Bug#559344: kldutils: bashism used in /etc/init.d/module-init-tools

2009-12-04 Thread Hanno Hecker
On Fri, 4 Dec 2009 14:43:52 +0100 (CET) Petr Salinger wrote: > It might be related to package name change in > > freebsd-utils (7.1-4) unstable; urgency=low > >* Rename module-init-tools to kldutils and net-tools to freebsd-net-tools, > as this is messing up the expectations of several

Bug#559107: weaknesses in BSD PRNG algorithms

2009-12-04 Thread Florian Weimer
* Petr Salinger: > If I understand it correctly, the security problem is > "it allows remote attackers to guess sensitive values such as IP > fragmentation IDs by observing a sequence of previously generated > values". > By default, the next_value is previous_value+1, i.e. unsecure at all. > It ca

Re: Another header bug? (was: failed build of net-snmp_5.4.2.1~dfsg-4)

2009-12-04 Thread Cyril Brulebois
Petr Salinger (04/12/2009): > It looks like bug in new kfreebsd-kernel-headers, does > #include at the begin of /usr/include/netinet/tcp_var.h > fix it ? It does. (Sorry, was short of time to test that kind of things myself, so I preferred mailing over forgetting.) Mraw, KiBi. signature.asc De

Re: Another header bug? (was: failed build of net-snmp_5.4.2.1~dfsg-4)

2009-12-04 Thread Petr Salinger
| libtool: compile: gcc -I../include -I. -I../snmplib -g -O2 -DNETSNMP_USE_INLINE -Ukfreebsd -Dkfreebsd=kfreebsd -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -pipe -fstack-protector -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/lib/pe

Another header bug? (was: failed build of net-snmp_5.4.2.1~dfsg-4)

2009-12-04 Thread Cyril Brulebois
Hi, maybe another header bug, seen in net-snmp's build on kfreebsd-i386: | libtool: compile: gcc -I../include -I. -I../snmplib -g -O2 -DNETSNMP_USE_INLINE -Ukfreebsd -Dkfreebsd=kfreebsd -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -pipe -fstack-protector -I/usr/

Re: Bug#559344: kldutils: bashism used in /etc/init.d/module-init-tools

2009-12-04 Thread Ludovic Courtès
Hi, Rogério Brito writes: > On Dec 03 2009, Thorsten Glaser wrote: >> modules="$(cat /etc/modules /etc/modules.d/* 2>/dev/null | \ >> sed -e 's/#.*//g' -e '/^[ ]*$/d')" >> ^ ^-> space >> +> tab > > Are character classes (

Re: Bug#559344: kldutils: bashism used in /etc/init.d/module-init-tools

2009-12-04 Thread Rogério Brito
On Dec 03 2009, Thorsten Glaser wrote: > modules="$(cat /etc/modules /etc/modules.d/* 2>/dev/null | \ > sed -e 's/#.*//g' -e '/^[ ]*$/d')" > ^ ^-> space > +> tab Are character classes (e.g., [[:blank:]]) understood by standard too

Bug#559344: kldutils: bashism used in /etc/init.d/module-init-tools

2009-12-04 Thread Petr Salinger
When running with a default shell of dash and not bash, the /etc/init.d/module-init-tools script complains about not finding the bash builtin shopt: # /etc/init.d/module-init-tools start /etc/init.d/module-init-tools: 62: shopt: not found # Which is from this call: modules="`shopt -s nullgl

Bug#559107: weaknesses in BSD PRNG algorithms

2009-12-04 Thread Petr Salinger
If I understand it correctly, this means that the fix is present in kfreebsd-8, but not kfreebsd-7? Yes. Not having it enabled by default seems good enough to me. If I understand it correctly, the security problem is "it allows remote attackers to guess sensitive values such as IP fragmenta

Re: kfreebsd-kernel-headers and USB API breakage

2009-12-04 Thread Petr Salinger
* freeglut It is possible to disable USB scan of joystick by hack bellow. I would prefer to stay on headers based on 8.0. As most of the problem are concentrated on the USB stack, what about switching back to 7.2 headers only for /dev/bus/usb? There is a compatibility layer in the kernel, an