Re: Reparing FreeBSD ports tree.

2005-01-25 Thread Peter Harmsen

Try pkgdb -F

greetz,

 Peter

On Tue, 25 Jan 2005 09:58:39 +0100
Christian Tischler <[EMAIL PROTECTED]> wrote:

> Hi everyone.
> My primary question is how to repair a broken ports tree. I did a 
> portupgrade to CVS FreeBSD 4.9 RELEASE, and now my ports tree ist all 
> screwed up. There are tons of wrong/failed/whatever dependencies and 
> some ports wont  work.
> How can I repair this problem without an complete reinstall of the 
> system? I have a lot of services running for my local net and a huge 
> amount of configurations.
> For exsample when I do /usr/ports/make index I get:
> --
> # make index
> Generating INDEX - please wait..apsfilter-7.2.5_5: 
> "/usr/ports/print/acroread5" non-existent -- dependency list incomplete
> ===> print/apsfilter failed
> *** Error code 1
> 1 error
> 
> The second question is who to reinstall e.g. apache without uninstalling 
> all the stuff that depends on it? e.g. When I did the portupgrade I 
> obviously did something wrong, and now the xml module is missing, which 
> is needed by some of my web aps.
> 
> I would be very glad if someone could point me out the nessesary steps 
> to clear this mess.
> 
> I really thought about an complete reinstallation of the system, but 
> everytime I install a new system I rn into dependency problems with the 
> ports collection, as one app requires a version of an tool, but another 
> dependence stops me from reinstalling the newer version. Is there an 
> general guideline to prevent this?
> 
> thx a lot in advance
> 
> Christian
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: portsdb -uU fails

2005-02-04 Thread Peter Harmsen
On Fri, 4 Feb 2005 03:34:43 -0800
Vonleigh Simmons <[EMAIL PROTECTED]> wrote:

> > When this happens, the easy answer is to user "make fetchindex" and 
> > then
> > only do a "portsdb -u".
> 
>   That worked fine. I'm confused though, am I not supposed to use the -U 
> flag at all?  Because after running those two I tried -Uu again and I 
> got the same error. If I'm not supposed to use -U, has it been replaced 
> by something or is it not necessary?
***
Well i have ran into the same situation.I just added f for force and afterwards 
i updated everything that could be upgraded.

So i most of the times use portsdb -Ufu and portupgrade -afrR or -arR 
serie/(meta-)app.This seems to work for me.Strange though because portsdb -Uu 
seemed to work for me until lately.

Peter Harmsen
 
> Vonleigh Simmons
> <http://illusionart.com/>
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Expected too much?

2005-02-04 Thread Peter Harmsen
On Fri, 4 Feb 2005 13:31:58 -0500
"Gustavo Cevallos" <[EMAIL PROTECTED]> wrote:

> I downloaded and installed FreeBSD 5.3 on a computer.  I go past the
login
> and password stage. Can I go to a full graphics mode? How?
> 
> Gustavo A. Cevallos
> AQUAS Inc.
> 5480 Wisconsin Av. Suite 210
> Chevy Chase, MD 20815
> Telf. 301 654 4000
> Fax. 301 654 4004
> 

Hello,

That's easy,install only windowmaker from the post-configuration screen
(apps section) . Launch a terminal,like dos prompt,su to root,and enter
"touch .xinitrc" , while you are there you might type "touch .xsession"
as well. after that edit the file: /etc/tty's ,you only have to change
off in on on line 8 (tty8...)

Effect is you get a ugly xdm login screen after reboot and you have at
least something to read the online Handbook with at www.freebsd.org,for
a fair start and further configuration examples.

Have fun,don't forget nothing is what it seems :-)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: /usr/ports/multimedia/mplayer

2005-02-05 Thread Peter Harmsen
On Fri, 4 Feb 2005 17:28:55 -0800 (PST)
Rob <[EMAIL PROTECTED]> wrote:

> 
> --- Chris Hodgins <[EMAIL PROTECTED]> wrote:
> 
> > Rob wrote:
> > > Gert Cuykens wrote:
> > > 
> > >>Stop in /usr/ports/multimedia/mplayer.
> > >>I#
> > >>
> > >>ok i am stuck here how can i display the configure
> > > 
> > > screen again so i
> > > 
> > >>can choise   other skins ?
> > > 
> > > 
> > > There's a problem with all/most skins size
> > mismatch
> > > in this port; I complained already, to no avail.
> > > Don't know why noone wants to fix this.
> > > 
> > > You can skip the checksum/size tests by setting
> > > 
> > >   setenv NO_CHECKSUM yes
> > > 
> > > (see man ports) and then try installing mplayer
> > again.
> > > 
> > > Rob.
> > 
> > Why don't you email the maintainer and ask them to
> > fix it.
> > 
> > $ cd /usr/ports/multimedia/mplayer-skins
> > $ make maintainer
> 
> I did that, but that should not stop you doing it
> again. Maybe you've got more luck.
> 
> Rob.
> 

I had *exactly* the same problems problems.I get the advise
to manually put everything in /usr/ports/distfiles/mplayer-skins.
Also installing xine from ports gave similar problems.
How is manually putting the files in place going to work
when the directories are auto cleaned?
I had to open a 2nd root term and cp-ing the files into
place while the portupgrade while busy (after autoclean).
Would be nice if there was an option with an argument
that would stop auto cleansing the directory where you 
manually add some files in the first place.

cheers,

A happy beastie-boy
>   
>   
> __ 
> Do you Yahoo!? 
> Yahoo! Mail - You care about security. So do we. 
> http://promotions.yahoo.com/new_mail
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: media players

2005-02-05 Thread Peter Harmsen
On Sat, 5 Feb 2005 09:46:38 -0800
Gary Kline <[EMAIL PROTECTED]> wrote:

> On Fri, Feb 04, 2005 at 10:57:04PM -0800, Loren M. Lang wrote:
> > On Thu, Feb 03, 2005 at 06:15:18PM +0100, Gert Cuykens wrote:
> > > I am looking for a media player that supports the oss sound driver,
> > > easy to install codex, and uses the gtk2 libs ?
> > 
> > xine is by far my favorite media app and has the best support for
> > playing dvds with menus.  It can use win32 codecs pretty well too.  It
> > doesn't use gtk2, but still has a very nice gui.  mplayer is also pretty
> > good, it can play dvds, but no real menu support that I've seen and
> > win32 codecs also work.  It has a gtk2 gui, but I think it's horrible.
> > I use just it's plain window interface and just use keyboard shortcuts
> > to control it.
> > 
> 
>   Can you (or anyone!) clue me in on how xine works?
>   Apps like RealPlayer just-work{TM}; mplayer has no
>   Quit button; xine looks lke something from Pluto.
> 
>   (Does xine work with links? netscapr7?  )
> 
>   gary


Xine works just like any other (hardware) dvd-player,especially
with the Celoma skins.Only thing you have to do is specifying
the input device under the media tab.Most dvd players will be
on "/dev/acdX" where X is 0,1,2... 


> 
> 
> 
> -- 
>Gary Kline [EMAIL PROTECTED]   www.thought.org Public service Unix
> 
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


re:How do i get KDM to launch KDE?

2005-02-24 Thread peter harmsen
Tried a .xinitrc instead of a .xsession ?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: cannot mount cdrom - not a newbie problem

2004-12-14 Thread Peter Harmsen
Giorgos Keramidas wrote:
On 2004-12-15 09:43, Timothy Smith <[EMAIL PROTECTED]> wrote:
 

titan# mount -t cd9660 /dev/cd0a /mount
cd9660: /dev/cd0a: Invalid argument
   

Try without *any* partition name:
titan# mount -t cd9660 /dev/cd0 /mount
Since /mount is a non-standard name, you _did_ check that /mount exists
as a directory right?
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 

Have you checked the acl rights of /dev/acd0 ?
On my PC i just installed FreeBSD 5.3  Issuing chgrp  "/dev/acd0"
+ chmod 770 "/dev/acd0" solved the problem.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


glxgears

2004-12-25 Thread Peter Harmsen
I have a FreeBSD box on a Elitegroup K7S5A mobo with a Asus TI4200 AGP 8x 
graphics card and AMD 512 MB sdram XP2000+ CPU.I get 3600 FPS with glxgears 
after i recompiled the kernel without agp and tweaked the Nvidia driver source 
a little.On a Linux box with AMD XP2500+ CPU with 1024 MB ddr and FX5700 card i 
only get 3200 FPS with glxgears.Quite remarkable to say the least.


Does anyone have a clue why this could have happened?



Merry Christmas and a good NewYear to everybody!
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: gdm2

2005-01-01 Thread Peter Harmsen
On Fri, 31 Dec 2004 21:07:12 +0100
"dusan >>" <[EMAIL PROTECTED]> wrote:



If your goal is to start Gnome,it's perhaps faster to edit /etc/ttys.
Change on line 8 in /etc/ttys "off" in "on" and "xdm" in "gdm".



> hi there. I have a little problem using gdm2 on 5.3, I am using actual 
> version in ports of gdm2 ad I can't add new session type to it. I have 
> added file user.desktop to /usr/X11R6/etc/dm/Sessions with this content 
> but without a result:
> 
> [Desktop Entry]
> Encoding=UTF-8
> Name=User
> Comment=This session executes your ~/.xinitc file
> Exec=~/.xinitrc
> TryExec=~/.xinitrc
> Icon=
> Type=Application
> 
> 
> 
> -- 
> -- . dusan . . jabber: [EMAIL PROTECTED]
> -- icq   : 322853999
> -- msn   : [EMAIL PROTECTED]
> --
> -- |  ____   _.--.
> -- |  \`.|\.....-'`   `-._.-'_.-'`
> -- |  /  ' ` ,   __.--'
> -- |  )/' _/ \   `-_,   /
> -- |  `-'" `"\_  ,_.-;_.-\_ ',
> -- |  _.-'_./   {_.'   ; /
> --   {_.-``-' {_/
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


MAC

2004-11-13 Thread Peter Harmsen
I have added an additional login class (the insecure class from the FreeBSD 
handbook example) to "/etc/login.conf".In /boot/loader.conf i entered all the 
necesary modules that should be loaded according to the FreeBSD handbook.
Allmost everything works execpt Xorg with nvidia driver installed.
I get the following mesage when running startx: ' xf86Vidmem:Address 0xde601000 
outside range '.Is something regulating or restricting the memory addresses, or 
should i add something to the example /etc/policy.contexts ?


kind regards,

Peter
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: MAC

2004-11-14 Thread Peter Harmsen
I'm trying to implement a Mandatory Access Controll setup, just like the one in 
the example of the FreeBSD handbook:15.14 Implementing a Secure Environment 
with MAC".The graphics card setup itself is very straight forward and didn't 
cause any problem(s).When i run "startx" i get the following 
mesage:xf86Vidmem:Address  0xde601000 outside allowed range.
This must be a configure / policy error.What keeps me busy is the spot
where to change or add something in order to increase the allowable memory 
range which is clearly regulated to much for getting xfree86 to
work.

kind regards,

Peter


On Sat, 13 Nov 2004 14:03:20 -0500
Louis LeBlanc <[EMAIL PROTECTED]> wrote:

> On 11/13/04 07:14 PM, Peter Harmsen sat at the `puter and typed:
> > I have added an additional login class (the insecure class from the
> > FreeBSD handbook example) to "/etc/login.conf".In /boot/loader.conf
> > i entered all the necesary modules that should be loaded according
> > to the FreeBSD handbook.
> > Allmost everything works execpt Xorg with nvidia driver installed.
> > I get the following mesage when running startx: ' xf86Vidmem:Address
> > 0xde601000 outside range '.Is something regulating or restricting
> > the memory addresses, or should i add something to the example
> > /etc/policy.contexts ?
> 
> 
> I'm using Xorg with NVIDIA and I'm having no trouble at all.  Not to
> say it was easy.
> 
> What's your Card config?
> 
> I doubt mine will apply directly to your setup, since I'm using a dual
> head setup, but the card itself is configured as follows:
> 
> Section "Device"
> Identifier "NV AGP TwinView"
> VendorName  "nVidia Corporation"
> Driver "nvidia"
> # update this with the PCI id of your card.  Consult the output
> # of the 'lspci' command. The  BusID is usually optional when
> # only using one graphics card.
> BusID   "PCI:1:0:0"
> BoardName   "NV34 [GeForce FX 5200]"
> 
> # sample twinview setup
> Option "TwinView"
> Option "SecondMonitorHorizSync" "31-80"
> Option "SecondMonitorVertRefresh"   "56-75"
> Option "TwinViewOrientation""RightOf"
> Option "MetaModes"  "1280x1024,1280x1024; 1024x768,1024x768"
> Option "ConnectedMonitor"   "crt,crt"
> EndSection
> 
> It should be fairly easy to figure out which options are related to
> the dual setup (all of the "Option" entries, actually).  Notice I
> don't have any memory info defined.  The driver will detect that
> automagically:
> 
> (--) NVIDIA(0): VideoRAM: 131072 kBytes
> 
> This is from /var/log/Xorg.0.log, and it indicates the available
> memory was probed.
> 
> HTH & Good luck
> Lou
> -- 
> Louis LeBlanc   [EMAIL PROTECTED]
> Fully Funded Hobbyist, KeySlapper Extrordinaire :)
> http://www.keyslapper.org ԿԬ
> 
> Commitment, n.:
>   [The difference between involvement and] Commitment can be
>   illustrated by a breakfast of ham and eggs.  The chicken was
>   involved, the pig was committed.
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Exiscan+clamav

2004-11-15 Thread Peter Harmsen

Hello Ryan,


Are you sure the clamd deamon is running ?


On Mon, 15 Nov 2004 20:20:31 -0600
"Adam M Ryan" <[EMAIL PROTECTED]> wrote:

> Right now I am using Exim 4.43 and clamav-0.80_1 both installed from ports.
> I am trying to get clamav to scan incoming email.  I have altered my exim
> configure file with the following:
> 
> av_scanner=clamd:/var/run/clamav/clamd
> 
> 
> 
>deny message = This message contains malware ($malware_name)
> demime  = *
> malware = *
> 
> 
> I have also double checked everything in
> /usr/ports/mail/exim/files/POST-INSTALL-NOTES.clamd.
> 
> But I still can't get my emailed scanned by clamav.
> 
> Does anyone have a working configure file that they could post?
> 
> Below is my version:
> 
> 
> Thanks!
> 
> Adam
> 
> 
> ---
> 
> ##
> #  Runtime configuration file for Exim   #
> ##
> 
> 
> # This is a default configuration file which will operate correctly in #
> uncomplicated installations. Please see the manual for a complete list # of
> all the runtime configuration options that can be included in a #
> configuration file. There are many more than are mentioned here. The #
> manual is in the file doc/spec.txt in the Exim distribution as a plain #
> ASCII file. Other formats (PostScript, Texinfo, HTML, PDF) are available #
> from the Exim ftp sites. The manual is also online at the Exim web sites.
> 
> 
> # This file is divided into several parts, all but the first of which are #
> headed by a line starting with the word "begin". Only those parts that # are
> required need to be present. Blank lines, and lines starting with # # are
> ignored.
> 
> 
> ### IMPORTANT ## IMPORTANT ### IMPORTANT ###
> #  #
> # Whenever you change Exim's configuration file, you *must* remember to#
> # HUP the Exim daemon, because it will not pick up the new configuration   #
> # until you do. However, any other Exim processes that are started, for#
> # example, a process started by an MUA in order to send a message, will#
> # see the new configuration as soon as it is in place. #
> #  #
> # You do not need to HUP the daemon for changes in auxiliary files that#
> # are referenced from this file. They are read every time they are used.   #
> #  #
> # It is usually a good idea to test a new configuration for syntactic  #
> # correctness before installing it (for example, by running the command#
> # "exim -C /config/file.new -bV"). #
> #  #
> ### IMPORTANT ## IMPORTANT ### IMPORTANT ###
> 
> 
> 
> ##
> #MAIN CONFIGURATION SETTINGS #
> ##
> 
> # Specify your host's canonical name here. This should normally be the fully
> # qualified "official" name of your host. If this option is not set, the #
> uname() function is called to obtain the name. In many cases this does # the
> right thing and you need not set anything explicitly.
> 
> # primary_hostname =
> 
> 
> # The next three settings create two lists of domains and one list of hosts.
> # These lists are referred to later in this configuration using the syntax #
> +local_domains, +relay_to_domains, and +relay_from_hosts, respectively. They
> # are all colon-separated lists:
> 
> domainlist local_domains = @
> domainlist relay_to_domains =
> hostlist   relay_from_hosts = localhost
> 
> # Most straightforward access control requirements can be obtained by #
> appropriate settings of the above options. In more complicated situations,
> you # may need to modify the Access Control List (ACL) which appears later
> in this # file.
> 
> # The first setting specifies your local domains, for example:
> #
> #   domainlist local_domains = my.first.domain : my.second.domain
> #
> # You can use "@" to mean "the name of the local host", as in the default #
> setting above. This is the name that is specified by primary_hostname, # as
> specified above (or defaulted). If you do not want to do any local #
> deliveries, remove the "@" from the setting above. If you want to accept
> mail # addressed to your host's literal IP address, for example, mail
> addressed to # "[EMAIL PROTECTED]", you can add "@[]" as an item in the
> local domains # list. You also need to uncomment "allow_domain_literals"
> below. This is not # recommended for tod

MAC

2004-11-15 Thread Peter Harmsen
I'm trying to implement a Mandatory Access Controll setup, just like the one in 
the example of the FreeBSD handbook:15.14 Implementing a Secure Environment 
with MAC".The graphics card setup itself is very straight forward and didn't 
cause any problem(s).When i run "startx" i get the following 
mesage:xf86Vidmem:Address  0xde601000 outside allowed range.
This must be a configure / policy error.What keeps me busy is the spot
where to change or add something in order to increase the allowable memory 
range which is clearly regulated to much for getting xfree86 to
work ( with MAC,without it's a nobrainer)

kind regards,

Peter
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: MAC

2004-11-17 Thread Peter Harmsen
Hello Robert,
I'm very pleased to hear about ktrace.I think i have a good chance to  
tacle the spot
that regulates the allowable memory range which prevents XFree86 to work  
in conjunction
with MAC.As far as the policy is concerned i'm using the default policy  
from the FreeBSD
handbook,a little altered to suit my system.I don't use a LOMAC policy yet.
I used the following:

mac_biba_load="YES"
mac_mls_load="YES"
mac_seeotheruids_load="YES"
mac_partition_load="YES"
"The login class is required otherwise users will be refused access to  
common commands such as vi(1). The following sh script should do the  
trick:"

# for x in `awk -F: '($3 >= 1001) && ($3 != 65534) { print $1 }' \
/etc/passwd`; do pw usermod $x -L insecure; done;
I added the following insecure class to /etc/login.conf:
insecure:\
:copyright=/etc/COPYRIGHT:\
:welcome=/etc/motd:\
:setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
:path=~/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin
:manpath=/usr/share/man /usr/local/man:\
:nologin=/usr/sbin/nologin:\
:cputime=1h30m:\
:datasize=8M:\
:vmemoryuse=100M:\
:stacksize=2M:\
:memorylocked=4M:\
:memoryuse=8M:\
:filesize=8M:\
:coredumpsize=8M:\
:openfiles=24:\
:maxproc=32:\
:priority=0:\
:requirehome:\
:passwordtime=91d:\
:umask=022:\
:ignoretime@:\
:label=partition/13,mls/5:
While i still got the Xvidmem memory not in the allowable range error  
mesage, i decided to
change stacksize=2M in stacksize=unlimited (default login class setting)  
upto every setting
in /etc/login.conf i suspected to be the cause of the problem.



# This is the default BIBA/MLS policy for this system.
.*  biba/high,mls/high
/sbin/dhclient  biba/high(low),mls/high(low)
/dev(/.*)?  biba/equal,mls/equal
# This is not an exhaustive list of all "privileged" devices.
/dev/mdctl  biba/high,mls/high
/dev/pcibiba/high,mls/high
/dev/k?mem  biba/high,mls/high
/dev/io biba/high,mls/high
/dev/agp.*  biba/high,mls/high
(/var)?/tmp(/.*)?   biba/equal,mls/equal
/tmp/\.X11-unix biba/high(equal),mls/high(equal)
/tmp/\.X11-unix/.*  biba/equal,mls/equal
/proc(/.*)? biba/equal,mls/equal
/mnt.*  biba/low,mls/low
(/usr)?/homebiba/high(low),mls/high(low)
(/usr)?/home/.* biba/low,mls/low
/var/mail(/.*)? biba/low,mls/low
/var/spool/mqueue(/.*)? biba/low,mls/low
(/mnt)?/cdrom(/.*)? biba/high,mls/high
(/usr)?/home/(ftp|samba)(/.*)?  biba/high,mls/high
/var/log/sendmail\.st   biba/low,mls/low
/var/run/utmp   biba/equal,mls/equal
/var/log/(lastlog|wtmp) biba/equal,mls/equal
I enabled this policy with:
# setfsmac -ef /etc/policy.contexts /
# setfsmac -ef /etc/policy.contexts /usr
According to the FreeBSD handbook, /etc/mac.conf would require:
default_labels file ?biba,?mls
default_labels ifnet ?biba,?mls
default_labels process ?biba,?mls,?partition
default_labels socket ?biba,?mls
Since the default /etc/mac.conf is a complement of the above labels, i  
left it as it was, perhaps,
i shouldn't.

On Wed, 17 Nov 2004 10:33:44 + (GMT), Robert Watson  
<[EMAIL PROTECTED]> wrote:

On Tue, 16 Nov 2004, Peter Harmsen wrote:
I'm trying to implement a Mandatory Access Controll setup, just like the
one in the example of the FreeBSD handbook:15.14 Implementing a Secure
Environment with MAC".The graphics card setup itself is very straight
forward and didn't cause any problem(s).When i run "startx" i get the
following mesage:xf86Vidmem:Address 0xde601000 outside allowed range.
This must be a configure / policy error.What keeps me busy is the spot
where to change or add something in order to increase the allowable
memory range which is clearly regulated to much for getting xfree86 to
work ( with MAC,without it's a nobrainer)
What policies are you currently enabling in your kernel?  Some of them
will limit access to device drivers, which may prevent X11 from accessing
the devices, resulting in errors that are sometimes difficult to debug
(for example, for several years, XFree86 would incorrectly report that
access to /dev/vga was denied, when it was actually /dev/io -- /dev/vga
doesn't even exist on FreeBSD).
You may find ktrace helpful in debugging this, as it will allow you to
trace the system calls in the binary and see where things go wrong.
Support for Audit, the tracing of security-related events, is currently
being worked on, but it may be a release or two before it's ready for  
use.

Robert N M Watson FreeBSD Core Team, TrustedBSD Projects
[EMAIL PROTECTED]  Principal Research Scientist, McAfee  
Research


Re: Release 5.3 downloadable versione

2004-11-17 Thread Peter Harmsen

The downloadable version is complete.During installing the installer asks  
you
how much source you want to install, the X11 system as well.Once  
everything is installed
it's just a matter of "make install clean" in /usr/ports/x11-wm/.
Last but not least make a .xinitrc with "touch .xinitrc" and put "exec  
wmaker" in it if you
have chosen to install windowmaker, for kde it's "exec startkde".



On Wed, 17 Nov 2004 08:51:36 +, Josh Paetzel <[EMAIL PROTECTED]> wrote:
On Wednesday 17 November 2004 14:47, Luca wrote:
Hi, I download Freebsd 5.3 (i386) but I noticed that sysinstall has
not the X configurator. Why? Is there a new tool outside Sysinstall
or the downloadable version is not complete?
Luca
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/x11.html
Should get you going in the right direction

--
Using Opera's revolutionary e-mail client: http://www.opera.com/m2/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"