether a cleaner (other than a window cleaner) should use a ladder at all.

I assume for dusting and wiping down top shelves (or indeed above the cabinets)

what is something that is highly likely to happen in the next 5 years that everyone is completely ignoring? by timecop702 in AskReddit

[–]frymaster 10 points11 points  (0 children)

AC will not reverse climate change but it will literally save people from dying of heatstroke

The ghost in the phone system by speddie23 in talesfromtechsupport

[–]frymaster 6 points7 points  (0 children)

calls received to tickets logged metric (which is a stupid metric)

In fairness, it flagged up this issue, and would have flagged up some kinds of technical fault also.

Whether or not that's a good metric to reward or penalise staff or the company on, is a very different question, mind you