Re: How to login to my jail from host itself (normal user)
On 13/11/2011 02:54, masayoshi wrote: I must adduser Ayumi as normal user. After adding her in jail, I add her in host. Then I type the following command: # ln -s /usr/jails/www/home/ayumi /home When she logins, she is in /usr/jails/www/home/ayumi. But if she uses cd command, she can move directory. I would like to keep her in jail because she is reckless. I would like to know how to login to my jail as normal user from host itself when login prompt appear. If possible, could you tell me how to do it? Thanks in advance. I assume simply using a restricted shell like rbash is unsuitable? And that you cannot simply give your user an unprivileged login account -- without root access, while they may be able to chdir around the system, there's not much damage they can do accidentally. (Although users are endlessly inventive when it comes to breaking things...) When you say 'login' do you mean at the console? That's going to be fairly tricky to enforce. However if you mean logging in over the net by eg. ssh then to confine the user to a jail is pretty easy. Enable sshd in the jail -- usually this means configuring sshd the host to bind to specific IP numbers rather than '*'. See jail(8) for more details. Then you give the user a working login and password in the jail and not on the host system. Either delete the account in the host or set the login shell to /sbin/nologin and lock the password. Now, if you want to support console based logins direct to a jail. As far as I know, this is not possible with the FreeBSD console. It would be a really cool thing to be able to do though. Dedicate one of the console vty's to the jail... Unfortunately I don't think that's going to be impossible without code changes to the OS. The problem is init(8) -- the master process on the system, and the process that controls each of the getty(8) programs that watch for login attempts on the various terminals -- that program would require modification so that it knew how to associate a particular vty with a jail, and then manage the login process to create a new login session within the jail. About the only way I can think of doing this for a console login is to use X and set up xdm(8) to enable its remote login capability, in which case you get a pull-down on the login screen to allow you to choose which host to log into. But I've never tried to set up a system like this, so I can't really say if its possible or not. My educated guess is that it should work, but it's quite an ambitious project for a beginner. It would be nice if you could just force the login process on the host to run something like 'jexec -U $USER 1 /bin/tcsh' but that's a command you need root privilege for, so scratch that. Also, it's pretty dodgy to assume that the jail you want is always going to be running with JID=1. If you can rely on your user to follow instructions, then you can just tell them to 'ssh jailhost' immediately they login to the host, and set up sshd in the jail as described above. This means they will have to have a working login on the host system, but you can make that be an unprivileged account without root access or access to anything else sensitive. Their account in the jail can have root there, no problem. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
Re: Can't access a music CD (or any other media now)
On Sun, 23 Oct 2011 19:25:15 -0500 Conrad J. Sabatier conr...@cox.net wrote: On Sun, 23 Oct 2011 15:38:29 -0500 Conrad J. Sabatier conr...@cox.net wrote: No, it seems that there's a severe level of brokenness that has been introduced into the source tree with regards to CD devices. I've been exploring this issue on my own system the last couple of days, and am no closer to arriving at a solution than when I first started. None of the CD-related apps I have installed are working. cdcontrol will read an audio CD OK, it seems, but playback is useless, since, like most newer machines, I have no direct connection between the CD drive and the audio device. Apps such as kscd, xmcd, etc. report no disc or no device found. grip (using cdparanoia) will detect an audio disc and even fetch the correct cddb info, but ripping fails completely. xmms reports no appropriate ioctl for device. This is progress? OK, I've made a little headway here. At least, I've managed to get cdrtools to work once again, after rebuilding/installing the port and setting the default device to the SCSI address (1,0,0) of cd0 instead of the device name. Grip is now working with cdda2wav. Hallelujah! :-) Still can't seem to get plain old audio CD playback working with anything, though. :-( Ah-ha! After plowing through a ton of ports and docs tonight, I finally had a Eureka! moment. It seems that it's quite possible to fashion a poor man's CD player app (script) out of the following cdda2wav command options (got this example from the man page): cdda2wav -q -e -t4 -d0 -N In this case, -t4 means to play track 4. Using -B instead, would play the whole disc. The command simply sends the data to the soundcard (/dev/dsp) as it's being ripped. In combination with a few other cdda2wav options to obtain the CDDB info for the disc, one could fairly easily whip up a little CD player script. I'm a man on a mission now! :-) I *will* be rolling up my sleeves and hacking together some shell code in the days to come. May even wind up submitting the finished product as a new port for the benefit of other folks out there still struggling to play their CDs since the CD infrastructure changed not too long ago. Light! I see light at the end of the tunnel! :-) -- Conrad J. Sabatier conr...@cox.net ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to login to my jail from host itself (normal user)
Hello. 2011/11/13 09:23:57 + Matthew Seaman m.sea...@infracaninophile.co.uk = To masayoshi : MS On 13/11/2011 02:54, masayoshi wrote: MS I would like to keep her in jail because she is reckless. Wow! MS Now, if you want to support console based logins direct to a jail. As MS far as I know, this is not possible with the FreeBSD console. It would MS be a really cool thing to be able to do though. Dedicate one of the MS console vty's to the jail... Unfortunately I don't think that's going MS to be impossible without code changes to the OS. The problem is init(8) MS -- the master process on the system, and the process that controls each MS of the getty(8) programs that watch for login attempts on the various MS terminals -- that program would require modification so that it knew how MS to associate a particular vty with a jail, and then manage the login MS process to create a new login session within the jail. I'd find it obvious to try to launch getty by mean of jexec by setting the command in /etc/ttys? Something like that: ttyv0 /usr/sbin/jexec `cat /var/run/some_jail.id` /usr/libexec/getty Pc cons25 on secure -- Peter Vereshagin pe...@vereshagin.org (http://vereshagin.org) pgp: A0E26627 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Can't access a music CD (or any other media now)
On Sun, 13 Nov 2011 04:44:56 -0600 Conrad J. Sabatier articulated: On Sun, 23 Oct 2011 19:25:15 -0500 Conrad J. Sabatier conr...@cox.net wrote: On Sun, 23 Oct 2011 15:38:29 -0500 Conrad J. Sabatier conr...@cox.net wrote: No, it seems that there's a severe level of brokenness that has been introduced into the source tree with regards to CD devices. I've been exploring this issue on my own system the last couple of days, and am no closer to arriving at a solution than when I first started. None of the CD-related apps I have installed are working. cdcontrol will read an audio CD OK, it seems, but playback is useless, since, like most newer machines, I have no direct connection between the CD drive and the audio device. Apps such as kscd, xmcd, etc. report no disc or no device found. grip (using cdparanoia) will detect an audio disc and even fetch the correct cddb info, but ripping fails completely. xmms reports no appropriate ioctl for device. This is progress? OK, I've made a little headway here. At least, I've managed to get cdrtools to work once again, after rebuilding/installing the port and setting the default device to the SCSI address (1,0,0) of cd0 instead of the device name. Grip is now working with cdda2wav. Hallelujah! :-) Still can't seem to get plain old audio CD playback working with anything, though. :-( Ah-ha! After plowing through a ton of ports and docs tonight, I finally had a Eureka! moment. It seems that it's quite possible to fashion a poor man's CD player app (script) out of the following cdda2wav command options (got this example from the man page): cdda2wav -q -e -t4 -d0 -N In this case, -t4 means to play track 4. Using -B instead, would play the whole disc. The command simply sends the data to the soundcard (/dev/dsp) as it's being ripped. In combination with a few other cdda2wav options to obtain the CDDB info for the disc, one could fairly easily whip up a little CD player script. I'm a man on a mission now! :-) I *will* be rolling up my sleeves and hacking together some shell code in the days to come. May even wind up submitting the finished product as a new port for the benefit of other folks out there still struggling to play their CDs since the CD infrastructure changed not too long ago. Light! I see light at the end of the tunnel! :-) I applaud your enthusiasm. I actually tend to try and reinvent the wheel from time to time myself. Not so much because I feel the wheel has an inherent flaw but rather because I just like a good challenge. While such endeavors might prove useful from strictly a theoretical research point of view, in practice they can seriously reduce productivity. I often wonder what happened to the premise that computers should make man's life easier, not harder. Why should users be force to go to these extremes to just play an audio CD when other OSs all ready have that capability sans ruminating for such a simple task. Again, good luck. I won't be partaking of your research since I have other PCs near me that are fully capable of preforming the relatively simple task of playing an audio CD. However, if you do get some free time perhaps you could invest it in some really socially advantageous work such as find a cure for cancer. Now that would be something that all could appreciate. -- Jerry ✌ jerry+f...@seibercom.net Disclaimer: off-list followups get on-list replies or ignored. Do not CC this poster. Please do not ignore the Reply-To header. http://www.catb.org/~esr/faqs/smart-questions.html ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Can't access a music CD (or any other media now)
Hello. 2011/11/13 07:41:27 -0500 Jerry je...@seibercom.net = To FreeBSD : J I often wonder what happened to the premise that computers should make J man's life easier, not harder. Why should users be force to go to these But probably it's easier to plug the wire from cd drive to a sound card? That way one should get a mixer's separate CD volume regulator at no cost... But sure this makes impossible the any processing like this: cdda2wav args | tee /some/file /dev/dsp Either way has its advantages and drawbacks. -- Peter Vereshagin pe...@vereshagin.org (http://vereshagin.org) pgp: A0E26627 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to login to my jail from host itself (normal user)
On 13/11/2011 12:31, Peter Vereshagin wrote: I'd find it obvious to try to launch getty by mean of jexec by setting the command in /etc/ttys? Something like that: ttyv0 /usr/sbin/jexec `cat /var/run/some_jail.id` /usr/libexec/getty Pc cons25 on secure That might work. Needs testing though -- when someone logs in does init in the host system recognize that the jailed login has taken over the vty from the jail? Or does it just keep spawning new getty processes? Lets see... lucid-nonsense:/etc:# diff -u ttys.save ttys --- ttys.save 2011-11-13 12:49:28.868350588 + +++ ttys2011-11-13 12:50:10.609176357 + @@ -38,7 +38,7 @@ ttyv4 /usr/libexec/getty Pc cons25 on secure ttyv5 /usr/libexec/getty Pc cons25 on secure ttyv6 /usr/libexec/getty Pc cons25 on secure -ttyv7 /usr/libexec/getty Pc cons25 on secure +ttyv7 /usr/sbin/jexec 1 /usr/libexec/getty Pc cons25 on secure ttyv8 /usr/local/bin/xdm -nodaemon xterm off secure # Serial terminals # The 'dialup' keyword identifies dialin lines to login, fingerd etc. lucid-nonsense:/etc:# kill -HUP 1 lucid-nonsense:/etc:# jexec 1 ps -ax | grep getty 22182 v7 Is+J 0:00.01 /usr/libexec/getty Pc ttyv7 Looking good so far... fx Wanders into the other room and logs in on the console -- vty7, which identifies itself as the jail. lucid-nonsense:/etc:# ps -auxwww | grep v7 root 22182 0.0 0.0 21700 1676 v7 IsJ 12:50PM 0:00.06 login [pam] (login) matthew22293 0.0 0.0 10312 2524 v7 IJ 12:53PM 0:00.07 -tcsh (tcsh) matthew22299 0.0 0.0 9372 1668 v7 S+J 12:53PM 0:00.11 top root 22362 0.0 0.0 9124 1192 1 S+ 12:56PM 0:00.00 grep v7 Seems to work nicely. Now, does logout work properly? fxLogs out of the jail lucid-nonsense:/etc:# ps -auxwww | grep v7 root 22390 0.0 0.0 6916 1028 v7 Is+J 12:59PM 0:00.01 /usr/libexec/getty Pc ttyv7 Yep. All works nicely. That's really cool. Definitely needs care to make sure the jail ID matches up to the intended jail. Using m...@freebsd.org's updated jail init stuff from the sysutils/jailrc port and enabling persistent jails probably the way to go there. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matt...@infracaninophile.co.uk Kent, CT11 9PW signature.asc Description: OpenPGP digital signature
Default Samba port?
Hello list, Can anyone advise me the appropriate Samba port to install - the handbook refers to samba34, but I see samba35 and samba36 in in ports. This is for a home server, so I'm not necessarily looking for production standard, but something that just works on RELEASE-8.2 amd64. Thanks, Peter Harrison.___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Default Samba port?
On Sun, Nov 13, 2011 at 4:37 AM, Peter Harrison four.harris...@googlemail.com wrote: Hello list, Can anyone advise me the appropriate Samba port to install - the handbook refers to samba34, but I see samba35 and samba36 in in ports. This is for a home server, so I'm not necessarily looking for production standard, but something that just works on RELEASE-8.2 amd64. your best bet may be to install a prebuilt package via: pgk_add -r samba that is unless you need some non-standard knobs tuned. -pete -- pete wright www.nycbug.org ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Default Samba port?
On Sun, Nov 13, 2011 at 7:37 AM, Peter Harrison four.harris...@googlemail.com wrote: Can anyone advise me the appropriate Samba port to install - the handbook refers to samba34, but I see samba35 and samba36 in in ports. This is for a home server, so I'm not necessarily looking for production standard, but something that just works on RELEASE-8.2 amd64. samba36 is the current stable version. The other two are kept for legacy compatibility. 35 and 34 are the last version in those branches. Don't worry about them. The handbook has not been updated for two major revisions of samba. This is a comment for the others on the list, not directly at you: maybe ports like this should have a directory samba that always points to the most recent stable version. Then the handbook would not need to be updated to reflect version changes like this. It would only need to be updated if the actual instructions change or become outdated? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: apps to display cpu temp
On 11/12/2011 8:02 PM, Polytropon wrote: On Sat, 12 Nov 2011 18:19:57 -0800, Edward Martinez wrote: Hi, I have a Pentium 4 and i have been trying to get coretemp and sysctl hw.acpi.thermal.tz0.temperature to display my Cpu temperture , however i have not had any luck using them Are there any other apps perhaps from ports that reports CPU temp? I've been using the port xmbmon for that, in combination with device smbus device iicbus device iicsmb device iicbb device iic in the kernel configuration file - on a Pentium 4 system. I haven't tried the sysctl method, because xmbmon did work out of the box. :-) You can also use mbmon for text output. Here's an example from ~/.xinitrc calling xmbmon: xmbmon -g 150x100+0+897 \ -tmin 20.0 -tmax 70.0 \ -cmtmb CPU -cltmb blue \ -cmtcpu CS -cltcpu cyan \ -cmtcs SYS -cltcs green \ -vmin 2.0 -vmax 3.0 -cmvc V -clvc red Depending on the sensor installation of your particular system, check if the different values do match the hardware. Maybe check from within your CMOS setup for reference values. For amd, I use dev.cpu.0.temperature. For some reason, it's 15 degrees off compared to the bios and linux. I used benchmarks/stress along with setting specific frequencies to figure out where linux and where freebsd would hit a temperature limit. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: Can't access a music CD (or any other media now)
On 10/25/11, Michael D. Norwick mnorw...@centurytel.net wrote: Setting these environment variables had no effect on my machine. $cdcontrol play 1 still produces drive activity but no sound. The graphical apps I am trying such as Abraca, or MPlayer, still do not seem to recognize an audio CD. Gnome Audio CD Extractor - Sound Juicer - still errors with 'No CD-ROM drives found' even though Metallica is in the drive. mplayer needs to be compiled with libcdio to support playing cdda:// cddb:// Then you only need to give -cdrom-device argument to mplayer. But you do not need that, something like this will work just fine (from mplayer manual page): mplayer [cdda|cddb]://track[-endtrack][:speed][/device] [options] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Wine-fbsd64 updated to 1.3.32 (32bit Wine for 64bit FreeBSD)
Hi, Packages [1] for wine-fbsd64-1.3.32 have been uploaded to mediafire [2]. These packages include the patch (first version) from bug report 27653 (http://bugs.winehq.org/show_bug.cgi?id=27653). This fixes logging in for EVE Online. There is a known UDP related problem with wine (see http://markmail.org/message/i7rtfz7uxd5s4fvl for details). Also, there are many reports that wine does not work with a clang compiled world (help in fixing this problem is appreciated as it affects quite a few users). The patch [3] for nVidia users is now included in the package and is run on installation (if the relevant files are accessable). Please read the installation messages for further information. Regards, David [1] MD5 (freebsd8/wine-fbsd64-1.3.32,1.tbz) = 4e05528f6e26004b4bcd3e1dafb5e821 MD5 (freebsd9/wine-fbsd64-1.3.32,1.txz) = 7951f88480723aee516fe211ad5a6950 [2] http://www.mediafire.com/wine_fbsd64 [3] The patch is located at /usr/local/share/wine/patch-nvidia.sh signature.asc Description: This is a digitally signed message part.
Nuovo messaggio
Ciao, firma anche tu l'appello per il reato di omicidio stradale: http://omicidiostradale.it/ saluti, Dario Bossi ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
What is current VINET status?
I don't see it in NOTES for LINT and amd64/i386 arch, but it's possible to turn it on. Can I consider that this option is currently experimental and shouldn't be used critical places? -- Eir Nym ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: What is current VIMAGE status?
I'm sorry it's about VIMAGE option. -- Eir Nym On 14 November 2011 02:52, Eir Nym eir...@gmail.com wrote: I don't see it in NOTES for LINT and amd64/i386 arch, but it's possible to turn it on. Can I consider that this option is currently experimental and shouldn't be used critical places? -- Eir Nym ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to login to my jail from host itself (normal user)
Matthew Seaman m.sea...@infracaninophile.co.uk wrote: If you can rely on your user to follow instructions, then you can just tell them to 'ssh jailhost' immediately they login to the host ... Might it work equally well, and avoid the dependency on following instructions, to put exec ssh jailhost in this user's .login on the real host? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: How to login to my jail from host itself (normal user)
- Original Message - From: per...@pluto.rain.com per...@pluto.rain.com To: m.sea...@infracaninophile.co.uk Cc: rocksta...@y7mail.com; freebsd-questions@freebsd.org Sent: Monday, 14 November 2011 3:02 PM Subject: Re: How to login to my jail from host itself (normal user) Matthew Seaman m.sea...@infracaninophile.co.uk wrote: If you can rely on your user to follow instructions, then you can just tell them to 'ssh jailhost' immediately they login to the host ... Might it work equally well, and avoid the dependency on following instructions, to put exec ssh jailhost in this user's .login on the real host? For me, as I am newbie, it is simple,easy,very very cool idea. Normal user can damage my computer in illegal way. They want to have root authority without permission. She might kill even people. 3 Thanks you for your advice. I can keep her in jail on my host computer. --- Inexperienced FreeBSD user: Level 3 masayoshi Ayumi Kinoshita http://tinyurl.com/63zg3op ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
Re: FreeBSD make buildworld fail: cc: Internal error: Killed: 9 (program cc1)
On Fri, Nov 11, 2011 at 10:51:29AM +, Traiano Welcome wrote: Another question worth asking: how much memory/swap does the machine have? If FreeBSD runs short of memory, it will start killing processes. Hi Frank As follows: Mem: 96M Active, 286M Inact, 224M Wired, 213M Buf, 1368M Free Swap: 4094M Total, 4094M Free Note that this is FreeBSD system is installed in a Vmware VM. No swap partition is configured as I expected the system to run entirely with RAM as managed by the Vmware hypervisor and resource management technology. Note that this machine is currently doing nothing else other than my attempts at make buildworld. Hi Traiano, That looks OK. The only other thing I can think of is testing your memory with sysutils/memtest. It's unusual for it to die with SIGKILL though. Still it's worth ruling it out. Regards, -- Frank Contact info: http://www.shute.org.uk/misc/contact.html pgpRosaJTqn93.pgp Description: PGP signature
Re: poppler-qt-0.16.7
Hi, Has anything been done to fix this? I don't believe it was already done: nothing changed in /usr/ports/UPDATING, also no instructions for portupgrade yet. I still get # pkg_version -VIL= poppler-qt-0.16.7 ! Comparaison failed # pkgdb -F Stale origin: 'graphics/poppler-qt': perhaps moved or obsoleted. (as last week..) 2011/11/7 Koop Mast k...@rainbow-runner.nl On Mon, 2011-11-07 at 12:28 +0100, n dhert wrote: Some changes where done about poppler-* There is an entry in /usr/ports/UPDATING about poppler-gtk (which I don't have), but I do have poppler-qt (nothing in /usr/ports/UPDATING) ... # pkgdb -F gives Stale origin: 'graphics/poppler-qt': perhaps moved or obsoleted. Skip this for now? [yes] To skip it without asking in future, please list it in HOLD_PKGS. Is there a similar instruction for poppler-qt and for portupgrade (not postmaster which I don't have) ? poppler-qt is used here: # pkg_info -R poppler-qt-0.16.7 Information for poppler-qt-0.16.7: Required by: kdegraphics-3.5.10_9 Oops, I accidently wrote graphics/poppler-qt3 instead of poppler-qt, I fix that thanks. The poppler support in kdegraphics3 has been disabled so there isn't any problems. -Koop ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org
