Security - We will get there

1. How to extract files in rpm packages without installing them for file in `ls -1 ../*.rpm` ; do rpm2cpio $file | cpio -ivmud ; done
2. Files inside multiple rpm packages for file in `ls -1 ../*.rpm`; do echo The Files in $file >>filelist.txt; rpm -ql -p $file >>filelist.txt; echo >>filelist.txt ; echo >>filelist.txt; done

   

To fix the CSS security vulnerabilities.

I did the backup for both files and db, then copy over the new version, copy back the file .htaccess and sites/default/settings.php, then run the update.php. All went smoothly and the site is up in 30 minutes.

 

Recently drupal.org turned off the site search function but suggested to use google instead. Here is the snippet from Eric which is great for my drupal based website too.

"I almost always use site:drupal.org -site:lists.drupal.org -site:cvs.drupal.org -site:api.drupal.org at google.com to search through the forums and the rest of Drupal.org."

From the Improvements to the Drupal.org infrastructure posted at drupal.org, you can have some idea on what the folks are working on.

Here is the whole article for my reference:

I had nx server setup a while ago to provide remote access for my home network. Recently as I changed my laptop, I had to reinstall the client. It took me a little while to figure out the options to make it work. Here is the tips:

1. NX private key needs to be copied from the server and put into the client.
2. enable ssl encryption, otherwise it will not work.

Then enjoy!

Being busy for the recent 2 weeks. It's another big change for me. To realize my dream, I left my wife and my lovely kids for San Francisco. It's a dream place for me since I am young. I am here to work as an IT security professional, but more importantly I want to get into the atomosphere where startup get born. The work is ok and I should have no problem to grasp the technology there. My spare time was spent on driving around, hanging out with groups and yeah-endless phone calls to my family(using my voip server at home)

I found conflict between Foudnstone and Shavlik when Foundstone reported missing patch while Shavlik reported patch installed. The bad news is you have no clue how Foundstone determines that so I had to call the support. Fourtunately the support is quite helpful and here is the signature they are looking for:

After installed nedi 1.0.w, I got the following error msg when viewed the graph for subinterface from web gui.

This  nodeaccess module will give me more granular control based on both node type and individual node. The configuration has two steps. To determine which node type has this type of grant capability and grant the node's permission to either role or user.