Dell Wyse Management Suite Version 2.1 Third Party Licenses

Total Page:16

File Type:pdf, Size:1020Kb

Dell Wyse Management Suite Version 2.1 Third Party Licenses Dell Wyse Management Suite Version 2.1 Third Party Licenses October 2020 Rev. A01 Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2020 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. Contents Chapter 1: Third party licenses...................................................................................................... 4 Contents 3 1 Third party licenses The table provides the details about third party licenses for Wyse Management Suite 2.1. Table 1. Third party licenses Component name License type jdk1.8.0_112 Oracle Binary Code License jre11.0.5 Oracle Binary Code License bootstrap-2.3.2 Apache License, Version 2.0 backbone-1.3.3 MIT MIT aopalliance-1.0.jar Public Domain aspectjweaver-1.7.2.jar Eclipse Public licenses- v 1.0 bcprov-jdk16-1.46.jar MIT commons-codec-1.9.jar Apache License, Version 2.0 commons-logging-1.1.1.jar Apache License, Version 2.0 hamcrest-core-1.3.jar BSD-3 Clause jackson-annotations.2.10.2.jar Apache License, Version 2.0 The Apache Software License, Version 2.0 jackson-core.2.10.2.jar Apache License, Version 2.0 The Apache Software License, Version 2.0 jackson-databind.2.10.2.jar Apache License, Version 2.0 The Apache Software License, Version 2.0 log4j-1.2.17.jar Apache License, Version 2.0 mosquitto-3.1 Eclipse Public licenses- v 1.0 Gradle Wrapper 2.14 Apache 2.0 License Gradle Wrapper 3.3 Apache 2.0 License HockeySDK-Ios3.7.0 MIT Relayrides / pushy - v0.9.3 MIT zlib-1.2.8 zlib license yaml-cpp-0.5.1 MIT libssl.dll (1.1.1c) Open SSL License 4 Third party licenses Table 1. Third party licenses (continued) Component name License type libcrypto.dll (1.1.1c) Open SSL License libcurl.dll (7.65.3) CurlLicense Newtonsoft.Json.dll (6.0.3.17227) MIT Ionic.Zip.dll (1.9.1.8) Microsoft Public License (Ms-PL) Microsoft.Win32.TaskScheduler.dll (2.3.0.0) MIT 7z (19.00) GNU LGPL V2.1 RestSharp.dll (104.1.0.0) Apache License 2.0 Interop.NETWORKLIST.dll (1.0.0.0) Windows OS License - PIA files (Primary Interop Assemblies) Interop.NetFwTypeLib.dl (1.0.0.0) Windows OS License - PIA files (Primary Interop Assemblies) fbwflib.lib OEM Letter 380 attachment ewfapi.lib (2.0.927.0) OEM Letter 380 attachment aspectjrt-1.8.9.jar Eclipse Public License - v 1.0 License Path bcmail-jdk15on.1.64.jar Bouncy Castle License License bcprov-jdk15on.1.64.jar Bouncy Castle License License c3p0-0.9.5.2.jar EPL - v.1.0 commons-beanutils-1.9.2.jar The Apache Software License, Version 2.0 commons-cli-1.4.jar The Apache Software License, Version 2.0 commons-codec-1.10.jar The Apache Software License, Version 2.0 commons-collections-3.2.2.jar The Apache Software License, Version 2.0 commons-configuration-1.10.jar The Apache Software License, Version 2.0 commons-csv-1.8.jar The Apache Software License, Version 2.0 commons-digester-1.8.1.jar The Apache Software License, Version 2.0 commons-discovery-0.5.jar The Apache Software License, Version 2.0 commons-fileupload-1.3.3.jar The Apache Software License, Version 2.0 commons-io-2.6.jar The Apache Software License, Version 2.0 commons-lang-2.6.jar The Apache Software License, Version 2.0 commons-lang3.3.9.jar The Apache Software License, Version 2.0 commons-net-3.6.jar The Apache Software License, Version 2.0 commons-pool-1.6.jar The Apache Software License, Version 2.0 commons-validator-1.6.jar The Apache Software License, Version 2.0 ehcache-2.10.3.jar The Apache Software License, Version 2.0 Third party licenses 5 Table 1. Third party licenses (continued) Component name License type el-api-2.2.jar CDDL and GNU GPL V2 esapi-2.1.0.1.jar BSD github LICENSE guava.28.0-jre.jar The Apache Software License, Version 2.0 halreader-2.0.jar The Apache Software License, Version 2.0 hawtbuf-1.11.jar The Apache Software License, Version 2.0 hawtdispatch-1.22.jar The Apache Software License, Version 2.0 hawtdispatch-transport-1.22.jar The Apache Software License, Version 2.0 hibernate-c3p0-5.2.8.Final.jar GNU Lesser General Public License hibernate-commons-annotations-5.0.1.Final.jar GNU Lesser General Public License hibernate-core-5.2.1.Final.jar GNU Lesser General Public License hibernate-ehcache-5.2.8.Final.jar GNU Lesser General Public License hibernate-entitymanager-5.2.8.Final.jar GNU Lesser General Public License hibernate-envers-5.2.8.Final.jar GNU Lesser General Public License hibernate-jpa-2.1-api-1.0.0.Final.jar EPL - v.1.0 and EDL 1.0 EPL 1.0 hibernate-validator.6.1.2.Final.jar GNU Lesser General Public License httpclient-4.5.9.jar The Apache Software License, Version 2.0 httpcore-4.4.13.jar The Apache Software License, Version 2.0 jandex-2.0.3.Final.jar LGPL 2.1 javassist-3.20.0-GA.jar Apache 2.0, LGPL 2.1 and MPL 1.1 licenses javax.servlet-api-4.0.0.jar CDDL and GPL 2.0 jboss-logging-3.3.0.Final.jar Apache License, version 2.0 jboss-transaction-api_1.2_spec-1.0.1.Final.jar CDDL and GPL 2.0 .All legal team’s comments are not applicable to us as we do not create any custom communication nor inject any binary code. jcifs-1.3.17.jar GNU Lesser General Public License, version 2.1 jcl-over-slf4j.1.7.30.jar MIT License joda-time-2.10.5.jar Apache 2.0 jsoup-1.11.3.jar The MIT License jsr305-1.3.9.jar The Apache Software License, Version 2.0 jstl-1.2.jar CDDL and GPL 2.0 6 Third party licenses Table 1. Third party licenses (continued) Component name License type jta-1.1.jar CDDL 2 Apache 2.0 jxl-2.6.12.jar GNU LGPL mchange-commons-java-0.2.11.jar Eclipse Public License, Version 1.0 and LGPL 2.1 metadata-extractor-2.6.2.jar The Apache Software License, Version 2.0 mongo-java-driver-3.11.1.jar The Apache Software License, Version 2.0 mqtt-client-1.14.jar The Apache Software License, Version 2.0 not-yet-commons-ssl-0.3.17.jar Apache License v2 Apache 2.0 + BouncyCastle.org’s MIT license objenesis.3.0.1.jar Apache 2.0 opensaml-2.6.4.jar Apache 2.0 protobuf-java.3.7.1.jar BSD 3-clause serializer-2.7.2.jar The Apache Software License, Version 2.0 slf4j-api.1.7.30.jar MIT License slf4j-log4j12.1.7.30.jar MIT license spring-aop-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-aspects-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-beans-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-context-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-context-support-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-core-4.3.13.RELEASE.jar The Apache Software License, Version 2.0 spring-data-commons-1.13.9.RELEASE.jar The Apache Software License, Version 2.0 spring-data-jpa-1.10.10.RELEASE.jar The Apache Software License, Version 2.0 spring-data-mongodb-1.10.10.RELEASE.jar The Apache Software License, Version 2.0 spring-data-mongodb-cross-store-1.10.10.RELEASE.jar The Apache Software License, Version 2.0 spring-data-mongodb-log4j-1.10.10.RELEASE.jar The Apache Software License, Version 2.0 spring-expression-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-instrument-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-instrument-tomcat-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-jdbc-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 Third party licenses 7 Table 1. Third party licenses (continued) Component name License type spring-jms-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-messaging-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-orm-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-oxm-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-security-acl-5.2.2.RELEASE.jar The Apache Software License, Version 2.0 spring-security-aspects-5.2.2.RELEASE.jar The Apache Software License, Version 2.0 spring-security-config-5.2.2.RELEASE.jar The Apache Software License, Version 2.0 spring-security-core-5.2.2.RELEASE.jar The Apache Software License, Version 2.0 spring-security-saml2-core.1.0.10.RELEASE.jar The Apache Software License, Version 2.0 spring-security-taglibs-5.2.2.RELEASE.jar The Apache Software License, Version 2.0 spring-security-web-5.2.2.RELEASE.jar The Apache Software License, Version 2.0 spring-tx-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-web-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-webmvc-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spring-websocket-5.2.3.RELEASE.jar The Apache Software License, Version 2.0 spymemcached-2.8.4.jar MIT License BSD stax-4.0.8.jar The Apache Software License, Version 2.0 Specification Reference Implementation License Agreement stax2-api.4.2.jar CDDL Streaming API for XML (JSR-173) Specification Reference Implementation License Agreement validation-api-2.0.1.Final.jar Apache License 2.0 woodstox-core-asl-4.4.1.jar Apache License 2.0 xalan-2.7.2.jar Apache License 2.0 xmlsec-1.5.8.jar Apache License 2.0 xmltooling-1.4.4.jar Apache License 2.0 animal-sniffer-annotations-1.14.jar MIT License antisamy-1.5.7.jar BSD 3 aspectjweaver-1.8.9.jar Eclipse Public License - v 1.0 batik-constants-1.9.1.jar The Apache Software License, Version 2.0 batik-css-1.9.1.jar The Apache Software License, Version 2.0 8 Third party licenses Table 1.
Recommended publications
  • Libffi This Manual Is for Libffi, a Portable Foreign-Function Interface Library
    Libffi This manual is for Libffi, a portable foreign-function interface library. Copyright c 2008, 2010, 2011 Red Hat, Inc. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version. A copy of the license is included in the section entitled \GNU General Public License". Chapter 2: Using libffi 1 1 What is libffi? Compilers for high level languages generate code that follow certain conventions. These conventions are necessary, in part, for separate compilation to work. One such convention is the calling convention. The calling convention is a set of assumptions made by the compiler about where function arguments will be found on entry to a function. A calling convention also specifies where the return value for a function is found. The calling convention isalso sometimes called the ABI or Application Binary Interface. Some programs may not know at the time of compilation what arguments are to be passed to a function. For instance, an interpreter may be told at run-time about the number and types of arguments used to call a given function. `Libffi' can be used in such programs to provide a bridge from the interpreter program to compiled code. The `libffi' library provides a portable, high level programming interface to various calling conventions. This allows a programmer to call any function specified by a call interface description at run time. FFI stands for Foreign Function Interface. A foreign function interface is the popular name for the interface that allows code written in one language to call code written in another language.
    [Show full text]
  • Marjn Norling November 2012
    Mar$n Norling November 2012 UNIX Lecture Goals • Goal 1: Know basic UNIX commands and their use from memory. • Goal 2: Know how to find informaon on more advanced UNIX commands and their use. • Goal 3: Understand the basics of regular expression paerns. • Goal 4: Know the basic loops and condi$onals for shell scrip$ng and understand how to use them. UNIX Schedule Thursday Friday 09.00-09.45 UNIX introduc$on 09.00-09.45 Bash Scrip$ng 10.00-10.45 UNIX basics 10.00-10.45 Tutorial: Bash scrip$ng 11.00-12.00 Redirects to regexp 11.00-12.00 Tips & Quesons 12.00-13.00 Lunch 12.00-13.00 Lunch 13.00-16.00 Tutorial: Basics 13.00-16.00 Tutorial: finishing up UNIX HISTORY UNIX History • 1969 – First Version of UNIX developed at Bell Labs by AT&T • 1975 – UNIX 6, the first to be widely available outside Bell Labs. The first “Berkeley So]ware Distribu$on” (BSD) is released. • 1989 – UNIX System V, the last tradi$onal UNIX version. • 1991 – Linus Torvalds begin developing Linux. “UNIX-like” • Today – UNIX itself, what’s now called “tradi$onal UNIX” is not used, except by enthusiasts. • There are many “UNIX-like” systems (also known as *nix or UN*X) that are similar to UNIX while not conforming to the Single UNIX Specificaon. • In fact, most operang systems today except windows are “UNIX like”. Single UNIX Specificaon (SUS) • Developed and maintained by the Aus$n Group, based on earlier work by the IEee and The Open Group.
    [Show full text]
  • CFFI Documentation Release 0.8.6
    CFFI Documentation Release 0.8.6 Armin Rigo, Maciej Fijalkowski May 19, 2015 Contents 1 Installation and Status 3 1.1 Platform-specific instructions......................................4 2 Examples 5 2.1 Simple example (ABI level).......................................5 2.2 Real example (API level).........................................5 2.3 Struct/Array Example..........................................6 2.4 What actually happened?.........................................6 3 Distributing modules using CFFI7 3.1 Cleaning up the __pycache__ directory.................................7 4 Reference 9 4.1 Declaring types and functions......................................9 4.2 Loading libraries............................................. 10 4.3 The verification step........................................... 10 4.4 Working with pointers, structures and arrays.............................. 12 4.5 Python 3 support............................................. 14 4.6 An example of calling a main-like thing................................. 15 4.7 Function calls............................................... 15 4.8 Variadic function calls.......................................... 16 4.9 Callbacks................................................. 17 4.10 Misc methods on ffi........................................... 18 4.11 Unimplemented features......................................... 20 4.12 Debugging dlopen’ed C libraries..................................... 20 4.13 Reference: conversions.......................................... 21 4.14 Reference:
    [Show full text]
  • Compiler Fuzzing: How Much Does It Matter?
    Compiler Fuzzing: How Much Does It Matter? MICHAËL MARCOZZI∗, QIYI TANG∗, ALASTAIR F. DONALDSON, and CRISTIAN CADAR, Imperial College London, United Kingdom Despite much recent interest in randomised testing (fuzzing) of compilers, the practical impact of fuzzer-found compiler bugs on real-world applications has barely been assessed. We present the first quantitative and qualitative study of the tangible impact of miscompilation bugs in a mature compiler. We follow a rigorous methodology where the bug impact over the compiled application is evaluated based on (1) whether the bug appears to trigger during compilation; (2) the extent to which generated assembly code changes syntactically due to triggering of the bug; and (3) whether such changes cause regression test suite failures, or whether we can manually find application inputs that trigger execution divergence due to such changes. Thestudy is conducted with respect to the compilation of more than 10 million lines of C/C++ code from 309 Debian 155 packages, using 12% of the historical and now fixed miscompilation bugs found by four state-of-the-art fuzzers in the Clang/LLVM compiler, as well as 18 bugs found by human users compiling real code or as a by-product of formal verification efforts. The results show that almost half of the fuzzer-found bugs propagate tothe generated binaries for at least one package, in which case only a very small part of the binary is typically affected, yet causing two failures when running the test suites of all the impacted packages. User-reported and formal verification bugs do not exhibit a higher impact, with a lower rate of triggered bugs andonetest failure.
    [Show full text]
  • VSI's Open Source Strategy
    VSI's Open Source Strategy Plans and schemes for Open Source so9ware on OpenVMS Bre% Cameron / Camiel Vanderhoeven April 2016 AGENDA • Programming languages • Cloud • Integraon technologies • UNIX compability • Databases • Analy;cs • Web • Add-ons • Libraries/u;li;es • Other consideraons • SoDware development • Summary/conclusions tools • Quesons Programming languages • Scrip;ng languages – Lua – Perl (probably in reasonable shape) – Tcl – Python – Ruby – PHP – JavaScript (Node.js and friends) – Also need to consider tools and packages commonly used with these languages • Interpreted languages – Scala (JVM) – Clojure (JVM) – Erlang (poten;ally a good fit with OpenVMS; can get good support from ESL) – All the above are seeing increased adop;on 3 Programming languages • Compiled languages – Go (seeing rapid adop;on) – Rust (relavely new) – Apple Swi • Prerequisites (not all are required in all cases) – LLVM backend – Tweaks to OpenVMS C and C++ compilers – Support for latest language standards (C++) – Support for some GNU C/C++ extensions – Updates to OpenVMS C RTL and threads library 4 Programming languages 1. JavaScript 2. Java 3. PHP 4. Python 5. C# 6. C++ 7. Ruby 8. CSS 9. C 10. Objective-C 11. Perl 12. Shell 13. R 14. Scala 15. Go 16. Haskell 17. Matlab 18. Swift 19. Clojure 20. Groovy 21. Visual Basic 5 See h%p://redmonk.com/sogrady/2015/07/01/language-rankings-6-15/ Programming languages Growing programming languages, June 2015 Steve O’Grady published another edi;on of his great popularity study on programming languages: RedMonk Programming Language Rankings: June 2015. As usual, it is a very valuable piece. There are many take-away from this research.
    [Show full text]
  • Free Berkeley Software Distribution
    Free berkeley software distribution Berkeley Software Distribution (BSD) was a Unix operating system derivative developed and . The lawsuit slowed development of the free- software descendants of BSD for nearly two years while their legal status was in question, and as a OS family​: ​Unix. Software Central is a consolidation of several IST sites that offer software to UC Berkeley faculty, staff and students. The products available through this site are ​Productivity Software · ​Mathematics & Sciences · ​VMware · ​Stata. Software Central. The API department runs the Campus Software Distribution Service, which: Runs a distribution service through (link is. Free Speech Online Blue Ribbon Campaign. Welcome to ! UNIX! Live free or die! Google. Custom Search. What is this page all about? This page is. BSD stands for “Berkeley Software Distribution”. which is available on CD-ROM and for free download from FTP sites, for example OpenBSD. All of the documentation and software included in the BSD and As you know, certain of the Berkeley Software Distribution ("BSD") source. Template:Redirect Berkeley Software Distribution (BSD, sometimes called many other operating systems, both free and proprietary, to incorporate BSD code. BSD (originally: Berkeley Software Distribution) refers to the particular version of the UNIX operating system that was developed at and distributed fro. Short for Berkeley Software Distribution, BSD is a Unix-like NetBSD is another free version of BSD compatible with a very large variety of. Berkeley Software Distribution (BSD) is a prominent version of the Unix operating system that was developed and distributed by the Computer Systems. Early in , Joy put together the "Berkeley Software Distribution.
    [Show full text]
  • Structured Foreign Types
    Ftypes: Structured foreign types Andrew W. Keep R. Kent Dybvig Indiana University fakeep,[email protected] Abstract When accessing scalar elements within an ftype, the value of the High-level programming languages, like Scheme, typically repre- scalar is automatically marshaled into the equivalent Scheme rep- sent data in ways that differ from the host platform to support resentation. When setting scalar elements, the Scheme value is consistent behavior across platforms and automatic storage man- checked to ensure compatibility with the specified foreign type, and agement, i.e., garbage collection. While crucial to the program- then marshaled into the equivalent foreign representation. Ftypes ming model, differences in data representation can complicate in- are well integrated into the system, with compiler support for ef- teraction with foreign programs and libraries that employ machine- ficient access to foreign data and debugger support for convenient dependent data structures that do not readily support garbage col- inspection of foreign data. lection. To bridge this gap, many high-level languages feature for- The ftype syntax is convenient and flexible. While it is similar in eign function interfaces that include some ability to interact with some ways to foreign data declarations in other Scheme implemen- foreign data, though they often do not provide complete control tations, and language design is largely a matter of taste, we believe over the structure of foreign data, are not always fully integrated our syntax is cleaner and more intuitive than most. Our system also into the language and run-time system, and are often not as effi- has a more complete set of features, covering all C data types along cient as possible.
    [Show full text]
  • Overview Guide Release 21B F45060-01
    Oracle Utilities Customer Care and Billing Cloud Service Overview Guide Release 21B F45060-01 August 2021 Oracle Utilities Customer Care and Billing Cloud Service Release 21B Overview Guide Copyright © 2012, 2021 Oracle and/or its affiliates. All rights reserved. This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited. The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing. If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable: U.S. GOVERNMENT END USERS: Oracle programs (including any operating system, integrated software, any programs embedded, installed or activated on delivered hardware, and modifications of such programs) and Oracle computer documentation or other Oracle data delivered to or accessed by U.S. Government end users are "commercial computer software" or "commercial computer software documentation"
    [Show full text]
  • Engineering Law and Ethics
    ENSC 406 Software, Computer and Internet Ethics Bob Gill, P.Eng., FEC, smIEEE May 15th 2017 1 Topics Covered What is Open Source Software? A One-Slide History of Open Source Software The Open Source Development Model Why Companies Use (and Don’t Use) Open Source Software Open Source Licensing Strategies Open Source Licenses and “Copyleft” Open Source Issues in Corporate Transactions Relevant Cases and Disputes Open source vs. Freeware vs. Shareware Site Licensing Software Maintenance Computer and Internet Ethics 2 What is Open Source Software? Open Source software is software licensed under an agreement that conforms to the Open Source Definition Access to Source Code Freedom to Redistribute Freedom to Modify Non-Discriminatory Licensing (licensee/product) Integrity of Authorship Redistribution in accordance with the Open Source License Agreement 3 What is Open Source Software? Any developer/licensor can draft an agreement that conforms to the OSD, though most licensors use existing agreements GNU Public License (“GPL”) Lesser/Library GNU Public License (“LGPL”) Mozilla Public License Berkeley Software Distribution license (“BSD”) Apache Software License MIT – X11 License See complete list at www.opensource.org/licenses 4 Examples of Open Source Software Linux (operating system kernel – substitutes for proprietary UNIX) Apache Web Server (web server for UNIX systems) MySQL(Structured Query Language – competes with Oracle) Cloudscape, Eclipse (IBM contributions) OpenOffice(Microsoft Office Alternate) SciLab,
    [Show full text]
  • Shiny Server Administrator's Guide
    Shiny Server Administrator’s Guide Shiny Server Professional v1.5.5 Copyright © 2017 RStudio, Inc. Contents 1 Getting Started 8 1.1 Introduction.........................................8 1.2 System Requirements...................................9 1.3 Installation.........................................9 1.3.1 Ubuntu (12.04+)..................................9 1.3.2 RedHat/CentOS (5.4+).............................. 10 1.3.3 SUSE Linux Enterprise Server (11+)....................... 11 1.3.4 Install Shiny.................................... 12 1.3.5 R Installation Location.............................. 13 1.4 Stopping and Starting................................... 14 1.4.1 systemd (RedHat 7, Ubuntu 15.04+, SLES 12+)................ 14 1.4.2 Upstart (Ubuntu 12.04 through 14.10, RedHat 6)................ 15 1.4.3 init.d (RedHat 5, SLES 11)............................ 16 2 Server Management 17 2.1 Default Configuration................................... 17 2.2 Server Hierarchy...................................... 18 2.2.1 Server........................................ 18 2.2.2 Location....................................... 19 2.2.3 Application..................................... 20 2.3 run_as ............................................ 20 2.3.1 :HOME_USER: .................................... 21 2.3.2 Running Shiny Server with Root Privileges................... 22 2.3.3 :AUTH_USER: .................................... 23 2.4 PAM Sessions........................................ 25 2.4.1 Session Profile..................................
    [Show full text]
  • An In-Memory Embedding of Cpython for Offensive Use
    An In-memory Embedding of CPython for Offensive Use Ateeq Sharfuddin, Brian Chapman, Chris Balles SCYTHE fateeq, brian, [email protected] Abstract—We offer an embedding of CPython that runs using packagers like Py2Exe [6] or PyInstaller [4]. These entirely in memory without “touching” the disk. This in-memory malware are easy to construct and are executed when a coerced embedding can load Python scripts directly from memory instead end-user double-clicks and runs the packaged executable file these scripts having to be loaded from files on disk. Malware that resides only in memory is harder to detect or mitigate against. from disk. Security products have collected and analyzed We intend for our work to be used by security researchers to numerous sample executable files of this scheme. As a result, rapidly develop and deploy offensive techniques that is difficult security products have produced signatures for this scheme and for security products to analyze given these instructions are are able to successfully block all malware using this scheme. in bytecode and only translated to machine-code by the inter- In this paper, we contribute the first embedding of CPython preter immediately prior to execution. Our work helps security researchers and enterprise Red Teams who play offense. Red interpreter that runs entirely in memory without “touching” Teams want to rapidly prototype malware for their periodic the disk. We also contribute a scheme to support loading campaigns and do not want their malware to be detected by the and running Python modules including native C extensions, Incident Response (IR) teams prior to accomplishing objectives.
    [Show full text]
  • Foreign Library Interface by Daniel Adler Dia Applications That Can Run on a Multitude of Plat- Forms
    30 CONTRIBUTED RESEARCH ARTICLES Foreign Library Interface by Daniel Adler dia applications that can run on a multitude of plat- forms. Abstract We present an improved Foreign Function Interface (FFI) for R to call arbitary na- tive functions without the need for C wrapper Foreign function interfaces code. Further we discuss a dynamic linkage framework for binding standard C libraries to FFIs provide the backbone of a language to inter- R across platforms using a universal type infor- face with foreign code. Depending on the design of mation format. The package rdyncall comprises this service, it can largely unburden developers from the framework and an initial repository of cross- writing additional wrapper code. In this section, we platform bindings for standard libraries such as compare the built-in R FFI with that provided by (legacy and modern) OpenGL, the family of SDL rdyncall. We use a simple example that sketches the libraries and Expat. The package enables system- different work flow paths for making an R binding to level programming using the R language; sam- a function from a foreign C library. ple applications are given in the article. We out- line the underlying automation tool-chain that extracts cross-platform bindings from C headers, FFI of base R making the repository extendable and open for Suppose that we wish to invoke the C function sqrt library developers. of the Standard C Math library. The function is de- clared as follows in C: Introduction double sqrt(double x); We present an improved Foreign Function Interface The .C function from the base R FFI offers a call (FFI) for R that significantly reduces the amount of gate to C code with very strict conversion rules, and C wrapper code needed to interface with C.
    [Show full text]