Home Blog Page 910

Zero-Day Linux Kernel Vulnerability Gives Attacker Root Access, Patch Incoming

zero-day-linuxEvery OS with Linux kernel 3.8 or above is affected. A new zero-day Linux kernel vulnerability has been identified (CVE-2016-0728) by a group named Perception Point, and a patch should already be in preparation for Linux distributions.

Linux kernel vulnerabilities are not all that uncommon, and they are found and patched all the time. This is why the Linux-based operating systems are usually more secure than proprietary ones. Everything gets fixed as soon as it’s found, and not a minute later. On the other hand, zero-day vulnerabilities are not all that frequent, especially for the Linux kernel.

Read more at Softpedia

The Three Steps to Building an Innovation Culture

Many organisations treat innovation as something outside of their daily work, but how can they ingrain innovation as part of their everyday processes? 

Whether you are in the C-suite or on the shop floor, there is probably no shortage of ideas, entrepreneurial spirit, and opportunities waiting to be embraced. Often the challenge with innovation in large companies is not the dearth of good ideas but the ability to identify, develop and sustain them and even turn them into potentially profitable business propositions.

Read more at Information Age

LibreOffice 5.1.0 to Integrate OpenGL and Coverity Fixes

The Document Foundation has revealed the second Release Candidate for LibreOffice 5.1.0, the first major update for the 5.x branch of the famous office suite.

The LibreOffice developer are preparing for a major upgrade to the office suite, but that shouldn’t take anyone by surprise since they are following a schedule that’s been known for some time. It’s also worth noting that these kinds of big updates are usually preceded by bug hunts sessions…

How to create a tenant’s network and the packet will go out with the same fixed ip of the vm ?

The source is obviously ask.openstack.org. Question as it sounds originally :-
Can i create a tenant network and the packet will go out with the same fixed ip of the vm?  Assuming the tenant network created is routable or identifiable in the physical network.
   The answer is “YES”. Solution doesn’t require creating Neutron Router ( with or without SNAT enabled ).
Here is important to understand, that bridged neutron external networking won’t allow to disable SNAT, due to SNAT is used  for outbound internet connectivity , however in case of using external network provider non bridged external networking will come into play. Via tap-interface (tap-e3b5d93-e6) attached to br-int neutron  flow will be forwarded to  Port (int-br-ex) , which makes a veth-pair with Port (phy-br-ex) . The last one belongs to bridge br-ex, the bridge which due to OVS configuration (presumably been tuned properly)  will provide vice/versa Internet connectivity.

Complete text may be seen here

A Driving Force for the Connected Car: AGL’s Christian Gromm

Christian2-LargeThe Linux Foundation hosts numerous Collaborative Projects — independently funded software projects that harness the power of collaborative development in an effort to drive innovation. For these projects, the Linux Foundation provides the essential organizational framework so that participants can focus on innovation and results.

To provide greater insight into some of these projects, we are talking with key contributors about what they do and how they got involved. In this article, we talk with Christian (Chris) Gromm, Principal Software Engineer in the Frameworks & Libraries team at Microchip AIS, about his work with the Automotive Grade Linux project.

Automotive Grade Linux (AGL) is aimed at developing a common, Linux-based software stack for the connected automobile. In June of 2015, the AGL announced the AGL Requirements Specification 1.0 — the industry’s first open in-vehicle infotainment (IVI) software specification that allows automakers and suppliers to collaborate directly with AGL’s community of developers. Just this month, the AGL announced that car makers Subaru, Mitsubishi Motors, Mazda, and Ford had joined the project.

The Linux System for the Connected Car

Chris says, “AGL’s main goal is to create a common Linux distribution to serve the needs of the automotive market. With its growing number of members, AGL today has a huge community of developers from pretty much all over the industry (OEMs, Tier1s, software companies, etc.) that help make AGL the Linux system for the connected car.”Automotive-Grade-Linux small

“Additionally, a lot of car makers have joined the AGL, too, to directly inject their requirements for an automotive platform. I think OEMs are the group which will benefit the most from the AGL, because they do not have to re-invent or rebuild (hence saving money) their software stack from scratch with each new model they’re going to release,” Chris explains.

In 2004, Chris joined the engineering team of OASIS SiliconSystems, the inventor of the MOST Network Technology. There, he worked on cryptographic software stacks for DTCP and HDCP, complete reference designs, and firmware for Intelligent Network Controllers (INIC) and tools. Today, however, his main task — in collaboration with other teams — is to develop the MOST Linux driver.

When Microchip joined the Linux Foundation, they became part of the Technical Advisory Board (TAB) mentoring program, and through this, Chris says, “I got the opportunity to have our code reviewed by Greg Kroah-Hartman as a mentor and to push the driver upstream to the mainline kernel.” A previous Linux.com article explained how this one-on-one mentoring process helped put Microchip’s code on the fast track toward acceptance. “It’s great to get all the input,” Chris said in the article. “But without having much experience with the Linux driver project’s mailing list, it’s hard to know what to accept and what to reject. Greg helped us make informed judgments, and we were welcomed into the community.”

He says, “This is the first real open source project that I’ve worked on. It feels great to contribute to a project such as AGL and, of course, to be part of this huge community,” adding that being given the chance to meet Greg Kroah-Hartman in person has fueled his motivation.

As a core team member of the driver development at Microchip, Chris is responsible for providing their driver set to the AGL distribution and maintaining it. Therefore, he attends the weekly technical conference calls to discuss details of the AGL development and is also the maintainer of the AGL’s Automotive Subsystem.

He thinks that the next challenging step for the community is to get AGL out of its fledgling stages and let it evolve into a mature product — specifically, “a product that can be used as a base for the future Linux car.” He adds, “Since AGL has a very strong and growing community and already collaborates with well-known companies, I think this is doable, although it will continue to require some energy.”

Microchip, however, is committed to AGL and is willing to address these needs in terms of the quality of its contributed code and in its role as a subsystem maintainer. Chris finds it especially rewarding that Microchip, and in particular their driver team, were recently named along with the top active developers of the mainline kernel 4.3.

To others who may be interested in participating in the project, Chris offers only encouragement: “If you think you have something to contribute to AGL: do it!” He adds, “I hope that AGL can keep up the momentum that it currently has to become one of the most successful open source projects.”

How Bitcoin Tech Could Spark a Revolution in Government Services

bitcoin-AMThe block chain technology which underpins the cryptocurrency could be put to use by governments.

The bitcoin digital currency is underpinned by a distributed ledger based on block chain technology: in this case the distributed bitcoin ledger ensures that the bitcoins are authentic. But the basic block chain approach can also be modified to incorporate rules, smart contracts, and digital signatures, which could make it a handy tool for government services.

Those who have been attracted to bitcoin largely because it is perceived to be free of government control may be surprised to see the underlying technology enthusiastically promoted by government,…

Read more at ZDNet News

Yelp Releases an Initialization System for Docker Containers

Yelp, an early adopter of Linux containers, has released an initialization system that runs inside of Docker containers, called dumb-init, designed to eliminate signaling issues that can spawn zombie processes.

The company is in the process of moving individual commands into containers so they can slowly migrate tools and infrastructure without disrupting current workflow. This requires their processes to run as if they were running in the legacy system in regards to user input, responding to signals and dying when expected.

Read more at The New Stack

GitHub Developers Express Anger at Lack of Support, Bug Fix Issues

OctocatDevelopers say they feel “ignored” by inadequate support provided by the code repository.

Developers working on projects hosted by GitHub have expressed their frustration at being “ignored” and forced to endure a lack of support by the website.

In an open letter sent to the popular code repository, over 1000 developers agree they are frustrated by the website’s management and support channels, which are meant to provide a key part of …

Read more at ZDNet News

A First-Timer’s Guide to Getting Started with Open Source Code and Communities

OPENHERE purpleSo, you want to start using that open source thing. 

You’ve been reading Opensource.com and there’s a package that you’re excited about. You’d love to give it a try and maybe—just maybe—find a way to contribute to the community that made it (if, you know, it turns out as awesome as that article you found says it is). But where to start?

First-time installations

Every package is a little different—some run on different operating systems than your home machine, some have different dependencies, some expect a certain minimum level of technical expertise.

Read more at OpenSource.com

Development Release: Zorin OS 11 RC

Artyom Zorin has announced the availability of the first development build of Zorin OS 11, an Ubuntu-based desktop distribution made for Linux beginners. This release, based on Ubuntu 15.10, features improved artwork and several new applications: “We’re excited to announce the release of the Zorin OS 11 beta. This is a pre-release version which we created to get your feedback on what we have built so far. With Zorin OS 11, we’ve focused on improving the overall desktop…

Read more at DistroWatch