[ANNOUNCEMENT] Updated: dash 0.5.12

2023-01-22 Thread Cygwin dash Co-Maintainer via Cygwin-announce via Cygwin
The following packages have been upgraded in the Cygwin distribution:

* dash  0.5.12

This Base category shell is used in all installations, so it has been
available in test for a few weeks, is locally installed as my /bin/sh,
used by most scripts, cron jobs, and cygport builds, getting frequent
use with no issues so far.
As no issues have been reported, the upgrade is being released as
current stable.

DASH is a POSIX-compliant implementation of /bin/sh that aims to be
as small as possible. It does this without sacrificing speed where
possible. In fact, it is significantly faster than bash (the GNU
Bourne-Again SHell) for most tasks.

For more information see the project home page:

http://gondor.apana.org.au/~herbert/dash/

For changes since the previous release, see below;
for complete details see:

https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?h=v0.5.12&showmsg=1


2022-12-11  0.5.12

error:
Remove USE_NORETURN ifdef

eval:
Always set exitstatus in evaltree
Check eflag after redirection error
Check nflag in evaltree instead of cmdloop
Do not cache value of eflag in evaltree
Prevent recursive PS4 expansion
Test evalskip before flipping status for NNOT

expand:
Add ifsfree to expand to fix a logic error that causes a buffer 
over-read
Always quote caret when using fnmatch
Make glob(3) interruptible by SIGINT

input:
Clear unget on RESET
Remove special case for unget EOF

jobs:
Always reset SIGINT/SIGQUIT handlers
Block signals during tcsetpgrp
Fix waitcmd busy loop
Only block in waitcmd on first run

man:
fix formatting

parser:
Add VSBIT to ensure subtype is never zero
Fix VSLENGTH parsing with trailing garbage
Get rid of PEOA

redir:
Retry open64 on EINTR

shell:
Call CHECK_DECL on stat64
Disable glob again as it strips traing slashes
Enable fnmatch/glob by default
Fail if building --with-libedit and can't find libedit
Group readdir64/dirent64 with open64


-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Re: [bug?] cygwin cannot mount smb shares beginning with underscore; "Invalid argument"

2023-01-22 Thread Jeremy Hetzler via Cygwin
Thanks Brian and Corinna.

Jeremy

On Sun, Jan 22, 2023, 14:57 Brian Inglis via Cygwin 
wrote:

> On 2023-01-22 12:21, Corinna Vinschen via Cygwin wrote:
> > On Jan 21 11:30, Jeremy Hetzler via Cygwin wrote:
> >> First, thank you for many years of Cygwin.
> >>
> >> I'm unable to get Cygwin to mount Windows SMB shares where the share
> >> name begins with underscore. mount gives an error "Invalid argument".
> >
> > Yes, that's actually a bug.  The mount code path in Cygwin checks
> > the path for being a share (i.e. \\server\share\... syntax)
> >
> > The code, which, incidentally, has only been marginally changed since
> > its inception pre-2000, is expecting that server name as well as share
> > name both start with an alphanumeric ASCII char.
> >
> > That means, right now you can't mount servers and shares starting with
> > any character other than [0-9a-zA-Z].  D'oh.
>
>
> https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou
>
> looks like embedded not initial or final "-" hyphen/minus is also allowed
> as
> well as an initial "_" underscore like DNS names.
>
> > I pushed a patch and the Cygwin test release 3.5.0-0.138.g6338d2f24a60
> > is building while I'm replying.  Should be up in an hour or so.
>
> --
> Take care. Thanks, Brian Inglis Calgary, Alberta, Canada
>
> La perfection est atteinte  Perfection is achieved
> non pas lorsqu'il n'y a plus rien à ajouter not when there is no more
> to add
> mais lorsqu'il n'y a plus rien à retirerbut when there is no more
> to cut
> -- Antoine de Saint-Exupéry
>
> --
> Problem reports:  https://cygwin.com/problems.html
> FAQ:  https://cygwin.com/faq/
> Documentation:https://cygwin.com/docs.html
> Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
>

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


[ANNOUNCEMENT] getent 2.18.90-5

2023-01-22 Thread Corinna Vinschen via Cygwin
The following packages have been uploaded to the Cygwin distribution:

* getent-2.18.90-5

The getent command displays entries from databases supported by the
Name Service Switch libraries, which are configured in /etc/nss‐
witch.conf.  If one or more key arguments are provided, then only the
entries that match the supplied keys will be displayed.  Otherwise, if
no key is provided, all entries will be displayed (unless the database
does not support enumeration).

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Re: [bug?] cygwin cannot mount smb shares beginning with underscore; "Invalid argument"

2023-01-22 Thread Brian Inglis via Cygwin

On 2023-01-22 12:21, Corinna Vinschen via Cygwin wrote:

On Jan 21 11:30, Jeremy Hetzler via Cygwin wrote:

First, thank you for many years of Cygwin.

I'm unable to get Cygwin to mount Windows SMB shares where the share
name begins with underscore. mount gives an error "Invalid argument".


Yes, that's actually a bug.  The mount code path in Cygwin checks
the path for being a share (i.e. \\server\share\... syntax)

The code, which, incidentally, has only been marginally changed since
its inception pre-2000, is expecting that server name as well as share
name both start with an alphanumeric ASCII char.

That means, right now you can't mount servers and shares starting with
any character other than [0-9a-zA-Z].  D'oh.


https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou

looks like embedded not initial or final "-" hyphen/minus is also allowed as 
well as an initial "_" underscore like DNS names.



I pushed a patch and the Cygwin test release 3.5.0-0.138.g6338d2f24a60
is building while I'm replying.  Should be up in an hour or so.


--
Take care. Thanks, Brian Inglis Calgary, Alberta, Canada

La perfection est atteinte  Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add
mais lorsqu'il n'y a plus rien à retirerbut when there is no more to cut
-- Antoine de Saint-Exupéry

--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Re: observation: masses of requests to LDAP

2023-01-22 Thread Corinna Vinschen via Cygwin
On Jan 22 15:32, Tobias Wendorff via Cygwin wrote:
> Hi there,
> 
> our IT department has informed me that masses of requests are being sent
> from my computer to our two LDAP servers on port 389. After a detailed
> investigation, the problem could be clearly traced back to "cygwin".
> 
> Firewall logs show that about any tool, even base tools "sort" or "less",
> initiates a request to port 389 on our LDAP servers.
> 
> Sorry, I am _not_ going to release "cygcheck.out" to public, since it
> contains sensitive information about the domain and its groups and
> memberships.
> 
> Even after reinstalling cygwin from another server, the problem still
> appears. Could it be that this is part of an attack?

No, it's working as designed.  User info is fetched from AD via LDAP.
If it's an overwhemling number of LDAP requests, I suspect you're
often calling Cygwin processes from Windows directly, e. g., from
CMD or powershell.  The number of LDAP requests should be much
reduced when working from a Cygwin shell, e.g., from bash in mintty
due to user and group info cashing within a Cygwin process tree
(Cygwin child processes get the cashed info from their Cygwin parent).

If you want to reduce LDAP access even further, you can either
go back to creating local /etc/passwd and /etc/group files and
change /etc/nsswitch.conf accordingly(*), or you can start cygserver
as a service in background(**).


HTH,
Corinna

(*)  https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-nsswitch
(**) https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-mapping-caching

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Re: observation: masses of requests to LDAP

2023-01-22 Thread Brian Inglis via Cygwin

On 2023-01-22 07:32, Tobias Wendorff via Cygwin wrote:
our IT department has informed me that masses of requests are being sent from my 
computer to our two LDAP servers on port 389. After a detailed investigation, 
the problem could be clearly traced back to "cygwin".


That is required for Cygwin to emulate POSIX permissions and ACLs: see security 
and domain info in:


/usr/share/doc/cygwin-doc/html/cygwin-ug-net/cygwin-ug-net.html
/usr/share/doc/cygwin-doc/cygwin-ug-net.pdf

or the equivalant online docs:

https://cygwin.com/cygwin-ug-net.html
https://cygwin.com/cygwin-ug-net/cygwin-ug-net.html
https://cygwin.com/cygwin-ug-net/cygwin-ug-net.pdf
https://cygwin.com/faq.html

Your IT folks could contact peers at Aachen, Bochum, Dresden, Esslingen, FAU who 
provide Cygwin mirrors, probably use it in courses, and have experience with it; 
see:

https://cygwin.com/mirrors.html

Firewall logs show that about any tool, even base tools "sort" or "less", 
initiates a request to port 389 on our LDAP servers.


Each process needs access to your credentials, groups, and memberships, and 
pulls them for domain accounts on domain members.


Sorry, I am _not_ going to release "cygcheck.out" to public, since it contains 
sensitive information about the domain and its groups and memberships.


It is acceptable to anonymize or summarize information in cygcheck output.
In this case, counts of ids, groups, and memberships might help.

Even after reinstalling cygwin from another server, the problem still appears. 
Could it be that this is part of an attack?


Definitely not, this is normal behaviour.

Your first step should be to run cygserver to cache SAM and AD info on each 
system using cygwin on domain members.


Your second step should be to review /etc/nsswitch.conf settings for searching 
and possibly set:


db_enum: cache local primary builtin

or maybe:

db_enum: cache local primary alltrusted

or if connecting from home maybe:

db_enum: cache local primary domain.tld

Check the mainling list archives for previous posts about domain settings.

--
Take care. Thanks, Brian Inglis Calgary, Alberta, Canada

La perfection est atteinte  Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add
mais lorsqu'il n'y a plus rien à retirerbut when there is no more to cut
-- Antoine de Saint-Exupéry

--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


Re: [bug?] cygwin cannot mount smb shares beginning with underscore; "Invalid argument"

2023-01-22 Thread Corinna Vinschen via Cygwin
On Jan 21 11:30, Jeremy Hetzler via Cygwin wrote:
> All,
> 
> First, thank you for many years of Cygwin.
> 
> I'm unable to get Cygwin to mount Windows SMB shares where the share
> name begins with underscore. mount gives an error "Invalid argument".

Yes, that's actually a bug.  The mount code path in Cygwin checks
the path for being a share (i.e. \\server\share\... syntax)

The code, which, incidentally, has only been marginally changed since
its inception pre-2000, is expecting that server name as well as share
name both start with an alphanumeric ASCII char.

That means, right now you can't mount servers and shares starting with
any character other than [0-9a-zA-Z].  D'oh.

I pushed a patch and the Cygwin test release 3.5.0-0.138.g6338d2f24a60
is building while I'm replying.  Should be up in an hour or so.


Thanks,
Corinna

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


[ANNOUNCEMENT] Updated: {,{mingw64-{x86_64,i686}}xz 5.4.1-1

2023-01-22 Thread Achim Gratz via Cygwin


The following packages have been uploaded to the Cygwin distribution:

 xz-5.4.1-1
 liblzma5-5.4.1-1
 liblzma-devel-5.4.1-1

 mingw64-i686-xz-5.4.1-1
 mingw64-x86_64-xz-5.4.1-1

XZ Utils is free general-purpose data compression software with high 
compression ratio. XZ Utils are the successor to LZMA Utils.

This is an update to the latest upstream release.

Cygwin Notes


This is the first general (non-test) Cygwin release from the 5.4 branch.

-- 
  *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there. It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


[ANNOUNCEMENT] Updated: pkgconf 1.9.4-1

2023-01-22 Thread Achim Gratz via Cygwin


The following packages have been uploaded to the Cygwin distribution:

 libpkgconf-devel-1.9.4-1
 libpkgconf4-1.9.4-1
 pkg-config-1.9.4-1
 pkgconf-1.9.4-1

pkgconf is a program which helps to configure compiler and linker flags 
for development frameworks.  It is an alternative to pkg-config.

This is an update to the latest upstream release.  The cross-pkg-config 
commands have been switched to symlinks based on upstream advice.

-- 
  *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there. It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

-- 
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


observation: masses of requests to LDAP

2023-01-22 Thread Tobias Wendorff via Cygwin

Hi there,

our IT department has informed me that masses of requests are being sent 
from my computer to our two LDAP servers on port 389. After a detailed 
investigation, the problem could be clearly traced back to "cygwin".


Firewall logs show that about any tool, even base tools "sort" or 
"less", initiates a request to port 389 on our LDAP servers.


Sorry, I am _not_ going to release "cygcheck.out" to public, since it 
contains sensitive information about the domain and its groups and 
memberships.


Even after reinstalling cygwin from another server, the problem still 
appears. Could it be that this is part of an attack?


Best regards,
Tobias

--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple


[ANNOUNCEMENT] cygport 0.36.0-1

2023-01-22 Thread Jon Turney via Cygwin



The following packages have been uploaded to the Cygwin distribution:

* cygport-0.36.0-1

cygport is the standard method for building and maintaining
packages for the Cygwin distribution.

Highlights of this release:

* Error on attempts to build python2 packages with the 
python2{,-disutils,-wheel} cygclasses, or with the python-wheel cygclass 
with a PYTHON_WHEEL_VERSIONS containing "2".


* Warn about the upstream deprecation of python distutils (removal is 
planned for Python 3.12).


* Document the implicit actions taken on files in $C.  For those rare 
packages which use those actions, add CYGWIN_FILES to place files in $C, 
as an alternative to creating them with a ${PF}.cygwin.patch file.


* Document that it's valid to set PN_debuginfo_OBSOLETES, even though 
PN_debuginfo is not explicitly listed in PKG_NAMES.



Achim Gratz (1):
  bin/cygport.in: make system-wide defaults overrideable by user defaults

Jon Turney (22):
  pkg: Allow package compression to be specified
  pkg: don't put local user:group info into package archives
  Try harder to preserve upstream timestamps in source package
  Add a test of arch-invariant SRC_URI and PATCH_URI logic
  Ignore errors in nested source-ing of cygport
  Add a test which runs 'cygport vars'
  Document actions taken on files in $C
  Provide an alternative mechanism to get files into $C
  Add a test of CYGWIN_FILES functionality
  Ensure example cygports in documentation contain LICENSE and HOMEPAGE
  pkg_upload: doc: Update (now redirected) URLs in uploading documentation
  python{,2,3}-distutils: Warn that distutils is deprecated
  pkg: doc: Drop mention of empty obsoletion packages
  pkg_info: Use absolute path to cygpath
  Fix python/wheel test and restore in CI
  Make 'inherit python2{,-disutils,-wheel}' an error
  Make PYTHON_WHEEL_VERSIONS containing "2" or "2.x" an error
  Update tests for python2 EOL
  Update copyrights to 2023
  doc: Update VERSION and RELEASE constraints to align with reality
  Clarify error message suggesting AUTOCONF_VERSION
  Bump version to 0.36.0


--
Problem reports:  https://cygwin.com/problems.html
FAQ:  https://cygwin.com/faq/
Documentation:https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple