Re: I just broke out of a FreeBSD jail.. Known bug??

2007-12-28 Thread Johan Ström

On Dec 28, 2007, at 13:41 , Edwin Groothuis wrote:


On Fri, Dec 28, 2007 at 01:15:38PM +0100, Johan Str?m wrote:

Thats my home dir on core!.. That should very much not be visible
there! I have full access now (from the wrong jail!)

Known bug or did I just stumble upon something pretty bad??


You didn't really break out of it, the person who managed the machine
did something he shouldn't have done: Moving the directories while
the jail(s) were running. It should be mentioned in the BUGS section
of the jail(8) command.



Yes, thats true.. Without super-root doing that the breakout  
would never happen. But still a bug, so yes I guess it should be  
mentioned in BUGS (and handbook too? not sure where this kind of  
special features are noted) unless its fixed.


--
Johan

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


sbp(4) write error wedging GEOM mirror

2007-12-28 Thread Ulrich Spoerlein
Hello *,

since a couple of months, my 6-STABLE box is wedging whenever I rebuild
my geom mirrors to two external drives simultaneously. The setup is a
follows:

Two ATA disks, two external ATA disks attached via firewire. On these
four disks there are three geom mirrors. When rebuilding two of them at
the same time, I frequently get sbp write errors which will eventually
lead to a reset and then I/O to this mirror is no longer possible. The
system is still running and delivering MP3s from the other mirror via
NFS.

ad0: 238475MB SAMSUNG SP2514N VF100-33 at ata0-master UDMA100
ad1: 381554MB SAMSUNG HD400LD WQ100-14 at ata0-slave UDMA100
GEOM_MIRROR: Device gm2 created (id=3879710801).
GEOM_MIRROR: Device gm2: provider ad1 detected.
GEOM_MIRROR: Device gm0 created (id=3640684492).
GEOM_MIRROR: Device gm0: provider ad0s1 detected.
GEOM_MIRROR: Device gm1 created (id=2853507194).
GEOM_MIRROR: Device gm1: provider ad0s2 detected.
GEOM_LABEL: Label for provider ad0s3 is msdosfs/DATEN.
Root mount waiting for: GMIRROR GMIRROR GMIRROR
GEOM_MIRROR: Force device gm2 start due to timeout.
Expensive timeout(9) function: 0xc0948e15(0xc343fc00) 0.006123403 s
GEOM_MIRROR: Device gm2: provider ad1 activated.
GEOM_MIRROR: Device gm2: provider mirror/gm2 launched.
GEOM_MIRROR: Force device gm0 start due to timeout.
GEOM_MIRROR: Device gm0: provider ad0s1 activated.
GEOM_MIRROR: Device gm0: provider mirror/gm0 launched.
GEOM_MIRROR: Force device gm1 start due to timeout.
GEOM_MIRROR: Device gm1: provider ad0s2 activated.
GEOM_MIRROR: Device gm1: provider mirror/gm1 launched.
Trying to mount root from ufs:/dev/mirror/gm0a
GEOM_LABEL: Label msdosfs/DATEN removed.
GEOM_LABEL: Label for provider ad0s3 is msdosfs/DATEN.
GEOM_LABEL: Label msdosfs/DATEN removed.
WARNING: attempt to net_add_domain(netgraph) after domainfinalize()

fwohci0: BUS reset
fwohci0: node_id=0x8800ffc0, gen=2, non CYCLEMASTER mode
firewire0: 2 nodes, maxhop = 1, cable IRM = 0 (me)
firewire0: root node is not cycle master capable
firewire0: bus manager 0 (me)
fwohci0: too many cycle lost, no cycle master presents?
fwohci0: txd err=14 ack busy_X
fwohci0: txd err=14 ack busy_X
fwohci0: txd err=14 ack busy_X
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc1, gen=3, CYCLEMASTER mode
firewire0: 2 nodes, maxhop = 1, cable IRM = 1 (me)
firewire0: bus manager 1 (me)
firewire0: New S400 device ID:0050770e012005cf
da0 at sbp0 bus 0 target 0 lun 0
da0: Prolific PL-3507C Drive 2804 Fixed Simplified Direct Access SCSI-4 device
da0: 50.000MB/s transfers
da0: 238475MB (488397168 512 byte sectors: 255H 63S/T 30401C)
GEOM_MIRROR: Device gm0: provider da0s1 detected.
GEOM_MIRROR: Device gm0: provider da0s1 is stale.
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc2, gen=4, CYCLEMASTER mode
firewire0: 3 nodes, maxhop = 2, cable IRM = 2 (me)
firewire0: bus manager 2 (me)
fwohci0: txd err=14 ack busy_X
fwohci0: txd err=14 ack busy_X
fwohci0: txd err=14 ack busy_X
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc2, gen=5, CYCLEMASTER mode
firewire0: 3 nodes, maxhop = 2, cable IRM = 2 (me)
firewire0: bus manager 2 (me)
firewire0: New S400 device ID:0050770e013023f0
da1 at sbp0 bus 0 target 1 lun 0
da1: Prolific PL-3507C Drive 2804 Fixed Simplified Direct Access SCSI-4 device
da1: 50.000MB/s transfers
da1: 381554MB (781422768 512 byte sectors: 255H 63S/T 48641C)
GEOM_MIRROR: Device gm2: provider da1 detected.
GEOM_MIRROR: Device gm2: rebuilding provider da1.

Rebuilding some components finishes ok, then write errors start
appearing

(11:27:31) [EMAIL PROTECTED]: ~# gmirror status
  NameStatus  Components
mirror/gm2  DEGRADED  ad1
  da1 (5%)
mirror/gm0  DEGRADED  ad0s1
  da0s1 (87%)
mirror/gm1  DEGRADED  ad0s2
  da0s2
(11:30:05) [EMAIL PROTECTED]: ~# GEOM_MIRROR: Device gm0: rebuilding provider 
da0s1 finished.
GEOM_MIRROR: Device gm0: provider da0s1 activated.
(da0:sbp0:0:0:0): WRITE(10). CDB: 2a 0 0 4a f3 f1 0 0 20 0
(da0:sbp0:0:0:0): CAM Status: SCSI Status Error
(da0:sbp0:0:0:0): SCSI Status: Check Condition
(da0:sbp0:0:0:0): MEDIUM ERROR csi:70,70,70,70 asc:c,0
(da0:sbp0:0:0:0): Write error
(da0:sbp0:0:0:0): Retrying Command (per Sense Data)
(da0:sbp0:0:0:0): WRITE(10). CDB: 2a 0 0 48 9c d1 0 0 20 0
(da0:sbp0:0:0:0): CAM Status: SCSI Status Error
(da0:sbp0:0:0:0): SCSI Status: Check Condition
(da0:sbp0:0:0:0): MEDIUM ERROR csi:70,70,70,70 asc:c,0
(da0:sbp0:0:0:0): Write error
(da0:sbp0:0:0:0): Retrying Command (per Sense Data)
...
(da0:sbp0:0:0:0): WRITE(10). CDB: 2a 0 0 49 c d1 0 0 20 0
(da0:sbp0:0:0:0): CAM Status: SCSI Status Error
(da0:sbp0:0:0:0): SCSI Status: Check Condition
(da0:sbp0:0:0:0): MEDIUM ERROR csi:70,70,70,70 asc:c,0
(da0:sbp0:0:0:0): Write error
(da0:sbp0:0:0:0): Retrying Command (per Sense Data)
(da0:sbp0:0:0:0): WRITE(10). CDB: 2a 0 0 82 7d 31 0 0 20 0
(da0:sbp0:0:0:0): CAM Status: SCSI Status Error
(da0:sbp0:0:0:0): SCSI Status: Check Condition
(da0:sbp0:0:0:0): MEDIUM ERROR csi:70,70,70,70 asc:c,0

Re: I just broke out of a FreeBSD jail.. Known bug??

2007-12-28 Thread Edwin Groothuis
On Fri, Dec 28, 2007 at 01:15:38PM +0100, Johan Str?m wrote:
 Thats my home dir on core!.. That should very much not be visible  
 there! I have full access now (from the wrong jail!)
 
 Known bug or did I just stumble upon something pretty bad??

You didn't really break out of it, the person who managed the machine
did something he shouldn't have done: Moving the directories while
the jail(s) were running. It should be mentioned in the BUGS section
of the jail(8) command.

Edwin
-- 
Edwin Groothuis  |Personal website: http://www.mavetju.org
[EMAIL PROTECTED]|  Weblog: http://www.mavetju.org/weblog/
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Problems on intel G33M motherboard

2007-12-28 Thread lileding

I got a new box with Core2 E6550
and the motherboard is a Foxtone G33M
However, the GENERIC cdrom of 6.2 Release can only start at ACPI disabled,
and USB keyboard sucks
and AT keyboard sometimes lead to crash during boot up
the worst is it cannot launch the other CPU core
with apic error

I also tried 7-PRERELEASE but still in vain

is there any patch ? 
___

freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


I just broke out of a FreeBSD jail.. Known bug??

2007-12-28 Thread Johan Ström

Hello list!

I'm running a FreeBSD 6.2-p8 box with a few jails. The other day a  
user of mine uploaded a number of files to one jail, then I (in the  
actual system outside of all jails) moved that directory to another  
jail.. When I later did some chdiring in the original jail, I found  
my self standing in my other jails pwd and beeing able to read/ 
manipulate files!..


Example:

jb-1 (the base machine, jailbox-1)
shell (jail 1)
core (jail 2)

shell /home/johan# pwd
/home/johan
shell /home/johan# ls
.cshrc  .irssi  .login_conf .mailrc .profile 
.shrc   .zcompdump  public_html
.histfile   .login  .mail_aliases   .noident.rhosts  
.ssh.zshrc

shell /home/johan# mkdir test
shell /home/johan# cd test
shell /home/johan/test# touch asd
shell /home/johan/test# ls -al
total 4
drwxr-xr-x  2 root   root   512 Dec 28 13:09 .
drwxr-x--x  6 johan  johan  512 Dec 28 13:09 ..
-rw-r--r--  1 root   root0 Dec 28 13:09 asd
shell /home/johan/test#

Then moving it on the root box

jb-1 /usr/jails# mv shell/home/johan/test core/home/johan/
jb-1 /usr/jails#

And back on shell jail:

shell /home/johan/test# ls
asd
shell /home/johan/test# pwd
pwd: .: No such file or directory
shell /home/johan/test# cd ..
shell /home/johan# ls
.cshrc  .lesshst.mailrc .shrc   .vimrc   
file.bigroundcube.sql   www.tar.gz
.histfile   .login  .mysql_history  .ssh.zcompdu 
mp  picsstuff
.history.login_conf .profile.vim.zshrc   
postfix-2.4.5   test
.irssi  .mail_aliases   .rhosts .viminfo 
cacert.pem  public_html vmail.tar.gz

shell /home/johan#

Thats my home dir on core!.. That should very much not be visible  
there! I have full access now (from the wrong jail!)


Known bug or did I just stumble upon something pretty bad??

--
Johan Ström
Stromnet
[EMAIL PROTECTED]
http://www.stromnet.se/


___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: sbp(4) write error wedging GEOM mirror

2007-12-28 Thread Ulrich Spoerlein
On Fri, 28.12.2007 at 13:54:37 +0100, Ulrich Spoerlein wrote:
 [Ramblings about sbp(4) wedging geom mirror]

Ok, it looks like sbp(4) is off the hook. I tried the rebuilding again,
this time attaching da0 via umass(4) instead of sbp(4) and while it also
eventually wedges, umass can recover from this situation by its own

umass0: Prolific PL-3507C USB Storage Device, rev 2.00/0.01, addr 2
da0 at umass-sim0 bus 0 target 0 lun 0
da0: SAMSUNG SP2514N VF10 Fixed Direct Access SCSI-0 device
da0: 40.000MB/s transfers
da0: 238475MB (488397168 512 byte sectors: 255H 63S/T 30401C)
GEOM_MIRROR: Component da0s1 (device gm0) broken, skipping.
GEOM_MIRROR: Cannot add disk da0s1 to gm0 (error=22).
GEOM_MIRROR: Component da0s2 (device gm1) broken, skipping.
GEOM_MIRROR: Cannot add disk da0s2 to gm1 (error=22).
GEOM_MIRROR: Component da0s1 (device gm0) broken, skipping.
GEOM_MIRROR: Cannot add disk da0s1 to gm0 (error=22).
GEOM_MIRROR: Component da0s1 (device gm0) broken, skipping.
GEOM_MIRROR: Cannot add disk da0s1 to gm0 (error=22).
GEOM_MIRROR: Device gm0: provider da0s1 detected.
GEOM_MIRROR: Device gm0: provider da0s1 is stale.
GEOM_MIRROR: Device gm1: provider da0s2 detected.
GEOM_MIRROR: Device gm1: provider da0s2 is stale.
GEOM_MIRROR: Device gm0: provider da0s1 disconnected.
GEOM_MIRROR: Device gm0: provider da0s1 detected.
GEOM_MIRROR: Device gm0: rebuilding provider da0s1.
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc1, gen=2, CYCLEMASTER mode
firewire0: 2 nodes, maxhop = 1, cable IRM = 1 (me)
firewire0: bus manager 1 (me)
fwohci0: txd err=14 ack busy_X
fwohci0: txd err=14 ack busy_X
fwohci0: txd err=14 ack busy_X
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc1, gen=3, CYCLEMASTER mode
firewire0: 2 nodes, maxhop = 1, cable IRM = 1 (me)
firewire0: bus manager 1 (me)
firewire0: New S400 device ID:0050770e013023f0
da1 at sbp0 bus 0 target 0 lun 0
da1: Prolific PL-3507C Drive 2804 Fixed Simplified Direct Access SCSI-4 device
da1: 50.000MB/s transfers
da1: 381554MB (781422768 512 byte sectors: 255H 63S/T 48641C)
GEOM_MIRROR: Device gm2: provider da1 detected.
GEOM_MIRROR: Device gm2: rebuilding provider da1.
GEOM_MIRROR: Device gm0: rebuilding provider da0s1 finished.
GEOM_MIRROR: Device gm0: provider da0s1 activated.
GEOM_MIRROR: Device gm1: provider da0s2 disconnected.
GEOM_MIRROR: Device gm1: provider da0s2 detected.
GEOM_MIRROR: Device gm1: rebuilding provider da0s2.
(14:08:27) [EMAIL PROTECTED]: ~# gmirror status
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
GEOM_MIRROR: CannotGEOM_MIRROR: Synchronization request failed (error=5). 
da0s2[WRITE(offset=23111270 write metadata on da0s1 (device=gm0, error=5).
GEOM_MIRROR: Cannot update metada400, length=131072)]
GEOM_MIRROR: Device gm1: provider da0s2 disconnected.
GEOta on disk da0s1 (error=5).
M_MIRROR: Device gm1: rebuilding provider da0s2 stopped.
GEOM_MIRROR: Device gm0: provider da0s1 disconnected.
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
Expumass0: BBB reset failed, IOERROR
eumass0: BBB bulk-in clear stall failed, IOERROR
nsumass0: BBB bulk-out clear stall failed, IOERROR
ive timeout(9) function: 0xc09623a9(0xc32de800) 0.006188295 s
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
... (multiple pages)
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
(da0:umass-sim0:0:0:0): Synchronize cache failed, status == 0x4, scsi status == 
0x0
umass0: BBB reset failed, IOERROR
umass0: BBB bulk-in clear stall failed, IOERROR
... (multiple pages)
umass0: BBB bulk-in clear stall failed, IOERROR
umass0: BBB bulk-out clear stall failed, IOERROR
  NameStatus  Components
mirror/gm2  DEGRADED  ad1
  da1 (12%)
mirror/gm0  DEGRADED  ad0s1
mirror/gm1  DEGRADED  ad0s2

No more geom_gpt.ko ?

2007-12-28 Thread Greg Rivers
The kernel module for GPT(8) partition tables is not present in RELENG_7 
as it was in RELENG_6.  Is options GEOM_PART_GPT now mandatory in the 
kernel config, or is not building the kernel module an oversight?


--
Greg
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: No more geom_gpt.ko ?

2007-12-28 Thread Marcel Moolenaar


On Dec 28, 2007, at 9:58 AM, Greg Rivers wrote:

The kernel module for GPT(8) partition tables is not present in  
RELENG_7 as it was in RELENG_6.  Is options GEOM_PART_GPT now  
mandatory in the kernel config, or is not building the kernel module  
an oversight?


Building modules is forthcoming. It will be in 7.1...

--
Marcel Moolenaar
[EMAIL PROTECTED]


___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: portaudit and portsnap acting silly.

2007-12-28 Thread Dave Overton
Fixed.

For reference, it was squid, happily caching the data for me.

Makes one wonder why the portsnap and portaudit servers or clients aren't
http compliant if they use http protocols... Especially since the author of
portsnap suggests a cache server for speed

Oh well...

Dave Overton, Owner
SYIX.COM

[EMAIL PROTECTED]
(530) 755-1751 x101
Fax (530) 751-8871
800-988-SYIX 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Dave Overton
 Sent: Thursday, December 27, 2007 11:22 AM
 To: freebsd-stable@freebsd.org
 Subject: portaudit and portsnap acting silly.
 
 Portaudit does this:  
 # portaudit -Fa 
 auditfile.tbz 100% of   46 kB 
 6001 kBps
 portaudit: Database too old.
 Old database restored.
 portaudit: Download failed.
  
  
 Portsnap does this:
 # portsnap fetch
 Looking up portsnap.FreeBSD.org mirrors... 4 mirrors found.
 Fetching snapshot tag from portsnap3.FreeBSD.org... done.
 Latest snapshot on server is older than what we already have!
 Cowardly refusing to downgrade from Thu Dec 27 08:10:58 PST 
 2007 to Mon Dec  3 17:04:28 PST 2007.
  
 
 In case anyone knows anyone who can beat them back into submission.
 
 Dave Overton, Owner
 SYIX.COM
 
 [EMAIL PROTECTED]
 (530) 755-1751 x101
 Fax (530) 751-8871
 800-988-SYIX 
 
  
 ___
 freebsd-stable@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-stable
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


tiny GSS nit

2007-12-28 Thread Michael Butler
On 7-stable, /usr/lib contains ..

[EMAIL PROTECTED]:/home/imb ll /usr/lib/libgssapi*
-r--r--r--  1 root  wheel  57358 Dec 14 12:46 /usr/lib/libgssapi.a
lrwxr-xr-x  1 root  wheel 14 Dec 19 16:50 /usr/lib/libgssapi.so -
libgssapi.so.9
-r--r--r--  1 root  wheel  28040 Dec 19 16:50 /usr/lib/libgssapi.so.9
-r--r--r--  1 root  wheel  95148 Dec 17 23:07 /usr/lib/libgssapi_krb5.a
lrwxr-xr-x  1 root  wheel 19 Dec 19 16:50 /usr/lib/libgssapi_krb5.so
- libgssapi_krb5.so.9
-r--r--r--  1 root  wheel  54756 Dec 19 16:50 /usr/lib/libgssapi_krb5.so.9
-r--r--r--  1 root  wheel  97316 Dec  8 10:47 /usr/lib/libgssapi_krb5_p.a
-r--r--r--  1 root  wheel  59424 Dec  4 08:44 /usr/lib/libgssapi_p.a

 .. but /etc/gss/mech contains this from /usr/src/etc/gss/mech ..

[EMAIL PROTECTED]:/home/imb less /usr/src/etc/gss/mech
# $FreeBSD: src/etc/gss/mech,v 1.1 2005/12/29 14:40:18 dfr Exp $
#
# Name  OID Library name
Kernel module
kerberosv5  1.2.840.113554.1.2.2/usr/lib/libgssapi_krb5.so.8-

It needs a version bump - dunno if -current needs the same ..

Michael
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: tiny GSS nit

2007-12-28 Thread Scot Hetzel
On 12/28/07, Michael Butler [EMAIL PROTECTED] wrote:
 On 7-stable, /usr/lib contains ..

 [EMAIL PROTECTED]:/home/imb ll /usr/lib/libgssapi*
:
 -r--r--r--  1 root  wheel  54756 Dec 19 16:50 /usr/lib/libgssapi_krb5.so.9
:
  .. but /etc/gss/mech contains this from /usr/src/etc/gss/mech ..

 [EMAIL PROTECTED]:/home/imb less /usr/src/etc/gss/mech
 # $FreeBSD: src/etc/gss/mech,v 1.1 2005/12/29 14:40:18 dfr Exp $
 #
 # Name  OID Library name
 Kernel module
 kerberosv5  1.2.840.113554.1.2.2/usr/lib/libgssapi_krb5.so.8-

 It needs a version bump - dunno if -current needs the same ..

This change has already been made to -CURRENT, it just needs to be
MFC'd to 7-STABLE.

Scot
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to [EMAIL PROTECTED]