Re: FreeBSD9 - Fresh install (2)
On 2012/10/14 at 01:59, Jos Chrispijn wrote: > > When setting up my 1TB harddisk for FreeBSD 9.0, I have some questions > about partioning: > I think of creating two partitions of 5Gb; one for the standard > FreeBSD file layour and a second one with a /backup slice on it. > Does this make sense? > > BR, > Jos Chrispijn > If you intend to use ZFS, then backup would not be very difficult. I've just tried backing up my ZFS filesystem onto an external USB harddrive with just a few steps. -- 10 PRINT "HELLO, WORLD" ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
poudriere amassing fetch errors
Hello, for some time I have noticed that poudriere bulk build amass fetch errors, i.e., the corresponding distfile(s) cannot be fetched by the build jail and I have to fetch these manually. Does anybody know a fix to this unnerving condition? Cheers, -- Christopher J. Ruwe TZ: GMT + 2h GnuPG/GPG: 0xE8DE2C14 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Sat, Oct 13, 2012 at 11:15:36PM +0200, Polytropon wrote: > On Sat, 13 Oct 2012 13:47:01 -0700, Gary Kline wrote: > > On Sat, Oct 13, 2012 at 01:19:07PM +0200, Polytropon wrote: > > > On Fri, 12 Oct 2012 16:46:28 -0700, Gary Kline wrote: > > > > > > The disassembling can be done with > > > > > > % pdfimages source.pdf . > > > > > > Then the files can be edited whatever tool you like, e. g. Gimp. > > > They often come out in PBM format. > > > > > > > > > A qstn I should have asked last time. this book is a history or > > bio of richland county, ohio:: in type, it's like 650 or more > > pages. SO: Is pdfimages going to spit of 6t50 files? as noted > > in last email, only a couple of these images are of any interest > > Depends on what actually _is_ in the PDF file. If every page is > represented as a picture, 650 pictures will be created. If it > contains text _and_ images, the images will be output, if will > _only_ output the images, with no real realtion to where they > have been placed in the text. As suggested by the name "pdfimages" > it takes the images from the PDF file. :-) > > The easiest way to check for possible text is to install xpdf > which brings the binary "pdftotext" (if I remember correctly that > this tool is in _that_ package). You can then use it like this: > > % pdftotext source.pdf > > It will create "source.txt" with all actual text (but of course > without _any_ formatting except line breaks and ^L page breaks), > including page numbers. But hey, it's pure ASCII text suitable > for further processing. :-) > > Run "pdftotext" without parameters for a short summary of its > parameters; "man pdftotext" is also provided. > Well, then my original instincts were right. I ran the pdftotext and nothing but the page numbers were there. rats. oh-well, at least I can type in byhhand what I want:) > > -- > Polytropon > Magdeburg, Germany > Happy FreeBSD user since 4.0 > Andra moi ennepe, Mousa, ... -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Twenty-six years of service to the Unix community. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: send-pr Submission Times
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat Oct 13 20:04:28 2012, Doug Hardie wrote: > I sent a PR using send-pr earlier today. However, after having sent it and > received a line that said it was submitted, I realized I didn't include my > email address. Somehow I completely overlooked that. I have been waiting for > it to show up in the on-line indexes, but it hasn't so far. How long does > that process normally take? I am wondering if it was just dropped because of > the lack of the email address. > > > ___ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org" Hi Doug, Check your outbound mail queue, and perhaps it is stuck in there. Also, look at the send-pr man page and the use of the PR_FORM environment variable. You can create a default send-pr template, save it as a file and put the filename in PR_FORM. The next time you start send-pr, your PR will be populated from the template. Hope that helps, Greg - -- Greg Larkin http://www.FreeBSD.org/ - The Power To Serve http://www.sourcehosting.net/ - Ready. Set. Code. http://twitter.com/cpucycle/ - Follow you, follow me -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (Darwin) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlB6A5AACgkQ0sRouByUApAPjQCfVlcDm8iK4zxbLnrL2VZgataI NLMAnAmobdYvs42FyPQpYSMe8rgRMfve =0SIr -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
send-pr Submission Times
I sent a PR using send-pr earlier today. However, after having sent it and received a line that said it was submitted, I realized I didn't include my email address. Somehow I completely overlooked that. I have been waiting for it to show up in the on-line indexes, but it hasn't so far. How long does that process normally take? I am wondering if it was just dropped because of the lack of the email address. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Sat, 13 Oct 2012 13:38:16 -0700, Gary Kline wrote: > On Sat, Oct 13, 2012 at 01:19:07PM +0200, Polytropon wrote: > > On Fri, 12 Oct 2012 16:46:28 -0700, Gary Kline wrote: > > > ive got a question that fits in here. hopefully. > > > > > > last week I found a book from 1901 that google had scanned and listed > > > as a pdf file. it was text plus photos of the rich/famous of the > > > 1800s. somehow, google found the exact string that matched my great > > > grandfather [from the civil war]. I d'loaded the file (maybe 2mbytes) > > > and searched using acroread. nada. I used the pdftotext utility. > > > same: nothing but some 600 page numbers. > > > > > > my guess is that google just took photos of the book and used other > > > tools to create a pdf file. I am not =that= serious about genealogy, > > > but I would like to know if there are any tools to edit this kind of > > > pdf file. > > > > In case the PDF is nothing more than a compilation of images, > > there's a way to deal with it for editing: > > > the images in this book aren't what I am interested in. > just text. In case the text is "in" images (i. e. the images contain text), postprocessing those images will be the only way to obtain the text information (if there is no actual text in the PDF). > what fmt works best with the ocr suites? or are they about the > same? for the section I got in that 1901 book on my g-grandfather, > it was only about 1.5 pages. there was no photo, just his name > and some bio. Still, things I had no knowledge of. I'm sure > that my father didnt know either! It should work with any lossless (!) format, especially if it does only contain two colors (as any BW format of PBM, GIF and PNG can do, and JPEG can't). In case tesseract OCR does not operate on PBM files directly, convert them into something it can handle better, like TIFF or maybe PNG; you can use % convert .-530.pbm 530.png % convert .-531.pbm 531.png manually (as you will only process two files) and then run the OCR process on them. Note that pdfimages can also output color images (if they are color images in the source), e. g. I found .-000.ppm (PPM format) with a diagram in "Good Ideas, Through the Looking Glass" by N. Wirth. I'm not sure if there could also "directly" be PNG or EPS files in a PDF file... -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Sat, 13 Oct 2012 13:47:01 -0700, Gary Kline wrote: > On Sat, Oct 13, 2012 at 01:19:07PM +0200, Polytropon wrote: > > On Fri, 12 Oct 2012 16:46:28 -0700, Gary Kline wrote: > > > > The disassembling can be done with > > > > % pdfimages source.pdf . > > > > Then the files can be edited whatever tool you like, e. g. Gimp. > > They often come out in PBM format. > > > > > A qstn I should have asked last time. this book is a history or > bio of richland county, ohio:: in type, it's like 650 or more > pages. SO: Is pdfimages going to spit of 6t50 files? as noted > in last email, only a couple of these images are of any interest Depends on what actually _is_ in the PDF file. If every page is represented as a picture, 650 pictures will be created. If it contains text _and_ images, the images will be output, if will _only_ output the images, with no real realtion to where they have been placed in the text. As suggested by the name "pdfimages" it takes the images from the PDF file. :-) The easiest way to check for possible text is to install xpdf which brings the binary "pdftotext" (if I remember correctly that this tool is in _that_ package). You can then use it like this: % pdftotext source.pdf It will create "source.txt" with all actual text (but of course without _any_ formatting except line breaks and ^L page breaks), including page numbers. But hey, it's pure ASCII text suitable for further processing. :-) Run "pdftotext" without parameters for a short summary of its parameters; "man pdftotext" is also provided. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Sat, Oct 13, 2012 at 01:19:07PM +0200, Polytropon wrote: > On Fri, 12 Oct 2012 16:46:28 -0700, Gary Kline wrote: > > The disassembling can be done with > > % pdfimages source.pdf . > > Then the files can be edited whatever tool you like, e. g. Gimp. > They often come out in PBM format. > A qstn I should have asked last time. this book is a history or bio of richland county, ohio:: in type, it's like 650 or more pages. SO: Is pdfimages going to spit of 6t50 files? as noted in last email, only a couple of these images are of any interest -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Twenty-six years of service to the Unix community. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Sat, Oct 13, 2012 at 01:19:07PM +0200, Polytropon wrote:
> On Fri, 12 Oct 2012 16:46:28 -0700, Gary Kline wrote:
> > ive got a question that fits in here. hopefully.
> >
> > last week I found a book from 1901 that google had scanned and listed
> > as a pdf file. it was text plus photos of the rich/famous of the
> > 1800s. somehow, google found the exact string that matched my great
> > grandfather [from the civil war]. I d'loaded the file (maybe 2mbytes)
> > and searched using acroread. nada. I used the pdftotext utility.
> > same: nothing but some 600 page numbers.
> >
> > my guess is that google just took photos of the book and used other
> > tools to create a pdf file. I am not =that= serious about genealogy,
> > but I would like to know if there are any tools to edit this kind of
> > pdf file.
>
> In case the PDF is nothing more than a compilation of images,
> there's a way to deal with it for editing:
the images in this book aren't what I am interested in.
just text.
>
> step 1: disassemble
> step 2: edit images
> step 3: reassemble
>
> The disassembling can be done with
>
> % pdfimages source.pdf .
>
> Then the files can be edited whatever tool you like, e. g. Gimp.
> They often come out in PBM format.
>
> Finally the images can be re-converted to PDF and combined to one
> PDF file:
>
> for IMG in .*.pbm; do
> convert ${IMG} ${IMG}.pdf
> done
> pdftk .*.pdf output target.pdf
>
> Note the ".*" prefix for the file specification: The images extracted
> by pdfimages match that pattern (at least in the case I tested it for).
> If they get other names than .001.pbm, change the approach
> accordingly.
>
turns out that the first roughtly 580 pages are of no interest.
I'll see if tesseract-ocr can get rid of most of the data.
what fmt works best with the ocr suites? or are they about the
same? for the section I got in that 1901 book on my g-grandfather,
it was only about 1.5 pages. there was no photo, just his name
and some bio. Still, things I had no knowledge of. I'm sure
that my father didnt know either!
gary
>
>
> --
> Polytropon
> Magdeburg, Germany
> Happy FreeBSD user since 4.0
> Andra moi ennepe, Mousa, ...
--
Gary Kline kl...@thought.org http://www.thought.org Public Service Unix
Twenty-six years of service to the Unix community.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Sat, Oct 13, 2012 at 04:40:23AM +0200, C. P. Ghost wrote: > On Sat, Oct 13, 2012 at 1:46 AM, Gary Kline wrote: > > On Fri, Oct 12, 2012 at 10:40:29PM +0400, Boris Samorodov wrote: > >> 10.10.2012 02:35, Gary Aitken пишет: > >> > >> > Can someone give me advice on editing pdf files? > >> > >> Take a look at graphics/inkscape. > >> > >> -- > >> WBR, Boris Samorodov (bsam) > >> FreeBSD Committer, http://www.FreeBSD.org The Power To Serve > > > > > > ive got a question that fits in here. hopefully. > > > > last week I found a book from 1901 that google had scanned and > > listed > > as a pdf file. it was text plus photos of the rich/famous of the > > 1800s. somehow, google found the exact string that matched my great > > grandfather [from the civil war]. I d'loaded the file (maybe > > 2mbytes) > > and searched using acroread. nada. I used the pdftotext utility. > > same: nothing but some 600 page numbers. > > > > my guess is that google just took photos of the book and used other > > tools to create a pdf file. I am not =that= serious about > > genealogy, > > but I would like to know if there are any tools to edit this kind of > > pdf file. > > I suspect the following: they scanned the book and put all the images > into the PDF. The PDF itself is merely a container for scanned pages; > it thus contains no text (save for the page numbers). > > That Google was able to search in this file is probably due to them running > some OCR program on the image files, and then indexing the (approximate) > text that the OCR program generated. Probably they used something like > tesseract-ocr from ports graphics/tesseract: > http://code.google.com/p/tesseract-ocr/ > in more recent google stuff--text--sci-tech zines or whatever--it sseems like they have used some very high-end ocr programs and =then= turned the file into pdf. I have been able to get very good textfiles from a small sample of google's work. a few years ago I tried the ocr ports we have. very poor results. it may be time to see if the newer versions gives me better results. gary ps: tesseract was one I tried [circa '10] ... time to look at the actual Code! > > -cpghost. > > -- > Cordula's Web. http://www.cordula.ws/ -- Gary Kline kl...@thought.org http://www.thought.org Public Service Unix Twenty-six years of service to the Unix community. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: FreeBSD9 - Fresh install (2)
On Sat, 13 Oct 2012 19:59:22 +0200, Jos Chrispijn wrote: > When setting up my 1TB harddisk for FreeBSD 9.0, I have some questions > about partioning: > I think of creating two partitions of 5Gb; one for the standard FreeBSD > file layour and a second one with a /backup slice on it. > Does this make sense? What exactly do you intend to backup (and why) onto a second partition on the same disk? Sure, it is possible to do so, but you should make yourself clear _what_ you want to do and why, then it will imply _how_ will do it the best way -- even though there might be more than one best way... :-) Also depending on your needs, 5GB may be too few to hold a full installation of OS and programs (even though I've managed to get a full 5.2 installation plus tons of programs on a 6 GB disk, with 50% of free space afterwards). What do you do with the remaining 900 GB of the disk? :-) Also, please make yourself familiar with the terminology of what a partitions and what a slice is, and see it in the proper context of MBR vs. GPT partitioning. If I take your use of the TT (termini technici) literally, you would have one partition containing everything rooted to /, and a second partition that contains the same. You would either manually have a backup mechanism from the 1st to the 2nd partition, or you could configure them in some automated mirroring mechanism. But I don't see a real use case when doing so on the _same_ disk. Still it would be possible, and it could even be helpful in some bad case scenario. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: FreeBSD9 - Fresh install
On Sat, 13 Oct 2012 19:56:42 +0200, Jos Chrispijn wrote: > I am trying to setup a new BSD server with v9.0 stable on it. > While setting it up, I come across an issue: there are some YouTube > movies available in which only the following disk setup is chosen: > - freebsd-boot > - freebsd ufs / > - freebsd-swap > Now when I setup and choose for Auto defaults, I see the wellknown /var, > /tmp and /usr again. > Are these differences between what I see on YouTube examples due to v9.0 > or what is causing that? Please read about classic MBR vs. new GPT installs: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install.html http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/bsdinstall.html Of course you can choose _any_ layout with _any_ of the partitioning mechanisms. But "auto" usually does it differently, so use the manual approach and define the partitions according to your needs. With the approach you mentioned above you will get one (!) UFS partition, rooted in /, containing all the subtrees, so /usr, /var and /home will be _all_ in one partition. (Note that there basically is nothing wrong with this idea, even though some admins prefer to use partitions for separating OS components for a good reason.) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
FreeBSD9 - Fresh install (2)
When setting up my 1TB harddisk for FreeBSD 9.0, I have some questions about partioning: I think of creating two partitions of 5Gb; one for the standard FreeBSD file layour and a second one with a /backup slice on it. Does this make sense? BR, Jos Chrispijn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
FreeBSD9 - Fresh install
I am trying to setup a new BSD server with v9.0 stable on it. While setting it up, I come across an issue: there are some YouTube movies available in which only the following disk setup is chosen: - freebsd-boot - freebsd ufs / - freebsd-swap Now when I setup and choose for Auto defaults, I see the wellknown /var, /tmp and /usr again. Are these differences between what I see on YouTube examples due to v9.0 or what is causing that? BR, Jos Chrispijn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
FreeBSD9 - Fresh install
I am trying to setup a new BSD server with v9.0 stable on it. While setting it up, I come across an issue: there are some YouTube movies available in which only the following disk setup is chosen: - freebsd-boot - freebsd ufs / - freebsd-swap Now when I setup and choose for Auto defaults, I see the wellknown /var, /tmp and /usr again. Are these differences between what I see on YouTube examples due to v9.0 or what is causing that? BR, Jos Chrispijn ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: hal question
ajtiM gmail.com> writes: > > Hi! > > The proble with hal-xorg-mouse is well known very long period and looks like > that is nothing better. Also well know is that HAL is in maintenance mode - > no > new features are added (from freedestop). As I remmeber before I never (we) > had a problem with hal-xorg-mouse but I forgot ewhen this problem started. > Is it possible to downgrade hal and the problem is saved? > ... The start of the problem seems to be located in time and is rather well documented: http://www.freebsd.org/cgi/query-pr.cgi?pr=171433&cat= It is now up to devs to determine which package (X server, hal) is to be looked at. jb ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: SATA Controllers
On Tue 2012-10-09 09:25:34 UTC-0700, Doug Hardie (bc...@lafn.org) wrote: > Looking through the list of SATA Controllers available at Best Buy, I > don't find any of them listed on the 9.0 hardware page. I need a > couple cheap ones (for non-production systems). Does anyone have > recommendations? I've used a Promise 378 FastTrak SATA PCI controller card in the past. They don't seem easy to find any more, though. Certainly not new. There's a Promise S150 TX4 for US$15 on eBay which apparently is supported by FreeBSD. The controller chip is a PDC20319 which is listed in /usr/src/sys/dev/ata/chipsets/ata-promise.c. Also a SATA300 TX2plus for the same price which is probably supported too. The seller's photo shows a PDC207xx controller chip - probably the PDC20771 which is also listed in ata-promise.c. Of course there's not much consumer demand for these types of cards any more, now that motherboards with four or more SATA sockets are common! Good luck :-) ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
hal question
Hi! The proble with hal-xorg-mouse is well known very long period and looks like that is nothing better. Also well know is that HAL is in maintenance mode - no new features are added (from freedestop). As I remmeber before I never (we) had a problem with hal-xorg-mouse but I forgot ewhen this problem started. Is it possible to downgrade hal and the problem is saved? Thanks. Mitja http://jpgmag.com/people/lumiwa http://www.redbubble.com/people/lumiwa ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: editing pdf files
On Fri, 12 Oct 2012 16:46:28 -0700, Gary Kline wrote:
> ive got a question that fits in here. hopefully.
>
> last week I found a book from 1901 that google had scanned and listed
> as a pdf file. it was text plus photos of the rich/famous of the
> 1800s. somehow, google found the exact string that matched my great
> grandfather [from the civil war]. I d'loaded the file (maybe 2mbytes)
> and searched using acroread. nada. I used the pdftotext utility.
> same: nothing but some 600 page numbers.
>
> my guess is that google just took photos of the book and used other
> tools to create a pdf file. I am not =that= serious about genealogy,
> but I would like to know if there are any tools to edit this kind of
> pdf file.
In case the PDF is nothing more than a compilation of images,
there's a way to deal with it for editing:
step 1: disassemble
step 2: edit images
step 3: reassemble
The disassembling can be done with
% pdfimages source.pdf .
Then the files can be edited whatever tool you like, e. g. Gimp.
They often come out in PBM format.
Finally the images can be re-converted to PDF and combined to one
PDF file:
for IMG in .*.pbm; do
convert ${IMG} ${IMG}.pdf
done
pdftk .*.pdf output target.pdf
Note the ".*" prefix for the file specification: The images extracted
by pdfimages match that pattern (at least in the case I tested it for).
If they get other names than .001.pbm, change the approach
accordingly.
--
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
Re: Sysctls and privacy
y Hello. it's a -questions@ here, right? (= 2012/10/12 09:59:15 -0300 schu...@ime.usp.br => To freebsd-questions@freebsd.org : > In my system I use separate user accounts for running untrusted > programs at the moment. While many will probably argue that jails > are a superior solution, in my specific case its the inverse. What's a specific of the case? > I know FreeBSD is not ready by default to have multiple untrusted > users in the system, at least from a security viewpoint. I have > done quite a bit of changes to make the situation better. What changes? > However, there is something bugging me. Some sysctls apparently > expose too much information about the system. Some examples: the > number of context switches, the number of forks, the total used > memory (at the byte level), the total used space for each file > system (at the byte level) and even a graph of how my GEOM devices > are organized! What kind of danger is this? This system info expose seems nothing to do with making the system work unexpectedly. > I know some programs like gkrellm need this information to function, > but on the other hand, I feel pretty uncomfortable with the > information presented by gkrellm being logged. It's at the very least > a loss of privacy. You didn't mention you must have an outside network connection. Should your untrusted software have it? Just unplug it otherwise. > So, I would like to ask for a way to disable user access to all > sysctls that are not needed by basic user programs (shell, terminal, etc). You can make the special chroot/jail environment for the users keeping them away from the access to the binaries exposing sysctls. And permit them the write access only to the volumes mounted as '-o noexec'. There should be the way(s) to bypass this, at the least one of the DSLs e. g. ruby, python, perl, php used in that environment may provide API for sysctls or the modules can be built to use sysctl api from C. Thus you should keep your C compiler and any of the soucres e. g. /usr/src to present on that environment. Even with that who knows if your software doesn't use sysctl(3) functions. But the 'basic user programs' shouldn't. > Also, if possible, I would like to have a group of users to whom > these sysctls are accessible as an exception (to run gkrellm). I don't think it's possible at the moment. Do you think this can be implemented without performance loss? Sysctl is a kind of the kernel stuff... How about emaulators/qemu, virtualbox, etc? > Thanks for your time. -- Peter Vereshagin (http://vereshagin.org) pgp: A0E26627 ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
