Re: VERY slow performance on igb+FreeBSD8.2+mpd5.6
Коньков Евгений wrote: #uname FreeBSD 8.3-PRERELEASE #2 r231881: Thu Feb 23 00:53:28 UTC 2012 и Version 5.6 (root@ 10:03 20-Feb-2012) http://www.speedtest.net/result/1790445113.png try to reconnect to mpd 10-20times and you get next: http://www.speedtest.net/result/1790454801.png Used server differs in your images. Would you please track down assigned IP's? -- Sphinx of black quartz judge my vow. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
negative group permissions?
Recently I started seeing this line in daily security output: Checking negative group permissions: 70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012 /var/spool/output/lpd/.seq I've a parallel printer attached to a 9.9-CURRENT #2 r230787M box. What does it mean? Should I be worried? Thanks -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 331 5944 Fax: +44 (0)117 929 4423 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On 24/02/2012 09:08, Anton Shterenlikht wrote: Recently I started seeing this line in daily security output: Checking negative group permissions: 70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012 /var/spool/output/lpd/.seq I've a parallel printer attached to a 9.9-CURRENT #2 r230787M box. What does it mean? This means that non-root users in group daemon have only read permissions on that file. Users that aren't root and that aren't in group daemon have execute permission only. It does look a bit odd, and I believe that file would just contain a job number (IIRC -- haven't dealt much with lpd or lprng much recently) so executing it doesn't really achieve anything. This is the standard idiom to allow access for 'everyone, except members of a particular group.' One way you can get weird permissions is if you happen to use decimal for permissions bitmaps rather than octal. A umask of '77' is not the same thing at all as a umask of '077'. (It's effectively 0115, which doesn't make much sense to me.) Most shells nowadays will assume you mean octal whether you include the leading zero or not: the same is not true if you use umask(2) to set the mask programatically. Ditto for other places you can set permissions like open(2) with O_CREAT or mkdir(2). Should I be worried? No more than a normal level of paranoia is indicated here. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
Converting C++ to C
Some early implementations of C++ operated as preprocessors that emitted C code. Is there any current tool that will do that? I didn't recognize any such option in the g++ manpage, although I suppose it's possible that one of the -fdump-tree- options would come close enough. Reason: I want to make what I think would be a fairly minor change to a small (1100-line) C++ program, but I don't know C++ -- only C -- and I don't understand the program well enough to mess with it. I suspect I would be able to figure out an equivalent C program. In case it matters, I'm using FreeBSD 8.1. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Security? [Re: Why is this Symbol in the front of your website. A humble request.]
Can I please request, you all check your mail client reply to settings. Many of the replies to this thread, have also been sent to the 388 (was it) addresses in the original To: field, as well as the list. Might the list settings need tweaking a bit? Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. Regards. Dave B. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
On 24 Feb 2012 at 17:28, Erich Dollansky wrote: Hi, On Friday 24 February 2012 17:10:21 Dave wrote: Can I please request, you all check your mail client reply to settings. I think, some - like me too - reply here always to all. Many of the replies to this thread, have also been sent to the 388 (was it) addresses in the original To: field, as well as the list. Wasn't it 389? :-) Might the list settings need tweaking a bit? Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. Just collect all addresses from the list ending with freebsd.org? Erich Indeed, so some settings might do with a tweak, to at least obfuscate posters addresses, so that at least script kiddies are flumoxed. I never intentionaly use any Reply to All function. In fact, this mailer doesn't even have a button for that. You have to select where the reply goes, after you hit the reply button, from a list of available addresses in the incoming message header, that the mailer has recognised. Just a thought as this problem is not going to go away. Dave B. PS: How about a regional Beastie wearing a headscarf and carring an assault rifle instead of a trident? That's me targeted then ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: SMTP error: 552 5.6.0 Headers too large (32768 max)
On 02/23/12 22:55, Da Rock wrote: On 02/24/12 05:01, Julian H. Stacey wrote: Arthur Chance wrote: DO NOT FEED THE TROLL! Well spotted said :-) [snip] However misguided they are, they may believe strongly in this; so I'm not sure there is a troll per se. The evidence is that they have only targeted freebsd.org addresses, and only the questions list. If they were trolling, why not include all the other lists? A reasonable question but the discrepancies between My name is Roy Mathew. and From: Al Hadith allne...@gmail.com seem a typical indication of a troll. The sometimes mangled English after claiming an Anglo-Saxon name and the non sequitur final line also suggest troll. Finally, as far as I understand it, many followers of Islam would find the use of Al Hadith as an adopted name to be provocative. Yes, the OP may be a genuine seeker after truth, but my money's on troll. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.3-BETA1 installation problem
Omer Faruk SEN wrote: [edited to relocate top post] [snip] If you need to clear the old MBR the old way, use a LiveFS or Fixit shell and do this (as root): sysctl kern.geom.debugflags=16 and: dd if=/dev/zero of=/dev/adx oseek=1 bs=512 count=1 where x equals your drive number. This will zero out any old MBR. A time or two when I've seen this error this fixed it up and the install proceeds as normal. As Warren said before, don't use the W, just Q and sysinstall will queue and issue all the commands at a later point. Already done that but still habe the same issue. I can dd and sysctl but after installing without using W at disk label screen still no luck. I have also done sysctl kern.geom.debugflags=16 on fixit and restarted installation but still getting the same error. I apologize over minor language difficulties, as I'm as guilty as anyone. But I do find the above slightly confusing, as I cannot tell for certain whether you have executed the commands correctly, or not. I can easily assume that you did and the problem indeed is somewhere else. The purpose of the sysctl command is to make it so that the subsequent dd can actually complete it's write to zero the MBR. If you were to examine this sector in a hex editor you would see all zeroes if the dd was successful. If it's anything other than all zeroes the write did not happen. If the write didn't happen then the problem would remain. Historically, I had this problem when I pulled an old backup disk off the shelf to swap into a box with a failed drive. The old disk still had the previous install of version 6.2 on it. I'm not certain exactly what changed, but some fuzzy glint of memory seems to make me think it was some kind of change in partition labeling between 6.2 and 7.x which rendered 7.x unable to properly read and modify the disk. Trying to install 7.x over the old 6.2 continually failed with exactly the same error as you describe until I booted from a LiveFS CD and did the above 2 commands. Another difference is that I have _not_ done this procedure in a FIXIT shell; I'm just assuming here that it would work the same way but could be wrong. There are several other things that jump out at me that I will include for ideas. A RAID controller sometimes will store it's metadata on the last sector of a disk. I doubt that this would cause a problem until or unless you were trying to use a GEOM class like gmirror which does the same thing and would clash. If so, you'd need to zero this sector as well. I doubt that this is the situation. You could also play around with BIOS controller configurations as well. For example, you would not want to be using Intel MatrixRAID. So NO to setting the controller to any kind of RAID setting in BIOS - and for an SSD you really want to select AHCI. The only other choice is Legacy support. I'm also a little apprehensive of installing to ad6 - you might try as an experiment unplugging any/all other drives you don't want to take chances with and plug up the SSD as ad0 to see if this changes anything. I have FBSD 9 installed in a VM for testing, and I believe it has switched to the new ATA_CAM layer as default now. I have also configured my 8.2 machines the same way so the drives are now ada0 instead of the old ad0 naming scheme. I do not know if this change has gone into the 8.3 Beta you are having trouble with. Examine your dmesg output and you can determine this. If your drive(s) are showing up as ada0 then possibly sysinstall doesn't know how to deal with this. I thought this was supposed to start with 9, and do not really know anything about 8.3 Beta. One thing I'd try is to see if installing 8.2 RELEASE would work. If it did, then the devs probably need some kind of PR filed so they will be aware. I won't see 8.3 until it becomes RELEASE, as I run production machines and I just am not interested in any potential upgrade until 8.3 achieves RELEASE status. But if attempting to install 8.2 RELEASE does the same thing it would circle me back to believing the crux of the problem is whatever was on the drive previously - and that needs to be successfully erased before your install will proceed. You should also reboot the box after doing these 2 commands, don't just try and continue on with sysinstall - reboot first. -Mike ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
Dave d...@g8kbv.demon.co.uk writes: Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. It is public information: http://www.freebsd.org/doc/en_US.ISO8859-1/articles/contributors/staff-committers.html DES -- Dag-Erling Smørgrav - d...@des.no ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why is this Symbol in the front of your website. A humble request.
Hi, On Friday 24 February 2012 14:14:32 Matthew Seaman wrote: On 24/02/2012 06:59, Erich Dollansky wrote: I live in Asia and they really have these things here. Just without the horns. That would be what most people call a ball. They have them in the west too... do they vibrate when they get moved? The Asian balls are more like bells. There is something inside which make them vibrate. Erich ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
=?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= wrote: Dave d...@g8kbv.demon.co.uk writes: Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. It is public information: http://www.freebsd.org/doc/en_US.ISO8859-1/articles/contributors/staff-committers.html Also http://www.freebsd.org/internal/homepage.html Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com Reply below not above, cumulative like a play script, indent with . Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable. Mail from @yahoo dumped @berklix. http://berklix.org/yahoo/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Converting C++ to C
per...@pluto.rain.com wrote: Some early implementations of C++ operated as preprocessors that emitted C code. Is there any current tool that will do that? I didn't recognize any such option in the g++ manpage, although I suppose it's possible that one of the -fdump-tree- options would come close enough. Reason: I want to make what I think would be a fairly minor change to a small (1100-line) C++ program, but I don't know C++ -- only C -- and I don't understand the program well enough to mess with it. I suspect I would be able to figure out an equivalent C program. In case it matters, I'm using FreeBSD 8.1. One of the lists recently (maybe 2/3 weeks ago) carried a thread listing many C compilers past present. It started by discussing Clang V. GCC I can't remember which list, I don't think it was questions@ maybe hackers@ or current@. Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com Reply below not above, cumulative like a play script, indent with . Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable. Mail from @yahoo dumped @berklix. http://berklix.org/yahoo/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
9.0, Samba and two NICs
Hi! I have been running Samba on FreeBSD 9.0 with a wireless card. A share is connected to my W7 computer. To get more speed between the computers, I decided to activate the 1GBit- Ethernet on the FreeBSD and establish a direct connection (cross-link) to the W7. I gave the new connection a static IP/subnet: 10.0.0.2/255.0.0.0 for the FreeBSD and 10.0.0.1/255.0.0.0 for the W7. SSH works fine, however Samba is utilizing the wireless card. My smb.conf looks something like this: .. ;The 192-address is the wireless, ath0. 10.0.0.2 is age0 interfaces = 127.0.0.1 192.168.0.232 10.0.0.2 bind interfaces only = yes ; the two latter is the IPs of the W7 hosts allow = 127.0.0.1 192.168.0.117 10.0.0.1 If I remove the 192* in the hosts allow, my W7 looses access via smb. netstat tells me that it is listening to both interfaces. What might be wrong? Thanks. -- Best regards, Ronny Mandal ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
Hi, On Friday 24 February 2012 17:10:21 Dave wrote: Can I please request, you all check your mail client reply to settings. I think, some - like me too - reply here always to all. Many of the replies to this thread, have also been sent to the 388 (was it) addresses in the original To: field, as well as the list. Wasn't it 389? Might the list settings need tweaking a bit? Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. Just collect all addresses from the list ending with freebsd.org? Erich ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why is this Symbol in the front of your website. A humble request.
Erich Dollansky wrote: Hi, On Friday 24 February 2012 14:14:32 Matthew Seaman wrote: On 24/02/2012 06:59, Erich Dollansky wrote: I live in Asia and they really have these things here. Just without the horns. That would be what most people call a ball. They have them in the west too... do they vibrate when they get moved? The Asian balls are more like bells. There is something inside which make them vibrate. Yes there's an acoustic element to them I recall, about 3.5 cm (2.54 cm = 1) diameter, pack of 2. Pick one up it feels like an outer stainless steel shell, connected by springs to an inner weight. Reflex was to want to saw it apart to see what was inside, how they assembled the 2 halves. I suppose spot welding, then circular rim welding, then polishing then stainless steel finish ? Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com Reply below not above, cumulative like a play script, indent with . Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable. Mail from @yahoo dumped @berklix. http://berklix.org/yahoo/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why is this Symbol in the front of your website. A humble request.
On Fri, 24 Feb 2012 07:37:39 + Matthew Seaman articulated: On 24/02/2012 07:32, Erich Dollansky wrote: Hi, On Friday 24 February 2012 14:14:32 Matthew Seaman wrote: On 24/02/2012 06:59, Erich Dollansky wrote: I live in Asia and they really have these things here. Just without the horns. That would be what most people call a ball. They have them in the west too... do they vibrate when they get moved? The Asian balls are more like bells. There is something inside which make them vibrate. I bow to your superior knowledge of the seamier side of hardware. In a past life, I worked in radio traffic analysis. It is really a rather fascinating exercise in how things can evolve or fit together. Here we started out with a TROLL inquiring about a FreeBSD symbol and have evolved into the discussion of Ben Wa balls. Truly amazing. You will notice that I did not CC what I have been told was 400 recipients. A month or so ago I was arguing against the use of CC'ing in a mail forum. That example so very clearly demonstrated why. .:\:/:. +---+ .:\:\:/:/:. | PLEASE DO NOT |:.:\:\:/:/:.: | FEED THE TROLLS | :=.' - - '.=: | | '=(\ 9 9 /)=' | Thank you, | ( (_) ) | Management | /`-vvv-'\ +---+ / \ | |@@@ / /|,|\ \ | |@@@ /_// /^\ \\_\ @x@@x@| | |/ WW( ( ) )WW \/| |\| __\,,\ /,,/__ \||/ | | | (__Y__) /\/\/\/\/\/\/\/\//\/\\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\ -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __ ASCII a stupid question, you get an EBCDIC answer. signature.asc Description: PGP signature
Re: Converting C++ to C
On Fri, Feb 24, 2012 at 4:37 AM, per...@pluto.rain.com wrote: Some early implementations of C++ operated as preprocessors that emitted C code. Is there any current tool that will do that? I didn't recognize any such option in the g++ manpage, although I suppose it's possible that one of the -fdump-tree- options would come close enough. Reason: I want to make what I think would be a fairly minor change to a small (1100-line) C++ program, but I don't know C++ -- only C -- and I don't understand the program well enough to mess with it. I suspect I would be able to figure out an equivalent C program. In case it matters, I'm using FreeBSD 8.1. http://www.comeaucomputing.com/ http://www.comeaucomputing.com/tryitout/ http://www.comeaucomputing.com/faqs/genfaq.html#ccompiler http://stackoverflow.com/questions/737257/code-convert-from-c-to-c Thank you very much . Mehmet Erol Sanliturk ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On Fri, Feb 24, 2012 at 09:34:02AM +, Matthew Seaman wrote: On 24/02/2012 09:08, Anton Shterenlikht wrote: Recently I started seeing this line in daily security output: Checking negative group permissions: 70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012 /var/spool/output/lpd/.seq I've a parallel printer attached to a 9.9-CURRENT #2 r230787M box. What does it mean? This means that non-root users in group daemon have only read permissions on that file. Users that aren't root and that aren't in group daemon have execute permission only. It does look a bit odd, and I believe that file would just contain a job number (IIRC -- haven't dealt much with lpd or lprng much recently) so executing it doesn't really achieve anything. This is the standard idiom to allow access for 'everyone, except members of a particular group.' yes, I get this. One way you can get weird permissions is if you happen to use decimal for permissions bitmaps rather than octal. A umask of '77' is not the same thing at all as a umask of '077'. (It's effectively 0115, which doesn't make much sense to me.) Most shells nowadays will assume you mean octal whether you include the leading zero or not: the same is not true if you use umask(2) to set the mask programatically. Ditto for other places you can set permissions like open(2) with O_CREAT or mkdir(2). # umask 0022 # pwd /var/spool/output/lpd # ls -al total 8 drwxr-xr-x 2 root daemon 512 Feb 24 12:43 . drwxr-xr-x 3 root daemon 512 Mar 9 2010 .. -rw-rw-r-- 1 root daemon 41 Feb 21 12:54 lock -rw-rw-r-- 1 root daemon 25 Feb 21 12:54 status # Then I print something: % pwd | lpr Then this .seq file appears with weird permissions: # ls -al total 10 drwxr-xr-x 2 root daemon 512 Feb 24 12:46 . drwxr-xr-x 3 root daemon 512 Mar 9 2010 .. -rw-rx 1 root daemon4 Feb 24 12:45 .seq -rw-rw-r-- 1 root daemon 41 Feb 24 12:45 lock -rw-rw-r-- 1 root daemon 25 Feb 24 12:45 status # # cat .seq 001 # So presumably lpd(8) created this file, but I'm still unsure why permissions are so strange. But interests me more, is why I didn't see it until about 1-2 months ago? Has something chaged in -current, e.g. in open(2) like you suggest? Or has I messed up with my setup? Or maybe it was always like this, but the security check didn't pick it up? Should I be worried? No more than a normal level of paranoia is indicated here. Thanks -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 331 5944 Fax: +44 (0)117 929 4423 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why is this Symbol in the front of your website. A humble request.
Hi, On Friday 24 February 2012 19:20:42 Julian H. Stacey wrote: Erich Dollansky wrote: On Friday 24 February 2012 14:14:32 Matthew Seaman wrote: On 24/02/2012 06:59, Erich Dollansky wrote: I live in Asia and they really have these things here. Just without the horns. That would be what most people call a ball. They have them in the west too... do they vibrate when they get moved? The Asian balls are more like bells. There is something inside which make them vibrate. Yes there's an acoustic element to them I recall, about 3.5 cm (2.54 it sounds like on some, it doesn't sound like in others. There are different diameters available. They are also a good tool to massage your own hands, get your back massages and - coming to the subject - do what people do with a thing looking like the famous logo. cm = 1) diameter, pack of 2. Pick one up it feels like an outer stainless steel shell, connected by springs to an inner weight. Reflex was to want to saw it apart to see what was inside, how they assembled the 2 halves. I suppose spot welding, then circular rim welding, then polishing then stainless steel finish ? I also wanted to do the same too but I never did. I have no idea how they are really manufactured. Erich ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
On 24 Feb 2012 at 12:37, Dag-Erling Smørgrav wrote: Dave d...@g8kbv.demon.co.uk writes: Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. It is public information: http://www.freebsd. org/doc/en_ US.ISO8859-1/articles/contributors/staff -committers.html DES -- Dag-Erling Smørgrav - d...@des.no Those address links need changing to graphic's, so that most address harvesting bots won't get anything usable. Mk1 eyeball can still see what's what, but if you have to use the info, you have to re-type it manually. Most other similar websites have done that sort of thing with great success. I can't believe in this day and age, info like that is still presented in a way that makes it harvister-bot friendly. Regards. Dave B. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On Fri, 24 Feb 2012 12:54-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 09:34:02AM +, Matthew Seaman wrote:
On 24/02/2012 09:08, Anton Shterenlikht wrote:
Recently I started seeing this line
in daily security output:
Checking negative group permissions:
70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012
/var/spool/output/lpd/.seq
I've a parallel printer attached to
a 9.9-CURRENT #2 r230787M box.
What does it mean?
This means that non-root users in group daemon have only read
permissions on that file. Users that aren't root and that aren't in
group daemon have execute permission only.
It does look a bit odd, and I believe that file would just contain a job
number (IIRC -- haven't dealt much with lpd or lprng much recently)
so executing it doesn't really achieve anything.
This is the standard idiom to allow access for 'everyone, except members
of a particular group.'
yes, I get this.
One way you can get weird permissions is if you happen to use decimal
for permissions bitmaps rather than octal. A umask of '77' is not the
same thing at all as a umask of '077'. (It's effectively 0115, which
doesn't make much sense to me.) Most shells nowadays will assume you
mean octal whether you include the leading zero or not: the same is not
true if you use umask(2) to set the mask programatically. Ditto for
other places you can set permissions like open(2) with O_CREAT or mkdir(2).
# umask
0022
# pwd
/var/spool/output/lpd
# ls -al
total 8
drwxr-xr-x 2 root daemon 512 Feb 24 12:43 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rw-r-- 1 root daemon 41 Feb 21 12:54 lock
-rw-rw-r-- 1 root daemon 25 Feb 21 12:54 status
#
Then I print something:
% pwd | lpr
Then this .seq file appears with weird permissions:
# ls -al
total 10
drwxr-xr-x 2 root daemon 512 Feb 24 12:46 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rx 1 root daemon4 Feb 24 12:45 .seq
-rw-rw-r-- 1 root daemon 41 Feb 24 12:45 lock
-rw-rw-r-- 1 root daemon 25 Feb 24 12:45 status
#
# cat .seq
001
#
So presumably lpd(8) created this file, but I'm still
unsure why permissions are so strange. But interests
me more, is why I didn't see it until about 1-2 months
ago? Has something chaged in -current, e.g. in open(2)
like you suggest? Or has I messed up with my setup?
Or maybe it was always like this, but the security
check didn't pick it up?
Should I be worried?
No more than a normal level of paranoia is indicated here.
Looking at usr.sbin/lpr/lpr/lpr.c at around line 847 (RELENG_9):
(void) snprintf(buf, sizeof(buf), %s/.seq, pp-spool_dir);
seteuid(euid);
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) 0) {
printf(%s: cannot create %s\n, progname, buf);
exit(1);
}
if (flock(fd, LOCK_EX)) {
printf(%s: cannot lock %s\n, progname, buf);
exit(1);
}
It remains a mystery why these files are created with mode 0661. Mode
0660 should be more than sufficient. Maybe it's because of flock(2),
but the manpage for flock(2) does not mention the execute bit at all.
The lpc enable/disable commands seem to affect only the group execute
bit of the lock file.
I haven't found any other source files where .seq files are created
or being used. Feel free to prove me wrong. :D
--
+---++
| Vennlig hilsen, | Best regards, |
| Trond Endrestøl, | Trond Endrestøl, |
| IT-ansvarlig, | System administrator, |
| Fagskolen Innlandet, | Gjøvik Technical College, Norway, |
| tlf. dir. 61 14 54 39, | Office.: +47 61 14 54 39, |
| tlf. mob. 952 62 567, | Cellular...: +47 952 62 567, |
| sentralbord 61 14 54 00. | Switchboard: +47 61 14 54 00. |
+---++___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On Fri, Feb 24, 2012 at 02:41:44PM +0100, Trond Endrest?l wrote:
On Fri, 24 Feb 2012 12:54-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 09:34:02AM +, Matthew Seaman wrote:
On 24/02/2012 09:08, Anton Shterenlikht wrote:
Recently I started seeing this line
in daily security output:
Checking negative group permissions:
70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012
/var/spool/output/lpd/.seq
I've a parallel printer attached to
a 9.9-CURRENT #2 r230787M box.
What does it mean?
This means that non-root users in group daemon have only read
permissions on that file. Users that aren't root and that aren't in
group daemon have execute permission only.
It does look a bit odd, and I believe that file would just contain a job
number (IIRC -- haven't dealt much with lpd or lprng much recently)
so executing it doesn't really achieve anything.
This is the standard idiom to allow access for 'everyone, except members
of a particular group.'
yes, I get this.
One way you can get weird permissions is if you happen to use decimal
for permissions bitmaps rather than octal. A umask of '77' is not the
same thing at all as a umask of '077'. (It's effectively 0115, which
doesn't make much sense to me.) Most shells nowadays will assume you
mean octal whether you include the leading zero or not: the same is not
true if you use umask(2) to set the mask programatically. Ditto for
other places you can set permissions like open(2) with O_CREAT or
mkdir(2).
# umask
0022
# pwd
/var/spool/output/lpd
# ls -al
total 8
drwxr-xr-x 2 root daemon 512 Feb 24 12:43 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rw-r-- 1 root daemon 41 Feb 21 12:54 lock
-rw-rw-r-- 1 root daemon 25 Feb 21 12:54 status
#
Then I print something:
% pwd | lpr
Then this .seq file appears with weird permissions:
# ls -al
total 10
drwxr-xr-x 2 root daemon 512 Feb 24 12:46 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rx 1 root daemon4 Feb 24 12:45 .seq
-rw-rw-r-- 1 root daemon 41 Feb 24 12:45 lock
-rw-rw-r-- 1 root daemon 25 Feb 24 12:45 status
#
# cat .seq
001
#
So presumably lpd(8) created this file, but I'm still
unsure why permissions are so strange. But interests
me more, is why I didn't see it until about 1-2 months
ago? Has something chaged in -current, e.g. in open(2)
like you suggest? Or has I messed up with my setup?
Or maybe it was always like this, but the security
check didn't pick it up?
Should I be worried?
No more than a normal level of paranoia is indicated here.
Looking at usr.sbin/lpr/lpr/lpr.c at around line 847 (RELENG_9):
(void) snprintf(buf, sizeof(buf), %s/.seq, pp-spool_dir);
seteuid(euid);
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) 0) {
printf(%s: cannot create %s\n, progname, buf);
exit(1);
}
if (flock(fd, LOCK_EX)) {
printf(%s: cannot lock %s\n, progname, buf);
exit(1);
}
It remains a mystery why these files are created with mode 0661. Mode
Isn't .seq above has mode 641?
% chmod 641 z
% ls -al z
-rw-rx 1 mexas wheel 0 Feb 24 13:59 z
%
--
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
On 02/24/12 20:42, Dave wrote: On 24 Feb 2012 at 17:28, Erich Dollansky wrote: Hi, On Friday 24 February 2012 17:10:21 Dave wrote: Can I please request, you all check your mail client reply to settings. I think, some - like me too - reply here always to all. Many of the replies to this thread, have also been sent to the 388 (was it) addresses in the original To: field, as well as the list. Wasn't it 389? :-) Might the list settings need tweaking a bit? Also, just where did he originaly harvest all those addresses from, are they publicly available, or is there a gaping hole in some server somewhere. Just collect all addresses from the list ending with freebsd.org? Erich Indeed, so some settings might do with a tweak, to at least obfuscate posters addresses, so that at least script kiddies are flumoxed. Actually, they're all the addresses found in the committers section of the site. No scripting required. As I've mentioned before, I'm not sure this is a troll as such. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On Fri, 24 Feb 2012 14:04-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 02:41:44PM +0100, Trond Endrest?l wrote:
On Fri, 24 Feb 2012 12:54-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 09:34:02AM +, Matthew Seaman wrote:
On 24/02/2012 09:08, Anton Shterenlikht wrote:
Recently I started seeing this line
in daily security output:
Checking negative group permissions:
70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012
/var/spool/output/lpd/.seq
I've a parallel printer attached to
a 9.9-CURRENT #2 r230787M box.
What does it mean?
This means that non-root users in group daemon have only read
permissions on that file. Users that aren't root and that aren't in
group daemon have execute permission only.
It does look a bit odd, and I believe that file would just contain a job
number (IIRC -- haven't dealt much with lpd or lprng much recently)
so executing it doesn't really achieve anything.
This is the standard idiom to allow access for 'everyone, except members
of a particular group.'
yes, I get this.
One way you can get weird permissions is if you happen to use decimal
for permissions bitmaps rather than octal. A umask of '77' is not the
same thing at all as a umask of '077'. (It's effectively 0115, which
doesn't make much sense to me.) Most shells nowadays will assume you
mean octal whether you include the leading zero or not: the same is not
true if you use umask(2) to set the mask programatically. Ditto for
other places you can set permissions like open(2) with O_CREAT or
mkdir(2).
# umask
0022
# pwd
/var/spool/output/lpd
# ls -al
total 8
drwxr-xr-x 2 root daemon 512 Feb 24 12:43 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rw-r-- 1 root daemon 41 Feb 21 12:54 lock
-rw-rw-r-- 1 root daemon 25 Feb 21 12:54 status
#
Then I print something:
% pwd | lpr
Then this .seq file appears with weird permissions:
# ls -al
total 10
drwxr-xr-x 2 root daemon 512 Feb 24 12:46 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rx 1 root daemon4 Feb 24 12:45 .seq
-rw-rw-r-- 1 root daemon 41 Feb 24 12:45 lock
-rw-rw-r-- 1 root daemon 25 Feb 24 12:45 status
#
# cat .seq
001
#
So presumably lpd(8) created this file, but I'm still
unsure why permissions are so strange. But interests
me more, is why I didn't see it until about 1-2 months
ago? Has something chaged in -current, e.g. in open(2)
like you suggest? Or has I messed up with my setup?
Or maybe it was always like this, but the security
check didn't pick it up?
Should I be worried?
No more than a normal level of paranoia is indicated here.
Looking at usr.sbin/lpr/lpr/lpr.c at around line 847 (RELENG_9):
(void) snprintf(buf, sizeof(buf), %s/.seq, pp-spool_dir);
seteuid(euid);
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) 0) {
printf(%s: cannot create %s\n, progname, buf);
exit(1);
}
if (flock(fd, LOCK_EX)) {
printf(%s: cannot lock %s\n, progname, buf);
exit(1);
}
It remains a mystery why these files are created with mode 0661. Mode
Isn't .seq above has mode 641?
% chmod 641 z
% ls -al z
-rw-rx 1 mexas wheel 0 Feb 24 13:59 z
%
It sure is, in all cases quoted above.
All handling of the .seq files seems to be contained within the
mktemps() function of usr.sbin/lpr/lpr/lpr.c.
The call to open(2) with the mode set to 0661 has been there since CVS
revision 1.1 of usr.sbin/lpr/lpr/lpr.c, see
http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin/lpr/lpr/lpr.c?annotate=1.45.2.1.2.1
No calls to chmod(2) of the .seq files anywhere else, as far as I can
tell.
I usually keep tight permissions on the spool directories, mode 0770.
It's still a mystery. Thus it's time to bring in people with more
knowledge on lpr and friends.
--
+---++
| Vennlig hilsen, | Best regards, |
| Trond Endrestøl, | Trond Endrestøl, |
| IT-ansvarlig, | System administrator, |
| Fagskolen Innlandet, | Gjøvik Technical College, Norway, |
| tlf. dir. 61 14 54 39, | Office.: +47 61 14 54 39, |
| tlf. mob. 952 62 567, | Cellular...: +47 952 62 567, |
| sentralbord 61 14 54 00. | Switchboard: +47 61 14 54 00. |
+---++___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
Re: SMTP error: 552 5.6.0 Headers too large (32768 max)
On 02/24/12 21:08, Arthur Chance wrote: On 02/23/12 22:55, Da Rock wrote: On 02/24/12 05:01, Julian H. Stacey wrote: Arthur Chance wrote: DO NOT FEED THE TROLL! Well spotted said :-) [snip] However misguided they are, they may believe strongly in this; so I'm not sure there is a troll per se. The evidence is that they have only targeted freebsd.org addresses, and only the questions list. If they were trolling, why not include all the other lists? A reasonable question but the discrepancies between My name is Roy Mathew. and From: Al Hadith allne...@gmail.com seem a typical indication of a troll. The sometimes mangled English after claiming an Anglo-Saxon name and the non sequitur final line also suggest troll. Finally, as far as I understand it, many followers of Islam would find the use of Al Hadith as an adopted name to be provocative. Yes, the OP may be a genuine seeker after truth, but my money's on troll. Agreed. But something doesn't smell right... The name, the address, the introduced name, the Islamic connotations; weird. The english sounded like some english teenagers, so thats no clue. The islamic name and the claim that the icon was offensive is the only aspect of this email that could ring true. There is more to this than meets the eye here, I'd say. Seeker of truth? Doubt it... no offense to those of the islamic (or others as well - christian specifically included) persuasion at all - this directed at the originator of the message, but truth is a matter of perspective. The sooner _all_ get that, the sooner life can move on and gain stability. This is just to clarify my comment - not to start a flame or further digression. Leave it alone and wait and see if nothing further happens... then we'll know whats what. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Converting C++ to C
On 02/24/12 22:07, Julian H. Stacey wrote: per...@pluto.rain.com wrote: Some early implementations of C++ operated as preprocessors that emitted C code. Is there any current tool that will do that? I didn't recognize any such option in the g++ manpage, although I suppose it's possible that one of the -fdump-tree- options would come close enough. Reason: I want to make what I think would be a fairly minor change to a small (1100-line) C++ program, but I don't know C++ -- only C -- and I don't understand the program well enough to mess with it. I suspect I would be able to figure out an equivalent C program. In case it matters, I'm using FreeBSD 8.1. One of the lists recently (maybe 2/3 weeks ago) carried a thread listing many C compilers past present. It started by discussing Clang V. GCC I can't remember which list, I don't think it was questions@ maybe hackers@ or current@. Questions. I started it... :) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On Fri, Feb 24, 2012 at 03:25:52PM +0100, Trond Endrest?l wrote:
On Fri, 24 Feb 2012 14:04-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 02:41:44PM +0100, Trond Endrest?l wrote:
On Fri, 24 Feb 2012 12:54-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 09:34:02AM +, Matthew Seaman wrote:
On 24/02/2012 09:08, Anton Shterenlikht wrote:
Recently I started seeing this line
in daily security output:
Checking negative group permissions:
70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012
/var/spool/output/lpd/.seq
I've a parallel printer attached to
a 9.9-CURRENT #2 r230787M box.
What does it mean?
This means that non-root users in group daemon have only read
permissions on that file. Users that aren't root and that aren't in
group daemon have execute permission only.
It does look a bit odd, and I believe that file would just contain a
job
number (IIRC -- haven't dealt much with lpd or lprng much recently)
so executing it doesn't really achieve anything.
This is the standard idiom to allow access for 'everyone, except
members
of a particular group.'
yes, I get this.
One way you can get weird permissions is if you happen to use decimal
for permissions bitmaps rather than octal. A umask of '77' is not the
same thing at all as a umask of '077'. (It's effectively 0115, which
doesn't make much sense to me.) Most shells nowadays will assume you
mean octal whether you include the leading zero or not: the same is
not
true if you use umask(2) to set the mask programatically. Ditto for
other places you can set permissions like open(2) with O_CREAT or
mkdir(2).
# umask
0022
# pwd
/var/spool/output/lpd
# ls -al
total 8
drwxr-xr-x 2 root daemon 512 Feb 24 12:43 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rw-r-- 1 root daemon 41 Feb 21 12:54 lock
-rw-rw-r-- 1 root daemon 25 Feb 21 12:54 status
#
Then I print something:
% pwd | lpr
Then this .seq file appears with weird permissions:
# ls -al
total 10
drwxr-xr-x 2 root daemon 512 Feb 24 12:46 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rx 1 root daemon4 Feb 24 12:45 .seq
-rw-rw-r-- 1 root daemon 41 Feb 24 12:45 lock
-rw-rw-r-- 1 root daemon 25 Feb 24 12:45 status
#
# cat .seq
001
#
So presumably lpd(8) created this file, but I'm still
unsure why permissions are so strange. But interests
me more, is why I didn't see it until about 1-2 months
ago? Has something chaged in -current, e.g. in open(2)
like you suggest? Or has I messed up with my setup?
Or maybe it was always like this, but the security
check didn't pick it up?
Should I be worried?
No more than a normal level of paranoia is indicated here.
Looking at usr.sbin/lpr/lpr/lpr.c at around line 847 (RELENG_9):
(void) snprintf(buf, sizeof(buf), %s/.seq, pp-spool_dir);
seteuid(euid);
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) 0) {
printf(%s: cannot create %s\n, progname, buf);
exit(1);
}
if (flock(fd, LOCK_EX)) {
printf(%s: cannot lock %s\n, progname, buf);
exit(1);
}
It remains a mystery why these files are created with mode 0661. Mode
Isn't .seq above has mode 641?
% chmod 641 z
% ls -al z
-rw-rx 1 mexas wheel 0 Feb 24 13:59 z
%
It sure is, in all cases quoted above.
All handling of the .seq files seems to be contained within the
mktemps() function of usr.sbin/lpr/lpr/lpr.c.
The call to open(2) with the mode set to 0661 has been there since CVS
revision 1.1 of usr.sbin/lpr/lpr/lpr.c, see
http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin/lpr/lpr/lpr.c?annotate=1.45.2.1.2.1
No calls to chmod(2) of the .seq files anywhere else, as far as I can
tell.
I usually keep tight permissions on the spool directories, mode 0770.
It seems I need 755, otherwise dialer and smmsp
will not have access:
# ls -al /var/spool/
total 28
drwxr-xr-x 8 root wheel 512 Nov 21 2009 .
drwxr-xr-x 25 root wheel 512 Jan 31 02:03 ..
drwxrwx--- 2 smmsp smmsp 512 Feb 24 03:39 clientmqueue
drwxrwxr-x 2 uucp dialer512 Jan 31 02:04 lock
drwxr-xr-x 2 root daemon512 Nov 21 2009 lpd
drwxr-xr-x 2 root daemon 14336 Feb 24 03:40 mqueue
drwx-- 2 root daemon512 Nov 21 2009 opielocks
drwxr-xr-x 3 root daemon512 Mar 9 2010 output
#
It's still a mystery. Thus it's time to bring in people with more
knowledge on lpr and friends.
sure
--
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Re: 9.0, Samba and two NICs
On 02/24/12 21:39, Ronny Mandal wrote: Hi! I have been running Samba on FreeBSD 9.0 with a wireless card. A share is connected to my W7 computer. To get more speed between the computers, I decided to activate the 1GBit- Ethernet on the FreeBSD and establish a direct connection (cross-link) to the W7. I gave the new connection a static IP/subnet: 10.0.0.2/255.0.0.0 for the FreeBSD and 10.0.0.1/255.0.0.0 for the W7. SSH works fine, however Samba is utilizing the wireless card. My smb.conf looks something like this: .. ;The 192-address is the wireless, ath0. 10.0.0.2 is age0 interfaces = 127.0.0.1 192.168.0.232 10.0.0.2 bind interfaces only = yes ; the two latter is the IPs of the W7 hosts allow = 127.0.0.1 192.168.0.117 10.0.0.1 If I remove the 192* in the hosts allow, my W7 looses access via smb. netstat tells me that it is listening to both interfaces. What might be wrong? What address is the w7 using? If it is using 192.X, that could be the problem. That or some variation... such as the w7 using wireless and 192.x? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.3-BETA1 installation problem
On Fri, 24 Feb 2012, Omer Faruk SEN wrote: Already done that but still habe the same issue. I can dd and sysctl but after installing without using W at disk label screen still no luck. I have also done sysctl kern.geom.debugflags=16 on fixit and restarted installation but still getting the same error. [Please don't top-post, it makes responding more difficult.] If you need to clear the old MBR the old way, use a LiveFS or Fixit shell and do this (as root): sysctl kern.geom.debugflags=16 and: dd if=/dev/zero of=/dev/adx oseek=1 bs=512 count=1 The sysctl is not necessary. The dd may not erase enough of the disk. It will erase a bsdlabel, but not the MBR/PMBR. As always, be warned that this will erase the partition table on that disk, so make sure it's the correct target disk and that you have full backups: dd if=/dev/zero of=/dev/adX bs=512 count=34 Replace X with the correct drive number. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On 24/02/2012 14:04, Anton Shterenlikht wrote:
Looking at usr.sbin/lpr/lpr/lpr.c at around line 847 (RELENG_9):
(void) snprintf(buf, sizeof(buf), %s/.seq, pp-spool_dir);
seteuid(euid);
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) 0) {
printf(%s: cannot create %s\n, progname, buf);
exit(1);
}
if (flock(fd, LOCK_EX)) {
printf(%s: cannot lock %s\n, progname, buf);
exit(1);
}
It remains a mystery why these files are created with mode 0661. Mode
Isn't .seq above has mode 641?
% chmod 641 z
% ls -al z
-rw-rx 1 mexas wheel 0 Feb 24 13:59 z
%
A umask setting of 022 would explain that.
--
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matt...@infracaninophile.co.uk Kent, CT11 9PW
signature.asc
Description: OpenPGP digital signature
mount options display (detailed)
Hi, how can I display detailed mount options, e.g. rw, async, acls, atime, ... This regarding local fs or NFS. 'mount' does not do that. jb ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: mount options display (detailed)
On 24/02/2012 15:56, jb wrote: how can I display detailed mount options, e.g. rw, async, acls, atime, ... This regarding local fs or NFS. 'mount' does not do that. mount -p This is actually something you could in theory have worked out from the mount(8) man page, so long as you knew what 'fstab format' meant. Perhaps that page could do with a little editing so that it doesn't assume so much prior knowledge of its readers. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
phpMyAdmin
I can't install phpMyAdmin on my FreeBSD-9.0 wx3# pkg_add -r phpMyAdmin Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/Latest/phpMyAdmin.tbz... Done. Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/All/pdflib-7.0.4.tbz: File unavailable (e.g., file not found, no access) Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/All/pecl-pdflib-2.1.8.tbz... Done. pkg_add: could not find package pdflib-7.0.4 ! pkg_add: pkg_add of dependency 'pecl-pdflib-2.1.8' failed! wx3# -- http://alexus.org/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.3-BETA1 installation problem
Warren Block wrote: On Fri, 24 Feb 2012, Omer Faruk SEN wrote: Already done that but still habe the same issue. I can dd and sysctl but after installing without using W at disk label screen still no luck. I have also done sysctl kern.geom.debugflags=16 on fixit and restarted installation but still getting the same error. [Please don't top-post, it makes responding more difficult.] If you need to clear the old MBR the old way, use a LiveFS or Fixit shell and do this (as root): sysctl kern.geom.debugflags=16 and: dd if=/dev/zero of=/dev/adx oseek=1 bs=512 count=1 The sysctl is not necessary. The dd may not erase enough of the disk. It will erase a bsdlabel, but not the MBR/PMBR. As always, be warned that this will erase the partition table on that disk, so make sure it's the correct target disk and that you have full backups: dd if=/dev/zero of=/dev/adX bs=512 count=34 Excellent idea here. It covers GPT too, for as if a Linux distro was on the disk previously, or anything else using GPT. For me I only needed the one because my problem was only a change from FBSD 6.2 to 7.x something, no GPT involved - my problem was only disklabel related. Replace X with the correct drive number. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Why is this Symbol in the front of your website. A humble request.
cm = 1) diameter, pack of 2. Pick one up it feels like an outer stainless steel shell, connected by springs to an inner weight. Reflex was to want to saw it apart to see what was inside, how they assembled the 2 halves. I suppose spot welding, then circular rim welding, then polishing then stainless steel finish ? I also wanted to do the same too but I never did. I have no idea how they are really manufactured. http://en.wikipedia.org/wiki/Ben_wa_balls Has nothing on welding/ manufacturing, just usage. Cheers, Julian -- Julian Stacey, BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com Reply below not above, cumulative like a play script, indent with . Format: Plain text. Not HTML, multipart/alternative, base64, quoted-printable. Mail from @yahoo dumped @berklix. http://berklix.org/yahoo/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: phpMyAdmin
On 24/02/2012 17:57, alexus wrote: I can't install phpMyAdmin on my FreeBSD-9.0 wx3# pkg_add -r phpMyAdmin Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/Latest/phpMyAdmin.tbz... Done. Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/All/pdflib-7.0.4.tbz: File unavailable (e.g., file not found, no access) Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/All/pecl-pdflib-2.1.8.tbz... Done. pkg_add: could not find package pdflib-7.0.4 ! pkg_add: pkg_add of dependency 'pecl-pdflib-2.1.8' failed! wx3# That's because print/pdflib has this statement in the port: RESTRICTED= many odd restrictions on usage and distribution which means packages for that port may not be available. Two options I can suggest: i) Install print/pdflib from ports -- everything else can come from packages, but pdflib is just painful and the licensing forces you to build from source. ii) Install phpmyadmin from ports, changing the options to turn off usage of pdflib. You won't be able to export stuff like DB schema to PDF files, but the rest of phpmyadmin's functionality will be there. Note: as phpmyadmin is pure PHP code, installing the port is just a matter of copying the files into place: hardly any difference to installing via package. Why can't pdflib just use a standard opensource license that eveyone knows how to deal with? Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
Re: CPAN hanging on ExtUtils::MakeMaker even if installed
I want to thank everyone who helped me out. I can confirm that the original issue (infinite delay and 100% CPU use while installing ExtUtils::MakeMaker from CPAN) is gone after upgrading to Perl 5.12. For some reason, the upgrade to 5.14 didn't work. Using portupgrade -o lang/perl-5.14 perl-5.8.9 (or something similar, but I can't remember it now) just reinstalled Perl 5.8. Using portupgrade -o lang/perl-5.12 perl-5.8.9 (or something similar) did work, though. I ended up using the www/rt40 port. Its nice to know that someone is putting in the effort on a port. Thanks to Matthew for that. And now I'm back to upgrading security/amavisd-new and mail/p5-Mail-SpamAssassin and other Perl based ports. :) I'm really glad that portupgrade exists on FreeBSD. Thanks all! Jaime -- Network Administrator Cairo-Durham Central School District http://cns.cairodurham.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Converting C++ to C
Julian H. Stacey j...@berklix.com wrote;
per...@pluto.rain.com wrote:
Reason: I want to make what I think would be a fairly minor
change to a small (1100-line) C++ program, but I don't know C++
-- only C -- and I don't understand the program well enough
to mess with it. I suspect I would be able to figure out an
equivalent C program.
In case it matters, I'm using FreeBSD 8.1.
One of the lists recently (maybe 2/3 weeks ago) carried a thread
listing many C compilers past present. It started by discussing
Clang V. GCC I can't remember which list, I don't think it was
questions@ maybe hackers@ or current@.
There _was_ a recent discussion on 'questions' -- I'm the 'guilty party'
responsible for naming a lot of the 'historical' ones.
That aside, for the OP:
C code generated from C++ will _not_ be very readable.
Basically, -everything- in C++ would get turned into a function invocation
in the generated C. With the _name_ of each such function having an encoded
representation of the type of each argument to that function (see 'function
name mangling). And the simple elementary data types tend to end up as
something like: **struct foo {bar value; (*(**struct foo)baz())[];}.
Some of the mayhem: _everything_ is 'double indirect' pointers, to support
run-time automatic garbage collection; 'methods' of acting on data elements
are pointers to functions, embedded in the data-element structure, even
basic 'four function calculator' arithmetic ops (they can be 'overlaid'
to do differnt things on different data types -- the '+' operator may
mean 'concatenation' when applied to two strings, or '+=' maay mean
'append item to list, in the contest of 'list += item', even though both
would *still* mean 'addition' when used with numeric items.)
One would be far better off spending some time to learn the basics of C++
syntax -- to be able to 'read' the existing code and understand what it's
doing. After that, if what you want to modiy -is- truely a 'minor' change,
adding some 'C-tyee' code to implement it is probably not that bad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: 8.3-BETA1 installation problem
I have done a simple dd if=/dev/zero of=/dev/ad6 count=100 bs=1m which i think covers all. But still no luck. Regards. On Fri, Feb 24, 2012 at 8:11 PM, Michael Powell nightre...@hotmail.comwrote: Warren Block wrote: On Fri, 24 Feb 2012, Omer Faruk SEN wrote: Already done that but still habe the same issue. I can dd and sysctl but after installing without using W at disk label screen still no luck. I have also done sysctl kern.geom.debugflags=16 on fixit and restarted installation but still getting the same error. [Please don't top-post, it makes responding more difficult.] If you need to clear the old MBR the old way, use a LiveFS or Fixit shell and do this (as root): sysctl kern.geom.debugflags=16 and: dd if=/dev/zero of=/dev/adx oseek=1 bs=512 count=1 The sysctl is not necessary. The dd may not erase enough of the disk. It will erase a bsdlabel, but not the MBR/PMBR. As always, be warned that this will erase the partition table on that disk, so make sure it's the correct target disk and that you have full backups: dd if=/dev/zero of=/dev/adX bs=512 count=34 Excellent idea here. It covers GPT too, for as if a Linux distro was on the disk previously, or anything else using GPT. For me I only needed the one because my problem was only a change from FBSD 6.2 to 7.x something, no GPT involved - my problem was only disklabel related. Replace X with the correct drive number. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Email issues, relay failure
Hi, I am responsible for a system I know little about. Sendmail all of a sudden stopped working...the sendmial is supposed to send to another machine. The senmail locally looks to deliver email to a que and the que looks to forward to another machine. However this looks to break.Can somebody help me diagnose and repair. It may be the remote machine never gets the email and thusly never delivers the email. Here is local machine response to my sending the following command echo test email from ccl `date` | mailx -s test email from ccl `date` c...@cell.com The que message show the following.. Running /var/spool/mqueue/q1OKcmpH017170 (sequence 1 of 20) c...@cell.com... Connecting to tools.wms.cellularatsea.com. via relay... c...@cell.com... Deferred: Connection timed out with tools.wms.cell.com. I can ping this machine via ping tools Is there supposed to be some type of handler on tools to accept messages. How would I know if it were postfix or sendmail? Is this possible to be on remote machine. CB Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Email issues, relay failure
On 02/24/2012 13:52, Bender, Chris wrote: Hi, I am responsible for a system I know little about. Sendmail all of a sudden stopped working...the sendmial is supposed to send to another machine. The senmail locally looks to deliver email to a que and the que looks to forward to another machine. However this looks to break.Can somebody help me diagnose and repair. It may be the remote machine never gets the email and thusly never delivers the email. Here is local machine response to my sending the following command echo test email from ccl `date` | mailx -s test email from ccl `date` c...@cell.com The que message show the following.. Running /var/spool/mqueue/q1OKcmpH017170 (sequence 1 of 20) c...@cell.com... Connecting to tools.wms.cellularatsea.com. via relay... c...@cell.com... Deferred: Connection timed out with tools.wms.cell.com. I can ping this machine via ping tools Is there supposed to be some type of handler on tools to accept messages. How would I know if it were postfix or sendmail? Is this possible to be on remote machine. CB Thanks ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org telnet remote_machine 25 does it connect to a mailer daemon? -- Dave Robison Sales Solution Architect II FIS Banking Solutions 510/621-2089 (w) 530/518-5194 (c) 510/621-2020 (f) da...@vicor.com david.robi...@fisglobal.com _ The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Email issues, relay failure
On Fri, 24 Feb 2012, Robison, Dave wrote: On 02/24/2012 13:52, Bender, Chris wrote: Sendmail all of a sudden stopped working...the sendmial is supposed to send to another machine. ...snip... echo test email from ccl `date` | mailx -s test email from ccl `date` c...@cell.com The que message show the following.. Running /var/spool/mqueue/q1OKcmpH017170 (sequence 1 of 20) c...@cell.com... Connecting to tools.wms.cellularatsea.com. via relay... c...@cell.com... Deferred: Connection timed out with tools.wms.cell.com. I can ping this machine via ping tools Is there supposed to be some type of handler on tools to accept messages. How would I know if it were postfix or sendmail? telnet remote_machine 25 does it connect to a mailer daemon? How you would know: You should see something like this: $ telnet remote_machine 25 Trying 192.168.1.1... Connected to remote_machine.mydomain.com Escape character is '^]'. 220 remote_machine.mydomain.com ESMTP Sendmail 8.14.3/8.14.3; Fri, 24 Feb 2012 19:44:05 -0500 (EST) Note the 'Sendmail'. I don't have a postfix server handy, but presumably it would not emit the S word. -- Chris Hill ch...@monochrome.org ** [ Busy Expunging / ] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: mount options display (detailed)
On Fri, 24 Feb 2012, Matthew Seaman wrote: On 24/02/2012 15:56, jb wrote: how can I display detailed mount options, e.g. rw, async, acls, atime, ... This regarding local fs or NFS. 'mount' does not do that. mount -p This is actually something you could in theory have worked out from the mount(8) man page, so long as you knew what 'fstab format' meant. Perhaps that page could do with a little editing so that it doesn't assume so much prior knowledge of its readers. From the man page: -p Print mount information in fstab(5) format. Implies also the -v option. 'mount -p' shows me something that looks a lot like my own /etc/fstab. It appears to be showing me what's mounted right now, but it does not display any mount options. This is on 8.0-STABLE; maybe things have changed in the Brave New World of Nine. -- Chris Hill ch...@monochrome.org ** [ Busy Expunging / ] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
On Fri, Feb 24, 2012 at 5:15 AM, Dave d...@g8kbv.demon.co.uk wrote: Those address links need changing to graphic's, so that most address harvesting bots won't get anything usable. Mk1 eyeball can still see what's what, but if you have to use the info, you have to re-type it manually. I really don't recommend that. Keep in mind not everyone can use the Mk1 eyeball. Websites need to be accessible to blind people using screen reader software, too. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: phpMyAdmin
2012/2/24, alexus ale...@gmail.com: I can't install phpMyAdmin on my FreeBSD-9.0 wx3# pkg_add -r phpMyAdmin Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/Latest/phpMyAdmin.tbz... Done. Error: Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/All/pdflib-7.0.4.tbz: File unavailable (e.g., file not found, no access) Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9.0-release/All/pecl-pdflib-2.1.8.tbz... Done. pkg_add: could not find package pdflib-7.0.4 ! pkg_add: pkg_add of dependency 'pecl-pdflib-2.1.8' failed! wx3# Hello, you can install phpmyadmin using .tar.gz, download the .tar.gz then put it in the path of your web server and use it, is very easy, you need: php, mysql, phpmysqli, php-mbstring, is enough http://www.phpmyadmin.net/home_page/downloads.php -- http://alexus.org/ ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org -- Edguitar ;) http://espejobinario.blogspot.com ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Security? [Re: Why is this Symbol in the front of your website. A humble request.]
On 02/25/12 12:03, David Brodbeck wrote: On Fri, Feb 24, 2012 at 5:15 AM, Daved...@g8kbv.demon.co.uk wrote: Those address links need changing to graphic's, so that most address harvesting bots won't get anything usable. Mk1 eyeball can still see what's what, but if you have to use the info, you have to re-type it manually. I really don't recommend that. Keep in mind not everyone can use the Mk1 eyeball. Websites need to be accessible to blind people using screen reader software, too. And therein lies the problem. How do you maintain accessibility while preventing bots from harvesting? You can't have your cake and eat it too... :) Only solution lies in a security gate of good filters and blocklists. But occasionally one or two will still pass. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
clang vs gcc linking problem
Hello! Absolutely not a flame war but would like to switch to clang in a project. Project uses ncurses. gcc works well but the executable fails when compiled other than -O0. Then I think I should change to clang which will becomes the default compiler in FreeBSD. With clang at linking time I got the following error: /usr/local/bin/ld: display/libsub_display.a(canvas.o): undefined reference to symbol 'keypad' /usr/local/bin/ld: note: 'keypad' is defined in DSO /usr/local/lib/libtinfow.so.6.0 so try adding it to the linker command line /usr/local/lib/libtinfow.so.6.0: could not read symbols: Invalid operation clang: error: linker command failed with exit code 1 (use -v to see invocation) *** Error code 1 With exactly the same flags gcc links successful. Any idea where is the problem and what is the solution? Thanks, a ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: negative group permissions?
On Fri, 24 Feb 2012 14:48-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 03:25:52PM +0100, Trond Endrest?l wrote:
On Fri, 24 Feb 2012 14:04-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 02:41:44PM +0100, Trond Endrest?l wrote:
On Fri, 24 Feb 2012 12:54-, Anton Shterenlikht wrote:
On Fri, Feb 24, 2012 at 09:34:02AM +, Matthew Seaman wrote:
On 24/02/2012 09:08, Anton Shterenlikht wrote:
Recently I started seeing this line
in daily security output:
Checking negative group permissions:
70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012
/var/spool/output/lpd/.seq
I've a parallel printer attached to
a 9.9-CURRENT #2 r230787M box.
What does it mean?
This means that non-root users in group daemon have only read
permissions on that file. Users that aren't root and that aren't in
group daemon have execute permission only.
It does look a bit odd, and I believe that file would just contain
a job
number (IIRC -- haven't dealt much with lpd or lprng much recently)
so executing it doesn't really achieve anything.
This is the standard idiom to allow access for 'everyone, except
members
of a particular group.'
yes, I get this.
One way you can get weird permissions is if you happen to use
decimal
for permissions bitmaps rather than octal. A umask of '77' is not
the
same thing at all as a umask of '077'. (It's effectively 0115,
which
doesn't make much sense to me.) Most shells nowadays will assume
you
mean octal whether you include the leading zero or not: the same is
not
true if you use umask(2) to set the mask programatically. Ditto for
other places you can set permissions like open(2) with O_CREAT or
mkdir(2).
# umask
0022
# pwd
/var/spool/output/lpd
# ls -al
total 8
drwxr-xr-x 2 root daemon 512 Feb 24 12:43 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rw-r-- 1 root daemon 41 Feb 21 12:54 lock
-rw-rw-r-- 1 root daemon 25 Feb 21 12:54 status
#
Then I print something:
% pwd | lpr
Then this .seq file appears with weird permissions:
# ls -al
total 10
drwxr-xr-x 2 root daemon 512 Feb 24 12:46 .
drwxr-xr-x 3 root daemon 512 Mar 9 2010 ..
-rw-rx 1 root daemon4 Feb 24 12:45 .seq
-rw-rw-r-- 1 root daemon 41 Feb 24 12:45 lock
-rw-rw-r-- 1 root daemon 25 Feb 24 12:45 status
#
# cat .seq
001
#
So presumably lpd(8) created this file, but I'm still
unsure why permissions are so strange. But interests
me more, is why I didn't see it until about 1-2 months
ago? Has something chaged in -current, e.g. in open(2)
like you suggest? Or has I messed up with my setup?
Or maybe it was always like this, but the security
check didn't pick it up?
Should I be worried?
No more than a normal level of paranoia is indicated here.
Looking at usr.sbin/lpr/lpr/lpr.c at around line 847 (RELENG_9):
(void) snprintf(buf, sizeof(buf), %s/.seq, pp-spool_dir);
seteuid(euid);
if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) 0) {
printf(%s: cannot create %s\n, progname, buf);
exit(1);
}
if (flock(fd, LOCK_EX)) {
printf(%s: cannot lock %s\n, progname, buf);
exit(1);
}
It remains a mystery why these files are created with mode 0661. Mode
Isn't .seq above has mode 641?
% chmod 641 z
% ls -al z
-rw-rx 1 mexas wheel 0 Feb 24 13:59 z
%
It sure is, in all cases quoted above.
All handling of the .seq files seems to be contained within the
mktemps() function of usr.sbin/lpr/lpr/lpr.c.
The call to open(2) with the mode set to 0661 has been there since CVS
revision 1.1 of usr.sbin/lpr/lpr/lpr.c, see
http://www.freebsd.org/cgi/cvsweb.cgi/src/usr.sbin/lpr/lpr/lpr.c?annotate=1.45.2.1.2.1
No calls to chmod(2) of the .seq files anywhere else, as far as I can
tell.
I usually keep tight permissions on the spool directories, mode 0770.
It seems I need 755, otherwise dialer and smmsp
will not have access:
# ls -al /var/spool/
total 28
drwxr-xr-x 8 root wheel 512 Nov 21 2009 .
drwxr-xr-x 25 root wheel 512 Jan 31 02:03 ..
drwxrwx--- 2 smmsp smmsp 512 Feb 24 03:39 clientmqueue
drwxrwxr-x 2 uucp dialer512 Jan 31 02:04 lock
drwxr-xr-x 2 root daemon512 Nov 21 2009 lpd
drwxr-xr-x 2 root daemon 14336 Feb 24 03:40 mqueue
drwx-- 2 root daemon512 Nov 21 2009 opielocks
