Re: Is it possible to suspend to disk with geli+Root on ZFS installation

2013-10-13 Thread Ian Smith
On Sun, 13 Oct 2013 13:17:20 +1000, yudi v wrote: > On Mon, Sep 30, 2013 at 2:47 AM, Ian Smith wrote: > > In freebsd-questions Digest, Vol 486, Issue 7, Message: 5 > > On Sat, 28 Sep 2013 16:25:33 +0200 Roland Smith wrote: > > > On Fri, Sep 27, 2013 at 05:37:55PM +1000, yudi v wrote: > > >

Re: Is it possible to suspend to disk with geli+Root on ZFS installation

2013-10-12 Thread yudi v
On Mon, Sep 30, 2013 at 2:47 AM, Ian Smith wrote: > In freebsd-questions Digest, Vol 486, Issue 7, Message: 5 > On Sat, 28 Sep 2013 16:25:33 +0200 Roland Smith wrote: > > On Fri, Sep 27, 2013 at 05:37:55PM +1000, yudi v wrote: > > > Hi all, > > > > > > Is it possible to suspend to disk (hiber

Re: Is it possible to suspend to disk with geli+Root on ZFS installation

2013-09-29 Thread Ian Smith
In freebsd-questions Digest, Vol 486, Issue 7, Message: 5 On Sat, 28 Sep 2013 16:25:33 +0200 Roland Smith wrote: > On Fri, Sep 27, 2013 at 05:37:55PM +1000, yudi v wrote: > > Hi all, > > > > Is it possible to suspend to disk (hibernate) when using geli for full disk > > encryption. > > A

Re: Is it possible to suspend to disk with geli+Root on ZFS installation

2013-09-28 Thread Roland Smith
On Fri, Sep 27, 2013 at 05:37:55PM +1000, yudi v wrote: > Hi all, > > Is it possible to suspend to disk (hibernate) when using geli for full disk > encryption. As far as I can tell, FreeBSD doesn't support suspend to disk on all architectures. On amd64 the necessary infrastructure doesn't exist,

Is it possible to suspend to disk with geli+Root on ZFS installation

2013-09-28 Thread Ian Smith
In freebsd-questions Digest, Vol 486, Issue 5, Message: 18 On Fri, 27 Sep 2013 17:37:55 +1000 yudi v wrote: > Hi all, > > Is it possible to suspend to disk (hibernate) when using geli for full disk > encryption. My set-up is listed below. So I am going to have an encrypted > container and Z

Is it possible to suspend to disk with geli+Root on ZFS installation

2013-09-27 Thread yudi v
e file system where geliutility is stored (so the root pool cannot be suspended?) And the onetime option does not support geli suspend. Thank you. Yudi PS. I haven't received any response to the email below, if someone would still like to answer some of the questions at the end, that would b

geli+Root on ZFS installation

2013-09-20 Thread yudi v
Hi, I managed to install with "geli+root on ZFS" setup but have a few questions. Most of the instructions just list commands but offer very little explanation. I adapted the instructions in https://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/9.0-RELEASE to suit my needs. Here's the

Re: Adding another mirror to existing ZFS-root mirror?

2013-07-17 Thread krad
It should boot, although i havent run that configuration myself so cant say for certain have a look at gpart backup and restore for the labels, as you might as well make them the same and expand any swap space across all four drives. DOnt forget to install the bootloader as well Alternatively you

Adding another mirror to existing ZFS-root mirror?

2013-07-15 Thread Scott Ballantyne
Hi, I have the current situation: sdb@gigawattmomma$ zpool status zroot NAME STATE READ WRITE CKSUM zroot ONLINE 0 0 0 mirror-0 ONLINE 0 0 0 gpt/disk0 ONLINE 0 0 0 gpt/disk1 O

Re: A very 'trivial' question about /root

2013-06-28 Thread jb
Julian H. Stacey berklix.com> writes: > > jb.1234abcd gmail.com 's ref to > https://bugzilla.redhat.com/show_bug.cgi?id=578470 > relates to Linux upgrade procedures & /root > I don't see it affects how we should perceive an idealised Unix. > The upgr

Re: A very 'trivial' question about /root

2013-06-28 Thread Lowell Gilbert
Polytropon writes: > On Fri, 28 Jun 2013 15:25:44 +0200, Julian H. Stacey wrote: >> ( I'd guess OpenBSD might go for a tighter /root though, as they're >> supposedly keen on security. ) > > Currently I've got no OpenBSD installation at hand to verify, >

Re: A very 'trivial' question about /root

2013-06-28 Thread Polytropon
On Fri, 28 Jun 2013 15:25:44 +0200, Julian H. Stacey wrote: > Before we might ask (via send-pr) for it to be commited, > we should various of us run > chmod 750 /root;chown root:wheel /root > & give it a couple of months to see if problems. Done years ago: drwxr-x--- 7

Re: A very 'trivial' question about /root

2013-06-28 Thread Julian H. Stacey
missions, many of them are common to many > > > Unices. > > > I agree that the installer doesn't put anything secret but as a home dir > > > for the root user it's highly likely that something not intended to be > > > publicly readable will end up there soon a

Re: A very 'trivial' question about /root

2013-06-28 Thread Daniel Feenberg
On Fri, 28 Jun 2013, ASV wrote: Hi Julian, you played Devil's advocate well actually as I don't know which idea would be more audacious, letting httpd access files from your root dir or exporting /root via nfs. :) Both of them sound more like a lab scenario than a real one.

Re: A very 'trivial' question about /root

2013-06-28 Thread ASV
Hi Julian, you played Devil's advocate well actually as I don't know which idea would be more audacious, letting httpd access files from your root dir or exporting /root via nfs. :) Both of them sound more like a lab scenario than a real one. I understand that launching a "chmod 70

Re: A very 'trivial' question about /root

2013-06-27 Thread jb
and/or save time. I think the 0755 permissions for /root are correct as default. If you are concerned about "others", you harden it to 0750 (after all you are the boos, the "root", anyway). Otherwise, you may create conditions which cause trouble for others, for example: https://b

Re: A very 'trivial' question about /root

2013-06-27 Thread Julian H. Stacey
are common to many > Unices. > I agree that the installer doesn't put anything secret but as a home dir > for the root user it's highly likely that something not intended to be > publicly readable will end up there soon after the installation. > Which IMHO it's true als

Re: A very 'trivial' question about /root

2013-06-27 Thread ASV
Thanks for your reply Polytropon, I'm using FreeBSD since few years already and I'm kind of aware of the "dynamics" related to permissions, many of them are common to many Unices. I agree that the installer doesn't put anything secret but as a home dir for the root use

Re: A very 'trivial' question about /root

2013-06-26 Thread Polytropon
On Wed, 26 Jun 2013 23:34:41 +0200, ASV wrote: > There's any reason (and should be a fairly good one) why the /root > directory permissions by default are set to 755 (for sure on releases > 8.0/8.1/9.0/9.1) This is the default permission for user directories, as root is consid

Re: A very 'trivial' question about /root

2013-06-26 Thread Lowell Gilbert
ASV writes: > This is a very 'trivial' question but it's bugging me since quite a > while now so I gotta ask. > > There's any reason (and should be a fairly good one) why the /root > directory permissions by default are set to 755 (for sure on releases > 8.0

Re: A very 'trivial' question about /root

2013-06-26 Thread Reed Loefgren
On 06/26/13 15:47, Ayan George wrote: > ASV: >> This is a very 'trivial' question but it's bugging me since quite a >> while now so I gotta ask. >> >> There's any reason (and should be a fairly good one) why the /root >> directory permissions b

Re: A very 'trivial' question about /root

2013-06-26 Thread Ayan George
ASV: > This is a very 'trivial' question but it's bugging me since quite a > while now so I gotta ask. > > There's any reason (and should be a fairly good one) why the /root > directory permissions by default are set to 755 (for sure on releases > 8.0/8.1/9.

A very 'trivial' question about /root

2013-06-26 Thread ASV
This is a very 'trivial' question but it's bugging me since quite a while now so I gotta ask. There's any reason (and should be a fairly good one) why the /root directory permissions by default are set to 755 (for sure on releases 8.0/8.1/9.0/9.1)???

Re: setup journaling for root partition

2013-06-03 Thread Adam Vande More
On Tue, May 21, 2013 at 9:46 AM, Michael Sierchio wrote: > AFAIK Softupdates journaling still breaks snapshot functionality - which > makes it unusable for me. I wouldn't assume that the O.P. doesn't want we > he's asking for. Fixed awhile ago unless there is new bug on that. Haven't tried. htt

when root partition is mounted in boot time?

2013-05-27 Thread saeedeh motlagh
hello all, i have a question about root partition. i want to know when this partition is mounted in bootstrap process? is root mounted before kernel loading? more over, i heard that root partition is mounted read-only in boot process before loading kernel. after that kernel is loaded and all

Re: setup journaling for root partition

2013-05-24 Thread s m
hy i can not do any thing in fixit mode:( >>> >>> is this a true procedure? i mean maybe i should do any thing else >>> because >>> freebsd handbook set journaling for user partition in single user mode >>> not >>> in fixit mode. i test it and it

Re: setup journaling for root partition

2013-05-23 Thread Warren Block
artition in single user mode not in fixit mode. i test it and it works well, but for root partition i can not do the same because root partition can not be unmount in single user mode. any hints or comments are really appreciated. thanks in advance Hi, i remember having similar error messa

Re: setup journaling for root partition

2013-05-23 Thread s m
l partition for your root partition? can you tell me step by step to compare it with my steps? i really don't know how to set a journal partition for my root:(( i think it is so simple but it make me busy more than a week:( On Thu, May 23, 2013 at 3:34 PM, RW wrote: > On Thu, 23 May 201

Re: setup journaling for root partition

2013-05-23 Thread RW
On Thu, 23 May 2013 09:57:50 +0430 s m wrote: > my problem is, i can not run gjournal command for root partition in > fixit mode nor single user mode. Just to check, you did boot into single user mode rather than shut-down into single use

Re: setup journaling for root partition

2013-05-23 Thread Torsten Hantzsche
test it and it works well, but for root partition i can not do the same because root partition can not be unmount in single user mode. any hints or comments are really appreciated. thanks in advance Hi, i remember having similar error messages with glabel some years ago. The solution w

Re: setup journaling for root partition

2013-05-22 Thread s m
itted). and -v return no extra log. i don't know why i can not do any thing in fixit mode:( is this a true procedure? i mean maybe i should do any thing else because freebsd handbook set journaling for user partition in single user mode not in fixit mode. i test it and it works well, but

Re: setup journaling for root partition

2013-05-22 Thread Michael Sierchio
On Wed, May 22, 2013 at 10:53 PM, s m wrote: > thanks Michael for your quick reply:) > yes, i can boot from usb freebsd flash and use fixit mode. > i have root, var, tmp, usr and swap on my system. i create an extra swap > partition to use it as journal provider for root partition.

Re: setup journaling for root partition

2013-05-22 Thread s m
thanks Michael for your quick reply:) yes, i can boot from usb freebsd flash and use fixit mode. i have root, var, tmp, usr and swap on my system. i create an extra swap partition to use it as journal provider for root partition. in fixit mode, first i run two below command in order to abel load

Re: setup journaling for root partition

2013-05-22 Thread Michael Sierchio
s1g as > journal provider for ad3s1a and create ad3s1a.journal which contains ad3s1a > as data provider and ad3s1g as journal provider. > > my problem is, i can not run gjournal command for root partition in fixit > mode nor single user mode. you mean, i should just use tunefs comman

Re: setup journaling for root partition

2013-05-22 Thread s m
h contains ad3s1a as data provider and ad3s1g as journal provider. my problem is, i can not run gjournal command for root partition in fixit mode nor single user mode. you mean, i should just use tunefs command on ad3s1X (root partition)? if yes, then where journal provider for root partition

Re: setup journaling for root partition

2013-05-21 Thread Michael Sierchio
s. i can do it for all > partitions except root in single user mode. i can not do it for root > because i can not unmount root in single user mode. > > No, but you don't need to. In single user mode, root is mounted read-only. You can run

Re: setup journaling for root partition

2013-05-21 Thread s m
thanks guys for your attentions. i want to setup journaling in FreeBSD 8.2. i compare soft-update and journaling and choose journaling (it is more suitable for my goals). i want to enable journaling for all my partitions. i can do it for all partitions except root in single user mode. i can not

Re: setup journaling for root partition

2013-05-21 Thread Michael Sierchio
On Tue, May 21, 2013 at 8:20 AM, Warren Block wrote: On Tue, 21 May 2013, Arthur Chance wrote: > > On 05/21/13 15:46, Michael Sierchio wrote: >> >>> AFAIK Softupdates journaling still breaks snapshot functionality - which >>> makes it unusable for me. I wouldn't assume that the O.P. doesn't want

Re: setup journaling for root partition

2013-05-21 Thread Warren Block
On Tue, 21 May 2013, Arthur Chance wrote: On 05/21/13 15:46, Michael Sierchio wrote: AFAIK Softupdates journaling still breaks snapshot functionality - which makes it unusable for me. I wouldn't assume that the O.P. doesn't want we he's asking for. Good point, I'd forgotten that problem as I

Re: setup journaling for root partition

2013-05-21 Thread Arthur Chance
On 05/21/13 15:46, Michael Sierchio wrote: AFAIK Softupdates journaling still breaks snapshot functionality - which makes it unusable for me. I wouldn't assume that the O.P. doesn't want we he's asking for. Good point, I'd forgotten that problem as I don't use UFS snapshots. I can imagine it w

Re: setup journaling for root partition

2013-05-21 Thread Michael Sierchio
r it >> with >> -J flag? >> >> i think my problem is, my gjournal can not act correctly in fixit mode >> because i can load it in single user mode and every thing is ok but in >> fixit mode, i can not load it and all commands return errors. >> >> plea

Re: setup journaling for root partition

2013-05-21 Thread Arthur Chance
g for it with -J flag? i think my problem is, my gjournal can not act correctly in fixit mode because i can load it in single user mode and every thing is ok but in fixit mode, i can not load it and all commands return errors. please help me to make a journal for my root:((( Look more carefully a

Re: setup journaling for root partition

2013-05-21 Thread Mark Felder
On Tue, 21 May 2013 06:43:34 -0500, saeedeh motlagh wrote: thanks Julien, but i think it's not true. man page for newfs seys that journaling is done via gjournal and in freebsd handbook it says do journaling with gjournal for UFS file system. No, he's right. It's generally not recommended t

Re: setup journaling for root partition

2013-05-21 Thread saeedeh motlagh
s, my gjournal can not act correctly in fixit mode because i can load it in single user mode and every thing is ok but in fixit mode, i can not load it and all commands return errors. please help me to make a journal for my root:((( On Tue, May 21, 2013 at 3:10 PM, Julien Cigar wrote: > On 05

Re: setup journaling for root partition

2013-05-21 Thread Julien Cigar
(for example /usr), load gjournal, add journal partition to /usr partition. this procedure works well for user and other partitions except root because i can not unmount it. should i set up journaling in fixit mode with gpart? how? i try different

Re: setup journaling for root partition

2013-05-21 Thread s m
journal partition to /usr >> partition. >> this procedure works well for user and other partitions except root >> because >> i can not unmount it. >> >> should i set up journaling in fixit mode with gpart? how? i try different >> ways but none of them work f

Re: setup journaling for root partition

2013-05-21 Thread Julien Cigar
ample /usr), load gjournal, add journal partition to /usr partition. this procedure works well for user and other partitions except root because i can not unmount it. should i set up journaling in fixit mode with gpart? how? i try different ways but none of them work for me:(( On Tue, May 21, 2013

Re: setup journaling for root partition

2013-05-21 Thread s m
xcept root because i can not unmount it. should i set up journaling in fixit mode with gpart? how? i try different ways but none of them work for me:(( On Tue, May 21, 2013 at 10:36 AM, Michael Sierchio wrote: > > On Mon, May 20, 2013 at 10:59 PM, s m wrote: > >> hello everybody >

Re: setup journaling for root partition

2013-05-20 Thread Michael Sierchio
On Mon, May 20, 2013 at 10:59 PM, s m wrote: > hello everybody > > i want to setup a journal partition for my root partition. but i do not > know how to do that. in FreeBSD handbook, it is done in single user mode, > unmount the desired partition and assign the journal partition

setup journaling for root partition

2013-05-20 Thread s m
hello everybody i want to setup a journal partition for my root partition. but i do not know how to do that. in FreeBSD handbook, it is done in single user mode, unmount the desired partition and assign the journal partition to it. i test this procedure and it is done for /usr partition but for

Re: SPAM: Re: ZFS root, error 2 when mounting root

2013-02-26 Thread bw.mail.lists
On 02/26/2013 04:31 PM, Chad M Stewart wrote: I've been down this road recently with 9.1-release. I ended up adding these lines to end of my script ## The next two are "hacks" in my book, without the last line, on reboot ## it gets stuck trying to find zfs:zroot/ROOT, but so

Re: SPAM: Re: ZFS root, error 2 when mounting root

2013-02-26 Thread Chad M Stewart
I've been down this road recently with 9.1-release. I ended up adding these lines to end of my script ## The next two are "hacks" in my book, without the last line, on reboot ## it gets stuck trying to find zfs:zroot/ROOT, but somehow the -f or reboot "fixes" # this

Re: SPAM: Re: ZFS root, error 2 when mounting root

2013-02-25 Thread dweimer
mailing list, the subject of the thread is "[HEADSUP] zfs root pool mounting", if you chose to search for it on your own. on 28/11/2012 20:35 Andriy Gapon said the following: Recently some changes were made to how a root pool is opened for root filesystem mounting. Previously the

Re: ZFS root, error 2 when mounting root

2013-02-25 Thread bw
That was my understanding, too, but the instructions on the wiki say there's no need to copy the cache file. In fact, there is no cache file to copy, since the pool is created with zpool create -o altroot=/mnt -O canmount=off zroot mirror /dev/gpt/g0zfs /dev/gpt/g1zfs No cache file. The w

Re: ZFS root, error 2 when mounting root

2013-02-25 Thread Paul Kraus
On Feb 25, 2013, at 10:14 AM, bw wrote: > On 02/25/2013 03:13 PM, Paul Kraus wrote: >> On Feb 24, 2013, at 4:42 AM, bw.mail.lists wrote: >> >>> Basically, I tried to follow >>> https://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/9.0-RELEASE, but ended up >>> with a system that didn't know how to mo

Re: ZFS root, error 2 when mounting root

2013-02-25 Thread bw
ing kernel modules..." kldload opensolaris kldload zfs kldload geom_mirror echo "done" echo 'Setting swap as mirror...' gmirror label gswap /dev/gpt/g0swap /dev/gpt/g1swap echo 'done' echo "Creating zroot..." zpool create -o altroot=/mnt -O canmount=off

Re: ZFS root, error 2 when mounting root

2013-02-25 Thread Paul Kraus
On Feb 24, 2013, at 4:42 AM, bw.mail.lists wrote: > Basically, I tried to follow > https://wiki.freebsd.org/RootOnZFS/GPTZFSBoot/9.0-RELEASE, but ended up with > a system that didn't know how to mount /. > > There are two scripts attached. I did not see any attachments. > The main differen

ZFS root, error 2 when mounting root

2013-02-24 Thread bw.mail.lists
part where it mounts the root partition, it stopped with 'error 2' 'unknown file system'. I could import the pool when booting from LiveFS, I wrote to it, it was working fine, but at boot it just refused to be mounted as /. zfswithcache.sh from http://strahlert.net/wordpre

Re: Root on zfs (stable9) - how to make it bootable

2013-02-22 Thread uki
2013/2/22 David Demelier : > Sorry didn't read that you have a MBR slice instead of GPT > > then you should take a look at that one > https://wiki.freebsd.org/RootOnZFS/ZFSBootPartition I have used that one, unfortunately I was unable to boot. ___ freebs

Re: Root on zfs (stable9) - how to make it bootable

2013-02-22 Thread David Demelier
something like > > gpart bootcode -b /boot/pmbr ada0 > gpart bootcode -p /boot/gptzfsboot -i 1 ada0 > > (The second assume that you have a freebsd-boot as first index in ada0) > > Cheers, > > > > 2013/2/22 uki > >> Hi, >> >> I want to install freebsd9 (

Re: Root on zfs (stable9) - how to make it bootable

2013-02-22 Thread David Demelier
t; > I want to install freebsd9 (stable) on zfs root, unfortunately my bios > is unable to recognize GPT discs. > I'm using MBR disc, with BSD slice (on mbr index 4) containing > freebsd-zfs filesystem. > > I've no idea how to make it bootable, I've tried using:

Root on zfs (stable9) - how to make it bootable

2013-02-22 Thread uki
Hi, I want to install freebsd9 (stable) on zfs root, unfortunately my bios is unable to recognize GPT discs. I'm using MBR disc, with BSD slice (on mbr index 4) containing freebsd-zfs filesystem. I've no idea how to make it bootable, I've tried using: zpool export sys dd if=/

Re: How to achieve E-Mail Notification on root login?

2013-02-12 Thread Chris Hill
On Tue, 12 Feb 2013, Zyumbilev, Peter wrote: Allow "sudo bash" only. The OP didn't want to use sudo because it's not in the base system. I would guess he also doesn't want to use bash, since it too is not in the base system. [ snip ] -- Chris Hill ch...@monochrome.org **

Re: How to achieve E-Mail Notification on root login?

2013-02-12 Thread Karl Vogel
e first one is ugly. 1. Rename su and make it executable only by root, so you can't bypass the part that handles the email alert: # mv /usr/bin/su /usr/bin/sulocal # chmod 700 /usr/bin/sulocal 2. Create a script in a directory accessible only by root:

Re: How to achieve E-Mail Notification on root login?

2013-02-12 Thread Zyumbilev, Peter
BSD system with users in the wheel group, >> > what is the best practise to send out a notification >> > via E-Mail if one of them becomes root via su? In an ideal >> > case the E-Mail would contain the user name and the time. >> >> I'm not sure if t

Re: How to achieve E-Mail Notification on root login?

2013-02-12 Thread Frank Staals
Robert Huff writes: > Polytropon writes: > >> > given there is a FreeBSD system with users in the wheel group, >> > what is the best practise to send out a notification >> > via E-Mail if one of them becomes root via su? In an ideal >> > case the

Re: How to achieve E-Mail Notification on root login?

2013-02-12 Thread Robert Huff
Polytropon writes: > > given there is a FreeBSD system with users in the wheel group, > > what is the best practise to send out a notification > > via E-Mail if one of them becomes root via su? In an ideal > > case the E-Mail would contain the user name and the time

Re: How to achieve E-Mail Notification on root login?

2013-02-12 Thread Polytropon
On Tue, 12 Feb 2013 13:24:52 +0100, Matthias Petermann wrote: > > Hello, > > given there is a FreeBSD system with users in the wheel group, what is > the best practise > to send out a notification via E-Mail if one of them becomes root via > su? In an ideal > case

How to achieve E-Mail Notification on root login?

2013-02-12 Thread Matthias Petermann
Hello, given there is a FreeBSD system with users in the wheel group, what is the best practise to send out a notification via E-Mail if one of them becomes root via su? In an ideal case the E-Mail would contain the user name and the time. I thought about using sudo but this is not in the

Could not access root and user account after installing xorg-minimal

2013-01-02 Thread ajith.comp
I am running FreeBSD-9 After installing xorg-minimal by #pkg_add -r xorg-minimal and installing fonts by #cd /usr/port/x11-fonts/urwfonts #make install clean I installed Irsis. The problem occured after I issued the #startx , an error message appeared for a very short time.I could no

Re: Full disk encryption without root partition

2012-12-30 Thread RW
On Sun, 30 Dec 2012 10:34:51 +0100 David Demelier wrote: > I think a good idea would be to store the key directly in the > bootloader, but that needs a large enough partition scheme that can > store the bootloader (boot0 or boot1) plus the encryption key. > However this needs to add support for

Re: Full disk encryption without root partition

2012-12-30 Thread mhca12
freebsd-questions@freebsd.org >>>> Subject: Re: Full disk encryption without root partition >>>> Message-ID: >>>> >>>> >>>> Content-Type: text/plain; charset=ISO-8859-1 >>>> >>>> On Wed, Dec 26, 2012 at

Re: Full disk encryption without root partition

2012-12-30 Thread David Demelier
On 28/12/2012 12:29, mhca12 wrote: On Fri, Dec 28, 2012 at 9:33 AM, C-S wrote: Date: Wed, 26 Dec 2012 22:18:40 +0100 From: mhca12 To: freebsd-questions@freebsd.org Subject: Re: Full disk encryption without root partition Message-ID: Content-Type: text/plain; charset=ISO-8859-1 On

Re: Full disk encryption without root partition

2012-12-30 Thread David Demelier
On 29/12/2012 23:53, Polytropon wrote: On Sat, 29 Dec 2012 22:43:29 +0100, Martin Laabs wrote: So from the security point of view it might be a good choice to have a unencrypted and (hardware) readonly boot partition. To prevent unintended modification by of the boot process's components, an

Re: Full disk encryption without root partition

2012-12-29 Thread RW
On Sat, 29 Dec 2012 22:43:29 +0100 Martin Laabs wrote: > Hi, > > >> Are there any plans or is there already support for full > >> disk encryption without the need for a boot partition? > > Well - what would be your benefit? OK - you might not create another > partition but I think this is not th

Re: Full disk encryption without root partition

2012-12-29 Thread Polytropon
On Sat, 29 Dec 2012 22:43:29 +0100, Martin Laabs wrote: > So from the security point of view it might be a good choice to have a > unencrypted and (hardware) readonly boot partition. To prevent unintended modification by of the boot process's components, an option would be to have the system boot

Re: Full disk encryption without root partition

2012-12-29 Thread Martin Laabs
Hi, >> Are there any plans or is there already support for full >> disk encryption without the need for a boot partition? Well - what would be your benefit? OK - you might not create another partition but I think this is not the problem. >From the point of security you would not get any improveme

Re: Full disk encryption without root partition

2012-12-29 Thread Bernt Hansson
2012-12-26 22:17, mhca12 skrev: Are there any plans or is there already support for full disk encryption without the need for a root partition? Not exactly what asked for, but here it is http://forums.freebsd.org/showthread.php?t=2775 ___ freebsd

Re: Full disk encryption without root partition

2012-12-28 Thread mhca12
On Fri, Dec 28, 2012 at 9:33 AM, C-S wrote: > >> Date: Wed, 26 Dec 2012 22:18:40 +0100 >> From: mhca12 >> To: freebsd-questions@freebsd.org >> Subject: Re: Full disk encryption without root partition >> Message-ID: >> >> Content-Type: text/p

Re: Full disk encryption without root partition

2012-12-28 Thread C-S
> Date: Wed, 26 Dec 2012 22:18:40 +0100 > From: mhca12 > To: freebsd-questions@freebsd.org > Subject: Re: Full disk encryption without root partition > Message-ID: > > Content-Type: text/plain; charset=ISO-8859-1 > > On Wed, Dec 26, 2012 at 10:17 PM, mhca12 wr

Re: Full disk encryption without root partition

2012-12-26 Thread mhca12
On Wed, Dec 26, 2012 at 10:17 PM, mhca12 wrote: > Are there any plans or is there already support for full > disk encryption without the need for a root partition? I am sorry, I certainly meant to write "boot partition". ___ f

Full disk encryption without root partition

2012-12-26 Thread mhca12
Are there any plans or is there already support for full disk encryption without the need for a root partition? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to

Re: root filesystem and soft-update

2012-12-07 Thread Rick Miller
On Tue, Dec 4, 2012 at 4:50 PM, Rick Miller wrote: > Hi all, > > I remember one time seeing a site that explained why soft-updates was > not enabled for the root filesystem. I tried looking for it earlier, > but failed to locate it. Is there someone who knows where it is? Thank

Re: root filesystem and soft-update

2012-12-04 Thread Steve O'Hara-Smith
On Tue, 4 Dec 2012 16:50:42 -0500 Rick Miller wrote: > Hi all, > > I remember one time seeing a site that explained why soft-updates was > not enabled for the root filesystem. I tried looking for it earlier, > but failed to locate it. Is there someone who knows where it is?

Re: root filesystem and soft-update

2012-12-04 Thread Bas Smeelen
On 12/04/12 22:50, Rick Miller wrote: Hi all, I remember one time seeing a site that explained why soft-updates was not enabled for the root filesystem. I tried looking for it earlier, but failed to locate it. Is there someone who knows where it is? -- Rick Hi Rick Maybe in the FAQ? http

root filesystem and soft-update

2012-12-04 Thread Rick Miller
Hi all, I remember one time seeing a site that explained why soft-updates was not enabled for the root filesystem. I tried looking for it earlier, but failed to locate it. Is there someone who knows where it is? -- Rick -- Sent from my mobile device Take care Rick Miller

Re: curious -- what's /tmp/fam-root ?

2012-11-14 Thread Polytropon
On Wed, 14 Nov 2012 13:22:06 -0700, Gary Aitken wrote: > Just curious; what's the purpose of /tmp/fam-root, and what is written there? > Is it simply where the os writes stuff which is sensitive, > and putting it in a rwx-- directory avoids potential security issues > rega

Re: curious -- what's /tmp/fam-root ?

2012-11-14 Thread jb
Gary Aitken dreamchaser.org> writes: > > Just curious; what's the purpose of /tmp/fam-root, and what is written there? > Is it simply where the os writes stuff which is sensitive, > and putting it in a rwx-- directory avoids potential security issues > regarding fil

curious -- what's /tmp/fam-root ?

2012-11-14 Thread Gary Aitken
Just curious; what's the purpose of /tmp/fam-root, and what is written there? Is it simply where the os writes stuff which is sensitive, and putting it in a rwx-- directory avoids potential security issues regarding file access? or is there more to it than

Re: BIND - slaving the root zone and signature expired

2012-10-25 Thread Damien Fleuriot
On 25 October 2012 18:55, Damien Fleuriot wrote: > On 25 October 2012 18:33, Warren Block wrote: >> On Thu, 25 Oct 2012, Damien Fleuriot wrote: >> >>> Anyone else experienced this problem today ? >>> >>> We slave the root zone and have received "

Re: BIND - slaving the root zone and signature expired

2012-10-25 Thread Damien Fleuriot
On 25 October 2012 18:33, Warren Block wrote: > On Thu, 25 Oct 2012, Damien Fleuriot wrote: > >> Anyone else experienced this problem today ? >> >> We slave the root zone and have received "signature expired" errors. > > > Found this: > > https:/

Re: BIND - slaving the root zone and signature expired

2012-10-25 Thread Warren Block
On Thu, 25 Oct 2012, Damien Fleuriot wrote: Anyone else experienced this problem today ? We slave the root zone and have received "signature expired" errors. Found this: https://lists.dns-oarc.net/pipermail/dns-operations/2011-March/007116.html which leads to this: http

BIND - slaving the root zone and signature expired

2012-10-25 Thread Damien Fleuriot
Hello list, Anyone else experienced this problem today ? We slave the root zone and have received "signature expired" errors. We slave the root zone like so: zone "." { type slave; file "/etc/namedb/slave/root.slave"; masters

Re: MFS root filesystem and static binaries size

2012-10-17 Thread Devin Teske
On Oct 17, 2012, at 1:30 AM, Steve O'Hara-Smith wrote: > On Tue, 16 Oct 2012 13:13:41 -0700 > Devin Teske wrote: > >> When two files have the same inode, they are "hard links" to each other. >> Unlike a "soft link" (or "symbolic link" as they are more appropriately >> called), which stores a de

Re: MFS root filesystem and static binaries size

2012-10-17 Thread Steve O'Hara-Smith
On Tue, 16 Oct 2012 13:13:41 -0700 Devin Teske wrote: > When two files have the same inode, they are "hard links" to each other. > Unlike a "soft link" (or "symbolic link" as they are more appropriately > called), which stores a destination-path of the target, a hard link > instead looks and acts

Re: MFS root filesystem and static binaries size

2012-10-16 Thread Rick Miller
gt; A corresponding "ls -li /stand2" should show that the majority of files all > have the same inode (whereas if you use cp, "ls -li" will instead show > different inodes for every file that was copied, because again, cp(1) does > not support retention of hard-links). > > &

Re: MFS root filesystem and static binaries size

2012-10-16 Thread Stanislav Zaharov
all have the same inode (whereas if you use cp, "ls -li" will instead show > different inodes for every file that was copied, because again, cp(1) does > not support retention of hard-links). > > > > > For example when we mount mfsroot image we get: > > $ df -h /

Re: MFS root filesystem and static binaries size

2012-10-16 Thread Devin Teske
> $ df -h /mnt/ > > FilesystemSizeUsed Avail Capacity Mounted on > /dev/md0 3.9M3.3M 534k86%/mnt > > $ ls -lhs /mnt/stand > ... > 766 -r-xr-xr-x 30 root wheel 3M 10 apr 2012 dhclient > 766 -r-xr-xr-x 30 root wheel 3M 10 apr

Re: MFS root filesystem and static binaries size

2012-10-16 Thread Rick Miller
On Tue, Oct 16, 2012 at 2:13 PM, Stanislav Zaharov wrote: > Hello, > > I have a question regarding the mfsroot file system organization on > installation cd. > How is it possible that we have bigger binary files in ls list while actual > occupied space is less. But when we try to copy these files

Re: bad root shell in /etc/passwd

2012-09-26 Thread Polytropon
On Wed, 26 Sep 2012 22:07:26 -0600, Gary Aitken wrote: > Thanks, all. > > On 09/26/12 19:18, Polytropon wrote: > > That's why you should be using the "toor" account and leave "root" > > unchanged. > > I realized that about the time I learned I

  1   2   3   4   5   6   7   8   9   10   >