To break out of a non-global zone and become root user in the global zone

Hi folks
"to break out of a non-global zone and become root user in the global zone through a kernel bug exploit"
Is this possible and has SUN allready a fix/workaround/patch for that?
Cheers

Is it possible there's a bug in the kernel? Sure.
Someone would need to find and identify such a bug before it could be fixed. I've not heard of the discovery of a bug like this. You could check the bug database at www.opensolaris.org.
Darren

Similar Messages

HT2623 how do i delete icloud account on my ipad when my apple ID is non active email and i don't know the password and can't reset password without active email

how do i delete icloud account on my ipad when my apple ID is non active email and i don't know the password and can't reset password without active email

If the iCloud account you are trying to delete is old ID that was later updated to change it to your current ID, you can go to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. Then edit the name of the account to change it back to your old email address. You can now use your current password to turn off Find My iPhone on your device, even though it prompts you for the password for your old account ID. Then go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was. Now, if desired, you can go to Settings>iCloud and sign in with your current iCloud ID and password.

I am getting a message that sys startup disk is almost full. I cleaned all my old emails out, archived old ones i needed and erased most files on the computer. I restarted but I'm still getting the message

I am getting a message that sys startup disk is almost full. I cleaned all my old emails out, archived old ones i needed and erased most files on the computer. I restarted but I'm still getting the message

Reindex Spotlight again.
http://support.apple.com/en-us/HT201716
Do not concern yourself about the backups. They will be deleted automatically if space is needed for other data:
http://support.apple.com/en-us/HT202301
Ciao.

In iPS 3.0SP3a, I would like to change the super-admin entry from root to a non-root user. The problem is I was able to install iPS as a pseudo-root however console will not let me in as that.

There must be a way to do this. Pls help.

Hi,
Please Check whether the said unix user is already existing under any roles of the default-domain.
If so, delete the user from that role in the default_domain and then
Goto : Manage Domain > view Domain Administrator Roles > Admin Role > users
Create the non root unix user name .
Once you create the user profile for this under the role defined for super admin,you can access as super admin.
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support"

How to create a domain for a non-root user using the JES installer

Some questions have been circulating on what are the steps to create a whole domain configuration using a non-root user. Here is one method that you can try....
- Login as user "testuser", all operations are using the user I want to start the whole domain with
- cd to the testuser home directory and created apptest (mkdir apptest)
-created domain
/opt/SUNWappserver/appserver/bin/asadmin create-domain adminuser admin adminport 4849 --domaindir /testuser/apptest testdomain
Please enter adminpassword>adminadmin
Please enter adminpassword again>adminadmin
Please enter the master password>adminadmin
Please enter the master password again>adminadmin
- created nodeagent
/opt/SUNWappserver/appserver/bin/asadmin create-node-agent user admin port 4849 password adminadmin agentdir /testuser/apptest testnode
Please enter the master password>adminadmin
- Start the domain
/opt/SUNWappserver/appserver/bin/asadmin start-domain domaindir /testuser/apptest user admin testdomain
Please enter password>adminadmin
Please enter the master password>adminadmin
Domain testdomain started.
- Start the nodeagent
/opt/SUNWappserver/appserver/bin/asadmin start-node-agent user admin agentdir /testuser/apptest/ testnode
Please enter password>adminadmin
Please enter the master password>adminadmin
Command start-node-agent executed successfully.
- create instance
/opt/SUNWappserver/appserver/bin/asadmin create-instance nodeagent testnode user admin i1
Please enter password>adminadmin
Command create-instance executed successfully.
- start instance
/opt/SUNWappserver/appserver/bin/asadmin start-instance --user admin i1
Please enter password>adminadmin
Command start-instance executed successfully.

And this can be used to the incident priority (same technique can be used for problems):
private int GetIncidentPriority(EnterpriseManagementGroup emg)
try
//Get the incident settings class
ManagementPackClass mpc = emg.EntityTypes.GetClass(new Guid("613c9f3e-9b94-1fef-4088-16c33bfd0be1"));
//Get the emo for the incident settings
EnterpriseManagementObject emo = emg.EntityObjects.GetObject<EnterpriseManagementObject>(mpc.Id, ObjectQueryOptions.Default);
//Get the priority maxtrix and convert to XML
if (emo[mpc, "PriorityMatrix"].Value != null && emo[mpc, "PriorityMatrix"].Value.ToString() != "")
string sMatrixXML = emo[mpc, "PriorityMatrix"].Value.ToString();
XmlDocument xmlDoc = new XmlDocument();
xmlDoc.LoadXml(sMatrixXML);
//Get the guid strings for impact and urgency (note - xml goes by urgency then impact)
string sUrgencyGuid = "04b28bfb-8898-9af3-009b-979e58837852";
string sImpactGuid = "11756265-f18e-e090-eed2-3aa923a4c872";
foreach (XmlNode urgencynode in xmlDoc.ChildNodes[0].ChildNodes)
if (urgencynode.Attributes.Count == 1 && urgencynode.Attributes["Id"].Value.ToString().ToLower() == sUrgencyGuid)
foreach (XmlNode impactnode in urgencynode.ChildNodes)
if (impactnode.Attributes.Count == 1 && impactnode.Attributes["Id"].Value.ToString().ToLower() == sImpactGuid)
XmlNode prioritynode = impactnode.ChildNodes[0];
return Convert.ToInt32(prioritynode.InnerXml);
return 0;
catch
return 0;
Rob Ford scsmnz.net
Cireson www.cireson.com
For a free SCSM 2012 Notify Analyst app click
here

How to link a non-linkable query and a plsql query in the datamodel

Hi,
I am creating a matrix group....
Where in I get my
1) Column values from a non-linkable query - Period (Jan, Feb....)
2) Row values from a plsql query (ref cursor). Group is also from this query
3) Cross product is on the above two queries.
4) Cell info comes from a plsql query (refcursor).
I created a group link from the cross product group (3) to the cell info query (4)
I prepared the layout and executed the report... I am getting redundant data....
The reason being the (4) and (1) are not linked properly.
From google, About non-linkable queries column.... I understood that to link two non-linkable queries, we need to create a group link and then add a where clause in the child query referring the parent query column.
But my case is a non-linkable query (which is a parent ) and a plsql query which is the cell.
Any help...?
Thanks in advance.
KK

Hello Sam,
>
I was wondering if you could have any link or examples to show how to make a form with report and an insert form in the same page, these two forms are related to the same table. Our customer wants a user can add new row to the table in a form and see all of rows created by this user in a report, this report should provide edit link as well. the problem is: whenever I inserted a new row or edit a row or delete a row, and submitted, and return to this page, all of hidden items lost their values, so report is blank, and some display only items also lost their values. Could anyone give me suggestions?
>
This will help:
http://www.grassroots-oracle.com/2011/09/apex-tutorial-form-report-sharing-same.html
Hope it helps!
Regards,
Kiran

I have created another user on our iMac but cannot figure out how to access aperture, excel and other purchased applications on the new desk top

I have created an additional user on our iMac and have tried to set up file share but nothing happens. I have an empty desktop and only the applications that came with the computer appear. I'd like to have access to the others that we've purchased... Aperture, excel, etc. I've followed the instructions for file sharing but I must be missing something.
Thanks for any assistance.

Rebecca1952,
You are over complicating things. File sharing has nothing to do with what applications that each user has access to.
To me it sounds like you just need some basic help getting the applications that you need onto your dock.
Try this:
Login to you new user account
Click on an empty part of your desktop
Click on the "Go" menu and select "Applications"
A Finder window should open showing ALL of the applications on the Mac.
Double-click one of them that you will use frequently (e.g. Excel)
Once it is up and running you should see it's icon down on your dock.
Right-click that icon on the dock, then select "Options", and "Keep in Dock"
Once you have added each application to the dock in this manner, then it will remain there even after you quit the application.
For one more expert way to launch any application on your mac quickly, try this:
Hold the [command] key and hit the [spacebar] (this will start a Spotlight search)
Start typing the name of the application you want to run (e.g. "Aperture")
Once you see "Aperture" selected, simply hit the [return] key and Aperture will launch
Hope this solves you problem.

Why do I get this error (The request timed out.(102)) when i try and download an app from the mac app store?

I have been trying to download the new updates for Aperture , Safari, and Iphoto. I click update and it gets the download bar but it doesnt get passed 0 KB when downloading the apps. Previously I had gotten the NSURLErrorDomain error -3001.)(102) but that stopped. Why is it doing this?

typing
http://swcdn.apple.com/content/downloads/53/02/041-8081/2jwp4wjrwygtm4lc608qy4h0 %20n4a9yyq37g/Safari6.0.2Mountain.pkg
in the Safari address bar will download the update, but at the moment the Apple servers are very slow.

How should I break out individual Acts from an entire performance?

I've successfully assembled multiple video clips and separately recorded audio into a master timeline, of a community (Chinese) New Year's show lasting 1½ hours.
I want to break out portions of that to polish and post on youku, use as a single source clip in a different project, etc. Suppose, as a concrete example, I want to work with Act 7, and have identified the mark-in and out points. I used a marker with a duration to remember it.
I suppose I could copy just that 10 minutes to a new timeline (If I could figure out how to do a non-point selection), vertically across all tracks, and start editing that: adding intro, cutting out boring parts, bringing in other assets like a logo.
That's the essential effect I want, but would very much like it to be still referencing the Master. Then, when I improve the audio or color balance of the entire thing, or add more assets from people sending in their footage, I get the updated results in the Act 7 timeline as well, even though I've cut out or re-arranged sections and it's not a single unbroken match to the original 10-minute span.
In particular, my immediate concern is to make a rough draft of the Act 7 video, before going back to reduce noise and tweak the color.
What's the right way to do this?

like jim says, if you shrink or expand the edit in the nested sequence, it wont automatically shrink or expand the nest in the master timeline. you will have to adjust it manually. so if you cut out a speech, it wont automatically shrink or adjust the sequences on the master timeline.
Then what did he mean by “Any changes in the Nested Sequences will then be carried into your master sequence.”
What kind of changes, if not edits? I thought that meant the length of the nested clip will not change but its contents will, in the same way as a media file on the master timeline.
I think nobody is understanding what I asked. I'll clarify with an illustration:
Example for Planning Workflow
My Master Real-Time Timeline contains
⋯ blahblah ⋯ [1111112222333333444444555555] ⋯ blahblah ⋯
with several tracks.
Step 1: I want to copy the labeled range (between the [⋯]) to a new timeline, which I'll call Act7ver1. Then, I'll edit it
iii2223334444445ooo
(adding clips for intro and outtro, and cutting parts out of the original),
choose which tracks to switch between and what times,
add any effects.
If this were a nested timeline, it would show up the edited way in the Master as well. Not what I'm asking.
Step 2: Receive additional video clips and add them to the Master, and add a new audio track that cleans up the original audio.
Step 2b: Revisit Act7ver1. Master's changes to source clips would show up in any timeline that uses them, so copy/paste in step 1 would be fine. But adding new tracks that are aligned with the same time range? I'll want to use the new audio track, and decide if I want to cut in any of the new video angles.
Step 3: Copy the same labeled range(between the [⋯]) again to a new timeline, which for sake of the example I'll call Act7ver二.
It will contain the entire unchanged range, not the cut-up version from ver1.
I'll edit it differently, keeping more of the talking between the music, which are exactly those parts cut out of ver1.
Different intro, etc.
Step 4: Some time later, I'll copy a part of the range to a new project. Since this is a tutorial, I'll switch between the different mic, mix, and edited sound tracks to illustrate the difference. That is, all the tracks are available, not just the normal presentation copy used normally. I don't expect to be changing the original anymore, but I like to keep the option of having the various uses see the updated version or keep the original, which is a special case of seeing new tracks present and synced.
If I save over the source file, all uses see the new content.
If I "replace clip", and the replacement is not a complete length of the original (the audio is original is 97 minutes, but I only remix one 8 minute act) it won't line up. Putting the new mix on the Master Real-Time is my solution, especially in light of (4) showing the before/after as part of the script.
So ideally I want the "smart object" I pasted in the first place to see whatever is currently in the Master at the position it refers to, including tracks that were not present before.
Understanding thus far
Simply selecting the original range and turning it into a nested timeline will not do what I want. But, maybe a more advanced use of this feature? ⋯ later: Hmm, maybe it is? Editing the timeline selects pieces of the elements without modifying them. I see a new feature highlight discussing source-edit mode and acting like a copy/paste so all the tracks show up. But I don't know if this is indeed just a cut/paste or a smart object that still allows updates to the definition (of the timeline being nested) to show up in this usage. It sounds difficult to reconcile changes to what's on the various tracks. Anyone explored this new feature and have more than a superficial review posted? (What I've seen just shows that the tracks show up "like a copy/paste" but does not explore changing the referenced timeline or limitations of editing the "pasted" track’s content.)
Adding a track to the Master won't show up in the nested timelines, but there are not a lot of them so if it is straightforward to razor it at the matching places and pop them in explicitly, that's fine.
More Thoughts
What about a script that can generate a new timeline from a marked range, across all tracks that might be present? Then it can be re-run just as easily if the Master changes, and I don't need them to automatically follow any changes: I'll push changes explicitly.
The underlying issue is getting new content into the various projects, synced up at the proper position, even if I have to explicitly grab it while editing the project. The new track has to line up properly with the clips being used.
Ad Interim
For this current project in progress, I can add a dummy track for the future cleaned audio, and get it into the nested timelines from the start. Then saving over the file or a replace-clip can take care of it later.
Intended Workflow
I need to produce a passable first draft of each Act quickly.
Then, do further work on materials that are not necessarily neatly contained within each Act, but cross through them, and are not the exact same start-time and length as any existing clip. It seems natural to do this on a Master Real-Time timeline.
Easily incorporate the new or updated material into the Act timelines, and continue editing the Acts.
then later,
Use the material in other projects (a mundane use of nesting, esp. with the new feature, is fine here for normal uses. The aforementioned video documenting the different steps is a special case.

HT4623 Just updated to iOS is to 7. The phone is stuck in a loop on the terms and conditions of use and I cannot break out and use the phone at all. What can I do?

Hi How do I break out of this loop?

I rebooted my phone by pressing the button on the front and top of the phone at the same time. After the phone restarted, I was able to get out of the do-loop. Hope that works for you.

IdM 8.1: Problems to provision Solaris 10 with non root user.

Hello
When IdM 8.1 tries to create a user into Solaris 10 I got this Error:
com.waveset.util.WavesetException: An error occurred adding user 'testSolaris' to resource 'Test_Solaris'. com.waveset.util.WavesetException: Script failed waiting for "_,)#(:" in response "> > > > > > > > > > > pbmasterd3.5.4-01: 5408.07 select: Bad file number [email protected]: 3005 Request en...roblem in readMuxHeader fd 1. - fd closed unexpectedly [email protected]: 3005 Request ended unexpectedly " com.waveset.util.WavesetException: Script processor timed out with nothing to read and the following unprocessed text: "> > > > > > > > > > > pbmasterd3.5.4-01: 5408.07 select: Bad file number [email protected]: 3005 Request ended unexpectedly pbmasterd3.5.4-01@pbr9c: 5430.1 header problem in readMuxHeader fd 1. - fd closed unexpectedly [email protected]: 3005 Request ended unexpectedly pbmasterd3.5.4-01@pbr9c: 5430.1 header problem in readMuxHeader fd 1. - fd closed unexpectedly [email protected]: 3005 Request ended unexpectedly pbmasterd3.5.4-01@pbr9c: 5430.1 header problem in readMuxHeader fd 1. - fd closed unexpectedly [email protected]: 3005 Request ended unexpectedly ".+
*The non root user has the privileges that describes the IdM documentation. This error doesn't occure when the connection user is root.*
*What's wrong?*

The non - root doesn't work yet. I try to use a user with SUDO = TRUE but I got this error when I Test the connection:
Script failed waiting for "ASSWORD:" in response "_,)#+(:" ==> com.waveset.util.WavesetException: Script processor timed out with nothing to read and the following unprocessed text: "++_,)#+(:".+
I haver already configured the parameter tty_tickets to TRUE and the sudoers file as following:
+# sudoers file.+
+#+
+# This file MUST be edited with the 'visudo' command as root.+
+#+
+# See the sudoers man page for the details on how to write a sudoers file.+
+#+
++Defaults syslog=auth+
Defaults:idm_sudo tty_tickets
root ALL=(ALL) ALL
idm_sudo ALL = NOPASSWD: /usr/bin/auths,/usr/sbin/groupadd,/usr/sbin/groupdel,/usr/sbin/groupmod,/usr/bin/last,/usr/bin/listusers,/usr/bin/logins,/usr/bin/passwd,/usr/bin/profiles,
+/usr/bin/roles,/usr/sbin/useradd,/usr/sbin/userdel,/usr/sbin/usermod,/usr/bin/awk,/usr/bin/cat,/usr/bin/chmod,/usr/bin/chown,/usr/bin/cp,/usr/bin/cut,/usr/bin/diff,/usr/bin/echo,+
+/usr/bin/grep,/usr/bin/ls,/usr/bin/mv,/usr/bin/rm,/usr/bin/sed,/usr/bin/sleep,/usr/bin/sort,/usr/bin/tail,/usr/bin/touch,/usr/bin/which+
What's wrong?

Adding a domain user to the admin role within the local user management breaks all metro apps for all users!!

Hi,
I have posted this in another large thread under the "Windows 8 General" group but have not had any appropriate feedback from MS.
After hours of testing and working with other users I have managed to isolate a simple situation that breaks all metro ui applications within Windows 8 for all users on the machine. Here are my exact steps and notes.
Before continuing if you are running Avast then your solution may be to turn of the behaviour shield functionality as this also breaks metro apps. This is NOT the problem we are having!
I have performed 3 cleans installs after isolating the problem and am able to reproduce the issue every time using the same steps on two different machines.
First thing to say is that for us it has nothing to do with simply joining the domain, domain/group policies nor does it appear to have anything to do with the software we installed, the problem here is much more simple but the result is pretty terrible.
Here are my exact steps of what I did to reproduce our problem:
Complete format of HDD in preperation for a clean install
Clean install performed
Set up the machine initially with a local account
Test metro apps - all working fine
Open control panel from the desktop, click on System, change the system to join the domain, click reboot
Log into the system using my domain account
Test metro apps - all working fine
Here's were the problem starts. I need my domain account to have admin rights on the local machine so I can install programs without the IT men having to come over and enter their password every 5 mins.
I go to control panel via the desktop and click on User Accounts. From with here I then click on "Manage User Accounts". This requires the IT guys to enter their details to give me access to such functionality. This is fine
In the dialog box that opens I can only see the local user that was initially created during setup. The "Group" for this local account shows as "Administrators" - Image included below (important to note that metro apps are working at this point)
I click add and then add my domain account - also giving it administrator access
Sign off or reboot to ensure the new security is applied
Sign back in to the domain account
Test metro - ALL BROKEN
Sign out
Sign in as local account
Test Metro - NOW ALL BROKEN FOR THIS USER ALSO
So as soon as I add my domain account to the local user accounts and set it as admin it breaks all metro apps for all users. This is on a totally clean install with nothing at all installed other than the OS.
Annoyingly if I go back and change the domain account to a standard user or if I totally remove the domain account from the local account management system the problem does not go away for either user. basically it is now permanently broken. The only fix I
could fathom was a full re install and not giving the domain user admin access to the local machine.
Screen one - this is the local user accounts window AFTER joining the domain and logging in with my domain account (All metro apps working at this point)
Screen 2: User accounts AFTER joining the domain and AFTER adding domain account to local user management (METRO BROKEN)
I have isolated my machine from all group policies so nothing like that is affecting me. Users I have spoken to in different companies have policies that automatically add users to the local user management. This means that metro apps break as
soon as they join the domain which leads them to wrongly think it is group policies causing the error. Once they isolate themselves from this they can reproduce following my steps.
Thanks

Hi Juke,
Thank you for the response and apologies for the delay in getting back to you. My machine was running a long task so I couldn't try your suggested solution.
I had already tried running the registry merge suggested at the top of the thread to no avail. I had not tried deleting the OLE key totally so I did that and the problem still exists. I will post all the errors I see in event viewer below. For
your info, since posting my initial comment I have sent out my steps to 7 different people and we can all reproduce the problem. This comes to 10 different machines (3 of them mine then the other guys) in 3 different businesses / domains. We see the same errors
in event viewer.
Under "Windows Logs" --> "Application" : I get two separate error events the first reads "Activation of app winstore_cw5n1h2txyewy!Windows.Store failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional
information." The second arrives in the log about 15 seconds after the first and reads "App winstore_cw5n1h2txyewy!Windows.Store did not launch within its allotted time."
Under "Windows Logs" --> "System" : I get one error that reads "The server Windows.Store did not register with DCOM within the required timeout."
Under "Applications And Services Logs" --> "Microsoft" --> "Windows" --> "Apps" --> "Microsoft-Windows-TWinUI/Operational" : I get one error that reads "Activation of the app winstore_cw5n1h2txyewy!Windows.Store for the
Windows.Launch contract failed with error: The app didn't start."
If you require any further information just let me know and I will provide as much as I can.
Thanks

Non Domain Servers and Workstations

Hi,
we are trying to deploy SCCM 2012 clients to non domain servers, and we are also in the process of trying to find out what the best way we can clean up machines from sccm that have not logged in 90days or more.
From my understanding if I turn on only discover machines that have logged on to the domain in a given period of time than that means if a server has not logged in will not be discovered which can be an issue when patching, and also what do I need to do
with the non domain servers with sccm client installed on the servers.
can you please help me with this that would be greatly appreciated
Thanks Tom

Hi,
This blog post does a good job explaining the steps to manage non-domain machines with ConfigMgr 2012:
http://blogs.technet.com/b/anilm/archive/2012/05/06/managing-workgroup-clients-in-configuration-manager-2012.aspx
This technet article also has more detailed information about client communication for workgroup computers:
http://technet.microsoft.com/en-us/library/gg712701.aspx#Plan_Com_X_Forest
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Universe.applyOverload Method Run non-linearly slower and slower

Universe.applyOverload Method Run non-linearly slower and slower, that is, for the 10th user and restriction we add, this method runs 1 second, however, for the 80th user and restriction we add, this method runs 8 seconds.
Customers think it's a bug for our BOE Java SDK method, could I know why this method is non-linear, and any way to improve its running speed.
The following is the code, for interator 80 times.
while (iter.hasNext())
                    user = (rpt_users_t) iter.next();
                    IOverload overload = (IOverload) newObjs.add("Overload");
                    overload.setTitle(user.getBoezh().trim());
                    overload.setUniverse(universe.getID());
                    overload.setConnection(connectionID);
                    overload.getRestrictedRows().clear();
                    overload.getRestrictedRows().add("HZB0101_T","HZB0101_T.BRANCH_COMPANY_CODE='3090100' AND HZB0101_T.DEPARTMENT_CODE='"+ user.getBmdm() + "'");
                    overload.getRestrictedRows().add("BM_T","BM_T.DEPARTMENT_GROUP_CODE='" + user.getBmzdm().trim()+ "'");
                    infoStore.commit(newObjs);
                    // Commit to User
                    IInfoObject everyone = (IInfoObject) infoStore.query(
                              "Select TOP 1 SI_ID " + " From CI_SYSTEMOBJECTS "+ " Where SI_KIND='User' " + " And SI_NAME='"+ user.getBoezh().trim() + "'").get(0);
                    int everyoneID = everyone.getID();
                    universe.applyOverload(overload, everyoneID, true);
                    //infoStore.commit(objs);
                    System.out.println(user.getBoezh() + " loading...");

When invoking applyOverload multiple times, it's O(N^2) if you're granting rights to a User or UserGroup.
When granting, the applyOverload method retrieves all Overloads applied to the Universe and walks across each one, granting the identified ones and removing rights from others.
Sincerely,
Ted Ueda

Why can't I fill out a PDF in Adobe Reader and email it with the saved information?

When I fill out a PDF in Adobe Reader and "Save As" to desktop the filled out information goes blank when I attach it to an email. Additionally, I can't save to word or excel except for online. What can I do to fix this?

Try using Adobe Reader XI (fully updated).
Be well...

To break out of a non-global zone and become root user in the global zone

Similar Messages

Maybe you are looking for