Free raise you software for linux

Are You Human? is a script that uses a graphical test to insure that a human is being dealt with rather than a script.

This is useful to avoid automated Web signups or automated attempts to crack passwords.

There are many equivalent libraries for other languages but this is the first one for Python. The Python Imaging Library (PIL) is required.

The policy is generated interactively. Operations not covered by the policy raise an alarm, allowing an user to refine the currently configured policy.
For complicated applications, it is difficult to know the correct policy before running them. Initially, Systrace notifies the user about all system calls that an application tries to execute. The user configures a policy for the specific system call that caused the warning. After a few minutes, a policy is generated that allows the application to run without any warnings. However, events that are not covered still generate a warning. Normally, that is an indication of a security problem. Systrace improves cyber security by providing intrusion prevention.
Alternatively, policies can be learned automatically. In many instances, the automatically learned policies can be used for sandboxing immediately. Sometimes, minimal manual post-processing is necessary.
With Systrace, untrusted binary applications can be sandboxed. Their access to the system can be restricted almost arbitrarily. Sandboxing applications that are available only as binaries is only sensible, as it is not possible to directly analyze what they are designed to do. However, constraining the system calls that large open-source applications are allowed to execute is useful too, as it is very difficult to determine their correctness.
System call arguments can be rewritten dynamically. This effects a virtual chroot for the sandboxed application. It also prevents race conditions in the argument evaluation.
Main features:
- Confines untrusted binary applications.
- Interactive Policy Generation with Graphical User Interface.
- Supports different emulations:
- GNU/Linux, BSDI, etc..
- System Call Argument Rewriting.
- Non-interactive Policy Enforcement.
- Remote Monitoring and Intrusion Detection.
- Privilege Elevation: Add-on capabilities.

PyReverse is a set of tools for reverse engineering Python code. So far, it features dependency analysis tools, documentation generation, and XMI generation for importation in a UML modeling tool. A special module can be used to generate files readable by Argo UML.
currently PyReverse build a representation of the source tree with:
- docstring for modules, classes, functions
- exceptions raised in functions
- modules attributes, functions, classes
- classs attributes defined in the class scope, inheritance links
- class instances attributes defined in the __init__ method. If possible, get the default value
- functions parameters name and optional default value
- detection of interface/abstract classes and visibility using regular expressions
- detection of links between classes using attributes default value
PyReverse provides modules which use this representation for:
- producing a XMI 1.0 UML 1.3 DOM representation
- creating PGML diagrams definitions according to the project representation, the XMI definition and a XML file which describes briefly the content of the diagrams (see ???). Those diagrams can be readen/edited with Argo UML
- generating UML diagrams readable by VCG (see ???).
- analyzing dependencies (see ???).
- generate skeleton for unit tests, using the unit testing framework for the standard library.

Block Attack - Raise of the Blocks is another block fall game based on Tetris Attack.

Block Attack - Raise of the Blocks is a block fall game. Like Tetris Attack and Crack Attack, block are raising from the floor and the player must clear them before they touch the roof.

Blocks are cleared by making a line of three blocks in the same color horizontally or vertically, and blocks can only be changed horizontally.

The goal is to either get as much points as possible, get as much point in two minutes, clear all blocks in limited moves and clear a number of lines.

Two player slit screen is available. Two players can compete in Time Trial (who gets most points in two minutes) or Vs. mode where clearing more than 3 blocks trows blocks at the opponent.

WMSMAIL is a program to check your e-mail accounts and displays their status. You can check up to 32 e-mail accounts of the following types: POP3, IMAP, NNTP, MBOX, MAILDIR and MH.

Furthermore you can select different authentication types and connection types for better security. Passwords for remote mailboxes will be stored to an encrypted passwordfile.

The main intention writting this windowmaker applet was to write a secure e-mail monitor. Therefor i used the mail library "libetpan", which offeres a lot of mail functions, mailbox types, different authentication and connection types. For password handling, i choosed the application "pwsafe", which has been modified to a class to get direct access to all necessary functions.

Since all windowmaker applets (as far i know) use gtk for dialogs, i also tried to use gtk in this applet. (But honestly spoken, i prefare QT, i think it is easier to handle and you find more information.

It was hard to find some major pages offering all important stuff. At the end i noticed, gtk1.2 is already obsoleted but it is even more difficult to find programming-information to the newer gtk I do NOT want to raise a diskussion up in here, make you mad, hurt anyones feelings - this is just my personal opinion - every body should use its preferred language and libraries.

stephanie is a program for hardening OpenBSD for multiuser environments.

Mmmmm, OpenBSD. Functional, secure, free. With an emphasis on security and integrated cryptography, it carries an excellent reputation for plain old "you-just-cant-hack-this-ness". Not perfect, but nothing is, at least theyre not wearing suits and lying to you.

There are a few roles where i believe OpenBSD fits perfectly. One of these is in multiuser environments, where you have large numbers of possibly malicious users with local access. Here the OpenBSD teams commitment to auditing and fixing code provides a level trust in the environment which is hard to find elsewhere. Also, their efforts to provide integrated cryptography means setting up secure access is easy. So, lets take advantage of the freely available source and tailor it to our specific needs.

Details:

In Phrack 54, route|Mike Schiffman wrote a series of patches for OpenBSD 2.4 for Trusted Path Execution (TPE). Stephanie brings a modified version of these up to speed for OpenBSD 2.8 - 3.0, along with some additional features. A trusted path is one where the parent directory is owned by root and is neither group or other writeable. The TPE works off an internal list of trusted user ids. If a given user tries to execute a file not in a trusted path, and their user id is not in the kernels trusted list, they are denied execution privileges. In real terms, this means they cant download, compile and run krad-sploit.c.

In addition to the TPE, a series of privacy patches came along too. Originally supplied as patches for the individual utilities, these are now implemented through kvm(3), and honour trusted users (ie, trusted users are allowed to see all system information). As a practical example, this means that untrusted users will only be able to see information about processes they own, and the stat tools (netstat, iostat, vmstat, etc) will generally be broken for them. It has been pointed out that by going through trying to kill every possible process id you can find other users processes, but you cant really gain any information on them, so this is not really a great concern.

The original TPE patches had one known way of bypassing the execution restrictions, which was using shell redirection to allow arbitrary interpreted language scripts to be run (perl, sh, etc). This has been fixed up, but could possibly be a big pain in the ass, so please pay attention. When an interpreter is invoked, like most things, it creates a new process group with a job count of one. When a series of commands are connected via the | character on the command line, all the commands belong to the same process group and the job count represents the number of commands eg ps -ax | grep something | awk {print $1} has a job count of three, and the ps, grep and awk processes all belong to the same process group.

The one exception to this is when a user logs in, where we find their shell has its job count set to zero. So how can we use this to prevent shell redirection for a given set of programs? We need to be able to distinguish between ordinary commands and interpreters. At the moment this is done by setting the immutable flag on them. So, in kern_exec(), if we find an untrusted user executing something with the immutable flag set and a job count greater than zero, we flag the process as being potentially dodgy. Then in other system calls we disallow read()ing from fd 0 (stdin) and things like dup2(0, n) if the process has been flagged.

There are two main disadvantages to this. First is the system will need to be brought down to single user mode if the interpreter needs to be patched, and secondly, people will have a hard time suing to an untrusted user. Of course, when a user has shell, they can still type any commands that could otherwise be placed in a shell script, but at the least, this will raise the bar a bit.

Finally, Stephanie brings restricted symbolic links, ala the openwall patches for linux. As time permits, im still working on adding additional features, and will add bits of the openwall stuff i like. The basic goal is to add an extra layer of security without being a monumental pain in the ass to legitimate users, so some things wont be there. I havent added the additional hard link restrictions of the openwall patch, but will do something about this later as time permits.

Installing:

Step by step instructions are presented in the install guide which comes with the source. Read it all first, but its reasonably straight forward. It would be a good idea to read the original article (local copy) if you havent already.

Its distributed under the original two clause BSD license, mess with it all you want, but dont get cranky at me if it breaks something.

You can also read the tpe_adm(8) man page online.

Planner is a project management application for GNOME.
Enhancements:
- fix bug #353232 - patch to raise majic priority, fixing nautilus behavior when clicking on a planner file
- fix bug #368186 - patch to paint guide lines behind project start date rather than on top - contributed by Arthur Petitpierre
- added -Wno-return-type for compile with database enabled
- patch related to bug #353213 - added #ifdefs to allow compile with libgda 1 or 2, up to libgda-1.9.102
- Added Arabic - contributed by Djihed Afifi
- fix for bug 358415 crash in gantt view, contributed by Arthur Petitpierre and mdpoole trolius org.