From william at knowmad.com  Wed Aug  9 05:25:53 2006
From: william at knowmad.com (William McKee)
Date: Wed, 9 Aug 2006 08:25:53 -0400
Subject: [Charlotte.PM] Fwd: Newsletter from O'Reilly UG Program, August 4
Message-ID: <20060809122553.GK10604@knowmad.com>

Here's the latest from O'Reilly. We have several books available to
review[1]. The more we review, the more we can request!


Hope ya'll are having a good summer,
William

[1] http://charlotte.pm.org/kwiki/index.cgi?Library


----- Forwarded message from Marsee Henon <marsee at oreilly.com> -----

> To: william at knowmad.com
> From: Marsee Henon <marsee at oreilly.com>
> Date: Fri, 04 Aug 2006 15:10:55 -0700
> Subject: Newsletter from O'Reilly UG Program, August 4
> 
> ================================================================
> O'Reilly UG Program News--Just for User Group Leaders
> August 4, 2006
> ================================================================
> -O'Reilly Author Gorden Meyer Available as a Speaker
> -Put Up an O'Reilly Euro OSCON Banner, Get a Free Book
> -Promotional Material Available
> ----------------------------------------------------------------
> Book Info
> ----------------------------------------------------------------
> ***Review Books are Available 
> Copies of our books are available for your members to review--just send
> me an email to request books and and please include the book's ISBN
> number (click on the "More Details" link to find the ISBN.) Let me know
> if you need your book by a certain date. Allow at least four weeks for
> shipping.
> 
> ***Please Send Copies of Your Book Reviews
> Email me a copy of your newsletter or book review.
> For tips and suggestions on writing book reviews, go to:
> <http://ug.oreilly.com/bookreviews.html>
> 
> ***Group Purchase Discounts are Available
> Please let me know if you are interested and I can put you in 
> touch with our sales department.
> 
> ----------------------------------------------------------------
> General News or Inquiries
> ----------------------------------------------------------------
> ***O'Reilly Author Gorden Meyer is Available as a Speaker
> Gordon Meyer ("Smart Home Hacks") gives lively presentations about 
> fun and practical do-it-yourself home automation projects. His 
> talkS appeal to those who want to live the 21st century life, 
> as well as those who just appreciate clever and interesting ways 
> to exploit and combine different technologies. Gordon is a frequent 
> speaker at Apple's WWDC, MacWorld, and many other conferences. He 
> can tailor his  talk to Mac, Windows, Unix, and other user groups. 
> He lives in Chicago, but travels frequently and will consider 
> invitations for other locations. For more info, go to:
> <http://www.gordonmeyer.com or email bb at g2meyer.com>
> 
> 
> ***Put Up an O'Reilly EuroOSCON Banner, Get a Free Book
> We're looking for user groups to display our conference banner on their
> web sites. If you send me the link to your group's site with our 
> banner, I'll send you the O'Reilly book of your choice.
> 
> EuroOSCON Banners:
> <http://ug.oreilly.com/banners/eurooscon/>
> 
> 
> ***Promotional Material Available:
> The following items are available for your next meeting. (Let me know
> the item and the amount you'd like):
> 
> -Linuxworld Pass in PDF form (register online by Aug 13.)
> -MAKE Magazine Volume 6 (limit one copy per group)
> -30% UG Discount bookmarks <http://ug.oreilly.com/banners/discount/>
> 
> ================================================================
> O'Reilly News for User Group Members
> August 4, 2006
> ================================================================
> ----------------------------------------------------------------
> New Releases
> ----------------------------------------------------------------
> -Building a VoIP Network with Nortel's Multimedia Communication Server 5100
> -CSS: The Missing Manual
> -Designing and Building Enterprise DMZs
> -Firewall Policies and VPN Configurations
> -Google Hacks, Third Edition
> -JavaScript: The Definitive Guide, Fifth Edition
> -Mastering Regular Expressions, Third Edition
> -Metasploit Toolkit for Penetration Testing, Exploit Development, and
>  Vulnerability Research
> -Music Technology Magazine's Ten Minute Masters
> -Network Security Assessment
> -The Photoshop Anthology
> -PHP Cookbook
> -Pragmatic Unit Testing in C# with NUnit, Second Edition
> -Programming Python, Third Edition
> -The Relational Database Dictionary
> -Ruby Cookbook
> -Scripting VMware Power Tools
> -Stealing the Network
> -Stephen Johnson on Digital Photography
> -Ubuntu Linux for Non-Geeks
> -Web Application Security
> -Windows Developer Power Tools (Rough Cuts)
> -Windows for Intel Macs (PDF)
> -Windows Media Center Wizardry (PDF)
> 
> ----------------------------------------------------------------
> Upcoming Events
> ----------------------------------------------------------------
> -Visit O'Reilly at LinuxWorld, San Francisco, CA--August 15-17
> -Author Rich Gibson at the Apple Store, San Francisco, CA--August 24
> -O'Reilly at RailsConf Europe, Central London, UK--
>  September 14-15 
> -O'Reilly at OpenCON 2006,Venice, Italy--December 2-3
> -O'Reilly Authors at Flash on the Beach, Brighton, UK--December 4-6
> 
> ----------------------------------------------------------------
> Conference News
> ----------------------------------------------------------------
> -EuroOSCON Registration is Open
> -ETEL 2007 Call for Participation
> -OSCON 2006 Coverage
> ----------------------------------------------------------------
> News
> ----------------------------------------------------------------
> -Last Chance to enter our Contest (US Residents Only)
> -Pocket Refs in PDF
> -User Group Members receive a special 30% discount on 
>  Learning Lab Courses
> -Interview with Jakob Nielsen
> -Download our product catalogs in PDF
> -Building a Desktop Firewall
> -What Is OpenDocument?
> -Linux on the Nokia 770 Internet Tablet
> -The CakePHP Framework
> -Review: Frontier Design TranzPort
> -Automate Your Favorite Photoshop Routines
> -So Del.icio.us! Intelligent Tagging for the Mac User
> -How Does Open Source Software Stack Up on the Mac? 
> -Best Windows Admin Downloads
> -Drag and Drop Ajax Programming with Atlas 
> -Deploying BIRT
> -What is Geronimo?
> -Receive MAKE's "Weekend Project" PDF Podcast Through iTunes
> -MacOSG Interviews O'Reilly Editor Edie Freedman
> -OSCON Feedback
> 
> ---------------------------------------------------------------
> New Releases--Books, PDFs, and Rough Cuts
> ----------------------------------------------------------------
> Get 30% off a single book or 35% off two or more books from O'Reilly, 
> No Starch, Paraglyph, PC Publishing, Pragmatic Bookshelf, SitePoint, 
> or Syngress books you purchase directly from O'Reilly.
> Just use code DSUG when ordering online or by phone 800-998-9938.
> <http://www.oreilly.com/store/>
> 
> Free ground shipping on orders of $29.95 or more.
> For more details, go to:
> <http://www.oreilly.com/news/freeshipping_0703.html>
> 
> Did you know you can request a free book to review for your
> group? Ask your group leader for more information.
> 
> For book review writing tips and suggestions, go to:
> <http://ug.oreilly.com/bookreviews.html>
> 
> ***Building a VoIP Network with Nortel's Multimedia Communication 
>    Server 5100
> Publisher: Syngress
> ISBN: 1597490784
> This is the only book you need if you are tasked with designing,
> installing, configuring, and troubleshooting a converged network built
> with Nortel's Multimedia Concentration Server 5100, and Multimedia
> Communications Portfolio (MCP) products. With this book, you'll be able
> to design, build, secure, and maintain a cutting-edge converged
> network to satisfy all of your business requirements.
> <http://www.oreilly.com/catalog/1597490784/index.html>
> 
> 
> ***CSS: The Missing Manual
> Publisher: O'Reilly
> ISBN: 0596526873
> Cascading Style Sheets are now a reliable method for handling all kinds
> of Web page presentations--from fonts and colors to page layout. But
> due to CSS's complexity, most designers treat it as a kind of
> window-dressing to spruce up the appearance of their sites without
> tapping into the real power of CSS. "CSS: The Missing Manual" explains 
> how you can use this powerful to build sparklingly new web sites, or 
> refurbish old sites that are ready for an upgrade.
> <http://www.oreilly.com/catalog/csstmm>
> 
> 
> ***Designing and Building Enterprise DMZs
> Publisher: Syngress
> ISBN: 1597491004
> "Building DMZs for Enterprise Networks" covers a sorely needed area in
> critical business infrastructure: the Demilitarized Zone. DMZs play a
> crucial role in any network consisting of a Hosted Internet Web Server,
> internal servers which need to be segregated, External to Internal DNS
> Server, and an email SMTP Relay Agent. This book covers what an
> administrator needs to plan out and integrate a DMZ into a network for
> small, medium, and Enterprise networks.
> <http://www.oreilly.com/catalog/1597491004>
> 
> 
> ***Firewall Policies and VPN Configurations
> Publisher: Syngress
> ISBN: 1597490881
> The security provided by firewalls and VPNs is only as strong as the
> protocol rules and policies that you create. This book provides 
> fundamental information necessary to configure firewalls and build VPNs 
> and DMZs to survive the dangers of today's internet. Products covered 
> include Cisco PIX Firewall, ISA Server 2004, Check Point NGX, Juniper's 
> NetScreen Firewalls, SonicWall, and Nokia. 
> <http://www.oreilly.com/catalog/1597490881>
> 
> 
> ***Google Hacks, Third Edition
> Publisher: O'Reilly
> ISBN: 0596527063
> Now that new features and services such as Google Maps, Google Talk, and
> Google Desktop have been added to the expanding Google universe, we've
> made the third edition of this bestseller into an infinitely more useful
> book for this powerful search engine. You'll not only find dozens of
> hacks for new Google services, but plenty of updated tips, tricks, and
> scripts for hacking the old ones. 
> <http://www.oreilly.com/catalog/googlehks3>
> 
> 
> ***JavaScript: The Definitive Guide, Fifth Edition
> Publisher: O'Reilly
> ISBN: 0596101996
> The indispensable reference for JavaScript programmers since 1996,
> "JavaScript: The Definitive Guide, Fifth Edition" is completely revised
> and expanded to cover JavaScript as it is used in today's Web 2.0
> applications.
> <http://www.oreilly.com/catalog/jscript5>
> 
> 
> ***Mastering Regular Expressions, Third Edition
> Publisher: O'Reilly
> ISBN: 0596528124
> Written in the lucid, entertaining tone that makes a complex, dry topic
> become crystal-clear to programmers, and sprinkled with solutions to
> complex real-world problems, "Mastering Regular Expressions, Third
> Edition" offers a wealth information that you can put to immediate use.
> <http://www.oreilly.com/catalog/regex3>
> 
> 
> ***Metasploit Toolkit for Penetration Testing, Exploit Development, and
> Vulnerabiity Research
> Publisher: Syngress
> ISBN: 1597490741
> This is the first book available for the Metasploit Framework (MSF),
> the attack platform of choice for one of the fastest growing careers 
> in IT security: Penetration Testing. The book and companion web site 
> will provide professional penetration testers and security researchers 
> with a fully integrated suite of tools for discovering, running, and 
> testing exploit code.
> <http://www.oreilly.com/catalog/1597490741>
> 
> 
> ***Music Technology Magazine's Ten Minute Masters
> Publisher: PC Publishing
> ISBN: 187077504X
> "Music Tech Magazine's Ten Minute Masters" is a collection of explanations 
> of music theories, technologies, protocols, and processes. As useful to the 
> newcomer as to the expert, the collection gives everyone sufficient 
> information to grasp a concept in the space of 1,500 words--or just ten 
> minutes! From analogue recording to Audio CDs, from cabling to copyright, 
> and from filters to Firewire, this is an invaluable collection for anyone 
> involved in the music technology field.
> <http://www.oreilly.com/catalog/187077504X>
> 
> 
> ***Network Security Assessment
> Publisher: Syngress
> ISBN: 1597491012
> This book will take readers from the discovery of vulnerabilities and
> the creation of the corresponding exploits, through a complete security
> assessment, all the way through deploying patches against these
> vulnerabilities to protect their networks. This book is unique in that
> it details both the management and technical skill and tools required to
> develop an effective vulnerability management system. 
> <http://www.oreilly.com/catalog/1597491012>
> 
> 
> ***The Photoshop Anthology
> Publisher: SitePoint
> ISBN: 0975841920
> "The Photoshop Anthology" is full-color, 101 question-and-answer book
> for web designers who want to use Photoshop more effectively to build 
> web sites and create better looking web graphics. The book will show 
> you how you can use Photoshop to create buttons, backgrounds, text 
> effects, optimized photos, web interfaces, animated GIFs, and more for 
> your web site. Additionally, the book will walk you through the entire 
> process of designing a Website in Photoshop--from using layers to keep
> organized to using the slice tool to create individual web site elements.
> <http://www.oreilly.com/catalog/0975841920>
> 
> 
> ***PHP Cookbook
> Publisher: O'Reilly
> ISBN: 0596101015
> When it comes to creating dynamic web sites, the open source PHP
> language is red-hot property: used on more than 20 million web sites
> today, PHP is now more popular than Microsoft's ASP.NET technology. With
> our Cookbook's unique format, you can learn how to build dynamic web
> applications that work on any web browser. This revised new edition
> makes it easy to find specific solutions for programming challenges.
> <http://www.oreilly.com/catalog/phpckbk2>
> 
> 
> ***Pragmatic Unit Testing in C# with NUnit, Second Edition
> Publisher: Pragmatic Bookshelf
> ISBN: 0977616673
> All over the world, software teams are using unit testing both to verify
> their code and as a way of helping them design better code. This book is
> unique in the way it covers two aspects: showing developers both how and 
> what?
> <http://www.oreilly.com/catalog/0977616673>
> 
> 
> ***Programming Python, Third Edition
> Publisher: O'Reilly
> ISBN: 0596009259
> An industry standard just got even better. This bestseller from O'Reilly
> has been updated to reflect the many changes introduced by Python 2.5.
> It teaches the most common Python application domains from the ground up
> with plenty of real-world examples and in-depth discussion. Ideal for
> novices as well as advanced practitioners.
> <http://www.oreilly.com/catalog/python3>
> 
> 
> ***The Relational Database Dictionary
> Publisher: O'Reilly
> ISBN: 0596527985
> "The Relational Database Dictionary" is exactly what designers,
> programmers, students, and database administrators (DBAs) need, a single
> source where they can find precise definitions. Authored by C.J. Date, a
> respected expert, this pocket-sized dictionary is the definitive
> glossary of terms and concepts used with relational databases such as
> Oracle products, IBM's DB2, Microsoft's SQL Server, MySQL, and
> PostgreSQL. It provides structure and clarity that will help build
> proficiency and accuracy in working with today's relational databases.
> <http://www.oreilly.com/catalog/relationaldb>
> 
> 
> ***Ruby Cookbook
> Publisher: O'Reilly
> ISBN: 0596523696
> From data structures and algorithms, to integration with cutting-edge
> technologies, the "Ruby Cookbook" has something for every programmer.
> When you need to solve a problem, don't reinvent the wheel: look it up
> in the Cookbook.
> <http://www.oreilly.com/catalog/rubyckbk>
> 
> 
> ***Scripting VMware Power Tools
> Publisher: Syngress
> ISBN: 1597490598
> This book covers the native tools that VMware provides with ESX Server.
> It then discusses in detail the different scripting API's and how they
> can be leveraged to provide some very useful, practical and time saving
> tools to manage a virtual infrastructure. From virtual server
> provisioning to backups and everything in between, all will be covered
> in detail with real world examples that have been tested and will work
> either copied directly from the book or with slight modifications for
> the reader's specific environments.
> <http://www.oreilly.com/catalog/1597490598>
> 
> 
> ***Stealing the Network
> Publisher: Syngress
> ISBN: 1597490814
> The best-selling "Stealing the Network" series reaches its climactic
> conclusion as law enforcement and organized crime form a high-tech web
> in an attempt to bring down the shadowy hacker-villain known as Knuth in
> the most technically sophisticated Stealing book yet. As with previous
> titles, "How to Own a Shadow" is a fictional story that demonstrates
> accurate, highly detailed scenarios of computer intrusions, and
> counter-strikes.
> <http://www.oreilly.com/catalog/1597490814>
> 
> 
> ***Stephen Johnson on Digital Photography
> Publisher: O'Reilly
> ISBN: 059652370X
> A master photographer and teacher since 1977, Stephen Johnson is widely
> recognized as a pioneer of digital photography. His new book chronicles
> his ride on the bleeding edge of this medium's evolution, and provides a
> practical in-depth introduction to digital photography that includes the
> latest techniques. Complete with beautiful color photographic examples
> and illustrations, this book is a unique, passionate, holistic
> examination for every student of photography.
> <http://www.oreilly.com/catalog/stephenjohnson>
> 
> 
> ***Ubuntu Linux for Non-Geeks
> Publisher: No Starch Press
> ISBN: 1593271182
> This newbie's guide to Ubuntu lets readers learn by doing. Step-by-step
> projects build upon earlier tutorial concepts and increase the reader's
> understanding of topics such as installing new software; Internet
> connectivity; working with removable devices; and even handling DVDs and
> iPods. Average desktop users are eased into the world of commands, thus
> allowing them to work with script-based applications; converting RPMs to
> DEB files; and compiling software from source.
> <http://www.oreilly.com/catalog/1593271182>
> 
> 
> ***Web Application Security
> Publisher: Syngress
> ISBN: 159749061X
> This book defines web application security, why it should be addressed
> earlier in the lifecycle in development and quality assurance, and how
> it differs from other types of internet security. Additionally, the book
> examines the procedures and technologies that are essential to
> developing, penetration testing, and releasing a secure web application.
> Through a review of recent web application breaches, the book will
> expose the prolific methods hackers use to execute web attacks using
> common vulnerabilities such as SQL Injection, Cross-Site Scripting, and
> Buffer Overflows in the application layer. By taking an in-depth look at
> the techniques hackers use to exploit web applications, readers will be
> better equipped to protect confidential. 
> <http://www.oreilly.com/catalog/159749061X>
> 
> 
> ***Windows Developer Power Tools (Rough Cuts)
> Publisher: O'Reilly
> ISBN: 0596527926
> There is a wealth of open and free software available today for Windows
> developers who want to extend the development environment, reduce
> development effort and increase productivity. "Windows Developer Power
> Tools" is an encyclopedic guide to more than 100 free and open source
> tools available to programmers who build applications for Windows
> desktops and servers, including web applications and services. With its
> unique task-oriented organization, this book will help you find the
> tools you need to solve common (and uncommon) problems. Each tool in the
> book includes a capsule summary--a mini user's guide--to help
> readers get up to speed quickly. This one-stop resource covers a wide range of open
> source and freeware tools to help you answer questions around planning,
> developing, testing, and rolling out great software.
> <http://www.oreilly.com/catalog/windowsdpt>
> 
> 
> ***Windows for Intel Macs (PDF)
> Publisher: O'Reilly
> ISBN: 059652840X
> Mac users can easily install and use Windows thanks to Boot Camp and
> Parallels Desktop for Macs with Intel processors. But once you've
> installed Windows, then what? This guide by Todd Ogasawara, a Microsoft
> MVP and Mac journeyman, will help you unite Windows software with
> Mac hardware.
> <http://www.oreilly.com/catalog/windowsforintelmacs>
> 
> 
> ***Windows Media Center Wizardry (PDF)
> Publisher: O'Reilly
> ISBN:0596527845
> "Windows Media Center Wizardy" is a guide to getting the most out of a
> PC running Windows XP Media Center Edition 2005, delving into the hidden
> features and extended capabilities not at first apparent when using this
> extremely powerful interface. This book is written as a series of "How
> To" sections, each concentrating on an area of functionality little
> exploited by typical users, although extremely useful when exposed.
> <http://www.oreilly.com/catalog/coolthings>
> 
> 
> ***MAKE Magazine Subscriptions
> The annual subscription price for four issues is $34.95. When you
> subscribe with this link, you'll get a free issue--the first one plus
> four more for $34.95. So subscribe for yourself or friends with this
> great offer for charter subscribers: five volumes for the cost of four.
> Subscribe at:
> <http://www.makezine.com/go/ugsub>
> 
> ================================================
> Upcoming Events
> ================================================
> ***For more events, please see:
> http://events.oreilly.com/
> 
> 
> ***Visit O'Reilly at LinuxWorld, San Francisco, CA--August 15-17
> Stop by our booth (#928) to check out our latest Linux and open source
> titles. We'll also have author appearances from Gerald Carter ("LDAP
> System Administration"), Chris DiBona ("Open Sources 2.0"), Greg
> Kroah-Hartman ("Linux Kernel in a Nutshell"), and Kyle Rankin ("Ubuntu
> Hacks").
> <http://www.linuxworldexpo.com/live/12/events/12SFO06A>
> 
> 
> ***Author Rich Gibson at the Apple Store, San Francisco, CA--August 24
> Join Rich Gibson ("Google Maps Hacks" and "Mapping Hacks") and BMUG
> DBNet SIG for an evening at the Apple Store in San Francisco at 6pm.
> <http://www.apple.com/retail/sanfrancisco/>
> 
> 
> ***Visit O'Reilly at RailsConf Europe, Central London, UK--
>   September 14-15 
> Come hear David Heinemeir Hansson ("Agile Web Development with Rails"),
> Chad Fowler ("Rails Recipes and Programming Ruby, Second Ed."), Dave
> Thomas ("Programming Ruby, Second Ed." and "Agile Web Development with
> Rails"), and Kathy Sierra (co-founder of the "Head First" series and
> javaranch.com). Stop by the O'Reilly stand to purchase books at a
> discount and say hi to our authors at the First European RailsConf 2006.
> <http://europe.railsconf.org/>
> 
> 
> ***Visit O'Reilly at OpenCON 2006,Venice, Italy--December 2-3
> OpenCON is the first conference entirely dedicated to OpenBSD and
> organized by OpenBEER, the Italian OpenBSD users group. Topics include
> information security, secure programming, and anything related to
> OpenBSD. Come and visit the O'Reilly booth where you will be able to
> purchase our books at a discount.
> <http://www.opencon.org/index.php>
> 
> 
> ***O'Reilly Authors at Flash on the Beach, Brighton, UK--December 4-6
> Meet Joey Lott ("Flash 8 Cookbook," "ActionScript 3.0 Cookbook," and
> "Programming Flash Communication Server") and Robert Reinhardt
> ("Programming Flash Communication Server") at this Flash Design and
> development conference. Don't forget to visit the O'Reilly stand where
> you'll get a discount on all our books.
> <http://www.flashonthebeach.com/>
> 
> ================================================
> Conference News
> ================================================
> ***EuroOSCON Registration is Open
> The preliminary schedule for the 2nd annual EuroOSCON, O'Reilly's
> European Open Source Convention, 18-21 September in Brussels, is now
> available. Featured speakers include Jeff Waugh, Damian Conway, Greg
> Stein, Rasmus Lerdorf, Marten Mickos, Tim O'Reilly, and many others.
> <http://conferences.oreilly.com/eurooscon/>
> 
> User Group discounts are available, email marsee at oreilly.com for more
> information.
> 
> To register for the conference, go to:
> <http://conferences.oreillynet.com/pub/w/46/register.html>
> 
> 
> ***ETEL 2007 Call for Participation is Open
> Technologists, CTOs, chief scientists, researchers, programmers, 
> hackers, business developers, entrepreneurs, and other interested 
> parties are invited to lead conference plenary sessions and workshops 
> at ETel 2007. ETel happens February 28 to March 1, 2007 at the 
> San Francisco Airport Marriott in Burlingame, California.
> <http://conferences.oreilly.com/etel/>
> 
> 
> ***OSCON 2006 Coverage
> SitePoint's Kevin Yank reports on OSCON 2006 in Portland.
> <http://www.sitepoint.com/blogs/category/webtech/>
> 
> For More OSCON Coverage, go to:
> <http://www.oreillynet.com/conferences/blog/oscon/>
> 
> ================================================
> News From O'Reilly & Beyond
> ================================================
> ---------------------
> General News
> ---------------------
> ***Last Chance to Enter Our Contest (US Residents Only)
> The 2006 O'Reilly Photoshop Cook-Off, a contest open to US residents who
> use Adobe Photoshop, wraps up August 15th. Win great prizes, get your
> work in front of the industry's A-list judges, and learn some new
> tricks. Enter now to win! 
> <http://www.oreilly.com/go/pscontest-ug>
> 
> 
> ***Pocket Refs in PDF 
> O'Reilly Pocket References are now available in PDF format. They're
> bookmarked, searchable, and portable.
> <http://www.oreilly.com/store/series/pocketrefs>
> 
> 
> ***User Group Members receive a special 30% discount on 
>    Learning Lab Courses
> As an O'Reilly User Group member, you save on all the courses in 
> the following University of Illinois Certificate Series:
> -Linux/Unix System Administration
> -Web Programming
> -Open Source Programming
> -.NET Programming
> 
> To redeem, use Promotion Code "ORALL1," good for a 30% discount,
> in Step #3 of the enrollment process. Each course comes with a free
> O'Reilly book and a 7-day money-back guarantee. Register online:
> <https://oreillylearning.com/enroll/>
> 
> 
> ***Interview with Jakob Nielsen
> Matt Mickiewicz interviews Jakob Nielsen about AJAX, usability's close
> link to keyword advertising, and some of the advertising formats we're
> seeing around the web today.
> <http://www.sitepoint.com/article/interview-jakob-nielsen>
> 
> 
> ***Download our product catalogs in PDF:
> Digital Media Catalog:
> <http://www.oreilly.com/catalog/digitalmedia_spring2006.pdf>
> 
> Microsoft Developers and Administrators Catalog:
> <http://www.oreilly.com/catalog/60113_microsoft_catalog.pdf>
> 
> Programmers and System Administrators Catalog:
> <http://www.oreilly.com/catalog/60190_prog_sysadmin_cat.pdf>
> 
> ---------------------
> Open Source
> ---------------------
> ***Building a Desktop Firewall 
> By now, many internet users know that they need a firewall to protect 
> their computers while they're online. A nice GUI firewall 
> builder called fwbuilder makes it possible to set up a working firewall 
> in ten minutes--on Linux, *BSD, and Mac OS X. Dru Lavigne shows how it 
> works on FreeBSD.
> <http://www.onlamp.com/pub/a/bsd/2006/08/03/FreeBSDBasics.html>
> 
> 
> ***What Is OpenDocument?
> The OpenDocument Format (ODF), an open source file format standard for
> electronic office documents, is poised to change the world from an
> application-centric model of computing to a document-centric model. Sam
> Hiser looks at this new standard, how it implements XML for office
> documents, the technical and political wranglings in the standard,
> available tools, applications that offer ODF support, who's implementing
> ODF, and more. 
> <http://www.onlamp.com/pub/a/onlamp/2006/07/27/what-is-opendocument.html>
> 
> 
> ***Linux on the Nokia 770 Internet Tablet 
> Nokia's 770 Internet Tablet is more than a phone, according to John
> Littler. It's a Debian GNU/Linux system. This makes it a prime target
> for hackers. Littler explores some of the built-in utilities and some of
> the other tricks you can use.
> <http://linux.oreillynet.com/pub/a/linux/2006/07/20/nokia-770.html>
> 
> 
> ***The CakePHP Framework
> CakePHP is a mature framework for PHP developers who want the structure
> and time-saving benefits of Ruby on Rails, without having to leave their
> comfort zone.
> <http://www.sitepoint.com/article/application-development-cakephp>
> 
> ---------------------
> Digital Media
> ---------------------
> ***Review: Frontier Design TranzPort
> This wireless, two-way remote control won acclaim in the pro audio
> community for simplifying computer recording. Now it works with iTunes
> as well. Songwriter Spencer Critchley tests it with iTunes and Reason,
> discovering how to loop song sections, create remote playlists, and even
> tranzform iTunes into a foot-controlled backup band.
> <http://digitalmedia.oreilly.com/2006/07/20/review-frontier-design-tranzport.html>
> 
> 
> ***Automate Your Favorite Photoshop Routines
> If you find yourself performing the same tasks over and over again in
> Photoshop, it's time for you to tap the power of actions. Scott Bourne
> shows you how.
> <http://digitalmedia.oreilly.com/2006/07/13/automating-photoshop-routines.html>
> 
> ---------------------
> Mac
> ---------------------
> ***So Del.icio.us! Intelligent Tagging for the Mac User 
> It's time to learn about del.icio.us, a glorious, minimalist, tag-tastic
> bookmarks database. It was designed to be a "large-scale outboard
> memory," with added sharing smarts. It works like this: you take all
> your digital stuff and throw it into your del.icio.us account. Thanks to
> tagging and searching, you can find your stuff easily later. And you can
> find other people's stuff, too. Giles Turnbull shows you how.
> <http://www.macdevcenter.com/pub/a/mac/2006/07/18/delicious.html>
> 
> 
> ***How Does Open Source Software Stack Up on the Mac? 
> Apple does a great job of providing elegant software for its platform.
> But there are plenty of good offerings beyond the fruits of Cupertino.
> In this amazing survey of proprietary and open source software, Matthew
> Russell attempts to organize what's available on both fronts and even
> dares to assign grades. Has he missed anything?
> <http://www.macdevcenter.com/pub/a/mac/2006/07/25/software-stack-for-the-mac.html>
> 
> ---------------------
> Windows/.NET
> ---------------------
> ***Best Windows Admin Downloads 
> There are more than 9,000 tools, templates, white papers, and other
> items available from the Microsoft Download Center. Which are the best
> for Windows administrators? Mitch Tulloch clues you in.
> <http://www.oreillynet.com/pub/a/windows/2006/07/18/best-windows-admin-downloads.html>
> 
> 
> ***Drag and Drop Ajax Programming With Atlas 
> Think you need to write scripts and use JavaScript if you want to write
> Atlas apps? Think again. Jesse Liberty shows you an easier, more
> effective, and more productive way--using drag-and-drop programming.
> <http://www.windowsdevcenter.com/pub/a/windows/2006/08/01/drag-and-drop-ajax-programming-with-atlas.html>
> 
> ---------------------
> Java
> ---------------------
> ***Deploying BIRT 
> If you have a need for generating or displaying reports, you may want to
> have a word with BIRT. The Business Intelligence and Reporting Tools
> project is an open source Eclipse effort to enable the creation and
> deployment of complex reports. Jason Weathersby shows you how to grind
> out reports and display them in web applications and RCP-based desktop
> apps.
> <http://www.onjava.com/pub/a/onjava/2006/07/26/deploying-birt.html>
> 
> 
> ***What Is Geronimo? 
> Geronimo is Apache's open source, Java EE-compatible application server,
> based on a flexible system of interchangeable components. This makes it
> ideal for a wide range of enterprise deployments. In this article, Kunal
> Jaggi shows you how to get started with Geronimo.
> <http://www.onjava.com/pub/a/onjava/2006/07/19/what-is-geronimo.html>
> 
> ---------------------
> MAKE
> ---------------------
> ***Receive MAKE's "Weekend Project" PDF Podcast Through iTunes
> 
> Picnic Geometry:
> In this weeks video edition of Weekend Projects, learn to make geometric 
> spheres from all sorts of things you might find at a picnic. Watch the 
> video to see how to build an icosohedron out of paper plates, cups, and 
> plastic sheeting. This is a great project to do as a family, just make 
> sure you have enough supplies for each person involved to make one.
> If possible, use recycled materials.
> <http://www.makezine.com/blog/archive/2006/08/make_podcast_weekend_projects_3.html>
> 
> Recent projects include:
> "Make A Kite Aerial Photography Rig"
> <http://www.makezine.com/blog/archive/2006/07/weekend_project_instructions_m.html>
> 
> Rodent Powered Nightlight
> <http://www.makezine.com/blog/archive/2006/07/>
> weekend_project_instructions_r.html
> 
> ---------------------
> Podcasts
> ---------------------
> ***MacOSG Interviews O'Reilly Editor Edie Freedman
> Edie discusses the O'Reilly animals, our Photoshop Cookbooks, and the 2006 
> O?Reilly Photoshop Cook-Off contest. Here are the details from Macsimum News.
> <http://www.macsimumnews.com/index.php/archive/macosg_podcast_crew_interviews_oreilly_media/>
> 
> 
> ***OSCON Feedback
> OSCON, the O'Reilly Open Source Convention, is winding down. Conference
> publicist Suzanne Axtell took a microphone into the exhibit hall and
> asked various attendees and sponsors for their thoughts on OSCON.
> <http://www.oreillynet.com/pub/a/network/2006/07/28/oscon-feedback.html>
> 
> 
> Until next time--
> 
> Marsee Henon
> 
> 
> ================================================================
> O'Reilly 
> 1005 Gravenstein Highway North  
> Sebastopol, CA   95472
> http://ug.oreilly.com/  http://ug.oreilly.com/creativemedia/
> ================================================================

----- End forwarded message -----

-- 
Knowmad Services Inc.
http://www.knowmad.com

From irgem at earthlink.net  Thu Aug 10 11:23:14 2006
From: irgem at earthlink.net (George McLaughlin)
Date: Thu, 10 Aug 2006 14:23:14 -0400 (GMT-04:00)
Subject: [Charlotte.PM] charlotte Digest, Vol 23, Issue 1:Book for review
Message-ID: <29454616.1155234194419.JavaMail.root@elwamui-ovcar.atl.sa.earthlink.net>

New at this so I was wondering how can i get my paws on a copy of the book:

> ***Firewall Policies and VPN Configurations
> Publisher: Syngress
> ISBN: 1597490881

Thanks,
George


-----Original Message-----
>From: charlotte-request at pm.org
>Sent: Aug 9, 2006 8:26 AM
>To: charlotte at pm.org
>Subject: charlotte Digest, Vol 23, Issue 1
>
>Send charlotte mailing list submissions to
>	charlotte at pm.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>	http://mail.pm.org/mailman/listinfo/charlotte
>or, via email, send a message with subject or body 'help' to
>	charlotte-request at pm.org
>
>You can reach the person managing the list at
>	charlotte-owner at pm.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of charlotte digest..."
>
>
>Today's Topics:
>
>   1. Fwd: Newsletter from O'Reilly UG Program, August 4 (William McKee)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Wed, 9 Aug 2006 08:25:53 -0400
>From: William McKee <william at knowmad.com>
>Subject: [Charlotte.PM] Fwd: Newsletter from O'Reilly UG Program,
>	August 4
>To: "Charlotte.PM" <charlotte at mail.pm.org>
>Message-ID: <20060809122553.GK10604 at knowmad.com>
>Content-Type: text/plain; charset=us-ascii
>
>Here's the latest from O'Reilly. We have several books available to
>review[1]. The more we review, the more we can request!
>
>
>Hope ya'll are having a good summer,
>William
>
>[1] http://charlotte.pm.org/kwiki/index.cgi?Library
>
>
>----- Forwarded message from Marsee Henon <marsee at oreilly.com> -----
>
>> To: william at knowmad.com
>> From: Marsee Henon <marsee at oreilly.com>
>> Date: Fri, 04 Aug 2006 15:10:55 -0700
>> Subject: Newsletter from O'Reilly UG Program, August 4
>> 
>> ================================================================
>> O'Reilly UG Program News--Just for User Group Leaders
>> August 4, 2006
>> ================================================================
>> -O'Reilly Author Gorden Meyer Available as a Speaker
>> -Put Up an O'Reilly Euro OSCON Banner, Get a Free Book
>> -Promotional Material Available
>> ----------------------------------------------------------------
>> Book Info
>> ----------------------------------------------------------------
>> ***Review Books are Available 
>> Copies of our books are available for your members to review--just send
>> me an email to request books and and please include the book's ISBN
>> number (click on the "More Details" link to find the ISBN.) Let me know
>> if you need your book by a certain date. Allow at least four weeks for
>> shipping.
>> 
>> ***Please Send Copies of Your Book Reviews
>> Email me a copy of your newsletter or book review.
>> For tips and suggestions on writing book reviews, go to:
>> <http://ug.oreilly.com/bookreviews.html>
>> 
>> ***Group Purchase Discounts are Available
>> Please let me know if you are interested and I can put you in 
>> touch with our sales department.
>> 
>> ----------------------------------------------------------------
>> General News or Inquiries
>> ----------------------------------------------------------------
>> ***O'Reilly Author Gorden Meyer is Available as a Speaker
>> Gordon Meyer ("Smart Home Hacks") gives lively presentations about 
>> fun and practical do-it-yourself home automation projects. His 
>> talkS appeal to those who want to live the 21st century life, 
>> as well as those who just appreciate clever and interesting ways 
>> to exploit and combine different technologies. Gordon is a frequent 
>> speaker at Apple's WWDC, MacWorld, and many other conferences. He 
>> can tailor his  talk to Mac, Windows, Unix, and other user groups. 
>> He lives in Chicago, but travels frequently and will consider 
>> invitations for other locations. For more info, go to:
>> <http://www.gordonmeyer.com or email bb at g2meyer.com>
>> 
>> 
>> ***Put Up an O'Reilly EuroOSCON Banner, Get a Free Book
>> We're looking for user groups to display our conference banner on their
>> web sites. If you send me the link to your group's site with our 
>> banner, I'll send you the O'Reilly book of your choice.
>> 
>> EuroOSCON Banners:
>> <http://ug.oreilly.com/banners/eurooscon/>
>> 
>> 
>> ***Promotional Material Available:
>> The following items are available for your next meeting. (Let me know
>> the item and the amount you'd like):
>> 
>> -Linuxworld Pass in PDF form (register online by Aug 13.)
>> -MAKE Magazine Volume 6 (limit one copy per group)
>> -30% UG Discount bookmarks <http://ug.oreilly.com/banners/discount/>
>> 
>> ================================================================
>> O'Reilly News for User Group Members
>> August 4, 2006
>> ================================================================
>> ----------------------------------------------------------------
>> New Releases
>> ----------------------------------------------------------------
>> -Building a VoIP Network with Nortel's Multimedia Communication Server 5100
>> -CSS: The Missing Manual
>> -Designing and Building Enterprise DMZs
>> -Firewall Policies and VPN Configurations
>> -Google Hacks, Third Edition
>> -JavaScript: The Definitive Guide, Fifth Edition
>> -Mastering Regular Expressions, Third Edition
>> -Metasploit Toolkit for Penetration Testing, Exploit Development, and
>>  Vulnerability Research
>> -Music Technology Magazine's Ten Minute Masters
>> -Network Security Assessment
>> -The Photoshop Anthology
>> -PHP Cookbook
>> -Pragmatic Unit Testing in C# with NUnit, Second Edition
>> -Programming Python, Third Edition
>> -The Relational Database Dictionary
>> -Ruby Cookbook
>> -Scripting VMware Power Tools
>> -Stealing the Network
>> -Stephen Johnson on Digital Photography
>> -Ubuntu Linux for Non-Geeks
>> -Web Application Security
>> -Windows Developer Power Tools (Rough Cuts)
>> -Windows for Intel Macs (PDF)
>> -Windows Media Center Wizardry (PDF)
>> 
>> ----------------------------------------------------------------
>> Upcoming Events
>> ----------------------------------------------------------------
>> -Visit O'Reilly at LinuxWorld, San Francisco, CA--August 15-17
>> -Author Rich Gibson at the Apple Store, San Francisco, CA--August 24
>> -O'Reilly at RailsConf Europe, Central London, UK--
>>  September 14-15 
>> -O'Reilly at OpenCON 2006,Venice, Italy--December 2-3
>> -O'Reilly Authors at Flash on the Beach, Brighton, UK--December 4-6
>> 
>> ----------------------------------------------------------------
>> Conference News
>> ----------------------------------------------------------------
>> -EuroOSCON Registration is Open
>> -ETEL 2007 Call for Participation
>> -OSCON 2006 Coverage
>> ----------------------------------------------------------------
>> News
>> ----------------------------------------------------------------
>> -Last Chance to enter our Contest (US Residents Only)
>> -Pocket Refs in PDF
>> -User Group Members receive a special 30% discount on 
>>  Learning Lab Courses
>> -Interview with Jakob Nielsen
>> -Download our product catalogs in PDF
>> -Building a Desktop Firewall
>> -What Is OpenDocument?
>> -Linux on the Nokia 770 Internet Tablet
>> -The CakePHP Framework
>> -Review: Frontier Design TranzPort
>> -Automate Your Favorite Photoshop Routines
>> -So Del.icio.us! Intelligent Tagging for the Mac User
>> -How Does Open Source Software Stack Up on the Mac? 
>> -Best Windows Admin Downloads
>> -Drag and Drop Ajax Programming with Atlas 
>> -Deploying BIRT
>> -What is Geronimo?
>> -Receive MAKE's "Weekend Project" PDF Podcast Through iTunes
>> -MacOSG Interviews O'Reilly Editor Edie Freedman
>> -OSCON Feedback
>> 
>> ---------------------------------------------------------------
>> New Releases--Books, PDFs, and Rough Cuts
>> ----------------------------------------------------------------
>> Get 30% off a single book or 35% off two or more books from O'Reilly, 
>> No Starch, Paraglyph, PC Publishing, Pragmatic Bookshelf, SitePoint, 
>> or Syngress books you purchase directly from O'Reilly.
>> Just use code DSUG when ordering online or by phone 800-998-9938.
>> <http://www.oreilly.com/store/>
>> 
>> Free ground shipping on orders of $29.95 or more.
>> For more details, go to:
>> <http://www.oreilly.com/news/freeshipping_0703.html>
>> 
>> Did you know you can request a free book to review for your
>> group? Ask your group leader for more information.
>> 
>> For book review writing tips and suggestions, go to:
>> <http://ug.oreilly.com/bookreviews.html>
>> 
>> ***Building a VoIP Network with Nortel's Multimedia Communication 
>>    Server 5100
>> Publisher: Syngress
>> ISBN: 1597490784
>> This is the only book you need if you are tasked with designing,
>> installing, configuring, and troubleshooting a converged network built
>> with Nortel's Multimedia Concentration Server 5100, and Multimedia
>> Communications Portfolio (MCP) products. With this book, you'll be able
>> to design, build, secure, and maintain a cutting-edge converged
>> network to satisfy all of your business requirements.
>> <http://www.oreilly.com/catalog/1597490784/index.html>
>> 
>> 
>> ***CSS: The Missing Manual
>> Publisher: O'Reilly
>> ISBN: 0596526873
>> Cascading Style Sheets are now a reliable method for handling all kinds
>> of Web page presentations--from fonts and colors to page layout. But
>> due to CSS's complexity, most designers treat it as a kind of
>> window-dressing to spruce up the appearance of their sites without
>> tapping into the real power of CSS. "CSS: The Missing Manual" explains 
>> how you can use this powerful to build sparklingly new web sites, or 
>> refurbish old sites that are ready for an upgrade.
>> <http://www.oreilly.com/catalog/csstmm>
>> 
>> 
>> ***Designing and Building Enterprise DMZs
>> Publisher: Syngress
>> ISBN: 1597491004
>> "Building DMZs for Enterprise Networks" covers a sorely needed area in
>> critical business infrastructure: the Demilitarized Zone. DMZs play a
>> crucial role in any network consisting of a Hosted Internet Web Server,
>> internal servers which need to be segregated, External to Internal DNS
>> Server, and an email SMTP Relay Agent. This book covers what an
>> administrator needs to plan out and integrate a DMZ into a network for
>> small, medium, and Enterprise networks.
>> <http://www.oreilly.com/catalog/1597491004>
>> 
>> 
>> ***Firewall Policies and VPN Configurations
>> Publisher: Syngress
>> ISBN: 1597490881
>> The security provided by firewalls and VPNs is only as strong as the
>> protocol rules and policies that you create. This book provides 
>> fundamental information necessary to configure firewalls and build VPNs 
>> and DMZs to survive the dangers of today's internet. Products covered 
>> include Cisco PIX Firewall, ISA Server 2004, Check Point NGX, Juniper's 
>> NetScreen Firewalls, SonicWall, and Nokia. 
>> <http://www.oreilly.com/catalog/1597490881>
>> 
>> 
>> ***Google Hacks, Third Edition
>> Publisher: O'Reilly
>> ISBN: 0596527063
>> Now that new features and services such as Google Maps, Google Talk, and
>> Google Desktop have been added to the expanding Google universe, we've
>> made the third edition of this bestseller into an infinitely more useful
>> book for this powerful search engine. You'll not only find dozens of
>> hacks for new Google services, but plenty of updated tips, tricks, and
>> scripts for hacking the old ones. 
>> <http://www.oreilly.com/catalog/googlehks3>
>> 
>> 
>> ***JavaScript: The Definitive Guide, Fifth Edition
>> Publisher: O'Reilly
>> ISBN: 0596101996
>> The indispensable reference for JavaScript programmers since 1996,
>> "JavaScript: The Definitive Guide, Fifth Edition" is completely revised
>> and expanded to cover JavaScript as it is used in today's Web 2.0
>> applications.
>> <http://www.oreilly.com/catalog/jscript5>
>> 
>> 
>> ***Mastering Regular Expressions, Third Edition
>> Publisher: O'Reilly
>> ISBN: 0596528124
>> Written in the lucid, entertaining tone that makes a complex, dry topic
>> become crystal-clear to programmers, and sprinkled with solutions to
>> complex real-world problems, "Mastering Regular Expressions, Third
>> Edition" offers a wealth information that you can put to immediate use.
>> <http://www.oreilly.com/catalog/regex3>
>> 
>> 
>> ***Metasploit Toolkit for Penetration Testing, Exploit Development, and
>> Vulnerabiity Research
>> Publisher: Syngress
>> ISBN: 1597490741
>> This is the first book available for the Metasploit Framework (MSF),
>> the attack platform of choice for one of the fastest growing careers 
>> in IT security: Penetration Testing. The book and companion web site 
>> will provide professional penetration testers and security researchers 
>> with a fully integrated suite of tools for discovering, running, and 
>> testing exploit code.
>> <http://www.oreilly.com/catalog/1597490741>
>> 
>> 
>> ***Music Technology Magazine's Ten Minute Masters
>> Publisher: PC Publishing
>> ISBN: 187077504X
>> "Music Tech Magazine's Ten Minute Masters" is a collection of explanations 
>> of music theories, technologies, protocols, and processes. As useful to the 
>> newcomer as to the expert, the collection gives everyone sufficient 
>> information to grasp a concept in the space of 1,500 words--or just ten 
>> minutes! From analogue recording to Audio CDs, from cabling to copyright, 
>> and from filters to Firewire, this is an invaluable collection for anyone 
>> involved in the music technology field.
>> <http://www.oreilly.com/catalog/187077504X>
>> 
>> 
>> ***Network Security Assessment
>> Publisher: Syngress
>> ISBN: 1597491012
>> This book will take readers from the discovery of vulnerabilities and
>> the creation of the corresponding exploits, through a complete security
>> assessment, all the way through deploying patches against these
>> vulnerabilities to protect their networks. This book is unique in that
>> it details both the management and technical skill and tools required to
>> develop an effective vulnerability management system. 
>> <http://www.oreilly.com/catalog/1597491012>
>> 
>> 
>> ***The Photoshop Anthology
>> Publisher: SitePoint
>> ISBN: 0975841920
>> "The Photoshop Anthology" is full-color, 101 question-and-answer book
>> for web designers who want to use Photoshop more effectively to build 
>> web sites and create better looking web graphics. The book will show 
>> you how you can use Photoshop to create buttons, backgrounds, text 
>> effects, optimized photos, web interfaces, animated GIFs, and more for 
>> your web site. Additionally, the book will walk you through the entire 
>> process of designing a Website in Photoshop--from using layers to keep
>> organized to using the slice tool to create individual web site elements.
>> <http://www.oreilly.com/catalog/0975841920>
>> 
>> 
>> ***PHP Cookbook
>> Publisher: O'Reilly
>> ISBN: 0596101015
>> When it comes to creating dynamic web sites, the open source PHP
>> language is red-hot property: used on more than 20 million web sites
>> today, PHP is now more popular than Microsoft's ASP.NET technology. With
>> our Cookbook's unique format, you can learn how to build dynamic web
>> applications that work on any web browser. This revised new edition
>> makes it easy to find specific solutions for programming challenges.
>> <http://www.oreilly.com/catalog/phpckbk2>
>> 
>> 
>> ***Pragmatic Unit Testing in C# with NUnit, Second Edition
>> Publisher: Pragmatic Bookshelf
>> ISBN: 0977616673
>> All over the world, software teams are using unit testing both to verify
>> their code and as a way of helping them design better code. This book is
>> unique in the way it covers two aspects: showing developers both how and 
>> what?
>> <http://www.oreilly.com/catalog/0977616673>
>> 
>> 
>> ***Programming Python, Third Edition
>> Publisher: O'Reilly
>> ISBN: 0596009259
>> An industry standard just got even better. This bestseller from O'Reilly
>> has been updated to reflect the many changes introduced by Python 2.5.
>> It teaches the most common Python application domains from the ground up
>> with plenty of real-world examples and in-depth discussion. Ideal for
>> novices as well as advanced practitioners.
>> <http://www.oreilly.com/catalog/python3>
>> 
>> 
>> ***The Relational Database Dictionary
>> Publisher: O'Reilly
>> ISBN: 0596527985
>> "The Relational Database Dictionary" is exactly what designers,
>> programmers, students, and database administrators (DBAs) need, a single
>> source where they can find precise definitions. Authored by C.J. Date, a
>> respected expert, this pocket-sized dictionary is the definitive
>> glossary of terms and concepts used with relational databases such as
>> Oracle products, IBM's DB2, Microsoft's SQL Server, MySQL, and
>> PostgreSQL. It provides structure and clarity that will help build
>> proficiency and accuracy in working with today's relational databases.
>> <http://www.oreilly.com/catalog/relationaldb>
>> 
>> 
>> ***Ruby Cookbook
>> Publisher: O'Reilly
>> ISBN: 0596523696
>> From data structures and algorithms, to integration with cutting-edge
>> technologies, the "Ruby Cookbook" has something for every programmer.
>> When you need to solve a problem, don't reinvent the wheel: look it up
>> in the Cookbook.
>> <http://www.oreilly.com/catalog/rubyckbk>
>> 
>> 
>> ***Scripting VMware Power Tools
>> Publisher: Syngress
>> ISBN: 1597490598
>> This book covers the native tools that VMware provides with ESX Server.
>> It then discusses in detail the different scripting API's and how they
>> can be leveraged to provide some very useful, practical and time saving
>> tools to manage a virtual infrastructure. From virtual server
>> provisioning to backups and everything in between, all will be covered
>> in detail with real world examples that have been tested and will work
>> either copied directly from the book or with slight modifications for
>> the reader's specific environments.
>> <http://www.oreilly.com/catalog/1597490598>
>> 
>> 
>> ***Stealing the Network
>> Publisher: Syngress
>> ISBN: 1597490814
>> The best-selling "Stealing the Network" series reaches its climactic
>> conclusion as law enforcement and organized crime form a high-tech web
>> in an attempt to bring down the shadowy hacker-villain known as Knuth in
>> the most technically sophisticated Stealing book yet. As with previous
>> titles, "How to Own a Shadow" is a fictional story that demonstrates
>> accurate, highly detailed scenarios of computer intrusions, and
>> counter-strikes.
>> <http://www.oreilly.com/catalog/1597490814>
>> 
>> 
>> ***Stephen Johnson on Digital Photography
>> Publisher: O'Reilly
>> ISBN: 059652370X
>> A master photographer and teacher since 1977, Stephen Johnson is widely
>> recognized as a pioneer of digital photography. His new book chronicles
>> his ride on the bleeding edge of this medium's evolution, and provides a
>> practical in-depth introduction to digital photography that includes the
>> latest techniques. Complete with beautiful color photographic examples
>> and illustrations, this book is a unique, passionate, holistic
>> examination for every student of photography.
>> <http://www.oreilly.com/catalog/stephenjohnson>
>> 
>> 
>> ***Ubuntu Linux for Non-Geeks
>> Publisher: No Starch Press
>> ISBN: 1593271182
>> This newbie's guide to Ubuntu lets readers learn by doing. Step-by-step
>> projects build upon earlier tutorial concepts and increase the reader's
>> understanding of topics such as installing new software; Internet
>> connectivity; working with removable devices; and even handling DVDs and
>> iPods. Average desktop users are eased into the world of commands, thus
>> allowing them to work with script-based applications; converting RPMs to
>> DEB files; and compiling software from source.
>> <http://www.oreilly.com/catalog/1593271182>
>> 
>> 
>> ***Web Application Security
>> Publisher: Syngress
>> ISBN: 159749061X
>> This book defines web application security, why it should be addressed
>> earlier in the lifecycle in development and quality assurance, and how
>> it differs from other types of internet security. Additionally, the book
>> examines the procedures and technologies that are essential to
>> developing, penetration testing, and releasing a secure web application.
>> Through a review of recent web application breaches, the book will
>> expose the prolific methods hackers use to execute web attacks using
>> common vulnerabilities such as SQL Injection, Cross-Site Scripting, and
>> Buffer Overflows in the application layer. By taking an in-depth look at
>> the techniques hackers use to exploit web applications, readers will be
>> better equipped to protect confidential. 
>> <http://www.oreilly.com/catalog/159749061X>
>> 
>> 
>> ***Windows Developer Power Tools (Rough Cuts)
>> Publisher: O'Reilly
>> ISBN: 0596527926
>> There is a wealth of open and free software available today for Windows
>> developers who want to extend the development environment, reduce
>> development effort and increase productivity. "Windows Developer Power
>> Tools" is an encyclopedic guide to more than 100 free and open source
>> tools available to programmers who build applications for Windows
>> desktops and servers, including web applications and services. With its
>> unique task-oriented organization, this book will help you find the
>> tools you need to solve common (and uncommon) problems. Each tool in the
>> book includes a capsule summary--a mini user's guide--to help
>> readers get up to speed quickly. This one-stop resource covers a wide range of open
>> source and freeware tools to help you answer questions around planning,
>> developing, testing, and rolling out great software.
>> <http://www.oreilly.com/catalog/windowsdpt>
>> 
>> 
>> ***Windows for Intel Macs (PDF)
>> Publisher: O'Reilly
>> ISBN: 059652840X
>> Mac users can easily install and use Windows thanks to Boot Camp and
>> Parallels Desktop for Macs with Intel processors. But once you've
>> installed Windows, then what? This guide by Todd Ogasawara, a Microsoft
>> MVP and Mac journeyman, will help you unite Windows software with
>> Mac hardware.
>> <http://www.oreilly.com/catalog/windowsforintelmacs>
>> 
>> 
>> ***Windows Media Center Wizardry (PDF)
>> Publisher: O'Reilly
>> ISBN:0596527845
>> "Windows Media Center Wizardy" is a guide to getting the most out of a
>> PC running Windows XP Media Center Edition 2005, delving into the hidden
>> features and extended capabilities not at first apparent when using this
>> extremely powerful interface. This book is written as a series of "How
>> To" sections, each concentrating on an area of functionality little
>> exploited by typical users, although extremely useful when exposed.
>> <http://www.oreilly.com/catalog/coolthings>
>> 
>> 
>> ***MAKE Magazine Subscriptions
>> The annual subscription price for four issues is $34.95. When you
>> subscribe with this link, you'll get a free issue--the first one plus
>> four more for $34.95. So subscribe for yourself or friends with this
>> great offer for charter subscribers: five volumes for the cost of four.
>> Subscribe at:
>> <http://www.makezine.com/go/ugsub>
>> 
>> ================================================
>> Upcoming Events
>> ================================================
>> ***For more events, please see:
>> http://events.oreilly.com/
>> 
>> 
>> ***Visit O'Reilly at LinuxWorld, San Francisco, CA--August 15-17
>> Stop by our booth (#928) to check out our latest Linux and open source
>> titles. We'll also have author appearances from Gerald Carter ("LDAP
>> System Administration"), Chris DiBona ("Open Sources 2.0"), Greg
>> Kroah-Hartman ("Linux Kernel in a Nutshell"), and Kyle Rankin ("Ubuntu
>> Hacks").
>> <http://www.linuxworldexpo.com/live/12/events/12SFO06A>
>> 
>> 
>> ***Author Rich Gibson at the Apple Store, San Francisco, CA--August 24
>> Join Rich Gibson ("Google Maps Hacks" and "Mapping Hacks") and BMUG
>> DBNet SIG for an evening at the Apple Store in San Francisco at 6pm.
>> <http://www.apple.com/retail/sanfrancisco/>
>> 
>> 
>> ***Visit O'Reilly at RailsConf Europe, Central London, UK--
>>   September 14-15 
>> Come hear David Heinemeir Hansson ("Agile Web Development with Rails"),
>> Chad Fowler ("Rails Recipes and Programming Ruby, Second Ed."), Dave
>> Thomas ("Programming Ruby, Second Ed." and "Agile Web Development with
>> Rails"), and Kathy Sierra (co-founder of the "Head First" series and
>> javaranch.com). Stop by the O'Reilly stand to purchase books at a
>> discount and say hi to our authors at the First European RailsConf 2006.
>> <http://europe.railsconf.org/>
>> 
>> 
>> ***Visit O'Reilly at OpenCON 2006,Venice, Italy--December 2-3
>> OpenCON is the first conference entirely dedicated to OpenBSD and
>> organized by OpenBEER, the Italian OpenBSD users group. Topics include
>> information security, secure programming, and anything related to
>> OpenBSD. Come and visit the O'Reilly booth where you will be able to
>> purchase our books at a discount.
>> <http://www.opencon.org/index.php>
>> 
>> 
>> ***O'Reilly Authors at Flash on the Beach, Brighton, UK--December 4-6
>> Meet Joey Lott ("Flash 8 Cookbook," "ActionScript 3.0 Cookbook," and
>> "Programming Flash Communication Server") and Robert Reinhardt
>> ("Programming Flash Communication Server") at this Flash Design and
>> development conference. Don't forget to visit the O'Reilly stand where
>> you'll get a discount on all our books.
>> <http://www.flashonthebeach.com/>
>> 
>> ================================================
>> Conference News
>> ================================================
>> ***EuroOSCON Registration is Open
>> The preliminary schedule for the 2nd annual EuroOSCON, O'Reilly's
>> European Open Source Convention, 18-21 September in Brussels, is now
>> available. Featured speakers include Jeff Waugh, Damian Conway, Greg
>> Stein, Rasmus Lerdorf, Marten Mickos, Tim O'Reilly, and many others.
>> <http://conferences.oreilly.com/eurooscon/>
>> 
>> User Group discounts are available, email marsee at oreilly.com for more
>> information.
>> 
>> To register for the conference, go to:
>> <http://conferences.oreillynet.com/pub/w/46/register.html>
>> 
>> 
>> ***ETEL 2007 Call for Participation is Open
>> Technologists, CTOs, chief scientists, researchers, programmers, 
>> hackers, business developers, entrepreneurs, and other interested 
>> parties are invited to lead conference plenary sessions and workshops 
>> at ETel 2007. ETel happens February 28 to March 1, 2007 at the 
>> San Francisco Airport Marriott in Burlingame, California.
>> <http://conferences.oreilly.com/etel/>
>> 
>> 
>> ***OSCON 2006 Coverage
>> SitePoint's Kevin Yank reports on OSCON 2006 in Portland.
>> <http://www.sitepoint.com/blogs/category/webtech/>
>> 
>> For More OSCON Coverage, go to:
>> <http://www.oreillynet.com/conferences/blog/oscon/>
>> 
>> ================================================
>> News From O'Reilly & Beyond
>> ================================================
>> ---------------------
>> General News
>> ---------------------
>> ***Last Chance to Enter Our Contest (US Residents Only)
>> The 2006 O'Reilly Photoshop Cook-Off, a contest open to US residents who
>> use Adobe Photoshop, wraps up August 15th. Win great prizes, get your
>> work in front of the industry's A-list judges, and learn some new
>> tricks. Enter now to win! 
>> <http://www.oreilly.com/go/pscontest-ug>
>> 
>> 
>> ***Pocket Refs in PDF 
>> O'Reilly Pocket References are now available in PDF format. They're
>> bookmarked, searchable, and portable.
>> <http://www.oreilly.com/store/series/pocketrefs>
>> 
>> 
>> ***User Group Members receive a special 30% discount on 
>>    Learning Lab Courses
>> As an O'Reilly User Group member, you save on all the courses in 
>> the following University of Illinois Certificate Series:
>> -Linux/Unix System Administration
>> -Web Programming
>> -Open Source Programming
>> -.NET Programming
>> 
>> To redeem, use Promotion Code "ORALL1," good for a 30% discount,
>> in Step #3 of the enrollment process. Each course comes with a free
>> O'Reilly book and a 7-day money-back guarantee. Register online:
>> <https://oreillylearning.com/enroll/>
>> 
>> 
>> ***Interview with Jakob Nielsen
>> Matt Mickiewicz interviews Jakob Nielsen about AJAX, usability's close
>> link to keyword advertising, and some of the advertising formats we're
>> seeing around the web today.
>> <http://www.sitepoint.com/article/interview-jakob-nielsen>
>> 
>> 
>> ***Download our product catalogs in PDF:
>> Digital Media Catalog:
>> <http://www.oreilly.com/catalog/digitalmedia_spring2006.pdf>
>> 
>> Microsoft Developers and Administrators Catalog:
>> <http://www.oreilly.com/catalog/60113_microsoft_catalog.pdf>
>> 
>> Programmers and System Administrators Catalog:
>> <http://www.oreilly.com/catalog/60190_prog_sysadmin_cat.pdf>
>> 
>> ---------------------
>> Open Source
>> ---------------------
>> ***Building a Desktop Firewall 
>> By now, many internet users know that they need a firewall to protect 
>> their computers while they're online. A nice GUI firewall 
>> builder called fwbuilder makes it possible to set up a working firewall 
>> in ten minutes--on Linux, *BSD, and Mac OS X. Dru Lavigne shows how it 
>> works on FreeBSD.
>> <http://www.onlamp.com/pub/a/bsd/2006/08/03/FreeBSDBasics.html>
>> 
>> 
>> ***What Is OpenDocument?
>> The OpenDocument Format (ODF), an open source file format standard for
>> electronic office documents, is poised to change the world from an
>> application-centric model of computing to a document-centric model. Sam
>> Hiser looks at this new standard, how it implements XML for office
>> documents, the technical and political wranglings in the standard,
>> available tools, applications that offer ODF support, who's implementing
>> ODF, and more. 
>> <http://www.onlamp.com/pub/a/onlamp/2006/07/27/what-is-opendocument.html>
>> 
>> 
>> ***Linux on the Nokia 770 Internet Tablet 
>> Nokia's 770 Internet Tablet is more than a phone, according to John
>> Littler. It's a Debian GNU/Linux system. This makes it a prime target
>> for hackers. Littler explores some of the built-in utilities and some of
>> the other tricks you can use.
>> <http://linux.oreillynet.com/pub/a/linux/2006/07/20/nokia-770.html>
>> 
>> 
>> ***The CakePHP Framework
>> CakePHP is a mature framework for PHP developers who want the structure
>> and time-saving benefits of Ruby on Rails, without having to leave their
>> comfort zone.
>> <http://www.sitepoint.com/article/application-development-cakephp>
>> 
>> ---------------------
>> Digital Media
>> ---------------------
>> ***Review: Frontier Design TranzPort
>> This wireless, two-way remote control won acclaim in the pro audio
>> community for simplifying computer recording. Now it works with iTunes
>> as well. Songwriter Spencer Critchley tests it with iTunes and Reason,
>> discovering how to loop song sections, create remote playlists, and even
>> tranzform iTunes into a foot-controlled backup band.
>> <http://digitalmedia.oreilly.com/2006/07/20/review-frontier-design-tranzport.html>
>> 
>> 
>> ***Automate Your Favorite Photoshop Routines
>> If you find yourself performing the same tasks over and over again in
>> Photoshop, it's time for you to tap the power of actions. Scott Bourne
>> shows you how.
>> <http://digitalmedia.oreilly.com/2006/07/13/automating-photoshop-routines.html>
>> 
>> ---------------------
>> Mac
>> ---------------------
>> ***So Del.icio.us! Intelligent Tagging for the Mac User 
>> It's time to learn about del.icio.us, a glorious, minimalist, tag-tastic
>> bookmarks database. It was designed to be a "large-scale outboard
>> memory," with added sharing smarts. It works like this: you take all
>> your digital stuff and throw it into your del.icio.us account. Thanks to
>> tagging and searching, you can find your stuff easily later. And you can
>> find other people's stuff, too. Giles Turnbull shows you how.
>> <http://www.macdevcenter.com/pub/a/mac/2006/07/18/delicious.html>
>> 
>> 
>> ***How Does Open Source Software Stack Up on the Mac? 
>> Apple does a great job of providing elegant software for its platform.
>> But there are plenty of good offerings beyond the fruits of Cupertino.
>> In this amazing survey of proprietary and open source software, Matthew
>> Russell attempts to organize what's available on both fronts and even
>> dares to assign grades. Has he missed anything?
>> <http://www.macdevcenter.com/pub/a/mac/2006/07/25/software-stack-for-the-mac.html>
>> 
>> ---------------------
>> Windows/.NET
>> ---------------------
>> ***Best Windows Admin Downloads 
>> There are more than 9,000 tools, templates, white papers, and other
>> items available from the Microsoft Download Center. Which are the best
>> for Windows administrators? Mitch Tulloch clues you in.
>> <http://www.oreillynet.com/pub/a/windows/2006/07/18/best-windows-admin-downloads.html>
>> 
>> 
>> ***Drag and Drop Ajax Programming With Atlas 
>> Think you need to write scripts and use JavaScript if you want to write
>> Atlas apps? Think again. Jesse Liberty shows you an easier, more
>> effective, and more productive way--using drag-and-drop programming.
>> <http://www.windowsdevcenter.com/pub/a/windows/2006/08/01/drag-and-drop-ajax-programming-with-atlas.html>
>> 
>> ---------------------
>> Java
>> ---------------------
>> ***Deploying BIRT 
>> If you have a need for generating or displaying reports, you may want to
>> have a word with BIRT. The Business Intelligence and Reporting Tools
>> project is an open source Eclipse effort to enable the creation and
>> deployment of complex reports. Jason Weathersby shows you how to grind
>> out reports and display them in web applications and RCP-based desktop
>> apps.
>> <http://www.onjava.com/pub/a/onjava/2006/07/26/deploying-birt.html>
>> 
>> 
>> ***What Is Geronimo? 
>> Geronimo is Apache's open source, Java EE-compatible application server,
>> based on a flexible system of interchangeable components. This makes it
>> ideal for a wide range of enterprise deployments. In this article, Kunal
>> Jaggi shows you how to get started with Geronimo.
>> <http://www.onjava.com/pub/a/onjava/2006/07/19/what-is-geronimo.html>
>> 
>> ---------------------
>> MAKE
>> ---------------------
>> ***Receive MAKE's "Weekend Project" PDF Podcast Through iTunes
>> 
>> Picnic Geometry:
>> In this weeks video edition of Weekend Projects, learn to make geometric 
>> spheres from all sorts of things you might find at a picnic. Watch the 
>> video to see how to build an icosohedron out of paper plates, cups, and 
>> plastic sheeting. This is a great project to do as a family, just make 
>> sure you have enough supplies for each person involved to make one.
>> If possible, use recycled materials.
>> <http://www.makezine.com/blog/archive/2006/08/make_podcast_weekend_projects_3.html>
>> 
>> Recent projects include:
>> "Make A Kite Aerial Photography Rig"
>> <http://www.makezine.com/blog/archive/2006/07/weekend_project_instructions_m.html>
>> 
>> Rodent Powered Nightlight
>> <http://www.makezine.com/blog/archive/2006/07/>
>> weekend_project_instructions_r.html
>> 
>> ---------------------
>> Podcasts
>> ---------------------
>> ***MacOSG Interviews O'Reilly Editor Edie Freedman
>> Edie discusses the O'Reilly animals, our Photoshop Cookbooks, and the 2006 
>> O?Reilly Photoshop Cook-Off contest. Here are the details from Macsimum News.
>> <http://www.macsimumnews.com/index.php/archive/macosg_podcast_crew_interviews_oreilly_media/>
>> 
>> 
>> ***OSCON Feedback
>> OSCON, the O'Reilly Open Source Convention, is winding down. Conference
>> publicist Suzanne Axtell took a microphone into the exhibit hall and
>> asked various attendees and sponsors for their thoughts on OSCON.
>> <http://www.oreillynet.com/pub/a/network/2006/07/28/oscon-feedback.html>
>> 
>> 
>> Until next time--
>> 
>> Marsee Henon
>> 
>> 
>> ================================================================
>> O'Reilly 
>> 1005 Gravenstein Highway North  
>> Sebastopol, CA   95472
>> http://ug.oreilly.com/  http://ug.oreilly.com/creativemedia/
>> ================================================================
>
>----- End forwarded message -----
>
>-- 
>Knowmad Services Inc.
>http://www.knowmad.com
>
>
>------------------------------
>
>_______________________________________________
>charlotte mailing list
>charlotte at pm.org
>http://mail.pm.org/mailman/listinfo/charlotte
>
>End of charlotte Digest, Vol 23, Issue 1
>****************************************


From william at knowmad.com  Sat Aug 12 10:36:57 2006
From: william at knowmad.com (William McKee)
Date: Sat, 12 Aug 2006 13:36:57 -0400
Subject: [Charlotte.PM] Perl Mongers Meeting
Message-ID: <20060812173657.GU8454@knowmad.com>

Hi Mongers,

I hope everyone is enjoying the last weeks of the summer. I've been
looking forward to our next meeting since I was out of the country last
month. Unfortunately I have a family commitment that has come up which
will have me out of town this Thursday. I'd like to see if everyone
would be willing to meet on the following Thursday, Aug. 24th.

As with the recent meetings, this will be a social gathering to talk
shop or whatever other topics may arise. If you haven't been to one of
our social meetings there is usu. a good bit of technical talk, so don't
think you'll be bored.

If the alternative date suits everyone, we'll pick a place. I heard one
suggestion for a new bar around the Gateway Village area in uptown.
Other ideas?


William

-- 
Knowmad Technologies
http://www.knowmad.com

From kevinold at gmail.com  Mon Aug 14 11:46:06 2006
From: kevinold at gmail.com (Kevin Old)
Date: Mon, 14 Aug 2006 14:46:06 -0400
Subject: [Charlotte.PM] Perl Mongers Meeting
In-Reply-To: <20060812173657.GU8454@knowmad.com>
References: <20060812173657.GU8454@knowmad.com>
Message-ID: <69d3ac770608141146w7552a768h342549ac5718bcc5@mail.gmail.com>

William,

I like the idea of moving the meeting to Aug 24th.  The place we met
last month was nice.

Kevin

On 8/12/06, William McKee <william at knowmad.com> wrote:
> Hi Mongers,
>
> I hope everyone is enjoying the last weeks of the summer. I've been
> looking forward to our next meeting since I was out of the country last
> month. Unfortunately I have a family commitment that has come up which
> will have me out of town this Thursday. I'd like to see if everyone
> would be willing to meet on the following Thursday, Aug. 24th.
>
> As with the recent meetings, this will be a social gathering to talk
> shop or whatever other topics may arise. If you haven't been to one of
> our social meetings there is usu. a good bit of technical talk, so don't
> think you'll be bored.
>
> If the alternative date suits everyone, we'll pick a place. I heard one
> suggestion for a new bar around the Gateway Village area in uptown.
> Other ideas?
>
>
> William
>
> --
> Knowmad Technologies
> http://www.knowmad.com
> _______________________________________________
> charlotte mailing list
> charlotte at pm.org
> http://mail.pm.org/mailman/listinfo/charlotte
>


-- 
Kevin Old
kevinold at gmail.com

From cfowler at outpostsentinel.com  Mon Aug 28 12:39:47 2006
From: cfowler at outpostsentinel.com (Christopher Fowler)
Date: Mon, 28 Aug 2006 15:39:47 -0400
Subject: [Charlotte.PM] Doing a chroot in Perl
Message-ID: <1156793988.19321.97.camel@shuttle.linxdev.com>

I doing something wrong in my test program.  This program takes an
argument and executes it in a chroot environment.  If not argument is
given it will simply execute the shell instead.

This is part of my script execution that I asked about a week or so ago.
I am now going to extract the script from the database and place it in a
chroot environment.  I will then execute it from there.  I'm using this
test program before I integrate it into the main code.

--- [ Cut Here ]-------------------------------------
#!/usr/bin/perl

use POSIX qw/setuid setgid/;
use strict;

# Globals
my $root = "/opt/SAM/ScriptExecRoot";

sub main {

  # Verify if proc is mounted
  # if not mount it for the user
  if(! -d "$root/proc/1") {
    system "mount -o bind /proc $root/proc";
  }


  # Setup default language
  # This root does not support locale
  # and perl needs this
  $ENV{'LANG'} = "C";
  $ENV{'PATH'} = "$ENV{'PATH'}:/sbin:/usr/sbin";

  # Change our root and
  # set our uid
  chroot $root;

  my ($name,$pass,$uid,$gid,undef,undef,undef,$dir) = getpwnam("tomcat")
or die;

  setgid $uid;
  setuid $uid;
  chdir $dir;

  # No argument?  Just exec a shell
  if($#ARGV == -1 ) {
    exec "/bin/sh"
      or die "exec $!\n";
  }

  exec "/bin/sh", ("-c", @ARGV)
    or die "exec $!\n";
}

exit main;
--- [ Cut Here ]-------------------------------------

The problem is that I'm able to do stuff I should not be able to.

Here is output 

--- [ Cut Here ]-------------------------------------
[root at sam-demo ScriptExecRoot]# bin/exec.pl 


BusyBox v1.2.1 (2006.08.26-21:30+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

$ ps > /
$ ls -l /out
-rw-r--r--    1 500      500          6998 Aug 26 23:42 /out
$ 
[root at sam-demo ScriptExecRoot]# ls -l 
total 276
drwxrwxr-x    2 root   root     4096 Aug 26 19:42 bin
drwxr-xr-x   23 root   root   233472 Aug 26 18:25 dev
drwxr-xr-x    2 root   root     4096 Aug 26 19:28 etc
drwxr-xr-x    3 root   root     4096 Aug 26 18:20 home
dr-xr-xr-x    2 root   root     4096 Aug 26 19:29 lib
drwxr-xr-x    3 root   root     4096 Aug 26 17:58 opt
-rw-r--r--    1 tomcat tomcat   6998 Aug 26 19:42 out
dr-xr-xr-x  209 root   root        0 Apr 18 05:32 proc
drwxr-xr-x    2 root   root     4096 Aug 26 18:21 root
drwxrwxr-x    2 root   root     4096 Aug 26 17:31 sbin
drwxrwxrwt    2 root   root     4096 Aug 26 19:42 tmp
drwxrwxr-x    3 root   root     4096 Aug 26 17:29 usr
--- [ Cut Here ]-------------------------------------

As you can see /out is owned by tomcat.tomcat but why was he able to
place anything in /out?  Probably something simple I'm not seeing or
forgot to do.

Thanks,
Chris


From william at knowmad.com  Mon Aug 28 13:19:23 2006
From: william at knowmad.com (William McKee)
Date: Mon, 28 Aug 2006 16:19:23 -0400
Subject: [Charlotte.PM] Doing a chroot in Perl
In-Reply-To: <1156793988.19321.97.camel@shuttle.linxdev.com>
References: <1156793988.19321.97.camel@shuttle.linxdev.com>
Message-ID: <20060828201922.GZ12628@knowmad.com>

On Mon, Aug 28, 2006 at 03:39:47PM -0400, Christopher Fowler wrote:
> This is part of my script execution that I asked about a week or so ago.

I'm not sure I saw that hit the list. Are you sure you sent it?


> I am now going to extract the script from the database and place it in a
> chroot environment.  I will then execute it from there.  I'm using this
> test program before I integrate it into the main code.

I had to make a few tweaks to get that script to work (e.g., change
$root and the getpwnam argument). Even after doing so, I didn't have
much luck getting a chroot environment. The chroot function says that it
is restricted to the superuser which may be why I'm not seeing much
change as I'm running it under my login. If I use sudo to run it, the
script dies at line 28 (getpwnam).


> $ ps > /

What does that command do in Busybox? In bash, it generates an error
message.


> $ ls -l /out
> -rw-r--r--    1 500      500          6998 Aug 26 23:42 /out

Who is user 500? tomcat?


> As you can see /out is owned by tomcat.tomcat but why was he able to
> place anything in /out?  Probably something simple I'm not seeing or
> forgot to do.

I must not be following you where. You've created a chroot environment
that contains an /out directory owned by tomcat. This user has the
permissions to write to the /out directory. Are you asking why the user
was able to create the directory in the first place?


William

-- 
Knowmad Technologies
http://www.knowmad.com

From cfowler at outpostsentinel.com  Mon Aug 28 14:47:23 2006
From: cfowler at outpostsentinel.com (Christopher Fowler)
Date: Mon, 28 Aug 2006 17:47:23 -0400
Subject: [Charlotte.PM] Doing a chroot in Perl
In-Reply-To: <20060828201922.GZ12628@knowmad.com>
References: <1156793988.19321.97.camel@shuttle.linxdev.com>
	<20060828201922.GZ12628@knowmad.com>
Message-ID: <1156801643.19321.101.camel@shuttle.linxdev.com>

On Mon, 2006-08-28 at 16:19 -0400, William McKee wrote:
> On Mon, Aug 28, 2006 at 03:39:47PM -0400, Christopher Fowler wrote:
> > This is part of my script execution that I asked about a week or so ago.
> 
> I'm not sure I saw that hit the list. Are you sure you sent it?

I sent it to another list.  Sorry for confusion.

> 
> 
> > I am now going to extract the script from the database and place it in a
> > chroot environment.  I will then execute it from there.  I'm using this
> > test program before I integrate it into the main code.
> 
> I had to make a few tweaks to get that script to work (e.g., change
> $root and the getpwnam argument). Even after doing so, I didn't have
> much luck getting a chroot environment. The chroot function says that it
> is restricted to the superuser which may be why I'm not seeing much
> change as I'm running it under my login. If I use sudo to run it, the
> script dies at line 28 (getpwnam).

It is having a problem reading /etc/passwd in the chroot environment.  I
want to switch to user tomcat inside the chroot so I waited till after
the chroot to read /etc/passwd.  

> 
> 
> > $ ps > /
> 
> What does that command do in Busybox? In bash, it generates an error
> message.
> 

It displays the ps output and redirects it.  I should read:

ps > /out.txt

> 
> > $ ls -l /out
> > -rw-r--r--    1 500      500          6998 Aug 26 23:42 /out

That would be out.txt
> 
> Who is user 500? tomcat?
> 

Yes

> 
> > As you can see /out is owned by tomcat.tomcat but why was he able to
> > place anything in /out?  Probably something simple I'm not seeing or
> > forgot to do.
> 
> I must not be following you where. You've created a chroot environment
> that contains an /out directory owned by tomcat. This user has the
> permissions to write to the /out directory. Are you asking why the user
> was able to create the directory in the first place?

I'm asking why was tomcat able to redirect the output to a file name
out.txt in / of the chroot.  / in the chroot is owned by root.
 
> 
> 
> William
> 


From kwhitsel at gmail.com  Mon Aug 28 18:30:51 2006
From: kwhitsel at gmail.com (Kurt W. Whitsel)
Date: Mon, 28 Aug 2006 21:30:51 -0400
Subject: [Charlotte.PM] Charlotte Company looking for perl/php developer
Message-ID: <36540a840608281830h7c9670cbp78236cfeee588bad@mail.gmail.com>

PERL/PHP Developer

Duties include but are not limited to creating web sites using full
lifecycle development methodologies as well as developing, modifying,
and integrating modules for various open source content management
systems including portal and weblog packages and managing MySQL
databases (production and admin).

Heavy Perl experience is absolutely mandatory.

Other programming language knowledge including C++, C#, Java, and ASP
would be very helpful.

Standard web protocol knowledge is required (FTP, SSL, SSH, etc). Web
content experience is helpful but not necessary. Successful candidate
will have the ability to multi-task in a fast-paced environment and to
communicate effectively with staff and management.

Responsibilities:

? Design, develop and maintain custom Perl, PHP and MySQL web sites
and web applications
? Maintain code reusability and develop code in a modular fashion
? Assist in the design and implementation of custom themes for open
source CMS products
? Install and manage PHP/MySQL driven CMS systems and modules
? Monitor product websites for security flaws and implement fixes
? Work as part of a close-knit team to determine overall web site
functionality and layout

Requirements:
Minimum 2 years Perl, PHP, MySQL experience
Be able to provide relevant examples of your work
Self-starter ? ability to work as part of a team and on your own

If you are interested, contact PHP Developer

Duties include but are not limited to creating web sites using full
lifecycle development methodologies as well as developing, modifying,
and integrating modules for various open source content management
systems including portal and weblog packages and managing MySQL
databases (production and admin).

Heavy Perl experience is absolutely mandatory.

Other programming language knowledge including C++, C#, Java, and ASP
would be very helpful.

Standard web protocol knowledge is required (FTP, SSL, SSH, etc). Web
content experience is helpful but not necessary. Successful candidate
will have the ability to multi-task in a fast-paced environment and to
communicate effectively with staff and management.

Responsibilities:

? Design, develop and maintain custom Perl, PHP and MySQL web sites
and web applications
? Maintain code reusability and develop code in a modular fashion
? Assist in the design and implementation of custom themes for open
source CMS products
? Install and manage PHP/MySQL driven CMS systems and modules
? Monitor product websites for security flaws and implement fixes
? Work as part of a close-knit team to determine overall web site
functionality and layout

Requirements:
Minimum 2 years Perl, PHP, MySQL experience
Be able to provide relevant examples of your work
Self-starter ? ability to work as part of a team and on your own
if you would like more information, contact

Sean Brennan

HireSearch at carolina.rr.com

 704.293.7206

President
HireSearch

704.293.7206

From william at knowmad.com  Tue Aug 29 08:45:00 2006
From: william at knowmad.com (William McKee)
Date: Tue, 29 Aug 2006 11:45:00 -0400
Subject: [Charlotte.PM] Fwd: User Groups: Apress Summer Newsletter Is Here!
Message-ID: <20060829154459.GK12628@knowmad.com>

Hi Gang,

Below is the latest newsletter from Apress. There's a link to some free
ebooks including _Writing Perl Modules for CPAN_ by Sam Tregar of Krang
and HTML::Template fame.

Sorry about last week for those of you who responded to my suggestion
about changing the date. We've had a bit of a shuffle here at the office
lately. Furthermore, it turns out that I'll be travelling again for the
meeting date in September.

So, is anyone interested in taking responsibility for getting the next
meeting together? Or even taking over the role of group leader? Our
mailing list is 50 members strong so there's obvious interest for Perl
in the area.


Cheers!
William


----- Forwarded message from Janet Crosbie <janet at apress.com> -----

> To: william at knowmad.com
> From: Janet Crosbie <janet at apress.com>
> Date: 25 Aug 2006 08:38:04 -0700
> Subject: User Groups: Apress Summer Newsletter Is Here!
> 
> +++++++++++++++++++++++++++++++++++++++
> 
>          
> Apress User Group Newsletter 
> Issue 6; Summer, 2006 
> 
> ****PLEASE FORWARD OR POST THIS
> NEWSLETTER FOR ALL GROUP MEMBERS**** 
> 
> ****FEEL FREE TO EDIT THIS LETTER SO THAT IT FITS IN WITH YOUR USER GROUP FOCUS****
> 
> +++++++++++++++++++++++++++++++++++++++
> 
> Sections:
> 
> 1. Let's Catch Up
> 2. Free eBooks to Download
> 3. The Latest betaBooks
> 4. It's Not Too Late to Join the Apress Affiliate Program
> 5. The Latest Apress Books--Hot Off the Press
> 6. Forthcoming Books--Fall Releases
> 7. Upcoming Tradeshows
> 
> ***************************************
> 
> 1. Let's Catch Up
>  
> A. Apress Catalog
> 
> As we approach fall, you're probably getting back down to business after summer vacations. Get your skills in shape with the newest Apress books. Apress is just about to publish its second glamorous 81/2" by 11" catalog, featuring titles through December 2006. If you're in the US and you'd like a copy, please send an e-mail to me, Janet, at janet at apress.com with your group name and shipping address. Please enter "Catalog Request" in the subject line.
> 
> If you're outside of the US, you may access the PDF version of the Apress Printed Catalog on the Apress Trade Site, http://www.apress.com/tradesite. The current version of the catalog is called "Summer/Fall 2006." (You only need to quickly register to access any of the Trade Site's downloads. You'll be prompted for e-mail address and the name of the bookstore you're affiliated with. Enter "n/a" in the latter text box, since it doesn't apply to user group members).  
> 
> B. Special Offers 
> 
> Are you into open source? Through August 31, 2006, you can purchase a limited edition Apress Open Source eBook bundle here: http://www.apress.com/promo/osbundle.html. You get four eBooks for 50 bucks--purchasing two of these eBooks separately would just about equal what you'll pay for the four-book deal! But hurry, because you've only got about another week to purchase this bundle. The following titles are included: 
> 
> "From Bash to Z Shell: Conquering the Command Line"
> By Oliver Kiddle et al.
> ISBN: 1-59059-376-6 | 472 pages
> 
> "Beginning Ubuntu Linux: From Novice to Professional"
> By Keir Thomas
> ISBN: 1-59059-627-7 | 608 pages
> 
> "Beginning GIMP: From Novice to Professional"
> By Akkana Peck
> ISBN: 1-59059-587-4 | 552 pages
> 
> "Shell Scripting Recipes: A Problem-Solution Approach"
> By Chris F.A. Johnson
> ISBN: 1-59059-471-1 | 448 pages
>  
> C. ASP Today Freeweb
> 
> ASP Today, Apress's sister site, focuses on publishing professional-level articles that are available to subscribers. ASP Today has just launched "Freeweb"--from now through December 2006, ASP Today will feature the two newest articles for free, so that each article will be free to view from time of publication until a newer free article publishes and converts the previous-but-one to subscriber-only viewing. Check it out today: http://asptoday.com/. 
> 
> ***************************************
> 
> 2. Free eBooks to Download
> 
> You may have already purchased an Apress eBook sometime the past year. Whether you have or not, you can expand your library now by downloading a select eBook for free. Choose from these titles: 
> 
> "A Programmer's Introduction to PHP 4.0"
> By W. Jason Gilmore
> ISBN: 1-893115-85-2 | 453 pages
> 
> "Programming VB .NET: A Guide for Experienced Programmers"
> By Gary Cornell and Jonathan Morrison
> ISBN: 1-893115-99-2 | 528 pages
> 
> "Writing Perl Modules for CPAN"
> By Sam Tregar
> ISBN: 1-59059-018-X | 312 pages
> 
> "COM and .NET Interoperability"
> By Andrew Troelsen
> ISBN: 1-59059-011-2 | 816 pages
> 
> "XML Programming: Web Applications and Web Services with JSP and ASP"
> By Tom Myers and Alexander Nakhimovsky
> ISBN: 1-59059-003-1 | 576 pages
> 
> "Google, Amazon, and Beyond: Creating and Consuming Web Services"
> By Tom Myers and Alexander Nakhimovsky
> ISBN: 1-59059-131-3 | 352 pages
> 
> "Practical Common Lisp"
> By Peter Seibel
> ISBN: 1-59059-239-5 | 528 pages
> 
> Download your free Apress eBooks here: http://www.apress.com/free/index.html. 
> 
> ***************************************
> 
> 3. The Latest betaBooks
> 
> Apress betaBooks give you access to the newest programming topics straight from the author, by way of weekly PDF chapters and updates, all before the final printed versions roll off the press. Eight weeks before final publication, the first several chapters of an Apress betaBook become available. After that, available updates or new chapters are delivered weekly to your inbox. 
> 
> You may purchase betaBooks where you purchase other eBooks, in the Apress eBookshop. These betaBooks are a bargain because the price includes a copy of the entire finished eBook. Apress is offering these betaBooks right now:
> 
> "Beginning Ajax with PHP: From Novice to Professional"
> By Lee Babin
> October 2006 | ISBN: 1-59059-667-6 | 400 pages | $44.99
> http://www.apress.com/book/bookDisplay.html?bID=10117
> 
> "Pro Wicket"
> By Karthik Gurumurthy
> September 2006 | ISBN: 1-59059-722-2 | 328 pages | $39.99
> http://www.apress.com/book/bookDisplay.html?bID=10189
> 
> Learn more and purchase your betaBooks here: http://www.apress.com/betabook.html.   
> 
> ***************************************
> 
> 4. It's Not Too Late to Join the Apress Affiliate Program
> The invitation is still open to join the Apress Affiliate Program. The program benefits web site owners and bloggers (which includes a lot of you folks) who publicly recognize Apress books and help generate sales. The program credits affiliates who link to Apress eBooks a *10% COMMISSION* on eBook sales when their visitors click through and purchase Apress eBooks.
> Lots of people have signed up as Apress Affiliates, and they've begun to accumulate commissions. Wouldn't you like to possibly earn some extra cash, just for promoting books you know and love? Try it out.
> Setup is free and an account is easy to maintain. We'll supply you with images or text links to place on your sites, if you need. Then at the beginning of every month, we'll send a check to each affiliate for the previous month's commissions. For more details and to set up an affiliate account, visit http://www.apress.com/affiliate/.
> 
> ***************************************
> 
> 5. The Latest Apress Books--Hot Off the Press
> 
> I only have a little room to feature just a sampling of our latest titles. But you can view lots more new releases here: http://www.apress.com/book/newRelease.html. 
> 
> "Building Flickr Applications with PHP"
> By Rob Kunkle and Andrew Morton 
> August 2006 | ISBN: 1-59059-612-9 | 216 pages | $34.99
> http://www.apress.com/book/bookDisplay.html?bID=10079
> 
> "Beginning Hibernate: From Novice to Professional"
> By Jeff Linwood and Dave Minter
> August 2006 | ISBN: 1-59059-693-5 | 360 pages | $39.99
> http://www.apress.com/book/bookDisplay.html?bID=10151 
> 
> "Pro .NET 2.0 Windows Forms and Custom Controls in VB 2005"
> By Matthew MacDonald
> August 2006 | ISBN: 1-59059-694-3 | 1080 pages | $49.99
> http://www.apress.com/book/bookDisplay.html?bID=10144 
> 
> "Beginning CSS Web Development: From Novice to Professional"
> By Simon Collison
> August 2006 | ISBN: 1-59059-689-7 | 448 pages | $34.99
> http://www.apress.com/book/bookDisplay.html?bID=10148 
> 
> "Pro Oracle Database 10g RAC on Linux: Installation, Administration, and Performance"
> By Julian Dyke and Steve Shaw
> August 2006 | ISBN: 1-59059-524-6 | 824 pages | $59.99
> http://www.apress.com/book/bookDisplay.html?bID=458 
> 
> "The Definitive Guide to GCC, Second Edition"
> By William von Hagen
> August 2006 | ISBN: 1-59059-585-8 | 584 pages | $49.99
> http://www.apress.com/book/bookDisplay.html?bID=10049 
> 
> ***************************************
> 
> 6. Forthcoming Books--Fall Releases
> 
> Here are a handful of titles to look forward to. Preview even more upcoming titles here: http://www.apress.com/book/forthcoming.html. 
> 
> "Pro ASP.NET 2.0 in C# 2005, Special Edition"
> By Matthew MacDonald
> To publish September 2006 | ISBN: 1-59059-768-0 | 1400 pages | $64.99
> http://www.apress.com/book/bookDisplay.html?bID=10195
> 
> "Beginning Microsoft Word Business Documents"
> By James J. Marshall 
> To publish September 2006 | ISBN: 1-59059-728-1 | 216 pages | $34.99
> http://www.apress.com/book/bookDisplay.html?bID=10165 
> 
> "AppleScript: The Comprehensive Guide to Scripting and Automation on Mac OS X, Second Edition"
> By Hanaan Rosenthal
> To publish September 2006 | ISBN: 1-59059-653-6 | 800 pages | $49.99
> http://www.apress.com/book/bookDisplay.html?bID=10107
>  
> "Pro XML Development with Java Technology"
> By Ajay Vohra and Deepak Vohra
> To publish September 2006 | ISBN: 1-59059-706-0 | 472 pages | $39.99
> http://www.apress.com/book/bookDisplay.html?bID=10157
> 
> "Pro Oracle Collaboration Suite 10g"
> By John Watson
> To publish September 2006 | ISBN: 1-59059-679-X | 400 pages | $64.99
> http://www.apress.com/book/bookDisplay.html?bID=10133
>  
> "Pro Open Source Mail: Building an Enterprise Mail Solution"
> By Curtis Smith
> To publish September 2006 | ISBN: 1-59059-598-X | 320 pages | $44.99
> http://www.apress.com/book/bookDisplay.html?bID=10066
> 	
> ***************************************
> 
> 7. Upcoming Tradeshows
> 
> Apress will be exhibiting at the following shows this fall. If you are there, please stop by and say hello!
> 
> Oracle Open World
> San Francisco, CA
> October 22 - 26, 2006
> http://www.oracle.com/openworld/index.html
> 
> PASS
> Seattle, WA
> November 14 - 17, 2006
> http://www.sqlpass.org/events/summit06/index.cfm
> 
> ***************************************
> 
> We do not send unsolicited newsletters. You received this because
> you or a previous contact registered a user group on http://www.apress.com.
> 
> To be removed from the Apress user group newsletter mailing list, please click here:
> http://www.apress.com/misc/optout2.html?e=william%40knowmad.com&h=1569f217e98781bb5c5e91774a60b342&l=21
> 
> Please do not reply to this e-mail. Instead, e-mail info at apress.com and we'll reply to your query.
> 
> Apress - The Expert's Voice(TM)
> 2560 Ninth St, Suite 219
> Berkeley, CA 94710
> 510-549-5930
> 
> 
> 
> 

----- End forwarded message -----

-- 
Knowmad Technologies
http://www.knowmad.com

From william at knowmad.com  Tue Aug 29 08:57:09 2006
From: william at knowmad.com (William McKee)
Date: Tue, 29 Aug 2006 11:57:09 -0400
Subject: [Charlotte.PM] Doing a chroot in Perl
In-Reply-To: <1156801643.19321.101.camel@shuttle.linxdev.com>
References: <1156793988.19321.97.camel@shuttle.linxdev.com>
	<20060828201922.GZ12628@knowmad.com>
	<1156801643.19321.101.camel@shuttle.linxdev.com>
Message-ID: <20060829155709.GP12628@knowmad.com>

On Mon, Aug 28, 2006 at 05:47:23PM -0400, Christopher Fowler wrote:
> I'm asking why was tomcat able to redirect the output to a file name
> out.txt in / of the chroot.  / in the chroot is owned by root.

Sorry but I can't be of much help there. I'm not very familiar with
chroot. Have you tried CharLUG? This seems to me to be more of a OS
issue than a Perl problem. Let us know if you figure it out.


Good luck,
William

-- 
Knowmad Technologies
http://www.knowmad.com

From irgem at earthlink.net  Tue Aug 29 19:32:12 2006
From: irgem at earthlink.net (George McLaughlin)
Date: Tue, 29 Aug 2006 22:32:12 -0400 (GMT-04:00)
Subject: [Charlotte.PM] charlotte Digest, Vol 23, Issue 6: chroot issue
Message-ID: <7608523.1156905133038.JavaMail.root@elwamui-little.atl.sa.earthlink.net>

If I'm not mistaken, you also have to do a 'chmod 7455 <enter script name here>' to get it to work on a unix system. This is because a regular user should not be able to run a script/program that can gain root access without the person who has root access giveing the app the 'ok' to do whatever it is that requires root access. The other option is to set the directory up as readable/writeable for everybody...something like 'chmod -R 666 <directory goes here>'. 

George McLaughlin

You need to be careful when you do this though since it opens all kinds of security holes...I think they've even written books on how not to do it.... :(

-----Original Message-----
>From: charlotte-request at pm.org
>Sent: Aug 29, 2006 3:00 PM
>To: charlotte at pm.org
>Subject: charlotte Digest, Vol 23, Issue 6
>
>Send charlotte mailing list submissions to
>	charlotte at pm.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>	http://mail.pm.org/mailman/listinfo/charlotte
>or, via email, send a message with subject or body 'help' to
>	charlotte-request at pm.org
>
>You can reach the person managing the list at
>	charlotte-owner at pm.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of charlotte digest..."
>
>
>Today's Topics:
>
>   1. Re: Doing a chroot in Perl (William McKee)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Tue, 29 Aug 2006 11:57:09 -0400
>From: William McKee <william at knowmad.com>
>Subject: Re: [Charlotte.PM] Doing a chroot in Perl
>To: Christopher Fowler <cfowler at outpostsentinel.com>
>Cc: charlotte at pm.org
>Message-ID: <20060829155709.GP12628 at knowmad.com>
>Content-Type: text/plain; charset=us-ascii
>
>On Mon, Aug 28, 2006 at 05:47:23PM -0400, Christopher Fowler wrote:
>> I'm asking why was tomcat able to redirect the output to a file name
>> out.txt in / of the chroot.  / in the chroot is owned by root.
>
>Sorry but I can't be of much help there. I'm not very familiar with
>chroot. Have you tried CharLUG? This seems to me to be more of a OS
>issue than a Perl problem. Let us know if you figure it out.
>
>
>Good luck,
>William
>
>-- 
>Knowmad Technologies
>http://www.knowmad.com
>
>
>------------------------------
>
>_______________________________________________
>charlotte mailing list
>charlotte at pm.org
>http://mail.pm.org/mailman/listinfo/charlotte
>
>End of charlotte Digest, Vol 23, Issue 6
>****************************************


From irgem at earthlink.net  Tue Aug 29 20:20:33 2006
From: irgem at earthlink.net (George McLaughlin)
Date: Tue, 29 Aug 2006 23:20:33 -0400 (GMT-04:00)
Subject: [Charlotte.PM] charlotte Digest, Vol 23, Issue 6: chroot env
Message-ID: <22692629.1156908033333.JavaMail.root@elwamui-little.atl.sa.earthlink.net>

DOH!! Just read issue #5 and saw the rest of the thread. I thought you were trying to do something else...my bust. I don't know about what would cause the issue your having. 'chroot' will only change your working directory to the one you have listed as $root...and if $root is not included I believe it changes it to the current dir or $_...

It does sound more like a Apache or Unix question though. Did you install your Apache in a chroot env or set the SecChrootDir directive in the mod_secuirty module or does tomcat allow you to use that?

George McLaughlin

-----Original Message-----
>From: charlotte-request at pm.org
>Sent: Aug 29, 2006 3:00 PM
>To: charlotte at pm.org
>Subject: charlotte Digest, Vol 23, Issue 6
>
>Send charlotte mailing list submissions to
>	charlotte at pm.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>	http://mail.pm.org/mailman/listinfo/charlotte
>or, via email, send a message with subject or body 'help' to
>	charlotte-request at pm.org
>
>You can reach the person managing the list at
>	charlotte-owner at pm.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of charlotte digest..."
>
>
>Today's Topics:
>
>   1. Re: Doing a chroot in Perl (William McKee)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Tue, 29 Aug 2006 11:57:09 -0400
>From: William McKee <william at knowmad.com>
>Subject: Re: [Charlotte.PM] Doing a chroot in Perl
>To: Christopher Fowler <cfowler at outpostsentinel.com>
>Cc: charlotte at pm.org
>Message-ID: <20060829155709.GP12628 at knowmad.com>
>Content-Type: text/plain; charset=us-ascii
>
>On Mon, Aug 28, 2006 at 05:47:23PM -0400, Christopher Fowler wrote:
>> I'm asking why was tomcat able to redirect the output to a file name
>> out.txt in / of the chroot.  / in the chroot is owned by root.
>
>Sorry but I can't be of much help there. I'm not very familiar with
>chroot. Have you tried CharLUG? This seems to me to be more of a OS
>issue than a Perl problem. Let us know if you figure it out.
>
>
>Good luck,
>William
>
>-- 
>Knowmad Technologies
>http://www.knowmad.com
>
>
>------------------------------
>
>_______________________________________________
>charlotte mailing list
>charlotte at pm.org
>http://mail.pm.org/mailman/listinfo/charlotte
>
>End of charlotte Digest, Vol 23, Issue 6
>****************************************


From cfowler at outpostsentinel.com  Wed Aug 30 12:12:37 2006
From: cfowler at outpostsentinel.com (Christopher Fowler)
Date: Wed, 30 Aug 2006 15:12:37 -0400
Subject: [Charlotte.PM] Chroot solved
Message-ID: <1156965157.5534.61.camel@shuttle.linxdev.com>

I solved the permissions issue:

  setgid $gid;
  $) = "$gid, $gid";
  setuid $uid;
  chdir $dir;

  print "After: $)\n"

Before: 0 10 6 4 3 2 1 0
After: 500 10 6 4 3 2 1 0

$ ps > /out.t
/bin/sh: cannot create /out.t: Permission denied
$