Re: security/pgp on amd64

2009-06-24 Thread Dan Nelson
In the last episode (Jun 24), Olivier Nicole said: > Is the port security/pgp working on amd64 system? > > I copied my public and private keyrings from i386 to amd64 system and I > cannot decipher any file, it keeps on complaining that the pass phrase is > bad. > > I already tried to export the k

Re: you're not going to believe this.

2009-06-24 Thread freebsd
Gary Kline: > Http://www.mydigitaldiscount.com/SPD/runcore-64gb-pata-mini-pci-e-pcie-ssd-for-asus-eee-pc-901-and-1000---backorder-runcore-64gb-pata-mini-pci-e-pcie-ssd-for-asus-eee-pc-901-and-1000--88DB-1224129741.jsp > ... statement that this device lasts ten years before it fails to > hold s

Re: you're not going to believe this.

2009-06-24 Thread Wojciech Puchar
First, be careful about statements like "10 years before it fails to hold state." Usually that means if you write data to the device and put it on a shelf, you've got 10 years before the data is unreadable. Being marketing possibly it's true if you will write it few times and no more ;) store it

The question of moving vi to /bin

2009-06-24 Thread Manish Jain
On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: > I hope the next release will address these problems, as well as a pretty > reasonable request from me much earlier to move vi from /usr/bin to > /bin. Even in single-user mode, you almost always need an editor. Which is why you have ed(

Re: upgrading openoffice.org with portmaster

2009-06-24 Thread Boris Samorodov
On Wed, 24 Jun 2009 00:39:22 +0200 kenneth hatteland wrote: > when I start upgrading openoffice.org it switches from my localized > language build to standard us en. > Anyone have an idea how to force upgrade to stick with my norwegian > build with portmaster ?? > Platform freebsd 7.2 stable

Re: Untrusted X11 forwarding setup failed

2009-06-24 Thread Lowell Gilbert
Daniel Underwood writes: > Whenever I > > $ ssh -X u...@server > > from my FreeBSD machine, I get the following message (and am > successfully logged in): > > Warning: untrusted X11 forwarding setup failed: xauth key data not generated > Warning: No xauth data; using fake authentication data for

Re: upgrading openoffice.org with portmaster

2009-06-24 Thread Rolf Nielsen
Boris Samorodov wrote: On Wed, 24 Jun 2009 00:39:22 +0200 kenneth hatteland wrote: when I start upgrading openoffice.org it switches from my localized language build to standard us en. Anyone have an idea how to force upgrade to stick with my norwegian build with portmaster ?? Platfor

Re: The question of moving vi to /bin

2009-06-24 Thread b. f.
> On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: ... >About ed first. I might annoy a few people (which would gladden me in >this particular case), but ed was just one of Ken Thompson's nightmares >which he managed to reproduce in Unix with great precision. By no >stretch of imagination woul

Re: Best practices for securing SSH server

2009-06-24 Thread RW
On Tue, 23 Jun 2009 22:37:12 +0200 Erik Norgaard wrote: > You're right, as long as port-knocking as a first pass authentication > scheme is not in wide spread use, then any attackers will not waste > time port-knocking. If ever port-knocking becomes common, attackers > will adapt and start knoc

Re: Best practices for securing SSH server

2009-06-24 Thread Erik Norgaard
RW wrote: On Tue, 23 Jun 2009 22:37:12 +0200 Erik Norgaard wrote: You're right, as long as port-knocking as a first pass authentication scheme is not in wide spread use, then any attackers will not waste time port-knocking. If ever port-knocking becomes common, attackers will adapt and start

Re: Best practices for securing SSH server

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 03:53:15PM +0200, Erik Norgaard wrote: > RW wrote: > > On Tue, 23 Jun 2009 22:37:12 +0200 > > Erik Norgaard wrote: > > > >> You're right, as long as port-knocking as a first pass authentication > >> scheme is not in wide spread use, then any attackers will not waste > >>

Re: The question of moving vi to /bin

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 06:13:49AM -0700, b. f. wrote: > > On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: > > >About ed first. I might annoy a few people (which would gladden me in > >this particular case), but ed was just one of Ken Thompson's nightmares > >which he managed to reproduce in U

Re: The question of moving vi to /bin

2009-06-24 Thread Chris Rees
2009/6/24 cpghost : > On Wed, Jun 24, 2009 at 06:13:49AM -0700, b. f. wrote: >> > On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: >> >> >About ed first. I might annoy a few people (which would gladden me in >> >this particular case), but ed was just one of Ken Thompson's nightmares >> >which he

Re: The question of moving vi to /bin

2009-06-24 Thread Jonathan McKeown
On Wednesday 24 June 2009 12:59:13 Manish Jain wrote: > About ed first. I might annoy a few people (which would gladden me in > this particular case), but ed was just one of Ken Thompson's nightmares > which he managed to reproduce in Unix with great precision. By no > stretch of imagination would

Re: Best practices for securing SSH server

2009-06-24 Thread Daniel Underwood
> Point remains: Adding port knocking does not solve any security problem, it > only adds > complexity, cost, points of failure, inconvenience etc while making your > problem appear > differently and leaving you with the illusion of being more secure. I think that's grossly overstated, if not ju

Re: Best practices for securing SSH server

2009-06-24 Thread Erik Norgaard
cpghost wrote: On Wed, Jun 24, 2009 at 03:53:15PM +0200, Erik Norgaard wrote: But port knocking can be useful and provide more security *if* you modify the kocking sequence algorithmically and make it, e.g. a function of time, source IP/range (and other factors). This could prevent a whole class

Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
Hi, is there anybody working on a versioning file system for FreeBSD right now? Maybe something like what's discussed here? http://www.pdl.cmu.edu/PDL-FTP/Secure/FAST03_abs.html I don't care if it is native or a layer, geom-ified, fuse-based, or even if it uses subversion as its backend, as lo

Re: Best practices for securing SSH server

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 04:50:01PM +0200, Erik Norgaard wrote: > cpghost wrote: > > On Wed, Jun 24, 2009 at 03:53:15PM +0200, Erik Norgaard wrote: > > But port knocking can be useful and provide more security *if* you > > modify the kocking sequence algorithmically and make it, e.g. a > > function

Re: cups&samba jailed

2009-06-24 Thread Daniel Bye
On Tue, Jun 23, 2009 at 08:07:19PM -0500, Derek Funk wrote: > Attempting to setup cups and samba into a jail. How do you mount/add > device node /dev/ulpt0 within a jail. > Essentially I would like to know, how to add device nodes within jail > /dev for specifically the devices I want? You need

Isolating high cpu load at function level

2009-06-24 Thread Gary Gatten
Hello, I have a process with several threads - the main "worker" threads typically use < 20% CPU - but after upgrading to a new version they're now using > 90% cpu. I'm trying to determine what function these threads are performing that's requiring so much more cpu. Is it bad code? I bug in a

Re: upgrading installed ports: time to do it ?

2009-06-24 Thread mfv
On Monday, 22 June 2009 16:48:02 RW wrote: > On Mon, 22 Jun 2009 20:58:41 +0100 > > Chris Whitehouse wrote: > > I'll probably get flamed for this but since I've been using > > ports-mgmt/portmanager I've almost forgotten > > about /usr/ports/UPDATING and all that pkgdb -Fu stuff or whatever it > >

Re: The question of moving vi to /bin

2009-06-24 Thread Chad Perrin
On Wed, Jun 24, 2009 at 04:22:19PM +0200, Jonathan McKeown wrote: > > You also suggested doing away with ed and /rescue/vi altogether. You may not > need statically-linked tools very often, but when you do need them, you > *REALLY* need them. Don't suggest throwing them away without thinking thr

Re: The question of moving vi to /bin

2009-06-24 Thread Chad Perrin
On Wed, Jun 24, 2009 at 06:13:49AM -0700, b. f. wrote: > > On Tuesday 23 June 2009 15:41:48 Manish Jain wrote: > > >That's the whole problem of /rescue/vi. When you suddenly find yourself > >in single-user mode, the last thing you want to do is realise that > >tweaking is needed for something whic

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Roland Smith
On Wed, Jun 24, 2009 at 05:04:22PM +0200, cpghost wrote: > Hi, > > is there anybody working on a versioning file system for FreeBSD > right now? > I don't care if it is native or a layer, geom-ified, fuse-based, > or even if it uses subversion as its backend, as long as it > provides some kind of

error when install plplot - lasi

2009-06-24 Thread cblasius
Hello, I see this error on two machines i386 and amd64 on FreeBSD-7.2-RELEASE Is this error also present to you? # portmaster /usr/ports/math/plplot ... [ 77%] Built target example0 [ 88%] Built target example1 [100%] Built target example2 Installing the project stripped... -- Install configura

Re: ~/.ssh directory permissions

2009-06-24 Thread Brent Bloxam
Chris Rees wrote: Although I think it's not a big deal, as long as your id_?sa has permissions 600 like mine, or even 400. Chris The man page for ssh(1) provides a lot of detail about the sensitivity of the various files related to ssh. To quote it regarding a few of them: ~/.ssh/

Re: Best practices for securing SSH server

2009-06-24 Thread RW
On Wed, 24 Jun 2009 17:12:59 +0200 cpghost wrote: > It all boils down to this: do you login from a secure machine > or not? Each tool has its own set of uses. When I want to log in > from a public terminal, I prefer OPIE; OPIE is probably fine in almost all cases, but you may wish to read the

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 06:37:55PM +0200, Roland Smith wrote: > On Wed, Jun 24, 2009 at 05:04:22PM +0200, cpghost wrote: > > Hi, > > > > is there anybody working on a versioning file system for FreeBSD > > right now? > > > I don't care if it is native or a layer, geom-ified, fuse-based, > > or ev

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 07:59:18PM +0200, cpghost wrote: > open(2) could open a file at an earlier revision: > > FILE *filep; s/FILE */int /; -cpghost. -- Cordula's Web. http://www.cordula.ws/ ___ freebsd-questions@freebsd.org mailing list http://lis

7.2 system stuck trying at boot, trying to mount root device

2009-06-24 Thread Forrest Aldrich
I'm running a modest PC that has FreeBSD-7.2 installed (fairly current build from CVS). Today, I did a "shutdown -r" to reboot the system. When it returned, the console is reporting: "Trying to mount root from ufs:/dev/ad4s1a" I've gone through and restored the boot loader, this works fine

Re: you're not going to believe this.

2009-06-24 Thread Charlie Kester
On Wed 24 Jun 2009 at 02:32:24 PDT free...@t41t.com wrote: The lifetime and reliability of SSDs are less-than-or-equal-to the lifetime and reliability of spinning magnetic drives, so don't buy an SSD for that. Whether SSDs use less power is an open question. There's a lot of data going either wa

Re: 7.2 system stuck trying at boot, trying to mount root device

2009-06-24 Thread Polytropon
On Wed, 24 Jun 2009 14:13:41 -0400, Forrest Aldrich wrote: > I also did a proper mount, fsck, and umount under the LiveFS shell, > which made no difference. I hope I'm just reading it in the wrong order. The correct order is to 1st fsck, then mount, not vice versa. Never fsck a mounted file syst

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Roland Smith
On Wed, Jun 24, 2009 at 07:59:18PM +0200, cpghost wrote: > On Wed, Jun 24, 2009 at 06:37:55PM +0200, Roland Smith wrote: > > On Wed, Jun 24, 2009 at 05:04:22PM +0200, cpghost wrote: > > > Hi, > > > > > > is there anybody working on a versioning file system for FreeBSD > > > right now? > > > > > I

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Polytropon
On Wed, 24 Jun 2009 21:11:25 +0200, Roland Smith wrote: > VMS had a filesystem that uses versioning: > [http://en.wikipedia.org/wiki/Files-11] That's the first thing that came into my mind when reading this message. See LOGIN.COM;1 and then rm -rf /*.*;* :-) But it's not "had", it's "has", beca

Re: you're not going to believe this.

2009-06-24 Thread Gary Kline
On Wed, Jun 24, 2009 at 11:48:00AM -0700, Charlie Kester wrote: > On Wed 24 Jun 2009 at 02:32:24 PDT free...@t41t.com wrote: > > > >The lifetime and reliability of SSDs are less-than-or-equal-to the > >lifetime and reliability of spinning magnetic drives, so don't buy an SSD > >for that. Whether SS

panic ohci_add_done

2009-06-24 Thread lysergius2001
Hi, Could use some pointers here. I have an AMD64 system Gigabyte GA-MA770 motherboard, 4 GB RAM, Athlon 64 CPU. System won't boot. Flags error, panic ohci_add_done : addr 0x... not found Then it reboots. Tried disabling everything in the bios. (Including usb kbd and mouse) At wit's end...

echo in sh calls write function repeatedly in kernel driver?

2009-06-24 Thread Naeem Afzal
I used this sample echo driver listed here: http://www.freebsd.org/doc/en/books/arch-handbook/driverbasics-char.html and used Example 9-2 for 5.X FreeBSD. Modifed and added a printline in write function to display Count value: I am using 7.1 FreeBSD version. I compiled the driver and ran the

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Morten Grunnet Buhl
* cpghost [2009-06-24 17:04 +0200]: > Hi, > > is there anybody working on a versioning file system for FreeBSD > right now? - I don't know how fare along hammerfs is in being ported to FreeBSD. But from what I have heard, feature-wise, it might be something that meets your needs. An altern

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 09:11:25PM +0200, Roland Smith wrote: > > Yes, that's one possibility. But just like Subversion (which I'm > > using extensively here), it's not really transparent. > > What is? If you have to extend the API like you propose below, all > programs that want to use that featu

Re: Versioning File System for FreeBSD?

2009-06-24 Thread cpghost
On Wed, Jun 24, 2009 at 11:26:50PM +0200, Morten Grunnet Buhl wrote: > * cpghost [2009-06-24 17:04 +0200]: > > Hi, > > > > is there anybody working on a versioning file system for FreeBSD > > right now? > > - I don't know how fare along hammerfs is in being ported to FreeBSD. > But from what I

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Polytropon
On Wed, 24 Jun 2009 23:57:34 +0200, cpghost wrote: > Yep, you're right. I thought about a way to extend the API in a > backwards compatible way, but that's not as easy or straight > forward as it seems. In fact, it opens a whole can of worms. > > If the versioned file system isn't also POSIX comp

Re: The question of moving vi to /bin

2009-06-24 Thread Bruce Cran
On Wed, 24 Jun 2009 06:13:49 -0700 "b. f." wrote: > ??? Who is giving them that credit? This isn't new. You already have > some control over swapping via several oids: > > vm.swap_enabled > vm.disable_swapspace_pageouts > vm.defer_swapspace_pageouts > vm.swap_idle_enabled > vm.swap_idle_thresh

Re: Versioning File System for FreeBSD?

2009-06-24 Thread Roland Smith
On Wed, Jun 24, 2009 at 11:57:34PM +0200, cpghost wrote: > Quite true! > > I see even more ambiguity here: What about a versioned file pointed > to by hard links from two versioned directories? The more I think about it, the more problems I can see. Look e.g. at symbolic links. Or looking from th

cc1: error: unrecognized command line option "-mfdpic"

2009-06-24 Thread Jin Guojun
This option "-mfdpic" is shown in manual page for gcc 4.1 or later -mfdpic Select the FDPIC ABI, that uses function descriptors to represent pointers to functions. Without any PIC/PIE-related options, it implies -fPIE. With -fpic or -fpie, it assumes GOT entr

Re: The question of moving vi to /bin

2009-06-24 Thread Manish Jain
If you want to make a case for replacing ed(1), you're going to have to come up with some concrete reasons for doing so, not just make a (long and hyperbolic) statement that you don't like it. Any Unix tool has to clearly fall either under the category of non-interactive (grep, sed, ex) or

Re: The question of moving vi to /bin

2009-06-24 Thread John L. Templer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Manish Jain wrote: >> >> If you want to make a case for replacing ed(1), you're going to have >> to come up with some concrete reasons for doing so, not just make a >> (long and hyperbolic) statement that you don't like it. >> > > Any Unix tool has

Re: cc1: error: unrecognized command line option "-mfdpic"

2009-06-24 Thread Mel Flynn
On Wednesday 24 June 2009 18:09:36 Jin Guojun wrote: > This option "-mfdpic" is shown in manual page for gcc 4.1 or later > >-mfdpic >Select the FDPIC ABI, that uses function descriptors to > represent pointers to functions. Without any PIC/PIE-related options, it > implies -fP

Re: Isolating high cpu load at function level

2009-06-24 Thread Mel Flynn
On Wednesday 24 June 2009 07:42:06 Gary Gatten wrote: > I have a process with several threads - the main "worker" threads > typically use < 20% CPU - but after upgrading to a new version they're > now using > 90% cpu. I'm trying to determine what function these > threads are performing that's req