Re: Need Access Control List(ACL) or any kind of substitute for it

2003-08-02 Thread Jez Hancock
On Sat, Aug 02, 2003 at 08:56:05PM -0700, dt wrote:
> I recently was able to find a web-hosting company that runs FreeBSD. The
> service, I signed up for, allows me to have a SSH access including
> series of other services, such as CGI-BIN, Tomcat. On the same machine
> that my domain is hosted, there are many other accounts; it's not a
> virtual hosting, where I have a root access to my machine. 
> 
> On the first day, I discovered that I had to make my files publicly
> available so that Apache could pick up my scripts and run them, which I
> definitely thought it was not good idea. The only security measures this
> company took was that you could not 'ls' up to other people's account,
> but I know that if you know the directory structure you can open
> anyone's script and look into the content which could reveal a password
> and the logic of their code. On top of that, locate-database has all the
> directory structure, which is available to anybody. 


One file permission security model for shared hosting is as follows:

Every untrusted user (is there any other!) is added to a common 
group - say 'users'.  Importantly, the user that the webserver runs as
- say 'www' - is NOT a member of the 'users' group.

The hosting company would then make sure that group permissions on 
the home directory of each user - say /home/bob for user 'bob' - are 
set to 705 recursively.  

This means:
- user bob has read write and execute perms on /home/bob as you would
  expect
- anyone in the 'users' group - ie all untrusted users - do NOT 
  have read, write or execute perms on /home/bob and so cannot get 
  a listing of any files under /home/bob
- the 'www' user however does have read and execute access to files 
  in bob's public html directory, say /home/bob/public_html and so
  the webserver can serve up those files as needed.
  
This is a very over-simplified description - there are often log
directories or ftp directories or mail directories whose permissions are
set to accommodate those services.

CGI scripting also complicates matters. With the above model
all a malicious (or otherwise) user would have to do to access files
in other home directories would be to create a script to display
all 'interesting' files in other user's home directories.

Something as simple as:



for example in PHP would be a start to working out where juicy
configuration files that might contain user/password pairs live.

If there are no extra httpd side precautions in place, the above
security model is pretty useless, since the www user has read/execute
access to all /home/user directories and so can execute an operation
like the find command above with impunity.

Precautions against this type of action commonly include running CGI 
scripts under the effective user id (EUID) of the owner of the script
and in a similar way with PHP, checking that the owner/group of the
target files match that of the script being run (using open_basedir and
safe_mode amongst other PHP config options).  

Some things to check then:

try running the pwd command - if you see something like 
/home/user/foo/bar then you're not chrooted.

Also try running the id command.  See what group(s) you're in and then
try 'ls -ld ~' to see what the file permissions are on your home
directory.  It might be the case your provider is implementing something
along the lines of the above.

-- 
Jez

http://www.munk.nu/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Need Access Control List(ACL) or any kind of substitute for it

2003-08-02 Thread parv
in message <[EMAIL PROTECTED]>,
wrote dt thusly...
>
> I recently was able to find a web-hosting company that runs
> FreeBSD ...  it's not a virtual hosting, where I have a root
> access to my machine. 

So you are on a shared server (as opposed to single/dedicated
one)...


> The only security measures this company took was that you could
> not 'ls' up to other people's account

Could it be that you are in a jail and/or is the default umask, thus
default permissions, rather restrictive (say 077, than open 022)?


> I know that if you know the directory structure you can open
> anyone's script and look into the content which could reveal
> a password and the logic of their code.

Who would store a password in the code if security is of any
concern?

Otherwise, what is wrong w/ otherwise public files to be available
to your fellow hostmates?

BTW (re-)read chmod(1) if you have not already.


> On top of that, locate-database has all the directory structure,
> which is available to anybody. 

According to locate(1) (4.8-Release), it does not create entries for
files that are publicly unreadable.


> So, a couple of things I tried to do, which weren't successful. I took
> away permission from others by chmod 740.


(OP was unable to change membership wrt 'nobody' group.)
> The only solution I see is ask their admin to put nobody user to
> my group.  Or to have some sort of ACL, so I can explicitly grant
> permission to nobody user. 

It seems from your actions that you think you have powers to change
groups willy-nilly.  And i do not think that the hosting company
would do add nobody user to your group.  Why? See above.


I think there is something missing from my response; somebody will
fill in that i am sure.


  - Parv

-- 
A programmer, budding Unix system administrator, and amateur photographer
seeks employment:  http://www103.pair.com/parv/work/

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Creative Soundblaster Live and FreeBSD 5.1-Release

2003-08-02 Thread Travis Troyer
I have a Creative Soundblaster Live card, and I have been searching for 
information about using it with FreeBSD, but I haven't been able to come up 
with much.  I was hoping somebody has had some luck recently with getting 
front and rear output with this card, or has at least been able to find a way 
to adjust the bass and treble (by default they seem extremely high).

Any information would be appreciated.

--Travis Troyer

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Need Access Control List(ACL) or any kind of substitute for it

2003-08-02 Thread dt
Hello, 

I recently was able to find a web-hosting company that runs FreeBSD. The
service, I signed up for, allows me to have a SSH access including
series of other services, such as CGI-BIN, Tomcat. On the same machine
that my domain is hosted, there are many other accounts; it's not a
virtual hosting, where I have a root access to my machine. 

On the first day, I discovered that I had to make my files publicly
available so that Apache could pick up my scripts and run them, which I
definitely thought it was not good idea. The only security measures this
company took was that you could not 'ls' up to other people's account,
but I know that if you know the directory structure you can open
anyone's script and look into the content which could reveal a password
and the logic of their code. On top of that, locate-database has all the
directory structure, which is available to anybody. 

So, a couple of things I tried to do, which weren't successful. I took
away permission from others by chmod 740. And also, to grant apache
only, I tried to chown to nobody group (apache is running under this
group) which I could not do because I was not part of nobody group. I
tried to put nobody user under my group, I was not able to. The only
solution I see is ask their admin to put nobody user to my group. Or to
have some sort of ACL, so I can explicitly grant permission to nobody
user. 


Please help. Is there any tool that allows me to overcome this obstacle?
I will not reveal any information about this company, for obvious
reasons, except that they're running: "FreeBSD 4.7-RELEASE".
Eventually, I am planning to tell them to fix their security problem,
but I need to make a research before I do this, which I'm doing by
asking your expertise. 


Thank you,

DT.



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Printing Trouble

2003-08-02 Thread K Anderson


Duane A. Damiano wrote:
I'm a Linux person trying out FreeBSD for the first time.

I just installed 5.1.  Most things work pretty well so far, but I can't
get the print system to work right.  I can print plain text files, but I
can't print web pages or .ps files.
My printer is a HP DeskJet 694C.  I have a file called
/usr/local/libexec/if-ps, which is an exact copy of the one listed
(called ifhp) in the "FreeBSD Handbook."  The only difference is that
I replaced "djet500" with "cdj670".  (I tried other choices also.)
When I try to print a web page or a .ps file, nothing happens.  I know
that lpr is seeing my if-ps file because when I put "echo test" into it,
"test" gets printed.
Here's what I see in /var/log/lpd-errs:

Error: /invalidfileaccess in --.outputpage--
Operand stack:
   1   true
Execution stack:
   %interp_exit   .runexec2   --nostringval--   --nostringval--   
--nostringval--   2   %stopped_push   --nostringval--   --nostringval--   
--nostringval--   false   1   %stopped_push   1   3   %oparray_pop   1   3   
%oparray_pop   1   3   %oparray_pop   1   3   %oparray_pop   .runexec2   
--nostringval--   --nostringval--   --nostringval--   2   %stopped_push   
--nostringval--   0   3   %oparray_pop   --nostringval--   --nostringval--   
--nostringval--   --nostringval--
Dictionary stack:
   --dict:1059/1123(ro)(G)--   --dict:0/20(G)--   --dict:170/200(L)--
Current allocation mode is local
Last OS error: 45
GNU Ghostscript 7.06: Unrecoverable error, exit code 1
Aug  2 14:40:18 swing lpd[606]: HP694C: job could not be printed 
(cfA030swing.dad.org)

What's going on here?  Is ghostscript not working?  (GhostView seems
to work okay - except it won't print.)
I see that CUPS is on my system.  But, I don't see any documentation
for it.  On my Linux system, these two statements in my /etc/rc.local
take care of everything:
/usr/sbin/cupsd
/usr/sbin/lpadmin -p DeskJet -E -v parallel:/dev/lp0 -m deskjet.ppd
But, there's no lpadmin on my FreeBSD system.

If someone could give me a simple CUPS solution, that would be fine
too.
Duane

-
Duane A. Damiano[EMAIL PROTECTED]
P. O. Box 22429 Phone: 410-685-6221
Baltimore MD 21203-4429  U.S.A.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Check to see if cups is up and running.
Check to see if you have cups-lpr, cups, and cups-base installed. If not 
install the missing items.
You'll need to replace freebsd's lp* binaries with cups's binaries (I 
think it tells you to do that too, or something like that)
browse to localhost:631 and do administrative tasks of checking the 
printers to ensure they are listed. If not then do the install printer 
process. Oh, in your /etc/make.conf do a man on that and put in the 
option that tells BSD to not install/compile the lp* and thus accidently 
replacing them with cups's.

That should get you going, hopefully.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Freebsd 5.1 3c589-TP pcmcia issues.

2003-08-02 Thread iLLfated
Lo all,

  I've been trying to install 5.1 on my 486/75 28M no
cdrom drive lappy unsuccessfully now for about 2 days
(total time). Apparently debian, openbsd and freebsd
4.8 all find it and can play nice tho 5.1 can't seem
to manage it. I recorded all the resource settings
used in the operational freebsd 4.8 install and used
these identical settings in my 5.1 install however
they don't work. I've been trying to modify
device.hints on the install floppy to feed the kernel
the proper resource settings to get the nic going,
however I've found the lack of documentation on this
file to be somewhat disturbing. I read everything
concering pcmcia and nics that I've been able to get
my hands on related to my install (handbook/docs that
came with the release/google/etc). According to the
hardware.txt it says that the ep(4) driver is the
appropriate driver for my card, although when making
google searches for hints.ep nothing turns up and
apparently its been left outta the options of the
install floppy. Heres my current devices.hints file
I've tried almost every possible combination
disabling/enabling and resources under the sun. The
best I can seem to manage is

  ep0 at port 0x240 iomem 0xd irq 9 on isa0
  ep0: eeprom failed to come ready.
  ep0: ep_alloc() failed! (6)
  device_probe_and_attach: ep0 attach returned 6

I've tried to enable/disable pcic0 and 1 both either
neither, I've tried to enable/disable polling, I've
tried to change maddr remove maddr use similar maddr
with pcic and the driver and use different maddr,
change irq and port from the driver itself, I've even
reseated the card in both slots multiple times (to
make sure the referenced "wedged" isn't occuring)

Heres the last incarnation of my devices.hints file
(hopefully theres no blaring typos cause i'm massively
tired and aggrivated from having to restart the
machine 1000 times like a windows box just to test it)


devices.hints:

set hint.fdc.0.at="isa"
set hint.fdc.0.port="0x3F0"
set hint.fdc.0.irq="6"
set hint.fdc.0.drq="2"
set hint.fd.0.at="fdc0"
set hint.fd.0.drive="0"
set hint.fd.1.at="fdc0"
set hint.fd.1.drive="1"
set hint.ata.0.at="isa"
set hint.ata.0.port="0x1F0"
set hint.ata.0.irq="14"
set hint.ata.1.at="isa"
set hint.ata.1.port="0x170"
set hint.ata.1.irq="15"
set hint.adv.0.at="isa"
set hint.adv.0.disabled="1"
set hint.bt.0.at="isa"
set hint.bt.0.disabled="1"
set hint.aha.0.at="isa"
set hint.aha.0.disabled="1"
set hint.aic.0.at="isa"
set hint.aic.0.disabled="1"
set hint.atkbdc.0.at="isa"
set hint.atkbdc.0.port="0x060"
set hint.atkbd.0.at="atkbdc"
set hint.atkbd.0.irq="1"
set hint.atkbd.0.flags="0x1"
set hint.psm.0.at="atkbdc"
set hint.psm.0.irq="12"
set hint.vga.0.at="isa"
set hint.sc.0.at="isa"
set hint.sc.0.flags="0x100"
set hint.vt.0.at="isa"
set hint.vt.0.disabled="1"
set hint.apm.0.disabled="1"
set hint.apm.0.flags="0x20"
set hint.pcic.0.at="isa"
set hint.pcic.0.port="0x3e0"
set hint.pcic.0.maddr="0xd"
set hint.pcic.1.at="isa"
set hint.pcic.1.irq="11"
set hint.pcic.1.port="0x3e2"
set hint.pcic.1.maddr="0xd4000"
set hint.pcic.1.disable="1"
set hint.sio.0.at="isa"
set hint.sio.0.port="0x3F8"
set hint.sio.0.flags="0x10"
set hint.sio.0.irq="4"
set hint.sio.1.at="isa"
set hint.sio.1.port="0x2F8"
set hint.sio.1.irq="3"
set hint.sio.2.at="isa"
set hint.sio.2.disabled="1"
set hint.sio.2.port="0x3E8"
set hint.sio.2.irq="5"
set hint.sio.3.at="isa"
set hint.sio.3.disabled="1"
set hint.sio.3.port="0x2E8"
set hint.sio.3.irq="9"
set hint.ppc.0.at="isa"
set hint.ppc.0.irq="7"
set hint.cs.0.at="isa"
set hint.ep.0.at="isa"
set hint.ep.0.port="0x240"
set hint.ep.0.irq="9"
set hint.ep.0.maddr="0xd"
set hint.ed.0.at="isa"
set hint.ed.0.disabled="1"
set hint.ed.0.port="0x280"
set hint.ed.0.irq="10"
set hint.ed.0.maddr="0xd8000"
set hint.cs.0.disabled="1"
set hint.cs.0.port="0x300"
set hint.sn.0.at="isa"
set hint.sn.0.disabled="1"
set hint.sn.0.port="0x300"
set hint.sn.0.irq="10"
set hint.ie.0.at="isa"
set hint.ie.0.disabled="1"
set hint.ie.0.port="0x300"
set hint.ie.0.irq="10"
set hint.ie.0.maddr="0xd"
set hint.fe.0.at="isa"
set hint.fe.0.disabled="1"
set hint.fe.0.port="0x300"
set hint.le.0.at="isa"
set hint.le.0.disabled="1"
set hint.le.0.port="0x300"
set hint.le.0.irq="5"
set hint.le.0.maddr="0xd"
set hint.lnc.0.at="isa"
set hint.lnc.0.disabled="1"
set hint.lnc.0.port="0x280"
set hint.lnc.0.irq="10"
set hint.lnc.0.drq="0"

please note that ep wasn't in the file to begin with
tho it is in hardware.txt. I've been unable to find
any documentation on legal device.hints settings
(other then their format which is available in a man
page), anyone know how to fix this other then running
freebsd 4.8? 

  Thanks in advance 
  Steve 

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questio

Re: Newbie problems with X11, Xf86

2003-08-02 Thread Tim Kellers

On Saturday 02 August 2003 10:44 pm, Benjamin Gonzalez wrote:
> In my .cshrc file under set path = there is a /usr/X11R6/bin.
> # PATH=$PATH:/usr/X11R6/bin XFree86 -xf86config /root/XF86Config* (when I
> run this it tells me "bad : modifier in $ (/) - I do not know what that
> means.
>
> I still keep getting the following error:
>
> Unable to locate/open config file
> Error from X86HandleConfigFile()
> Fatal server error:
> No screens found
>
> X connectionto :0:0 broken (explicit kill or server shutdown).
>

run xf86config and follow the prompts, it should get you started.

Tim Kellers
CPE/NJIT

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to debug fatal trap? running on vinum

2003-08-02 Thread Greg 'groggy' Lehey
On Friday,  1 August 2003 at 12:41:15 -0700, Richard Johannesson wrote:
> Had FreeBSD5.1 on a box that had a physical hard-drive failure last
> week.  So, this time setup the box using mirrored 200GB drives using
> vinum sub-disks. Setup multiple vinum partitions to help limit any
> file system corruption. One of those partitions was /dev/vinum/ports
> which points to /usr/ports.
>
> Once the machine was setup with a minimal install, then did a
> restore from the image made before the original hdd failure. I've
> never done that before, so there is a possibility that I might have
> restored a file that I should not have.
>
> Got ports updated using cvsup. Then did a make reinstall of
> /usr/ports/x11/kde3. The last thing I saw before fatal trap & reboot was the
> following:
>
> ---
> ===> Extracting for libxml2-2.5.8_1
>>> Checksum OK for gnome/libxml2-2.5.8.tar.bz2.
>
> Fatal trap 12: page fault while in kernel mode
>
> ---
>
> Any tips on how to debug this or if there is an article that
> discusses how to do this I would be very grateful for any help. The
> only way I know how to fix is to rebuild everything - including
> setting up the vinum volume up again. Takes too long, hoping for a
> better solution. Clearly a newbie.

Sure, it's all in the man page, or at
http://www.vinumvm.org/vinum/how-to-debug.html.  Replacing a failed
disk is at http://www.vinumvm.org/vinum/replacing-drive.html.

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers


pgp0.pgp
Description: PGP signature


Re: Newbie problems with X11, Xf86

2003-08-02 Thread Benjamin Gonzalez
In my .cshrc file under set path = there is a /usr/X11R6/bin.
# PATH=$PATH:/usr/X11R6/bin XFree86 -xf86config /root/XF86Config* (when I
run this it tells me "bad : modifier in $ (/) - I do not know what that
means.

I still keep getting the following error:

Unable to locate/open config file
Error from X86HandleConfigFile()
Fatal server error:
No screens found

X connectionto :0:0 broken (explicit kill or server shutdown).

Any help is appreciated, I am still trying to learn but have found it
difficult to understand what some of the error messages are.

Thanks

Ben


On 7/31/03 1:21 PM, "Joshua Oreman" <[EMAIL PROTECTED]> wrote:

> On Thu, Jul 31, 2003 at 01:06:11PM -0400 or thereabouts, Benjamin Gonzalez
> wrote:
>> I installed X-Free86 - 4.2.0_1,1 from my  Free BSD Cd using sysinstall and
>> cannot get it to run.  I see the directory X11R6 under /usr, I run
>> 'xf86config' and it says 'command not found'.  I typed 'XFree86 -configure'
>> and it also says 'command not found'.  I've looked for a file called
>> /etc/X11/XFree86Config and it says 'No such file or directory'.
>> 
>> I went back through sysinstall and reinstalled the X11 packages including
>> XFree86-4.2.0 and still I get the above results.
>> 
>> Could someone please explain what I am doing wrong, this is becoming
>> frustrating.
> 
> You didn't set your $PATH. Put this in your ~/.cshrc:
> setenv PATH $PATH:/usr/X11R6/bin
> (or if you're using bash, put this in your ~/.bashrc:
> export PATH=$PATH:/usr/X11R6/bin
> ).
> 
> As for the config file, try this (as root):
> # cd /root
> # PATH=$PATH:/usr/X11R6/bin XFree86 -configure
> 
> The screen should go black for a few seconds and the monitor
> will click some. When it's all over you should have a file called
> XF86Config.new (or some similar name). Try to start X with it
> (as root for this test):
> # PATH=$PATH:/usr/X11R6/bin XFree86 -xf86config /root/XF86Config*
> 
> You should see a big gray screen with an X cursor in the middle.
> (That's the mouse). Try moving the mouse to make sure the mouse works.
> Try switching back to the text console (Ctrl+Alt+F1) and type as root:
> # PATH=$PATH:/usr/X11R6/bin DISPLAY=:0 xterm &
> 
> Switch back to X (Ctrl+Alt+F9) and there should be a "window" with
> a terminal emulator in it. (It's just a box, no title bar or anything;
> there isn't a window manager running. Yet.) Try typing some stuff in to
> make sure the keyboard works.
> 
> Now kill the X server with Ctrl+Alt+Backspace.
> 
> If anything didn't work, mail the mailing list about it.
> 
> Otherwise, you're free to install a WM (I recomment /usr/ports/x11-wm/icewm,
> you may prefer /usr/ports/x11/kde3). Edit your ~/.xinitrc file and put
> this line in if you installed iceWM (replacing any other lines):
> exec icewm
> or this one if you installed KDE (again replacing any other lines):
> exec startkde
> 
> Have fun!
> 
> -- Josh
> 
>> 
>> Thanks.
>> 
>> ___
>> [EMAIL PROTECTED] mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
> 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


hostname on LAN with WAN

2003-08-02 Thread Constantine
Hello!

I am using my FreeBSD 4.8 in a local network, I do not have any routable 
IPs assigned to the box, so what am I supposed to use as a hostname for 
that FreeBSD box?

I have an internet connection (DSL modem with NAT), and I am using the 
sendmail on the box, and the problem I have, is that during the boot 
time I need to wait 2 minutes for the DNS-timeout.
I wanted to ask, how the hostname is meant to be set in my case.

Cheers,
Constantine.
maillog:
Aug  1 14:52:57 cnst sm-msp-queue[101]: My unqualified host name (cnst) 
unknown; sleeping for retry
Aug  1 14:53:57 cnst sm-msp-queue[101]: unable to qualify my own domain 
name (cnst) -- using short name
Aug  1 14:53:57 cnst sm-msp-queue[103]: starting daemon (8.12.8p1): 
[EMAIL PROTECTED]:30:00
Aug  2 14:41:22 cnst sm-mta[99]: My unqualified host name (cnst) 
unknown; sleeping for retry
Aug  2 14:42:22 cnst sm-mta[99]: unable to qualify my own domain name 
(cnst) -- using short name
Aug  2 14:42:22 cnst sm-mta[100]: starting daemon (8.12.8p1): 
[EMAIL PROTECTED]:30:00

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: HDDs dividing rules

2003-08-02 Thread Greg 'groggy' Lehey
On Saturday,  2 August 2003 at 13:06:52 +0200, Peter Rosa wrote:
> Hi all,
>
> please, could you explain for those of us, who are new to Unix,
> are there some rules for partitioning of HDDs in accordance to
> security needs ? I know, I can set nosuid+noexec on whole
> partition (slice ?), I can mount something as read-only...
> It's everything fine, but what exactly should we do ?

I'm appending a section from "The Complete FreeBSD" which goes into
some detail about this question.

Greg
--
When replying to this message, please copy the original recipients.
If you don't, I may ignore the reply or reply to the original recipients.
For more information, see http://www.lemis.com/questions.html
See complete headers for address and phone numbers
Defining file systems
_

The next step is to tell the installation program what to put in  your  FreeBSD
partition.   First,  we'll  look  at  the  simple case of installing FreeBSD by
itself.  On page 75 we'll look at what differences there  are  when  installing
alongside another operating system on the same disk.

When you select Label, you get the  screen shown in Figure 5-8.

   [Omitting PostScript image images/disk-label-0-a.ps 4i  ]
Figure 5-8: Label editor menu


What partitions?


In  this  example, you have 20 GB of space to divide up.  How should you do it?
You don't have to worry about this issue, since sysinstall can do it  for  you,
but  we'll  see  below  why this might not be the best choice.  In this section
we'll consider how UNIX file systems have changed over  the  years,  and  we'll
look at the issues in file system layout nowadays.

When  UNIX  was  young,  disks  were tiny.  At the time of the third edition of
UNIX, in 1972, the root file system was on a Digital RF-11, a fixed  head  disk
with 512 kB.  The system was growing, and it was no longer possible to keep the
entire system on this disk, so a second file system became essential.   It  was
mounted on a Digital RK03 with  2  MB  of  storage.   To  quote  from  a  paper
published in the Communications of the ACM in July 1974:

   In  our  installation,  for  example,  the  root directory resides on the
   fixed-head disk, and the large disk drive, which contains  user's  files,
   is mounted by the system initialization program...

As  time  went  on,  UNIX  got bigger, but so did the disks.  By the early 80s,
disks were large enough to put / and /usr on the same disk, and it  would  have
been  possible  to  merge  /  and  /usr,  but  they  didn't,  mainly because of
reliability concerns.  Since that time, an additional file  system,  /var,  has
come  into common use for frequently changed data, and just recently sysinstall
has been changed to create a  /tmp  file  system  by  default.   This  is  what
sysinstall does if you ask it to partition automatically:

[Omitting PostScript image images/disk-label-default.1.ps 4i  ]
Figure 5-9: Default file system sizes

It's  relatively  simple  to  estimate  the  size  of the root file system, and
sysinstall's value of 128 MB is reasonable.  But what about /var and /tmp?   Is
256  MB  too much or too little?  In fact, both file systems put together would
be lost in the 18.7 GB of /usr file system.  Why are  things  still  this  way?
Let's look at the advantages and disadvantages:

o If  you write to a file system and the system crashes before all the data can
  be written to disk, the data integrity of that file system  can  be  severely
  compromised.  For performance reasons, the system doesn't write everything to
  disk immediately, so there's quite a reasonable chance of this happening.

o If you have a crash and lose the root file system, recovery can be difficult.

o If a file system fills up, it can cause lots of trouble.  Most messages about
  file systems on the FreeBSD-questions mailing list are complaining about file
  systems  filling  up.   If you have a large number of small file systems, the
  chances are higher that one will fill up while space remains on another.

o On the other hand, some file systems are more important than others.  If  the
  /var  file  system  fills up (due to overly active logging, for example), you
  may not worry too much.  If your root file system fills up,  you  could  have
  serious problems.

o In  single-user  mode,  only  the  root  file  system  is  mounted.  With the
  classical layout, this means that the only programs you can run are those  in
  /bin  and /sbin.  To run other programs, you must first mount the file system
  on which they are located.

o It's  nice  to keep your personal files separate from the system files.  That
  way you can upgrade a system much more easily.

o It's very difficult to estimate in  advance  the  size  needs  of  some  file
  systems.   For  example, on some systems /var can be very small, maybe only 2
  or 3 MB.  It's hardly worth making a separate file system for that much data.
  On the other hand, other systems,

Re: HDDs dividing rules

2003-08-02 Thread Jerry McAllister
Hi,

> Hi all,
> 
> please, could you explain for those of us, who are new to Unix,
> are there some rules for partitioning of HDDs in accordance to
> security needs ? I know, I can set nosuid+noexec on whole
> partition (slice ?), I can mount something as read-only... 
> It's everything fine, but what exactly should we do ?

There are no specific rules on how you divide up your disk.
It really depends on how you will use the system.   What you
need for a system only you will log in to is vastly different
from what is needed for a web site server.  And that is completely
different from what you need for a system where you provide
accounts for users to log in.  Plus partition sizes will depend
some on how much disk you have available.

As for security settings and procedures, the same is pretty much true.

But for each there are some minimal good ideas.

Just a note first:   You seem to express a little confusion about
partition vs slice.   That is a frequent problem because the
Microsoft does not follow the UNIX terminology.   FreeBSD UNIX 
has slices that are subdivided in to partitions.   MS uses the 
word partition to mean the same thing a UNIX slice then comes up
with an 'extended partition' scheme for other divisions.

Each disk can be divided in to as many as 4 main slices.   Each
disk can have a Master Boot Record (MBR) that manages the boot process -
mainly allowing you to select which slice to boot from.  Each slice
can have a boot block and be considered bootable.  The MBR selects
a slice and transfers control to the boot block (also called a boot
loader) on the slice to continue booting.

Each UNIX slice can be divided in to as many as 8 partitions.
These subdivisions called partitions are what get mounted as
such things as '/' '/tmp' '/home' etc.

If you have two disks, each can have 4 slices and each slice can
officially have 8 partitions.

One additional note, though.   By convention and expected in some 
programs, some of the partitons have special uses.   The '/' file 
system must be an 'a' partition on a bootable slice (although the 'a' 
partition doesn't have to be mounted as '/' if the slice is not the 
one being booted),  the 'b' partition on any slice is used for swap, 
the 'c' partition is used to identify the whole slice and is otherwise 
unused, the 'd' partition used to have a designated use, which now 
seems to be defunct, so the 'd' partition is unused and finally 
the 'e' partition is often used for '/tmp', but doesn't have to be.

So, although it is possible to divide the slice in to 8 partitions,
some of the labels ('b', 'c', 'd') are not really available making
an effective 5 partitions and on a bootable slice 'a' needs to
be root.

When you partition your FreeBSD disk slice[s] you need to make 
a root file system that is large enough to hold everything 
needed for bringing up the system before other stuff is mounted
and running.   There is a lot of dissagreement on how much is
right because it depends a lot on what you include and what you
farm out to other file systems (partitions).   You can probably
make a root system with as little as 50 - 100 MBytes if you put
most everything somewhere else.  I am a little less hard core and
make one about 350 MBytes and only put /var, /usr/local and /usr/ports
somewhere else.   But, convenience rates a little higher than super
maximum performance for most of my machines.

Secondly, you need some swap space.   The convention is that it
should be 2 to 2-1/2 times the size of your ram, but people are
rethinking a little with the much bigger memory sizes we have nowdays.

Third, you need some tmp space.   Some people put that inside some
other partition.   I make a /tmp file system for it with size depending 
on types of use, running from 200 MBytes to around 500 MBytes.  At
least you do NOT want this to be in the roo partition because it can
suddenly grow and cause trouble with root.  Plus, it must be 
writable by any process that uses the machine.

Then you need some place for other things that grow such as /var.
user home directories, /usr/local and maybe /usr/ports and maybe
even /usr/src.

People treat these in different ways - sometimes making separate
partitions (File systems) for them or putting them in some big
file system and making links.The way I do it is to make
partitions for '/', '/swap', '/tmp' and  a very large '/home'.   
Generally '/home' takes up all the rest of the space.
Some people make that very large partition be the /usr file system
and put their user home diretories in there (typically in /usr/home).
Some even make a '/user' file system in addition to '/usr' but
that is entirely tooo messy for me.

I put all user home directories, plus /var, /usr.local, /usr/src 
and /usr/ports in to it with soft links to them.   That way they 
can grow up to the size of /home for a short while if needed and
it gives me time to notice and whack down whatever is growing too
fast for some reason (whack down can mean fix

How do I get /dev entries for removeable media to appear wheninserted?

2003-08-02 Thread Darren Pilgrim
I have a zip drive (afd0).  At boot, the only afd0* device is afd0, which makes
it rather difficult to mount MSDOS formatted disks.  I can get the device
entries to appear by issuing `mount /dev/afd0 /mnt`, but it's annoying to have
to do this.  Is there a way to cause this update automatically, or to force the
existance of device nodes for slices and partitions?

This is on 5.0-R.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Mount NetBSD partition

2003-08-02 Thread Benjamin Walkenhorst
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Saturday, 2. August 2003 22:35, Daan Goedkoop wrote:
> Hello,
>
> On my IDE disk, I have two disk labels, one of FreeBSD and one from NetBSD.
> Now that I want to change to NetBSD, I would like to copy my data from the
> NetBSD /home partition to FreeBSD.
>
> However, only a device /dev/ad1s3 exists, with which I can only mount the /
> of NetBSD. Does anyone know what I am doing wrong?

Hello,

Shouldn't the NetBSD-partitions show up like ad1s3a, s3b, ... ? 
Typically, sXa is /, sXb is swap, c and d are reserved, from there on it's up 
to you (e to p can be mounted wherever you want) - e is /usr, typically, but 
not necessarily. I am unsure, however, if corresponding device nodes have to 
exist, and which partition is identified by what letter from FreeBSD. FreeBSD 
ordinarily names the partitions by their order on the disk.
NetBSD also has a - to my taste - excentric behaviour in naming partitions, 
much more untidy than with FreeBSD. NetBSD's / is always /dev/wdXa, no 
matter, at what position NetBSD's disklabel is on the disk (wd0a would be 
ad0s2a on FreeBSD). This shouldn't impact reading NetBSD's partitions from 
FreeBSD, though. 
Are they device nodes for each partition in your disklabel under FreeBSD? 

Hey, wait a moment, if you want to switch to NetBSD, why are you trying to 
move stuff from NetBSD's /home to your FreeBSD-disklabel (/home as well, I 
suppose)? Shouldn't it be the other way round? Or am I getting something 
wrong? 

In case you are really desperate, Linux reads disklabels from both Free- and 
NetBSD just fine; unless you use UFS2 with FreeBSD, that is (if you do, 
prepare for lots of funny read-errors...). It's just a little tricky to 
figure out what device-nodes to use for BSD's partitions, they typically show 
up like logical partitions in extended DOS partitions (/dev/hda5 and upwards)

Hope it helps, 

kind regards,

Benjamin

- -- 
Benjamin Walkenhorst
eMail: [EMAIL PROTECTED]
homepage: http://www.krylon.de
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Public Key available at http://www.krylon.de

iD8DBQE/LE5EoYumWdMvhMQRAjqVAJ9FK/BbjQjgyjC0Hd3Ud16P8UwCWQCgiS2r
Sa3y9g6tAryPAxJnYGHGG0M=
=uhLD
-END PGP SIGNATURE-
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Static CVSup still possible?

2003-08-02 Thread Erik Trulsson
On Sat, Aug 02, 2003 at 05:47:56PM -0400, Francisco Reyes wrote:
> I used to be able to install CVsup and just copy the cvsup program to
> other machines. I just tried it today and on the target machine (an old
> 4.5 machine) it complained about some missing libraries.
> 
> Is it still possible to build CVsup in such a way that one could just copy
> the cvsup file to another machine?

Yes. Doing:

cd /usr/ports/net/cvsup
make -DSTATIC install

should result in a statically linked cvsup binary being installed that
can later be copied elsewhere.

> 
> How about making a package or a binary distribution?
> 
> I tried "make package", and got a package, but on the target machine it
> then needed a number of other ports. At the time the machine did not have
> a port directory and no cvsup. :-(
> 
> I ended up making a gzipped tar file of one of my machines ports directory
> and am now building cvsup from sources (also had to manually copy
> /usr/share/mk/bsd.port* files)



-- 

Erik Trulsson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buggy optimization levels...

2003-08-02 Thread Erik Trulsson
On Sat, Aug 02, 2003 at 03:52:25PM -0400, Chuck Swiger wrote:
> Erik Trulsson wrote:
> [ ... ]
> >A somewhat contrived example that behaves differently when compiled
> >with -O3 or when compiled with -O2 or lower optimization follows:
> >
> >static int f(int a)
> >{
> >return a/0;
> >}
> >int main(void)
> >{
> >int x;
> >x = f(5);
> >return 0;
> >}
> 
> Contrived, but interesting and useful nonetheless; thanks for the response.

Real world examples tend to be a bit more complicated and difficult to
detect, but this was the best I could come up with on short notice, and
it should not be too different in kind from bugs that can actually occur.


> 
> [ ... ]
> >>Even if the code contains a bug, "cc -O" and "cc -O -fgcse" should 
> >>produce the same results.  Excluding certain well-defined exceptions 
> >>(-ffast-math comes to mind), compiler optimizations likes -fgcse are not 
> >>allowed to change the meaning of compiled code, do we agree?
> >
> >Not quite.  Compiler optimization flags (with a few exceptions like
> >-ffast-math) are not allowed to change the semantics of the compiled
> >code.
> 
> I really don't want to debate the use of "meaning" versus "semantics".  :-)

That wasn't my real point anyway. I was trying to refute your statement
that "Even if the code contains a bug, "cc -O" and "cc -O -fgcse"
should produce the same results."

I claim that if the code has a bug that results in undefined behaviour
then the compiler is allowed to produce different results when invoked
with different optimization flags.


> 
> >For buggy code that invokes undefined behaviour (divison by
> >zero, accessing unallocated memory, etc.) there is no semantics to
> >preserve and therefore the compiled code may well produce different
> >results when compiled with different flags.
> 
> C code that permits a divide-by-zero condition will result in a runtime 
> error, but I disagree that this has "no semantics to preserve".  If the 

It hasn't any semantics to preserve. There is no guarantee that a
division-by-zero will result in a runtime error. The C standard defines
what the semantics (or meaning if you prefer) of a C programs is. For
code that executes an integer division-by-zero it is not defined what
the program should do. Therefore *any* result that occurs from running
the code is conforming to the standard.

If you believe differently please tell me what that program *should* do
when run. (Without making any assumptions about which compiler, OS or
hardware is being used.)

> code was using floating point, IEEE 754 defines semantics for 
> divide-by-zero one could also have an 'Infinity' result, but that's not 
> available with ints; your code results in a SIGFPE being generated.

My code results in a SIGFPE when compiled with gcc on FreeBSD using a
certain set of flags. I am sure that if you try it with other
compilers, or on other operating systems you will see different
results.
(If you were to run it under AmigaOS, for example, you would probably
get a system crash with an error code indicating an integer
division-by-zero.  Other systems might well just ignore such a division.)

Programs that have undefined behaviour will very often behave
differently when compiled with different compilers, so the fact that
one compiler invoked with different flags will give different results
is not surprising.

> 
> >(Undefined behaviour in the context of the C standard means the
> >compiler is allowed to do whatever it damn well pleases, including, but
> >not limited to, doing what you wanted and expected it to do, formatting
> >your harddisk or making demons fly out of your nose.
> 
> Sure.  I see and acknowledge the validity of your point: it's possible for 
> a programmer to write code which has different behavior depending on (say) 
> -finline-functions.
> 
> However, that being said, the fact that the C standard says such-and-such 
> gives "undefined behavior" does not preclude the implementation from 
> defining the behavior for such-and-such.

Of course it doesn't preclude that, but few implementations actually
does define what the behaviour will be for such cases, and code
depending on such implementation-specific behaviour is highly
non-portable anyway.

> 
> >>If there exists any lexically correct input source code (ie, which parses 
> >>validly) where compiling with -fgcse results in different behavior, that 
> >>optimization is unsafe and should not be enabled by -O2 in any 
> >>circumstance.
> >
> >With that definition just about *all* optimizations would be unsafe.
> >
> >(And optimization is actually *supposed* to give different behaviour. 
> >The running time of a program is part of its behaviour and
> >optimization is generally supposed to reduce the running time, thereby
> >giving different behaviour.)
> 
> What you say is so obviously correct that one should instead conclude that 
> my use of the term 'behavior' with regard to compiler optimizations has a 
> more specific mea

Static CVSup still possible?

2003-08-02 Thread Francisco Reyes
I used to be able to install CVsup and just copy the cvsup program to
other machines. I just tried it today and on the target machine (an old
4.5 machine) it complained about some missing libraries.

Is it still possible to build CVsup in such a way that one could just copy
the cvsup file to another machine?

How about making a package or a binary distribution?

I tried "make package", and got a package, but on the target machine it
then needed a number of other ports. At the time the machine did not have
a port directory and no cvsup. :-(

I ended up making a gzipped tar file of one of my machines ports directory
and am now building cvsup from sources (also had to manually copy
/usr/share/mk/bsd.port* files)

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Mount NetBSD partition

2003-08-02 Thread Daan Goedkoop
Hello,

On my IDE disk, I have two disk labels, one of FreeBSD and one from NetBSD. 
Now that I want to change to NetBSD, I would like to copy my data from the 
NetBSD /home partition to FreeBSD.

However, only a device /dev/ad1s3 exists, with which I can only mount the / of 
NetBSD. Does anyone know what I am doing wrong?

If I look at the fdisk output, can it possibly be something like that NetBSD 
decided to start it's slices at 0-based locations while FreeBSD expects them 
at 1-based ones?

Thanks in advance,
Daan.

The output of fdisk:

*** Working on device ad1 ***
parameters extracted from in-core disklabel are:
cylinders=65531 heads=16 sectors/track=63 (1008 blks/cyl)

Figures below won't work with BIOS for partitions not in cyl 1
parameters to be used for BIOS calculations are:
cylinders=65531 heads=16 sectors/track=63 (1008 blks/cyl)

Media sector size is 512
Warning: BIOS sector numbering starts with sector 1
Information from DOS bootblock is:
The data for partition 1 is:
sysid 131 (0x83),(Linux native)
start 63, size 6297417 (3074 Meg), flag 0
beg: cyl 0/ head 1/ sector 1;
end: cyl 391/ head 254/ sector 63
The data for partition 2 is:
sysid 165 (0xa5),(FreeBSD/NetBSD/386BSD)
start 53110890, size 12932325 (6314 Meg), flag 80 (active)
beg: cyl 1023/ head 255/ sector 63;
end: cyl 1023/ head 254/ sector 63
The data for partition 3 is:
sysid 169 (0xa9),(NetBSD)
start 6329610, size 26700030 (13037 Meg), flag 0
beg: cyl 394/ head 0/ sector 1;
end: cyl 1023/ head 254/ sector 63
The data for partition 4 is:
sysid 5 (0x05),(Extended DOS)
start 33029640, size 20081250 (9805 Meg), flag 0
beg: cyl 1023/ head 255/ sector 63;
end: cyl 1023/ head 254/ sector 63

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buggy optimization levels...

2003-08-02 Thread Chuck Swiger
Erik Trulsson wrote:
[ ... ]
A somewhat contrived example that behaves differently when compiled
with -O3 or when compiled with -O2 or lower optimization follows:
static int f(int a)
{
return a/0;
}
int main(void)
{
int x;
x = f(5);
return 0;
}
Contrived, but interesting and useful nonetheless; thanks for the response.

[ ... ]
Even if the code contains a bug, "cc -O" and "cc -O -fgcse" should produce 
the same results.  Excluding certain well-defined exceptions (-ffast-math 
comes to mind), compiler optimizations likes -fgcse are not allowed to 
change the meaning of compiled code, do we agree?
Not quite.  Compiler optimization flags (with a few exceptions like
-ffast-math) are not allowed to change the semantics of the compiled
code.
I really don't want to debate the use of "meaning" versus "semantics".  :-)

For buggy code that invokes undefined behaviour (divison by
zero, accessing unallocated memory, etc.) there is no semantics to
preserve and therefore the compiled code may well produce different
results when compiled with different flags.
C code that permits a divide-by-zero condition will result in a runtime error, 
but I disagree that this has "no semantics to preserve".  If the code was using 
floating point, IEEE 754 defines semantics for divide-by-zero one could also 
have an 'Infinity' result, but that's not available with ints; your code results 
in a SIGFPE being generated.

(Undefined behaviour in the context of the C standard means the
compiler is allowed to do whatever it damn well pleases, including, but
not limited to, doing what you wanted and expected it to do, formatting
your harddisk or making demons fly out of your nose.
Sure.  I see and acknowledge the validity of your point: it's possible for a 
programmer to write code which has different behavior depending on (say) 
-finline-functions.

However, that being said, the fact that the C standard says such-and-such gives 
"undefined behavior" does not preclude the implementation from defining the 
behavior for such-and-such.

If there exists any lexically correct input source code (ie, which parses 
validly) where compiling with -fgcse results in different behavior, that 
optimization is unsafe and should not be enabled by -O2 in any circumstance.
With that definition just about *all* optimizations would be unsafe.

(And optimization is actually *supposed* to give different behaviour. 
The running time of a program is part of its behaviour and
optimization is generally supposed to reduce the running time, thereby
giving different behaviour.)
What you say is so obviously correct that one should instead conclude that my 
use of the term 'behavior' with regard to compiler optimizations has a more 
specific meaning.

Page 586 of _Compilers: Principles, Techniques, and Tools_ states:

First, a transformation must preserve the meaning of programs.  That is, an 
"optimization" must not change the output produced by a program for a given 
input, or cause an error, such as a division by zero, that was not present in 
the original program.  The influence of this criterion prevades this chapter; at 
all times we take the "safe" approach of missing an opportunity to apply a 
transformation rather than risk changing what the program does.

	--

Like your divide-by-zero example above, or this paragraph about "semantics" vs 
"meaning", I'm not going to disagree if you want to state that the running time 
of a program is part of the "behavior".  However, using the terms in such a 
fashion precludes you from understanding the intended meaning in this particular 
context.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Printing Trouble

2003-08-02 Thread Duane A. Damiano
I'm a Linux person trying out FreeBSD for the first time.

I just installed 5.1.  Most things work pretty well so far, but I can't
get the print system to work right.  I can print plain text files, but I
can't print web pages or .ps files.

My printer is a HP DeskJet 694C.  I have a file called
/usr/local/libexec/if-ps, which is an exact copy of the one listed
(called ifhp) in the "FreeBSD Handbook."  The only difference is that
I replaced "djet500" with "cdj670".  (I tried other choices also.)

When I try to print a web page or a .ps file, nothing happens.  I know
that lpr is seeing my if-ps file because when I put "echo test" into it,
"test" gets printed.

Here's what I see in /var/log/lpd-errs:

Error: /invalidfileaccess in --.outputpage--
Operand stack:
   1   true
Execution stack:
   %interp_exit   .runexec2   --nostringval--   --nostringval--   
--nostringval--   2   %stopped_push   --nostringval--   --nostringval--   
--nostringval--   false   1   %stopped_push   1   3   %oparray_pop   1   3   
%oparray_pop   1   3   %oparray_pop   1   3   %oparray_pop   .runexec2   
--nostringval--   --nostringval--   --nostringval--   2   %stopped_push   
--nostringval--   0   3   %oparray_pop   --nostringval--   --nostringval--   
--nostringval--   --nostringval--
Dictionary stack:
   --dict:1059/1123(ro)(G)--   --dict:0/20(G)--   --dict:170/200(L)--
Current allocation mode is local
Last OS error: 45
GNU Ghostscript 7.06: Unrecoverable error, exit code 1
Aug  2 14:40:18 swing lpd[606]: HP694C: job could not be printed 
(cfA030swing.dad.org)


What's going on here?  Is ghostscript not working?  (GhostView seems
to work okay - except it won't print.)


I see that CUPS is on my system.  But, I don't see any documentation
for it.  On my Linux system, these two statements in my /etc/rc.local
take care of everything:

/usr/sbin/cupsd
/usr/sbin/lpadmin -p DeskJet -E -v parallel:/dev/lp0 -m deskjet.ppd

But, there's no lpadmin on my FreeBSD system.

If someone could give me a simple CUPS solution, that would be fine
too.

Duane

-
Duane A. Damiano[EMAIL PROTECTED]
P. O. Box 22429 Phone: 410-685-6221
Baltimore MD 21203-4429  U.S.A.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to remove ^M character

2003-08-02 Thread Bill Campbell
On Sat, Aug 02, 2003 at 02:49:40PM +0530, Shantanu Mahajan wrote:
>+-- Anil Garg [freebsd] [01-08-03 14:01 +0530]:
>| Hi,
>| 
>| I ftp'd a file from windows to freebsdnot its every line has ^M at its
>| end.
>| Is there some command in vi (or some way) by whcih ^M can be removed.

In the future when doing the transfer, make sure your ftp program is in
text mode, not binary, and it should take care of this conversion.

>| Thanks
>| Anil
>
>   col -bx < oldfile > newfile
>
>   Regards,
>   Shantanu
>___
>[EMAIL PROTECTED] mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>

-- 
Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
UUCP:   camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

Government is actually the worst failure of civilized man. There has
never been a really good one, and even those that are most tolerable
are arbitrary, cruel, grasping and unintelligent.
-- H. L. Mencken
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buggy optimization levels...

2003-08-02 Thread Erik Trulsson
On Sat, Aug 02, 2003 at 12:19:06PM -0400, Chuck Swiger wrote:
> Erik Trulsson wrote:
> >On Thu, Jul 31, 2003 at 10:30:57PM -0400, Chuck Swiger wrote:
> [ ... ]
> >>I understand that figuring out why the kernel died can be hard, 
> >>particularly if the failures aren't concise and completely reproducable, 
> >>and thus tracing the problem back to making the right change to gcc to 
> >>fix the optimization that caused the observed failure is thus also hard.
> >
> >Note that it is not necessarily gcc which is at fault for such
> >failures. It may be a bug in gcc, but it may also be a bug in the code
> >being compiled that has a bug that only shows up under higher
> >optimization levels.
> >The latter is probably somewhat more common actually.
> 
> Does the last comment mean that you can provide at least one example of 
> code which behaves differently when compiled with "cc -O" versus "cc -O2"?
> 
> Otherwise, what does "more common" mean in the context of zero examples?

If you want real world examples you can trawl through the mailing list
archives. I am sure you can find at least a few examples if you look
hard enough. (Searching through list archives is not so fun that I will
do it myself unless there is something that *I* want to know.)

A somewhat contrived example that behaves differently when compiled
with -O3 or when compiled with -O2 or lower optimization follows:

static int f(int a)
{
return a/0;
}
int main(void)
{
int x;
x = f(5);
return 0;
}

Compiling this with -O2 or lower and running the program will result
in the program crashing. Compiled with -O3 the program just exits
cleanly.  (FreeBSD 4.8-stable ; gcc 2.95.4)
(The code compiles just fine withouth warnings in either case even when
compiled with -ansi -pedantic -Wall)

Since there is a bug (division by zero) in the program that invokes
undefined behaviour either result is perfectly acceptable, and the
difference is not due to a bug in gcc, but due to a bug in my program.

(The reason for the different behaviour is that -O3 turns on inlining of
functions, and when the call to f() has been inlined gcc is able to
determine that the call has no side-effects that need to be preserved,
and since the result of the call is never used after being assigned to
x the whole line 'x = f(5);' can safely be removed.
When compiled with -O2 or lower the compiler is not able to determine
that the call to f() can be omitted and therefore f() will be called.)

> 
> [ ... ]
> >>...and makes it so that -O2, -O3, etc does not enable GCSE optimization.
> >
> >But if the bug is not in gcc but in the code being compiled (and which
> >only happens to show up when compiled with GCSE optimization) 
> 
> Even if the code contains a bug, "cc -O" and "cc -O -fgcse" should produce 
> the same results.  Excluding certain well-defined exceptions (-ffast-math 
> comes to mind), compiler optimizations likes -fgcse are not allowed to 
> change the meaning of compiled code, do we agree?

Not quite.  Compiler optimization flags (with a few exceptions like
-ffast-math) are not allowed to change the semantics of the compiled
code.  For buggy code that invokes undefined behaviour (divison by
zero, accessing unallocated memory, etc.) there is no semantics to
preserve and therefore the compiled code may well produce different
results when compiled with different flags.
(Undefined behaviour in the context of the C standard means the
compiler is allowed to do whatever it damn well pleases, including, but
not limited to, doing what you wanted and expected it to do, formatting
your harddisk or making demons fly out of your nose.


> 
> > ...such a patch would disable this optimization for correct code also
> > even though it is not necessary there.
> 
> Such a patch would disable the optimization for all cases.
> 
> If there exists any lexically correct input source code (ie, which parses 
> validly) where compiling with -fgcse results in different behavior, that 
> optimization is unsafe and should not be enabled by -O2 in any circumstance.

With that definition just about *all* optimizations would be unsafe.

(And optimization is actually *supposed* to give different behaviour. 
The running time of a program is part of its behaviour and
optimization is generally supposed to reduce the running time, thereby
giving different behaviour.)


-- 

Erik Trulsson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to remove ^M character

2003-08-02 Thread Shantanu Mahajan
+-- Anil Garg [freebsd] [01-08-03 14:01 +0530]:
| Hi,
| 
| I ftp'd a file from windows to freebsdnot its every line has ^M at its
| end.
| Is there some command in vi (or some way) by whcih ^M can be removed.
| 
| Thanks
| Anil

col -bx < oldfile > newfile

Regards,
Shantanu
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


re: Installing PHP4 from ports fail

2003-08-02 Thread Kevin Kinsey, DaleCo, S.P.
From: "Gregory Norman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, August 02, 2003 9:49 AM
Subject: Installing PHP4 from ports fail


> I installed apache13-server. Will this installation allow me to use
ssl?
>

Not AFAIK.  You probably need apache+mod_ssl or
apache-ssl (? - the English one ... Greg Laurie, IIRC)...

> When I try to install php the installation fail repeatedly at this
point.
>
> -Wl,-rpath -Wl,/usr/local/lib ../lib/libbison.a
> Making all in doc
> makeinfo --no-split   -I .  `test -f 'bison.texinfo' || echo
> './'`bison.texinfo -o bison.info
> bison.texinfo:37: Unknown command `copying'.
> bison.texinfo:58: Unmatched [EMAIL PROTECTED]'.
> bison.texinfo:93: Unknown command `insertcopying'.
> makeinfo: Removing output file `bison.info' due to errors;
use --force
> to preserve.
> *** Error code 2
>
> Stop in /usr/ports/devel/bison/work/bison-1.75/doc.
> *** Error code 1
>
> Stop in /usr/ports/devel/bison/work/bison-1.75.
> *** Error code 1
>
> Stop in /usr/ports/devel/bison/work/bison-1.75.
> *** Error code 1
>
> Stop in /usr/ports/devel/bison.
>
> After the installation failed I did the following:
>   make clean  /usr/ports/lang/php4
> cd /usr/ports/devel/bison
> make clean
> make
>
> The bison installation fails repeatedly at the same place and with
the
> same error messages as the php installation.
>
> If someone could help me, offer any suggestions or pointers I would
> appreciate it.
>
> Gregory Norman

I've basically given up on building anything that's not
just about the latest source.  Probably a good idea
from a security standpoint.

The issues focus around compatibility in code.  If
you're running 4.4-release, you've got a codebase
that's almost two years old.  If you've updated /usr/ports,
you have a much newer version of PHP.  IIRC,
bison is part of /usr/src/gnu, so it's probably outdated
as well, unless you've installed a newer version yourself.

Sorry I'm of little help.  My solution (I rebuilt mod_php4
yesterday) is to run -STABLE, and cvsup /usr/ports
before compiling anything ...

Kevin Kinsey
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: buggy optimization levels...

2003-08-02 Thread Chuck Swiger
Kris Kennaway wrote:
[ ... ]
This is the trivial part (you don't even need to modify gcc, because
all the optimizations turned on by -Ofoo are also available as
individual -fblah options).
Indeed.  If you've forgotten, I quoted the section of the gcc source code which 
indicates which individual -fblah options are enabled at -O1, -O2, -O3.

As I've already said, once you have a
self-contained test-case that demonstrates that a particular gcc
optimization level generates broken code, the gcc people will fix it.
Yes, I hope and believe they would.  If you've also forgotten the origin of this 
thread, it was:

| The "known bugs" section of the GCC info documentation lists 5 issues; "man
| gcc" lists none.  Can someone provide a test case for a bug involving "cc -O"
| versus "cc -O3" under FreeBSD 4-STABLE for the x86 architecture?
One might (reasonably and correctly) conclude that I was asking for examples of 
such test-cases.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: latex and latex2e

2003-08-02 Thread Dr. Richard E. Hawkins
On Fri, Jul 18, 2003 at 10:11:02AM +0100, Scott Mitchell wrote:

> teTeX includes pretty much everything you're likely to need for TeX/LaTeX
> work.  The only things I ever added were the LyX editor and a few fonts.
> LyX is a truly excellent program -- I used it to write my PhD dissertation,
> and laughed at the other people struggling to do theirs in Word :-)

Why, just because it took us 10 minutes to bring our format into what
the dissertation nazis at the grad college wanted, rather than a month
of editing?  :)

But no, there's more!  

I headed out cross-country after my interview for a temporary spot to
pick up my family (there's something to be said for your family being
somewhere else for the last week or two before you defend, even if it
was due to a crisis :)  I defended in the morning, drove straight to the
interview (realizing only as I pulled into town that I was wearing my
usual bolo rather than an eastern strangulation device), and drove 2000
miles west.

Well, almost.

My transmission gave out (and I got cheated by Aamco, but that's another
story, and happens to lots of people.  [They honor their warranties in
California, but apparently not the rest of the country]).  I was
stranded for two days, and under a time deadline--if I finished by the
magic date a couple of weeks away, I would be a visiting asst. prof
rather than a visiting instructor, with a $10k difference.

So there I sat with the most recent marked up versions of my
dissertation, and an out of date version on my laptop.

No problem.  LyX and LaTeX both store in text format.  I made a copy of
the dissertation to edit, and when I returned I made a diff and used
patch to put it on the main machine.  Try *that* with word . . .

:)

hawk.  err, dochawk

-- 
Richard E. Hawkins, Asst. Prof. of Economics/"\   ASCII ribbon campaign
[EMAIL PROTECTED]  Smeal 178  (814) 375-4700  \ /   against HTML mail
These opinions will not be those of  Xand postings. 
Penn State until it pays my retainer.   / \   
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Default ACL entries.

2003-08-02 Thread Grzegorz Czaplinski
Hi there!
Does anyone know how to set default ACL entries?
Any examples how to use -d, -k, -X switches with setfacl?

This is all different to Solaris... ;)
Thanks,
gregory
--
Grzegorz Czaplinski 
"The Power to Serve, Right for the Power Users!" - http://www.FreeBSD.org/
 Fingerprint: EB77 E19D CFA2 5736 810F  847C A70F A275 2489 469F


pgp0.pgp
Description: PGP signature


Re: buggy optimization levels...

2003-08-02 Thread Chuck Swiger
Erik Trulsson wrote:
On Thu, Jul 31, 2003 at 10:30:57PM -0400, Chuck Swiger wrote:
[ ... ]
I understand that figuring out why the kernel died can be hard, 
particularly if the failures aren't concise and completely reproducable, 
and thus tracing the problem back to making the right change to gcc to fix 
the optimization that caused the observed failure is thus also hard.
Note that it is not necessarily gcc which is at fault for such
failures. It may be a bug in gcc, but it may also be a bug in the code
being compiled that has a bug that only shows up under higher
optimization levels.
The latter is probably somewhat more common actually.
Does the last comment mean that you can provide at least one example of code 
which behaves differently when compiled with "cc -O" versus "cc -O2"?

Otherwise, what does "more common" mean in the context of zero examples?

[ ... ]
...and makes it so that -O2, -O3, etc does not enable GCSE optimization.
But if the bug is not in gcc but in the code being compiled (and which
only happens to show up when compiled with GCSE optimization) 
Even if the code contains a bug, "cc -O" and "cc -O -fgcse" should produce the 
same results.  Excluding certain well-defined exceptions (-ffast-math comes to 
mind), compiler optimizations likes -fgcse are not allowed to change the meaning 
of compiled code, do we agree?

> ...such a patch would disable this optimization for correct code also
> even though it is not necessary there.
Such a patch would disable the optimization for all cases.

If there exists any lexically correct input source code (ie, which parses 
validly) where compiling with -fgcse results in different behavior, that 
optimization is unsafe and should not be enabled by -O2 in any circumstance.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


[no subject]

2003-08-02 Thread User &Otto Ernst Bernhardi
Hi everybody, 

I run freeBSD 5.0 and tried to update the KDE to KDE 3.1.3.

There is a problem saying an include file is missing, see the text below. 
Anything that I did wron or I can do about that?

Many thanks

Otto Bernhardi. 


--

otto# cd /usr/ports/deskutils/kdepim3
otto# cat pkg-descr
Personal Information Management tools for KDE.

This rather broad scope encompasses mail clients, addressbooks, usenet news,
scheduling and even sticky notes.
otto# make isnatl
make: don't know how to make isnatl. Stop
otto# make install
===>  Building for kdepim-3.1.3
gmake  all-recursive
gmake[1]: Entering directory `/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3'
Making all in calendarsystem
gmake[2]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/calendarsystem'
gmake[2]: Nothing to be done for `all'.
gmake[2]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/calendarsystem'
Making all in doc
gmake[2]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc'
Making all in .
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc'
gmake[3]: Nothing to be done for `all-am'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc'
Making all in karm
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/karm'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/karm'
Making all in kandy
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kandy'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kandy'
Making all in kaddressbook
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kaddressbook'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kaddressbook'
Making all in kcontrol
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kcontrol'
Making all in .
gmake[4]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kcontrol'
gmake[4]: Nothing to be done for `all-am'.
gmake[4]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kcontrol'
Making all in kalarmd
gmake[4]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kcontrol/kalarmd'
gmake[4]: Nothing to be done for `all'.
gmake[4]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kcontrol/kalarmd'
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kcontrol'
Making all in kalarm
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kalarm'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kalarm'
Making all in knotes
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/knotes'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/knotes'
Making all in kpilot
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kpilot'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/kpilot'
Making all in korganizer
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/korganizer'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc/korganizer'
gmake[2]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/doc'
Making all in kabc
gmake[2]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/kabc'
Making all in kabc2mutt
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/kabc/kabc2mutt'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/kabc/kabc2mutt'
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/kabc'
gmake[3]: Nothing to be done for `all-am'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/kabc'
gmake[2]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/kabc'
Making all in karm
gmake[2]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/karm'
Making all in support
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/karm/support'
gmake[3]: Nothing to be done for `all'.
gmake[3]: Leaving directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/karm/support'
Making all in pics
gmake[3]: Entering directory 
`/usr/ports/deskutils/kdepim3/work/kdepim-3.1.3/karm/pics'
gmake[3]: Nothing to be done for `all'.
gmake[3]: 

Re: Issue installing Python/Bittorrent

2003-08-02 Thread Larry Rosenman
I sent a patch to tg@ and am waiting for his approval.

Here's one:

--- Src/umathmodule.c.orig  Sat Aug  2 01:10:09 2003
+++ Src/umathmodule.c Sat Aug  2 01:10:43 2003
@@ -1,9 +1,9 @@
+#include 
 #include "Python.h"
 #include "Numeric/arrayobject.h"
 #include "Numeric/ufuncobject.h"
 #include "abstract.h"
-#include 
 #ifndef CHAR_BIT
 #define CHAR_BIT 8


--On Saturday, August 02, 2003 10:14:30 -0400 Dragoncrest 
<[EMAIL PROTECTED]> wrote:

Roger that.  Thanks.  Any word on when the patch is due out?  Is there a
way to go back to a previous version of BT in order to make it work?
There's a PR filed, and it's awaiting approval from the maintainer to
issue a patch.
LER

--On Saturday, August 02, 2003 09:19:35 -0400 Dragoncrest
<[EMAIL PROTECTED]> wrote:
> Well, what started all of this was my recent upgrade of Python to
> version 2.3 as part of my portupgrade cycle.  Well, as things would
> have it, bittorrent stopped working.  So I tried to force reinstall of
> BT but it fails when installing /usr/ports/math/py-numeric.  I get the
> following series of errors.
>
> rc/umathmodule.c:1952: `acosh' undeclared here (not in a function)
> Src/umathmodule.c:1952: initializer element is not constant
> Src/umathmodule.c:1952: (near initialization for `arccosh_data[0]')
> Src/umathmodule.c:1952: `acosh' undeclared here (not in a function)
> Src/umathmodule.c:1952: initializer element is not constant
> Src/umathmodule.c:1952: (near initialization for `arccosh_data[1]')
> Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
> Src/umathmodule.c:1953: initializer element is not constant
> Src/umathmodule.c:1953: (near initialization for `arcsinh_data[0]')
> Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
> Src/umathmodule.c:1953: initializer element is not constant
> Src/umathmodule.c:1953: (near initialization for `arcsinh_data[1]')
> Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
> Src/umathmodule.c:1954: initializer element is not constant
> Src/umathmodule.c:1954: (near initialization for `arctanh_data[0]')
> Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
> Src/umathmodule.c:1954: initializer element is not constant
> Src/umathmodule.c:1954: (near initialization for `arctanh_data[1]')
> error: command 'cc' failed with exit status 1
> *** Error code 1
>
> Stop in /usr/ports/math/py-numeric.
>
> Anyone know how to fix this?  Do I have to update one of my make
> programs or something?
>
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "[EMAIL PROTECTED]"
>


--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: [EMAIL PROTECTED]
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749





--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: [EMAIL PROTECTED]
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Issue installing Python/Bittorrent

2003-08-02 Thread Dragoncrest
Roger that.  Thanks.  Any word on when the patch is due out?  Is there a
way to go back to a previous version of BT in order to make it work?

> There's a PR filed, and it's awaiting approval from the maintainer to
> issue a patch.
> 
> LER
> 
> 
> --On Saturday, August 02, 2003 09:19:35 -0400 Dragoncrest 
> <[EMAIL PROTECTED]> wrote:
> 
> > Well, what started all of this was my recent upgrade of Python to
> > version 2.3 as part of my portupgrade cycle.  Well, as things would have
> > it, bittorrent stopped working.  So I tried to force reinstall of BT but
> > it fails when installing /usr/ports/math/py-numeric.  I get the
> > following series of errors.
> >
> > rc/umathmodule.c:1952: `acosh' undeclared here (not in a function)
> > Src/umathmodule.c:1952: initializer element is not constant
> > Src/umathmodule.c:1952: (near initialization for `arccosh_data[0]')
> > Src/umathmodule.c:1952: `acosh' undeclared here (not in a function)
> > Src/umathmodule.c:1952: initializer element is not constant
> > Src/umathmodule.c:1952: (near initialization for `arccosh_data[1]')
> > Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
> > Src/umathmodule.c:1953: initializer element is not constant
> > Src/umathmodule.c:1953: (near initialization for `arcsinh_data[0]')
> > Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
> > Src/umathmodule.c:1953: initializer element is not constant
> > Src/umathmodule.c:1953: (near initialization for `arcsinh_data[1]')
> > Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
> > Src/umathmodule.c:1954: initializer element is not constant
> > Src/umathmodule.c:1954: (near initialization for `arctanh_data[0]')
> > Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
> > Src/umathmodule.c:1954: initializer element is not constant
> > Src/umathmodule.c:1954: (near initialization for `arctanh_data[1]')
> > error: command 'cc' failed with exit status 1
> > *** Error code 1
> >
> > Stop in /usr/ports/math/py-numeric.
> >
> > Anyone know how to fix this?  Do I have to update one of my make
> > programs or something?
> >
> > ___
> > [EMAIL PROTECTED] mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> > "[EMAIL PROTECTED]"
> >
> 
> 
> 
> -- 
> Larry Rosenman http://www.lerctr.org/~ler
> Phone: +1 972-414-9812 E-Mail: [EMAIL PROTECTED]
> US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
> 
> 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Installing PHP4 from ports fail

2003-08-02 Thread Gregory Norman
Hello all,

I am trying to install mysql323, apache13 and php4 on 4.4 Release. So 
far I have  successfully installed mysql and apache, with php it is a 
different story.

I have two issues. I have a question about apache, and I would like some 
help getting php installed on my machine.

I installed apache13-server. Will this installation allow me to use ssl?

When I try to install php the installation fail repeatedly at this point.

-Wl,-rpath -Wl,/usr/local/lib ../lib/libbison.a
Making all in doc
makeinfo --no-split   -I .  `test -f 'bison.texinfo' || echo 
'./'`bison.texinfo -o bison.info
bison.texinfo:37: Unknown command `copying'.
bison.texinfo:58: Unmatched [EMAIL PROTECTED]'.
bison.texinfo:93: Unknown command `insertcopying'.
makeinfo: Removing output file `bison.info' due to errors; use --force 
to preserve.
*** Error code 2

Stop in /usr/ports/devel/bison/work/bison-1.75/doc.
*** Error code 1
Stop in /usr/ports/devel/bison/work/bison-1.75.
*** Error code 1
Stop in /usr/ports/devel/bison/work/bison-1.75.
*** Error code 1
Stop in /usr/ports/devel/bison.

After the installation failed I did the following:
 make clean  /usr/ports/lang/php4
cd /usr/ports/devel/bison
make clean
make
The bison installation fails repeatedly at the same place and with the 
same error messages as the php installation.

If someone could help me, offer any suggestions or pointers I would 
appreciate it.

Gregory Norman

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Issue installing Python/Bittorrent

2003-08-02 Thread Larry Rosenman
There's a PR filed, and it's awaiting approval from the maintainer to
issue a patch.
LER

--On Saturday, August 02, 2003 09:19:35 -0400 Dragoncrest 
<[EMAIL PROTECTED]> wrote:

Well, what started all of this was my recent upgrade of Python to
version 2.3 as part of my portupgrade cycle.  Well, as things would have
it, bittorrent stopped working.  So I tried to force reinstall of BT but
it fails when installing /usr/ports/math/py-numeric.  I get the
following series of errors.
rc/umathmodule.c:1952: `acosh' undeclared here (not in a function)
Src/umathmodule.c:1952: initializer element is not constant
Src/umathmodule.c:1952: (near initialization for `arccosh_data[0]')
Src/umathmodule.c:1952: `acosh' undeclared here (not in a function)
Src/umathmodule.c:1952: initializer element is not constant
Src/umathmodule.c:1952: (near initialization for `arccosh_data[1]')
Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
Src/umathmodule.c:1953: initializer element is not constant
Src/umathmodule.c:1953: (near initialization for `arcsinh_data[0]')
Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
Src/umathmodule.c:1953: initializer element is not constant
Src/umathmodule.c:1953: (near initialization for `arcsinh_data[1]')
Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
Src/umathmodule.c:1954: initializer element is not constant
Src/umathmodule.c:1954: (near initialization for `arctanh_data[0]')
Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
Src/umathmodule.c:1954: initializer element is not constant
Src/umathmodule.c:1954: (near initialization for `arctanh_data[1]')
error: command 'cc' failed with exit status 1
*** Error code 1
Stop in /usr/ports/math/py-numeric.

Anyone know how to fix this?  Do I have to update one of my make
programs or something?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"


--
Larry Rosenman http://www.lerctr.org/~ler
Phone: +1 972-414-9812 E-Mail: [EMAIL PROTECTED]
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Issue installing Python/Bittorrent

2003-08-02 Thread Dragoncrest
Well, what started all of this was my recent upgrade of Python to
version 2.3 as part of my portupgrade cycle.  Well, as things would have
it, bittorrent stopped working.  So I tried to force reinstall of BT but
it fails when installing /usr/ports/math/py-numeric.  I get the
following series of errors.

rc/umathmodule.c:1952: `acosh' undeclared here (not in a function)
Src/umathmodule.c:1952: initializer element is not constant
Src/umathmodule.c:1952: (near initialization for `arccosh_data[0]')
Src/umathmodule.c:1952: `acosh' undeclared here (not in a function)
Src/umathmodule.c:1952: initializer element is not constant
Src/umathmodule.c:1952: (near initialization for `arccosh_data[1]')
Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
Src/umathmodule.c:1953: initializer element is not constant
Src/umathmodule.c:1953: (near initialization for `arcsinh_data[0]')
Src/umathmodule.c:1953: `asinh' undeclared here (not in a function)
Src/umathmodule.c:1953: initializer element is not constant
Src/umathmodule.c:1953: (near initialization for `arcsinh_data[1]')
Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
Src/umathmodule.c:1954: initializer element is not constant
Src/umathmodule.c:1954: (near initialization for `arctanh_data[0]')
Src/umathmodule.c:1954: `atanh' undeclared here (not in a function)
Src/umathmodule.c:1954: initializer element is not constant
Src/umathmodule.c:1954: (near initialization for `arctanh_data[1]')
error: command 'cc' failed with exit status 1
*** Error code 1

Stop in /usr/ports/math/py-numeric.

Anyone know how to fix this?  Do I have to update one of my make
programs or something?

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Question about portsdb -uU

2003-08-02 Thread Hasse
On Saturday 02 August 2003 11.59, dick hoogendijk wrote:
> On 02 Aug Hasse wrote:
> > I have a question about portsdb -uU
> > After a ports cvsup, does it replace the command make index in
> > /usr/ports ?  Or do you recommend to use both ?
>
> portsdb -uU *DOES* replace the "make index" from /usr/ports.
>
> However: while is _is_ quicker, it has some disadvantages!
> I advice you to use:
> # make index
> # portsdb -u
> The "make index" is more accurate! It "sees" all the ports, while
> portsdb -U sometimes misses some. I like to have a 100% score because a
> lot of actions (deps i.e.) depend on a 'sound' portsdb.
>
> > Someone told me portsdb -uU is a lot faster, but it don't seem to be
> > that on my computers.
>
> On my computer it is (was) faster, but I want quality, so who cares. I
> can still work on my machine, can't I, while the index is being
> generated ;-))

Thx for  clearifying this subject for me.
I've been using both commands, just to live on the safe side,
and will continue doing that.
As you wrote, and I fully agree :
" I like to have a 100% score because a
lot of actions (deps i.e.) depend on a 'sound' portsdb. "
-- 
Best Regards
Hasse.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Xserver - non root startup error

2003-08-02 Thread Joshua Oreman
On Sat, Aug 02, 2003 at 10:23:11AM +0300 or thereabouts, Alex Zivenko wrote:
> Hi all!
> When I am starting My X server like non root - it gives me an error
> containing:
> error in locking authority file
> .Xauthority
> But when i am a root - all perfect.
> What's the problem.
> I' sorry for my English

su
rm -f /home/USERNAME/.Xauthority*
exit
startx

Obviously replace USERNAME with your username.

-- Josh

> 
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: HDDs dividing rules

2003-08-02 Thread Petersen
Behalf Of Peter Rosa said:

> Hi all,
> 
> Everywhere I looked, I found only words as "make your
> own choice of partitioning schema" etc., but I think, there
> must be some rules.

How you define your partitions and what mount flags you use is very much
dependant on what you're using the box for. Only you can make this
descision.

> And what if I have an HW RAID controller. Are there some
> difficulties or differences from "normal" dividing ?
>

Nope.

> Tell us, please, something like 
> "Divide your HDD as follows:
> 1. create slices for /, /home, /etc .. It's good because

Making a slice for /etc is a 'bad' idea. Kernel can't read all the rc
scripts if they're not on root slice - not to mention /etc/fstab (thus
not being able to find any other slices to mount).

> 2. mount / as RO..

This will do a pretty good job of making it impossible for anyone to
change their pass (as /etc has to be on root slice)

> 3. mount /user as noexec+nosuid..."
> 
If by this you mean /usr, this will break just about every application
on the system (most binaries that aren't essential to core system live
in /usr/(s)bin (or /usr/local/(s)bin if you install stuff yourself). A
lot of these need to be suid/sgid too.

> I think & hope these rules are well-known, but one must know
> where to look for

Nope. Every box I setup has different slice schemes - its very dependant
on the usage.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


HDDs dividing rules

2003-08-02 Thread Peter Rosa
Hi all,

please, could you explain for those of us, who are new to Unix,
are there some rules for partitioning of HDDs in accordance to
security needs ? I know, I can set nosuid+noexec on whole
partition (slice ?), I can mount something as read-only... 
It's everything fine, but what exactly should we do ?

Everywhere I looked, I found only words as "make your
own choice of partitioning schema" etc., but I think, there
must be some rules.
And what if I have an HW RAID controller. Are there some
difficulties or differences from "normal" dividing ?

Tell us, please, something like 
"Divide your HDD as follows:
1. create slices for /, /home, /etc .. It's good because
2. mount / as RO..
3. mount /user as noexec+nosuid..."

I think & hope these rules are well-known, but one must know
where to look for
I also hope, this list could be such kind of brainstorming :-))

One of the best things on Unixes is they are opened.
But one of the worst thing on Unixes is they are opened
and it is not simple to get very clear information.
Sorry for the trying a philosophy here :-))

Best regards and many thanks.

Peter Rosa

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ICP Vortex GDT8514RZ: RAID 4 and 5 cause freeze

2003-08-02 Thread Dirk Meyer
Hallo [EMAIL PROTECTED],

> that was my first post about the problem: "IBM xSeries 345 freezes after 15
> min.
> (4.8, 5.0, 5.1, current)".
> 
> I can't believe it, the Vortex SCSI controller is the problem. RAID 0, 1, 10
> runs perfect, RAID 4 and 5 (which I need) kills my server after 15 min.
> That's hard, because this is the 2. controller which will not run with FreeBSD

Do you use the buildin driver from FreeBSD iir?
Have you deactivated  the kernal module iir or icp?

I had no prioblem with vortex controlers so far.
Maybe you need a firmware upgrade?

kind regards Dirk

- Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany
- [EMAIL PROTECTED],[EMAIL PROTECTED],[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Question about portsdb -uU

2003-08-02 Thread dick hoogendijk
On 02 Aug Hasse wrote:
> I have a question about portsdb -uU
> After a ports cvsup, does it replace the command make index in
> /usr/ports ?  Or do you recommend to use both ?

portsdb -uU *DOES* replace the "make index" from /usr/ports.

However: while is _is_ quicker, it has some disadvantages!
I advice you to use:
# make index
# portsdb -u
The "make index" is more accurate! It "sees" all the ports, while
portsdb -U sometimes misses some. I like to have a 100% score because a
lot of actions (deps i.e.) depend on a 'sound' portsdb.

> Someone told me portsdb -uU is a lot faster, but it don't seem to be
> that on my computers.

On my computer it is (was) faster, but I want quality, so who cares. I
can still work on my machine, can't I, while the index is being
generated ;-))

-- 
dick -- http://www.nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.8 ++ Debian GNU/Linux (Woody)
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilya
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ipfw ruleset question

2003-08-02 Thread Andrzej Kwiatkowski
> Sounds like your spam-blocking rules include some packet-accepting
> rules.  What does the ruleset look like?
>
100 divert natd all from any to any via ext_if

rules from 150 to 500 are blocking rules for my firewall

rules from 1000 and up are for  my clients.

My natd runs as 1:1 nat.

what I need is:

rules from 100 to 499 for blocking spam

500 divert natd all from any to any via ext_if

and the rest is not important...

I would like not all packets sending to nat,
it some kind of disabling spam, and so on..

Have got any idea ?

Thanks in advance
Andrzej Kwiatkowski
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Xserver - non root startup error

2003-08-02 Thread Alex Zivenko
Hi all!
When I am starting My X server like non root - it gives me an error
containing:
error in locking authority file
.Xauthority
But when i am a root - all perfect.
What's the problem.
I' sorry for my English

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"