Re: security/pgp on amd64

2009-06-24 Thread Dan Nelson
In the last episode (Jun 24), Olivier Nicole said: Is the port security/pgp working on amd64 system? I copied my public and private keyrings from i386 to amd64 system and I cannot decipher any file, it keeps on complaining that the pass phrase is bad. I already tried to export the key on

Re: you're not going to believe this.

2009-06-24 Thread freebsd
Gary Kline: Http://www.mydigitaldiscount.com/SPD/runcore-64gb-pata-mini-pci-e-pcie-ssd-for-asus-eee-pc-901-and-1000---backorder-runcore-64gb-pata-mini-pci-e-pcie-ssd-for-asus-eee-pc-901-and-1000--88DB-1224129741.jsp ... statement that this device lasts ten years before it fails to hold

Re: you're not going to believe this.

2009-06-24 Thread Wojciech Puchar
First, be careful about statements like 10 years before it fails to hold state. Usually that means if you write data to the device and put it on a shelf, you've got 10 years before the data is unreadable. Being marketing possibly it's true if you will write it few times and no more ;) store it

The question of moving vi to /bin

2009-06-24 Thread Manish Jain
On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: I hope the next release will address these problems, as well as a pretty reasonable request from me much earlier to move vi from /usr/bin to /bin. Even in single-user mode, you almost always need an editor. Which is why you have ed(1)

Re: upgrading openoffice.org with portmaster

2009-06-24 Thread Boris Samorodov
On Wed, 24 Jun 2009 00:39:22 +0200 kenneth hatteland wrote: when I start upgrading openoffice.org it switches from my localized language build to standard us en. Anyone have an idea how to force upgrade to stick with my norwegian build with portmaster ?? Platform freebsd 7.2 stable

Re: Untrusted X11 forwarding setup failed

2009-06-24 Thread Lowell Gilbert
Daniel Underwood djuatde...@gmail.com writes: Whenever I $ ssh -X u...@server from my FreeBSD machine, I get the following message (and am successfully logged in): Warning: untrusted X11 forwarding setup failed: xauth key data not generated Warning: No xauth data; using fake

Re: upgrading openoffice.org with portmaster

2009-06-24 Thread Rolf Nielsen
Boris Samorodov wrote: On Wed, 24 Jun 2009 00:39:22 +0200 kenneth hatteland wrote: when I start upgrading openoffice.org it switches from my localized language build to standard us en. Anyone have an idea how to force upgrade to stick with my norwegian build with portmaster ??

Re: The question of moving vi to /bin

2009-06-24 Thread b. f.
On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: ... About ed first. I might annoy a few people (which would gladden me in this particular case), but ed was just one of Ken Thompson's nightmares which he managed to reproduce in Unix with great precision. By no stretch of imagination would it

Re: Best practices for securing SSH server

2009-06-24 Thread RW
On Tue, 23 Jun 2009 22:37:12 +0200 Erik Norgaard norga...@locolomo.org wrote: You're right, as long as port-knocking as a first pass authentication scheme is not in wide spread use, then any attackers will not waste time port-knocking. If ever port-knocking becomes common, attackers will

Re: Best practices for securing SSH server

2009-06-24 Thread Erik Norgaard
RW wrote: On Tue, 23 Jun 2009 22:37:12 +0200 Erik Norgaard norga...@locolomo.org wrote: You're right, as long as port-knocking as a first pass authentication scheme is not in wide spread use, then any attackers will not waste time port-knocking. If ever port-knocking becomes common, attackers

Re: Best practices for securing SSH server

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 03:53:15PM +0200, Erik Norgaard wrote: RW wrote: On Tue, 23 Jun 2009 22:37:12 +0200 Erik Norgaard norga...@locolomo.org wrote: You're right, as long as port-knocking as a first pass authentication scheme is not in wide spread use, then any attackers will not

Re: The question of moving vi to /bin

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 06:13:49AM -0700, b. f. wrote: On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: About ed first. I might annoy a few people (which would gladden me in this particular case), but ed was just one of Ken Thompson's nightmares which he managed to reproduce in Unix with

Re: The question of moving vi to /bin

2009-06-24 Thread Chris Rees
2009/6/24 cpghost cpgh...@cordula.ws: On Wed, Jun 24, 2009 at 06:13:49AM -0700, b. f. wrote: On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: About ed first. I might annoy a few people (which would gladden me in this particular case), but ed was just one of Ken Thompson's nightmares

Re: The question of moving vi to /bin

2009-06-24 Thread Jonathan McKeown
On Wednesday 24 June 2009 12:59:13 Manish Jain wrote: About ed first. I might annoy a few people (which would gladden me in this particular case), but ed was just one of Ken Thompson's nightmares which he managed to reproduce in Unix with great precision. By no stretch of imagination would it

Re: Best practices for securing SSH server

2009-06-24 Thread Daniel Underwood
Point remains: Adding port knocking does not solve any security problem, it only adds complexity, cost, points of failure, inconvenience etc while making your problem appear differently and leaving you with the illusion of being more secure. I think that's grossly overstated, if not just

Re: Best practices for securing SSH server

2009-06-24 Thread Erik Norgaard
cpghost wrote: On Wed, Jun 24, 2009 at 03:53:15PM +0200, Erik Norgaard wrote: But port knocking can be useful and provide more security *if* you modify the kocking sequence algorithmically and make it, e.g. a function of time, source IP/range (and other factors). This could prevent a whole class

Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
Hi, is there anybody working on a versioning file system for FreeBSD right now? Maybe something like what's discussed here? http://www.pdl.cmu.edu/PDL-FTP/Secure/FAST03_abs.html I don't care if it is native or a layer, geom-ified, fuse-based, or even if it uses subversion as its backend, as

Re: Best practices for securing SSH server

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 04:50:01PM +0200, Erik Norgaard wrote: cpghost wrote: On Wed, Jun 24, 2009 at 03:53:15PM +0200, Erik Norgaard wrote: But port knocking can be useful and provide more security *if* you modify the kocking sequence algorithmically and make it, e.g. a function of time,

Re: cupssamba jailed

2009-06-24 Thread Daniel Bye
On Tue, Jun 23, 2009 at 08:07:19PM -0500, Derek Funk wrote: Attempting to setup cups and samba into a jail. How do you mount/add device node /dev/ulpt0 within a jail. Essentially I would like to know, how to add device nodes within jail /dev for specifically the devices I want? You need to

Isolating high cpu load at function level

2009-06-24 Thread Gary Gatten
Hello, I have a process with several threads - the main worker threads typically use 20% CPU - but after upgrading to a new version they're now using 90% cpu. I'm trying to determine what function these threads are performing that's requiring so much more cpu. Is it bad code? I bug in a

Re: upgrading installed ports: time to do it ?

2009-06-24 Thread mfv
On Monday, 22 June 2009 16:48:02 RW wrote: On Mon, 22 Jun 2009 20:58:41 +0100 Chris Whitehouse cwhi...@onetel.com wrote: I'll probably get flamed for this but since I've been using ports-mgmt/portmanager I've almost forgotten about /usr/ports/UPDATING and all that pkgdb -Fu stuff or

Re: The question of moving vi to /bin

2009-06-24 Thread Chad Perrin
On Wed, Jun 24, 2009 at 04:22:19PM +0200, Jonathan McKeown wrote: You also suggested doing away with ed and /rescue/vi altogether. You may not need statically-linked tools very often, but when you do need them, you *REALLY* need them. Don't suggest throwing them away without thinking

Re: The question of moving vi to /bin

2009-06-24 Thread Chad Perrin
On Wed, Jun 24, 2009 at 06:13:49AM -0700, b. f. wrote: On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: That's the whole problem of /rescue/vi. When you suddenly find yourself in single-user mode, the last thing you want to do is realise that tweaking is needed for something which should

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Roland Smith
On Wed, Jun 24, 2009 at 05:04:22PM +0200, cpghost wrote: Hi, is there anybody working on a versioning file system for FreeBSD right now? I don't care if it is native or a layer, geom-ified, fuse-based, or even if it uses subversion as its backend, as long as it provides some kind of

error when install plplot - lasi

2009-06-24 Thread cblasius
Hello, I see this error on two machines i386 and amd64 on FreeBSD-7.2-RELEASE Is this error also present to you? # portmaster /usr/ports/math/plplot ... [ 77%] Built target example0 [ 88%] Built target example1 [100%] Built target example2 Installing the project stripped... -- Install

Re: ~/.ssh directory permissions

2009-06-24 Thread Brent Bloxam
Chris Rees wrote: Although I think it's not a big deal, as long as your id_?sa has permissions 600 like mine, or even 400. Chris The man page for ssh(1) provides a lot of detail about the sensitivity of the various files related to ssh. To quote it regarding a few of them: ~/.ssh/

Re: Best practices for securing SSH server

2009-06-24 Thread RW
On Wed, 24 Jun 2009 17:12:59 +0200 cpghost cpgh...@cordula.ws wrote: It all boils down to this: do you login from a secure machine or not? Each tool has its own set of uses. When I want to log in from a public terminal, I prefer OPIE; OPIE is probably fine in almost all cases, but you may

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 06:37:55PM +0200, Roland Smith wrote: On Wed, Jun 24, 2009 at 05:04:22PM +0200, cpghost wrote: Hi, is there anybody working on a versioning file system for FreeBSD right now? I don't care if it is native or a layer, geom-ified, fuse-based, or even if it uses

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 07:59:18PM +0200, cpghost wrote: open(2) could open a file at an earlier revision: FILE *filep; s/FILE */int /; -cpghost. -- Cordula's Web. http://www.cordula.ws/ ___ freebsd-questions@freebsd.org mailing list

7.2 system stuck trying at boot, trying to mount root device

2009-06-24 Thread Forrest Aldrich
I'm running a modest PC that has FreeBSD-7.2 installed (fairly current build from CVS). Today, I did a shutdown -r to reboot the system. When it returned, the console is reporting: Trying to mount root from ufs:/dev/ad4s1a I've gone through and restored the boot loader, this works fine

Re: you're not going to believe this.

2009-06-24 Thread Charlie Kester
On Wed 24 Jun 2009 at 02:32:24 PDT free...@t41t.com wrote: The lifetime and reliability of SSDs are less-than-or-equal-to the lifetime and reliability of spinning magnetic drives, so don't buy an SSD for that. Whether SSDs use less power is an open question. There's a lot of data going either

Re: 7.2 system stuck trying at boot, trying to mount root device

2009-06-24 Thread Polytropon
On Wed, 24 Jun 2009 14:13:41 -0400, Forrest Aldrich for...@gmail.com wrote: I also did a proper mount, fsck, and umount under the LiveFS shell, which made no difference. I hope I'm just reading it in the wrong order. The correct order is to 1st fsck, then mount, not vice versa. Never fsck a

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Roland Smith
On Wed, Jun 24, 2009 at 07:59:18PM +0200, cpghost wrote: On Wed, Jun 24, 2009 at 06:37:55PM +0200, Roland Smith wrote: On Wed, Jun 24, 2009 at 05:04:22PM +0200, cpghost wrote: Hi, is there anybody working on a versioning file system for FreeBSD right now? I don't care if it

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Polytropon
On Wed, 24 Jun 2009 21:11:25 +0200, Roland Smith rsm...@xs4all.nl wrote: VMS had a filesystem that uses versioning: [http://en.wikipedia.org/wiki/Files-11] That's the first thing that came into my mind when reading this message. See LOGIN.COM;1 and then rm -rf /*.*;* :-) But it's not had,

Re: you're not going to believe this.

2009-06-24 Thread Gary Kline
On Wed, Jun 24, 2009 at 11:48:00AM -0700, Charlie Kester wrote: On Wed 24 Jun 2009 at 02:32:24 PDT free...@t41t.com wrote: The lifetime and reliability of SSDs are less-than-or-equal-to the lifetime and reliability of spinning magnetic drives, so don't buy an SSD for that. Whether SSDs use

panic ohci_add_done

2009-06-24 Thread lysergius2001
Hi, Could use some pointers here. I have an AMD64 system Gigabyte GA-MA770 motherboard, 4 GB RAM, Athlon 64 CPU. System won't boot. Flags error, panic ohci_add_done : addr 0x... not found Then it reboots. Tried disabling everything in the bios. (Including usb kbd and mouse) At wit's

echo in sh calls write function repeatedly in kernel driver?

2009-06-24 Thread Naeem Afzal
I used this sample echo driver listed here: http://www.freebsd.org/doc/en/books/arch-handbook/driverbasics-char.html and used Example 9-2 for 5.X FreeBSD. Modifed and added a printline in write function to display Count value: I am using 7.1 FreeBSD version. I compiled the driver and ran the

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Morten Grunnet Buhl
* cpghost cpgh...@cordula.ws [2009-06-24 17:04 +0200]: Hi, is there anybody working on a versioning file system for FreeBSD right now? - I don't know how fare along hammerfs is in being ported to FreeBSD. But from what I have heard, feature-wise, it might be something that meets your

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 09:11:25PM +0200, Roland Smith wrote: Yes, that's one possibility. But just like Subversion (which I'm using extensively here), it's not really transparent. What is? If you have to extend the API like you propose below, all programs that want to use that feature

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 11:26:50PM +0200, Morten Grunnet Buhl wrote: * cpghost cpgh...@cordula.ws [2009-06-24 17:04 +0200]: Hi, is there anybody working on a versioning file system for FreeBSD right now? - I don't know how fare along hammerfs is in being ported to FreeBSD. But from

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Polytropon
On Wed, 24 Jun 2009 23:57:34 +0200, cpghost cpgh...@cordula.ws wrote: Yep, you're right. I thought about a way to extend the API in a backwards compatible way, but that's not as easy or straight forward as it seems. In fact, it opens a whole can of worms. If the versioned file system isn't

Re: The question of moving vi to /bin

2009-06-24 Thread Bruce Cran
On Wed, 24 Jun 2009 06:13:49 -0700 b. f. bf1...@googlemail.com wrote: ??? Who is giving them that credit? This isn't new. You already have some control over swapping via several oids: vm.swap_enabled vm.disable_swapspace_pageouts vm.defer_swapspace_pageouts vm.swap_idle_enabled

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Roland Smith
On Wed, Jun 24, 2009 at 11:57:34PM +0200, cpghost wrote: Quite true! I see even more ambiguity here: What about a versioned file pointed to by hard links from two versioned directories? The more I think about it, the more problems I can see. Look e.g. at symbolic links. Or looking from the

cc1: error: unrecognized command line option -mfdpic

2009-06-24 Thread Jin Guojun
This option -mfdpic is shown in manual page for gcc 4.1 or later -mfdpic Select the FDPIC ABI, that uses function descriptors to represent pointers to functions. Without any PIC/PIE-related options, it implies -fPIE. With -fpic or -fpie, it assumes GOT

Re: The question of moving vi to /bin

2009-06-24 Thread Manish Jain
If you want to make a case for replacing ed(1), you're going to have to come up with some concrete reasons for doing so, not just make a (long and hyperbolic) statement that you don't like it. Any Unix tool has to clearly fall either under the category of non-interactive (grep, sed, ex) or

Re: The question of moving vi to /bin

2009-06-24 Thread John L. Templer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Manish Jain wrote: If you want to make a case for replacing ed(1), you're going to have to come up with some concrete reasons for doing so, not just make a (long and hyperbolic) statement that you don't like it. Any Unix tool has to clearly