<br clear="all">Laurent Laffont - <a href="http://twitter.com/#!/lolgzs" target="_blank">@lolgzs</a><br><br>Pharo Smalltalk Screencasts: <a href="http://www.pharocasts.com/" target="_blank">http://www.pharocasts.com/</a><br>
Blog: <a href="http://magaloma.blogspot.com/" target="_blank">http://magaloma.blogspot.com/</a><div>Developer group: <a href="http://cara74.seasidehosting.st" target="_blank">http://cara74.seasidehosting.st</a></div><br>
<br><br><div class="gmail_quote">On Tue, Aug 16, 2011 at 6:46 PM, Igor Stasenko <span dir="ltr"><<a href="mailto:siguctua@gmail.com">siguctua@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im"><br>
On 16 August 2011 16:42, laurent laffont <<a href="mailto:laurent.laffont@gmail.com">laurent.laffont@gmail.com</a>> wrote:<br>
><br>
> Hi,<br>
><br>
> for SmallHarbour I've cloned cogvm/blessed and then add security patches from SeasideHosting. See<br>
> - <a href="https://gitorious.org/~laurentlaffont/cogvm/smallharbour" target="_blank">https://gitorious.org/~laurentlaffont/cogvm/smallharbour</a><br>
> - <a href="https://gitorious.org/~laurentlaffont/cogvm/smallharbour/commit/7f45e401f8c805021e3ef06e110e3f079fe6ecc3" target="_blank">https://gitorious.org/~laurentlaffont/cogvm/smallharbour/commit/7f45e401f8c805021e3ef06e110e3f079fe6ecc3</a><br>
><br>
> What's the best way to stay synchronized with cogvm/blessed commits ?<br>
<br>
</div>Fist you need to add blessed as remote repository:<br>
<br>
git remote add blessed git://<a href="http://gitorious.org/cogvm/blessed.git" target="_blank">gitorious.org/cogvm/blessed.git</a><br>
<br>
Then you can simply pull changes to your branch:<br>
<br>
git pull blessed<br>
<br>
and it will merge changes automatically. (of course if there's no conflicts).<br>
<br>
And then<br>
<br>
git push<br>
<br>
to push updates to your own repository.<br>
<div class="im"><br>
> Is it interesting to adapt this patch for integration in cogvm/blessed ?<br>
<br>
</div>Absolutely. All contributions is welcome :)<br>
<br>
> Is this patch good ?<br>
><br>
<br>
I am a bit out of context. Where i can read a description of what you did?<br></blockquote><div><br></div><div><br></div><div><br></div><div>First the changes are quite small, originally made by Nestyle (I suppose) for SesideHosting. </div>
<div>This introduce the use of environment variables to restrict filesystem and port access. For example we don't want the hosted image to be able to access /etc/passwd or another account files. We don't want that 2 images use the same port.</div>
<div><br></div><div>So this patch read these environment variables:</div><br>export SQUEAK_PORT_LO=16400<br>export SQUEAK_PORT_HI=16407<br>export SQUEAK_ROOT_DIR="/service/myaccount/files"<br><div><br></div><div>
so only port between 16400 and 16407 can be opened, only /service/myaccount/files can be read/written.</div><div><br></div><div>Note that in the patch port 25 (SMTP) is always accessible.</div><div><br></div><div>This is very specific to SeasideHosting/SmallHarbour, so I don't think the patch should be apply as it is now in cogvm/blessed, but having such functionalities in the VM would be nice IMO.</div>
<div><br></div><div><br></div><div>The commit is here - quite easy to read: <a href="https://gitorious.org/~laurentlaffont/cogvm/smallharbour/commit/7f45e401f8c805021e3ef06e110e3f079fe6ecc3">https://gitorious.org/~laurentlaffont/cogvm/smallharbour/commit/7f45e401f8c805021e3ef06e110e3f079fe6ecc3</a></div>
<div><br></div><div>Laurent.</div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div><div></div><div class="h5"><br>
<br>
> Laurent Laffont - @lolgzs<br>
><br>
> Pharo Smalltalk Screencasts: <a href="http://www.pharocasts.com/" target="_blank">http://www.pharocasts.com/</a><br>
> Blog: <a href="http://magaloma.blogspot.com/" target="_blank">http://magaloma.blogspot.com/</a><br>
> Developer group: <a href="http://cara74.seasidehosting.st" target="_blank">http://cara74.seasidehosting.st</a><br>
><br>
><br>
<br>
<br>
<br>
</div></div><font color="#888888">--<br>
Best regards,<br>
Igor Stasenko AKA sig.<br>
</font></blockquote></div><br>