/dev/misc

* a premiere: this early morning, i’ve made a linux kernel patch for the first time (not counting mixing/editing others’ kernel patches etc. ;) as ingo asked me to fix the minor devfs issues with his exec-shield patch myself. admittely it’s a very tiny one and i probably couldn’t have done it if ingo didn’t tell me it was a matter of changed field names only. nevertheless it was a very cool experience. dealing with the kernel is just magic :) the funky thing is that i’ve done this all on the box which has just served you this page – i bet nobody noticed anything of me compiling kernels in the background :) currently i’m running 2.4.22-ac1 with exec-shield-2.4.22-ac1-nptl-D4. i will merge in new patches as available.. need to get some more kernel books and stuff.

* i’ve just learned that toshiba is selling now an all-in-one wlan hotspot box built on gentoo. brave move. i wonder how they circumvent gentoo’s rare but still existing and sometimes very annoying quality assurance troubles (critical bugs, blockers and such). a year ago, i’ve been thinking about an all-in-one-barebone with pre-installed gentoo too, but for soho use only (file repository, application server, mail server, dbms, router, fw etc.). later i’ve bought my current lex barebone to do some prototyping. all in all i think gentoo would be suitable for such a thing, if there just weren’t these darn qa issues gentoo struggles with. regarding the hw, i probably wouldn’t use a lex barebone. as an advantage it has a small price tag, but the two fatal hard disk failures (two different brands) i’ve experienced so far (within about 9 months) make me conclude that the lex engineers probably didn’t test their product thoroughly (both hdd died of overheating). for me it’s not that much of a problem (living at the bleeding edge i’m almost used to failures), but for shipping it to customers it’s way too risky and costly.

it’s like.. gone

my main workstation’s “soundblaster live! 5.1 digital” sound card seems to have stopped working a couple of days ago (don’t know why). the “funny” thing about it: whereas linux simply “disables” the sound device, windows (xp prof) “disables” the device but nevertheless freezes after about 5 minutes from boot-up (that’s a reproducible behaviour). there isn’t even a bsod, just “ice age” forever. my wild guess: could be an uncaught kernel counter overflow or sth similar. however, it might just as well be an unrelated problem of course (though i hope it is related in fact). hardware failures are keeping me pretty busy lately.. let’s see what happens if i remove/replace the sound card..

[update: after removing the sound card, windows stability probs disappeared. now i’ve taken a close look at the card and as i couldn’t find any evidence of a short-circuit (braised conducting paths are pretty easy to detect), i’ve reinstalled it. believe it or not: *drum-roll* the card is recognized again and all the woes have gone :) might just have been a loose connection..]

various bites

tried to apply ingo molnar’s exec shield patch to 2.4.22 vanilla sources but there were 3 (minor) rejects. i hope ingo is still maintaining his patch as i don’t want to miss it anymore (“put an end to your nightmares, get general buffer overflow protection for your server” ;).

reminds me that i actually should

* update some apps on this box
* eventually migrate all the old log entries and try to regain those i lost due to the hdd breakdown

the second task needs to wait, i guess ;)

meanwhile, .GNU has started teething. i wonder how much ms paid for system.windows.forms ;) most of you probably agree that regarding development costs, oss will always win those battles (note the pun, heh ;)

[update 20030828@02:30am: ingo has just sent me a recent version of his exec shield patch (exec-shield-2.4.21-cambridge-D2) which according to him should apply to most 2.4.22 kernels. of course i’ve instantly tried it with a 2.4.22 vanilla kernel – unfortunately there are 11 rejects. hearing he will do a 2.4.22 port soon is excellent news however.. many thanks to ingo for his efforts and this kind and obliging response!]

apache2 and cafepress

found the reason for basic auth not working correctly: sha1 hashed pwds apparently don’t work anymore (on my box). thx to Jouser, quasi, gryzor on #apache for hints.

now i’ve regenerated the htpasswd file using md5 hashes instead (work-around). mind that md5 is considered to be less secure than sha1 in general (see e.g. this posting). for numlock.ch, security is good in either case as nobody except yours truly is supposed to have access to those hashes anyway.

regarding the citation you find in the upper right corner of this site: Jouser pointed me to this shopping page on cafepress. funny :)

apache2 running, /dm too

remerged apache2 and mod_php, made some adjustments. works fine now.

borland togethersoft controlcenter licenses can be downloaded again. sorry for the break.

atm, there are still some issues with basic auth (does not affect /dm).

(btw. if you encounter client-side problems, consider this ;)

last minute news

due to unknown (really weird) problems with upgrading apache to apache2 several services don’t work the way they should. among them the download manager (/dm) for together control center which doesn’t work at all. as i lack the time to fix it right now (my flight is in about 8.5 hours and i’ve neither slept nor prepared my luggage yet), there’s nothing i can do for it at the moment. eventually i’ll try to fix it from remote. if not, this site (i.e. some of its services) will be out of service for at least one week.

i am really sorry for these inconveniences and beg your pardon. rgds dan.

feedster and robots.txt

feedster now partially supports the robots.txt standard.

scott: regarding caching of robots.txt, i’d prefer

1st priority: “Expires” header
2nd priority: UTC rule as above

sounds reasonable (and not too difficult to implement) for
Feedster. If Feedster indexes a domain.com in a session-like
manner, fetching /robots.txt once per session as 2nd priority
would probably be reasonable as well.

(excerpt of my reply of july 19)

reasons: it’s more blogger friendly (handing over control of caching to them) and it makes more sense in modern (short-lived) times. regarding images: remember robots.txt addresses any kind of files (it specifies retrieval based on location, not content). if you plan to offer some fine-grained copyright handling in addition, robots.txt should always be respected nevertheless (it’s the only indexing standard we currently have).

what do you want to administer today?

i guess i should take a look at cfengine. i am not overloaded with system administration work at all (as i am a lucky guy running gentoo linux ;) but cfengine nevertheless looks like an interesting approach. large-scale system automatization is still one of the biggest advantages of unices compared with other oses. the thing i miss with them is a unified object-oriented (rather than flat) access structure (similar to snmp, but deeper and more powerful).

btw. iirc there once were rumors that ms will implement oo in their next major shell release.. i hope linux will have it sooner (though chances are bad ;)