Eigenmatrix.org

I fancy having a go at coding an alternative spam filter plugin for Wordpress.
For me Akismet does capture a hell of a lot but misses the odd few.

I’d like to try integrating something like CRM114 discriminator into a plugin. Maybe into the back end of Spam Karma 2 which seems like a good place to start now that it’s GPL’ed.

FYI Spam Karma has been moved over to Google Code as the lead dev is retiring from its’ active development. His site with a fair amount of docs and info can be found at Dave’s Blog >> Spam Karma.

Cam.

Tags: akismet, crm114 discriminator, filter, spam, spam karma, wordpress

Over the last couple of days have you been struggling with the slick icy pavements in Glasgow ?

Is it just my perception or have Glasgow City Council been really slow off the mark getting roads and pavements treated with road salt, if at all ?

Not only that but can you even find any grit bins ?
I know that they get taken in during the summer months but I think that they must be stockpiled somewhere waiting to be deployed too late to make a difference.

I called Glasgow City Council Road Department today to complain about the pavements outside our shop to be told that they don’t have a list of where the grit bins are and that if I wanted one, I’d need to apply in writing !

If you don’t know where they are,

1. How do you refill them when they are empty ?
2. How do you collect them in come summer ?

A few of our customers from South Lanarkshire said that their council seems to be coping so why can’t ours ?
Come on Glasgow City Council, get your act together and pay more attention to the Met Office !!

</Rant>

Cam.

Tags: bins, glasgow city council, grit, ice, road salt, untreated

I’ve not had the best day trying to get a Gentoo Hardened kernel running in a Xen DomU.

After remembering that adding console=ttyS0 to the grub kernel line can be really helpful when stacks are flying past you, I discovered that there’s a bug in QEMU that’s trying to write to an area protected by the Hardened Kernel.

Here’s the oops;

[root@oxo xen]# xm create -c firewall.eigen
Using config file “./firewall.eigen”.
Started domain firewall.eigen
Linux version 2.6.25-hardened-r10 (root@oxo.eigen) (gcc version 4.1.2 (Gentoo 4.1.2 p1.0.2)) #2 SMP Tue Dec 2 16:00:41 Local time zone must be set–see zic m
Command line: root=/dev/hda3 console=ttyS0 pax_softmode=1
BIOS-provided physical RAM map:
BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)

<snip all the bog standard kernel guff>

Kernel command line: root=/dev/hda3 console=ttyS0 pax_softmode=1
kjournald starting.  Commit interval 5 seconds
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem) readonly.
Freeing unused kernel memory: 252k freed
PAX: swapper:1, uid/euid: 0/0, attempted to modify kernel code
BUG: unable to handle kernel paging request at ffffffff803eb060
IP: [<ffffffff80200c40>]
PGD 3e4067 PUD 3e8063 PMD 2001e1
Oops: 0003 [1] SMP
CPU 0
Modules linked in:
Pid: 1, comm: swapper Not tainted 2.6.25-hardened-r10 #2
RIP: 0010:[<ffffffff80200c40>]  [<ffffffff80200c40>]
RSP: 0000:ffffffff806abe88  EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffffff80600670 RCX: 000000008005003b
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000180018
RBP: ffffffff80600320 R08: ffff81000785b91c R09: ffff81000785b900
R10: ffff81000785b900 R11: 0000000000063851 R12: ffff810007856b60
R13: ffff810007856810 R14: ffffffff80600320 R15: ffffffff80600b00
FS:  0000000000000000(0000) GS:ffffffff80673000(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008004003b
CR2: ffffffff803eb060 CR3: 00000000003e1000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 1, threadinfo ffff81000785a000, task ffff810007856810)
Stack:  ffff810001005780 ffff810001007900 ffffffff80600320 0000000000000000
ffffffff80600000 0000000000000000 00000000fffedd8f ffffffff803d10d2
ffffffff806abf58 0000000000000046 0000000000063881 ffffffff80218566
Call Trace:

Code: 53 32 89 d7 66 41 0b 7c 24 32 74 04 31 c0 8e da 89 ce 48 c1 e6 0c 0f 20 c1 48 89 c8 48 25 ff ff fe ff 0f 22 c0 31 d2 48 8b 04 d3 <48> 89 84 d6 60 b0 3e 80 48 ff c2 48 83 fa 03 75 eb 0f 22 c1 8c
RIP  [<ffffffff80200c40>]
RSP <ffffffff806abe88>
CR2: ffffffff803eb060
—[ end trace 4c1898a7f99977f8 ]—
Kernel panic - not syncing: Attempted to kill init!

As the observant among you may have noticed, I’d already tried switching off PaX but it appears to be deeper than that.

I found some good bugs reports and a Gentoo Bugs entry that’s been reopened.

• Observations from Reto Gantenbein on how the same kernels work with different versions of qemu.
• Discussion between Natanael Copa and Gentoo Hardened’s pageexec on this very issue
• Gentoo Bug 177387 - using app-emulation/qemu with app-emulation/kqemu resulting a GPF on hardened-sources and enabled PAX_KERNEXEC

For your info, I was trying hardened-sources 2.6.25-r10 with gcc 4.1.2 on 64-bit Xeon.
Just let me know if you want a copy of my kernel config.

Cammy.

Tags: attempted to modify kernel code, gentoo, grsec, hardened, kernel panic, oops, pax, swapper