[ANNOUNCEMENT] Updated: dash 0.5.12
The following packages have been upgraded in the Cygwin distribution: * dash 0.5.12 This Base category shell is used in all installations, so it has been available in test for a few weeks, is locally installed as my /bin/sh, used by most scripts, cron jobs, and cygport builds, getting frequent use with no issues so far. As no issues have been reported, the upgrade is being released as current stable. DASH is a POSIX-compliant implementation of /bin/sh that aims to be as small as possible. It does this without sacrificing speed where possible. In fact, it is significantly faster than bash (the GNU Bourne-Again SHell) for most tasks. For more information see the project home page: http://gondor.apana.org.au/~herbert/dash/ For changes since the previous release, see below; for complete details see: https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?h=v0.5.12&showmsg=1 2022-12-11 0.5.12 error: Remove USE_NORETURN ifdef eval: Always set exitstatus in evaltree Check eflag after redirection error Check nflag in evaltree instead of cmdloop Do not cache value of eflag in evaltree Prevent recursive PS4 expansion Test evalskip before flipping status for NNOT expand: Add ifsfree to expand to fix a logic error that causes a buffer over-read Always quote caret when using fnmatch Make glob(3) interruptible by SIGINT input: Clear unget on RESET Remove special case for unget EOF jobs: Always reset SIGINT/SIGQUIT handlers Block signals during tcsetpgrp Fix waitcmd busy loop Only block in waitcmd on first run man: fix formatting parser: Add VSBIT to ensure subtype is never zero Fix VSLENGTH parsing with trailing garbage Get rid of PEOA redir: Retry open64 on EINTR shell: Call CHECK_DECL on stat64 Disable glob again as it strips traing slashes Enable fnmatch/glob by default Fail if building --with-libedit and can't find libedit Group readdir64/dirent64 with open64 -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: [bug?] cygwin cannot mount smb shares beginning with underscore; "Invalid argument"
Thanks Brian and Corinna. Jeremy On Sun, Jan 22, 2023, 14:57 Brian Inglis via Cygwin wrote: > On 2023-01-22 12:21, Corinna Vinschen via Cygwin wrote: > > On Jan 21 11:30, Jeremy Hetzler via Cygwin wrote: > >> First, thank you for many years of Cygwin. > >> > >> I'm unable to get Cygwin to mount Windows SMB shares where the share > >> name begins with underscore. mount gives an error "Invalid argument". > > > > Yes, that's actually a bug. The mount code path in Cygwin checks > > the path for being a share (i.e. \\server\share\... syntax) > > > > The code, which, incidentally, has only been marginally changed since > > its inception pre-2000, is expecting that server name as well as share > > name both start with an alphanumeric ASCII char. > > > > That means, right now you can't mount servers and shares starting with > > any character other than [0-9a-zA-Z]. D'oh. > > > https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou > > looks like embedded not initial or final "-" hyphen/minus is also allowed > as > well as an initial "_" underscore like DNS names. > > > I pushed a patch and the Cygwin test release 3.5.0-0.138.g6338d2f24a60 > > is building while I'm replying. Should be up in an hour or so. > > -- > Take care. Thanks, Brian Inglis Calgary, Alberta, Canada > > La perfection est atteinte Perfection is achieved > non pas lorsqu'il n'y a plus rien à ajouter not when there is no more > to add > mais lorsqu'il n'y a plus rien à retirerbut when there is no more > to cut > -- Antoine de Saint-Exupéry > > -- > Problem reports: https://cygwin.com/problems.html > FAQ: https://cygwin.com/faq/ > Documentation:https://cygwin.com/docs.html > Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple > -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
[ANNOUNCEMENT] getent 2.18.90-5
The following packages have been uploaded to the Cygwin distribution: * getent-2.18.90-5 The getent command displays entries from databases supported by the Name Service Switch libraries, which are configured in /etc/nssâ witch.conf. If one or more key arguments are provided, then only the entries that match the supplied keys will be displayed. Otherwise, if no key is provided, all entries will be displayed (unless the database does not support enumeration). -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: [bug?] cygwin cannot mount smb shares beginning with underscore; "Invalid argument"
On 2023-01-22 12:21, Corinna Vinschen via Cygwin wrote: On Jan 21 11:30, Jeremy Hetzler via Cygwin wrote: First, thank you for many years of Cygwin. I'm unable to get Cygwin to mount Windows SMB shares where the share name begins with underscore. mount gives an error "Invalid argument". Yes, that's actually a bug. The mount code path in Cygwin checks the path for being a share (i.e. \\server\share\... syntax) The code, which, incidentally, has only been marginally changed since its inception pre-2000, is expecting that server name as well as share name both start with an alphanumeric ASCII char. That means, right now you can't mount servers and shares starting with any character other than [0-9a-zA-Z]. D'oh. https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou looks like embedded not initial or final "-" hyphen/minus is also allowed as well as an initial "_" underscore like DNS names. I pushed a patch and the Cygwin test release 3.5.0-0.138.g6338d2f24a60 is building while I'm replying. Should be up in an hour or so. -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirerbut when there is no more to cut -- Antoine de Saint-Exupéry -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: observation: masses of requests to LDAP
On Jan 22 15:32, Tobias Wendorff via Cygwin wrote: > Hi there, > > our IT department has informed me that masses of requests are being sent > from my computer to our two LDAP servers on port 389. After a detailed > investigation, the problem could be clearly traced back to "cygwin". > > Firewall logs show that about any tool, even base tools "sort" or "less", > initiates a request to port 389 on our LDAP servers. > > Sorry, I am _not_ going to release "cygcheck.out" to public, since it > contains sensitive information about the domain and its groups and > memberships. > > Even after reinstalling cygwin from another server, the problem still > appears. Could it be that this is part of an attack? No, it's working as designed. User info is fetched from AD via LDAP. If it's an overwhemling number of LDAP requests, I suspect you're often calling Cygwin processes from Windows directly, e. g., from CMD or powershell. The number of LDAP requests should be much reduced when working from a Cygwin shell, e.g., from bash in mintty due to user and group info cashing within a Cygwin process tree (Cygwin child processes get the cashed info from their Cygwin parent). If you want to reduce LDAP access even further, you can either go back to creating local /etc/passwd and /etc/group files and change /etc/nsswitch.conf accordingly(*), or you can start cygserver as a service in background(**). HTH, Corinna (*) https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch (**) https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-caching -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: observation: masses of requests to LDAP
On 2023-01-22 07:32, Tobias Wendorff via Cygwin wrote: our IT department has informed me that masses of requests are being sent from my computer to our two LDAP servers on port 389. After a detailed investigation, the problem could be clearly traced back to "cygwin". That is required for Cygwin to emulate POSIX permissions and ACLs: see security and domain info in: /usr/share/doc/cygwin-doc/html/cygwin-ug-net/cygwin-ug-net.html /usr/share/doc/cygwin-doc/cygwin-ug-net.pdf or the equivalant online docs: https://cygwin.com/cygwin-ug-net.html https://cygwin.com/cygwin-ug-net/cygwin-ug-net.html https://cygwin.com/cygwin-ug-net/cygwin-ug-net.pdf https://cygwin.com/faq.html Your IT folks could contact peers at Aachen, Bochum, Dresden, Esslingen, FAU who provide Cygwin mirrors, probably use it in courses, and have experience with it; see: https://cygwin.com/mirrors.html Firewall logs show that about any tool, even base tools "sort" or "less", initiates a request to port 389 on our LDAP servers. Each process needs access to your credentials, groups, and memberships, and pulls them for domain accounts on domain members. Sorry, I am _not_ going to release "cygcheck.out" to public, since it contains sensitive information about the domain and its groups and memberships. It is acceptable to anonymize or summarize information in cygcheck output. In this case, counts of ids, groups, and memberships might help. Even after reinstalling cygwin from another server, the problem still appears. Could it be that this is part of an attack? Definitely not, this is normal behaviour. Your first step should be to run cygserver to cache SAM and AD info on each system using cygwin on domain members. Your second step should be to review /etc/nsswitch.conf settings for searching and possibly set: db_enum: cache local primary builtin or maybe: db_enum: cache local primary alltrusted or if connecting from home maybe: db_enum: cache local primary domain.tld Check the mainling list archives for previous posts about domain settings. -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirerbut when there is no more to cut -- Antoine de Saint-Exupéry -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
Re: [bug?] cygwin cannot mount smb shares beginning with underscore; "Invalid argument"
On Jan 21 11:30, Jeremy Hetzler via Cygwin wrote: > All, > > First, thank you for many years of Cygwin. > > I'm unable to get Cygwin to mount Windows SMB shares where the share > name begins with underscore. mount gives an error "Invalid argument". Yes, that's actually a bug. The mount code path in Cygwin checks the path for being a share (i.e. \\server\share\... syntax) The code, which, incidentally, has only been marginally changed since its inception pre-2000, is expecting that server name as well as share name both start with an alphanumeric ASCII char. That means, right now you can't mount servers and shares starting with any character other than [0-9a-zA-Z]. D'oh. I pushed a patch and the Cygwin test release 3.5.0-0.138.g6338d2f24a60 is building while I'm replying. Should be up in an hour or so. Thanks, Corinna -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
[ANNOUNCEMENT] Updated: {,{mingw64-{x86_64,i686}}xz 5.4.1-1
The following packages have been uploaded to the Cygwin distribution: xz-5.4.1-1 liblzma5-5.4.1-1 liblzma-devel-5.4.1-1 mingw64-i686-xz-5.4.1-1 mingw64-x86_64-xz-5.4.1-1 XZ Utils is free general-purpose data compression software with high compression ratio. XZ Utils are the successor to LZMA Utils. This is an update to the latest upstream release. Cygwin Notes This is the first general (non-test) Cygwin release from the 5.4 branch. -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
[ANNOUNCEMENT] Updated: pkgconf 1.9.4-1
The following packages have been uploaded to the Cygwin distribution: libpkgconf-devel-1.9.4-1 libpkgconf4-1.9.4-1 pkg-config-1.9.4-1 pkgconf-1.9.4-1 pkgconf is a program which helps to configure compiler and linker flags for development frameworks. It is an alternative to pkg-config. This is an update to the latest upstream release. The cross-pkg-config commands have been switched to symlinks based on upstream advice. -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
observation: masses of requests to LDAP
Hi there, our IT department has informed me that masses of requests are being sent from my computer to our two LDAP servers on port 389. After a detailed investigation, the problem could be clearly traced back to "cygwin". Firewall logs show that about any tool, even base tools "sort" or "less", initiates a request to port 389 on our LDAP servers. Sorry, I am _not_ going to release "cygcheck.out" to public, since it contains sensitive information about the domain and its groups and memberships. Even after reinstalling cygwin from another server, the problem still appears. Could it be that this is part of an attack? Best regards, Tobias -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
[ANNOUNCEMENT] cygport 0.36.0-1
The following packages have been uploaded to the Cygwin distribution: * cygport-0.36.0-1 cygport is the standard method for building and maintaining packages for the Cygwin distribution. Highlights of this release: * Error on attempts to build python2 packages with the python2{,-disutils,-wheel} cygclasses, or with the python-wheel cygclass with a PYTHON_WHEEL_VERSIONS containing "2". * Warn about the upstream deprecation of python distutils (removal is planned for Python 3.12). * Document the implicit actions taken on files in $C. For those rare packages which use those actions, add CYGWIN_FILES to place files in $C, as an alternative to creating them with a ${PF}.cygwin.patch file. * Document that it's valid to set PN_debuginfo_OBSOLETES, even though PN_debuginfo is not explicitly listed in PKG_NAMES. Achim Gratz (1): bin/cygport.in: make system-wide defaults overrideable by user defaults Jon Turney (22): pkg: Allow package compression to be specified pkg: don't put local user:group info into package archives Try harder to preserve upstream timestamps in source package Add a test of arch-invariant SRC_URI and PATCH_URI logic Ignore errors in nested source-ing of cygport Add a test which runs 'cygport vars' Document actions taken on files in $C Provide an alternative mechanism to get files into $C Add a test of CYGWIN_FILES functionality Ensure example cygports in documentation contain LICENSE and HOMEPAGE pkg_upload: doc: Update (now redirected) URLs in uploading documentation python{,2,3}-distutils: Warn that distutils is deprecated pkg: doc: Drop mention of empty obsoletion packages pkg_info: Use absolute path to cygpath Fix python/wheel test and restore in CI Make 'inherit python2{,-disutils,-wheel}' an error Make PYTHON_WHEEL_VERSIONS containing "2" or "2.x" an error Update tests for python2 EOL Update copyrights to 2023 doc: Update VERSION and RELEASE constraints to align with reality Clarify error message suggesting AUTOCONF_VERSION Bump version to 0.36.0 -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation:https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple