Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-29 Thread Dave Botsch
One can also disable kext signing on Yosemite by adding "kext-dev-mode=1" to the boot args. On Wed, Oct 29, 2014 at 05:31:36PM +, Brandon Allbery wrote: > So, an interesting and undoubtedly temporary workaround for unsigned > kexts on Yosemite/OS X 10.10 is that they can apparently be loaded

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-29 Thread Brandon Allbery
So, an interesting and undoubtedly temporary workaround for unsigned kexts on Yosemite/OS X 10.10 is that they can apparently be loaded by LaunchDaemons. http://dan.langille.org/2014/10/28/getting-openconnect-tuntap-working-on-yosemite-osx/ It wouldn't surprise me if Apple closed that loophole soo

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-24 Thread chas williams - CONTRACTOR
On Thu, 23 Oct 2014 18:27:27 -0400 Stephen Joyce wrote: > The openafs.org website (is that now owned by the Foundation?) provides > binaries now. One could argue that it's the same risk[1], but that signing > binaries creates more awareness (but I'm not sure I have the energy to > think that c

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread Stephen Joyce
On Thu, 23 Oct 2014, D Brashear wrote: Or the developer, if the builder and/or signer are not otherwise contractually tied to the foundation's insurance. Again, seek actual legal advice.  Yup. And that's the summary I'd give about the understanding Stephen was looking for after Jeff's e

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread Benjamin Kaduk
On Thu, 23 Oct 2014, Garrett Wollman wrote: > Official FreeBSD packages are built from the ports collection on a > weekly basis, but the OpenAFS port cannot be built because the FreeBSD > package builders do not have the necessary kernel compile tree > available. It might be possible to make this

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread Garrett Wollman
< said: > I don't think until very recently AIX had a way; Solaris we let our > packages bitrot > and now the mechanism to make packages is different; and I haven't kept > track of FreeBSD. Ben built the 1.6.9 packages currently being distributed on openafs.org. FreeBSD does not have signed pack

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread D Brashear
On Thu, Oct 23, 2014 at 1:19 PM, Gary Buhrmaster wrote: > On Thu, Oct 23, 2014 at 4:02 PM, Andrew Deason > wrote: > > > For all of these situations where the Foundation would provide the > > ability to sign binaries, there are those legal considerations, then, > > but also other things. The

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread D Brashear
On Thu, Oct 23, 2014 at 12:02 PM, Andrew Deason wrote: > > This is a problem for all of the binaries that openafs.org provides, but > it's an urgent problem for OS X specifically because of two issues: > we've never provided signed OS X packages, and in recent releases of OS > X it is difficult o

Re: [OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread Gary Buhrmaster
On Thu, Oct 23, 2014 at 4:02 PM, Andrew Deason wrote: > For all of these situations where the Foundation would provide the > ability to sign binaries, there are those legal considerations, then, > but also other things. The Foundation needs to have a point of contact > for any of these, and n

[OpenAFS] Providing signed packages (was Re: any experiences with OpenAFS client ...)

2014-10-23 Thread Andrew Deason
On Wed, 22 Oct 2014 19:59:59 + "E. Margarete Ziemer" wrote: > I will put the lawyer and risk assessment topics on the agenda for the > next Foundation Board meeting. Thank you, all of you, for this > discourse, which has helped to sharpen my/our thoughts and focus on > what exact and unambig