5.x system trying to boot /kernel ?

2004-12-15 Thread security
Hey,

After adding KDB, KDB_UNATTENDED and DDB, two of my 5.3-STABLE servers
never came back after a reboot. After talking to the datacenter, they
informed me these servers are trying to boot of /kernel and not
/boot/kernel/kernel ..

What might be causing this behaviour ? /kernel was 4.X and these servers
never knew what 4.X was.

This only happened after adding KDB, KDB_UNATTENDED and DDB to the kernel
config, I had recompiled the kernel before and it never tried to look
/kernel instead of /boot/kernel/kernel

# file /kernel
/kernel: cannot open (/kernel)
# file /boot/kernel/kernel
/boot/kernel/kernel: ELF 32-bit LSB executable, Intel 80386, version 1
(FreeBSD), dynamically linked (uses shared libs), not stripped

I rebuilt a kernel on my FreeBSD home gateway (also 5.3-STABLE) and also
adding GDB, I didn't have this problem.

Is there any loader.conf variable which sets the kernel that should be
booted ?

Thanks in advance!

Regards,


Hugo

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Strange command histories in hacked shell server

2004-12-18 Thread security
You should have a script that creates a new user when people login with
'new'. Have you forbid that script from overwriting your wheel account and
re-creating root?

> Hi,
>
> Sorry for cross posting.
>
> I have with FreeBSD 5.3-stable server which serves as a public shell
> server.
>
> FreeBSD public.ub.mng.net 5.3-STABLE FreeBSD 5.3-STABLE #6: Wed Nov 24
> 15:55:36 ULAT 2004 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/PSH
> i386
>
> It has ssh and proftp-1.2.10 daemons.
>
> However it was hacked and I'm trying to analyze it and having some
> difficulties.
>
> Machine is configured in such way that everyone can create an account
> itself.
> Some user dir permissions:
> ...
> drwxr-xr-x  2 root   wheel 512 Mar 29  2004 new
> drwx--  3 tamiraad   unix  512 Apr  9  2004 tamiraad
> drwxr-xr-x  6 tsgan  tsgan1024 Dec 16 17:51 tsgan
> drwx--  4 tugstugi   unix  512 Dec 13 20:34 tugstugi
> drwxr-xr-x  5 unix   unix  512 Dec 13 12:37 unix
> ...
> User should log on as new with password new to create an account.
>
> Accounting is enabled and kern.securelevel is set to 2.
> Only one account 'tsgan' is in wheel group and only tsgan gan become root
> using su.
>
> Following is the some strange output from grave-robber (coroner toolkit):
> ...
> Dec 13 04 20:18:405 m.c -rw-rw tugstugi
> smmsp/var/spool/clientmqueue/dfiBDCIeD0001529
> Dec 13 04 20:34:58  512 m.. drwx-- tugstugi unix
> /home/tugstugi
> Dec 13 04 20:35:57  512 ..c drwx-- tugstugi unix
> /home/tugstugi
> Dec 14 04 00:19:560 m.c -rw-rw-rw- tugstugi
> unix /home/tugstugi/.myrc
>
> Dec 14 04 00:20:50 9665 m.. -rw-r--r-- tugstugi
> unix /home/tsgan/.tmp/known_hosts
> 9665 m.c -rw-r--r-- tugstugi
> unix /home/tugstugi/.ssh/known_hosts
>
> Dec 15 04 19:12:21 1002 m.c -rw--- tugstugi
> unix /home/tugstugi/.shrc
> ...
> Somehow he seems like copied /home/tugstugi/.ssh/known_hosts to
> home/tsgan/.tmp/known_hosts.
> I don't know why.
>
>
> Following is lastcomm output:
> ...
> sshd -F  tugstugi __ 0.16 secs Tue Dec 14
> 23:01
> sh   -   tugstugi #C:5:0x1   0.03 secs Tue Dec 14
> 23:02
> su   -   tugstugi #C:5:0x1   0.02 secs Tue Dec 14
> 23:38
> ...
> sshd -F  tugstugi __ 0.08 secs Tue Dec 14
> 22:41
> sh   -   tugstugi #C:5:0x1   0.02 secs Tue Dec 14
> 22:41
> who  -   tugstugi #C:5:0x1   0.00 secs Tue Dec 14
> 22:52
> su   -   tugstugi #C:5:0x1   0.02 secs Tue Dec 14
> 22:48
> sh   -   tsgan#C:5:0x1   0.00 secs Tue Dec 14
> 22:48
> ls   -   tsgan#C:5:0x1   0.00 secs Tue Dec 14
> 22:52
> su   -   tsgan#C:5:0x1   0.02 secs Tue Dec 14
> 22:49
> csh  -   root #C:5:0x1   0.03 secs Tue Dec 14
> 22:49
> ...
>
> In above I think he already hijacked my account and root password so he
> used su to
> become root.
>
> sshd -F  tsgan__ 0.02 secs Tue Dec 14
> 00:27
> sh   -   tsganttyp0  0.02 secs Tue Dec 14
> 00:27
> cat  -   tsganttyp0  0.00 secs Tue Dec 14
> 00:28
> su   -   tsganttyp0  0.00 secs Tue Dec 14
> 00:28
> sleep-   tsganttyp0  0.00 secs Tue Dec 14
> 00:27
> ^^
> stty -   tsganttyp0  0.00 secs Tue Dec 14
> 00:27
> stty -   tsganttyp0  0.00 secs Tue Dec 14
> 00:27
> ^^
> fortune  -   tsganttyp0  0.00 secs Tue Dec 14
> 00:27
> ...
>
> I don't quite understand why he used sleep and stty commands in above.
> My suspect is tty hijacking. Am I right? Correct me if I'm wrong.
>
> sleep-   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> stty -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> stty -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> ...
> id   -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> sleep-   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> stty -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> stty -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> id   -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> cat  -   tsgan#C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> ls   -   tsgan#C:5:0x2   0.00 secs Tue Dec 14
> 00:24
> su   -   tsgan#C:5:0x2   0.02 secs Tue Dec 14
> 00:23
> sh   -   tugstugi #C:5:0x2   0.00 secs Tue Dec 14
> 00:23

Unable to get APM working -- help!

2004-12-25 Thread security
Hi list,

I simply can't get APM to work on this laptop.

It is a travelmate 4002WLMi (P-M 1.6) on which I've just installed FreeBSD
5.3-RELEASE, and built a custom kernel with apm, apm_saver and acpi (also
tried with only apm, apm+apm_saver, and now apm+apm_saver+acpi)

I had set the hints to disable ACPI and enable APM on /boot/device.hints
(don't know the exact names now and I've just shut the laptop down) - This
resulted in no /dev/apm and /dev/apmctl entries being created..

I tried changing the order of the statements (enable APM first then
disable ACPI).. to no avail

I also tried enabling both, which obviously didn't work quite well :-)

apm_enable="YES" and apmd_enable="YES"  on /etc/rc.conf
apm_load="YES" on /boot/loader.conf

Still, /dev/apm*'s never show up. Except if I actually disable APM and
enable ACPI instead, /dev/apm will show.. but no /dev/apmctl.

I'm new to the laptop world and I really would like to enable power saving
features on this laptop.. I managed to get est/estctrl running, and it was
changing my CPU from 600 to 1600 ghz according to the load, but when I
disabled APM and enabled ACPI this ceases to work and the CPU will always
run at  1600ghz. Also, acpiconf -i0 says device not configured..

As far as I was able to see, most battery monitoring stuff (integrated on
KDE and all) will depend on APM.. So I'd really like to enable it!

Am I missing some step to get APM working? Or does this laptop just plain
and simply doesn't support it ?
Please enlighten me.

Best regards,

Hugo




___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unable to get APM working -- help!

2004-12-25 Thread security
robed irqs 0
sio0: port may not be enabled
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 8250 or not responding
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
Timecounter "TSC" frequency 1598649123 Hz quality 800
Timecounters tick every 10.000 msec
WARNING: apm_saver module requires apm enabled
IPsec: Initialized Security Association Processing.
acpi_cpu: throttling enabled, 8 steps (100% to 12.5%), currently 100.0%
ad0: 57231MB  [116280/16/63] at ata0-master UDMA100
acd0: DVDR  at ata1-master UDMA33
Mounting root from ufs:/dev/ad0s3a
Enhanced Speedstep running at 1600 MHz
iwi0:  mem 0xd0208000-0xd0208fff irq
10 at device 4.0 on pci2
iwi0: Ethernet address: 00:0e:35:8d:db:e3
iwi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
iwi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps
24Mbps 36Mbps 48Mbps 54Mbps
iwi0: [GIANT-LOCKED]
pcm0:  port 0x18c0-0x18ff,0x1c00-0x1cff mem
0xd800-0xd8ff,0xdc00-0xddff irq 10 at device 31.5 on pci0
pcm0: [GIANT-LOCKED]
pcm0: 





> On Sun, 26 Dec 2004 05:20, [EMAIL PROTECTED] wrote:
>> Still, /dev/apm*'s never show up. Except if I actually disable APM and
>> enable ACPI instead, /dev/apm will show.. but no /dev/apmctl.
>>
>> I'm new to the laptop world and I really would like to enable power
>> saving
>> features on this laptop.. I managed to get est/estctrl running, and it
>> was
>> changing my CPU from 600 to 1600 ghz according to the load, but when I
>> disabled APM and enabled ACPI this ceases to work and the CPU will
>> always
>> run at  1600ghz. Also, acpiconf -i0 says device not configured..
>
> Use ACPI.
> It will provide an APM like interface (/dev/apm) for userland apps to use
> to
> get info.
>
> It's possible your laptop doesn't even _do_ APM :)
>
>> As far as I was able to see, most battery monitoring stuff (integrated
>> on
>> KDE and all) will depend on APM.. So I'd really like to enable it!
>
> ACPI will allow you to do this plus a lot more.
>
> If you want to do things based on power related state changes (eg lid
> close,
> power button press, AC unplugged etc..) you can use devd which can respond
> to
> ACPI events.
>
> --
> Daniel O'Connor software and network engineer
> for Genesis Software - http://www.gsoft.com.au
> "The nice thing about standards is that there
> are so many of them to choose from."
>   -- Andrew Tanenbaum
> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unable to get APM working -- help!

2004-12-25 Thread security
t;> 6 at device 29.1 on pci0
>> uhci1: [GIANT-LOCKED]
>> usb1:  on uhci1
>> usb1: USB revision 1.0
>> uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
>> uhub1: 2 ports with 2 removable, self powered
>> uhci2:  port 0x1840-0x185f
>> irq
>> 6 at device 29.2 on pci0
>> uhci2: [GIANT-LOCKED]
>> usb2:  on uhci2
>> usb2: USB revision 1.0
>> uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
>> uhub2: 2 ports with 2 removable, self powered
>> pci0:  at device 29.7 (no driver attached)
>> pcib2:  at device 30.0 on pci0
>> pci2:  on pcib2
>> bfe0:  mem 0xd0204000-0xd0205fff irq 6
>> at
>> device 2.0 on pci2
>> miibus0:  on bfe0
>> bmtphy0:  on miibus0
>> bmtphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
>> bfe0: Ethernet address: 00:c0:9f:6a:8e:1c
>> bfe0: [GIANT-LOCKED]
>> pci2:  at device 4.0 (no driver attached)
>> cbb0:  mem 0xd0209000-0xd0209fff irq 10 at device
>> 6.0
>> on pci2
>> cardbus0:  on cbb0
>> pccard0: <16-bit PCCard bus> on cbb0
>> fwohci0: <1394 Open Host Controller Interface> mem
>> 0xd020-0xd0203fff,0xd020a000-0xd020a7ff irq 10 at device 6.2 on pci2
>> fwohci0: [GIANT-LOCKED]
>> fwohci0: OHCI version 1.10 (ROM=1)
>> fwohci0: No. of Isochronous channels is 4.
>> fwohci0: EUI64 00:c0:9f:00:00:32:14:de
>> fwohci0: Phy 1394a available S400, 2 ports.
>> fwohci0: Link S400, max_rec 2048 bytes.
>> firewire0:  on fwohci0
>> fwe0:  on firewire0
>> if_fwe0: Fake Ethernet address: 02:c0:9f:32:14:de
>> fwe0: Ethernet address: 02:c0:9f:32:14:de
>> sbp0:  on firewire0
>> fwohci0: Initiate bus reset
>> fwohci0: node_id=0xc000ffc0, gen=1, CYCLEMASTER mode
>> firewire0: 1 nodes, maxhop <= 0, cable IRM = 0 (me)
>> firewire0: bus manager 0 (me)
>> pci2:  at device 6.3 (no driver attached)
>> isab0:  at device 31.0 on pci0
>> isa0:  on isab0
>> atapci0:  port
>> 0x1860-0x186f,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 31.1 on pci0
>> ata0: channel #0 on atapci0
>> ata1: channel #1 on atapci0
>> pci0:  at device 31.3 (no driver attached)
>> pci0:  at device 31.5 (no driver attached)
>> pci0:  at device 31.6 (no driver attached)
>> acpi_lid0:  on acpi0
>> acpi_button0:  on acpi0
>> atkbdc0:  port 0x64,0x60 irq 1 on acpi0
>> atkbd0:  irq 1 on atkbdc0
>> kbd0 at atkbd0
>> atkbd0: [GIANT-LOCKED]
>> psm0:  irq 12 on atkbdc0
>> psm0: [GIANT-LOCKED]
>> psm0: model Generic PS/2 mouse, device ID 0
>> npx0: [FAST]
>> npx0:  on motherboard
>> npx0: INT 16 interface
>> orm0:  at iomem
>> 0xe-0xe3fff,0xdf800-0xd,0xd-0xd17ff,0xc-0xc on isa0
>> pmtimer0 on isa0
>> ppc0: parallel port not found.
>> sc0:  at flags 0x100 on isa0
>> sc0: VGA <16 virtual consoles, flags=0x300>
>> sio0: configured irq 4 not in bitmap of probed irqs 0
>> sio0: port may not be enabled
>> sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
>> sio0: type 8250 or not responding
>> sio1: configured irq 3 not in bitmap of probed irqs 0
>> sio1: port may not be enabled
>> vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on
>> isa0
>> Timecounter "TSC" frequency 1598649123 Hz quality 800
>> Timecounters tick every 10.000 msec
>> WARNING: apm_saver module requires apm enabled
>> IPsec: Initialized Security Association Processing.
>> acpi_cpu: throttling enabled, 8 steps (100% to 12.5%), currently 100.0%
>> ad0: 57231MB  [116280/16/63] at ata0-master
>> UDMA100 acd0: DVDR  at ata1-master UDMA33
>> Mounting root from ufs:/dev/ad0s3a
>> Enhanced Speedstep running at 1600 MHz
>> iwi0:  mem 0xd0208000-0xd0208fff
>> irq
>> 10 at device 4.0 on pci2
>> iwi0: Ethernet address: 00:0e:35:8d:db:e3
>> iwi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
>> iwi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps
>> 24Mbps 36Mbps 48Mbps 54Mbps
>> iwi0: [GIANT-LOCKED]
>> pcm0:  port 0x18c0-0x18ff,0x1c00-0x1cff mem
>> 0xd800-0xd8ff,0xdc00-0xddff irq 10 at device 31.5 on
>> pci0
>> pcm0: [GIANT-LOCKED]
>> pcm0: 
>>
>> > On Sun, 26 Dec 2004 05:20, [EMAIL PROTECTED] wrote:
>> >> Still, /dev/apm*'s never show up. Except if I actually disable APM
>> and
>> >> enable ACPI instead, /dev/apm will show.. but no /dev/apmctl.
>> >>
>> >> I'm new to the laptop world and I really would like to enable power
>> >> saving
>> >> features on this laptop.. I manag

Re: Unable to get APM working -- help!

2004-12-25 Thread security
> On Sun, 26 Dec 2004 13:28, [EMAIL PROTECTED] wrote:
>> > Try acpiconf -i 1
>>
>> Same result :/
>
> Hmm.. what's your dmesg output when you boot verbose with ACPI enabled?
>

Attached it.

>> > I prefer acpi_pcc http://www.spa.is.uec.ac.jp/~nfukuda/software/ which
>> I
>> > believe does the same thing but only needs a kernel module to work.
>>
>> Does it work on Pentium-M ?
>
> Yep.
>

I'll try it out; meanwhile, I've discovered the sysctl to change this
manually. I've checked it works by trying to compile something at the
lowest CPU clock speed. It was slow to hell :-)

>> >> load, and maxing it (1.6GHz) under load, but with ACPI off. With ACPI
>> on
>> >> it's always at 1.6GHz. Plus, I've noticed the 'top' CPU values are
>> plain
>> >> wrong. I was compiling thunderbird, xmms, and firefox and it showed
>> all
>> >> processes with 0.00% CPU.
>> >
>> > Do your kernel and userland match?
>>
>> 5.3-RELEASE from cd and a custom kernel I built. I've just tested, and
>> the
>> results are widly innacurate ONLY with ACPI turned on.. weird.
>
> Any chance there is a new BIOS available for that system?
>

A quick googling session brought up nothing.

>> Did you have to do anything in special to make -i 0 work? (it says
>> device
>> not configured to me.. perhaps I missed something)
>
> No.. If I try and look at a non existent battery slot it says 'device not
> configured' so maybe it thinks you have no batteries for some strange
> reason.
>
I've installed klaptop and it shows battery as -1 and 'not charging'
acpiconf -i[0-9] didn't do any good either :/

> --
> Daniel O'Connor software and network engineer
> for Genesis Software - http://www.gsoft.com.au
> "The nice thing about standards is that there
> are so many of them to choose from."
>   -- Andrew Tanenbaum
> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>


dmesg (ACPI on, boot verbose)
** check attached file **



dmesg
Description: Binary data
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unable to get APM working -- help!

2004-12-26 Thread security
0
sio0: type 16550A
unknown: not probed (disabled)
unknown: not probed (disabled)
unknown: not probed (disabled)
unknown: not probed (disabled)
unknown: not probed (disabled)
unknown: not probed (disabled)
unknown: not probed (disabled)
npx0: [FAST]
npx0:  on motherboard
npx0: INT 16 interface
ata: ata0 already exists; skipping it
ata: ata1 already exists; skipping it
atkbdc: atkbdc0 already exists; skipping it
sio: sio0 already exists; skipping it
Trying Read_Port at 203
Trying Read_Port at 243
Trying Read_Port at 283
Trying Read_Port at 2c3
Trying Read_Port at 303
Trying Read_Port at 343
Trying Read_Port at 383
Trying Read_Port at 3c3
ex_isa_identify()
unknown: status reg test failed ff
unknown: status reg test failed ff
unknown: status reg test failed ff
unknown: status reg test failed ff
unknown: status reg test failed ff
unknown: status reg test failed ff
ahc_isa_probe 1: ioport 0x1c00 alloc failed
sc: sc0 already exists; skipping it
vga: vga0 already exists; skipping it
isa_probe_children: disabling PnP devices
isa_probe_children: probing non-PnP devices
orm0:  at iomem
0xe-0xe3fff,0xdf800-0xd,0xd-0xd17ff,0xc-0xc on isa0
pmtimer0 on isa0
adv0: not probed (disabled)
aha0: not probed (disabled)
aic0: not probed (disabled)
bt0: not probed (disabled)
cs0: not probed (disabled)
ed0: not probed (disabled)
fdc0 failed to probe at port 0x3f0-0x3f5 irq 6 drq 2 on isa0
fe0: not probed (disabled)
ie0: not probed (disabled)
lnc0: not probed (disabled)
pcic0 failed to probe at port 0x3e0 iomem 0xd on isa0
pcic1: not probed (disabled)
ppc0: parallel port not found.
ppc0:  failed to probe at irq 7 on isa0
sc0:  at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sc0: fb0, kbd0, terminal emulator: sc (syscons terminal)
sio1 failed to probe at port 0x2f8 irq 3 on isa0
sio2: not probed (disabled)
sio3: not probed (disabled)
sn0: not probed (disabled)
vga0:  at port 0x3c0-0x3df iomem 0xa-0xb on isa0
fb0: vga0, vga, type:VGA (5), flags:0x7007f
fb0: port:0x3c0-0x3df, crtc:0x3d4, mem:0xa 0x2
fb0: init mode:24, bios mode:3, current mode:24
fb0: window:0xc00b8000 size:32k gran:32k, buf:0 size:32k
vga0: vga: WARNING: video mode switching is not fully supported on this
adapter
VGA parameters upon power-up
50 18 10 00 00 00 03 00 02 67 5b 4f 4f 9f 52 16
9e 1f 00 4f 0d 0e 00 00 07 80 93 87 8f 28 1f 8f
9f a3 ff 00 01 02 03 04 05 14 07 38 39 3a 3b 3c
3d 3e 3f 0c 00 0f 08 00 00 00 00 00 10 0e 00 ff
VGA parameters in BIOS for mode 24
50 18 10 00 10 00 03 00 02 67 5f 4f 50 82 55 81
bf 1f 00 4f 0d 0e 00 00 00 00 9c 8e 8f 28 1f 96
b9 a3 ff 00 01 02 03 04 05 14 07 38 39 3a 3b 3c
3d 3e 3f 0c 00 0f 08 00 00 00 00 00 10 0e 00 ff
EGA/VGA parameters to be used for mode 24
50 18 10 00 00 00 03 00 02 67 5b 4f 4f 9f 52 16
9e 1f 00 4f 0d 0e 00 00 07 80 93 87 8f 28 1f 8f
9f a3 ff 00 01 02 03 04 05 14 07 38 39 3a 3b 3c
3d 3e 3f 0c 00 0f 08 00 00 00 00 00 10 0e 00 ff
vt0: not probed (disabled)
isa_probe_children: probing PnP devices
Device configuration finished.
procfs registered
Timecounter "TSC" frequency 1598650059 Hz quality 800
Timecounters tick every 10.000 msec
WARNING: apm_saver module requires apm enabled
splash: image decoder found: apm_saver
IPsec: Initialized Security Association Processing.
pflog0: bpf attached
lo0: bpf attached
cpu0: set speed to 100.0%
acpi_cpu: throttling enabled, 8 steps (100% to 12.5%), currently 100.0%
ata0-master: pio=0x0c wdma=0x22 udma=0x45 cable=80pin
ata0-master: setting PIO4 on Intel ICH4 chip
ata0-master: setting UDMA100 on Intel ICH4 chip
ad0:  ATA-6 disk at ata0-master
ad0: 57231MB (117210240 sectors), 116280 C, 16 H, 63 S, 512 B
ad0: 16 secs/int, 1 depth queue, UDMA100
GEOM: new disk ad0
ar: FreeBSD check1 failed
ata1-master: pio=0x0c wdma=0x22 udma=0x42 cable=40pin
ata1-master: setting PIO4 on Intel ICH4 chip
ata1-master: setting UDMA33 on Intel ICH4 chip
acd0:  DVDR drive at ata1 as master
acd0: read 4134KB/s (4134KB/s) write 4134KB/s (4134KB/s), 2048KB buffer,
UDMA33
acd0: Reads: CDR, CDRW, CDDA stream, DVDROM, DVDR, packet
acd0: Writes: CDR, CDRW, DVDR, test write, burnproof
acd0: Audio: play, 256 volume levels
acd0: Mechanism: ejectable tray, unlocked
acd0: Medium: no/blank disc
[0] f:00 typ:18 s(CHS):0/1/1 e(CHS):382/254/63 s:63 l:6152832
[1] f:00 typ:6 s(CHS):383/0/1 e(CHS):1023/254/63 s:6152895 l:31455270
[2] f:80 typ:165 s(CHS):1023/255/63 e(CHS):1023/254/63 s:37608165 l:79602075
[3] f:00 typ:0 s(CHS):0/0/0 e(CHS):0/0/0 s:0 l:0
GEOM: Configure ad0s1, start 32256 length 3150249984 end 3150282239
GEOM: Configure ad0s2, start 3150282240 length 16105098240 end 19255380479
GEOM: Configure ad0s3, start 19255380480 length 40756262400 end 60011642879
GEOM: Configure ad0s3a, start 0 length 134217728 end 134217727
GEOM: Configure ad0s3b, start 13220446208 length 1073741824 end 14294188031
GEOM: Configure ad0s3c, start 0 length 40756262400 end 40756262399
GEOM: Configure ad0s3d, start 134217728 length 134217728 end 268435455
GEOM

Re: Unable to get APM working -- help!

2004-12-26 Thread security
> On Sun, 26 Dec 2004 13:28, [EMAIL PROTECTED] wrote:
>> > Try acpiconf -i 1
>>
>> Same result :/
>
> Hmm.. what's your dmesg output when you boot verbose with ACPI enabled?
>

I'll be mailing it right next from other mail account (it's timeouting on
this web mail - subject is 'dmesg from acer laptop')

>> > I prefer acpi_pcc http://www.spa.is.uec.ac.jp/~nfukuda/software/ which
>> I
>> > believe does the same thing but only needs a kernel module to work.
>>
>> Does it work on Pentium-M ?
>
> Yep.
>

I'll try it out; meanwhile, I've discovered the sysctl to change this
manually. I've checked it works by trying to compile something at the
lowest CPU clock speed. It was slow to hell :-)

>> >> load, and maxing it (1.6GHz) under load, but with ACPI off. With ACPI
>> on
>> >> it's always at 1.6GHz. Plus, I've noticed the 'top' CPU values are
>> plain
>> >> wrong. I was compiling thunderbird, xmms, and firefox and it showed
>> all
>> >> processes with 0.00% CPU.
>> >
>> > Do your kernel and userland match?
>>
>> 5.3-RELEASE from cd and a custom kernel I built. I've just tested, and
>> the
>> results are widly innacurate ONLY with ACPI turned on.. weird.
>
> Any chance there is a new BIOS available for that system?
>

A quick googling session brought up nothing.

>> Did you have to do anything in special to make -i 0 work? (it says
>> device
>> not configured to me.. perhaps I missed something)
>
> No.. If I try and look at a non existent battery slot it says 'device not
> configured' so maybe it thinks you have no batteries for some strange
> reason.
>
I've installed klaptop and it shows battery as -1 and 'not charging'
acpiconf -i[0-9] didn't do any good either :/

> --
> Daniel O'Connor software and network engineer
> for Genesis Software - http://www.gsoft.com.au
> "The nice thing about standards is that there
> are so many of them to choose from."
>   -- Andrew Tanenbaum
> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>

dmesg
Description: Binary data


dmesg
Description: Binary data


dmesg
Description: Binary data
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unable to get APM working -- help!

2004-12-26 Thread security
> On Sun, 26 Dec 2004 15:26, [EMAIL PROTECTED] wrote:
>> I'll try it out; meanwhile, I've discovered the sysctl to change this
>> manually. I've checked it works by trying to compile something at the
>> lowest CPU clock speed. It was slow to hell :-)
>
> That's probably clock throttling which is different..

Yes, the sysctl included "throttle". As I said, I'm new to the laptop
world.. Is the power saving difference a lot if I just throttle the clock,
instead of using enhanced speed step?

>
> [Enhanced] Speed Step reduces the clock speed and the CPU core voltage..
> clock
> throttling just idles the CPU for a certain proportion of the time. If you
> want slow try forcing them both to the slowest speed.. Pentium-M 75Mhz :)
>
>> > Any chance there is a new BIOS available for that system?
>>
>> A quick googling session brought up nothing.
>
> How about say, checking the makers web site?
>

I also did, nothing :-P

>> > No.. If I try and look at a non existent battery slot it says 'device
>> not
>> > configured' so maybe it thinks you have no batteries for some strange
>> > reason.
>>
>> I've installed klaptop and it shows battery as -1 and 'not charging'
>> acpiconf -i[0-9] didn't do any good either :/
>
> Without ACPI support being able to read your battery status no userland
> program will work.
>
> Your dmesg shows acpi_cmbat entries, ie
> acpi_cmbat0:  on acpi0
> acpi_cmbat1:  on acpi0
>
> which I think is pretty fundamental to being able to read battery status
> ;)
>

Yesterday I googled a bit for my laptop name+linux and I found a post from
a guy who had the same exact problem under Linux. He had /proc/acpi but no
/proc/acpi/battery.

I know battery status can be seen, as the laptop shipped with win XP home,
which I promptly got rid of, but I installed a game there to see how many
FPS I'd get playing with the laptop. So I still messed around with it
(windows) for around 35 minutes, and could see the little battery icon
discharging.

If the acpi_cmbat0/1 shows up on dmesg, what could be wrong? Perhaps this
ACPI implementation is a bit weird and I should send a copy of my asl to
freebsd-acpi ?


>
> --
> Daniel O'Connor software and network engineer
> for Genesis Software - http://www.gsoft.com.au
> "The nice thing about standards is that there
> are so many of them to choose from."
>   -- Andrew Tanenbaum
> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Unable to get APM working -- help! [no acpi_cmbat entries]

2004-12-26 Thread security
Just a quick add, my dmesg doesn't show acpi_cmbat entries. You probably
confused my dmesg with yours (from the dmesg mail I sent you)

>> On Sun, 26 Dec 2004 15:26, [EMAIL PROTECTED] wrote:
>>> I'll try it out; meanwhile, I've discovered the sysctl to change this
>>> manually. I've checked it works by trying to compile something at the
>>> lowest CPU clock speed. It was slow to hell :-)
>>
>> That's probably clock throttling which is different..
>
> Yes, the sysctl included "throttle". As I said, I'm new to the laptop
> world.. Is the power saving difference a lot if I just throttle the clock,
> instead of using enhanced speed step?
>
>>
>> [Enhanced] Speed Step reduces the clock speed and the CPU core voltage..
>> clock
>> throttling just idles the CPU for a certain proportion of the time. If
>> you
>> want slow try forcing them both to the slowest speed.. Pentium-M 75Mhz
>> :)
>>
>>> > Any chance there is a new BIOS available for that system?
>>>
>>> A quick googling session brought up nothing.
>>
>> How about say, checking the makers web site?
>>
>
> I also did, nothing :-P
>
>>> > No.. If I try and look at a non existent battery slot it says 'device
>>> not
>>> > configured' so maybe it thinks you have no batteries for some strange
>>> > reason.
>>>
>>> I've installed klaptop and it shows battery as -1 and 'not charging'
>>> acpiconf -i[0-9] didn't do any good either :/
>>
>> Without ACPI support being able to read your battery status no userland
>> program will work.
>>
>> Your dmesg shows acpi_cmbat entries, ie
>> acpi_cmbat0:  on acpi0
>> acpi_cmbat1:  on acpi0
>>
>> which I think is pretty fundamental to being able to read battery status
>> ;)
>>
>
> Yesterday I googled a bit for my laptop name+linux and I found a post from
> a guy who had the same exact problem under Linux. He had /proc/acpi but no
> /proc/acpi/battery.
>
> I know battery status can be seen, as the laptop shipped with win XP home,
> which I promptly got rid of, but I installed a game there to see how many
> FPS I'd get playing with the laptop. So I still messed around with it
> (windows) for around 35 minutes, and could see the little battery icon
> discharging.
>
> If the acpi_cmbat0/1 shows up on dmesg, what could be wrong? Perhaps this
> ACPI implementation is a bit weird and I should send a copy of my asl to
> freebsd-acpi ?
>
>
>>
>> --
>> Daniel O'Connor software and network engineer
>> for Genesis Software - http://www.gsoft.com.au
>> "The nice thing about standards is that there
>> are so many of them to choose from."
>>   -- Andrew Tanenbaum
>> GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
>>
>
>
> ___
> freebsd-hackers@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Supported wireless PCI card?

2004-12-27 Thread security
Hi,

I need to get a wireless card for my lan gateway.. But I have few options
as what to buy in my country. I need a card that's supported (FreeBSD 5.3)
and is capable of being an access point..

Here is the list of the cards I could find:

- Belkin F5D7000
- SMC SMC2802W
- SiteCom WL-121

Not too many choices I know.. but these are the only available PCI
wireless cards I could find on the local stores.

I've heard SMC cards die a few months after heavy usage, but I don't know
if these are true claims.

Either way, I need one wireless card that can do AP.. which one should I
purchase?

Regards,

Hugo

___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Supported wireless PCI card?

2004-12-28 Thread security
Hey,

Thanks for the reply!

Should I go for the SiteCom one?

I only included it on the list because there are really few available PCI
wireless cards around here; I didn't see it listed on man wi. Belkin is
there (different model) and SMC is there (also a different model).

Can you grant me SiteCom's one will correctly be detected and be able to
work as a hostap on FreeBSD 5.3 ?

Best regards,

Hugo

> On Mon, 27 Dec 2004 17:59:09 -0600 (CST), [EMAIL PROTECTED]
> <[EMAIL PROTECTED]> wrote:
>> Hi,
>>
>> I need to get a wireless card for my lan gateway.. But I have few
>> options
>> as what to buy in my country. I need a card that's supported (FreeBSD
>> 5.3)
>> and is capable of being an access point..
>>
>> Here is the list of the cards I could find:
>>
>> - Belkin F5D7000
>> - SMC SMC2802W
>> - SiteCom WL-121 ( this one definately works )
>>
>> Not too many choices I know.. but these are the only available PCI
>> wireless cards I could find on the local stores.
>>
>> I've heard SMC cards die a few months after heavy usage, but I don't
>> know
>> if these are true claims.
>>
>> Either way, I need one wireless card that can do AP.. which one should I
>> purchase?
>>
>> Regards,
>>
>> Hugo
>>
>> ___
>> freebsd-hackers@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
>> To unsubscribe, send any mail to
>> "[EMAIL PROTECTED]"
>>
>


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Simple question about CPUs and processes

2005-01-31 Thread security
Hi list,

I'd like some insight on the following; Me and a friend were discussing
tech stuff and he said that, when using dual (or more) CPU systems, it is
the hardware itself (and alone) choosing which CPU will execute this or
that process.

But I think it is the OS kernel (FreeBSD in this case) and the SMP
implementation that decide this process should live in CPU0 or CPU1, ie
it's FreeBSD itself choosing on what CPU a process will reside in.

I'm by no means an experienced programmer, so I can't check this for
myself; just following logic and intuition, I think it makes sense it is
the OS keeping track of what process is in which CPU. Which approach is
right? Please add as many technical details as needed.



___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Simple question about CPUs and processes

2005-01-31 Thread security
Hey,

Thanks for the replies Robert and Ryan! That was insigthful.

I didn't know about the BP and the shutdown thingy, always learning :-)


>> On Mon, 31 Jan 2005 [EMAIL PROTECTED] wrote:
>>
>>> I'd like some insight on the following; Me and a friend were discussing
>>> tech stuff and he said that, when using dual (or more) CPU systems, it
>>> is the hardware itself (and alone) choosing which CPU will execute this
>>> or that process.
>>>
>>> But I think it is the OS kernel (FreeBSD in this case) and the SMP
>>> implementation that decide this process should live in CPU0 or CPU1, ie
>>> it's FreeBSD itself choosing on what CPU a process will reside in.
>>
>> This is basically the case on hardware supported by FreeBSD: the OS
>> scheduler decides where to place processes in order, ideally, to
>> maximize
>> performance.  The hardware will affect the performance, however, due to
>> some systems supporting non-uniform access to chunks of memory depending
>> on the CPU the code runs on, the contents of the cache, etc.  Often, the
>> job of the OS scheduler isn't simply to decide on fair or desirable run
>> orders based on priority, but where best to run the process/thread based
>> on where it's run recently, clusters of related CPUs, etc.  These issues
>> are becoming more important on i386-based systems with the advent of
>> hyper-threading, dual-core chips, amd64 NUMA, etc.  In the end, though,
>> the decision (good or bad) will be made by the OS.
>>
>> There is two exceptions regarding execution:
>>
>> - The hardware may be involved in deciding which CPU will receive
>>   interrupts -- for example, it may round-robin deliver timer interrupts
>>   to CPUs to attempt to help manage interrupt load.  This will cause an
>>   interrupt handler to run on the CPU selected by the hardware, at which
>>   point the OS can decide whether it wants to process the interrupt on
>>   that CPU, or forward it to another for processing.
>>
>> - There are some activities that must be performed on specific
>> processors.
>>   For example, the boot necessarily starts out on the boot processor
>> (BP).
>>   It turns out that many Intel or Intel-like systems get quite unhappy
>> if
>>   system shutdown is initiated from a non-boot processor, so FreeBSD
>> also
>>   arranges for the boot processor to issue the power down call into ACPI
>>   on platforms running ACPI.  The hardware isn't choosing where to run
>>   this code per se, but if you pick the wrong one the hardware won't
>> like
>>   you :-).
>>
>> Hope this is helpful,
>>
>> Robert N M Watson
>>
>>
>
>


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Idea about 'skeleton jail

2005-01-31 Thread security
Very nice idea!! This greatly improves jail management on FreeBSD. There
is a possibility for a minor drawback -- if one can change a system binary
in the host system, them all jails are compromised -- but assuming one
would need root access on the host to change the binary, he would have
power to change any jail anyway, so this is rather redundant.

Great feature here, when can we see this added to the system?


> On Mon, Jan 31, 2005 at 09:39:52PM +0800, Xin LI wrote:
>> Dear folks,
>>
>> The recent discussion about whether we should have the perl port to
>> touch/install /usr/bin/perl.  While I'm not interested in joining the
>> discussion, it inspired me that we can make use of the fact that ports
>> should not install things to "system" area and take advantage from it.
>> Finally these ideas results me to hack up something that might be
>> valuable to share with our users.
>>
>> What I am going to proposal is a concept that I call it "skeleton jail",
>> or "skeljail" for short.  A skel jail is something that shares most base
>> system binaries/libraries with the host, through read-only mount_null's.
>>
>> I have already done some experiments.  Basically we want the following
>> directories to be mount_null'ed:
>>  /bin, /sbin, /lib, /libexec, /usr/bin, /usr/sbin, /usr/include,
>>  /usr/lib, /usr/libdata, /usr/libexec, /usr/sbin, /usr/share
>>
>> To get most of what we want the jail to do, to work, this includes
>> ssh(1) and something else.  Optionally, we may want to mount_nullfs a
>> read-write /usr/ports/distfiles, a readonly /usr/ports, and something
>> like /usr/game to be mounted into the skeljail.
>>
>> In order to avoid having to do something magic instead of "make
>> installworld", I have a patchset against src/Makefile and
>> src/Makefile.incl to make the work a bit easier.  It adds a so-called
>> "installskel" target that creates a skeljail that contains necessary
>> directory hierarchy, and a set of /etc configuration files that will be
>> useful to start the jail.  The target must be used after a ``make
>> buildworld''
>>
>> The two major benefits for the skeljail are:
>> - Reduces the ordinary management cost because many base system files
>> are shared, hence you patch only once to get all jails patched.
>> - Reduces the space cost that needed for a newly created jail.  It used
>> to need about 110MB and with skeljail you will only need no more than
>> 3MB.
>>
>> Apparantly skeljail is not suitable for those who want:
>> - Run different FreeBSD releases on a single box.
>> - Run ports that does touch system area.
>>
>> But having it doesn't hurt the ability for you to run a full jail.
>>
>> I have some handcrafted shell scripts to implement skeljail by having
>> everything automatically mounted/dismounted.  However, I think it might
>> be better if we can have jail__skeljail="YES" switch in our jail
>> rc.d(8) startup script.  Please let me know if you are interested in the
>> idea and I'll post a patch for review if there's enough people that
>> wants this.
>
> Sold !  I just use the same setup you described in order to reduce disk
> usage and synchonize automatically jails with base system.  It would be
> indeed a great step forward for jail management IMHO.
>
> Why don't you simply call the target "installjail" instead of
> "installskel" ?
>
> --
> Jeremie Le Hen
> [EMAIL PROTECTED]
> ___
> freebsd-hackers@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


FreeBSD Security Advisory: FreeBSD-SA-01:20.egos

2001-02-02 Thread FreeBSD Security Advisories

=
FreeBSD-SA-01:09Security Advisory
FreeBSD, Inc.

Topic:  Local ego exploit

Category:   (l)users
Announced:  2001-02-03
Credits:AntiOffline.com, Disgraced.org, Deficiency.org
sil, deran9ed
Affects:All released (l)users of FreeBSD

Corrected:  (l)Users should seek psychotherapy shock therapy,
along with multiple doses of Thorazine chased by
2 shots of Liquid Draino for maximum effectivity

Vendor status:  Feelings still hurting while crying over spilled
milk.

FreeBSD only:   YES and some of their (l)users

I.   Background

FreeBSD (l)users became disgruntled about the original advisory
concerning the bloated remarks aimed towards their chopperating
sysdumb. This became an issue for some on Internet Relay Chat,
and caused them to ban others' connection since their ego's had
been hurt. (boo fsckin hoo)

II.  Problem Description

Penis envy seems to be the number one cause, and we are trying
to differentiate between the women who still have penises, that
are crying (game) foul.

For the hermies we suggest counseling, and estrogen treatment
followed by a visit to fellow hermie JP @ AntiOnline.com as well
as the switch hitting lesbo at http://www.happyhacker.org in an
effort to ass!ess their sexualities.

Egos can be strengthened by practicing humility and learning that
once in a while it is a good thing to actually have a good laugh,
although to those whose egos' that have been hurt we suggest that
you replace the batteries in your dildos and reinsert them into
your anal crevices.

III. Impact

None to those with a sense of humor, although those without them
will grow old and become miserable rootards, capable of placing
razor blades, crushed glass, and cyanide, in the bags of small
children who are out for Halloween Trick or Treating.

IV.  Workaround

Take a look at your own shortcomings before judging others.

V.   Solution

Socialize a bit more.

VI.  Shouts

Marshall Mathers




To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message



FreeBSD Ports Security Advisory: FreeBSD-SA-01:INSERT_NUMBER_HERE

2001-02-08 Thread FreeBSD Security Advisories

=
FreeBSD-SA-01:INSERT_NUMBER_HERESecurity Advisory
FreeBSD, Inc.

Topic:  FreeBSD on record to set most advisory releases for
year 2001

Category:   All
Announced:  2001-02-07
Credits:[EMAIL PROTECTED] http://www.antioffline.com
Vendor status:  Developers sleeping right now
FreeBSD only:   Yes

I.   Background

FreeBSD is the most robust chopperating sysdumb in the world and we
mean it. Our TCP stack will kick your TCP stacks hynee. Currently we
are releasing an advisory every 1.95 days which means we are bound
to surpass Microsoft.

II.  Problem Description

We normally do not assess security when creating the ports distribution
often allowing anyone to build any program we decide to run in the ports
directory. Recently we have noticed that we can no longer fool users
into thinking because we provide checksumming for the programs, that
they will be secure.

Unlinke other operating systems and the developers of them who audit
their ports, we feel it is not our problem if someone accessess your
system because we're too lazy to do things right the first time.


III. Impact

Obviously anyone can end up control your machine or worse.

IV.  Workaround

We will not be mentioning the ultra secure OpenBSD operating system
since we feel it is not our problem and does not help to promote a
better OS than our own.

V.   Solution

One of the following:

1) Rub a magic lamp and wait for the security genie to fix it.

2) Download NSA Linux so you too can have miniscule backdoors in it
   which you won't see.

3) Pray to the hacker god Kevin Mitnick for assistance.

4) Install a more secure O(penBSD)S

NOTE: FreeBSD developers are now red faced

VI. Shouts

Hard Lee Strange
Mike Hunt
Ivana Swallows
Mike Hock
Dick Famous
Kathie Lee Gifford



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message