Re: ProPolice: best way to fill canary

2005-07-09 Thread Jeremie Le Hen
Hi Mike,

On Fri, Jul 08, 2005 at 07:22:13PM -0500, Mike Silbersack wrote:
 On Fri, 8 Jul 2005, Jeremie Le Hen wrote:
 The second method requires to introduce the kern.arnd sysctl
 (KERN_ARND).  FYI, note that NetBSD has kern.urandom (KERN_URND) and
 they define KERN_ARND to be an alias to this.
 
 I don't see any problem with introducing such a sysctl, if it would make 
 the propolice patch simpler.

Thanks for you answer.  In that case, which sysctl should we use ?

* OpenBSD's kern.arnd (KERN_ARND) which is a front-end to
  the arc4random() function ?

* NetBSD's kern.urandom (KERN_URND) which is using the rnd(4)
  pseudo-device.  They also have KERN_ARND in sysctl.h, which
  is no more than a #define of KERN_URND, for compatibility
  with OpenBSD.

Usually, I noticed that FreeBSD used to be as close as possible with
NetBSD.  But I would like to hear the voice of a more experienced
hacker about this.

Thanks.
Best regards,
-- 
Jeremie Le Hen
 jeremie at le-hen dot org  ttz at chchile dot org 
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ProPolice: best way to fill canary

2005-07-09 Thread Mike Silbersack


On Sat, 9 Jul 2005, Jeremie Le Hen wrote:


Thanks for you answer.  In that case, which sysctl should we use ?

* OpenBSD's kern.arnd (KERN_ARND) which is a front-end to
  the arc4random() function ?

* NetBSD's kern.urandom (KERN_URND) which is using the rnd(4)
  pseudo-device.  They also have KERN_ARND in sysctl.h, which
  is no more than a #define of KERN_URND, for compatibility
  with OpenBSD.

Usually, I noticed that FreeBSD used to be as close as possible with
NetBSD.  But I would like to hear the voice of a more experienced
hacker about this.

Thanks.
Best regards,
--
Jeremie Le Hen


I wouldn't say that we favor code from any one project over another, every 
situation is different.


In this case, I'm personally rather indifferent - both RNGs should supply 
good entropy.  Arc4 may be a bit faster (I don't know if anyone has 
benchmarked by how much), so for this purpose it would seem to be the one 
to use.


I can commit any patches you have after the 6.0 code freeze ends, which 
should be in the next few weeks.  (It can be MFC'd to 6.0 and 5.4 after 
that as well.)


Mike Silby Silbersack
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ProPolice: best way to fill canary

2005-07-09 Thread Sam Leffler

Jeremie Le Hen wrote:

Hi Mike,

On Fri, Jul 08, 2005 at 07:22:13PM -0500, Mike Silbersack wrote:


On Fri, 8 Jul 2005, Jeremie Le Hen wrote:


The second method requires to introduce the kern.arnd sysctl
(KERN_ARND).  FYI, note that NetBSD has kern.urandom (KERN_URND) and
they define KERN_ARND to be an alias to this.


I don't see any problem with introducing such a sysctl, if it would make 
the propolice patch simpler.



Thanks for you answer.  In that case, which sysctl should we use ?

* OpenBSD's kern.arnd (KERN_ARND) which is a front-end to
  the arc4random() function ?

* NetBSD's kern.urandom (KERN_URND) which is using the rnd(4)
  pseudo-device.  They also have KERN_ARND in sysctl.h, which
  is no more than a #define of KERN_URND, for compatibility
  with OpenBSD.

Usually, I noticed that FreeBSD used to be as close as possible with
NetBSD.  But I would like to hear the voice of a more experienced
hacker about this.



I asked a certain person to add the obsd sysctl long ago but it never 
happened.


Sam
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ProPolice: best way to fill canary

2005-07-09 Thread Mark Murray
Sam Leffler writes:
I asked a certain person to add the obsd sysctl long ago but it never 
happened.

That would be me.

And it wouldn't be the first time a ball got dropped. I'll get to 
it. :-]

M
--
Mark R V Murray
What is the most interesting question you have asked?
What, if any, was the answer?


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Cross-Compiling FreeBSD

2005-07-09 Thread Maslan
hi guys
what about cross-compiling freebsd-5.4 from a different BSD as openbsd
or even linux.
how can i accomplish this ???

-- 
I'm Searching For Perfection,
So Even If U Need Portability U've To Use Assembly ;-)
http://www.maslanlab.org
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]