Re: Idea about 'skeleton jail

2005-03-12 Thread Frank Knobbe
On Mon, 2005-01-31 at 13:29 -0600, [EMAIL PROTECTED] wrote: > Very nice idea!! This greatly improves jail management on FreeBSD. There > is a possibility for a minor drawback -- if one can change a system binary > in the host system, them all jails are compromised -- but assuming one > would need r

Fix for bug in IPFilters ipfs tool

2007-03-11 Thread Frank Knobbe
Greetings, A couple years ago, I had sent a patch to Darren for ipfs in ipfilter (patched on FreeBSD 5.3). I never heard back from him, and assumed that either it wasn't in proper format or already being worked on or he was too busy. Now that I'm upgrading my systems to FBSD 6.2, I encountered th

FreeBSD on Cobalt Raq 4 (AMD)

2003-09-23 Thread Frank Knobbe
Greetings, I've got a Cobalt Raq 4 here which is AMD (K6) based and has Linux installed. Instead of using it as a foot stool, I'd like to put FBSD on it and put it to real use. I'm aware of the NetBSD-on-Raq CD stuff which only works on non Intel Raqs. The boot process seems to be the only hurdl

Re: Booting encrypted

2004-09-15 Thread Frank Knobbe
On Tue, 2004-09-07 at 15:22, Steve Watt wrote: > Having the password compiled in to something that's necessarily clear-text > on the same media? Sorry for being late... I'm still catching up on piles of email :) Instead of having a plaintext password on the same media, how about a mechanism that

Re: ZFS

2004-09-16 Thread Frank Knobbe
On Thu, 2004-09-16 at 11:20, Bruce M Simpson wrote: > On Thu, Sep 16, 2004 at 11:12:16AM -0400, Kevin A. Pieckiel wrote: > > Where on earth would you find a disk system that can store 2^64 bytes of > > data or larger, anyway? > > You can bet that somebody, somewhere, needs this right now. And som

Re: Booting encrypted

2004-09-16 Thread Frank Knobbe
On Wed, 2004-09-15 at 22:24, Bruce M Simpson wrote: > Using TCPA, you could lock down your device in this way, and extract the > symmetric key for the media from nonvolatile secure storage on the chip > once the OS has logged into it. Of course you'd have to sign the OS image > in such a way that b