Skip to content

Instantly share code, notes, and snippets.

View cipherboy's full-sized avatar

Alexander Scheel cipherboy

269 followers · 486 following
View GitHub Profile
@cipherboy
cipherboy / gist:7ad873ad3fe888f9509e713ab2ebc53f
Created July 29, 2021 18:10
tmpfiles.d and CIS
root@ubuntu-2004-base:~# cat /usr/lib/tmpfiles.d/00rsyslog.conf
# Override systemd's default tmpfiles.d/var.conf to make /var/log writable by
# the syslog group, so that rsyslog can run as user.
# See tmpfiles.d(5) for details.
# Type Path Mode UID GID Age Argument
z /var/log 0775 root syslog -
z /var/log/auth.log 0640 syslog adm -
z /var/log/mail.err 0640 syslog adm -
z /var/log/mail.log 0640 syslog adm -
@cipherboy
cipherboy / log.txt
Created June 18, 2021 13:41
Discussion with ~ab about i686 arches on #freeipa
2021-03-12 09:12:06 cipherboy ab: Did the Fedora updates go through already or are they still pending?
2021-03-12 09:19:58 cipherboy ab: Ah, just checked Bodhi, looks like you filed new builds yesterday. I've gotta do new builds today, mind updating your Bodhi once I get them added or do you want to drop them?
2021-03-12 09:52:49 cipherboy ab: I updated https://bodhi.fedoraproject.org/updates/FEDORA-2021-c0d6637ca5 to add the new fix for CVE-2021-20179.
2021-03-12 09:54:39 ab cipherboy: thanks. Could you please also add %if 0%{?rhel} && 0%{?rhel} > 8 .. ExcludeArch: i686 .. %endif
2021-03-12 09:55:06 ab cipherboy: we cannot build on i686 anymore in RHEL9 because md2man is not there
2021-03-12 09:55:19 cipherboy ab: Sure, f34 only or f35/rawhide too?
2021-03-12 09:55:26 ab all of them
2021-03-12 09:55:56 cipherboy ab: Hmm maybe we should get a better upstream release procedure that does the md2man conversion in a different source tar
@cipherboy
cipherboy / gist:e96ab28561c5382633280a6b9002fe22
Created May 13, 2021 21:05
Build and run capabilities
[cipherboy@x1c ~]$ podman pull fedora:rawhide
[cipherboy@x1c ~]$ podman run -ti fedora:rawhide /bin/bash
...
[root@4868520a8a28 jss]# git checkout capabilities-change-output
Branch 'capabilities-change-output' set up to track remote branch 'capabilities-change-output' from 'origin'.
Switched to a new branch 'capabilities-change-output'
[root@4868520a8a28 jss]# cd build/ && cmake ..
-- The C compiler identification is GNU 11.1.1
-- The CXX compiler identification is GNU 11.1.1
-- Detecting C compiler ABI info
@cipherboy
cipherboy / pk11akey.c
Created April 23, 2021 22:24
Annotated PK11_ExportEncryptedPrivKeyInfo - with https://github.com/cipherboy/nss/pull/6 (Notes prefixed with AS:)
SECKEYEncryptedPrivateKeyInfo *
PK11_ExportEncryptedPrivKeyInfo(
PK11SlotInfo *slot, /* optional, encrypt key in this slot */
SECOidTag algTag, /* encrypt key with this algorithm
AS: this needs to be updated to the SEC_OID_AES_KEY_WRAP_PAD.
requires changing JSS. */
SECItem *pwitem, /* password for PBE encryption */
SECKEYPrivateKey *pk, /* encrypt this private key */
int iteration, /* interations for PBE alg */
@cipherboy
cipherboy / squares.py
Created August 19, 2020 12:56
#!/usr/bin/python3
# From github.com/cipherboy/cmsh
# --> `make distclean cms all check install` will give you a local
# installation.
import cmsh
import itertools
def constraint(puzzle, x, y):
@cipherboy
cipherboy / Hello.java
Created April 6, 2020 22:02
Java Under Valgrind
public class Hello {
public static void main(String[] args) {
System.out.println("Hello, world!");
System.gc();
}
}
@cipherboy
cipherboy / Overview.md
Last active March 31, 2020 20:52
JSSProvider - Old and New JSS

JSS Changes

Old JSS (< v4.6.4, unreleased)

Under older JSS versions, it is possible to do the following:

In java.security:

...
@cipherboy
cipherboy / SSLSecurity.java
Created March 31, 2020 18:16
JDK8u JSSE - Exceptions
final class X509TrustManagerJavaxWrapper implements
javax.net.ssl.X509TrustManager {
private X509TrustManager theX509TrustManager;
X509TrustManagerJavaxWrapper(X509TrustManager obj) {
theX509TrustManager = obj;
}
public void checkClientTrusted(
@cipherboy
cipherboy / patch.diff
Created October 28, 2019 16:50
resteasy v4.3.1 update
diff --git a/resteasy.spec b/resteasy.spec
index 6f5c752..e8e178c 100644
--- a/resteasy.spec
+++ b/resteasy.spec
@@ -2,7 +2,7 @@
%global namedversion %{version}%{namedreltag}
Name: resteasy
-Version: 3.0.26
+Version: 4.3.1
@cipherboy
cipherboy / output.txt
Last active October 18, 2019 00:15
MyPy Wat
cmsh/var.py:222: error: Argument 1 to "v_not" has incompatible type "Union[bool, Variable]"; expected "Variable"
cmsh/var.py:276: error: Argument 1 to "v_not" has incompatible type "Union[bool, Variable]"; expected "Variable"
cmsh/var.py:318: error: Argument 1 to "v_not" has incompatible type "Union[bool, Variable]"; expected "Variable"