Came across this page which contains security posters. Some of them are really good but some of them are very bizarre!

The image to the left is the most famous Swedish WWII poster, which reads "a swedish tiger" but also "a swede keeps silent".

I am the happy owner of a Sony Ericsson P900 which I have used daily for the past 3 years. There are a number of things I'd like to see improved, but all in all, it is an excellent phone and PDA.

Earlier this week Sony Ericsson announced a follow up model P990i. They have fixed all the things that annoyed me with the old model and added a few new things which I really like! Since there are loads of hotspots available all over most cities, they have added WLAN (802.11b) to the phone, something which is very useful when when I want to sync my email. They also upgraded the camera to 2 megapixel, added a FM radio and USB support.

They have also added a better keyboard which will make it easier to write lengthy emails or blog entries. One thing they fixed in the P910i was the ability to use the 2 GB MemoryStick Duo Pro, instead of the 128 MB I am stuck with.

It is due out in Q1 2006.

There was recently a question from a customer about how you create your own audit class. There are several reason for this, but I usually use it to be able to fine tune what gets audited.

The system calls I want to see are part of a number of different audit classes, and auditing all of those classes will result a lot of other audit records being written, which can result in gigabytes of data in the audit trail every day.

The first step is to look in the /etc/security/audit_class file and pick an unused bit, give it a two character class name and a desciption.

0x01000000:ca:custom audit

Now you can start to add your new audit class to the audit events you want to select in /etc/security/audit_event

23:AUE_execve:execve(2):ps,ex,cd
32:AUE_CONNECT:connect(2):nt,cd

It is now time to enable the system to audit using your new custom audit class. If you want to use it for all users, you add it to /etc/security/audit_control

flags:lo,ca

You can also assign the audit class to specific users in the /etc/security/audit_user file

root:lo,am,+fm,ca:no

The system have to notified that you have created a new class, which can be done using auditconfig(1M) (see -conf). A reboot is recommended because existing processes will continue to log based on the contents of the audit config files at the time they were spawned while the audit subsystem will be using the new class definitions.

Once you have done all the above you can use auditreduce to select the events belonging to your custom audit class

# auditreduce -c ca /var/audit/20051005152132.not_terminated.vmware | praudit

[Technorati Tags: OpenSolaris Solaris Security]

It looks like I will be going to Venice for a week in November

I talked with my girlfriend on the phone, i.e. Skype, for a couple of hours yesterday and we both agreed that waiting three months until we meet again is a very long time. So we are going to get together for a week in Venice (that is Italy for you geographically challenged people in the audience) to break up the long time apart in half.

Why Venice? Two reasons:

• There are direct flights between Rio and Venice, and Copenhagen and Venice
• It is a very romantic place

Now we can spend time looging for a nice little hotel, sights to see and places to go. I've read some of Donna Leon 's books about commissario Guido Brunetti, which are set in Venice. It'll be fun to visit the places she writes about in the books.