[27530] in Perl-Users-Digest
Perl-Users Digest, Issue: 9096 Volume: 10
daemon@ATHENA.MIT.EDU (Perl-Users Digest)
Mon Mar 27 18:05:56 2006
Date: Mon, 27 Mar 2006 15:05:06 -0800 (PST)
From: Perl-Users Digest <Perl-Users-Request@ruby.OCE.ORST.EDU>
To: Perl-Users@ruby.OCE.ORST.EDU (Perl-Users Digest)
Perl-Users Digest Mon, 27 Mar 2006 Volume: 10 Number: 9096
Today's topics:
Re: A Problem With GD (J Moreno)
Pstree - how to start? <ghard@gazeta.pl>
Re: Pstree - how to start? <no@email.com>
Re: Pstree - how to start? <john@castleamber.com>
Re: Pstree - how to start? <tony_curtis32@_NOSPAM_yahoo.com>
Re: Pstree - how to start? lawrence@hummer.not-here.net
Re: Security implications of taking a stylesheet URL fr <seppi@seppig.de>
Re: Security implications of taking a stylesheet URL fr <gifford@umich.edu>
Digest Administrivia (Last modified: 6 Apr 01) (Perl-Users-Digest Admin)
----------------------------------------------------------------------
Date: Mon, 27 Mar 2006 13:42:13 -0900
From: planB@newsreaders.com (J Moreno)
Subject: Re: A Problem With GD
Message-Id: <1hcuvb7.wn8pms1ne8ohsN%planB@newsreaders.com>
Uri Guttman <uri@stemsystems.com> wrote:
> >>>>> "bdf" == brian d foy <brian.d.foy@gmail.com> writes:
>
> bdf> In article <x7hd5rt720.fsf@mail.sysarch.com>, Uri Guttman
> bdf> <uri@stemsystems.com> wrote:
>
> >> in fact you should know that the docs that come with EACH
> >> installation of perl are always the most up to date docs for THAT
> >> version.
>
> bdf> Come on Uri, you know that's not true. We work on the docs even after
> bdf> each version is released, even if only to fix typoes.
>
> bdf> The perlfaq at http://faq.perl.org are the most up to date for the
> bdf> current version of Perl, for instance.
>
> typos and minor fixes aren't the issue. if the newer docs cover
> features/behavior that aren't in the perl you are running, it can be a
> major pain.
Sometimes the new docs state something clearer than the old docs do --
even though the behavior hasn't changed.
Also, even if it describes new behaviour, in a semi-theoretical
discussion, you might want to refer to the latest behaviour and ignore
the old, even if you personally are using the old.
In this case he was talking not necessarily about a behaviour, but about
guarantees applied to the behaviour of future versions, so what the
latest version says is much more relevant than what a previous version
says, even if he is using the previous version.
Version x: We will never do Z.
Version x+1: We now do Z.
--
JM
"Everything is futile." -- Marvin of Borg
------------------------------
Date: Mon, 27 Mar 2006 23:12:35 +0200
From: Ghard <ghard@gazeta.pl>
Subject: Pstree - how to start?
Message-Id: <e09kgm$1ps$1@inews.gazeta.pl>
Hi
I must make a pstree program under solaris os.
But I don't know even how to start. If you could tell me some names of
useful functions or modules to get a user name, full path of process,
parent id by having only process id, I'd be grateful
Thanks
Ghard
------------------------------
Date: Mon, 27 Mar 2006 22:43:57 +0100
From: Brian Wakem <no@email.com>
Subject: Re: Pstree - how to start?
Message-Id: <48r4ktFleqeoU1@individual.net>
Ghard wrote:
> Hi
> I must make a pstree program under solaris os.
> But I don't know even how to start. If you could tell me some names of
> useful functions or modules to get a user name, full path of process,
> parent id by having only process id, I'd be grateful
>
> Thanks
> Ghard
Reinvented any wheels recently?
$ perl -e 'system("pstree")'
init???atd
??crond
??cupsd
??dbus-daemon-1
??dcopserver
??dhclient
??events/0
??gam_server
??gconfd-2
??hald
??hcid
??httpd-perl???4*[httpd-perl]
??httpd2???advxsplitlogfil
? ??7*[httpd2]
??ifplugd
??kalarmd
??kapmd
??kded
??kdeinit???kio_about
? ??kio_file
? ??13*[kio_http]
? ??klauncher
? ??konqueror
? ??konsole???bash???perl???pstree
? ??kwin
? ??wine-pthread???wine-pthread
? ??xmms
??kdesktop
??kdm???X
? ??kdm???startkde???bluez-pin
? ??kwrapper
? ??mdkapplet
? ??net_applet
? ??startkde???gnome-volume-ma
??khelper
??khotkeys
??khubd
??kicker
??kio_uiserver
??2*[kjournald]
??klogd
??knode
??knotify
??konqueror
??krfcommd
??kseriod
??ksmserver
??ksoftirqd/0
??kswapd0
??kthread???aio/0
? ??kblockd/0
? ??2*[pdflush]
? ??rpciod/0
??lockd
??mDNSResponder
??master???pickup
? ??qmgr
? ??tlsmgr
??6*[mingetty]
??miniserv.pl
??mysqld_safe???mysqld
??8*[nfsd]
??nifd
??nmbd
??ntpd
??portmap
??postmaster???postmaster
? ??postmaster???postmaster
??rpc.mountd
??rpc.statd
??s2u
??sdpd
??smbd???smbd
??sshd
??syslogd
??udevd
??wine-pthread
??wineserver
??xfs
--
Brian Wakem
Email: http://homepage.ntlworld.com/b.wakem/myemail.png
------------------------------
Date: 27 Mar 2006 22:00:01 GMT
From: John Bokma <john@castleamber.com>
Subject: Re: Pstree - how to start?
Message-Id: <Xns9793A2C25F194castleamber@130.133.1.4>
Brian Wakem <no@email.com> wrote:
> Ghard wrote:
>
>> Hi
>> I must make a pstree program under solaris os.
>> But I don't know even how to start. If you could tell me some names of
>> useful functions or modules to get a user name, full path of process,
>> parent id by having only process id, I'd be grateful
>>
>> Thanks
>> Ghard
>
>
> Reinvented any wheels recently?
Nah, homework.
--
John Bokma Freelance software developer
&
Experienced Perl programmer: http://castleamber.com/
------------------------------
Date: 27 Mar 2006 17:10:36 -0500
From: Tony Curtis <tony_curtis32@_NOSPAM_yahoo.com>
Subject: Re: Pstree - how to start?
Message-Id: <y6zszmjbv8rn.fsf@post.queensu.ca>
>> On Mon, 27 Mar 2006 22:43:57 +0100,
>> Brian Wakem <no@email.com> said:
> Ghard wrote:
>> Hi I must make a pstree program under solaris os. But
>> I don't know even how to start. If you could tell me
>> some names of useful functions or modules to get a user
>> name, full path of process, parent id by having only
>> process id, I'd be grateful
>>
>> Thanks Ghard
> Reinvented any wheels recently?
> $ perl -e 'system("pstree")'
"ptree" for Solaris
http://cvs.opensolaris.org/
Going to be fun in perl!
hth
t
------------------------------
Date: 27 Mar 2006 14:57:00 -0800
From: lawrence@hummer.not-here.net
Subject: Re: Pstree - how to start?
Message-Id: <873bh3ijib.fsf@hummer.i-did-not-set--mail-host-address--so-shoot-me>
Brian Wakem <no@email.com> writes:
> Ghard wrote:
>
> > Hi
> > I must make a pstree program under solaris os.
> > But I don't know even how to start. If you could tell me some names of
> > useful functions or modules to get a user name, full path of process,
> > parent id by having only process id, I'd be grateful
> >
> > Thanks
> > Ghard
>
>
> Reinvented any wheels recently?
>
>
> $ perl -e 'system("pstree")'
>
Perhaps you should have read the eigth word of his post
lawrence@hummer> uname -a
SunOS hummer 5.8 Generic_108528-11 sun4u sparc SUNW,Ultra-Enterprise Solaris
lawrence@hummer> which pstree
pstree: Command not found.
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Lawrence Statton - lawrenabae@abaluon.abaom s/aba/c/g
Computer software consists of only two components: ones and
zeros, in roughly equal proportions. All that is required is to
sort them into the correct order.
------------------------------
Date: Mon, 27 Mar 2006 18:39:25 +0200
From: Sebastian Gottschalk <seppi@seppig.de>
Subject: Re: Security implications of taking a stylesheet URL from a CGI parameter
Message-Id: <48qiqgFl8pisU1@news.dfncis.de>
Scott W Gifford wrote:
> I tried a variety of attacks with stylesheets, to see if I could get
> JavaScript code to execute. I couldn't get any of them to work in the
> latest version of FireFox, but in a fully patched IE6 this worked:
>
> @import url("javascript:alert('Gotcha!')");
>
> So, it looks like this really isn't a safe thing to do.
JavaScript in IE is never safe against Cross Site Scripting, by design.
------------------------------
Date: Mon, 27 Mar 2006 11:01:10 -0500
From: Scott W Gifford <gifford@umich.edu>
Subject: Re: Security implications of taking a stylesheet URL from a CGI parameter
Message-Id: <qsz1wwnyj09.fsf@arkanoid.gpcc.itd.umich.edu>
Toby Inkster <usenet200603@tobyinkster.co.uk> writes:
[...]
> But look at the bigger picture. If this malicious person has linked to
> your application like this:
>
> <iframe src="http://example.org/application.cgi?stylesheet=http://example.net/evil.css">
> </iframe>
>
> then the visitor who recieves evil.css is *already* looking at the
> malicious person's website, so the malicious person has already had ample
> opportunity to load up evil.css.
Right, but the URL to the site containing that IFRAME will be to the
attacker's site, which should at least be a clue that something's
fishy (or phishy, as the case may be).
I tried a variety of attacks with stylesheets, to see if I could get
JavaScript code to execute. I couldn't get any of them to work in the
latest version of FireFox, but in a fully patched IE6 this worked:
@import url("javascript:alert('Gotcha!')");
So, it looks like this really isn't a safe thing to do.
Thanks for all the replies and information!
----Scott.
------------------------------
Date: 6 Apr 2001 21:33:47 GMT (Last modified)
From: Perl-Users-Request@ruby.oce.orst.edu (Perl-Users-Digest Admin)
Subject: Digest Administrivia (Last modified: 6 Apr 01)
Message-Id: <null>
Administrivia:
#The Perl-Users Digest is a retransmission of the USENET newsgroup
#comp.lang.perl.misc. For subscription or unsubscription requests, send
#the single line:
#
# subscribe perl-users
#or:
# unsubscribe perl-users
#
#to almanac@ruby.oce.orst.edu.
NOTE: due to the current flood of worm email banging on ruby, the smtp
server on ruby has been shut off until further notice.
To submit articles to comp.lang.perl.announce, send your article to
clpa@perl.com.
#To request back copies (available for a week or so), send your request
#to almanac@ruby.oce.orst.edu with the command "send perl-users x.y",
#where x is the volume number and y is the issue number.
#For other requests pertaining to the digest, send mail to
#perl-users-request@ruby.oce.orst.edu. Do not waste your time or mine
#sending perl questions to the -request address, I don't have time to
#answer them even if I did know the answer.
------------------------------
End of Perl-Users Digest V10 Issue 9096
***************************************
