Source code (security) auditing utilities available in Debian

Debian GNU/Linux provides several packages that can be used to audit C/C++ source code. First three search for programming errors that might lead to potential security flaws:

flawfinder rats pscan

Next two tools find bugs in C and C++ source code by doing a static check too, but their checks are not security-related:

splint cppcheck [...]

OpenWRT meets OpenDNS

To make whole home network use OpenDNS I need to change only 3 files on my OpenWRT router.

First step – resolv.conf

Create /etc/resolv.conf.opendns with OpenDNS servers addresses, eg:

nameserver 208.67.222.222 nameserver 208.67.220.220

Make sure /etc/resolv.conf defines 127.0.0.1 as a name server.

Second step – dnsmasq

In /etc/config/dhcp set resolvfile variable:

option resolvfile ‘/etc/resolv.conf.opendns’

Restart [...]

How to build RPM packages in CentOS chroot on… Debian!

Debian GNU/Linux has its sbuild and (much easier) pbuilder, but can you imagine that Debian includes software to create RPM-based chroots and build RPM packages under them?! Package called mach provides tool similar to pbuilder. It create chroots, manage them and allow user to create RPMs in separated, clear and reproducible environment. Just like packages [...]

ESE Key Daemon 1.2.4 released

New version of ESE Key Daemon was released today.

Release notes:

Fixed cross-compilation bug reported by hartleys. Removed debian directory (will try to include esekeyd in Debian). Removed old directory (Linux 2.4 users can use 1.2.3, but 2.4 support is no longer maintained). Removed lib directory (any modern (g)libc has getopt).

Download: esekeyd-1.2.4.tar.gz (.asc)

MD5: [...]

Web browser anonymity threats

Anonymity in important for many people. Few years ago, it was problematic issue only for hackers, human rights workers and anonymity freaks. They want to keep they identity in secret for obvious reasons. They were traced only by law enforcement agencies and government. Today everything is much more difficult. Hundreds of advertising agencies trying to [...]

How to mount file systems easily in Midnight Commander

Everyone know Midnight Commander default user menu (invoked with <F2> key). It contains some (more or less) useful commands and it is… customizable.

If you want to use different menu for some directory you just need to create file .mc.menu in target directory. I made a simple menu form /media/.

[...]

Deploying IPsec in small LAN in 3 easy steps

I think about installing IPsec on computers in my home LAN for some time. There are many configurations possible: tunnel mode, transport mode, peer-to-peer solution or star topology with single VPN hub. Also there are different IPsec implementations. KAME for *BSD, Openswan, strongSwan and Linux 2.6 PF_KEY implementation (which can be used with setkey and [...]

Monitoring mailbox in Maildir format with bash and pam_mail

After switch to Maildir format mailbox my bash stopped monitoring new mail. To bring this functionality back I need to set location of my new mailbox:

export MAIL=~/Maildir

And after $MAILCHECK seconds I got You have new mail in /home/kb/Maildir.

To set $MAIL for all login shells and for all user I use pam_mail. To [...]

Adding S3TC Support to Mesa/DRI in Debian

S3TC (sometimes called DXTn or DXTC) is a proprietary image compression algorithm. This was patented (US Patent 5,956,431) and thus Mesa cannot use it directly nor external library can enter Debian archive. If you want to have libtxc-dxtn installed you have to do it yourself.

[...]

ZSNES + AMD64 + Debian + OpenGL = troubles?!

ZSNES is a GPL licensed emulator of the Super Famicom and Super Nintendo Entertainment System (SNES) video game systems. Large part of ZSNES is written in assembly. Fortunately it works under GNU/Linux. Debian has a zsnes package, but unfortunately only for i386. Binary package is not available for AMD64. So? Lets build one!

[...]