[Q] disklabel magic number

[Ruslan Ermilov]

Hi!

Just out of curiosity, is there any hidden meaning of

#define DISKMAGIC   ((u_int32_t)0x82564557) /* The disk magic number */

Or is it just a random number?

-- 
Ruslan Ermilov  Sysadmin and DBA of the
r...@ucb.crimea.ua  United Commercial Bank
+380.652.247.647Simferopol, Ukraine

http://www.FreeBSD.org  The Power To Serve
http://www.oracle.com   Enabling The Information Age


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

security: what does OpenBSD have, that FreeBSD doesn't have...

[Andreas Klemm]

Hi !

Am currently discussing FreeBSD vs. OpenBSD in private e-mail.

What make OpenBSD so "secure" ? Or can this kind of security be
reproduced with FreeBSD ports ? I think of tools like:

bjorb   - secure TCP relay software, 
  http://www.hitachi-ms.co.jp/bjorb/ 
bro - Bro is a system for detecting Network Intruders in
  real-time by the guys that brought you tcpdump, libpcap,
  and flex
cfs - This is CFS, Matt Blaze's Cryptographic File System.
  It provides transparent encryption and decryption of 
  selected directory trees. It is implemented as a 
  user-level NFS server and thus does not require any 
  kernel modifications. Under FreeBSD, the mount command 
  for the CFS tree must include "-o port=3049,nfsv2".
fwtk- The TIS Firewall Toolkit is a set of programs and 
  configuration practices designed to facilitate the 
  building of network firewalls.
skip- IP-Level Cryptography, Secure every application with 
  one protocol. http://skip.incog.com
stunnel - The stunnel program is designed to work as SSL 
  encryption wrapper between remote client and
  local (inetd-startable) or remote server. 
  stunnel can be used to add SSL functionality 
  to  commonly used  inetd  daemons like  POP-2,  
  POP-3  and  IMAP servers without any changes in
  the programs' code.
tcp_wrapper - With this package you can monitor and filter
  incoming requests for the SYSTAT, FINGER, FTP,
  TELNET, RLOGIN, RSH, EXEC, TFTP, TALK, and other
  network services.
vscan   - McAfee's evaluation VirusScan for FreeBSD, provides
  immediate scanning of MS-DOS files hosted on FreeBSD
  Unix systems.

Could somebody please explain ?


-- 
Andreas Klemm   http://www.FreeBSD.ORG/~andreas
  http://www.freebsd.org/~fsmp/SMP/SMP.html
powered by Symmetric MultiProcessor FreeBSD


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

[Jeroen Ruigrok/Asmodai]

Hi Andreas =)

On 23-May-99 Andreas Klemm wrote:
> Am currently discussing FreeBSD vs. OpenBSD in private e-mail.
> 
> What make OpenBSD so "secure" ? Or can this kind of security be
> reproduced with FreeBSD ports ? I think of tools like:

Ye missed one of the most important things: auditing of the sourcecode.

The OpenBSD team does a lot wrt auditing of the complete sourcetree, but
then the question is: is this valid concern or is this pure paranoia.
OpenBSD does a lot of valid changes but borders (and sometimes crosses thta
border) on paranoia, wrt code.

A lot of the security tools can be get from the ports, but the true
security of a system lies in the eye of the admin. I have known admins whom
I would never trust mission critical security systems to.

HTH,

---
Jeroen Ruigrok van der Wervenasmodai(at)wxs.nl
The FreeBSD Programmer's Documentation Project 
Network/Security Specialist  
*BSD: Accept no limitations...


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

RE: IPv6 and -current?

[Jeroen Ruigrok/Asmodai]

On 23-May-99 Alex Zepeda wrote:
> Out of a perhaps morbid curiosity, I'm somewhat interested in setting up
> an IPv6 stack on my computer.  From what I can tell there are two well
> supported stacks.  Kame and Inria, and both support 2.2.8, Kame also
> supports 3.x.  Has anyone tried to port either to -current?  I tried
> playing around with the Kame release for 3.0, and it generated quite a
> few rejects...

I am currently merging KAME with CURRENT and it's a lovely adventure to
embark on...

One can best port 3.x to CURRENT since the internal changes from 2.2.x to
3.x are great and would merely duplicate work...

If yer interested Alex, we could work together on this and prepare a
CURRENT-KAME solution since I believe the time has come to start work in
CURRENT on IPv6. 

I already mailed Itojun-san about the status of the KAME/Inria merger and
hope to hear from him soon.

HTH,

---
Jeroen Ruigrok van der Wervenasmodai(at)wxs.nl
The FreeBSD Programmer's Documentation Project 
Network/Security Specialist  
*BSD: Accept no limitations...


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

[sthaug]

> The OpenBSD team does a lot wrt auditing of the complete sourcetree, but
> then the question is: is this valid concern or is this pure paranoia.
> OpenBSD does a lot of valid changes but borders (and sometimes crosses thta
> border) on paranoia, wrt code.

Given the number of postings to BUGTRAQ about array overflows and stack
smashing, I think it's relevant to ask whether it possible to be *too*
paranoid here. Personally, I think what the OpenBSD folks are doing is
very important.

> A lot of the security tools can be get from the ports, but the true
> security of a system lies in the eye of the admin. I have known admins whom
> I would never trust mission critical security systems to.

"The true security of a system" depends on the operating system itself, the
applications, *and* the admin. You can be a very good and security conscious
admin - but it won't help you much if the operating system is Windows 98.

Steinar Haug, Nethelp consulting, sth...@nethelp.no


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

[Jeroen Ruigrok/Asmodai]

On 23-May-99 sth...@nethelp.no wrote:
>> The OpenBSD team does a lot wrt auditing of the complete sourcetree, but
>> then the question is: is this valid concern or is this pure paranoia.
>> OpenBSD does a lot of valid changes but borders (and sometimes crosses
>> that border) on paranoia, wrt code.
> 
> Given the number of postings to BUGTRAQ about array overflows and stack
> smashing, I think it's relevant to ask whether it possible to be *too*
> paranoid here. Personally, I think what the OpenBSD folks are doing is
> very important.

Paranoia/security and freedom of use are opposites on the balance of use.
If you make so much security restrictions to a system it's bound to make it
less enjoyable where it concerns freedom.

>> A lot of the security tools can be get from the ports, but the true
>> security of a system lies in the eye of the admin. I have known admins
>> whom I would never trust mission critical security systems to.
> 
> "The true security of a system" depends on the operating system itself,
> the applications, *and* the admin. You can be a very good and security
> conscious admin - but it won't help you much if the operating system is
> Windows 98.

Correct there Steinaur, I left those other two out. But then the admin most
certainly knows that he has to replace that Win98 box with FreeBSD ;)

---
Jeroen Ruigrok van der Wervenasmodai(at)wxs.nl
The FreeBSD Programmer's Documentation Project 
Network/Security Specialist  
*BSD: Accept no limitations...


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

RE: FreeBSD/USENIX Ocean Cruise

[Keith Anderson]

Hi All

Has this idea sunk ?

Keith


On 15-May-99 Randall Hopper wrote:
> http://www.geekcruises.com/
> 
> What a cool idea.  
> 
> Maybe we'll see a FreeBSD/USENIX conference on-deck someday.
> 
> Randall
> 
> 
> 
> To Unsubscribe: send mail to majord...@freebsd.org
> with "unsubscribe freebsd-hackers" in the body of the message


"The box said 'Requires Windows 95, NT, or better,' so I installed FreeBSD."

**  The thing I like most about Windows 98 is...
**  You can download FreeBSD with it!

--
E-Mail: Keith Anderson 
Australia Power Control Systems Pty. Limited.
Date: 23-May-99
Time: 19:18:19
Satelite Service 64K to 2Meg
This message was sent by XFMail
--

What's the similarity between an air
conditioner and a computer? They both
stop working when you open windows.

--



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: Suggestion...

[Brian Somers]

> >> I plan on doing some work on it and the dgm driver.  They're almost 
> >> the same and should be merged.  They both violate style(9) in almost 
> >> every way too :-[
> >> 
> >> I know of only one person with an Xem card (dgm driver), but he's 
> >> promised to send me the specs by snail mail.  Once I get them, I'll 
> >> start the work.
> >> 
> >> Let's leave the `alpha' there for a little longer :-)
> > 
> > What are you planning on doing with it?  Other than DDB support I can't
> > imagine what could be *added* to the driver; it is one of those "just
> > works" things right now.
> 
> Why not merge the two into a *new* driver?  Once it's running at an 
> acceptable level, drop support for the two old drivers.  That way if
> something breaks, the current users still have the one that works.

Yes, this makes most sense.

> Vince.
> -- 
> ==
> Vince Vielhaber -- KA8CSH   email: v...@michvhf.com   flame-mail: /dev/null
># includeTEAM-OS2
> Online Campground Directoryhttp://www.camping-usa.com
>Online Giftshop Superstorehttp://www.cloudninegifts.com
> ==

-- 
Brian 
     
Don't _EVER_ lose your sense of humour !  




To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

UFS parameter survey: HELP WANTED!

[Poul-Henning Kamp]

--- Begin Message ---

I recently made a 15GB filesystem and ended up with almost 500
cylinder groups.  That is unlikely to be optimal.  I talked to Kirk
about the right parameters for UFS on modern disks some years back,
and he said that no more than maybe a hundred cylinder groups made
any sense.

I think the fact that disks have gotten 25 times larger since the
newfs paramters were last tweaked means that it is time to do so
again.  Unfortunately determining the parameters are not simple,
so I would like to solicit help from as many as possible in
determining if we should retune the newfs defaults.

What I'm looking for is hard and soft data on the difference it
makes for various sets of parameters, for various workloads and
programs.  So if you have time and facilities, lend me a hand.

Basically, we can only sensibly compare data from the same hardware
with the same workload, otherwise there are too many things to
compare.  Not all things can be measured precisely, but try to
provide as much data as you can, and as good data as you can,
ie: don't change controllers move partitions change BIOS settings
without noting that you did so.

The newfs parameters I would like to map out are:

-a -b -c -e -f -i -m -t -u

I'm generally interested in all impacts of this, but in particular
if you can measure one or more of these specific parameters:

read performance
write performance
create performance
fsck time
space wastage
"other"

I have no particular wishes for what program/application is used
to excercise the system, but I would always prefer real-world over
synthetic benchmarks.  If somebody could measure news-server and
web-server performance for instance it would be great.

If anybody feels like making a structured benchmark script which
just takes a device name as arg and runs some standardized tests
that would be great too!

Please report all results to  using this
form.  Put the information instead of the "___", but leave the line
number intact please.  You don't need to return the lines starting
with #

I will post news and updates about this project on:

http://phk.freebsd.dk/ufs

If there is sufficient interest we will make a mailing list too.

Thank you for your participation!

Poul-Henning

*BEGIN UFSTUNE FORM*

# Your email address.  This will be used only to catalogue and
# request further details from you.  It will not be published
# or distributed.
# Example:
#   1 p...@freebsd.org
1 ___

# Identity of the system you used.  This is just to keep all measurements
# straight.  It is used with your email as a unique index.  This
# should identify one particular combination of hardware, excluding
# the disk you had the filesystems on.  If you have the disk on
# different controllers in the same system, that will count as two
# systems.  Use names/numbers/whatever helps you keep track of things.
# Please use the same thing for all measurements made on the same
# system.
# Example:
#   2 rover using NCR controller
2 ___

# Identity of the disk/device you had the filesystem on, please
# cut&paste the <...> piece from /var/run/dmesg.boot:
# Example:
#   3 
3 ___

# Describe the nature of the test in one-line form.
# Example:
#   4 Time to fsck filesystem with all four 3.2 CD's loaded
4 ___

# Describe the nature and conditions of the test in 
# sufficient detail that somebody else can repeat it.
# Example:
#   5 Filesystem is newfs'ed and mounted.  The four CDs from the FreeBSD
#   5 3.2 release were copied in using "find . -print | cpio -dump XXX"
#   5 where XXX is mountpoint/cd[1234].  Filesystem unmounted and run
#   5 /usr/bin/time -l fsck /dev/rsd0c
5 ___

# You must repeat the rest of the form for each experiment.

# document the newfs commandline used.  Include a -s option here.
# Example:
#   6 newfs -f 2048 -s 3072
6 ___

# document any mount options, kernel features or softupdates.
# Example:
#   7 softupdates
7 ___

# note any other detailes pertaining to this experiment (multiline)
# Example:
#   8 BIOS set to 5 MHz/narrow
8 ___

# document the result of the experiment, for instance the output from
# time(1) or similar (multiline)
# Example:
#   9 2.91 real 0.03 user 0.05 sys
9 ___

*END UFSTUNE FORM*

--
Poul-Henning Kamp FreeBSD coreteam member
p...@freebsd.org   "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!
--- End Message ---

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

[Kris Kennaway]

On Sun, 23 May 1999 sth...@nethelp.no wrote:

> > The OpenBSD team does a lot wrt auditing of the complete sourcetree, but
> > then the question is: is this valid concern or is this pure paranoia.
> > OpenBSD does a lot of valid changes but borders (and sometimes crosses thta
> > border) on paranoia, wrt code.
> 
> Given the number of postings to BUGTRAQ about array overflows and stack
> smashing, I think it's relevant to ask whether it possible to be *too*
> paranoid here. Personally, I think what the OpenBSD folks are doing is
> very important.

One of my plans is to merge all of these changes into our tree (along with all
the other minor changes/manpage corrections, etc).

Longer term, I'd like to work on porting some of their kernel code like
randomized sin_port selection and TCP initial sequence numbering, probably
hidden behind sysctl knobs (defaulting to off to keep people happy).

Kris

-
"That suit's sharper than a page of Oscar Wilde witticisms that's been
rolled up into a point, sprinkled with lemon juice and jabbed into
someone's eye"
"Wow, that's sharp!" - Ace Rimmer and the Cat, _Red Dwarf_



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

[johnathan.f.mee...@bankerstrust.com: FreeBSD Configuration]

[Wolfram Schneider]

- Forwarded message from johnathan.f.mee...@bankerstrust.com -
From: johnathan.f.mee...@bankerstrust.com
To: w...@freebsd.org
Message-Id: <8525677a.003d42ac...@nysmtp4000.svc.btco.com>
Date: Sun, 23 May 1999 12:08:50 +0100
Subject: FreeBSD Configuration


Hi,

I currently run FreeBSD 3.1 at home, and recently recommended it to a few
friends at work as my preference for a non-commercial flavour of UNIX. This
opened up an avenue for development that I would like to volunteer to make
happen - configuration tools. Being Windows people, they found FreeBSD
intimidating - configuring a sound card, adding a new device, or setting up
userPPP were things they were used to having done for them. These people
now run Linux, as they fell into the "UNIX is too difficult for me" trap,
and liked the comfort of easy configuration. Your documentation is great,
but some people need to be started more slowly. Even after following your
documentation, a user may not think of creating a symlink /dev/modem to
their device node (which is needed, for example, by Minicom).

I like the idea of easy configuration as an /option/ to those who would
like it - particularly newcomers to UNIX. With this in mind, I searched my
install set for such utilities but couldn't find them, nor see them on the
wanted projects list. Would you be interested in such tools being developed
for FreeBSD, and could I organise such a development team? I don't want to
duplicate somebody else's work, so please point me in the right direction
if such work has been undertaken.

Your comments on this subject wold be appreciated, but please reply to <
jmee...@easynet.co.uk >, as the return address for this mail is my
workplace.

Regards,

Johnathan Meehan
jmee...@easynet.co.uk
- End forwarded message -
-- 
Wolfram Schneider  http://wolfram.schneider.org


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: Logging "promiscuous mode disabled"

[Sheldon Hearn]

On Sat, 22 May 1999 17:24:32 +0200, Jeroen Ruigrok/Asmodai wrote:

> Would make intrusion detection easier, etc etc =)

Hi Jeroen,

I don't know about that. I'd hate for anyone to think that this
"improves security".

I see it as a convenience option, and wanted feedback on any negative
side-effects that folks more familiar with the code might spot.

Ciao,
Sheldon.


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

[Dan Moschuk]

| One of my plans is to merge all of these changes into our tree (along with all
| the other minor changes/manpage corrections, etc).
| 
| Longer term, I'd like to work on porting some of their kernel code like
| randomized sin_port selection and TCP initial sequence numbering, probably
| hidden behind sysctl knobs (defaulting to off to keep people happy).

I think that would be a great idea.  I'd be willing spare a few hours on a 
weekend to help out with this.

-Dan


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: [ALERT] a.out support is broken in 3.2-STABLE and 4.0-CURRENT

[Adrian Filipi-Martin]

On Sat, 22 May 1999, David O'Brien wrote:

> > And would it be possible to MFC this stuff
> 
> After it is tested in -CURRENT first.
> 
> > and add an 3.2-ERRATA entry...
> 
> Why?  The compat22 distribution on the FTP site has ld.so in it, as wil
> the CDROM.  Did you install 3.2 on the very first day?

Just about.  Did a make release for local internal use.  Is there a
slightly newer CVS tag other than RELENG_3_2_0_RELEASE that gets us all we
need to build completely functional COMPATxx's?  

I only care becuase of the few binaries I have that are not open
source, binary only and not  ELF.

thanks,

Adrian
--
[ adr...@ubergeeks.com -- Ubergeeks Consulting -- http://www.ubergeeks.com/ ]



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

converting Multia riser card into a generic NCR810

[Wilko Bulte]

People interested in converting a riser card of a DEC Multia into a generic
NCR810 card please refer to:

http://www.tcja.nl/~wilko/ncr_hack.html

|   / o / /  _   Arnhem, The Netherlands- Powered by FreeBSD -
|/|/ / / /( (_) BulteWWW  : http://www.tcja.nl  http://www.freebsd.org


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

[Warner Losh]

In message 
 Kris 
Kennaway writes:
: One of my plans is to merge all of these changes into our tree
: (along with all the other minor changes/manpage corrections, etc).

Which ones are currently missing?

Also, beware.  Most of the patches will not come into the FreeBSD tree 
w/o some tweaking to pass the bruce filter.

Warner


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: [ALERT] a.out support is broken in 3.2-STABLE and 4.0-CURRENT

[David O'Brien]

> > Why?  The compat22 distribution on the FTP site has ld.so in it, as wil
> > the CDROM.  Did you install 3.2 on the very first day?
> 
>   Just about.  Did a make release for local internal use.  Is there a
> slightly newer CVS tag other than RELENG_3_2_0_RELEASE that gets us all we
> need to build completely functional COMPATxx's?  

I'm not sure if the RELENG_3_2_0_RELEASE was slid forward for my fix.

Since doing so would allow someone to build what was on the 3.2-RELEASE
CDROM, maybe we should ask Jordan if the tag shouldn't be slid forward
for src/lib/compat/compat22/Makefile.

-- 
-- David(obr...@nuxi.com  -or-  obr...@freebsd.org)


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

[Q] LKM linking

[Constantine Shkolnyy]

Hi All,

1. Is this possible to produce an LKM device driver that would export
functions to another LKM driver?

2. If the 1. is possible, will it be possible to load the "another LKM
driver" without loading the "exporting" driver?

Which references would you suggest me to look into? Maybe some known
combination of existing drivers?

Thank you,
Stan



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: freebsd-hackers-digest V4 #466

[B1oL0g1c]

unsubscribe freebsd-hackers


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

getopt.c in gnu/*/*

[Warner Losh]

Is there any reason to have getopt.c replicated in so many different
programs:
cvs, grep, gzip, patch, ptx, sort, tar
and maybe a few others that I missed...

Warner


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

[Kris Kennaway]

On Sun, 23 May 1999, Warner Losh wrote:

> In message 
>  
> Kris Kennaway writes:
> : One of my plans is to merge all of these changes into our tree
> : (along with all the other minor changes/manpage corrections, etc).
> 
> Which ones are currently missing?

I'm not sure..I've been wandering through the openbsd source tree and merging
useful diffs from binaries, but I haven't been too organised about it so far,
and haven't encountered much in the way of "important" fixes. I'm sure there
are some, though.

> Also, beware.  Most of the patches will not come into the FreeBSD tree 
> w/o some tweaking to pass the bruce filter.

I'm expecting that, but I'm willing to clean up what I bring across.

Kris

> 
> Warner
> 

-
"That suit's sharper than a page of Oscar Wilde witticisms that's been
rolled up into a point, sprinkled with lemon juice and jabbed into
someone's eye"
"Wow, that's sharp!" - Ace Rimmer and the Cat, _Red Dwarf_



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

RE: IPv6 and -current?

[Alex Zepeda]

On Sun, 23 May 1999, Jeroen Ruigrok/Asmodai wrote:

> I already mailed Itojun-san about the status of the KAME/Inria merger and
> hope to hear from him soon.

Well, I finally got the userland shit working!

This would make an awesome port, it compiles out of the box, and works
with bpf to do ipv6 in ipv4 tunneling :)

- alex



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Re: [johnathan.f.mee...@bankerstrust.com: FreeBSD Configuration]

[Studded]

Wolfram Schneider wrote:
 
> I like the idea of easy configuration as an /option/ to those who would
> like it - particularly newcomers to UNIX. With this in mind, I searched my
> install set for such utilities but couldn't find them, nor see them on the
> wanted projects list. 

Your best bet would be to take a look at http://www.webmin.com/. What
you're talking about would best be included as a module for their
framework. For what it's worth, I think it's an excellent idea.

Doug
-- 
***   Chief Operations Officer, DALnet IRC network  ***

Nominated for quote of the year is the statement made by Representative
Dick Armey (Texas), who when asked if he were in the President's place,
would he resign, responded:

"If I were in the President's place I would not get a chance to resign.
I would be lying in a pool of my own blood hearing Mrs. Armey standing
over me saying, 'How do I reload this damn thing?'"


To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message