rss.png profile for ebal on Stack Exchange, a network of free, community-driven Q&A sites
Oct
31
2012
ebalaskas:
Oct
25
2012
Hellenic Post (?)

I live in Greece.

I need to find some info about a product of hellenic post so i wrote at my url bar: www.elta.gr

eltagr.png

The first page is in Greek language!!!

There is no greek words but thats okei!
You cant click on GR flag but thats okei too.

To read something in greek you have to click on gb flag and then click on gr flag !

but thats okei …

From UX point this is a disaster!

the proof:

eltagr02.png

Tag(s): elta, UX
Oct
12
2012
ebalaskas: Copying Is Not Theft…
Oct
12
2012
ebalaskas: I have changed my…

identica.pngI have changed my index page to honor Dennis MacAlistair Ritchie. http://balaskas.gr/ We havent forgotten you.

from Updates from ebalaskas on Identi.ca!

Oct
10
2012
upgrade BusyBox on CyanogenMod

To whom dont know what busybox is, plz stop using linux, android or any embedded device.

Step 1. Learn what version of kernel your device has.

my mobile use Marvel (ARMv6) kernel.

Step 2. Download your binary from here download busybox


wget -c http://www.busybox.net/downloads/binaries/latest/busybox-armv6l

Step 3. Copy busybox to your device


adb push busybox-armv6l /mnt/sdcard/

Step 4. Enter your device


adb shell

Step 5. Remount /system with read-write access


mount -o rw,remount /system
cd /system/xbin/

Step 6. Copy busybox to your system xbin dir


cp /mnt/sdcard/busybox-armv6l /system/xbin/

Step 7. Change permissions


chmod 0755  /system/xbin/busybox-armv6l

Step 8. Move your old busybox - dont remove it


cp busybox BusyBox-v1.19.4-cm7

Step 9. replace busybox


# busybox-armv6l cp busybox-armv6l busybox

simple as that !

Oct
09
2012
Fedora 17 Selinux Ugrade - Bump!

A customer of mine, had me approached to install a virtualization solution at his company.

The first goal was portability the second productivity.
I had to find a way (transparent from their employes) to remove their work environment from their hardware.

Productivity is easy … just remove any unnecessary software and keep their desktops as clean as they can be.

“Attention Span” is the big monster.

I found that with no-sound they couldnt listen to youtube or to internet radio stations or mp3 and they had to install a radio at their office.
One radio station, one music for all. That approach was much better than every other solution i could figure out.

Imaging a work space with 15 people, how every one wants to listen to a different music/news, youtube or whatever.
That was noise - and noise is the enemy!

As for portability - we dont want to use this old hardware - was easy enough too.
I’ve built a tinycorelinux image and convert every PC to a thin or thick client.
RDP to their Terminal Server was the only thing i had to ensure is working.

Dnsmasq is the simplest and best solution to do that (PXE).

created /tftpboot/ dir and worked my way through that.

I used fedora cause it is a virtualization box with all the latest versions of software.
I wanted to test fedora and selinux wasnt so bad after all.

Till the latest upgrade!


/tftpboot                                          directory          system_u:object_r:tftpdir_t:s0 
/tftpboot/.*                                       all files          system_u:object_r:tftpdir_t:s0

dnsmasq now needs dnsmasq_t


type=AVC msg=audit(1349450414.500:20456): avc:  denied  { read } for  pid=27175 comm="dnsmasq" name="tftpboot" dev="dm-1" ino=524451 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=unconfined_u:object_r:tftpdir_t:s0 tclass=dir

relabeling is out of question.

The solution is to transfer all the necessaries files to a new directory that


semanage fcontext -l 

doesnt marked as something else and chcon the entire directory (recursive) to label to dnsmasq_t all files and dirs.

or to add a new policy rule that accepts dnsmasq_t for /tftpboot directory
or DISABLE selinux cause you’ll never now what else will through to you !

Its unacceptable to make such core changes without have a plan for backwards compatibility or a way to inform your faithful admin that he/shee will have a problem because you have destroyed everything he/she built the last year!.

Oct
04
2012
ebalaskas: RT @erkanyilmaz ” HSTS…

identica.pngRT @erkanyilmaz " HSTS is supported in Google #, # 4, and the popular NoScript Firefox extension”

from Updates from ebalaskas on Identi.ca!

Oct
04
2012
ebalaskas: goodbye #http, hello #hsts…
Oct
04
2012
ebalaskas: RT @samatjain python-sha3: C-based…

identica.pngRT @samatjain python-sha3: C-based !Python module implementing new SHA-3 "Keccak" hash http://ur1.ca/ah41b

from Updates from ebalaskas on Identi.ca!

Oct
03
2012
vim wrapper for dns zone files

This blog post is based on Sotiris Tsimbonis’s work.

You should always checkzone the dns zone file you have just edited.

But you can also automate this, with a vim wrapper.

small changes @ Thu, 04 Oct 2012 14:03:15 +0300


#!/bin/sh
# ebal, Thu, 04 Oct 2012 14:03:15 +0300

/usr/sbin/named-checkconf 
RES=$?

if [ ${RES} -gt 0 ]; then
    echo ""
    echo "Fix the above errors before editing your zone file"
    echo ""
    exit ${RES}
fi

ZONE=$1
PREFIX="/var/named/"
CHECKSUM=`/usr/bin/sha1sum ${PREFIX}/${ZONE}`

/usr/bin/vim ${PREFIX}/${ZONE}

echo ""
echo "Checking ${ZONE} for errors..."
echo ""

/usr/sbin/named-checkzone -i local ${ZONE} ${PREFIX}/${ZONE}
RES=$?

if [ ${RES} -gt 0 ]; then
         echo ""
        echo "You need to fix the errors and try again."
        echo ""
        exit ${RES}
fi

SHA1SUM=`/usr/bin/sha1sum ${PREFIX}/${ZONE}`
if [[ "$CHECKSUM" != "$SHA1SUM" ]]; then
    echo "reloading zone ..."
    /usr/sbin/rndc reload  ${ZONE} 
fi

Tag(s): vim, wrapper, dns
Oct
03
2012
ebalaskas: #vim wrapper for editing…

identica.png# wrapper for editing # zone files http://ur1.ca/agy0u

from Updates from ebalaskas on Identi.ca!