Re: Belinea s.Book1 can't boot OpenBSD
Oh my, another Nanobook variant. Try disabling ACPI in the kernel before you boot. You may want to do this from another machine and copy the new kernel to the machine using the Install CD boot because the PS2K device doesn't seem to be handled on mine (Packard Bell EasyNote XS) at all and I get no key handling in a boot -c. Regards, -Andy On 1 Mar 2008, at 16:52, Denis Fondras wrote: Hello, I'm currently testing a Belinea s.Book1 microlaptop (http://www.belinea.com/en/s_line/product_tagline.jsp?node=652artnr=399501 ) and I can't install OpenBSD on it. At first sight it seems that every core components are supported (Via VX700 + Via C7-M - you can check the PDF Datasheet at http://assets.maxdata.com/?id=128745). I tried OpenBSD/4.2 and the latest snapshot (from ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/i386/ and mirrors) and everytime I get the same result. The laptop loads bsd.rd and just reboot when printing entry point at... (before any blue writing). I tried with an USB CD drive and with PXE. Here is a Linux dmesg if it can help to see if a particular device could explain the crash : 4.1.1-21)) #1 Sun Feb 10 22:06:33 UTC 2008 BIOS-provided physical RAM map: BIOS-e820: - 0009dc00 (usable) BIOS-e820: 0009dc00 - 000a (reserved) BIOS-e820: 000dc000 - 000e (reserved) BIOS-e820: 000e8000 - 0010 (reserved) BIOS-e820: 0010 - 3bee (usable) BIOS-e820: 3bee - 3beea000 (ACPI data) BIOS-e820: 3beea000 - 3bf0 (ACPI NVS) BIOS-e820: 3bf0 - 4000 (reserved) BIOS-e820: e000 - f000 (reserved) BIOS-e820: fec0 - fec1 (reserved) BIOS-e820: fee0 - fee01000 (reserved) BIOS-e820: fff8 - 0001 (reserved) Warning only 896MB will be used. Use a HIGHMEM enabled kernel. 896MB LOWMEM available. found SMP MP-table at 000f84b0 On node 0 totalpages: 229376 DMA zone: 4096 pages, LIFO batch:0 Normal zone: 225280 pages, LIFO batch:31 DMI present. ACPI: RSDP (v000 PTLTD ) @ 0x000f8470 ACPI: RSDT (v001 PTLTDRSDT 0x0604 LTP 0x) @ 0x3bee5663 ACPI: FADT (v001 CX700 PTLTW0x0604 PTL_ 0x000f4240) @ 0x3bee9a46 ACPI: SSDT (v001 PPmmRe PPm 0x0604 INTL 0x20030224) @ 0x3bee9aba ACPI: MADT (v001 PTLTD APIC 0x0604 LTP 0x) @ 0x3bee9f74 ACPI: MCFG (v001 PTLTDMCFG 0x0604 LTP 0x) @ 0x3bee9fc4 ACPI: DSDT (v001 VIA PTL_ACPI 0x0604 MSFT 0x010e) @ 0x ACPI: PM-Timer IO Port: 0x4008 ACPI: Local APIC address 0xfee0 ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) Processor #0 6:13 APIC version 20 ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) ACPI: IOAPIC (id[0x01] address[0xfec0] gsi_base[0]) IOAPIC[0]: apic_id 1, version 3, address 0xfec0, GSI 0-23 ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) ACPI: IRQ9 used by override. ACPI: IRQ10 used by override. Enabling APIC mode: Flat. Using 1 I/O APICs Using ACPI (MADT) for SMP configuration information Allocating PCI resources starting at 5000 (gap: 4000:a000) Detected 600.029 MHz processor. Built 1 zonelists. Total pages: 229376 Kernel command line: root=/dev/hdc1 ro mapped APIC to d000 (fee0) mapped IOAPIC to c000 (fec0) Enabling fast FPU save and restore... done. Enabling unmasked SIMD FPU exception support... done. Initializing CPU#0 PID hash table entries: 4096 (order: 12, 16384 bytes) Console: colour VGA+ 80x25 Dentry cache hash table entries: 131072 (order: 7, 524288 bytes) Inode-cache hash table entries: 65536 (order: 6, 262144 bytes) Memory: 901704k/917504k available (1499k kernel code, 15224k reserved, 599k data, 256k init, 0k highmem) Checking if this processor honours the WP bit even in supervisor mode... Ok. Calibrating delay using timer specific routine.. 1200.98 BogoMIPS (lpj=2401970) Security Framework v1.0.0 initialized SELinux: Disabled at boot. Capability LSM initialized Mount-cache hash table entries: 512 CPU: After generic identify, caps: a7c9bbff 0010 4181 CPU: L1 I Cache: 64K (64 bytes/line), D cache 64K (64 bytes/line) CPU: L2 Cache: 128K (64 bytes/line) CPU: After all inits, caps: 27c9bbff 0010 4181 ffcc Compat vDSO mapped to e000. CPU: Centaur VIA C7-M Processor 1200MHz stepping 00 Checking 'hlt' instruction... OK. ACPI: Core revision 20060707 ENABLING IO-APIC IRQs ..TIMER: vector=0x31 apic1=0 pin1=0 apic2=-1 pin2=-1 checking if image is initramfs... it is Freeing initrd memory: 4641k freed NET: Registered protocol family 16 EISA bus registered ACPI: bus type pci registered PCI: Using MMCONFIG PCI: No mmconfig possible on 0:0 PCI: No mmconfig possible on 0:1 PCI: No mmconfig possible on 0:f PCI: No
Re: Terrible messages in /var/log/messages
Are you actually using the I2C interface for anything? It may be that you have a variant of the hardware that isn't quite supported and it should be possible to disable the driver in the kernel and avoid these messages. -Andy On 21 Nov 2007, at 11:47, Evgeniy Sudyr wrote: Hello misc, After boot I see alot of terrible messages in /var/log/messages which are added to it every second. It look like driver bug. Maybe somebody can help resolve this problem. content of /var/run/dmsg.boot OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Pentium(R) 4 CPU 2.93GHz (GenuineIntel 686-class) 2.94 GHz cpu0: FPU ,V86 ,DE ,PSE ,TSC ,MSR ,PAE ,MCE ,CX8 ,APIC ,SEP ,MTRR ,PGE ,MCA ,CMOV ,PAT ,PSE36 ,CFLUSH ,DS ,ACPI ,MMX ,FXSR ,SSE ,SSE2 ,SS ,HTT ,TM,SBF,SSE3,MWAIT,DS- CPL,CNXT-ID,xTPR real mem = 527790080 (503MB) avail mem = 502685696 (479MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 01/23/06, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.4 @ 0xf04d0 (45 entries) bios0: vendor American Megatrends Inc. version 3.28 date 01/23/2006 bios0: Compaq Presario 061 PJ534AA-ABA SR1250NX NA440 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf8c60/304 (17 entries) pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801FB LPC rev 0x00) pcibios0: PCI bus #2 is the last bus bios0: ROM list: 0xc/0xa400! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82915G/P/GV Host rev 0x04 vga1 at pci0 dev 2 function 0 Intel 82915G/P/GV Video rev 0x04: aperture at 0xd000, size 0x1000 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) azalia0 at pci0 dev 27 function 0 Intel 82801FB HD Audio rev 0x03: irq 10 azalia0: host: High Definition Audio rev. 1.0 azalia0: codec: Realtek ALC880 (rev. 5.0), HDA version 0.9 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801FB PCIE rev 0x03 pci1 at ppb0 bus 1 uhci0 at pci0 dev 29 function 0 Intel 82801FB USB rev 0x03: irq 11 uhci1 at pci0 dev 29 function 1 Intel 82801FB USB rev 0x03: irq 3 uhci2 at pci0 dev 29 function 2 Intel 82801FB USB rev 0x03: irq 5 uhci3 at pci0 dev 29 function 3 Intel 82801FB USB rev 0x03: irq 10 ehci0 at pci0 dev 29 function 7 Intel 82801FB USB rev 0x03: irq 11 ehci0: timed out waiting for BIOS usb0 at ehci0: USB revision 2.0 uhub0 at usb0: Intel EHCI root hub, rev 2.00/1.00, addr 1 ppb1 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xd3 pci2 at ppb1 bus 2 VIA VT6306 FireWire rev 0x80 at pci2 dev 1 function 0 not configured rl0 at pci2 dev 2 function 0 Realtek 8139 rev 0x10: irq 6, address 00:11:2f:d7:ff:29 rlphy0 at rl0 phy 0: RTL internal PHY sis0 at pci2 dev 3 function 0 NS DP83815 10/100 rev 0x00, DP83815C: irq 3, address 00:a0:cc:a1:60:bb nsphyter0 at sis0 phy 0: DP83815 10/100 PHY, rev. 1 ichpcib0 at pci0 dev 31 function 0 Intel 82801FB LPC rev 0x03: PM disabled pciide0 at pci0 dev 31 function 2 Intel 82801FB SATA rev 0x03: DMA, channel 0 wired to compatibility, channel 1 wir ed to compatibility wd0 at pciide0 channel 1 drive 0: ST3120025A wd0: 16-sector PIO, LBA48, 114473MB, 234441648 sectors atapiscsi0 at pciide0 channel 1 drive 1 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: GENERIC, DVD RW 12XMax, 100I SCSI0 5/ cdrom removable wd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 5 cd0(pciide0:1:1): using PIO mode 4, Ultra-DMA mode 2 ichiic0 at pci0 dev 31 function 3 Intel 82801FB SMBus rev 0x03: irq 10 iic0 at ichiic0 adt0 at iic0 addr 0x2e: sch5017 rev 0x89 usb1 at uhci0: USB revision 1.0 uhub1 at usb1: Intel UHCI root hub, rev 1.00/1.00, addr 1 usb2 at uhci1: USB revision 1.0 uhub2 at usb2: Intel UHCI root hub, rev 1.00/1.00, addr 1 usb3 at uhci2: USB revision 1.0 uhub3 at usb3: Intel UHCI root hub, rev 1.00/1.00, addr 1 usb4 at uhci3: USB revision 1.0 uhub4 at usb4: Intel UHCI root hub, rev 1.00/1.00, addr 1 isa0 at ichpcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 biomask ff3d netmask ff7d ttymask pctr: user-level cycle counter enabled mtrr: Pentium Pro MTRR support ichiic0: exec: op 1, addr 0x2e, cmdlen 1, len 1, flags 0x00: timeout, status 0x40INUSE ichiic0: abort failed, status 0x42INTR,INUSE ichiic0: exec: op 1, addr 0x2e, cmdlen 1, len 1, flags 0x00: timeout, status 0x0 ichiic0: abort failed, status 0x42INTR,INUSE umass0 at uhub4
Should the amd64 page be updated yet? (revisited)
I'm wondering if anybody knows the stepping numbers of the ia32e processors that implement the no execute bit properly in the page tables? I think this would be useful information for the amd64 page, I know there is an errata on the core 2 boxes around this bit effecting both cores when one encounters the PTE but I believe that doesn't effect OpenBSD right? We are fully symmetric aren't we (apart from boot code)? Somebody in an earlier threat considered that the PTE shouldn't effect both cores if that particular PTE reference was only paged by one of the cores. I haven't had a look at the recent PTE structures for this processor but if it is legitimate that the same page can be referenced by two PTEs that refer to the same logical page then I guess the processor should really honour the bit per core - just in case somebody is constructing something proprietary and asymmetric right? Anyway, what do you think about including the stepping #s of Intel processors that work on the amd64 page? -Andy
Re: Changes to sysctl mibs recently?
Thanks, But no, this isn't the case on the Zaurus. The hw.cpuspeed sysctl is a read only value. The machdep.maxspeed was introduced to scale up and down the hw.setperf parameter on this system. The Zaurus normally operates at 416Mhz, the sysctl.conf contains the line machdep.maxspeed=520 on the Zaurus. I was going to set the maxspeed at that (worked on previous kernels) and the setperf value at 80 and vary it to 100 when I was running a build (along with atactl /dev/wd0c writecacheenable - I'm using a SanDisk Ultra III which provides write cache, can't remember if the Microdrive did). Any more thoughts folks? -Andy - Original Message - From: Chris Kuethe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, August 10, 2007 4:51 PM Subject: Re: Changes to sysctl mibs recently? i think you might belooking in the wrong place... my zaurus is at home right now, but on every other machine i have with adjustable cpu speed the controls are hw.cpuspeed and hw.setperf. CK On 8/10/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, I'm wondering if anyone can tell me about any recent changes in the sysctl mibs. I notice that the current snapshot on my Zaurus doesn't seem to handle machdep.maxspeed any more and just says 'value is not available'. OpenBSD 4.2 (GENERIC) #158: Wed Aug 8 15:32:05 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/zaurus/compile/GENERIC... etc. I also built a kernel and a new copy of sysctl from CVS and this doesn't seem to fix it either (although I haven't built the whole distro yet) sysctl machdep seems to report only.. midge# sysctl machdep machdep.debug=0 machdep.console_device=ttyC0 machdep.allowaperture=0 machdep.apmwarn=10 machdep.kbdreset=1 machdep.radix=0 Any ideas? -Andy -- GDB has a 'break' feature; why doesn't it have 'fix' too?
Re: router wont stop sending icmp redirects
net.inet.ip.redirect = 0 Means that the machine will not honour redirects. The value is used to ignore redirects sent by routers not to disable sending of redirects if you happen to be running as a router. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of tobias Freitag Sent: 16 November 2006 02:01 To: misc@openbsd.org Subject: router wont stop sending icmp redirects Hi list, I am trying to implement a transparent proxy using the pf rdr action but my clients ignore the icmp redirects that are send out by the openbsd box. I tried to get it to use adress translation instead, but no avail. The box is set to router mode (net.inet.ip.forwarding=1) and sending of redirects is switched off (net.inet.ip.redirect=0) but shamelessly ignored. Any ideas? Tobias Freitag -- Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! Ideal f|r Modem und ISDN: http://www.gmx.net/de/go/smartsurfer
OT: Adaptec SATA Raid controllers
Hi, I have just taken a contract at a company for to help with driving some procedure into their IT services to meet their growth demands. As an aside I have picked up on discussions about number of failures of SATA RAID subsystems using Adaptec 2610SA controllers provided by HP (running under various OS). They actually seem to be getting drives failing at an alarming rate and are actually getting occasional file system corruptions when this happens (typically on RAID 5 configurations). I have never encountered hot swap on SATA before and am wondering if anybody knows SATA well and can provide some info about SATA reliability in hot plug environments. -Andy
Re: OT: Adaptec SATA Raid controllers
Yeah, sorry Theo, I did post it as OT, I value this groups input greatly but point taken. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: 16 September 2006 20:59 To: Andrew Smith Cc: 'OpenBSD-misc list' Subject: Re: OT: Adaptec SATA Raid controllers You really have come to the wrong mailing list. This is a mailing list about OpenBSD. It is not a mailing list about SATA or SATA reliability. Nor is not a mailing list setup to assist you in fulfilling your contracts. It is about OpenBSD (which you do not mention), and which does not support those controllers you mention. Please stay on topic. I have just taken a contract at a company for to help with driving some procedure into their IT services to meet their growth demands. As an aside I have picked up on discussions about number of failures of SATA RAID subsystems using Adaptec 2610SA controllers provided by HP (running under various OS). They actually seem to be getting drives failing at an alarming rate and are actually getting occasional file system corruptions when this happens (typically on RAID 5 configurations). I have never encountered hot swap on SATA before and am wondering if anybody knows SATA well and can provide some info about SATA reliability in hot plug environments. -Andy
securelevel(7) and machdep.allowaperture
Just a question about the man page securelevel(7) really. It doesn't mention that for architectures where the aperture is enabled that the aperture value can only be lowered once in securelevel 1 or higher. Is this intentionally omitted because some architectures may not have it? and if so, is there not some incongruity in having it mentioned in the sysctl pages. -Andy
Re: Multi-tabbed Terminal
The last time I looked at this there seemed to be only gnome-terminal and Konsole in the ports tree that fulfilled this. Neither of these could really be considered light weight though. I will watch this thread with interest if anyone has a port of something decent that is small enough to run effectively on my Zaurus :P -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Clint Pachl Sent: 04 August 2006 18:03 To: OpenBSD-misc list Subject: Multi-tabbed Terminal Can anyone recommend a light-weight multi-tabbed terminal for OBSD 3.9? I looked through the i386 packages, but didn't notice any. I'm using FVWM2. I have used mrxvt, materm.sourceforge.net, on FreeBSD in the past and really liked it; minimal dependencies and small memory foot print. I just tried to compile mrxvt-0.4.2 on OBSD, but it failed. -pachl
really strange issue running sma from daily.local
I think this must be a misc issue rather than a ports issue but the issue concerns the use of mail/sma in /etc/daily.local. For several days I have had /etc/daily.local set up to run sma to produce an ascii summary of /var/log/maillog as follows.. sma -a /var/log/maillog /tmp/maillog.out mail -s Daily sendmail analysis root /tmp/maillog.out rm /tmp/maillog.out This invariably produces an empty maillog.out file when run from the standard cron job. I popped in various diagnostic steps including copying maillog to maillog.dummy just to verify that the executable could process files when run from cron (making sure that the rights and owner mirrored maillog exactly and I got the dummy output but no actual output from the real maillog. I also made sure that newsyslog was scheduled to rotate /var/log/maillog at a specific time rather than at a particular interval by changing the when field in /etc/newsyslog.conf from 24 to $D03 for a 3am daily execution in the belief that sma was actually seeing an empty file when it was run. - Still no joy. Any thoughts folks? -Andy
Re: really strange issue running sma from daily.local
Darn, Isn't it always the case when you mail something off after scratching your head for a while you stumble upon some new relevant piece of information. Just added to my daily.local a regular cp command to copy out the mail log for manual inspection. Ran it as a test from the command line and mail reported that the message was empty. When I examined the temporary file it had only one line saying that the log had been rotated... I thought this is strange since the rotation happened at 3am last night. Examined /var/log/maillog using more and sure enough there were messages so I ran the script again and this time it worked. It looks like maillog isn't actually being flushed for some reason until a specific type of read operation is occurring on the log. - maybe this is wrong but it looks that way. I could work around this by zcat'ing the rotated log to sma but now I am curious about the log flush post rotate. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Smith Sent: 10 July 2006 10:16 To: misc@openbsd.org Subject: really strange issue running sma from daily.local I think this must be a misc issue rather than a ports issue but the issue concerns the use of mail/sma in /etc/daily.local. For several days I have had /etc/daily.local set up to run sma to produce an ascii summary of /var/log/maillog as follows.. sma -a /var/log/maillog /tmp/maillog.out mail -s Daily sendmail analysis root /tmp/maillog.out rm /tmp/maillog.out This invariably produces an empty maillog.out file when run from the standard cron job. I popped in various diagnostic steps including copying maillog to maillog.dummy just to verify that the executable could process files when run from cron (making sure that the rights and owner mirrored maillog exactly and I got the dummy output but no actual output from the real maillog. I also made sure that newsyslog was scheduled to rotate /var/log/maillog at a specific time rather than at a particular interval by changing the when field in /etc/newsyslog.conf from 24 to $D03 for a 3am daily execution in the belief that sma was actually seeing an empty file when it was run. - Still no joy. Any thoughts folks? -Andy
Re: How to pass mount protocol traffic (mountd/NFS) using pf?
It is interesting that the use of ephemeral ports was really aimed at reducing the number of well known port allocations in an environment that was heavily RPC based, however, locking the port number means that the RPC endpoint becomes well known and more vulnerable to attack so personally I can see why a whole lot of folk would object to that. (this is just the sort of thing that M$ do to allow access to Exchange servers through Firewalls) I was interested in one of Theo's earlier comments about hooking pf up to the port mapper.. considering that the port mapper for the RPC application will probably be running on a different system to your perimeter defence I assume this meant a kind of distributed approach where pf would talk to the port mapper remotely. Is it feasible that pf could interrogate RPC traffic and determine the allocated port via the reply of the handshake then allow the connection based upon that? - I know Checkpoint do this with some amount of success. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: 24 June 2006 00:04 To: Scott Francis Cc: Clint Pachl; misc@openbsd.org Subject: Re: How to pass mount protocol traffic (mountd/NFS) using pf? On 6/21/06, Clint Pachl [EMAIL PROTECTED] wrote: Because portmap(8) dynamically assigns the mountd(8) port, how would one write a pass rule in pf for mountd(8) traffic? My problem is that every time mountd(8) is re/started, it operates on a different port and my fixed pf rules block the mount protocol and, consequently, my clients cannot mount an NFS share. I read through RFC1094 NFS: Network File System Protocol Specification and RFC1057 RPC: Remote Procedure Call Protocol Specification looking for ways to statically bind the mount protocol to a port number. It doesn't look possible. http://www.freebsd.org/cgi/man.cgi?query=mountd It's definitely possible (Free and Net both offer the -p option). I think that is completely ridiculous. Hardcoding RPC utilities to non-random ports to try to tie it to something else, to increase your security. Come on. By the time you have to do that, please just compile your own version of mountd with a diff.
Re: Recommendations for an OpenBSD-based Backup Solution
The last time I looks there was no Firewire or Firewire disk support in the Kernel. Expect that if it is done at some stage that it is done correctly, you won't get Disk support without Firewire being supported as a bus type (no quick hacks here). -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dag Wastberg Sent: 13 June 2006 18:48 To: Donald J. Ankney; misc@openbsd.org Subject: Re: Recommendations for an OpenBSD-based Backup Solution On 3/20/06, Donald J. Ankney [EMAIL PROTECTED] wrote: I threw together a Perl script that uses tar and external firewire drives. Tar has flags that will let it backup over SMB (for the windows boxes) and one can always do use scp (via certificates) piped through tar for remote linux/BSD boxes. I've been using this solution across several platforms (all servers) for a year now, and it has worked well. Does firewire work under OpenBSD? According to http://www.openbsd.org/i386.html firewire is unsupported. What is the state of firewire support (for external discs)? I have an upcoming install for which I've written off OpenBSD due to this, and I'd very much like to be able to use it. Dag
Re: Time on, since resumption from a suspend?
How about using apmd to run a resume script where you touch a file and then having sometime that simply subtracts the current time from the touched file time? A simple script should be able to do that -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of STeve Andre' Sent: 13 April 2006 20:45 To: misc@openbsd.org Subject: Time on, since resumption from a suspend? I've been looking for a way to figure out how long my laptop has been on since the waking from the last suspend, but I don't see any way to do that. Am I missing something? Thanks. --STeve Andre'
Re: Installing X after OpenBSD 3.8 installation
tar -zxpf permissions are important -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Guenther Sent: 12 April 2006 04:21 To: OpenBSD-Misc Subject: Re: Installing X after OpenBSD 3.8 installation On 4/12/06, Andrew Ng [EMAIL PROTECTED] wrote: Hi, understand that there are options to select xbase, game etcs during OpenBSD installation. Can I install these options, (particularly X) post-install same as the standard install, and not for Ports or other methods? I would not want to re-install the system unless necessary. Appreciate any help. Thanks. Since X is just contained in a .tgz file, just mount the CD (or whatever other install media you used) and do something like: $su #cd / #tar -zxvf /path/to/install/sets/x* #exit $startx
Re: GNU license files rules replacement guidelines with BSD one
http://www.openbsd.org/policy.html Scroll down to the section 'Permissions - the flip side' and consider the consequences of the statements in paragraph 4. This section is probably the biggest one that supports my view that GPL cannot be recinded and after initiation and that all GPL code should be carefully considered with regard to future use in GPL environments even by the original author. I am open to having that view changed if you have a more definitive source of reference, however, it may well be the case that some of the flexibility that may be present in under one regional boundary isn't present in another region. To this end many licenses state that the licensing terms are in accordance with 'California state law..' or whatever, by accepting the terms you are therefore reducing ambiguity on the use of the license. -Andy -Original Message- From: Adam [mailto:[EMAIL PROTECTED] Sent: 05 April 2006 01:14 To: Andrew Smith Cc: misc@openbsd.org Subject: Re: GNU license files rules replacement guidelines with BSD one On Wed, 5 Apr 2006 00:15:02 +0100 Andrew Smith [EMAIL PROTECTED] wrote: GPL cannot be revoked by the author and, what is more, a new version being classed as a 'derived work' would still under the terms of GPL be classed as GPL and the original author couldn't do anything about it. Revoking is not involved here. The copyright holder can do whatever he or she wants with their code. If I made something GPL, I can turn around and make it BSD licensed, or close the source and not license it at all, its up to me. If you can still get your hands on the code from when it was licensed under the GPL, then your copy is still under the GPL, and you can do whatever the GPL allows. But it has no impact at all on future versions and how I choose to license them. - Linus faces this issue with future versions of Linux, he doesn't like GPL 3 and won't accept it but he can't take GPL 2 off Linux kernel since it is an evolving project and is derived from previous versions. No, he can't take the GPL 2 off because hundreds of different people own the copyright to GPL code in the kernel. All of them would need to agree to re-license it. Adam
Bluetooth in OpenBSD
The Broadcom Blutonium chipset is a special case. It requires a firmware download for the device to function as a Bluetooth device. ubt currently does not support the download but will recognise the adaptor once the firmware is downloaded. I do have a preliminary patch set that I created (it's a port of the FreeBSD code) when I was considering implementing the rfcomm framework but I stalled on that project as a whole for various reasons. I could post the patch that implements the ubtbcmfw driver and the sourcecode for the tools, however, I haven't done the man page and my thoughts were that at some point it would be incorporated into the ubt driver and use an easyfw type mechanism rather than having a distinct device and tools for the downloader. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 05 April 2006 10:37 To: misc@openbsd.org Subject: Bluetooth in OpenBSD I did a dmesg trying to use a bluetooth adaptor to connect to the mobile phone and use it as a modem, which I can't fully post here as the OBSD3.8 is installed in a laptop without internet access but I copied by hand the lines relating to the bluetooth adaptor and this is what is says on the lines where Bluetooth is named: root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 ugen0 at uhub1 port 1 ugen0: Broadcom Belkin Bluetooth Device, rev 1.10/0.01 , addr2 syncing disks... then it gets named on another line: ugen0: Broadcom Belkin Bluetooth Device, rev 1.10/0.01, addr 2 dkcsum:wd0 matches BIOS drive 0x80 root on wd0a I hope this information is enough to understand how it works, I have seen not configured anywhere it looks to me like the device is recognised by OBSD3.8, if I am right I would appreciate some help configuring this so that I can use the mobile phone to dial up and connect to the net, if I manage I will send the full dmseg to the list. In the ppp.conf file I have the cua0 as a dev I do not know if this is the right one as that was meant to be for a modem. Zoraya -- Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
Re: GNU license files rules replacement guidelines with BSD one
No, I don't think this is quite correct. GPL cannot be revoked by the author and, what is more, a new version being classed as a 'derived work' would still under the terms of GPL be classed as GPL and the original author couldn't do anything about it. - Linus faces this issue with future versions of Linux, he doesn't like GPL 3 and won't accept it but he can't take GPL 2 off Linux kernel since it is an evolving project and is derived from previous versions. If the author, however, stated that the code could be used within GPL projects with a primary license being an alternative to GPL and that the use of the software within GPL projects was under the proviso that the rights of the author and the original license weren't broken then GPL couldn't be enforced... strictly speaking this may mean that you wouldn't be strictly legitimate in using the software in many GPL license scenarios since the licensing terms conflict, however, some 'open source' communities don't seem to care about that as much as we do. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Guenther Sent: 04 April 2006 23:49 To: OpenBSD-Misc Subject: Re: GNU license files rules replacement guidelines with BSD one On 4/4/06, Daniel Ouellet [EMAIL PROTECTED] wrote: I am not sure that this is a simple question, but what's the rules if any, or guide line someone can go under to replace files and code with BSD type in a project for example. I need some help understanding what's right and what's wrong and where the line is if any and what's proper and what's not. Let say that you have a GNU project and that you need to keep full compatibility with the system calls, in/out, same function names and in some cases structure, but the way the process is done is different. At what point is it correct and possible to ripe a GNU file and replace it with a BSD file if possible. Can that be done? What about if a file only have include files left in it, but is still under a GNU license. I guess it can't be replace right? Example would: /* * license text * bla bla bla * */ #include shit.h and shit.h is a file from that project but the content of shit.h have changed or will changed. Is that burn in for ever in it's life and the only way to do this would be to have a new file called newshit.h and then call it from ever everywhere shit.h was called from. I hope my question make sense, I am trying to understand that process if that's even possible to understand it somewhat. I am just trying to understand the process and how it's getting done properly. I see on Google that some project were GNU and then got switch to BSD after some part that were include in the original project were replace by other BSD version. So, no more GNU was there, so it didn't apply anymore. Google give me huge results on the subject, but so far, nothing clean that I can understand properly. SO, I guess it's not an easy question. I hope I am not offending anyone asking that question! My understanding is that the owner of the copyright can change the license at any time, but that that change only applies to new versions. So: if you are forking someone else's GNU code then you can't arbitrarily make it BSD (because of the restrictions in the GPL). I think, though, that it doesn't work the other way; the very open BSD license allows for someone to take BSD code, make a change (or none?) and relabel it all GPL. if you are the original author of the code (and you haven't given the rights away) then you can change the license at any time, but that change only applies to new versions. You can take down old versions but it's still perfectly legal for anyone with a copy of it to post it and continue to work on it under the old license. Correct me if I'm wrong! -Nick
Twisted
I'm wondering if anyone has taken a look at, or spotted anything nasty in the Twisted Python framework. It looks like a wonderfully functional suite for async network application development, however, it does require Zope 3 which is a little untried at the moment. Any comments with meaningful input would be welcome. -Andy
Re: Problems with X in OpenBSD (3.9) -current with LCD WideScreen Monitor
Please give some details about the actual model number of the monitor, the exact model of display card etc. If you are using the radeon driver for instance specifying the radeon option for DDC is a good way of getting the mode information correct. Man radeon discusses the DDCMode parameter. Otherwise it may require that you need a ModeLine parameter in the monitor section. I needed to do this on my laptop to get 1920x1200 widescreen mode. (and sorry Nick, reply before coffee is always a bad idea :P) -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Holland Sent: 30 March 2006 01:43 To: misc Subject: Re: Problems with X in OpenBSD (3.9) -current with LCD WideScreen Monitor Francisco Valladolid wrote: Hi folks. Recently I bougth a new LCD display, it is a ViewSonic 19 WideScreen, i have proble with xorg in -current, for correct display mode only 1024x768 is displayed. The X windows is so wrong. Some have some tips about the X under xorg. This monitor work fine in other OS running xfree86. Unfortunately, you have provided no hard information, so you will get no hard answers. In short, however, you need to hand-tweak your /etc/X11/xorg.conf file, apparently. Under 'Section Monitor', make sure you have accurate HorizSync and VertRefresh lines. Under 'Section Screen', add/alter a couple lines: Default Depth 24 and under 'SubSection Display' add: Modes 1280x1024 (correct the Depth and Modes to the values you want, of course). You may be in business. You may not be, if your video card or X driver is incapable of driving your monitor at the desired depth and resolution, or if there is some other quirk in your hardware we can't see. Or if I'm forgetting something, which is possible. :) You can also try to use DDC, apparently it was default for 3.8, now for 3.9, DDC is disabled by default, and I'm glad (worked great when it worked, sucked big time when it didn't). Nick.
Re: Errors during start of Xorg on 3.9
You should be using the wrapper script called xorgconfig This should work run as root and double check the /etc/sysctl.conf value machdep.allowaperture. Make sure that is set to 2, this no longer gets set to 2 by answering yes to running X - this is a deliberate decision in 3.9 and has been left out of the scripts to raise awareness of the security issues associated (see man xf86) Search back through the archives and you will see Theo's thoughts about it. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Swen Simon Sent: 29 March 2006 11:57 To: misc@openbsd.org Subject: Errors during start of Xorg on 3.9 (I was redirected to misc@ from an user, thanks for the hint :) Greetings! I installed OpenBSD 3.9 few hours ago and all works fine, instead of X. I never used Xorg on an OBSD system and generated a new config with Xorg -configure. Following errors appears: (WW) xf86AcquireGART: AGPIOC_ACQUIRE failed (Device busy) (WW) GARTInit: AGPIOC_INFO failed (Device not configured) _XSERVTransmkdir: ERROR: euid != 0,directory /tmp/.X11-unix will not be created. _XSERVTransSocketUNIXCreateListener: mkdir(/tmp/.X11-unix) failed, errno = 2 _XSERVTransMakeAllCOTSServerListeners: failed to create listener for local ... FreeFontPath: FPE /usr/X11R6/lib/X11/fonts/misc/ refcount is 2, should be 1; fixing. I googled many hours to fix that, found no solution or hint about that. The permissions on /tmp are correct and should work for other users (can create files in it). It takes also (~) 10 seconds to start the window manager. xorg.conf: http://pastebin.com/628483 Xorg.0.log: http://pastebin.com/628488 dmesg: http://pastebin.com/628493 Anyone else that problems? Hints or solutions are welcome! Thanks. Swen
Re: Errors during start of Xorg on 3.9
Antoine, thanks, quite right.. I saw the memo and misread it - the prompt defaults to [no] now. It may be worthwhile double checking the Aperture setting though. -Original Message- From: Antoine Jacoutot [mailto:[EMAIL PROTECTED] Sent: 30 March 2006 15:26 To: Andrew Smith Cc: misc@openbsd.org Subject: Re: Errors during start of Xorg on 3.9 Selon Andrew Smith [EMAIL PROTECTED]: machdep.allowaperture. Make sure that is set to 2, this no longer gets set to 2 by answering yes to running X - this is a deliberate decision in 3.9 and has been left out of the scripts to raise awareness of the security issues associated (see man xf86) As far as I understand, machdep.allowaperture _does_ get set to 2 by answering yes to running X. However, while the default answer was set to yes, it is now set to no. -- Antoine
Re: copying software from the official iso
I thought my 'take' on the idea of the CDs was more commonplace. I will clarify it for consideration. The actual content of the CD is secondary in importance to many people purchasing it. People purchase the CD to support OpenBSD but with the added advantage that there is useful stuff for the popular architectures on the CD. If you favour an architecture such as the Zaurus (I'm not sure if this changes with the 3.9 release) then the CD isn't going to be your installation medium for the Zaurus since those binaries are only available from snapshots. OpenBSD is freely available in release form from many mirror sites. It is also very easy to implement security patches to source and because the patches are provided in short form they can be scrutinised easily against change or damage - these factors are important to the community. The current theme is to strive against the BLOB and whilst distributing binaries for OpenBSD isn't necessarily that bad if they can be verified and validated as trusted official builds, the community in general seems to favour source distributions. As far as copying the CDs go... don't. From a legal perspective it's wrong but most importantly from a moral perspective it's really bad - if you want to see OpenBSD continue and progress encourage people to buy CDs as a tangible asset to help fund it if they feel that making a simple contribution is too difficult. There is actually nothing legally wrong with you building your own binary distribution CDs with your own layout... you could sell them, you could withhold the source. The license allows you the freedom to do this. If, however, you end up making any money then consider funding the OpenBSD project for the future sake of the business you just started. - OpenBSD is not a business but a project - nevertheless it requires a lot of effort and expense and does need funding. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wijnand Wiersma Sent: 24 March 2006 14:19 To: Gabriel George POPA; misc@openbsd.org Subject: Re: copying software from the official iso On 3/24/06, Gabriel George POPA [EMAIL PROTECTED] wrote: It seems to me quite a dangerous discussion. Why not security updates for money? SuSE has made a lot of money... I know you already discussed this, but this feature will make OpenBSD VERY popular. No, that would decrease popularity. Wijnand -- OpenBSD needs your help improving the softwareworld, please donate: http://openbsd.org/donations.html Yes big code using companies, that includes you!
Re: Problem with uvisor0, comms/pilot-link, and LifeDrive, on i386
This error is coming back from uvisor.c which is part of the Kernel. The init function is there to initialise the device and get the USB Serial endpoints back... I recently fixed this for a range of Sony CLIE devices but that fix was Sony vendor code specific and wouldn't touch this device. There are essentially two commands performed for most init scenarios depending upon the device type that the palm device maps as... either a vendor command 3 for VISOR type devices or a vendor command 4 for PALM4 type devices... this is selected from a table of device mappings in the uvisor driver. If these commands fail you normally see a stalled message coming back from init. The uvisor driver then typically goes on to query the free space of the device and this command on the Sony CLIE returns a TIMEOUT so it is possible that is what is happening here. I don't actually have a LifeDrive but would suggest that if anyone has one they take a look at the uvisor.c source and try quitting the init function before the Free Space check.. I know for a fact that the free space checks on the CLIE put the USB Serial endpoints to sleep anyway which is why in my patch once a CLIE is detected we skip these checks. http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/usb/uvisor.c pilot-link is a different matter, it will probably work once the USB Serial mapping is up across cuaUxx. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antoine Jacoutot Sent: 17 March 2006 15:38 To: openbsd-misc Subject: Re: Problem with uvisor0, comms/pilot-link, and LifeDrive, on i386 Selon Andreas Kahari [EMAIL PROTECTED]: First of all, when I connect the USB cable to my LifeDrive, I get the following lines in my dmesg (see last in this message for full dmesg): uvisor0 at uhub2 port 1 uvisor0: palmOne, Inc. palmOne Handheld, rev 2.00/1.00, addr 5 These are followed after 4 to 5 seconds by uvisor0: init failed, TIMEOUT Hi. I've been seeing the exact same behaviour here. As I sync my LifeDrive using WiFi, I did not further investigate this problem. Do you have a Linux box around (or a live CD) to see if it works with it (or maybe pilot-link USB sync does not work withe this model yet) ? As soon as I have time for this, I'll have a look at it. -- Antoine
Re: using openbsd on zaurus
Didier, Here are a few things that may interest you... Java support is pretty problematical.. the desktop benchmark of success and compatibility for a lot of java sites would be to have J2SE in a fairly current version running. Unfortunately to build this from source you need an earlier version of J2SE and a number of other tools - also current J2SE sources carry a lot of assembler, there is no ARM variant in the routines thus implemented and no standard C implementations for them either. The closest to having J2SE running would be the ARM Blackdown Java 1.3.1 but that only runs on ARM Linux - I have never seen the source to this and believe that it is closed source. I can also state from experience of experimenting with Swing on the Blackdown versions with ARM Linux that it is extremely slow and memory hungry. Mostly compilation of ports works well if the software that you are compiling from the ports is of good quality... not all software that is in the ports is of highest quality with regards to portability across architectures. Interested people may correct some of these ports and make them more portable, however, there are some elements in certain ports that can cause real problems on some architectures. - Typical issues tend to be byte ordering (not very common these days), assembler routines with no C implementation for unimplemented architectures and more obscure things such as value types (like char) which are used in signed/unsigned manner but without being explicitly declared as such (GCC behaves differently between various architectures for types like char where unsigned/signed isn't specified). Of particular note, you mentioned Firefox.. Firefox runs at around 46Mb of RAM and isn't the greatest thing to consider running on a Zaurus. Nevertheless I wanted to try it.. there are some issues with the portability of the Netscape Portable Runtime libraries present in Firefox that cause the build process to fail during the library signing stage. (actually you need to implement some conditional stuff to identify alignment, word sizes etc before you get to this stage). We may understand this issue better at some stage but I don't know of anyone that considers it to be the highest priority to implement Firefox or Mozilla for the Zaurus. This is simply because of the runtime demands of them as Theo mentioned. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: 12 March 2006 12:38 To: Didier Wiroth Cc: misc@openbsd.org Subject: *** SPAM *** Re: using openbsd on zaurus I'm planning to buy a zaurus sl-c3200 (the latest zaurus 3xxx model). Please note that you would be the first person. None of us have the C3200 yet. I had a look at the latest zaurus snapshot directories (on ftp.openbsd.org) and saw that the choice of available pre-build packages is highly reduced compared to i386. Most stuff compiles. Much has not been tested, though Is it possible to compile and install any applications of the ports tree on a zaurus (for example firefox, thunderbird ...)? Those two are pretty unreasonable on the Zaurus. It isn't that fast, and it is somewhat lacking in memory. There is some work on minimo, but it isn't completely reliable yet. Does the ports tree system work as well on a zaurus as on the i386 platforms or may I encounter severe build problems? As I said above, it is pretty good. But you have to be reasonable about how fast and capable a Zaurus is.
Re: using openbsd on zaurus
Oh and one other thing.. Apart from the changes to the flash ram size between the 3000 and the 3100 there were some changes to the CF handling. Be aware that Sharp may have decided a more cost effective production scheme for the 3200 (i.e. may have changed something unexpected) so I would err on the side of caution and wait until somebody announces that OpenBSD is up and running on that device before purchase. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Smith Sent: 15 March 2006 11:43 To: 'Miscellaneous OBSD' Subject: Re: using openbsd on zaurus Didier, Here are a few things that may interest you... Java support is pretty problematical.. the desktop benchmark of success and compatibility for a lot of java sites would be to have J2SE in a fairly current version running. Unfortunately to build this from source you need an earlier version of J2SE and a number of other tools - also current J2SE sources carry a lot of assembler, there is no ARM variant in the routines thus implemented and no standard C implementations for them either. The closest to having J2SE running would be the ARM Blackdown Java 1.3.1 but that only runs on ARM Linux - I have never seen the source to this and believe that it is closed source. I can also state from experience of experimenting with Swing on the Blackdown versions with ARM Linux that it is extremely slow and memory hungry. Mostly compilation of ports works well if the software that you are compiling from the ports is of good quality... not all software that is in the ports is of highest quality with regards to portability across architectures. Interested people may correct some of these ports and make them more portable, however, there are some elements in certain ports that can cause real problems on some architectures. - Typical issues tend to be byte ordering (not very common these days), assembler routines with no C implementation for unimplemented architectures and more obscure things such as value types (like char) which are used in signed/unsigned manner but without being explicitly declared as such (GCC behaves differently between various architectures for types like char where unsigned/signed isn't specified). Of particular note, you mentioned Firefox.. Firefox runs at around 46Mb of RAM and isn't the greatest thing to consider running on a Zaurus. Nevertheless I wanted to try it.. there are some issues with the portability of the Netscape Portable Runtime libraries present in Firefox that cause the build process to fail during the library signing stage. (actually you need to implement some conditional stuff to identify alignment, word sizes etc before you get to this stage). We may understand this issue better at some stage but I don't know of anyone that considers it to be the highest priority to implement Firefox or Mozilla for the Zaurus. This is simply because of the runtime demands of them as Theo mentioned. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: 12 March 2006 12:38 To: Didier Wiroth Cc: misc@openbsd.org Subject: *** SPAM *** Re: using openbsd on zaurus I'm planning to buy a zaurus sl-c3200 (the latest zaurus 3xxx model). Please note that you would be the first person. None of us have the C3200 yet. I had a look at the latest zaurus snapshot directories (on ftp.openbsd.org) and saw that the choice of available pre-build packages is highly reduced compared to i386. Most stuff compiles. Much has not been tested, though Is it possible to compile and install any applications of the ports tree on a zaurus (for example firefox, thunderbird ...)? Those two are pretty unreasonable on the Zaurus. It isn't that fast, and it is somewhat lacking in memory. There is some work on minimo, but it isn't completely reliable yet. Does the ports tree system work as well on a zaurus as on the i386 platforms or may I encounter severe build problems? As I said above, it is pretty good. But you have to be reasonable about how fast and capable a Zaurus is.
Re: Why packets are not blocked
Try flushing the state table too.
-Andy
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Jim
Sent: 08 March 2006 03:00
To: misc@openbsd.org
Subject: Why packets are not blocked
When my kid gets grounded I block the gameroom computer from getting to the
internet. The script that runs is
#!/bin/sh -
cp /home/jmays/pf.conf.noGameroom /etc/pf.conf
pfctl -F rules -f /etc/pf.conf
pfctl -F nat -f /etc/pf.conf
The file that becomes the pf.conf file is
# pf.conf.noGameroom file
#
# Define useful variables
#
ExtIF =dc0 # External Interface
IntIF =hme0 # Internal Interface
loopbackIF=lo0 # Loopback Interface
#
IntNet =192.168.100.0/24 # Our internal network
Austin =192.168.100.129
Gameroom=192.168.100.130
NoRouteIPs={ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
#Services={ ssh, ftp }
Services={ ssh }
# Clean up fragmented and abnormal packets
scrub in all
# nat on dc1 from 192.168.100.0/24 to any - dc1
nat on $ExtIF from $Gameroom to any tag GAME - ($ExtIF)
nat on $ExtIF from $IntNet to any - ($ExtIF)
block out log quick on $ExtIF tagged GAME
#pass anything on loopback
pass out quick on $loopbackIF
# don't allow anyone to spoof non-routeable addresses
block in quick on $ExtIF from $NoRouteIPs to any
block out quick on $ExtIF from any to $NoRouteIPs
# by default, block all incoming packets, except those explicitly
# allowed by further rules
block in on $ExtIF all
# allow others to use allowed services
pass in on $ExtIF inet proto tcp from any to any port $Services \
flags S/SA keep state
# and let out-going traffic out and maintain state on established
connections
# pass out all protocols, including TCP, UDP and ICMP, and create state,
# so that external DNS servers can reply to our own DNS requests (UDP).
block out log on $ExtIF all
pass out log on $ExtIF inet proto tcp all flags S/SA keep state
pass out log on $ExtIF inet proto udp allkeep state
pass out log on $ExtIF inet proto icmp allkeep state
#
The problem is that if the kid is already logged into AOL Instant messenger,
the connection is not broken. So even though she is grounded, she can still
chat all day on AIM. Why isn't this pf.conf file blocking everything on
that computer?
Here is the tail of the pflog file while she is on
Mar 07 20:30:43.516434 rule 14/0(match): pass out on dc0:
67.174.79.141.60805 64.12.174.121.80: S 3652110150:3652110150(0) win 65535
mss 1460,nop,nop,sackOK (DF)
Mar 07 20:30:43.739711 rule 14/0(match): pass out on dc0:
67.174.79.141.52657 209.62.180.190.80: S 4073040009:4073040009(0) win
65535 mss 1460,nop,nop,sackOK (DF)
Mar 07 20:30:43.960820 rule 14/0(match): pass out on dc0:
67.174.79.141.63494 216.39.69.77.80: S 3255465945:3255465945(0) win 65535
mss 1460,nop,nop,sackOK (DF)
Mar 07 20:30:44.014579 rule 15/0(match): pass out on dc0:
67.174.79.141.60482 204.127.202.4.53: 46801+ A? spe.atdmt.com. (31)
Mar 07 20:30:44.063887 rule 14/0(match): pass out on dc0:
67.174.79.141.60937 80.67.84.16.80: S 1960373362:1960373362(0) win 65535
mss 1460,nop,nop,sackOK (DF)
Mar 07 20:31:02.940879 rule 14/0(match): pass out on dc0:
67.174.79.141.51753 204.127.198.10.110: S 2067644325:2067644325(0) win
65535 mss 1460,nop,nop,sackOK (DF)
I don't even have 14 rules. Why is this passing on rule 14?
Thanks
Jim
Re: ath and 802.11a
Seconded (as if I needed to with Theo responding :P) I have an old Atheros based cardbus adaptor that will supposedly do b+g but I know for a fact not a, check the specs of the device please and do as Theo asks... dmesg is useful. Having said that... Theo it may interest you that the man page says that 3 devices are supported and it states for each that 802.11a is supported.. (AR5210, AR5211 and AR5212).. this may just mean that the driver has moved beyond the man page but I believe OpenBSD man pages are the best and most accurate so maybe this needs some updates. -Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: 03 March 2006 20:48 To: Fridtjof Busse Cc: misc@openbsd.org Subject: Re: ath and 802.11a Is anybody using 802.11a with ath? The manpage lists a/b/g as working, although g definitly doesn't work for me, only b does. Now I'm curious if anything besides b actually works before I buy an antenna for a. Or is it just my cards? If not, why isn't there a note about this in the manpage? There are many different models of the ath hardware. Not everything works perfectly -- but much of it does work. I think it is a bad thing to make simplified statements like you did above. Without specific model information *taken right out of dmesg*, noone will be able to help you. And your mail joins the archive, feeding future pessimism, which it should not really do.
Info on major/minor device mappings for device drivers
I know you are going to tell me to rtfm, it's bound to be in there but I can't find anything relevant here so assume I'm stupid and please point me at something obvious :P I have just become acquainted with the differences between FreeBSD and OpenBSD by porting over the ubtbcmfw driver which seems to build into my Kernel quite happily and I can plug in the Blutonium based USB dongle and my driver recognises it. great!.. However, programming device drivers on OpenBSD isn't quite like I was expecting.. I have modified a few up to now but not brought a new one into the tree before. FreeBSD has a make_dev call to actually make the device nodes for the driver. OpenBSD has makedev which I think does something similar, however, the majority of the drivers that I have examined don't use it. They don't actually seem to have anything within the driver itself that identifies with me as a registration of major and minor device numbers that I can correlate with a simple mknod command so I'm assuming that there is an element of automatic assignment on the part of the device numbers (or maybe I missed some macro that does something for you.. I don't know). Looking at the counterpart driver for this device (ubt) I can't see any reference to major, minor device numbers so I picked something more obvious. the wd driver and I can't figure out how this maps to major number 16 at all. (it's been a long day working from home and the smallest baby has been screaming all day too :(). Can someone give me a hint or point me at a relevant man page about how device numbers are managed in the Kernel source tree this would save me a lot of head scratching... even at the risk of having to slap myself on the forehead and shout DOH!. -Andy
Can anyone suggest a browser with JavaScript for ARM?
Hi, It's a plain fact that mozilla/firefox and all the derivative browsers like Epiphany won't build for ARM at the moment due to some issue with NSPR which causes the a segmentation fault during the signing phase of the libraries. 19 hours of build time on both Firefox and Mozilla have shown me the problem is the same on both of them. Can anyone suggest an alternative browser that isn't based on Gecko engine (requires Mozilla-Devel) and that support JavaScript +CSS? I really want something that I can be able to do GUI edits on moinmoin with and I don't care if it is a little slow. Try out moinmoin on the sandbox at http://moinmoin.wikiwikiweb.de http://moinmoin.wikiwikiweb.de/ GUI editor requires some very specific browser features which are definitely in Gecko and browsers like Epiphany run the editor really well. I was hoping links+ might just do the job but it doesn't let you do the GUI edits and there are a lot of nasty superfluous links at the top of the page. - Andy
Re: Can anyone suggest a browser with JavaScript for ARM?
Yep, tried Konqueror-embedded, it doesn't support whatever moinmoin is doing for its GUI editor. I think (although I may be wrong) that the version in the ports is too low to support javascript. I recently built the kde libs (took about 2 days) so that I could try building a later version but it failed on the build and I was so discouraged that I shelved that as an idea... may go back to that but if anyone knows of another browser to try that would be good. Incidentally I have also tried dillo and minimo, both fail on this test and minimo crashes a lot. -Andy -Original Message- From: David Terrell [mailto:[EMAIL PROTECTED] Sent: 17 February 2006 19:13 To: Andrew Smith Subject: Re: Can anyone suggest a browser with JavaScript for ARM? On Fri, Feb 17, 2006 at 07:01:54PM -, Andrew Smith wrote: Try out moinmoin on the sandbox at http://moinmoin.wikiwikiweb.de http://moinmoin.wikiwikiweb.de/ GUI editor requires some very specific browser features which are definitely in Gecko and browsers like Epiphany run the editor really well. I was hoping links+ might just do the job but it doesn't let you do the GUI edits and there are a lot of nasty superfluous links at the top of the page. Have you tried KDE or konquerer-embedded?
Build sanity messages
Hi, I'm noticing quite a few sanity messages on the ports tree (notably sdl is one of them) when running make on a Zaurus. The messages pop up in the configure stage and state that the binary produced is older than the distribution. Are we interested in these messages? Seems like there will need to be a number of patches to the configure scripts to fix these. - Andy
Re: Any conclusions on the uvisor STALLED status with CLIE devices?
OK, after playing with uvisor and USB sniffer software for the weekend I
have fixed this for me... *sigh* there is a lot of stuff going on in the
CLIE Windows driver that the CLIE doesn't like and it seems the driver
filters all the nastiness out.
After struggling with stalled commands, timeouts etc. etc. I found that the
CLIE PEG-T625 (which identifies as USB_PRODUCT_SONY_CLIE_40) actually
returns it's pipes on command 03 like a Visor. Simply switching the table
doesn't fix it though because when the call to get the Free Space at the end
of the init function times out it puts the CLIE end of the USB serial to
sleep :(... this wasn't obvious and I wasted a lot of time finding this out.
One simple fix is to disable that part of the function.
Here is a little patch that you can try if you have a device that is
returning STALLED on the init part of uvisor, it's only flagged to turn off
the Free Space call on the USB_PRODUCT_SONY_CLIE_40 device (also changes it
to use the Visor hooks rather than the Palm 4 hooks which stall the device).
Apply patch to /sys/dev/usb/uvisor.c
170a171
#define NOFRE 0x0004
186c187
{{ USB_VENDOR_SONY, USB_PRODUCT_SONY_CLIE_40 }, PALM4 },
---
{{ USB_VENDOR_SONY, USB_PRODUCT_SONY_CLIE_40 }, VISOR | NOFRE },
446a448,450
/* Skip the free bytes check.. this hangs some sony CLIE devices */
if (sc-sc_flags NOFRE) return (err);
457d460
Then make yourself a Kernel.
It's hardly a patch really it simply adds another device bitmap, sets that
on the device that you want to skip the free space check and in the init
function returns before the free space check if the flag is set.
To enable on other devices simply replace PALM4 with VISOR | NOFRE.
I'm now curious if anyone actually has a CLIE model that identifies as this
entry and actually works with the current driver... please tell me if you
do.
This patch has been tested on 3.8 -release on i386 and 3.9 -current on ARM -
ahem yes I have had my CLIE syncing with my Sharp Zaurus :)
- Andy
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Andrew Smith
Sent: 04 February 2006 14:00
To: misc@openbsd.org
Subject: Any conclusions on the uvisor STALLED status with CLIE devices?
I have an old CLIE PEG-T625C device that I have been trying to make work
with the uvisor driver to get ucom endpoints mapped to cuaUx with a USB
cable.
The device IDs itself to the driver (based upon the standard table in the
driver) as USB_PRODUCT_SONY_CLIE_40 which is mapped to the PALM4 handler,
however, when the usbd_do_request_flags call is made in the PALM4 section of
the uvisor_init function I always get back USBD_STALLED as status.
I have been down two routes to try to fix this (although I am not familiar
with the kernel debug features of OpenBSD yet).
i. I have set up a VMWare machine running Windows XP, CLIE
Palmdesktop and installed 'snoopypro' from http://usbsnoop.sourceforge.net
http://usbsnoop.sourceforge.net/ with this I have examined the USB
conversation that the commercial Sony driver has with the CLIE. - not
particularly different from the uvisor init but some extra vendor endpoint
stuff.
ii.I have compared the working Linux 2.6 visor driver (I
have a Gentoo system running this driver and it works well) - I have made
the minimal changes to the uvisor driver necessary to change the 03 command
that is normally used to 04 as used by this driver and checked that the data
structures are the same as the ones used in the Linux driver. They are byte
for byte the same (unless there is a packing issue of course).
Both experiments still result in the call to usbd_do_request_flags returning
the STALLED status - where I was previously convinced that the device was
stalling because it was being sent a command it didn't recognise now I am
not so sure.. I'm beginning to speculate that something in the USB transfer
handler is fouling up.
The question is, has anybody else tried this with this model or any other
model showing the STALLED status on init and what conclusions/speculations
did you come to if you didn't fix it?
- Andy
Re: Inappropriate processes being 'stopped' when the system is busy.. - mystery solved.
I had built and installed dbus to test some things. It seems that there is a feature that dbus tries to help the system out by suspending processes with -STOP when a user changes away from a vt and an issue where this sometimes happens even when the user doesn't switch VTs.. unfortunately when this happens the processes don't get a -CONT signal so stay in a stopped state. dbus is now off again and the issue is gone. - Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Smith Sent: 03 February 2006 12:12 To: misc@openbsd.org Subject: Inappropriate processes being 'stopped' when the system is busy.. Hi, I'm wondering if anyone can make a suggestion here. I have been pushing my X server on my Zaurus, logged in as a regular user whilst running a large compile in the background. This is really to test the stability of the ws_drv patches that just came through on [EMAIL PROTECTED] In doing this I ran up xfce4 and loaded AbiWord as a regular user to generate some system load from that session. What I noticed after a couple of mins (with a large port compile going on as root from an ssh session) was that AbiWord, xfwm, xfce-panel, xfce-desktop etc.. had all been put into a 'stop' state on the process list. I can understand that the system may want to do this for certain processes to protect against thrashing but I honestly don't have a clear idea about what part of the system does this and if it is configurable. Strictly speaking I would have thought that you don't want X Window Manager processes like xfwm being put into a stopped state at all so I was wondering if there is a way of flagging (or listing) processes which should never be kill -STOP'ed by whatever is doing this. I ended up having to kill -STOP my compilation, kill -CONT all my user processes to wake em up and log out then kill -CONT my compilation to continue in the end. I suppose it may be possible to do this from a second vt if it's not convenient to go in over the network but maybe not always. So is this a configurable feature?? (apologies if you think this should be in [EMAIL PROTECTED]) - Andy
Any conclusions on the uvisor STALLED status with CLIE devices?
I have an old CLIE PEG-T625C device that I have been trying to make work with the uvisor driver to get ucom endpoints mapped to cuaUx with a USB cable. The device IDs itself to the driver (based upon the standard table in the driver) as USB_PRODUCT_SONY_CLIE_40 which is mapped to the PALM4 handler, however, when the usbd_do_request_flags call is made in the PALM4 section of the uvisor_init function I always get back USBD_STALLED as status. I have been down two routes to try to fix this (although I am not familiar with the kernel debug features of OpenBSD yet). i. I have set up a VMWare machine running Windows XP, CLIE Palmdesktop and installed 'snoopypro' from http://usbsnoop.sourceforge.net http://usbsnoop.sourceforge.net/ with this I have examined the USB conversation that the commercial Sony driver has with the CLIE. - not particularly different from the uvisor init but some extra vendor endpoint stuff. ii.I have compared the working Linux 2.6 visor driver (I have a Gentoo system running this driver and it works well) - I have made the minimal changes to the uvisor driver necessary to change the 03 command that is normally used to 04 as used by this driver and checked that the data structures are the same as the ones used in the Linux driver. They are byte for byte the same (unless there is a packing issue of course). Both experiments still result in the call to usbd_do_request_flags returning the STALLED status - where I was previously convinced that the device was stalling because it was being sent a command it didn't recognise now I am not so sure.. I'm beginning to speculate that something in the USB transfer handler is fouling up. The question is, has anybody else tried this with this model or any other model showing the STALLED status on init and what conclusions/speculations did you come to if you didn't fix it? - Andy
Inappropriate processes being 'stopped' when the system is busy..
Hi, I'm wondering if anyone can make a suggestion here. I have been pushing my X server on my Zaurus, logged in as a regular user whilst running a large compile in the background. This is really to test the stability of the ws_drv patches that just came through on [EMAIL PROTECTED] In doing this I ran up xfce4 and loaded AbiWord as a regular user to generate some system load from that session. What I noticed after a couple of mins (with a large port compile going on as root from an ssh session) was that AbiWord, xfwm, xfce-panel, xfce-desktop etc.. had all been put into a 'stop' state on the process list. I can understand that the system may want to do this for certain processes to protect against thrashing but I honestly don't have a clear idea about what part of the system does this and if it is configurable. Strictly speaking I would have thought that you don't want X Window Manager processes like xfwm being put into a stopped state at all so I was wondering if there is a way of flagging (or listing) processes which should never be kill -STOP'ed by whatever is doing this. I ended up having to kill -STOP my compilation, kill -CONT all my user processes to wake em up and log out then kill -CONT my compilation to continue in the end. I suppose it may be possible to do this from a second vt if it's not convenient to go in over the network but maybe not always. So is this a configurable feature?? (apologies if you think this should be in [EMAIL PROTECTED]) - Andy
Re: Broadcom BCM5752 NIC
I'm not sure about the level of support for this card in OpenBSD (this says more about the level of support by Broadcomm for Open Source operating systems development effort). The bge driver does support some of that range of cards but I can't say if that one specifically is supported. - if it uses it's own unique PCIID then it is definitely missing support in the bge driver (since it isn't listed in the pci_matchid structure (bge_devices) table for that driver [-current cvs checked also]). You could possible compare functionality against one of the other cards and try adding a PCIID for it if it's close enough to one of the others.. (you are obviously into full testing etc. if you do adopt this approach). It's sad to say though that the card may not be supported without a lot more work though... if anyone else has this card working then please correct me. In the http://www.openbsd.org/faq/faq6.html page I found the following phrase which I have to say I enjoyed very much but you may of course get less enjoyment from it.. sorry. 'Other manufacturers, such as Broadcom, Texas Instruments and Connexant have actively fought our attempts to develop free drivers for their products.' - Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Badbanchi Hossein Sent: 03 February 2006 12:08 To: Brad Cc: misc@openbsd.org Subject: Re: Broadcom BCM5752 NIC Hi, This morning I installed the kernel from the snapshot. The only (cosmetic) difference is that the time-out values are reduced, so it doesn't take that long as before for the system to boot, but the BCM5752 NIC is still not functioning properly! Still the output of a ls command is interrupted several times. This system should be sent to a remote site to act as a DNS/DHCP Server. I suppose I had better install a 3com NIC into the box and use that. Even if the snapshot had functioned, I don't think that it is a good idea to use a beta version in production environment. The in-line /var/log/messages file which I transferred to my PC via scp could only be transmitted with 2.8 kB/s. Here is the latest /var/log/messages file: Feb 3 06:28:20 susrocdns2 syslogd: restart Feb 3 06:28:20 susrocdns2 /bsd: OpenBSD 3.9-beta (RAMDISK_CD) #1005: Mon Jan 30 12:31:07 MST 2006 Feb 3 06:28:20 susrocdns2 /bsd: [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD Feb 3 06:28:20 susrocdns2 /bsd: cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz (GenuineIntel 686-class) 3 GHz Feb 3 06:28:20 susrocdns2 /bsd: cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLU SH,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,EST,CNXT-ID Feb 3 06:28:20 susrocdns2 /bsd: real mem = 527863808 (515492K) Feb 3 06:28:20 susrocdns2 /bsd: avail mem = 475787264 (464636K) Feb 3 06:28:20 susrocdns2 /bsd: using 4278 buffers containing 26497024 bytes (25876K) of memory Feb 3 06:28:20 susrocdns2 /bsd: mainbus0 (root) Feb 3 06:28:20 susrocdns2 /bsd: bios0 at mainbus0: AT/286+(b0) BIOS, date 05/18/05, BIOS32 rev. 0 @ 0xeb660 Feb 3 06:28:20 susrocdns2 /bsd: pcibios0 at bios0: rev 2.2 @ 0xeb660/0x49a0 Feb 3 06:28:20 susrocdns2 /bsd: pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5680/240 (13 entries) Feb 3 06:28:20 susrocdns2 /bsd: pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GB LPC rev 0x00) Feb 3 06:28:20 susrocdns2 /bsd: pcibios0: PCI bus #3 is the last bus Feb 3 06:28:20 susrocdns2 /bsd: bios0: ROM list: 0xc/0xaa00! 0xcaa00/0x1000 0xcba00/0x1800 0xe8c00/0x7400! Feb 3 06:28:20 susrocdns2 /bsd: cpu0 at mainbus0 Feb 3 06:28:20 susrocdns2 /bsd: pci0 at mainbus0 bus 0: configuration mode 1 (no bios) Feb 3 06:28:20 susrocdns2 /bsd: pchb0 at pci0 dev 0 function 0 Intel 82945GP rev 0x02 Feb 3 06:28:20 susrocdns2 /bsd: vga1 at pci0 dev 2 function 0 Intel 82945G Video rev 0x02 Feb 3 06:28:20 susrocdns2 /bsd: wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) Feb 3 06:28:20 susrocdns2 /bsd: Intel 82945G Video rev 0x02 at pci0 dev 2 function 1 not configured Feb 3 06:28:20 susrocdns2 /bsd: Intel 82801GB HD Audio rev 0x01 at pci0 dev 27 function 0 not configured Feb 3 06:28:20 susrocdns2 /bsd: ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01 Feb 3 06:28:20 susrocdns2 /bsd: pci1 at ppb0 bus 1 Feb 3 06:28:20 susrocdns2 /bsd: ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01 Feb 3 06:28:20 susrocdns2 /bsd: pci2 at ppb1 bus 2 Feb 3 06:28:20 susrocdns2 /bsd: bge0 at pci2 dev 0 function 0 Broadcom BCM5752 rev 0x01, BCM5752 A1 (0x6001): irq 10bge0: firmware handshake timed out Feb 3 06:28:20 susrocdns2 /bsd: , address 00:15:60:4f:25:35 Feb 3 06:28:20 susrocdns2 /bsd: brgphy0 at bge0 phy 1: BCM5752 10/100/1000baseT PHY, rev. 0 Feb 3 06:28:20 susrocdns2 /bsd: uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 5 Feb 3 06:28:20 susrocdns2 /bsd: usb0 at uhci0: USB revision 1.0 Feb 3 06:28:20 susrocdns2 /bsd: uhub0 at usb0 Feb 3 06:28:20 susrocdns2 /bsd: uhub0: Intel UHCI root hub,
FW: Broadcom BCM5752 NIC
*sigh* ok, ignore that last posting. I'm an idiot responding to these posts when I'm spaced out with a cold. (no flame needed) I was looking for 5725 not 5752. There is an ID for the 5752 in the driver :P Good luck, - Andy -Original Message- From: Andrew Smith [mailto:[EMAIL PROTECTED] Sent: 03 February 2006 13:24 To: 'misc@openbsd.org' Subject: RE: Broadcom BCM5752 NIC I'm not sure about the level of support for this card in OpenBSD (this says more about the level of support by Broadcomm for Open Source operating systems development effort). The bge driver does support some of that range of cards but I can't say if that one specifically is supported. - if it uses it's own unique PCIID then it is definitely missing support in the bge driver (since it isn't listed in the pci_matchid structure (bge_devices) table for that driver [-current cvs checked also]). You could possible compare functionality against one of the other cards and try adding a PCIID for it if it's close enough to one of the others.. (you are obviously into full testing etc. if you do adopt this approach). It's sad to say though that the card may not be supported without a lot more work though... if anyone else has this card working then please correct me. In the http://www.openbsd.org/faq/faq6.html page I found the following phrase which I have to say I enjoyed very much but you may of course get less enjoyment from it.. sorry. 'Other manufacturers, such as Broadcom, Texas Instruments and Connexant have actively fought our attempts to develop free drivers for their products.' - Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Badbanchi Hossein Sent: 03 February 2006 12:08 To: Brad Cc: misc@openbsd.org Subject: Re: Broadcom BCM5752 NIC Hi, This morning I installed the kernel from the snapshot. The only (cosmetic) difference is that the time-out values are reduced, so it doesn't take that long as before for the system to boot, but the BCM5752 NIC is still not functioning properly! Still the output of a ls command is interrupted several times. This system should be sent to a remote site to act as a DNS/DHCP Server. I suppose I had better install a 3com NIC into the box and use that. Even if the snapshot had functioned, I don't think that it is a good idea to use a beta version in production environment. The in-line /var/log/messages file which I transferred to my PC via scp could only be transmitted with 2.8 kB/s. Here is the latest /var/log/messages file: Feb 3 06:28:20 susrocdns2 syslogd: restart Feb 3 06:28:20 susrocdns2 /bsd: OpenBSD 3.9-beta (RAMDISK_CD) #1005: Mon Jan 30 12:31:07 MST 2006 Feb 3 06:28:20 susrocdns2 /bsd: [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD Feb 3 06:28:20 susrocdns2 /bsd: cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz (GenuineIntel 686-class) 3 GHz Feb 3 06:28:20 susrocdns2 /bsd: cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLU SH,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,EST,CNXT-ID Feb 3 06:28:20 susrocdns2 /bsd: real mem = 527863808 (515492K) Feb 3 06:28:20 susrocdns2 /bsd: avail mem = 475787264 (464636K) Feb 3 06:28:20 susrocdns2 /bsd: using 4278 buffers containing 26497024 bytes (25876K) of memory Feb 3 06:28:20 susrocdns2 /bsd: mainbus0 (root) Feb 3 06:28:20 susrocdns2 /bsd: bios0 at mainbus0: AT/286+(b0) BIOS, date 05/18/05, BIOS32 rev. 0 @ 0xeb660 Feb 3 06:28:20 susrocdns2 /bsd: pcibios0 at bios0: rev 2.2 @ 0xeb660/0x49a0 Feb 3 06:28:20 susrocdns2 /bsd: pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5680/240 (13 entries) Feb 3 06:28:20 susrocdns2 /bsd: pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GB LPC rev 0x00) Feb 3 06:28:20 susrocdns2 /bsd: pcibios0: PCI bus #3 is the last bus Feb 3 06:28:20 susrocdns2 /bsd: bios0: ROM list: 0xc/0xaa00! 0xcaa00/0x1000 0xcba00/0x1800 0xe8c00/0x7400! Feb 3 06:28:20 susrocdns2 /bsd: cpu0 at mainbus0 Feb 3 06:28:20 susrocdns2 /bsd: pci0 at mainbus0 bus 0: configuration mode 1 (no bios) Feb 3 06:28:20 susrocdns2 /bsd: pchb0 at pci0 dev 0 function 0 Intel 82945GP rev 0x02 Feb 3 06:28:20 susrocdns2 /bsd: vga1 at pci0 dev 2 function 0 Intel 82945G Video rev 0x02 Feb 3 06:28:20 susrocdns2 /bsd: wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) Feb 3 06:28:20 susrocdns2 /bsd: Intel 82945G Video rev 0x02 at pci0 dev 2 function 1 not configured Feb 3 06:28:20 susrocdns2 /bsd: Intel 82801GB HD Audio rev 0x01 at pci0 dev 27 function 0 not configured Feb 3 06:28:20 susrocdns2 /bsd: ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01 Feb 3 06:28:20 susrocdns2 /bsd: pci1 at ppb0 bus 1 Feb 3 06:28:20 susrocdns2 /bsd: ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01 Feb 3 06:28:20 susrocdns2 /bsd: pci2 at ppb1 bus 2 Feb 3 06:28:20 susrocdns2 /bsd: bge0 at pci2 dev 0 function 0 Broadcom BCM5752 rev 0x01, BCM5752 A1 (0x6001): irq 10bge0: firmware handshake timed out Feb 3 06:28:20 susrocdns2 /bsd
Re: /etc default dir and file permissions.
Not sure if there's a more formal way of doing this but this works... Boot single user again, obtain the etc38.tgz distribution archive and from the root of the file system extract it as follows.. tar -zxpf etc38.tgz Take note, this archive also contains seeded directories for /var and /root though and will overwrite settings that you have changed in those (you may want to tar -ztf and browse what it contains first). Also if you have X installed then xetc38.tgz will be needed too (carried /etc/X11 and so on) Hope this helps, - Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anon Y. Mous Sent: 28 January 2006 14:30 To: misc@openbsd.org Subject: /etc default dir and file permissions. Hi: I am running OpenBSD 3.8/i386 on an Intel Celeron (Mendocino) @ 300MHz w/ 128 MB RAM on a 300GB Seagate ATA 100 IDE hdd. I accidentally chmodded my entire /etc/ dir to mode 0777. Because I was then unable to login properly, I changed /etc/ back to 0440, from a single user boot (boot -s). Now I can't launch gtk+-based apps from my primary non-root account, and I cannot access commands via sudo, or read any man pages when not logged in as root. How do I restore the default permissions for /etc (and any) directory on my hdd? Here is my complete dmesg: OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Celeron (GenuineIntel 686-class, 128KB L2 cache) 332 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR real mem = 133787648 (130652K) avail mem = 115462144 (112756K) using 1658 buffers containing 6791168 bytes (6632K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(29) BIOS, date 08/27/98, BIOS32 rev. 0 @ 0xfd7b0 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xfd7b0/0x850 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf40/160 (8 entries) pcibios0: PCI Interrupt Router at 000:07:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc/0x8000 0xe/0x4000! 0xe4000/0xc000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82443LX AGP rev 0x03 ppb0 at pci0 dev 1 function 0 Intel 82443LX AGP rev 0x03 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI Rage Pro rev 0x5c wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pcib0 at pci0 dev 7 function 0 Intel 82371AB PIIX4 ISA rev 0x02 pciide0 at pci0 dev 7 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: ST3300831A wd0: 16-sector PIO, LBA48, 286168MB, 586072368 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 atapiscsi0 at pciide0 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: PHILIPS, PCRW1208, 4.0 SCSI0 5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, DMA mode 2 uhci0 at pci0 dev 7 function 2 Intel 82371AB USB rev 0x01: irq 9 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered Intel 82371AB Power rev 0x02 at pci0 dev 7 function 3 not configured eap0 at pci0 dev 12 function 0 Ensoniq AudioPCI97 rev 0x02: irq 10 ac97: codec id 0x43525903 (Cirrus Logic CS4297 rev 3) ac97: codec features headphone, 18 bit DAC, 18 bit ADC, No 3D Stereo audio0 at eap0 midi0 at eap0: AudioPCI MIDI UART Creative Labs SoundBlaster Audigy LS rev 0x00 at pci0 dev 13 function 0 not configured vendor Creative Labs, unknown product 0x7005 (class input subclass miscellaneous, rev 0x00) at pci0 dev 13 function 1 not configured Nvidia Riva TNT rev 0x04 at pci0 dev 14 function 0 not configured isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 ep0: irq 10 already in use pcppi0 at isa0 port 0x61 midi1 at pcppi0: PC speaker spkr0 at pcppi0 sysbeep0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo isapnp0 at isa0 port 0x279: read port 0x20b ep1 at isapnp0 3Com 3C509B EtherLink III, TCM5095, PNP80F7, port 0x210/16 irq 3: address 00:10:4b:20:fd:bd, utp (default utp) biomask fb65 netmask fb6d ttymask fbef pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support uhidev0 at uhub0 port 2 configuration 1 interface 0 uhidev0: Logitech USB-PS/2 Optical Mouse, rev 2.00/20.00, addr 2, iclass 3/1 ums0 at uhidev0: 3 buttons and Z dir. wsmouse0 at ums0 mux 0 dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 END Thanks, minsai [EMAIL PROTECTED] Tired of spam? Yahoo! Mail
