Re: [9fans] ethervirtio

2014-12-04 Thread hiro
Did anyone compare throughput, pps, etc. with the same on standard rtl
or intel emulated cards?

On 12/4/14, David du Colombier 0in...@gmail.com wrote:
 I've just uploaded a new disk image with the latest
 ethervirtio changes.

 http://9legacy.org/download/plan9-gce.img.bz2

 This image will be able to run on both QEMU
 (using virtio net and virtio-scsi disk) and GCE.

 Since QEMU (#S/sd00) and GCE (#S/sd01) use a different
 controller name, the plan9.ini will let you choose
 between QEMU and GCE.

 Here is the output of the GCE console:

 http://9legacy.org/9legacy/doc/gce/console

 You can easily create a Plan 9 disk or cd image
 yourself by applying the patches and following
 the instructions on:

 http://9legacy.org/9legacy/doc/gce/notes

 The next step is to fix the DHCP client in ip/ipconfig.

 --
 David du Colombier





[9fans] dbus fun ;-)

2014-12-04 Thread Enrico Weigelt, metux IT consult


http://gentooexperimental.org/~patrick/weblog/archives/2014-11.html#e2014-11-23T09_26_01.txt


--
Enrico Weigelt,
metux IT consulting
+49-151-27565287



Re: [9fans] dbus fun ;-)

2014-12-04 Thread Quintile
I looked at dbus  for an embedded Linux project at work a few years ago, I ran 
screaming.

I convinced them to use an ascii protocol through a virtual file.

much nicer.

-Steve




 On 4 Dec 2014, at 15:15, Enrico Weigelt, metux IT consult 
 enrico.weig...@gr13.net wrote:
 
 
 
 http://gentooexperimental.org/~patrick/weblog/archives/2014-11.html#e2014-11-23T09_26_01.txt
 
 
 --
 Enrico Weigelt,
 metux IT consulting
 +49-151-27565287



[9fans] Debian bug 737206 - rc shell uses insecurely /tmp

2014-12-04 Thread Stéphane Aulery
Hello,

I make you pass an open bug report on the Debian bts about rc. 
I do not know to whom I should speak. The code comes from 9base, who
just plan9port, etc. Here is the report [1]:

   Package: 9base
   Version: 1:6-6
   Severity: important
   Tags: security

   Murray McAllister from Red Hat Security Response Team discovered that rc 
   creates temporary files in an insecure way:

   $ strace -o '| grep /tmp' ./test-heredoc
   open(/tmp/here217f., O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 5
   open(/tmp/here217f., O_RDONLY|O_LARGEFILE) = 5
   moo
   unlink(/tmp/here217f.)= 0

   As you can see, the filenames are easily predictable, and the O_EXCL 
   flag is missing.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737206

Regards,

-- 
Stéphane Aulery
#!/usr/lib/plan9/bin/rc
cat  EOF
moo
EOF


Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp

2014-12-04 Thread Charles Forsyth
On Wed, Dec 3, 2014 at 11:49 PM, Stéphane Aulery saul...@free.fr wrote:

 discovered that rc
creates temporary files in an insecure way:


rc was built for a system that made /tmp secure by not sharing it (it's
always private to a user and even sometimes to a set of processes).
That way not every app has to try to help sustain the pretence that a
shared /tmp can really be secured (+s bits, EXCL create, etc..)
Obviously the version for Unix will have to change its generation scheme to
fit in.


[9fans] Is the go9p project still maintained?

2014-12-04 Thread Dmitry Golubovsky
Hi

Just wondering if the project https://code.google.com/p/go9p/ is
actively maintained these days?

I used it in my project, but fixing issue 30 broke it. I opened issue 34

https://code.google.com/p/go9p/issues/detail?id=34

which also contains a suggested patch. No response since then.

If the project's active repo moved please let me know, I'll resubmit
the issue there. If the project is not maintained anymore I'll take
care of it in my project's local repo.

Thanks.

-- 
Dmitry Golubovsky

Anywhere on the Web



Re: [9fans] Is the go9p project still maintained?

2014-12-04 Thread mischief
latchesar fixed a few bugs i reported earlier this year. you might try mailing 
him directly.

ron also has a fork on github.



Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp

2014-12-04 Thread Bruce Ellis
Don't these people have better things to do than finding non-bugs in
systems they don't understand?

brucee

On 5 December 2014 at 13:33, Charles Forsyth charles.fors...@gmail.com
wrote:


 On Wed, Dec 3, 2014 at 11:49 PM, Stéphane Aulery saul...@free.fr wrote:

 discovered that rc
creates temporary files in an insecure way:


 rc was built for a system that made /tmp secure by not sharing it (it's
 always private to a user and even sometimes to a set of processes).
 That way not every app has to try to help sustain the pretence that a
 shared /tmp can really be secured (+s bits, EXCL create, etc..)
 Obviously the version for Unix will have to change its generation scheme
 to fit in.



Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp

2014-12-04 Thread Skip Tavakkolian
+1 


 On Dec 4, 2014, at 7:08 PM, Bruce Ellis bruce.el...@gmail.com wrote:
 
 Don't these people have better things to do than finding non-bugs in systems 
 they don't understand?
 
 brucee
 
 On 5 December 2014 at 13:33, Charles Forsyth charles.fors...@gmail.com 
 wrote:
 
 On Wed, Dec 3, 2014 at 11:49 PM, Stéphane Aulery saul...@free.fr wrote:
 discovered that rc
creates temporary files in an insecure way:
 
 rc was built for a system that made /tmp secure by not sharing it (it's 
 always private to a user and even sometimes to a set of processes).
 That way not every app has to try to help sustain the pretence that a shared 
 /tmp can really be secured (+s bits, EXCL create, etc..)
 Obviously the version for Unix will have to change its generation scheme to 
 fit in.
 


Re: [9fans] Debian bug 737206 - rc shell uses insecurely /tmp

2014-12-04 Thread sl
Aren't they talking about rc when running on their operating system?

sl



Re: [9fans] Is the go9p project still maintained?

2014-12-04 Thread minux
On Fri, Dec 5, 2014 at 12:53 AM, lu...@proxima.alt.za wrote:

  which also contains a suggested patch

 Did you check that the proposed patch actually works?

 I see no difference between:

 a || b
 and
 a || (a  b) which is (a || a)  (a || b)

a || (a  b) is actually just a fancier way to write a.

if a is true, the result is true,
if a is false, the result will be a  b, however, as a is already false,
it's false.

in go9p.patch, the suggested change is actually from a || b to a || (b 
a),
this is slightly different. But it's still just a fancier way to write a.