<div dir="ltr">Actually this really seems to be matter of school :)<br>If attacker is already in your system, I doubt that compiler absence will stop him.<div><br></div><div>I agree about centralized management/deployment though. It&#39;s better to have every part of system properly packaged.</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-07-03 14:27 GMT+04:00 Kees Jan Koster <span dir="ltr">&lt;<a href="mailto:kjkoster@kjkoster.org" target="_blank">kjkoster@kjkoster.org</a>&gt;</span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Dear Dmitry,<br>
<br>
I&#39;ve deployed both with and without on-server compiles. I prefer having a central build server, since I like to have some level of guarantee what precise version of the deployable and its dependencies are. This way I can deploy the exact same version that QA tested on the production machines and not run with a build that is almost, but not quite unlike the version that QA tested.<br>

<br>
A central build server is also a step towards deployment automation for the development and QA teams. It makes authoritative builds which can them be automatically deployed over saltstack/puppet/chef/whatever. That in turn reduces the &quot;works on my machine&quot; discussions.<br>

<br>
I see no harm in having compilers on production servers, but I know there is a school of thought that says not to have them there. I usually have tcpdump and ngrep installed for solving incidents. With these two on the system a compiler is the least of Security&#39;s worries. :)<br>

<br>
Kees Jan<br>
<div><div class="h5"><br>
<br>
On 3 Jul 2014, at 11:47, Dmitry Sytchev &lt;<a href="mailto:kbdfck@gmail.com">kbdfck@gmail.com</a>&gt; wrote:<br>
<br>
&gt; Offtop, but always wanted to know what is a problem of compiler on production server?<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; 2014-07-03 13:25 GMT+04:00 Денис &lt;<a href="mailto:denis@ringme.ru">denis@ringme.ru</a>&gt;:<br>
&gt; gcc -pthread -fno-strict-aliasing -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -D_GNU_SOURCE -fPIC -fwrapv -DNDEBUG -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -D_GNU_SOURCE -fPIC -fwrapv -fPIC -I/usr/include/python2.6 -c src/llist.c -o build/temp.linux-x86_64-2.6/src/llist.o<br>

&gt;<br>
&gt; unable to execute gcc: No such file or directory<br>
&gt;<br>
&gt; error: command &#39;gcc&#39; failed with exit status 1<br>
&gt; ===<br>
&gt; It&#39;s not a bug, but compiler on product server is not solution, pre-build needed.<br>
&gt;<br>
&gt;<br>
&gt; On 02.07.2014 19:24, Thomas Quintana wrote:<br>
&gt;&gt; Hi Denis,<br>
&gt;&gt;<br>
&gt;&gt; For Python ESL integration you can try freepy it&#39;s an open source app server I wrote and maintain in Python. It&#39;s designed to be a 100% async actor based solution which is working very reliably for us.<br>

&gt;&gt;<br>
&gt;&gt; Best,<br>
&gt;&gt; Thomas Quintana<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; On Fri, Jun 27, 2014 at 3:27 AM, Денис &lt;<a href="mailto:denis@ringme.ru">denis@ringme.ru</a>&gt; wrote:<br>
&gt;&gt; who wrote event handling with ESL.py?<br>
&gt;&gt; Code:<br>
&gt;&gt; #!/usr/bin/python<br>
&gt;&gt;<br>
&gt;&gt; import ESL<br>
&gt;&gt;<br>
&gt;&gt; # Establish an inbound connection to FreeSWITCH<br>
&gt;&gt; con = ESL.ESLconnection(&quot;localhost&quot;,&quot;8021&quot;,&quot;ClueCon&quot;)<br>
&gt;&gt; print con.connected()<br>
&gt;&gt; print con.getInfo()<br>
&gt;&gt;<br>
&gt;&gt; # set event command to receive all events<br>
&gt;&gt; con.events(&quot;plain&quot;, &quot;all&quot;);<br>
&gt;&gt;<br>
&gt;&gt; #while(1): # or whileon.connected()):<br>
&gt;&gt; while(con.connected()):<br>
&gt;&gt;     e = con.recvEvent()<br>
&gt;&gt;     if e:<br>
&gt;&gt;       print &quot;Event: &quot;,e.serialize()<br>
&gt;&gt;<br>
&gt;&gt; Out:<br>
&gt;&gt; 0<br>
&gt;&gt; None<br>
&gt;&gt;<br>
&gt;&gt; run fs_cli:<br>
&gt;&gt; # fs_cli -H 127.0.0.1 -P 8021 -p ClueCon -b<br>
&gt;&gt; ...<br>
&gt;&gt; +OK log level  [7]<br>
&gt;&gt;<br>
&gt;&gt; Where exceptions with error?How to properly connect?<br>
&gt;&gt;<br>
&gt;&gt; _________________________________________________________________________<br>
&gt;&gt; Professional FreeSWITCH Consulting Services:<br>
&gt;&gt; <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
&gt;&gt; <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
&gt;&gt;<br>
&gt;&gt; FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
&gt;&gt; <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
&gt;&gt;<br>
&gt;&gt; Official FreeSWITCH Sites<br>
&gt;&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt;&gt; <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
&gt;&gt; <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
&gt;&gt;<br>
&gt;&gt; FreeSWITCH-users mailing list<br>
&gt;&gt; <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
&gt;&gt; <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
&gt;&gt; UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
&gt;&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; _________________________________________________________________________<br>
&gt;&gt; Professional FreeSWITCH Consulting Services:<br>
&gt;&gt;<br>
&gt;&gt; <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
&gt;&gt; <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
&gt;&gt;<br>
&gt;&gt; <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; Official FreeSWITCH Sites<br>
&gt;&gt;<br>
&gt;&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt;&gt; <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
&gt;&gt; <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; FreeSWITCH-users mailing list<br>
&gt;&gt;<br>
&gt;&gt; <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
&gt;&gt; <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
&gt;&gt;<br>
&gt;&gt; UNSUBSCRIBE:<br>
&gt;&gt; <a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
&gt;&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt;<br>
&gt;<br>
&gt; _________________________________________________________________________<br>
&gt; Professional FreeSWITCH Consulting Services:<br>
&gt; <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
&gt; <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
&gt;<br>
&gt; FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
&gt; <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
&gt;<br>
&gt; Official FreeSWITCH Sites<br>
&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt; <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
&gt; <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
&gt;<br>
&gt; FreeSWITCH-users mailing list<br>
&gt; <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
&gt; <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
&gt; UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt;<br>
&gt; --<br>
&gt; Best regards,<br>
&gt;<br>
&gt; Dmitry Sytchev,<br>
&gt; IT Engineer<br>
&gt; _________________________________________________________________________<br>
&gt; Professional FreeSWITCH Consulting Services:<br>
&gt; <a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
&gt; <a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
&gt;<br>
&gt; FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
&gt; <a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
&gt;<br>
&gt; Official FreeSWITCH Sites<br>
&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
&gt; <a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
&gt; <a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
&gt;<br>
&gt; FreeSWITCH-users mailing list<br>
&gt; <a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
&gt; <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
&gt; UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
&gt; <a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br>
<br>
--<br>
</div></div>Kees Jan<br>
<br>
<a href="http://java-monitor.com/" target="_blank">http://java-monitor.com/</a><br>
<a href="mailto:kjkoster@kjkoster.org">kjkoster@kjkoster.org</a><br>
+31651838192<br>
<br>
Human beings make life so interesting. Do you know that in a universe so full of wonders,<br>
they have managed to invent boredom. Quite astonishing... -- Terry Pratchett<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Best regards,<br><br>Dmitry Sytchev,<br>IT Engineer
</div>