The WhiteHack Blog

We all know that ESX server can be run within VMWare Workstation 6, but as I already has Server 2.0 installed, I decided to see if the same could be done, mainly as learning ESX server cannot be a bad thing, but I did not want to run Server 2, and Workstation 6 at the same time, although both are free products, it really does not make much sense to run thetwo on eht same machine if one will suffice.

The basic VM is set as a 32bit RedHat linux machine running a 2.6 kernel, with 1GB memory, bridged nic, 8GB hard disk, and I am using the ESX 3.5.0 iso image from VMWare.

(continue reading…)

grsecurity’s Brad Spengler has just released details of an exploit that works on a fully patched Linux kernel (versions 2.6.30 and 2.6.30.1).

From TheRegister:

“The vulnerability is located in several parts of Linux, including one that implements functions known as net/tun. Although the code correctly checks to make sure the tun variable doesn’t point to NULL, the compiler removes the lines responsible for that inspection during optimization routines. The result: When the variable points to zero, the kernel tries to access forbidden pieces of memory, leading to a compromise of the box running the OS.”

The source code is rather interesting to read, indicating that due to gcc optimizations unexploitable code becomes exploitable, and it can bypass the mmap_min_addr in an SELinux vulnerability. The code can be compiled to work on 32bit and 64 bit systems.

YouTube video of exploit in action.

Awesome!

Just encoutered a problem where an Acer Inspire One lost the wifi icon.

This seems to be a regular occurence with these netbooks, and most of the searching I did seemed to indicate a full system restore is required.

There is, however, a easy fix.

Open the Terminal program (you can do this by opening up a folder (such as Pictures), and selecting File > Terminal.

At the command prompt type in:

cd ~/.gconf/system/
Then type in
rm networking -r
You’ll need to press y a number of times to delete the folders.
When it returns to the command prompt type in
sudo init 6
The netbook will now reboot, and your wifi icon should be visible again.

This month RedHat have changed the format of their exams.

The RHCE previously consisted of a 2.5 hour exam followed by a 3 hour exam, now it is just a 3.5 hour exam.
Similarly the RHCT exam was a 1 hour exam followed by a 2 hour exam, and is now just a 2 hour exam.

The reasoning behind this is, according to RedHat: “Our analysis of thousands of exam results found that more time was allocated in the first section than was needed for candidates who could historically pass the second section. Allocating 2.5 hours in the first section was only beneficial to individuals who, we found, were unable to pass the second section“.

They follow this with: “Taking a certification exam is like a visit to the doctor: it should take as long as is necessary to make an accurate diagnosis, but should not take any longer than necessary. A shorter exam makes better use of candidates’ time“.

They should also add that charging the same ($799) for the RHCE exam, is also like going to the doctor, no matter what the problem is, you’re going to get fingered somewhere uncomfortable.

To put it in perspective the LPI exams are $160 each for levels one and two, and $260 for level 3, a total of $580. Completing the full MCSE track which is seven exams is $875.

A quick search on Jobserve (looking at UK jobs) for permanent roles using RHCE as the keyword results in 14 hits, whereas using MCSE as the keyword results in 217 hits.

The RedHat exam is a very good hands-on exam, one I actually enjoyed taking, but I failed it and it was on the company’s dime, at $799 I wouldn’t consider paying for this myself though, and I think a lot of people feel the same.

Read more on RedHat’s new exam format here

So I have decided to use Slackware as a base for my Linux build.

Naturally I am going to call it WhiteHack Linux.

I will be using VMWare server to host the development box.

So after finishing my MCSE, then taking a week out to do my CEH before I crack on with the next certification I started to wonder what to do next, the CCNA or the RHCE? The CCNA is the one required more by employers, but the RHCE is probably (IMHO) more interesting, albeit far more expensive to sit the exam. The CCNA offers a Microsoft-like second chance which is good as the exam costs £140 the RHCE costs over £600 and as far as I know, there is not a free re-sit. So the CCNA it is…

But with side line at a DIY Linux. I found a great manual called Linux From Scratch, which walks you through creating your own distribution, what better way to learn an OS than to build it yourself?

So on these pages I’ll jot down my progress.