Free protection against black magic software for linux

Parted Magic is a ~30mb LiveCD/USB with its only purpose being partitioning hard drives. Although GParted and Parted are the main programs, the CD/USB also offers programs like partimage, testdisk, fdisk, sfdisk, dd, etc...
Parted Magic is based on my work from the GParted LiveCD project and falls under the terms of the GPL.
Enhancements:
- We added dd_rhelp, sdparm, mbr, and xfburn for starters. Updated programs: linux-2.6.22, e2fsprogs-1.40.2, ntfs-3g-1.710, dd_rescue-1.13, ddrescue-1.5, leafpad-0.8.11, file-4.21, testdisk-6.7, mdadm-2.6.1, pciutils-2.2.5, syslinux-3.51, isomaster-1.0, hdparm-7.4, xfsprogs_2.8.21-1, busybox-1.5.1, and usbutils-0.72. All menus are bypassed now. After the syslinux menu, it boots to the desktop without any other interruptions. You can now create the LiveUSB from the LiveCD by using our new USB Operations program...

IP Tables network magic SysRq is a new iptables target that allows you to do the same as the magic sysrq key on a keyboard does, but over the network.

Why to use the remote sysrq?

Sometimes a remote server hangs and only responds to icmp echo request (ping). Every administrator of such machine is very unhappy because (s)he must go there and press the reset button. It takes a long time and its inconvenient. So here is a solution. Use the Network Magic SysRq and you will be able to do more than just pressing a reset button. You can remotely sync disks, remount them read-only, then do a reboot. And everything comfortably and only in a few seconds.

Is it secure?

That depends. Let me explain: You can restrict who can do this by setting the iptables firewall. But unfortunately, for simplicity, the Network Magic SysRq is based on a single packet request. This packet is encrypted and password protected, but if somebody can sniff it (s)he will be able to repeat (but not to change) the query (so-called replay attack). The query is also protected by a timestamp. When the packet is generated, it is stamped by current date and time. Then on the server side that stamp is compared with the current time of the server and if it is within the tolerance the request is accepted. Together with some other information, the timestamp is protected by SHA1 hash. This means that the potential attacker has a limited time to repeat the sniffed packet. If anybody requires a better security than this, some secure encrypted tunnel can be used. (not depending on userspace, of course!

How to install it?

Just type make.

When everything is compiled type make install as root and after that run depmod -a. Now you can load the kernel module by the command modprobe ipt_SYSRQ.

You would also like to configure the server password and the tolerance. This can be set when installing the module into a kernel, by specifying the module parameters passwd for password and tolerance for tolerance in seconds. The default values are passwd="" and tolerance=43200.

Example:

modprobe ipt_SYSRQ passwd="my_very_secret_password" tolerance=3600

Module options can also be specified in file /etc/modules.conf.

Example:

options ipt_SYSRQ passwd="my_very_secret_password" tolerance=3600

What to do on a server?

After the module is loaded you are able to deploy it using the iptables command.

Some examples of usage:

iptables -I INPUT -p udp --dport 9 -j SYSRQ

or

iptables -I INPUT -i eth1 -s 192.168.1.2 -p udp --dport 9 -j SYSRQ

Note that UDP port 9 is used. This is the default port for send_sysrq program, which shouldnt do any harm, as it defaults to discard service.

What to do on the remote machine?

Copy the executable binary send_sysrq to the remote (client) machine. Alternatively, you can compile ipt_sysrq there yourselves. After uncompressing the source package, you just need to do a make send_sysrq.

Now you can use the client program send_sysrq to send the sysrq request.

CGI::Builder::Magic Perl module contains CGI::Builder and Template::Magic integration.

SYNOPSIS

# just include it in your build

use CGI::Builder
qw| CGI::Builder::Magic
|;

SYNOPSIS

Example 1

use Config::Magic;
use Data::Dumper;

$input=q{
Section 1 {
[Section 4]
#Comment style #1
//Comment style #2
;Comment style #3
Monkey:1
Monkey=>2
Monkey:=3
< Section 2 >
Foo = Bar
Baz { Bip:1
Pants==5 }
< /Section >
< Tasty Cheese="3" / >
< Section 5 >
Foo=Bippity,boppity,boo
< /Section >
}
}
#Fastest way:
$config = new Config::Magic();
print Dumper($config->parse($input));

Example 2

use Config::Magic;
use Data::Dumper;
#Arguments with sorting $ordered_hash = 1; $config = new Config::Magic("input.conf",$ordered_hash); print Dumper($config->parse); $result = $config->get_result; print Dumper($result);

OUTPUT (from second example)

Section 1 => {
Section 4 => {
Monkey => [
1,
2,
3
]
},
Section => [
{
2 => {},
Foo => Bar,
Baz => {
Bip => 1,
Pants => 5
}
},
{
attribs=>5,
Foo => [
Bippity,
boppity,
boo
]
}
],
Tasty => {
Cheese => {
}
}

This module uses Parse::RecDescent to generate a parse tree for nearly any kind of configuration file. You can even combine files/configuration types. It understands XML, Apache-style, ini files, csv files, and pretty much everything else I could find. Just give it a file, and get a hash tree out. If it doesnt understand the file, or it isnt well formed (such as if a bracket is missing, etc), then you will get a partial result, or no result at all.

There is a single option that can be passed to this file which indicates that the resulting hash should be ordered rather than random. This is done using Tie::Hash::Indexed. You can also call "setordered" directly to change from using ordered to unordered hashes.

Template::Magic is a Perl module for magic merger of runtime values with templates.

SYNOPSIS

Just add these 2 magic lines to your code...

use Template::Magic;
Template::Magic->new->print( /path/to/template );

to have all your variable and subroutines merged with the template file, or set one or more constructor array to customize the output generation as you need:

use Template::Magic qw( -compile );

$tm = new Template::Magic
paths => [ qw(/any/path /any/other/path) ] ,
markers => [ qw( < / > ) ] ,
lookups => [ %my_hash, $my_obj, main ] ,
zone_handlers => [ &my_zone_handler, _EVAL_ ] ,
value_handlers => [ DEFAULT, &my_value_handler ] ,
text_handlers => sub {print lc $_[1]} ,
output_handlers => sub {print uc $_[1]} ,
post_handlers => &my_post_handler ,
options => no_cache ;

$tm->nprint( template => /path/to/template
lookups => %my_special_hash );

The Horde Application Framework is written in PHP, and provides the common tools a Web application requires: classes for dealing with preferences, compression, browser detection, connection tracking, MIME, and more.
The Horde Framework does not provide any significant end user functionality and it provides a base for other applications and tools for developers. You will probably want to install some of the available Horde applications, such as IMP (a webmail client), or Kronolith (a calendar).
Enhancements:
- This is a security release that fixes a cross site scripting vulnerability and improves protection against phishing attempts.

Video::Info::Magic can resolve video filetype if possible.

SYNOPSIS

use strict;
use Video::Info::Magic qw(:all);

my $type = divine(/path/to/video.mpg );

print $type; #MPEG system stream data (maybe)

## ... see methods below

EXPORT

various constants related to video file formats. All are prefixed with "VIDEO_".
divine(): Employs /usr/share/magic entries to determine a files type, as well as GUID and other info from Microsoft, mplayer, transcode...