- wlug - list.wlug.org.nz

'sudo' and 'su' Are Being Rewritten In Rust For Memory Safety
by Peter Reutemann 02 May '23

02 May '23

'Phoronix reports: With the financial backing of Amazon Web Services, sudo and su are being rewritten in the Rust programming language in order to increase the memory safety for the widely relied upon software... to further enhance Linux/open-source security. "[B]ecause it's written in C, sudo has experienced many vulnerabilities related to memory safety issues," according to a blog post announcing the project: It's important that we secure our most critical software, particularly from memory safety vulnerabilities. It's hard to imagine software that's much more critical than sudo and su. This work is being done by a joint team from Ferrous Systems and Tweede Golf with generous support from Amazon Web Services. The work plan is viewable here. The GitHub repository is here. ' -- source: https://linux.slashdot.org/story/23/05/01/0020239 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Foundation Announces DentOS 3.0, an Open Source Network OS for Disaggregated Networks
by Peter Reutemann 01 May '23

01 May '23

'This month the Linux Foundation announced version 3.0 of DentOS, an open source network operating system using the Linux kernel, Switchdev, and other Linux-based projects for a standardized network operating system "without abstractions or overhead," according to the project's web page. "All underlying infrastructure — including ASIC and Silicon for networking and datapath — is treated equally; while existing abstractions, APIs, drivers, low-level overhead, and other open software are simplified. DENT unites silicon vendors, ODMs, SIs, OEMs, and end users across all verticals to enable the transition to disaggregated networks." Or, as the Linux Foundation, the operating system provides "a flexible and customizable platform for network administrators to manage their networks." DENT provides access to open source-based switches at a lower cost and with more flexibility compared to proprietary switches with locked ecosystems. Network wiring closets in many facilities--including retail stores, warehousing, remote locations, enterprises, and small and mid-sized businesses--are often small, requiring a compact solution for network management. Additionally, staff expertise may be limited, and branch-office switches from leading suppliers can require costly contracts. DENT can be easily deployed on white-box hardware in small spaces, providing an efficient and cost-effective solution for network management. As a result, DENT deployment can significantly enhance network management in a wide range of environments, providing greater efficiency, reliability, and scalability... DentOS enables Amazon's Just Walk Out Technology to connect and manage thousands of devices like cameras, sensors, entry and exit gates, and access points on the network edge. ' -- source: https://tech.slashdot.org/story/23/04/30/010222 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Not-So-Stupid(?) Linux Trick
by Lawrence D'Oliveiro 28 Apr '23

28 Apr '23

Here’s a command that can sometimes look a bit unnerving in operation, but is actually quite safe: rmdir -p «dir» where «dir» is some directory. Or to watch the whole process in action, add the option to give progress messages: rmdir -pv «dir» Background: the basic command rmdir «dir» deletes the named directory, but only if it is empty. The “-p” option takes this further, by then trying to delete the parent of «dir», and if that succeeds, the parent of that, and so on. It stops only when it gets to a nonempty directory, or when it has done all components of «dir». So if, for example, you try this on an absolute path, this will mean the command always stops on an error. And the error could quite likely be on a directory which contains important stuff that you care about. But, as I said, it’s quite safe, since it won’t delete that stuff. But I told you it could be unnerving, didn’t I?

1 0

New Intel Linux Graphics Driver Patches Released, Up To 10-15% Better Performance
by Peter Reutemann 28 Apr '23

28 Apr '23

'A new set of patches have been released for the Intel Linux graphics driver that "can provide 10-15% better performance when operating in the tuned mode," reports Phoronix. From the report: The set of Intel i915 Linux kernel graphics driver patches are about exposing the Intel RPS (Requested Power State) up/down thresholds. Right now the Intel Linux kernel driver has static values set for the up/down thresholds between power states while these patches would make them dynamically configurable by user-space. Google engineer Syed Faaiz Hussain raised the issue that they experimented with the Intel RPS tuning and were able to manage up to 15% better performance. With Counter-Strike: Global Offensive with OpenGL was a 14.5% boost, CS:GO with Vulkan was 12.9% faster, and Civilization VI with OpenGL was 11% faster while Strange Brigade was unchanged. No other game numbers were provided. But as this is about changing the threshold for how aggressively the Intel graphics hardware switches power states, the proposed patches leave it up to user-space to adjust the thresholds as they wish. Google engineers are interested in hooking this into Feral's GameMode so that the values could be automatically tuned when launching games and then returning to their former state when done gaming, in order to maximize battery life / power efficiency. The only downside with these current patches are that they work only for non-GuC based platforms... So the latest Alder/Raptor Lake notebooks as well as Intel DG2/Alchemist discrete graphics currently aren't able to make use of this tuning option. ' -- source: https://tech.slashdot.org/story/23/04/27/1927209 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Linux Kernel 6.3 Released
by Peter Reutemann 27 Apr '23

27 Apr '23

'A report from ZDNet, written by Steven Vaughan-Nichols: The latest Linux kernel is out with a slew of new features -- and, for once, this release has been nice and easy. [...] Speaking of Rust, everyone's favorite memory-safe language, the new kernel comes with user-mode Linux support for Rust code. Miguel Ojeda, the Linux kernel developer, who's led the efforts to bring Rust to Linux, said the additions mean we're, "getting closer to a point where the first Rust modules can be upstreamed." Other features in the Linux 6.3 kernel include support and enablement for upcoming and yet-to-be-released Intel and AMD CPUs and graphics hardware. While these updates will primarily benefit future hardware, several changes in this release directly impact today's users' day-to-day experience. The kernel now supports AMD's automatic Indirect Branch Restricted Speculation (IBRS) feature for Spectre mitigation, providing a less performance-intensive alternative to the retpoline speculative execution. Linux 6.3 also includes new power management drivers for ARM and RISC-V architectures. RISC-V has gained support for accelerated string functions via the Zbb bit manipulation extension, while ARM received support for scalable matrix extension 2 instructions. For filesystems, Linux 6.3 brings AES-SHA2-based encryption support for NFS, optimizations for EXT4 direct I/O performance, low-latency decompression for EROFS, and a faster Brtfs file-system driver. Bottom line: many file operations will be a bit more secure and faster. For gamers, the new kernel provides a native Steam Deck controller interface in HID. It also includes compatibility for the Logitech G923 Xbox edition racing wheel and improvements to the 8BitDo Pro 2 wired game controllers. Who says you can't game on Linux? Single-board computers, such as BannaPi R3, BPI-M2 Pro, and Orange Pi R1 Plus, also benefit from updated drivers in this release. There's also support for more Wi-Fi adapters and chipsets. These include: Realtek RTL8188EU Wi-Fi adapter support; Qualcomm Wi-Fi 7 wireless chipset support; and Ethernet support for NVIDIA BlueField 3 DPU. For users dealing with complex networks that have both old-school and modern networks, the new kernel can also handle multi-path TCP handling mixed flows with IPv4 and IPv6.' -- source: https://linux.slashdot.org/story/23/04/26/0023238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft Edge is Leaking the Sites You Visit To Bing
by Peter Reutemann 26 Apr '23

26 Apr '23

'Microsoft's Edge browser appears to be sending URLs you visit to its Bing API website. Reddit users first spotted the privacy issues with Edge last week, noticing that the latest version of Microsoft Edge sends a request to bingapis.com with the full URL of nearly every page you navigate to. Microsoft tells The Verge it's investigating the reports. From a report: "Searching for references to this URL give very few results, no documentation on this feature at all," said hackermchackface, the Reddit user who first discovered the issue. While Reddit users weren't able to uncover why Microsoft Edge is sending the URLs you visit to its Bing API site, we asked Rafael Rivera, a software engineer and one of the developers behind EarTrumpet, to investigate, and he discovered it's part of a poorly implemented new feature in Edge. "Microsoft Edge now has a creator follow feature that is enabled by default," says Rivera in a conversation with The Verge. "It appears the intent was to notify Bing when you're on certain pages, such as YouTube, The Verge, and Reddit. But it doesn't appear to be working correctly, instead sending nearly every domain you visit to Bing."' -- source: https://yro.slashdot.org/story/23/04/25/209254 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Red Hat Begins Cutting 'Hundreds of Jobs'
by Peter Reutemann 25 Apr '23

25 Apr '23

'According to Phoronix citing multiple local North Carolina news outlets, Red Hat is cutting "hundreds of jobs" in an initial round of layoffs announced today. From the report: According to WRAL, Red Hat CEO Matt Hicks is said to have told employees in an email "we will not reduce roles directly selling to customers or building our products," which is hopefully good news for their many upstream Linux developers they employ that ultimately build Red Hat Enterprise Linux and associated software products. Red Hat will begin notifying affected employees today in some countries while the process will continue through the end of the quarter. IBM, which acquired Red Hat in 2019, has already slashed some five thousand positions so far in 2023.' -- source: https://linux.slashdot.org/story/23/04/24/2220256 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Microsoft Introduces “Windows Frontline”
by Lawrence D'Oliveiro 24 Apr '23

24 Apr '23

This <https://www.theregister.com/2023/04/24/windows_frontline_cloudpc_sustainabi…> sounds like a way for Microsoft to get more revenue from users buying fewer PCs. I wonder how long it will be before Intel and the major PC vendors put a stop to this kind of talk?

1 0

Mango Pi RISC-V Single Board Computer
by Lawrence D'Oliveiro 24 Apr '23

24 Apr '23

Here is an entertaining walkthrough from Christopher Barnatt on the ever-dependable “Explaining Computers” channel of a single-core RISC-V-based board with the same tiny dimensions as a Raspberry Pi Zero W <https://www.youtube.com/watch?v=-g18PMjjlcc>. Hardly a speed demon, but for the price, I think it represents amazing value. Also a clear indication that RISC-V is fulfilling its promise of being a serious competitor, or even a successor, to ARM.

1 0

QEMU 8.0 Released with More ARM and RISC-V Emulation
by Peter Reutemann 24 Apr '23

24 Apr '23

'There's a major new update of QEMU, the open-source machine emulator, reports 9to5Linux: Coming a year after QEMU 7.0, the QEMU 8.0 release is here to improve support for ARM and RISC-V architectures. - For ARM, it adds emulation support for FEAT_EVT, FEAT_FGT, and AArch32 ARMv8-R, CPU emulation for Cortex-A55 and Cortex-R52, support for a new Olimex STM32 H405 machine type, as well as gdbstub support for M-profile system registers. - For the RISC-V architecture, QEMU 8.0 brings updated machine support for OpenTitan, PolarFire, and OpenSBI, additional ISA and Extension support for smstateen, native debug icount trigger, cache-related PMU events in virtual mode, Zawrs/Svadu/T-Head/Zicond extensions, and ACPI support. Moreover, RISC-V received multiple fixes covering PMP propagation for TLB, mret exceptions, uncompressed instructions, and other emulation/virtualization improvements. Improvements were also made for the s390x (IBM Z) platform, the HP Precision Architecture (HPPA) platform, and x86.' -- source: https://slashdot.org/story/23/04/23/0525206 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, Hamilton, NZ Mobile +64 22 190 2375 https://www.cs.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0