Re: negative group permissions?

2012-02-29 Thread Brooks Davis
On Wed, Feb 29, 2012 at 11:30:04AM -0500, Jason Hellenthal wrote: > > > On Wed, Feb 29, 2012 at 08:57:16AM +, Anton Shterenlikht wrote: > > On Wed, Feb 29, 2012 at 02:24:58AM -0500, Jason Hellenthal wrote: > > > > > > > > > On Tue, Feb 28, 2012 at 04:24:47PM +, Anton Shterenlikht wrote:

Re: Xorg - monitor off after start

2012-02-29 Thread Alex Keda
On 24.02.2012 12:37, Alex Keda wrote: problem, first described: http://lists.freebsd.org/pipermail/freebsd-current/2011-December/030528.html on last days 2011 year, all work OK, without some custom kernel new year - old problems =) if I rename drm.ko - all OK. with drm.ko - I have monitor off

Re: flowtable usable or not

2012-02-29 Thread K Macy
Inviato da iPad Il giorno 01/mar/2012, alle ore 03:01, Steve Wills ha scritto: > > The failure I experienced was with web servers running 8.0 behind a F5 > load balancer in an HA setup. Whenever the failover happened, the web > servers would continue sending to the wrong MAC address, despite

Re: flowtable usable or not

2012-02-29 Thread Steve Wills
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/29/12 13:17, K. Macy wrote: > . >> >> I tried it, on both FreeBSD routers, web systems, and database >> servers; all on 8.2+. It still causes massive instability. >> Disabling the sysctl, and/or removing it from the kernel solved >> the problem

Re: revisiting tunables under Safe Mode menu option

2012-02-29 Thread Devin Teske
On Feb 28, 2012, at 5:46 AM, John Baldwin wrote: > On Tuesday, February 28, 2012 1:23:11 am Scott Long wrote: >> I still think that it's useful to be able to disable ACPI. Just because > ACPI works well on modern hardware doesn't mean that everything crummy from > 2000-2007 suddenly disappeare

Re: revisiting tunables under Safe Mode menu option

2012-02-29 Thread Kevin Oberman
On Wed, Feb 29, 2012 at 1:49 AM, Andriy Gapon wrote: > on 29/02/2012 00:18 Kevin Oberman said the following: >> APIC is required for SMP, but works on many older, single CPU systems >> and removes the massive sharing of IRQs common on non-APIC systems. >> >> OTOH, some ThinkPads simply won't boot

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-29 Thread Alexander Best
On Tue Feb 28 12, Chuck Burns wrote: > On 2/28/2012 4:55 PM, Ade Lovett wrote: > >On 2/28/2012 14:11, Alexander Best wrote: > >>any chance we can have a CFLAGS.gcc and CFLAGS.clang in the future? > >>that would > >>make certain things a lot easier. dealing with gcc specific options, > >>such as > >

Re: negative group permissions?

2012-02-29 Thread Ian Lepore
On Wed, 2012-02-29 at 13:00 -0500, Jason Hellenthal wrote: > > On Wed, Feb 29, 2012 at 10:18:13AM -0700, Ian Lepore wrote: > > On Wed, 2012-02-29 at 11:41 -0500, Jason Hellenthal wrote: > > > > > > On Wed, Feb 29, 2012 at 04:18:45PM +, jb wrote: > > > > Ian Lepore damnhippie.dyndns.org> writ

Re: flowtable usable or not

2012-02-29 Thread K. Macy
. > > I tried it, on both FreeBSD routers, web systems, and database > servers; all on 8.2+. It still causes massive instability. Disabling > the sysctl, and/or removing it from the kernel solved the problems. Routing I can believe, but I'm wondering how close attention you paid to the workload. T

Re: negative group permissions?

2012-02-29 Thread Jason Hellenthal
On Wed, Feb 29, 2012 at 10:18:13AM -0700, Ian Lepore wrote: > On Wed, 2012-02-29 at 11:41 -0500, Jason Hellenthal wrote: > > > > On Wed, Feb 29, 2012 at 04:18:45PM +, jb wrote: > > > Ian Lepore damnhippie.dyndns.org> writes: > > > > > > > ... > > > > It's not a > > > > directory or execu

Re: negative group permissions?

2012-02-29 Thread jb
Ian Lepore damnhippie.dyndns.org> writes: > ... > Again, the problem here seems to be the use of 0661 in the lpr program, > not the idea of negative permissions, not the new scan for the use of > negative permissions. This will go away after the fix below is applied. > It's just an old bug in

Re: negative group permissions?

2012-02-29 Thread Ian Lepore
On Wed, 2012-02-29 at 11:41 -0500, Jason Hellenthal wrote: > > On Wed, Feb 29, 2012 at 04:18:45PM +, jb wrote: > > Ian Lepore damnhippie.dyndns.org> writes: > > > > > ... > > > It's not a > > > directory or executable file in the first place, so making it executable > > > for everyone exce

Re: negative group permissions?

2012-02-29 Thread Jason Hellenthal
On Wed, Feb 29, 2012 at 04:18:45PM +, jb wrote: > Ian Lepore damnhippie.dyndns.org> writes: > > > ... > > It's not a > > directory or executable file in the first place, so making it executable > > for everyone except the owner and group is not some sort of subtle > > security trick, it's

Re: negative group permissions?

2012-02-29 Thread Ian Lepore
On Wed, 2012-02-29 at 16:18 +, jb wrote: > Ian Lepore damnhippie.dyndns.org> writes: > > > ... > > It's not a > > directory or executable file in the first place, so making it executable > > for everyone except the owner and group is not some sort of subtle > > security trick, it's just mea

Re: negative group permissions?

2012-02-29 Thread Jason Hellenthal
On Wed, Feb 29, 2012 at 08:57:16AM +, Anton Shterenlikht wrote: > On Wed, Feb 29, 2012 at 02:24:58AM -0500, Jason Hellenthal wrote: > > > > > > On Tue, Feb 28, 2012 at 04:24:47PM +, Anton Shterenlikht wrote: > > > On Tue, Feb 28, 2012 at 03:07:43PM +, jb wrote: > > > > Anton Shteren

Re: negative group permissions?

2012-02-29 Thread jb
Ian Lepore damnhippie.dyndns.org> writes: > ... > It's not a > directory or executable file in the first place, so making it executable > for everyone except the owner and group is not some sort of subtle > security trick, it's just meaningless. > ... Is it meaningless ? Example: # cat /var/s

Re: [CFT] modular kernel config

2012-02-29 Thread ~Lst
2012/2/29 Łukasz Wąsikowski : > W dniu 2012-02-28 22:22, Arnaud Lacombe pisze: > > FLOWTABLE on 8.x crashed BGP routers (kern/144917). > no crash dump, no backtrace, no follow-up whatsoever after 1 year and 2 years, what's your points ? You could really have chosen a better PR >>>

Re: [CFT] modular kernel config

2012-02-29 Thread ~Lst
On Tue, Feb 28, 2012 at 10:37 PM, Alexander Leidinger wrote: > Quoting ~Lst (from Tue, 28 Feb 2012 16:38:43 +0700): > >> 2012/2/28 Steve Wills : >>> >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA1 >>> >>> On 02/27/12 10:53, Łukasz Wąsikowski wrote: W dniu 2012-02-22 23:31, Bjoern

Re: negative group permissions?

2012-02-29 Thread Ian Lepore
On Wed, 2012-02-29 at 13:21 +, jb wrote: > jb gmail.com> writes: > > > ... > > I would suggest (if you can) that you change the .seq permissions to 0664 > > and > > watch what happens to it - the purpose is to narrow down who/what changed > > its > > mode. > > Some history. logs. and some

Re: negative group permissions?

2012-02-29 Thread jb
jb gmail.com> writes: > ... > I would suggest (if you can) that you change the .seq permissions to 0664 and > watch what happens to it - the purpose is to narrow down who/what changed its > mode. > Some history. logs. and some ad hoc "watch script" would do it. Take a look at "notify" feature (

SeaMonkey eats the CPU as of r232144

2012-02-29 Thread deeptec...@gmail.com
As of r232144, SeaMonkey (a web browser) runs rather slowly and is constantly eating 100% CPU time. Before r232144, SeaMonkey would start up and run faster, and when it is not in use (is idling), its CPU usage would slowly converge to 0. I have a P4 processor [with HT], an r232012 world, and simil

Re: negative group permissions?

2012-02-29 Thread jb
Anton Shterenlikht bristol.ac.uk> writes: > ... > To the best of my knowledge the security warning started > to appear recently. For the previous 2 years or so I haven't > seen it. Now, I didn't modify the default security scripts, > nor the lpd system. The file is created with this permissions

Re: revisiting tunables under Safe Mode menu option

2012-02-29 Thread Andriy Gapon
on 29/02/2012 00:18 Kevin Oberman said the following: > APIC is required for SMP, but works on many older, single CPU systems > and removes the massive sharing of IRQs common on non-APIC systems. > > OTOH, some ThinkPads simply won't boot with APIC. My old T43 > (Pentium-M) had this issue. I had t

Re: negative group permissions?

2012-02-29 Thread jb
Jason Hellenthal dataix.net> writes: > > > On Wed, Feb 29, 2012 at 08:54:20AM +, jb wrote: > > > > 0641 ? Are you sure ? > > Not at all ;) > > > > > > > > Checking negative group permissions: > > > > > > > 70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012 > /var/spool/output/l

Re: negative group permissions?

2012-02-29 Thread Jason Hellenthal
On Wed, Feb 29, 2012 at 08:54:20AM +, jb wrote: > > 0641 ? Are you sure ? Not at all ;) > > > > > > Checking negative group permissions: > > > > > > 70834 -rw-rx 1 root daemon 4 Feb 21 12:54:02 2012 /var/spool/output/lpd/.seq -- ;s =; _

Re: negative group permissions?

2012-02-29 Thread Anton Shterenlikht
On Wed, Feb 29, 2012 at 02:24:58AM -0500, Jason Hellenthal wrote: > > > On Tue, Feb 28, 2012 at 04:24:47PM +, Anton Shterenlikht wrote: > > On Tue, Feb 28, 2012 at 03:07:43PM +, jb wrote: > > > Anton Shterenlikht bristol.ac.uk> writes: > > > > > > > > > > > This was discussed in questi

Re: negative group permissions?

2012-02-29 Thread jb
Jason Hellenthal dataix.net> writes: > ... > > > The file should not be executable, according to its purpose. > > > > > > So the lpr.c should be changed from > > > if ((fd = open(buf, O_RDWR|O_CREAT, 0661)) < 0) { > > ... > > http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/165533 > ... > Abov