Loren Bandiera’s weblog

Sussen 0.31 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.30:

• applet: Fixed uneven widget layout
• applet: Removed D-Bus remote control from applet until mono binding issue resolved
• editor: Implemented ‘new’, ’save’ and ’save as’ operations
• editor: Definitions can be executed
• editor: Remember window positions
• editor: Started port to Windows.Forms
• misc: Build applet/editor interfaces using Stetic instead of Glade
• oval: Make object and state information in tests queryable
• oval: Fixed handling of extend_definitions in criteria
• oval: Updated results_to_html.xsl

Downloads: tar.gz | .rpm (Fedora Core 5) | .deb (Ubuntu) | .msi (Windows)

System Integrity Checker 0.0.3 has been released. SIC is used to make sure that no unauthorized changes have been made to your computer systems.

Changes since 0.0.2:

• Make sure configuration file hasn’t been modified between runs
• Created XML Schema for configuration file
• Use threads for getting file hashes
• Added support for internationalization and localization (i18n)
• Code cleanup

Downloads: tar.gz | .rpm (Fedora Core 5) | .deb (Ubuntu) | .ebuild (Gentoo) | .msi (Windows)

Sussen 0.30 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.29:

• editor: Start of editor rewrite
• oval: Minor API modifications to support editor rewrite
• oval: Make sure xsl stylesheet exists before transforming results
• misc: Fixed ‘make distcheck’ related errors
• misc: Build with/without web console (–enable-web[=yes/no])
• www: Start porting ASP.NET code to run under Linux/mod_mono
• www: Updated database schema

Downloads: tar.gz | .rpm (Fedora Core 5) | .deb (Ubuntu) | .msi (Windows)

I watched some the videos available from the Lang.NET Symposium. Lots of good stuff there.

• Miguel de Icaza - Talking about the Mono project. Who knew that people actually sent him death threats over Mono.
• Mike Barnett - This was about Spec# which extends C# and allows you to specify design details in the code. You can specify things like function foo takes a string argument that can never be null. You code will not compile if you don’t meet the criteria. There is a theorem prover that analyzes for all the possibilities. Sure beats the hell out of unit tests.
• Anders Hejlsberg - Language Integrated Query (LINQ) and C# 3.0. Great demo of the technology.
• Jim Hugunin - Talking about IronPython
• Bruce Payette - Discussing the new Windows PowerShell. Huge improvement over cmd.exe
• Dr. James Purbrick and Cory Ondrejka - Talking about SecondLife. This was a really good presentation.
• John Lam - His presentation about Ruby and the CLR bridge he’s been working on. Very good demos.

Sussen 0.29 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.28:

• agent: Set default filename when specifying –output-type; Don’t force user to also specify –output
• applet: Use thread instead of background worker; improves performance (windows)
• applet: Add “.html” to temp results file so shell knows how to open it (windows)
• oval: Improved test accuracy
• oval: Don’t ignore criteria negate operation
• oval: Verify that file exists in Unix file test
• oval: Make sure interface support code fails gracefully; fixes segfaults
• oval: File crawlers will generate not found item if search fails
• oval: Fixed logging output

Downloads: tar.gz | .rpm (Fedora Core 5) | .deb (Ubuntu) | .msi (Windows)

System Integrity Checker 0.0.2 has been released. SIC is used to make sure that no unauthorized changes have been made to your computer systems.

Changes since 0.0.1:

• Fixed race conditions in threading code
• Show differences between last know good state and current state if changes are detected.
• Code cleanup

Downloads: tar.gz | .rpm (Fedora Core 5) | .deb (Ubuntu) | .ebuild (Gentoo) | .msi (Windows)

Sussen 0.28 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.27:

• agent: Updated webservices code to match minor API changes
• agent: Removed –family and –log command line options
• applet: Ported to Windows.Forms
• oval: Query rpm signature keyid in RpmInfo test
• oval: Don’t record duplicate items in InetListeningServers and Inetd tests
• oval: Make sure to xml files get saved to correct location after download
• oval: Updated Ubuntu definitions
• oval: Added 83 units tests (mostly torture/validation)
• www: Added start of ASP.NET web console

Downloads: tar.gz | .rpm (Fedora Core 5) | .deb (Ubuntu) | .ebuild (Gentoo) | .msi (Windows)