search for: confin

...he following warnings when trying to run: $ puppet master --no-daemonize /usr/local/build/puppet-bundle/vendor/gems/ruby/1.9.1/gems/ puppet-2.7.12/lib/puppet/external/pson/pure.rb:7:in `<module:PSON>'': iconv will be deprecated in the future, use String#encode instead. Could not load confine test ''operatingsystem'': cannot load such file -- puppet/provider/confine/operatingsystem [repeats a number of times] $ ruby -v ruby 1.9.3p0 (2011-10-30) [x86_64-linux] $ which ruby /usr/local/bin/ruby $ cat /etc/redhat-release Red Hat Enterprise Linux Server release 5.7 (Tikan...

Hi while writing facts I heavily use confines to avoid that facts get loaded where they shouldn''t. However I didn''t yet find out how I can add a multiple decision to a confine. so normally I have confine :kernel => :linux but what when kernel can be linux or sunos? just add 2 confines? or can I nest them? something...

...now /usr/local/lib/ruby/gems/1.9.1/gems/facter-1.6.3/lib/facter/util/config.rb:7: Use RbConfig instead of obsolete and deprecated Config. /usr/local/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require'': iconv will be deprecated in the future, use String#encode instead. Could not load confine test ''operatingsystem'': cannot load such file -- puppet/provider/confine/operatingsystem Could not load confine test ''operatingsystem'': cannot load such file -- puppet/provider/confine/operatingsystem Could not load confine test ''operatingsystem'...

Hello, I''m new to puppet and facter. Initially we are planning on using facter/puppet to inventory machines (Mac, Ubuntu, and RHEL). We plan on writing a number of custom facts. Obviouly some of the facts will only be specific to some OSs. I know there is a "confine" method, but it confuses me. It seems the confine statement in some of the recipes and in the Turnbull book is checked after most of the work is done. Take for example: if FileTest.exists?("/usr/sbin/dmidecode") # Add remove things to query here query = { ''BIOS Informatio...

...iders may share code but they differ on how to delegate its functionality to third-party apps (7zip on windows and zip/unzip on linux as an example). How can I deal with that? Can I clone the provider into different files such as zip-windows.rb and zip-linux.rb, keep the same header and use the confine method? Is there any filename -> provider restriction? Is that the correct approach? I have been searching through other core providers like file but I can not find my answer... Thanks -- You received this message because you are subscribed to the Google Groups "Puppet Users" gr...

Moat of the advanced persistent threats (APT) are initiated via e-mail. Opening an attachment or clicking on a web link starts the process. Why isn't Firefox and Evolution confined with SELinux policy in a way that APT can't damage the rest of the system? Why are we not sandboxing these two apps with SELinux? I've discovered some guidance for sandboxing Firefox using the 'sandbox' command. Once I test it a bit, I'll post the results back here. Seems t...

Hello all, I would like to fit a mixture model whose components are normal distributions confined in a closed interval. Since there are already several packages for EM, I would like to extend one of these instead of writing a new script from scratch. What would be the best way to customize such an existing package for doing that? Which one is the best in terms of extensibility? (e.g mixto...

...not added anything to the Droppables, I think this limits the flexibility of the code. I created a "Container" object which is initialized with an html element id and functions as a droppable object for everything, and the Draggable objects are set with a change callback called "confine" inside the Container object. This prevents the draggable object from moving outside of the container. I think my code is ugly, especially the confine method, what do you think? Could this be better incorporated into the library? I like that I did not have to modify the library at all to...

Quick and dirty: --- lib/facter.rb (revision 203) +++ lib/facter.rb (working copy) @@ -989,6 +989,18 @@ %x{/usr/sbin/scutil --get LocalHostName} end end + Facter.add(:interfaces) do + confine :kernel => :linux + setcode do + %x{/sbin/ifconfig -a -s}.split($/)[1..-1].collect {|line| line.split}.collect {|line| line.first} + end + end + Facter.add(:default_gateway) do + confine :kernel => :linux + setcode do +...

...ing catalog run warning: Certificate validation failed; considering using the certname \ configuration option (The signing request appeared on the master, and I signed it, at the right point in the above sequence.) [ddb@prcapp00 ~]$ sudo puppetca --sign vl31.pinerivercapital.local Could not load confine test ''operatingsystem'': No such file to load -- puppet/provider/confine/operatingsystem Could not load confine test ''operatingsystem'': No such file to load -- puppet/provider/confine/operatingsystem Could not load confine test ''operatingsystem''...

...R 2.15.0, because of this from the Writing R Extensions manual : " Note that there are some implicit restrictions on this mechanism as the basename of the DLL needs to be both a valid file name and valid as part of a C entry point (e.g. it cannot contain ?.?): for portable code it is best to confine DLL names to be ASCII alphanumeric plus underscore. As from R 2.15.0, if entry point R_init_lib is not found it is also looked for with ?.? replaced by ?_?. " But how do I confine the DLL name, is it an option in Makevars? The name of the shared object is currently "data.table.so"...

Een ingesloten tekst met niet-gespecificeerde tekenset is gescrubt ... Naam: niet beschikbaar URL: <https://stat.ethz.ch/pipermail/r-help/attachments/20080916/2d0f3a45/attachment.pl>

...39;s host directory before the node is booted and tries to connect. For instance, I create a node "node_2" and a host file with the following subnet is created: Subnet = fd65:fc41:c50f:2:0:0:0:0/64 When the node boots I see the following messages in tinc's log: 1369133834 tinc.confine[2550]: Connection from 10.241.0.2 port 50858 ... 1369133834 tinc.confine[2550]: Connection with node_2 (10.241.0.2 port 50858) activated ... 1369133834 tinc.confine[2550]: Got ADD_SUBNET from node_2 (10.241.0.2 port 50858): 10 3fba6e6f node_2 fd65:fc41:c50f:2:0:0:0:0/64#10 1369133834 tinc.conf...

...hat said, I'm wondering if this isn't more of a bug or a need to adjust the selinux policy packages to allow the functionality. The user story is this: Gnome3 user wants to burn a CD/DVD. The system is selinux enforcing, selinux boolean cdrecord_read_content is set to on, and the user is confined to staff_u. When the user runs Brasero to burn a disk, the burn operation fails. /var/log/audit/audit.log contains the following: type=AVC msg=audit(1556724762.446:1133340): avc: denied { read } for pid=8296 comm="growisofs" name="devices" dev="proc" ino=4026532...

...seems to require that the root directory > be > owned by root and not group or world writable, so I think, no, not > unless you make local source changes. Yes, you are right. The chroot directory can not be writable. We were there once and they called it CVE-2009-2904. In short, if the confined user has write access to the chroot directory, there are ways how to get out, gain privileges and or do other nasty things. You should not do that. If you aim for the end-user comfort that he does not have to change directory before uploading/downloading files, there is -d switch to the sftp-se...

When does echo 0 > /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some package, it seems to work (not being blocked). When would doing something not work because selinux is watching it (or whatever that process is doing)? Thanks, -wes

...alar opts; they do not optimize > vector operations and will not deal with SV either. > > 3. With builtins there are fewer places to pay attention to, > as most of the compiler is already dealing with builtins in > a neutral way. > > 4. The builtin approach is more targeted and confined: it allows > to amend one optimizer at a time. > In the alternative of changing the IR, one has to touch all the > passes in the initial implementation. Interestingly, with similar considerations, I've come to the opposite conclusion. While in theory the intrinsics and opaque types...

Hi puppet masters, while working on my site I came across a requirement that might be helpful for others as well.... With the aim of confining human errors as much as possible, I thought that it would be nice to have yum repositories disabled so that specific repositories could be enabled for certain packages. This is easily implementable via command-line, but I found that the package manager''s options were hard-coded i...

...do this is to make all C IO calls that need OS > specific hacks go into the compatibility module. Eg for open() > calls: > > int _flac_open(....){ #if win32 ... #else if os2 ... #else ... > [generic call to open() without hacks] #endif } > > All those ifdefs will at least be confined rather than spread out > through the code. I did it plibc-style: in compat.h: #if defined(_WIN32) #define FOPEN grabbag__fopen_utf8_wrapper #else #define FOPEN fopen #endif in grabbag: #if defined(_WIN32) <implement grabbag__fopen_utf8_wrapper, which has the same signature as fopen, but...

...;modules" are rails, most are still python, including the reporting side of things. Any suggestions? I have used FOP in the past and there is no way it''s powerful enough for some of the things we do. In some synarios, we really had to push the limits of ReportLab (and sometimes confined by them). Thanks! Jeremy