Re: Is the FreeBSD ABI compatibility policy documented anywhere

2009-10-10 Thread Simon L. Nielsen
On 2009.09.24 15:26:34 -0500, Stef Walter wrote:
 It seems that FreeBSD has an ABI compatibility policy where major
 versions remain ABI and API compatible throughout minor point versions.
 That is to say that the kernel interfaces and libraries for (eg)
 7-STABLE, 7.1-RELEASE, 7.2-RELEASE are not supposed to change.

It's not entirely that simple.  The ABI on a stable branch like 7.x
should be backward compatible, but there isn't a guarantee of forward
compatibility.  IE, 7.0 binary should be able to run on 7.x, but a 7.2
binary might not run on 7.0.  It should be more or less the same with
the API's.

PS. do note that there is no 100% guarantee.  At times the defacto
policy might be violated if there are very good reasons for doing so.
This would e.g. an important fix for something where the changed ABI,
more likely K(kernel)BI, change should affect few people and the
change is required for fixing some important bug.

 Is this a policy of the project? If so, is it documented anywhere? Or is
 it just a convention?

I don't remember seeing it ever documented, just discussed.  What I
wrote above is also just my understanding of curreny defact policy.

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org


Re: Howto setup multiboot with GPT?

2009-08-20 Thread Simon L. Nielsen
On 2009.08.17 09:32:54 -0400, John Baldwin wrote:
 On Friday 14 August 2009 5:07:49 pm Andrey V. Elsukov wrote:
  Hi,
  
  I have installed 8.0-BETA2 amd64 on ZFS root with GPT. I made addition 
  partition and
  made new ZFS pool, builded and installed i386 world and kernel to this 
  pool. 
  So, is there some way to select from which partition i want to boot?
 
 Not currently unless you hardcode a specific partition in /boot.config.  (You
 may need a patch from jhay@ to fix the parsing of that file though.)  I
 believe someone (can't recall who) has some changes in a p4 branch to extend
 gptboot to support a fancier interface with a menu of possible partitions,
 etc.

I have been playing around with gptboot, but it's not ready for any
kind of general use yet.  So far I parse and print the complete
partition table and has the start of a framework to configure gptboot
directly similar to boot0cfg.  One of the first features I plan to
have working is to be able to select which partition to boot, but it's
not the main goal - that's nextboot like functionality.

The WIP can be find in FreeBSD.org perforce at
//depot/user/simon/gptboot/... AKA
http://p4web.freebsd.org/@md=dcd=//depot/user/simon/gptboot/c=2qs@//depot/user/simon/gptboot/?ac=83


-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org


Re: freebsd-update missed?

2008-09-27 Thread Simon L. Nielsen
On 2008.09.27 03:59:28 -0700, Jeremy Chadwick wrote:
 The advisory explicitly goes over what files were changed, and what
 revisions include the fix.  The below versions include the fix.  If you
 have older versions, then the answer is no, you do not have the fix.
 
 http://security.freebsd.org/advisories/FreeBSD-EN-08:01.libpthread.asc
 
 src/UPDATING  1.416.2.37.2.6
 src/sys/conf/newvers.sh   1.69.2.15.2.5
 src/lib/libpthread/sys/lock.c 1.9.2.1.8.1
 src/lib/libpthread/thread/thr_kern.c  1.116.2.1.6.1
 
 These are for CVS tag RELENG_6_3.
 
 I do not use freebsd-update.  That said:
 
 The man page for it states that it's a binary updater for pieces in the
 base system, so you looking at your *source* files would indicate
 absolutely nothing, other than when you last ran csup to update your
 /usr/src tree.
 
 I do not know of a way to verify if your libpthread library actually
 contains the fix.  We will have to wait for Colin's answer.

Errata's are distributed with freebsd-update just like advisories.

Since freebsd-update 2 (the one in the base system) /usr/src is also
updated if it exists.  That said, note that freebsd-update does not
get's patches from CVS so $FreeBSD$ unfortunatly isn't updated.

I just checked, for 6.3 the patch 'EN-08:01.libpthread' is on the
freebsd-update build server.

-- 
Simon L. Nielsen
Hat: FreeBSD Deputy Security Officer (IE, one of the people making
 freebsd-update builds)
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: AMD Geode LX crypto accelerator (glxsb)

2008-06-07 Thread Simon L. Nielsen
On 2008.06.07 06:18:55 +0200, Pawel Jakub Dawidek wrote:
 On Fri, Jun 06, 2008 at 11:41:35PM +0200, Patrick Lamaizi?re wrote:
  - How check the encryption/decryption ?
  
  Openssl seems ok, i've got quite the same results as NetBSD on a Soekris
  net5501 box. But i must use -engine cryptodev, why ?
 
 This is ok, as you may not want to use it, right?
 
  $ openssl speed -evp aes-128-cbc -engine cryptodev -elapsed
  engine cryptodev set.
  ...CUT...
  type16 bytes  64 bytes  256 bytes 1024 bytes 8192 bytes
  aes-128-cbc 1151.08k  4134.25k  11936.49k 22504.83k  25576.36k
  
  When i test ssh -c aes128-cbc hostname, ssh does not use the crypto
  device. I receive a crypto_newsession() followed by a
  crypto_freesession(), i mean i don't receive any crypto_process().
 
 Have you tried to put some debug to opencrypto? I believe openssh should
 use it automatically, at least this was the case some time ago, AFAIR.

OpenSSL 0.9.7 (in FreeBSD 6 and older) enabled it by default.  After
the OpenSSL 0.9.8 import it was not enabled automatically anymore.  I
have yet to figure out why this changed.

sam@ made a patch to enable it always but I was not entirely sure it
was the correct way to do it so I haven't committed it.

You can enable it per application in the openssl config file, if the
application calls the correct openssl config init function, which
OpenSSL AFAIR does not.

I will try to look more into this, but no promises as to when I will
get to it.  If anyone can make / get a patch which is OK'ed by the
OpenSSL people I will be more than happy to commit it.

BTW. I think phk@ already worked on a patch for AES in the AMD Geode
LX, but I can't remember details or have time to look it up right now.

-- 
Simon L. Nielsen
Hat: FreeBSD OpenSSL janitor
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: openssl with zlib support

2008-06-07 Thread Simon L. Nielsen
On 2008.06.06 19:02:36 +0200, Mohacsi Janos wrote:
 Dear All,
   Are there any reason to not enabling zlib compression for TLS in 
 openssl 
 on FreeBSD ?

No, that seems like a mistake.  Which FreeBSD version are you using,
and are you using OpenSSL from base or ports?

 Would it break ABI if I enable it by tweaking the openssl Makefile?

Probably not, but I'm not sure where it's enabled/disabled so I can't
say for sure.

I will try to look into this more, but it might not be until sometime
next week.

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvs tag renaming after repo copy

2008-02-28 Thread Simon L. Nielsen
On 2008.02.28 14:58:53 +0100, Dag-Erling Smørgrav wrote:
 Simon L. Nielsen [EMAIL PROTECTED] writes:
  John Polstra has made a script (Fixtags) for it which we use for the
  FreeBSD repository.  I don't think he has any problems with it being
  distributed, but as it doesn't have a copyright statement i just want
  to ask before I distribute it...
 
 Uh...  I wrote a replacement for that in 2001 (~des/bin/fixtags.pl).
 I'm surprised you still use John's version, which is excruciatingly
 slow, since 1) it's a shell script, 2) it's a *recursive* shell script,
 3) it runs rcs twice for every modified tag.

If it ain't borken :-).  Speed is rarely an issue since the CVS master
server is fast, and most of the time only a few files are copied.

For other intersted parties I got OK from John Polstra to put his
script online with std. BSD license so it can now be found at
http://people.freebsd.org/~simon/scripts/Fixtags .

In case anyone is interested I put the script I use for repo-copies at
FreeBSD.org online as
http://people.freebsd.org/~simon/scripts/cvs_repo_copy .  The script
probably need to be adjusted to local config and use at your own risk
etc - but it hasn't done anything bad for me yet :-).

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: cvs tag renaming after repo copy

2008-02-27 Thread Simon L. Nielsen
On 2008.02.27 08:36:30 -0700, John Hein wrote:
 Can someone point me at a script that does tag renaming
 after a repo copy?

John Polstra has made a script (Fixtags) for it which we use for the
FreeBSD repository.  I don't think he has any problems with it being
distributed, but as it doesn't have a copyright statement i just want
to ask before I distribute it...

-- 
Simon L. Nielsen
Hat: FreeBSD.org cvsmeister
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Upgrading from FreeBSD 5.3 to 6.2

2007-08-25 Thread Simon L. Nielsen
On 2007.08.25 13:45:05 +0200, Jose-Marcio Martins da Cruz wrote:
 
 Ralph,
 
 I found Ralph Engelschall scripts to upgrade FreeBSD systems.
 
 http://people.freebsd.org/~rse/upgrade/freebsd-upgrade-5x-6x.txt

I would suggested just using the documented procedure from the FreeBSD
Handbook.

I haven't done any 5.3 - 6.2 upgrades but I have done many other 5.x
- 6.x and I haven't had a problem in any of the cases.

Of course I mostly have console on systems which makes everything a
lot simpler / safer, but you didn't say if that was requirement for
you (being able to upgrade without console).

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: problem with apache bench

2006-12-30 Thread Simon L. Nielsen
On 2006.12.30 21:10:50 +0100, Bartosz Giza wrote:

 from couple of days i am trying to figure out what is wrong with apache
 bench. I want to test my remote site with it but all the time i got this
 error message.
 
 % ab -c 10 -n 500 http://x/test.php
 Test aborted after 10 failures
 
 apr_socket_connect(): Operation already in progress (37)
 Total of 8 requests completed

I have had some problems with ab from apache 2.0/2.2, but ab from
apache 1.3 it worked fine.  I just had to get it to work so I didn't
look more into why it broke on newer versions.

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [patch] rm can have undesired side-effects

2006-10-30 Thread Simon L. Nielsen
On 2006.10.30 21:31:51 +1100, Peter Jeremy wrote:
 On Mon, 2006-Oct-30 19:38:49 +1100, Peter Jeremy wrote:
 the user is unaware that there are multiple links.  I don't think
 that just unlinking the file and issuing a warning is a good solution
 because it's then virtually impossible to locate the other copy(s)
 of the file, which remains viewable.
 
 I missed the fact that the warning message includes the inode number.
 My apologies.  This reduces virtually impossible to hard.
 
 I still think this current behaviour is undesirable and a security
 hole.  Maybe someone from the SO team would like to offer their
 opinion - I might just have my tinfoil hat on too tight tonight.

With hat paranoid dude, and not any official FreeBSD hat - I don't
care to think this through enough to say anything with a FreeBSD hat
for the time being, on this topic

Personally I think rm should do what you ask it to do - if you ask it
to overwrite a file which has multiple links, well... though luck.  I
guess rm exiting for antifootshoot without -f can be OK, that's still
very visible to the user.  What's currently in -CURRENT is probably a
bad idea since you might end up with a file which you thought you had
deleted, but in fact you haven't.

That said, I wouldn't trust -P to _really_ remove the content of the
files anyway, so personally I don't really care much.  If you want the
file to be gone, use encryption in the first place, or use apropriate
tool (hammer, axe, C4, etc.).

/

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: pam_krb5 problems

2006-08-30 Thread Simon L. Nielsen
On 2006.08.30 16:03:40 +0200, Harti Brandt wrote:

 has anyone successfully configured pam_krb5? It seems that the ticket 

Hey,

It's being used in the FreeBSD.org cluster, but I never looked at how
it's setup.  For the parts I have messed with it just works...

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: jails, cron and sendmail

2006-08-27 Thread Simon L. Nielsen
On 2006.08.27 02:13:03 +0200, Dirk Engling wrote:

 I have the following problem: since I need and do not like any kind of
 smtp activity in my jails (there's no 127.0.0.1 in a jail, all services
 listen to the jails external interface), I put those lines into my
 /etc/rc.conf:
[...]

I know it's not exactly the solution to your problem, when you don't
want the mail, but I find that using the mail/ssmtp port for local
mail in jails is pretty nice.  There is no deamon running and I can
have one config file in all the jails which says that ssmtp should
relay the mails to a real mailserver.

(Might be useful for other people building jails.)

-- 
Simon L. Nielsen
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: FreeBSD 6.1 Released

2006-05-11 Thread Simon L. Nielsen
On 2006.05.09 01:00:14 -0400, Mike Jakubik wrote:
 Julian Elischer wrote:
[...]
 the above points to a filel that says 6.0 errata
 
 Indeed. Where is the mention of current quota/bge/em/ufs problems? Don't 
 tell me these will be shoved under the rug.

Send patches.

-- 
Simon L. Nielsen


pgpdIZZE2L9Q8.pgp
Description: PGP signature


Re: FreeBSD 6.1 Released

2006-05-11 Thread Simon L. Nielsen
On 2006.05.11 20:53:42 -0400, Mike Jakubik wrote:
 Simon L. Nielsen wrote:
 On 2006.05.09 01:00:14 -0400, Mike Jakubik wrote:
   
 Julian Elischer wrote:
 
 [...]
   
 the above points to a filel that says 6.0 errata
   
 Indeed. Where is the mention of current quota/bge/em/ufs problems? Don't 
 tell me these will be shoved under the rug.
 
 
 Send patches.
   
 
 Patches? For what? [...]

For the errata page, which was what the above text mentioned.

-- 
Simon L. Nielsen


pgpD9OAM14iWo.pgp
Description: PGP signature


Re: RFC: Adding a ``user'' mount option

2006-04-03 Thread Simon L. Nielsen
On 2006.04.03 01:32:36 -0400, Joe Marcus Clarke wrote:
 I know we have vfs.usermount, but this is not always sufficient since
 the user has to own the mount point in question.  What I propose is to
 add a ``user'' mount option à la Linux.  This would make mount and
 umount setuid root, but would allow much more flexibility when it comes
 to removable media and desktop systems.

Any reason you can't just use sudo... ?  I simply have lines like:

simon   ALL=NOPASSWD:/sbin/mount /mnt/cdrom,/sbin/umount /mnt/cdrom

in my sudoers file [1].  This way I can also restrict exactly who can
mount.

I really dislike setuid root binaries, so I really prefer if we could
avoid adding more.

As Colin noted, if this is to be done via a setuid program, it
probably should be a new program, since setuid programs has to have a
lot of special handling of things like file descriptors etc. which
normal programs can safely ignore.

[1] Note I haven't checked if this opens new and interesting holes,
but it doesn't matter too much on my laptop, since if somebody has
access to simon that's just as bad as someone getting root.

-- 
Simon L. Nielsen


pgpyE4Mezbwos.pgp
Description: PGP signature


Re: the current status of nullfs, unionfs

2005-03-10 Thread Simon L. Nielsen
On 2005.03.10 14:41:30 +0300, Denis Shaposhnikov wrote:
  Kris == Kris Kennaway [EMAIL PROTECTED] writes:
 
  Kris nullfs seems to work fine, unionfs is very fragile and easily
  Kris exploded.
 
 nullfs is absolutely useless for jail's because TOO slow.

That obviously depend on your use of jails and nullfs.  It works just
fine for me.

-- 
Simon L. Nielsen


pgpwLjjCOoXyp.pgp
Description: PGP signature


Re: [CFR] Specify the lock(1) timeout unit

2004-10-21 Thread Simon L. Nielsen
On 2004.10.21 14:37:10 +0300, Peter Pentchev wrote:

 Here's a little patch that teaches lock(1) about timeouts specified in
 seconds, hours, or days in addition to the minutes it currently assumes.
 I could commit this in a week if there are no objections.

Wouldn't it be more natural to just append the time-unit type to the
argument given to -t, e.g. -t 10s or -t 10h.  That just seem like
the more intuitive way to handle it to me...

Note: this is a suggestion, not an objection to the original patch.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgplLx6xiPz8q.pgp
Description: PGP signature


Re: [PATCH] Re: Linksys PCM200

2004-10-21 Thread Simon L. Nielsen
On 2004.10.20 22:59:50 -0600, [EMAIL PROTECTED] wrote:
 
 [got no answer on [EMAIL PROTECTED]
 
 I've tested this on 5.3-BETA7 - works OK, no more watchdog timeouts.
 So could someone review those patches and add them to the source tree?
 It's probably a good idea to update dc(4) and supported hw list also.
 
 /usr/src/sys/pci/if_dc.c udiff:

[...]

Unless a src committer picks this up within the next couple of days I
would suggest filing a PR with the patch so it does not get lost.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp6hW4GpGJZ3.pgp
Description: PGP signature


Re: Protection from the dreaded rm -fr /

2004-10-02 Thread Simon L. Nielsen
On 2004.10.02 16:48:46 +0200, Dimitry Andric wrote:
 On 2004-10-02 at 10:19:28 Giorgos Keramidas wrote:
 
  His idea was remarkably simple, so I went ahead and wrote this patch for
  rm(1) of FreeBSD:
 
 Of course, your work is commendable, but isn't is much simpler to just
 not type commands like that?  I mean, rm -rf /etc or rm -rf /bin
 are just as bad, but do you really want to be checking for all
 possible `bad' deletions?  That way, we'll start to look like some
 software from Redmond... :)

As keramida has noted this particular case is more likely to be made
by mistake than many others, e.g. by doing rm -rf / foo/bar where
rm -rf /foo/bar/ was meant.  Therefor I really think keramidas
_optional_ foot-shooting feature is a nice thing.

I know I will enable it on my systems if it's committed, and probably
keep it as a local patch if not.

-- 
Simon L. Nielsen
FreeBSD Bikeshed Team


pgpLItYADoz5L.pgp
Description: PGP signature


Re: make quickworld? (like in DragonFly)

2004-08-14 Thread Simon L. Nielsen
On 2004.08.14 10:03:37 +0200, Geert Hendrickx wrote:
 On Wed, Aug 11, 2004 at 02:47:14PM +0200, Simon L. Nielsen wrote:
  On 2004.08.11 00:36:06 +0200, Geert Hendrickx wrote:
   Hi, 
   
   is there any way (or could it be implemented) to rebuild only the
   changes in world and kernel sources after a cvsup?  DragonFly BSD
   features make quickworld and make quickkernel which does exactly
   that.  
  
  You can do that already:
  
  make buildworld buildkernel -DNOCLEAN
 
 Does adding NOCLEAN=true to /etc/make.conf have the same effect?  

It should (though I haven't tried it); just remember to disable it
when things start to blow up :-).

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgpzXuNlJFEdW.pgp
Description: PGP signature


Re: make quickworld? (like in DragonFly)

2004-08-11 Thread Simon L. Nielsen
On 2004.08.11 00:36:06 +0200, Geert Hendrickx wrote:
 Hi, 
 
 is there any way (or could it be implemented) to rebuild only the
 changes in world and kernel sources after a cvsup?  DragonFly BSD
 features make quickworld and make quickkernel which does exactly
 that.  

You can do that already:

make buildworld buildkernel -DNOCLEAN

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgpdQMAuh4g5g.pgp
Description: PGP signature


Re: Fundraising for FreeBSD development.

2004-04-08 Thread Simon L. Nielsen
On 2004.04.08 23:34:26 +0200, Poul-Henning Kamp wrote:
 In message [EMAIL PROTECTED], John Von Essen writes:
 If the fund raising is connected with FreeBSD, could people who donate
 larger amounts get some form of acknowledgement on the FreeBSD site? This
 would give an incentive for vendors who sell products that rely or use
 FreeBSD to donate larger amounts.
 
 (see above)
 
 Everybody who donate will be listed (possibly anonymously) on
   http://people.freebsd.org/~phk/donations.html
 
 I cannot promise exposure on the main FreeBSD Project pages, that
 would be up to the webmasters (and to some extent the core team)
 to arrange and allow for such precense.

We currently have list of donors both on
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/contributors/index.html#DONORS
and on http://www.freebsd.org/donations/donors.html so I don't see a
reason why donations to phk's project could not be somewhere on the main
FreeBSD website.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: Status GBDE attach at boot

2004-01-18 Thread Simon L. Nielsen
On 2004.01.17 14:53:58 -0500, Allan Fields wrote:
 Hi,
 
 I'm interested to know what may be in the pipeline as far as GBDE
 boot time attach/automation support.  Has anyone committed to
 implementing these features?  (I don't see it anymore (on the 5.3
 todo list) in releng pages.)

5.2 already has support for attaching GBDE volumes at boot by using the
/etc/rc.d/gbde script.  I have been using it for a while, and it works
OK.

I sent a patch yesterday to the freebsd-rc mailing list make the gbde
rc.d script work a bit better (see
http://groups.yahoo.com/group/FreeBSD-rc/message/659 ).

 As a fstab is concerned with mount hack, this is the right approach

I think it's better to just use a rc.d script to attach gbde volumes
before the normal filesystem mount, since it seems more clean. Of
course the rc.d script could be enhanced e.g. to support random keys,
like your temp feature.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: Status GBDE attach at boot

2004-01-18 Thread Simon L. Nielsen
On 2004.01.18 10:19:31 -0500, Allan Fields wrote:
 On Sun, Jan 18, 2004 at 02:43:42PM +0100, Simon L. Nielsen wrote:
  On 2004.01.17 14:53:58 -0500, Allan Fields wrote:
   Hi,
   
   I'm interested to know what may be in the pipeline as far as GBDE
   boot time attach/automation support.  Has anyone committed to
   implementing these features?  (I don't see it anymore (on the 5.3
   todo list) in releng pages.)
  
  5.2 already has support for attaching GBDE volumes at boot by using the
  /etc/rc.d/gbde script.  I have been using it for a while, and it works
  OK.
 
 Ahh.. ok, didn't see the changes yet. That is a straight forward
 approach - could there just as easily be a similar facility for other
 geoms?

That shouldn't be a problem... of course depending on exactly you want
to configure it might be more or less simple to do.  The dependency tree
for the rc system can make the script start when needed in the boot
sequence without any hacks.

Of course the issue of how to set user configuration still exists (as
discussed a few times before on the lists), since rc.conf can fast
become very cluttered.

  I sent a patch yesterday to the freebsd-rc mailing list make the gbde
  rc.d script work a bit better (see
  http://groups.yahoo.com/group/FreeBSD-rc/message/659 ).
  
   As a fstab is concerned with mount hack, this is the right approach
  
  I think it's better to just use a rc.d script to attach gbde volumes
  before the normal filesystem mount, since it seems more clean. Of
 
 This is good including specifying lockfile dir, but implies passphrase
 entry before continuing on always the console?

This is the way it works now, but this could be extended.  I'm mainly
using gbde to encrypt /home on desktops, so asking the password on the
console works fine for me.

 Which brings us to passphrase from file/filedesc issue vs. from tty
 / on command line.  Could password prompts be read from another
 terminal or from secure source like key device or remote terminal
 while the booting continues in the mean-time?

I don't see any reason why not, if the connection is secure, but I
haven't looked into this (since I haven't had the need to) so I'm not
exactly sure what kind of problems there are (both programming and
security issues).

  course the rc.d script could be enhanced e.g. to support random keys,
  like your temp feature.
 
 Yup. Idea was raised previously on the lists by lucky and phk.
 Seems like a good idea for swap,/tmp setup.

I actually have an rc.d script by Geoffrey T. Falk [EMAIL PROTECTED], which
was posted to some mailing list a few months ago, for gbde swap with
random password, but since it confuses the crashdump system I'm not
using it right now.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: Where is FreeBSD going?

2004-01-09 Thread Simon L. Nielsen
On 2004.01.08 21:39:07 -0700, M. Warner Losh wrote:
 In message: [EMAIL PROTECTED]
 [EMAIL PROTECTED] (Gary W. Swearingen) writes:

 : and the Copyright page has that plus a similar claim for
 : FreeBSD, Inc.  (For 2004, even.) 
 
 That should be changed.

To?  I have noticed FreeBSD, Inc on the copyright page a few times, but
I never really knew what to replace it with.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: optionally include file within a Makefile

2003-12-18 Thread Simon L. Nielsen
On 2003.12.18 20:13:16 -0500, Dan Langille wrote:
 On 18 Dec 2003 at 19:02, Dan Langille wrote:
 
  My goal is provide a way to override values in a Makefile with values
  from a local config file.
 
 I'm getting further.  What's the proper way to do an include?

Perhaps (not tested, so there may be typos):

.if exists(${HOME}/.bacula-regress)
.include ${HOME}/.bacula-regress
.endif

or something along those lines.  The make(1) manual page contains a lot
of useful information.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: Archive for cvs-src

2003-10-10 Thread Simon L. Nielsen
On 2003.10.10 14:08:21 -0700, Sandeep Kumar wrote:
 Hi,
 
 The oldest message in 
 http://lists.freebsd.org/pipermail/cvs-src.mbox/cvs-src.mbox seems to be 
 from 2003/03/24.
  Is there a way to get messages prior to that?

Older messages for all the mailing lists are at
http://docs.freebsd.org/mail/ . The source commit logs can also be found
in CVSROOT-src/commitlogs in the CVS repository.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: PUzzling sshd behaviour

2003-09-05 Thread Simon L. Nielsen
On 2003.09.05 12:29:10 -0400, Dwayne MacKinnon wrote:
 Ted Faber wrote:
 On Fri, Sep 05, 2003 at 12:04:04PM -0400, Dwayne MacKinnon wrote:
 
 That much I know. I was just wondering why the daemon is trying DNS 
 lookup when the IP in question is listed in /etc/hosts. I thought 
 listings in /etc/hosts would supercede the need for a DNS lookup. Of 
 course, I could be wrong... it wouldn't be the first time. :-)
 
 
 If you haven't you need to check out /etc/host.conf , the file that
 configures the hostname lookup order (at least on 4.8).  
 man 5 host.conf will tell you all about it.  If you have already
 configured this, you might want to look again.  (man -k resolver should
 help you find whatever it is on 5.x - I suspect it's nsswitch.)
 
 My host.conf is a FreeBSD 4.8 default one: it lists hosts, then bind. 
 That's why I don't understand why it's doing DNS... there's a listing in 
 hosts, and according to host.conf the hosts listing should be found first.

Do you use Privilege Separation?  That can give interesting results with
DNS due to chroot into /var/empty...  see the mailing lists archives.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: messing with CVS_LOCAL_BRANCH_NUM

2003-08-02 Thread Simon L. Nielsen
On 2003.08.02 15:35:48 -0400, Brian Reichert wrote:

 I'm exploring the 'local repository' tactics as described in:
 
   http://www.scriptkiddie.org/freebsd/setting_up_local_repo.html
[snip]
cvs ci src
   cvs commit: Examining src
   You are committing on the wrong repository!
   cvs commit: Pre-commit check failed
   cvs [commit aborted]: correct above errors first!
 
 Where is this 'wrong repository' concept coming from?  My CVSROOT
 hasn't changed.  A google search for that disgnostic message yeilds
 no hits...

The problem is the file CVSROOT/nocommits.sh, which is used as a
safeguard in the FreeBSD tree.  I replace the file every time I run
cvsup with the following version:

nocommits.sh
#! /bin/sh
# $FreeBSD$
#
# This is just some basic anti-foot-shooting to avoid accidental commits
# to cvsup'ed copies of the repository etc.
OKUSER=simonln
if [ x`/usr/bin/id -un` = x${OKUSER} ]; then
  exit 0
fi
echo I should only commit as ${OKUSER}!
exit 1
/nocommits.sh

You could just make a simple script which call 'exit 0' (or perhaps
remove the file; I haven't tried that), but the above version fits
better into my rather odd setup :-).

I have started some work on documenting the CVS_LOCAL_BRANCH_NUM use,
but unfortunatly there are only 24 hours in a day, so I have no idea
when I will get around to finishing it.

-- 
Simon L. Nielsen
FreeBSD Documentation Team


pgp0.pgp
Description: PGP signature


Re: Committing a driver to -stable

2003-07-18 Thread Simon L. Nielsen
On 2003.07.18 13:28:27 +, Bosko Milekic wrote:

[CUT]
   wait for someone from the TRB (is there a list of who's part of this
   group somewhere, anyway?) and/or -core to respond before you take

There is a list with the TRB members at
http://www.freebsd.org/internal/staff.html .

-- 
Simon L. Nielsen


pgp0.pgp
Description: PGP signature


Re: gethostbyname_r

2003-07-02 Thread Simon L. Nielsen
On 2003.07.02 14:45:49 -0700, Wes Peters wrote:
 On Monday 30 June 2003 14:39, Kris Kennaway wrote:
 
  There was a bogus non-reentrant version half-implemented in libc in
  both 4.x and 5.x, which I recently removed in 5.x.  I need to remove
  it on 4.x as well.  General consensus seems to be that implementing
  it properly is Hard.
 
 Yes, it is, or at least was in 4.x.  I thought we got a shiny new 
 gethostbyname_r with Jacques Vidrine's nss implementation in 5.0, 
 though.  Is this not right?

Not yet.  Jacques Vidrine explained what would be required to do it, on
-threads about a week ago :

Msg-id: [EMAIL PROTECTED]
or  
http://www.freebsd.org/cgi/getmsg.cgi?fetch=16837+0+/usr/local/www/db/text/2003/freebsd-threads/20!

-- 
Simon L. Nielsen


pgp0.pgp
Description: PGP signature


Re: gethostbyname_r

2003-06-30 Thread Simon L. Nielsen
On 2003.06.30 16:43:27 +0200, Stijn Hoop wrote:

 I was wondering if anybody was working on an implementation of a reentrant
 gethostbyname_r function, mostly because it looks like mozilla/firebird will

This was discussed on the -threads mailinglist a few weeks ago.  Try
looking at the achieves.  I don't thin anybody is working on it at the
moment.

-- 
Simon L. Nielsen


pgp0.pgp
Description: PGP signature


Re: TODO list?

2003-06-27 Thread Simon L. Nielsen
On 2003.06.27 16:10:13 -0700, Joshua Oreman wrote:
 Hi -hackers,
 
 I currently have a lot of free time and I was wondering whether there was
 a TODO list of some sort for bugs that need fixing in FreeBSD. I really
 want to help the project, and I think such a list would make it much
 easier to do so. If there's no official TODO list, could someone point
 out some things? I know C/C++, but I'm very unfamiliar with the kernel.

Great :-) There is always plenty to do.  I would suggest looking at the
PR system and at the 'Contributing to FreeBSD' article which can be
found at
http://www.freebsd.org/doc/en_US.ISO8859-1/articles/contributing/index.html

Hope you find something interesting to spend some time on.

-- 
Simon L. Nielsen


pgp0.pgp
Description: PGP signature


Re: Trailing whitespace in FreeBSD

2003-02-11 Thread Simon L. Nielsen
On 2003.02.10 17:41:47 -0800, Jordan Hubbard wrote:

 I have noticed that that several FreeBSD files (.c, .h and so on) have
 trailing whitespace (spaces/tabs after last charecter on a line).
 Wow, deja-vu!
/me runs and hides for not checking the achieves first :-)

-- 
Simon L. Nielsen



msg39895/pgp0.pgp
Description: PGP signature


Trailing whitespace in FreeBSD

2003-02-10 Thread Simon L. Nielsen

Hello

I have noticed that that several FreeBSD files (.c, .h and so on) have
trailing whitespace (spaces/tabs after last charecter on a line).

Should I send patches for this, or is it not important to fix?

A random example is stdbool.h v. 1.6 on line 30 which has a trailing
tab.

-- 
Simon L. Nielsen



msg39858/pgp0.pgp
Description: PGP signature


Re: Perl issue on freebsd 4.x?

2002-12-22 Thread Simon L. Nielsen
On 2002.12.22 13:36:21 +, Leo Bicknell wrote:

 Perl 5.8 does not seem to be a part of 4.x, is it in 5.0 or
 -CURRENT?
Perl 5.8 can be installed from ports (/usr/ports/lang/perl5.8/). FreeBSD
5/-CURRENT does not have perl in the base system at all.

-- 
Simon L. Nielsen

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-hackers in the body of the message