Solaris 9 x86 Review 292
ValourX writes "Here is a review of Solaris 9 x86, 08/03 edition. Now that the single-CPU edition is free to download for non-commercial use, people will be compelled to write a Solaris CD and try it out. Read this first -- there are a lot of things you should know before you begin. You might want to check out the documentation or explore other resources like the hardware compatibility list as well."
Save some time (Score:5, Informative)
Re:better yet (Score:2, Informative)
A used sparc is a great recomendation. Or build your own:
www.sparcproductdirectory.com [sparcprodu...ectory.com]
Re:My Solaris Review (Score:1, Informative)
1) use HCL hardware or shut up.
2)packages on companion CD are fairly recent. Justify why you need a higher version.
3) XFREE? It has its OWN x-server moron.
4) Its not hard to set up.
5) Noneed ot rtfm. Most otherunixes model themselves after solaris. If you can run FreeBSD or RedHat Linux, solaris is hardly different.
6) Solaris, when not on sparc hardware, is deisnged to be run headless. In fact, even on sparc hardware you run a lot of headless. You dont know what computers are useful for besides browsing the web.
7) Package manager? Name another system where you call back and rollout every single update you ever installed for YEARS. Go ahead name it. I want to hear it.
8) I know this is a troll, but you should die for defiling solaris.
Re:Sparc-Intel differences? (Score:3, Informative)
SYNOPSIS: Buffer Overflow Vulnerability in the CDE DtHelp Library May
Allow Unauthorized "root" Access
https://www.auscert.org.au/render.html?it
============
PROBLEM: A vulnerability exists in the newtask(1) command that may lead to unauthorized root access.
PLATFORM: Solaris 9
DAMAGE: If exploited, a local unprivileged user may be able to gain unauthorized root access.
SOLUTION: Apply patch or workaround.
http://www.ciac.org/ciac/bulletins/n
========
Product: GNOME 2.0 XScreensaver
Publisher: Sun Microsystems
Operating System: Solaris
Platform: SPARC x86
Impact: Reduced Security
Access Required: Existing Account
http://www.auscert.org.au/render.html?it
I could go on and give shellcode too but I won't. Know what you're talking about before jumping out there
Solaris 10 x86 (Score:0, Informative)
Poor Review (Score:5, Informative)
Solaris x86 is an amazingly stable OS, and I've met many, many people who work in data centres who swear by it. Stable + secure + supported are the most important things to people who rely on mission critical applications.
Now, to clear up some of the misconceptions of this reviewer:
1. Almost any piece of open-source code will run on it after you compile it properly. Yes, you have to install GCC and change some of your path settings. Time it takes to do this: 5 minutes. You can get a binary version (for x86) of GCC from any of the sunfreeware.com mirrors.
2. This software is not meant to run with every piece of hardware out there. As this software is mainly meant for servers in the x86 world, why does it need to support a Radeon9600 card or an Audigy card?
3. The problems the reviewer was having were mostly configuration problems. Googling around will bring up web pages that show you how to set up network cards, etc.
So - while the review was written well enough, it totally failed in providing the perspective required to judge this product fairly. There is a steep learning curve required to learn Solaris, but once you learn it, its stability and usability features are well worth it.
Re:Solaris 10 x86 (Score:4, Informative)
I suggest you check your facts again.
Re:How does this help us, or Sun (Score:3, Informative)
I wasn't surprised that Sun dropped Sol x86, but apparently there was a revolt from the market. It was a bit of a shock to me really. I wouldn't worry about Sun's R&E resources, that is one thing they seem to have consistently funded over the years.
restrictive license? (Score:2, Informative)
E. NOTICE OF AUTOMATIC SOFTWARE UPDATES FROM SUN. You acknowledge that the Software may automatically download, install, and execute applets, applications, software extensions, and updated versions of the Software from Sun ("Software Updates"), which may require you to accept updated terms and conditions for installation. If additional terms and conditions are not presented on installation, the Software Updates will be considered part of the Software and subject to the terms and conditions of the Agreement.
F. NOTICE OF AUTOMATIC DOWNLOADS. You acknowledge that, by your use of the Software and/or by requesting services that require use of the Software, the Software may automatically download, install, and execute software applications from sources other than Sun ("Other Software"). Sun makes no representations of a relationship of any kind to licensors of Other Software. TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLE FOR ANY LOST REVENUE, PROFIT OR DATA, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER CAUSED REGARDLESS OF THE THEORY OF LIABILITY, ARISING OUT OF OR RELATED TO THE USE OF OR INABILITY TO USE OTHER SOFTWARE, EVEN IF SUN HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
-Justin
have fun (Score:4, Informative)
1) Do NOT use GNU binutils. GNU strip and GNU ld do not understand Solaris x86 ELF headers and create corrupt binaries.
2) In almost 100% of the cases, GNU autoconf will not figure out that the Solaris linker requires the specification of a runtime linker option. Solve this by running autoconf like;
LDFLAGS="-L/foo -R/foo"
This is obviously pointless to do if you're using static libraries.
For more info, read ld(1).
Roooiiiight (Score:1, Informative)
> for Free Software Unix projects in the
> GNU/Linux and *BSD communities, which scale
> better,
> cost less
BS
> support more hardware,
true
> and are easier to configure,
BS
> customize
BS
> and maintain.
BS
I stopped reading... (Score:4, Informative)
The Solaris 9 binary license is not all that restrictive when compared with Microsoft's EULA, but the additional supplements end up piling on so many more restrictions that it's more or less on par with the Windows license.
I know Solaris isn't GPL'ed, but the SCSL still lets you peek at the code if you want. (http://www.sun.com/solaris/source)
One thing that CDE/Solaris is missing is a comprehensive network configuration panel; network settings still have to be set by hand in Solaris 9, unfortunately.
Try typing: smc& at the command line. Sun Management Console is a very powerful tool indeed.
The most detrimental compatibility issue that I encountered with Solaris 9 x86 was that it did not have binary compatibility with Solaris SPARC, GNU/Linux, FreeBSD, OS X, MS Windows or any other operating system.
One word Mister, lxrun. Try it.
This article really should have been written by someone who knows at least a little about Solaris. Or by someone who doesn't mind reading some documentation before writing their review. Apparently the author just expected to sit down and have the OS install itself, and then teach him how to use it.
And yes, there are security flaws in Solaris. That's why the SunAlert bulletins are your friend. That's why you need to roll out the new KJP's when they come out, make sure you keep up on your patch management etc. In other words you know, be a systems administrator and actually ADMIN your systems.
Re:My Solaris Review (Score:5, Informative)
First off, I have little Solaris admin knowledge. I run BSD and Linux myself, but I've got some experience with Solaris as a workstation and server. That said, none of your criticisms are really specific to Solaris, or even on-topic.
So first, out of date software: the current Xfree release is 4.3. If you got a complaint with 4.1, say what it is. Regardless, though, if you are running Solaris as a server, you don't give a shit what the X server is on it, and even as a workstation, it's usually used for high-end scientific applications; it doesn't need to be incredibly user friendly or run the latest games.
Second: Solaris (or at least the SunOS servers I just checked to be sure) doesn't have a /lib/modules. So as I'm pointing out right now, purely for the casual reader's benefit, you are full of shit.
Third: Back to X, eh? Nobody likes X. It sucks to configure on any system, pretty much (except maybe RedHat). If you can't handle it, you probably aren't a Solaris admin. And if looking up your monitor's horizontal sync is such a big deal, use Windows. I use the text xf86config utility whenever I install a new system, I look up my monitor's sync specs, and I'm good. Not really that hard.
Fourth: When have you ever put a USB mouse or scanner on a server? And honestly, x86 Solaris, as discussed above, is good for learning and for environments that need to be homogeneous. But most Solaris workstations run on Sparc.
Firth: You're an idiot. A few Linux distros use RPM. Solaris is not Linux. RPMs also are widely regarded as sucking.
Finally, you go way off topic and talk about Debian users switching (with a link to www.ibm.com as proof?). Right. Anyway, you're an idiot, I know I've been trolled, but I wanted to clarify some of your BS for the other readers.
My experiences with sparc-solaris... (Score:2, Informative)
boot problems (Score:5, Informative)
x86 Solaris WILL live happily with Windows and Linux and a multi-boot system is trivially possible so long as you take some care. The most obvious gotya! is the Sun disk partition id is the same as the Linux swap partition id.
x86 does NOT insist on using an entire disk. It will happily install into a suitable partition pre-created with the Sun disk partition id. During the install pseudo-partitions will be created as needed within the actual partition.
I've had triple-boot systems with Win98, Redhat Linux and Solaris all installed on the same drive.
The reviewer also had network problems. With NICs on the HCL list and many work-a-likes there should be no problems at all.
You do need to understand what you are doing when installing Solaris, and it helps to understand the network configuration it will be plugged into before you start.
On the other hand, after answering a handful of questions at the beginning, the installation itself is trivial and automatic on supported hardware.
I've been using x86 Solaris as my main desktop system for a number of years now in preference to both Windows and Linux (though I'm writing this on a RH8 box) and it does everything that I need day to day.
Re:Sparc-Intel differences? (Score:3, Informative)
Sun Alert ID: 50104
Category: Security
Product: Solaris
BugIDs: 4774256
Avoidance: Workaround
Date Modified: 08-Aug-2003 1. Impact: A local or remote unprivileged user may be able to view root privileged files due to a security vulnerability involving the Solaris kcms_server(1) daemon
Now before you say but thats only viewing files blah blah blah like some troll, ask yourself how easy it would be to leverage this into something more? Wait I know... View unprivileged files? You mean like say... /etc/shadow? No that's thinking too far ahead. No codes available? Sure ...ok there are no codes [infiltrated.net] you are so correct.
More of me being a prick? Why not...
Vulnerable systems:
SunOS 5.3 thru 5.9 (Solaris 2.x, 7, 8, 9) (x86)
By sending a sequence of specially crafted Remote Procedure Call (RPC) requests to the sadmind daemon, an attacker can exploit this vulnerability to gain unauthorized root access to a vulnerable system. The sadmind daemon defaults to weak authentication (AUTH_SYS), making it possible for a remote attacker to send a sequence of specially crafted RPC packets to forge the client identity.
After the identity has been successfully forged, the attacker can invoke a feature within the daemon itself to execute a shell as root or, depending on the forged credential, any other valid user of the system. The daemon will execute the program of the attacker's choice; for example, spawning a reverse-network shell back to the attacker for input/output control. Under certain circumstances, a reverse-network shell could allow for the attacker to bypass firewalls and/or filters .
Analysis:m l
Because the nature of the weakness exists on the application level, successful exploitation does not require the use of machine-specific code, nor does it require any previous knowledge of the target's architecture. Therefore, any local or remote attacker could execute commands as root on a vulnerable system running the sadmind service. By default, sadmind is installed and started at system boot time on most default and fully patched installations of Solaris. While many other vendors rely on SUNRPC related routines from Sun, this design issue is confined to Sun's sadmind authentication implementation in Solaris. The most inherent threat is if this exploit becomes packaged into a cross-platform worm were it to become publicly available. http://www.securiteam.com/unixfocus/5HP0G1PB6K.ht
Sorry I took some time I was too busy being a Redhat GNU nazi...
# uname -a
SunOS kungfunix.net 5.9 Pitbull sun4u sparc SUNW,Sun-Fire-480R
bash-2.05a$ uname -aB UBONIC i386
FreeBSD bubonic.infiltrated.net 4.8-RELEASE-p13 FreeBSD 4.8-RELEASE-p13 #0: Tue Oct 7 01:44:44 EDT 2003 root@fscker.infiltrated.net:/usr/obj/usr/src/sys/
-bash-2.05b$ uname -as ys/DAEMONICALLY alpha
FreeBSD daemonically.perfidious.org 4.9-STABLE FreeBSD 4.9-STABLE #1: Thu Nov 6 01:13:52 EST 2003 sil@daemonically.perfidious.org:/usr/obj/usr/src/
Yea sure... Why not... Sorry but I use WindowsXP (that's right) on my laptop and Sol for my servers, and FreeBSD to fuck around with. This is going to be the last comment I make on this thread, because it literally is boring. And you're right I know nothing of security whatsoever. In fact I don't even know my name there buddy
Re:Not a fair review (Score:3, Informative)
Re:Sparc-Intel differences? (Score:3, Informative)
"Segment" is being deceptive. He keeps listing bugs for Solaris X86 as if they exist only on Solaris X86 when they really exist for both versions. It isn't hard to determine if you go back to the source documents. Just look for lines like this in Sun's patch documents:
Xref: This patch available for SPARC as patch 112963
On supported hardware Solaris X86 is a solid operating system. Of course, all else being equal , I prefer working on Sparcs rather than PCs.
One last comment in regard to the rest of the thread: Solaris has bugs, especially in new code, that need patching just like any other operating system??! Who knew?
Solaris Free and Open Source Software (Score:3, Informative)
The Solaris Companion Software CD [sun.com] comes in the Solaris Media Kit and contains many Free and Open Source packages compiled and packaged for Solaris. They install under /opt/sfw and include gcc-2.95.3 and gcc-3.3.x, gdb, ddd, KDE, GIMP, Emacs, vim, Python, MySQL, you name it, it's probably there. You can download the ISO images [sun.com] for Solaris 8 and 9. Note that it is updated to correspond with the current Update release of Solaris.
GNOME has been shipped with Solaris for quite some time now. Another thing that people don't realise is that some Open Source software is installed under /usr/sfw by default as well.
I am impressed. The HCL is alot bigger (Score:3, Informative)
I threw out a copy of solaris7 x86 that I recieved during Linux expo 2000 recently.
Reason? First off only 2 ethernet cards were supported, no UDMA EIEDE was supported, no USB support, no graphics card support, etc.
I could not even get it to see my hard drives on my old pentiumIII system.
However, I went to Suns site and looked at the HCL for Solaris9. Big difference!
For example my broadcom 411 integrated ethernet card still is not reconigned under Linux or FreeBSD but its fully supported under Solaris. Also my soundblaster live, geforce 4, Sony Dvd writter, and both broadcom and netgear nics are fully reconogigned.
The only problem I see is that I use both USB keyobards and mice. USB is supported but I did not see my keyboard there.
Also look under the supported motherboard section? Over 35 models are supported!
Sun is making a shot here and looks like they are listening.
My only concern about solaris is lack of package managment. Do I have to build things by source with it? I love the ports of FreeBSD and Gentoo.
A network tip (Score:3, Informative)
The problem seems to be that the install won't let you set a default gateway, so stuff off-subnet is unreachable, and I've never gotten it to behave correctly.
Of course, because the info doesn't get saved, yo have to setup resolv.conf etc yourself.
Re:iso image (Score:1, Informative)
Re:A network tip (Score:2, Informative)
Re:I am impressed. The HCL is alot bigger (Score:2, Informative)
My only concern about solaris is lack of package managment. Do I have to build things by source with it? I love the ports of FreeBSD and Gentoo.
See the docs for pkgadd [sun.com] and its friends pkginfo, pkgrm, and several others.