On Sat, 10 Apr 1999, oZZ!!! wrote:
Date: Sat, 10 Apr 1999 02:27:22 +0400 (MSD)
From: oZZ!!! o...@etrust.ru
To: Dmitry Valdov d...@dv.ru
Cc: freebsd-current@FreeBSD.ORG
Subject: Re: DoS from local users
Hi!
Try it:
cat qqq
echo $$
echo ~/qqq|~/qqq|~/qqq|~/qqq|~/qqq
On Fri, 9 Apr 1999, Chris Costello wrote:
Date: Fri, 9 Apr 1999 18:30:31 -0500
From: Chris Costello ch...@holly.dyndns.org
Reply-To: ch...@calldei.com
To: Dmitry Valdov d...@dv.ru
Cc: freebsd-questi...@freebsd.org
Subject: Re: DoS from local users
On Fri, Apr 9, 1999, Dmitry Valdov
At 09:24 4/9/99 +0100, Brian Somers wrote:
Does anything different happen if you
set accmap 000a
in your ppp.conf ? If not, you're going to have to approach your ISP
and ask them why their ppp implementation is ignoring our requests
(which needless to say violates the rfc).
It would
On Sat, Apr 10, 1999, Dmitry Valdov wrote:
You typically want to set a restriction as to how many
processes a user can spawn. This is done by editing
/etc/login.conf and changing the user's login class, see the man
page for 'login.conf'.
I'm about CPU usage, not about many
Hi!
Just tested it with user who has maxproc 32 set. Here is the results:
last pid: 58668; load averages: 27.06, 19.94, 12.67up 0+09:40:46 11:06:11
77 processes: 31 running, 46 sleeping
CPU states: 14.9% user, 0.0% nice, 85.1% system, 0.0% interrupt, 0.0% idle
Mem: 26M Active, 12M
On Sat, 10 Apr 1999, Chris Costello wrote:
Date: Sat, 10 Apr 1999 02:05:33 -0500
From: Chris Costello ch...@holly.dyndns.org
Reply-To: ch...@calldei.com
To: Dmitry Valdov d...@dv.ru
Cc: freebsd-current@FreeBSD.ORG, freebsd-questi...@freebsd.org
Subject: Re: DoS from local users (fwd)
Thus spake Brian Handy ha...@lambic.physics.montana.edu
On Fri, 9 Apr 1999, The Hermit Hacker wrote:
[g77 in the source tree]
I have to agree here...I personally know noone that actually uses
Fortran...having it as an option to turn off would be nice...one less
thing to compile on a
Hi
I've been helping somebody along with getting the new libcrypt going,
and something has broken recently (post-egcs?), and I'm having a wee
problem debugging it.
Libcrypt uses routines out of libmd (MD[45]* and SHA*), and a while
back (pre-egcs), it was possible to have an LDADD+=-lmd in
On Sa , 10 Apr 1999 05:52:10 Alex Zepeda wrote:
Ok, so if you copy them onto your UFS partition first, do they play ok?
(Just to be clear here..)
No. I'm thinking a big magnet walked up while I was sleeping or
something, b/c if I copy from UFS - FAT it plays fine from FAT.
What if you
On Sat, 10 Apr 1999, Greg Lehey wrote:
...
In fact, it's not necessary. It happens any time you detach the last
subdisk from a striped or RAID-5 plex.
Ups...
Correct. What happened to the stack traces? Don't bother, though,
I've reproduced it here. Expect a fix in a couple of hours.
Sorry,
Mark Murray wrote:
Hi
I've been helping somebody along with getting the new libcrypt going,
and something has broken recently (post-egcs?), and I'm having a wee
problem debugging it.
Libcrypt uses routines out of libmd (MD[45]* and SHA*), and a while
back (pre-egcs), it was possible to
Peter Wemm wrote:
cc -O -pipe -I/usr/src/gnu/usr.bin/perl/miniperl/../../../../contrib/perl5
-I
/usr/obj/usr/src/gnu/usr.bin/perl/miniperl -I/usr/obj/usr/src/tmp/usr/i
nc
lude -static -o miniperl miniperlmain.o -lperl -lm -lcrypt
^^^
Hi,
Any chance of sending me the logs for both when the connection works
(3.1) and when it doesn't work (4.0) ?
set log command tun phase chat lcp ipcp
TIA.
At 09:24 4/9/99 +0100, Brian Somers wrote:
Does anything different happen if you
set accmap 000a
in your ppp.conf ? If
On Sat, 10 Apr 1999, Dmitry Valdov wrote:
On Sat, 10 Apr 1999, Chris Costello wrote:
Date: Sat, 10 Apr 1999 02:05:33 -0500
From: Chris Costello ch...@holly.dyndns.org
Reply-To: ch...@calldei.com
To: Dmitry Valdov d...@dv.ru
Cc: freebsd-current@FreeBSD.ORG,
On Sat, 10 Apr 1999, Peter Wemm wrote:
Mark Murray wrote:
Hi
I've been helping somebody along with getting the new libcrypt going,
and something has broken recently (post-egcs?), and I'm having a wee
problem debugging it.
Libcrypt uses routines out of libmd (MD[45]* and SHA*),
Brian Feldman wrote:
On Sat, 10 Apr 1999, Peter Wemm wrote:
Mark Murray wrote:
Hi
I've been helping somebody along with getting the new libcrypt going,
and something has broken recently (post-egcs?), and I'm having a wee
problem debugging it.
Libcrypt uses routines out
Hi!
Once again - HOW I can limit CPU usage by *kernel* ?
Also, I've just tried set maxprocesses 5.
And it helpless.
With 5 processes limit user was able to slow down P2-450 computer.
Switching between windows in X was VERY slow. Mouse movements was slow down
too.
CPU states: 32.3% user, 0.0%
Dmitry Valdov once stated:
=Once again - HOW I can limit CPU usage by *kernel* ? Also, I've just
=tried set maxprocesses 5. And it helpless. With 5 processes limit user
=was able to slow down P2-450 computer. Switching between windows in X
=was VERY slow. Mouse movements was slow down too.
=CPU
Alex Zepeda wrote:
No. The mp3s stored on the UFS partition are fine. And it's not just
some of the MP3s on the fat partition, it's all of them, which is really
really weird. I couldn't find xaudio, but amp belched a bit too. All in
all it's really strange, I'm willing to accept random
John R. LoVerso wrote:
Right or wrong, you forgot:
5. BSD tradition.
Case 5 justifies Fortran.
By that logic, you'd also have to add a Pascal compiler to the base system.
Does gcc has a Pascal? :-)
I think we have a Pascal doc under share.
Neither makes much sense when they can
Hi,
On Fri, Apr 09, 1999 at 11:28:52AM -0500, Glenn Johnson wrote:
On Fri, Apr 09, 1999 at 03:52:58PM +0200, Jeremy Lea wrote:
I always thought the criteria for inclusion of things into the base
system was:
1. Needed for 'make world';
2. Needed to get a basic functioning server up
On Sun, 11 Apr 1999, Daniel C. Sobral wrote:
No. The mp3s stored on the UFS partition are fine. And it's not just
some of the MP3s on the fat partition, it's all of them, which is really
really weird. I couldn't find xaudio, but amp belched a bit too. All in
all it's really strange,
Mark Murray wrote:
The undefined references are all in libmd which is listed as above
in libcrypt's Makefile.
I would hate to have to hunt down all usages of -lcrypt to add -lmd.
As Peter already mentioned, the problem is that library dependencies
aren't recorded in archive libraries.
I
Brian Feldman wrote:
YES! Make the mdXXX symbols all weak, so libmd can be added manually!
Peter already mentioned why that isn't necessary. I just want to add
a caution to folks out there. Don't go wild with weak symbols. Think
VERY carefully (and get a review) before using them. They
Hi,
On Fri, Apr 09, 1999 at 11:19:21PM +0900, Daniel C. Sobral wrote:
Right or wrong, you forgot:
5. BSD tradition.
Case 5 justifies Fortran.
Me, I'd rather have Fortran as a port. I'd even grudgingly accept
fortune as a port, as a matter of fact. Our base system is bloated.
While a
Peter Wemm wrote:
What I would like is a minimal /lib, containing a few key libraries like
libc.so, libutil.so, etc and have everything dynamic.
I support that idea too. It's time. We can't support all-static
systems forever. It's becoming a ball and chain as more and more
applications use
John Polstra wrote:
I ran into a similar problem for static PAM. After some discussion
with Bruce, I held my nose and put this into bsd.libnames.mk:
:-) I can see why you don't like that solution; I can also see why
it is unavoidable.
Any objections to me doing something similar with
Does gcc has a Pascal? :-)
Actually, yes. It's not a part of it yet, but drops in and builds
easily with gcc-2.8.1, and with very little extra work for egcs.
Check out http://agnes.dida.physik.uni-essen.de/~gnu-pascal/.
Unlike Modula-3 and Gnat, they wrote the front-end in C, so it's a whole
Mark Murray wrote:
John Polstra wrote:
I ran into a similar problem for static PAM. After some discussion
with Bruce, I held my nose and put this into bsd.libnames.mk:
:-) I can see why you don't like that solution; I can also see why
it is unavoidable.
Any objections to me doing
On Sat, 10 Apr 1999, Dmitry Valdov wrote:
Hi!
Once again - HOW I can limit CPU usage by *kernel* ?
Also, I've just tried set maxprocesses 5.
And it helpless.
With 5 processes limit user was able to slow down P2-450 computer.
Switching between windows in X was VERY slow. Mouse movements
On Sat, 10 Apr 1999, John Polstra wrote:
Brian Feldman wrote:
YES! Make the mdXXX symbols all weak, so libmd can be added manually!
Peter already mentioned why that isn't necessary. I just want to add
a caution to folks out there. Don't go wild with weak symbols. Think
VERY carefully
Jeremy Lea wrote:
Hi,
On Fri, Apr 09, 1999 at 11:19:21PM +0900, Daniel C. Sobral wrote:
Right or wrong, you forgot:
5. BSD tradition.
Case 5 justifies Fortran.
Me, I'd rather have Fortran as a port. I'd even grudgingly accept
fortune as a port, as a matter of fact. Our base
Sixth update to the new ATA/ATAPI driver:
Fixed problems:
Promise controllers was not always set up correctly.
Parantheses are a good thing, fixed.
Some older CDROM's could hang the probe.
Proberly wait for the drive to catch its breath after IDENTIFY.
Some CD
Brian Feldman once stated:
= Once again - HOW I can limit CPU usage by *kernel* ? Also, I've just
= tried set maxprocesses 5. And it helpless. With 5 processes limit
= user was able to slow down P2-450 computer. Switching between windows
= in X was VERY slow. Mouse movements was slow down too.
=
On Sat, 10 Apr 1999, Brian Feldman wrote:
Date: Sat, 10 Apr 1999 14:07:27 -0400 (EDT)
From: Brian Feldman gr...@unixhelp.org
To: Dmitry Valdov d...@dv.ru
Cc: freebsd-current@freebsd.org
Subject: Re: DoS from local users (fwd)
On Sat, 10 Apr 1999, Dmitry Valdov wrote:
Hi!
Once
It is not possible to prevent a user from hogging the cpu on the system.
What you *CAN* do is make it difficult for the user to crash the system
by limiting the number of processes he is allowed to run, the maximum
data segment size each process is allowed to allocate, and by
It should be possible to prevent a user from hogging a system if the system's
naive scheduler is improved.
Amancio
It is not possible to prevent a user from hogging the cpu on the system.
What you *CAN* do is make it difficult for the user to crash the system
by limiting
On Fri, Apr 09, 1999 at 11:19:21PM +0900, Daniel C. Sobral wrote:
Right or wrong, you forgot:
5. BSD tradition.
Case 5 justifies Fortran.
Me, I'd rather have Fortran as a port. I'd even grudgingly accept
fortune as a port, as a matter of fact. Our base system is bloated.
:
:It should be possible to prevent a user from hogging a system if the system's
:naive scheduler is improved.
:
: Amancio
No, it isn't. For a very simple reason: The resources users need to do
real work are very similar to the resources users need to hog the system.
Saying
Hello,
Let's remember a motto of J. Pournelle of the late Byte : one User, more
than one CPU (let people hog their workstation as much as they want ...)
And another good resolution : no shell accounts for normal users on
sensitive servers (no lusers which could want to DoS the servers
allowed)
:
:It should be possible to prevent a user from hogging a system if the system's
:naive scheduler is improved.
:
: Amancio
No, it isn't. For a very simple reason: The resources users need to do
real work are very similar to the resources users need to hog the system.
That
:
: No, it isn't. For a very simple reason: The resources users need to do
: real work are very similar to the resources users need to hog the system.
:
:That has nothing to do with it. Not for cpu usage. If you have two users that
:are using all the CPU they can they ought to get 50%
:
:It should be possible to prevent a user from hogging a system if the system's
:naive scheduler is improved.
:
: Amancio
No, it isn't. For a very simple reason: The resources users need to do
real work are very similar to the resources users need to hog the system.
:On the shell servers I run, we've got 200-300 users running tasks.
:Occasionally, through intent or misconfiguration, a user either forkbombs,
:or gets a large number of processes running sucking lots of cpu.
:
:I'd like to see an option that makes all the processes run by one uid have
:the same
:That has nothing to do with it. Not for cpu usage. If you have two users
that :are using all the CPU they can they ought to get 50% of the CPU each.
Even if :one of the users have 1 process and the other have 100 processes.
:
:Sun has a product for this, Solaris Resource Manager.
Alex Zepeda wrote:
panic: vm_page_bits: illegal base/size 4096/2048
The panic is hopefully just fixed in vnode_pager.c rev.1.107. I didn't
quite understand if you have other msdosfs problems.
Dima
To Unsubscribe: send mail to majord...@freebsd.org
with unsubscribe freebsd-current in the
On Sat, 10 Apr 1999, Matthew Dillon wrote:
:Kevin
Plausable, yes. Useful: probably not as useful as you might think. I
wouldn't even consider doing something like that for BEST, it could lead
to cascade failures.
For example, if a user is running procmail or cron on a
Jeremy wrote:
6. Whoever brings patches wins.
Steve wrote:
Doesn't apply for getting something *removed* from the tree.
I've had *patches* and *ports* for f2c and f77 sitting around
for at least 2 months. Search the mailing list.
Nate's comment:
I offered to do the commit
:Matt, I agree with what you're saying, but what would you think about
:something that would take a look at the total cpu time that a process
:group had accumulated in the previous 120 seconds. That would be, I
:think, plenty long enough to catch most inadvertent things, and just
:kill the
On Sun, 11 Apr 1999, Dmitrij Tejblum wrote:
Alex Zepeda wrote:
panic: vm_page_bits: illegal base/size 4096/2048
The panic is hopefully just fixed in vnode_pager.c rev.1.107. I didn't
quite understand if you have other msdosfs problems.
I'll try it out and see what happens.
The other
Unless I get more feedback, I will add g77 to the base system this
weekend.
I should have posted this yesterday... but I had hoped to just get it
done. There has been suffient YES response to keep Fortran in the base
system. As someone posted to the point: g77 will add very little
additional
On Sat, 10 Apr 1999, Matthew Dillon wrote:
Date: Sat, 10 Apr 1999 14:08:41 -0700 (PDT)
From: Matthew Dillon dil...@apollo.backplane.com
To: Kevin Day toa...@home.dragondata.com
Cc: ha...@rah.star-gate.com, d...@dv.ru, gr...@unixhelp.org,
freebsd-current@FreeBSD.ORG
Subject: Re: DoS
For some years I have been using patched utilities under SunOS to show
full host names in the output from the 'who', 'finger', and 'last'
commands. (Traditional UNIXes truncate host names to about 16
characters.)
I have been thinking of patching FreeBSD programs to do the same, but
since I have
I guess any sufficiently advance science is indeed consider magic by some.
Amancio
:
:It should be possible to prevent a user from hogging a system if the system's
:naive scheduler is improved.
:
: Amancio
No, it isn't. For a very simple reason: The resources users
What about a new login-class capability specifying the maximum
percentage of CPU time a class of users can utilize? With standard
class having 90% (or 95%)? The machine would appear (to most of
the users) as if it had 10% slower CPU, with the remaining usable
by the root-class. This way, if the
Mikhail Teterin wrote:
What about a new login-class capability specifying the maximum
percentage of CPU time a class of users can utilize? With standard
class having 90% (or 95%)? The machine would appear (to most of
the users) as if it had 10% slower CPU, with the remaining usable
by the
For threaded applications to work correctly, we need a thread-safe version of
libgcc. It is straight forward to build: define _PTHREADS in CFLAGS. We can
have both versions just like libc and libc_r, and use the thread-safe version
when linking threaded applications. If no one objects, I will add
On Sun, Apr 04, 1999 at 04:02:28PM -0700, David O'Brien wrote:
what's the name of the system compiler going to be, egcs or gcc, or cc?
And the C++ one?
No change in names. cc/gcc and c++/g++/CC
--
-- David(obr...@nuxi.com -or- obr...@freebsd.org)
What will become of f77 which
58 matches
Mail list logo
