Actually this really seems to be matter of school :) If attacker is already in your system, I doubt that compiler absence will stop him. I agree about centralized management/deployment though. It's better to have every part of system properly packaged. 2014-07-03 14:27 GMT+04:00 Kees Jan Koster <kjkoster@kjkoster.org>:
Dear Dmitry,
I've deployed both with and without on-server compiles. I prefer having a central build server, since I like to have some level of guarantee what precise version of the deployable and its dependencies are. This way I can deploy the exact same version that QA tested on the production machines and not run with a build that is almost, but not quite unlike the version that QA tested.
A central build server is also a step towards deployment automation for the development and QA teams. It makes authoritative builds which can them be automatically deployed over saltstack/puppet/chef/whatever. That in turn reduces the "works on my machine" discussions.
I see no harm in having compilers on production servers, but I know there is a school of thought that says not to have them there. I usually have tcpdump and ngrep installed for solving incidents. With these two on the system a compiler is the least of Security's worries. :)
Kees Jan
On 3 Jul 2014, at 11:47, Dmitry Sytchev <kbdfck@gmail.com> wrote:
Offtop, but always wanted to know what is a problem of compiler on production server?
2014-07-03 13:25 GMT+04:00 Денис <denis@ringme.ru>: gcc -pthread -fno-strict-aliasing -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -D_GNU_SOURCE -fPIC -fwrapv -DNDEBUG -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -D_GNU_SOURCE -fPIC -fwrapv -fPIC -I/usr/include/python2.6 -c src/llist.c -o build/temp.linux-x86_64-2.6/src/llist.o
unable to execute gcc: No such file or directory
error: command 'gcc' failed with exit status 1 === It's not a bug, but compiler on product server is not solution, pre-build needed.
On 02.07.2014 19:24, Thomas Quintana wrote:
Hi Denis,
For Python ESL integration you can try freepy it's an open source app server I wrote and maintain in Python. It's designed to be a 100% async actor based solution which is working very reliably for us.
Best, Thomas Quintana
On Fri, Jun 27, 2014 at 3:27 AM, Денис <denis@ringme.ru> wrote: who wrote event handling with ESL.py? Code: #!/usr/bin/python
import ESL
# Establish an inbound connection to FreeSWITCH con = ESL.ESLconnection("localhost","8021","ClueCon") print con.connected() print con.getInfo()
# set event command to receive all events con.events("plain", "all");
#while(1): # or whileon.connected()): while(con.connected()): e = con.recvEvent() if e: print "Event: ",e.serialize()
Out: 0 None
run fs_cli: # fs_cli -H 127.0.0.1 -P 8021 -p ClueCon -b ... +OK log level [7]
Where exceptions with error?How to properly connect?
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
Official FreeSWITCH Sites
http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Best regards,
Dmitry Sytchev, IT Engineer _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kees Jan
http://java-monitor.com/ kjkoster@kjkoster.org +31651838192
Human beings make life so interesting. Do you know that in a universe so full of wonders, they have managed to invent boredom. Quite astonishing... -- Terry Pratchett
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Best regards, Dmitry Sytchev, IT Engineer