Re: 4.0 code freeze scheduled for Jan 15th

2000-01-06 Thread Robert Watson
On Thu, 6 Jan 100, Darren Reed wrote: > For what it's worth, I think releasing 4.0 *without* IPv6 support > is a mistake. Why ? Because in < 12 months FreeBSD 5.0 will be > released *with* IPv6 support (I'd count IPv6 as being a big enough > change to signify a major release number change). If

installing 4.0 2/26 snapshot: edX/hardware probe problems

2000-02-26 Thread Robert Watson
I have a somewhat old 486 box I'm using as a dual-homed host. It has two SMC EtherEZ ISA cards in it, and works fine under 3.4-STABLE. The cards are on irregular ports/IRQs/et al. My problem is that in the kernel config, it is only possible to hard code ed0's settings, but that ed1 is probed (

break in libcrypto?

2000-02-18 Thread Robert Watson
Was wondering if anyone else was seeing this one. I'm following the jail(8) build directions on the 02-14 snapshot. I've had the build directions work previously, so I'm a little puzzled. During the make all phase, I get the errors below. I cvsup'd this morning, but still get the same results

Re: break in libcrypto?

2000-02-18 Thread Robert Watson
A further data point: I was building with a -j, so maybe there's a dependency mixup with the beforedepend target? If I manually cd to the directory and do a make beforedepend, things continue naturally from there. On Fri, 18 Feb 2000, Robert Watson wrote: > > Was wondering if anyo

Re: Crypto progress! (And a Biiiig TODO list)

2000-02-18 Thread Robert Watson
Another technique that could be used, and gets discussed occasionally on -security, is passing authentication information via ancillary data transfer on UNIX domain sockets. You could limit the effectiveness of DOS attacks by rate limiting per-uid, for example. It should be noted that both the

Re: break in libcrypto?

2000-02-18 Thread Robert Watson
On Fri, 18 Feb 2000, Kris Kennaway wrote: > On Fri, 18 Feb 2000, Robert Watson wrote: > > > A further data point: I was building with a -j, so maybe there's a > > dependency mixup with the beforedepend target? If I manually cd to the > > directory and do a make

Re: break in libcrypto?

2000-02-18 Thread Robert Watson
On Fri, 18 Feb 2000, Kris Kennaway wrote: > On Fri, 18 Feb 2000, Robert Watson wrote: > > > > What value of -j? I've built fine with -j4 and -j8, but this says that the > > > depend target hadn't run before the all target did. Did you 'make depend'

Supported ways to do RSA/OpenSSL on 4.0?

2000-02-18 Thread Robert Watson
Kris, I was pointed to you for questions regarding whether or not certain ports would be working udner 4.0-RELEASE -- specifically, OpenSSH and related applications which depend on SSL/RSA. Do we plan to provide a consistent and documented way for users of FreeBSD to go from the RSA-disabled ba

Re: Supported ways to do RSA/OpenSSL on 4.0?

2000-02-19 Thread Robert Watson
On Fri, 18 Feb 2000, Kris Kennaway wrote: > All of the ports which explicitly depend on openssl should be working on > all supported versions of FreeBSD, modulo screwups :) Jim Bloom has been > putting a lot of work into getting these working - I have a couple of > patches to commit, but they mos

4.0: default path when su'd

2000-02-27 Thread Robert Watson
While trying to explain to someone how to run ping, I noticed that by default, we exclude /sbin and /usr/sbin (etc) from the normal user path. There are various arguments as to whether that is a good idea or not (especially given that ping and md5 are both in /sbin...?), but my current observatio

ie0 and fe0 probes in 4.0-CURRENT GENERIC break ep0 probe

2000-02-27 Thread Robert Watson
I've posted about this previously, and am still hoping for a useful answer :-). I have a box with an ISA 3Com 3C509 Etherlink III card in it, but the ie0 and fe0 probes now come before the ep0 probe in the boot sequence. If those two probes are enabled, as they are on the same port (0x300) they

Re: 4.0: default path when su'd

2000-02-27 Thread Robert Watson
On Sun, 27 Feb 2000, Kris Kennaway wrote: > On Sun, 27 Feb 2000, Robert Watson wrote: > > > path, we should consider moving a few of the things in /sbin and /usr/sbin > > into /bin and /usr/bin respectively. For example, md5 is sufficiently > > useful for all use

Re: bridging broken in -current AND -stable

2000-03-08 Thread Robert Watson
On Thu, 9 Mar 2000, Boris Staeblow wrote: > On Wed, Mar 08, 2000 at 11:15:23PM +0100, Luigi Rizzo wrote: > > > > > > > Is it possible that bridging is broken in -current and -stable? > > > > no, but the "de" driver on bridging is now unsupported and i could not > > find the time to make it wor

tcpdump IPv4 warning (gratuitous)

2000-03-08 Thread Robert Watson
Just a quicky. Since we now support IPv6 by default, you can imagine environments where you have an interface and IPv4 is not in use. My tcpdump is from a rather elderly 4.0, so this may be fixed already, but: # tcpdump -eni bridge0 tcpdump: WARNING: bridge0: no IPv4 address assigned tcp

problems using pccard 3c589c with 4.0-snap install

2000-03-14 Thread Robert Watson
Yesterday I spent a fair amount of time attempting to get a 4.0 snapshot to install on my notebook (Dell Latitude CPi), which until now has been happily running 3.3-PAO. Sadly, it seems not to like my ethernet card. When installing, sysinstall provides three IRQ exclude options before initializ

current.freebsd.org snapshots and broken X11

2000-03-14 Thread Robert Watson
It looks like the X11 associated with the snapshots on current.freebsd.org is still broken: /usr/libexec/ld-elf.so.1: Share object "libXThrStub.so.6" not found Installing -current boxes for testing and development would be a lot easier if this worked. :-) Especially leading up to releases wh

Re: current.freebsd.org snapshots and broken X11

2000-03-14 Thread Robert Watson
Sounds good to me, as long as it runs :-). BTW, ran into another nit from the 02/13 snapshot. I installed the X-kern-developer distribution, discovered X11 didn't work, so went back into sysinstall to install X11 stuff. I selected some combination of X11 components, and chose releng3.freebsd.o

Re: problems using pccard 3c589c with 4.0-snap install

2000-03-14 Thread Robert Watson
eld saying, ``Which of these IRQs should I note use'', instead, ``Which should I use''. Or the like. On Tue, 14 Mar 2000, Robert Watson wrote: > > Yesterday I spent a fair amount of time attempting to get a 4.0 snapshot > to install on my notebook (Dell Latitude CPi), whi

Comments on 4.0-RELEASE install glitches

2000-03-18 Thread Robert Watson
I installed 4.0 on a notebook yesterday, using the docking station. As previously described, I had hardware probing problems without using the ethernet card in the docking station. Well, sadly, X11 requires an extra option or two to work when with the docking station, but I figured that out and

Re: MajorDomo Problems

1999-10-11 Thread Robert Watson
Love to know why my freebsd-arch subscription disappeared, although the rest appeared to stick around. I just resubscribed, but was subscribed before (but not sure about until when) as [EMAIL PROTECTED] What is strange is that if that was bouncing, I would have expected, say, my -current subs

Re: "man" reads /etc/rc.conf?

1999-11-12 Thread Robert Watson
On Wed, 10 Nov 1999, Alexander Leidinger wrote: > On 11 Nov, Daniel C. Sobral wrote: > >> >> (102) netchild@ttyp2 > grep cat /etc/rc.conf.local > >> >> spppconfig_isp0="`cat /etc/isdn/connect.parameters`" > >^^^ > > Calling programs from any of the rc.conf files is conside

Re: "man" reads /etc/rc.conf?

1999-11-13 Thread Robert Watson
On Sat, 13 Nov 1999, Alexander Leidinger wrote: > On 12 Nov, Robert Watson wrote: > > >> >> >> (102) netchild@ttyp2 > grep cat /etc/rc.conf.local > >> >> >> spppconfig_isp0="`cat /etc/isdn/connect.parameters`" > >> >

Re: FreeBSD security auditing project.

1999-11-29 Thread Robert Watson
; and then the audit tag slides forward. > > Not to interrupt in the middle of this discussion but you might > want to check with robert watson before you guys get too deep here since > he is working on a FUNDED Posix.1e implementation for FreeBSD. And has > already posted some EARLY MA

Re: HEADSUP: wd driver will be retired!

1999-12-15 Thread Robert Watson
On Tue, 14 Dec 1999, Peter Wemm wrote: > The RZ1000 is *dangerous*! We are doing no favours by making it run.. :-/ > IMHO It is better to loose the user by not playing ball than to corrupt > their data or run unreliably and make them hate us for it. > > http://www.faqs.org/faqs/pc-hardware-faq/

Re: NO! Re: [PATCHES] Two fixes for lpd/lpc for review and test

1999-12-24 Thread Robert Watson
This is not a comment on your code, which I have not inspected yet, but instead on the idea of the optimization. This is probably not a serious objection, but keep in mind that this optimization does not produce identical behavior in some case. For example, imagine that the user has a number o

panic: vm_map_entry_create: kernel resources exhausted

2000-04-10 Thread Robert Watson
5.0-CURRENT -- was doing a make buildworld -j 2. Sadly, I don't know what exact date the source was from, as I had just cvsup'd and started building, but I expect in the last week and a half. I was running with capabilities patches going, but I wouldn't imagine that it would cause this particul

middle mouse button emulation broken in 4.0-STABLE?

2000-04-14 Thread Robert Watson
Not sure if this should go to -current or -stable, since we seem to get a lot of instant MFC's these days :-). I upgraded a notebook from 4.0-RELEASE to -STABLE last night. After doing so, I noticed that the middle mouse button emulation in moused seems to be fairly broken -- i.e., once it's en

Re: Failed compile of ext2_alloc.c

2000-04-15 Thread Robert Watson
Yup -- I neglected to update the ext2fs code (which uses UFS stuff) to include the requisite include files. Please try the attached patch against src/sys/gnu/ext2fs, and let me know if it works, and I'll go ahead and commit it. I caught the weird Coda dependancy, but guess I missed this one.

Re: Failed compile of ext2_alloc.c

2000-04-15 Thread Robert Watson
Since it appears to work for me, I'm going to go ahead and commit the patch before too many other people run into this. Please let me know if you have further problems and I'll get them fixed up ASAP. On Sat, 15 Apr 2000, George W. Dinolt wrote: > Content-Type: text/plain; charset=us-ascii > C

Recent commit changes extattr backing file format, users beware

2000-04-19 Thread Robert Watson
I just committed a change to the extended attribute backing code that modifies the per-attribute header. The result is that backing files used and created from now on have a different format, and weird and unfortunate things will happen with backing files before this change. I doubt anyone is do

Re: Recent commit changes extattr backing file format, users beware

2000-04-19 Thread Robert Watson
On Wed, 19 Apr 2000, Garance A Drosihn wrote: > At 3:41 AM -0400 4/19/00, Robert Watson wrote: > >I hope not to change the format any further. I've been considering > >introducing a backing file header version number of some sort, but > >this is only necessary if

Re: Recent commit changes extattr backing file format, users beware

2000-04-19 Thread Robert Watson
FYI: I committed the addition of the magic number and version information an hour or two ago. It seems to work fine for me, but please let me know if you have any problems. A migration tool doesn't seem useful yet, but is now feasible :-). In a day or two, I'll send a post to freebsd-fs descri

Intermittent build breaks in perl

2000-04-21 Thread Robert Watson
I use a 4.0-RELEASE machine as my build machine, and have been experiencing intermittent build fails in the perl code for a while. It does not happen consistently, and when it does, does not give a useful error message of any sort. I compile with -j, usually between 3 and 6 processes. Here's t

Re: What happens with SECURELVL? (init complains)

2000-06-07 Thread Robert Watson
At bde's request, I moved kern.suser_permitted to kern_prot.c and accidentally also trimmed kern.securelevel. I just committed it back into kern_mib.c. Please let me know if there are further problems. That said, I'm a little puzzled as to where securelevel is being defined -- a bunch of stuff

Re: What happens with SECURELVL? (init complains)

2000-06-07 Thread Robert Watson
On Wed, 7 Jun 2000, Robert Watson wrote: > That said, I'm a little puzzled as to where securelevel is being defined > -- a bunch of stuff depends on the variable and yet my test build > succeeded without it in there. And you go that far also -- far enough to > boot rather than

Re: KAME integration and plans

2000-07-05 Thread Robert Watson
This is great news -- one of the big hangups in our interop testing at NAI Labs was the like of IKE on FreeBSD. I notice that right now racoon is a port -- assuming this interpretation is correct, are their any plans to integrate racoon as a base system component? As you point out, without IKE,

Re: /sys hierarchy

2000-07-05 Thread Robert Watson
On Wed, 5 Jul 2000, John Baldwin wrote: > The headers will always be installed in the right place in > /usr/include: Makefile's are editable. As far as kernel > compiles, symlinks can be created in the work directory as > one possible solution. For example, > sys/compile/i386/GENERIC/netinet ->

Mouse behaving funny since 5.0-CURRENT upgrade

2000-07-27 Thread Robert Watson
I'm using a Micron P133 box with a PS/2 mouse. Up until this morning, I was running 4.0-STABLE from a month or two back. I upgraded to 5.0-CURRENT, and since that time, my mouse has been responding slowly and erratically, jumping as it moves, et al. The mouse daemon seems to be consuming more

Re: Mouse behaving funny since 5.0-CURRENT upgrade

2000-07-28 Thread Robert Watson
. > > Kazu > > >Robert Watson wrote: > >> > >> I'm using a Micron P133 box with a PS/2 mouse. Up until this morning, I > >> was running 4.0-STABLE from a month or two back. I upgraded to > >> 5.0-CURRENT, and since that time, my mouse has been

Re: DOS emulation

2000-08-01 Thread Robert Watson
I've been using vmware with great success under -STABLE. Take a look at /usr/ports/emulators/vmware2. It's commercial, but works a lot better than all the alternatives. I've had decent success with pcemu for DOS-based programs, although there are a few quirks. I found bochs also worked pretty

Re: [Neomagic] newpcm problems under current

2000-08-06 Thread Robert Watson
"me too" pcm0: mem 0xfda0-0xfdaf,0xfac0-0xfaff irq 5 at device 0.1 on pci1 pcm0: play interrupt timeout, channel dead Then EBUSY until the cows come home. I chatted with Cam some this evening; this problem seems to have come about as a result of driver restructuring. This chi

Re: Q: encrypted swap

2000-08-22 Thread Robert Watson
On Tue, 22 Aug 2000, Walter Belgers wrote: > Last week I was at USENIX where Niels Provos talked about his > implementation of encrypted swap in OpenBSD. What is does is encrypting > all memory that gets swapped out, keeping the encryption keys in memory. > A test showed that all kinds of intere

PERL broken during -CURRENT upgrade

2000-08-29 Thread Robert Watson
stedbsd.org 5.0-CURRENT FreeBSD 5.0-CURRENT #1: Thu Jul 27 13:35:58 PDT 2000 [EMAIL PROTECTED]:/usr/src/sys/compile/DEV1 i386 dev1# Robert Watson Research Scientist NAI Labs at Network Associates ... /../../contrib/ncurses/ncurses -I/usr/src/lib/libncurses/../../contrib/ncurses/i nclude -Wall -DFREE

HEADS UP: Kernel process authorization changes

2000-08-29 Thread Robert Watson
te: Tue, 29 Aug 2000 21:49:10 -0700 (PDT) From: Robert Watson <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: cvs commit: src/sys/kern kern_event.c kern_ktrace.c kern_proc.c kern_prot.c kern_resource.c kern_sig.c sys_process.c src/sys/miscfs/pr

Re: AFS.

2000-08-30 Thread Robert Watson
Yup, there's been chatter on this in a number of forums. I must admit that I am very please -- the Arla client is great, but Milko has a long way to go before it is production quality. Having access to the Transarc/IBM source will presumably greatly facilitate the development of Arla, and also

Re: Broken world (was Re: cvs commit: src/lib/libc/posix1e cap_text.c)

2001-08-31 Thread Robert Watson
This should now be fixed (actually, as of last night I think). Thanks! Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Fri, 31 Aug 2001, Mike Barcroft wrote: > Robert Watson <[EMAIL PROTECTED]&g

Re: ufs ext attr problem...

2001-08-31 Thread Robert Watson
Could you try the attached patch, which does what you suggest? Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Fri, 31 Aug 2001, Christian Carstensen wrote: > > hi, > > it seems like there's a problem in ffs_unm

Re: ufs ext attr problem...

2001-09-01 Thread Robert Watson
Ok, I've committed that fix. Let me know if you have any futher problems. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Sat, 1 Sep 2001, Christian Carstensen wrote: > On Fri, 31 Aug 2001, Robert Wats

Recent -current breaks console probing on dell notebook?

2001-09-02 Thread Robert Watson
Until yesterday, I was running -CURRENT from around July 4th on my notebook, given that I was travelling and unwilling to break my means of giving presentations on my trip :-). Yesterday, I decided to upgrade, and built kernel/world. The userland stuff appears to work fine, but interestingly, m

Re: Recent -current breaks console probing on dell notebook?

2001-09-09 Thread Robert Watson
On Mon, 3 Sep 2001, Kazutaka YOKOTA wrote: > >Until yesterday, I was running -CURRENT from around July 4th on my > >notebook, given that I was travelling and unwilling to break my means of > >giving presentations on my trip :-). Yesterday, I decided to upgrade, and > >built kernel/world. The u

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Robert Watson
On Sat, 22 Sep 2001, Andrey A. Chernov wrote: > On Sat, Sep 22, 2001 at 14:39:43 +0400, Andrey A. Chernov wrote: > > As commit/immediate MFC message says: > > > > Disable per-user .login_conf support due to incorrect merging of local > > and globaly settings. An alternative implementation will

Re: panic: lock (sleep mutex) vnode interlock on Alpga

2001-09-25 Thread Robert Watson
I'm getting the same thing from a kernel I built this morning on i386. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Tue, 25 Sep 2001, Wilko Bulte wrote: > I'm not sure if this is new, but anyway on -current a

Re: current.freebsd.org is broken?

2001-09-26 Thread Robert Watson
current.jp.freebsd.org apparently carries snapshots, although I haven't tried it recently. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Wed, 26 Sep 2001, Alexander N. Kabaev wrote: > ftp -a fails to login to t

Re: Review: change NGROUPS_MAX from 16 to 64

2001-10-02 Thread Robert Watson
On Tue, 2 Oct 2001, Ruslan Ermilov wrote: > What's the reason why KI_NGROUPS should be different from NGROUPS_MAX? None -- ideally, they would be the same. I was reminding him that if he updated one, he should be sure to update the other. > On Mon, Oct 01, 2001 at 05:04:51PM -0

Re: Review: change NGROUPS_MAX from 16 to 64

2001-10-01 Thread Robert Watson
Note this will break binary compatibility for xucred. Note also that this may have fascinating effects in NFS environments. Note also that you'll probably want to update KI_NGROUPS also. No idea if it will affect NIS. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL

Re: VMWare2 permission problems on -current as of Sep 26

2001-10-02 Thread Robert Watson
There have been a number of permission-related changes in the tree of late, in particular relating to securelevel support. I haven't experienced any local problems running the new code, but there is always the potential for such a problem, especially in areas of the code I'm not actively using.

One or more if {disklabel,mdconfig,newfs} broken for small , file-backed md file systems.

2001-10-22 Thread Robert Watson
For small devices (unclear definition of small), the following (changed from swap to vnode from the mdconfig man page example) is broken: sproing# dd if=/dev/zero of=foo bs=1024000 count=1 1+0 records in 1+0 records out 1024000 bytes transferred in 0.234674 secs (4363498 bytes/sec) sproing# mdco

-CURRENT boot problems: loader, kernel

2001-11-09 Thread Robert Watson
Upgraded a box to yesterday's -CURRENT, and am experiencing two problems: (1) the machine spins rebooting after loading /boot/loader. I don't get a chance to interupt the boot once /boot/loader starts. Unfortunately, my serial console support also seems to be broken, so I can't read the error

Re: -CURRENT boot problems: loader, kernel

2001-11-09 Thread Robert Watson
, 9 Nov 2001, Robert Watson wrote: > > Upgraded a box to yesterday's -CURRENT, and am experiencing two problems: > > (1) the machine spins rebooting after loading /boot/loader. I don't get a > chance to interupt the boot once /boot/loader starts. Unfortunately, my >

Re: /dev/null problems

2001-11-12 Thread Robert Watson
So in theory this is fixed, but I actually bumped into an unexpected EPERM again from a linux emulated program yesterday (acroread4) which popped up an error message about /dev/null. I haven't tried to reproduce as yet, since I'm currently rebuilding KDE; /dev/null works properly for me on the Fr

Re: daily run output & passwd diff

2001-11-13 Thread Robert Watson
On Mon, 12 Nov 2001, John Baldwin wrote: > > What if someone comments out a line in the password file of a user? > Then this won't hide that password. When this originally went in, it > took a long while to get a sed line people were happy with. Replacing > the version number is a minor thin

Re: loader from Nov 13 reboots instantly

2001-11-13 Thread Robert Watson
It's probably the awk bug. You need to use /boot/loader.old to boot the system, build and install a fresh awk (gnu awk), then build and install a fresh loader. You don't get bitten by this until the second upgrade after the bad awk version was introduced, since the awk used to build the loader i

Re: daily run output & passwd diff

2001-11-13 Thread Robert Watson
On Tue, 13 Nov 2001, John Baldwin wrote: > > My temptation would actually be to ignore any commented lines in either > > file for the purposes of the diff. For the purposes of security checking, > > you care mostly about the uncommented lines. This would allow the script > > to exclude content

Re: -CURRENT boot problems: loader, kernel

2001-11-15 Thread Robert Watson
he system running by: > > > > booting up with a set of 'fixit' floppies > > mounting the root drive > > cd'ing into /boot, > > mv loader loader.new > > cp loader.old loader > > reboot > > > > > > Robert Watson wrote: > > &

Re: re-entrancy and the IP stack.

2001-11-16 Thread Robert Watson
In my MAC tree, I add an additional: struct mbuf *aux; /* extra data buffer; ipsec/others */ + struct mac label; /* label of data in packet */ }; As we move towards more generalized access control, it would similarly be nice to have a place to 'hang' a

LINT fails due to '/bin/sh:Argument list too long'

2001-11-26 Thread Robert Watson
Decided to run a LINT build on my POSIX.1e capability tree in p4 today, and ran into something a bit unusual: make buildkernel KERNCONF=LINT ... boss/p4/rwatson/trustedbsd/cap/sys/kern/link_aout.c /cboss/p4/rwatson/trustedbsd/cap/sys/kern/subr_diskmbr.c /cboss/p4/rwatson/trustedbsd/cap/sys/libke

Re: VMWare2 permission problems on -current as of Sep 26

2001-10-07 Thread Robert Watson
On Sun, 7 Oct 2001, Georg-W. Koltermann wrote: > Hi Robert, > > it doesn't seem to be securelevel-related. sysctl(8) says: > > hunter[5]$ sysctl kern.securelevel > kern.securelevel: -1 > > I also hacked the securelevel_g[et] routines to immediately return 0 > as you suggested, and it

Re: For your amusement..

2001-10-08 Thread Robert Watson
Doug, Peter, This is great news indeed :-). I assume there's much work to go, but very cool. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Mon, 8 Oct 2001, Peter Wemm wrote: > Just a FYI to people not on the

Re: VMWare2 permission problems on -current as of Sep 26

2001-10-08 Thread Robert Watson
gt; which looks a little more meaningful (no negative errno any more, and > a linux_* syscall is listed). > > Still needs debugging, which I'll attempt to do when I get a little > time. > > -- > Regards, > Georg. > > > At Sun, 7 Oct 2001 > 19:28:35 -040

Re: coredump() broken for nfs filesystems

2001-10-16 Thread Robert Watson
As I've mentioned before, the current credential-munging here is simply broken; however, the brokenness I previously observed is independent of the brokenness you are now reporting. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Netw

Re: applix 5.0 and current

2001-10-16 Thread Robert Watson
On Tue, 16 Oct 2001, Brooks Davis wrote: > I've been trying to get applix 5.0 to work and I've been running into > some intresting problems. The first one was that current has the > getresuid syscall and the gtk12 build detects and uses it. Unfortuatly > FreeBSD 3.x and 4.x don't have this sys

kernel makefile irregularity (kernel.debug: file truncated)

2001-12-02 Thread Robert Watson
Odd experience today -- was building a kernel with the standard makefiles and -j 4, and found the following in buildkernel.log: ... cc -c -O -pipe -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -fformat-extensions -ansi -g

Re: Inconsistencies in *stat() for files with ACLs

2001-12-02 Thread Robert Watson
On Sun, 2 Dec 2001, Daniel Rock wrote: > Hi, > > lstat(), fstat(), stat() returned structure is inconsistent and > misleading if the file has ACLs associated with it. That behavior is defined by POSIX.1e, so it's what we implemented; you'll find that the same behavior is present on other plat

Re: dhclient

2001-12-14 Thread Robert Watson
On Thu, 13 Dec 2001, Edwin Culp wrote: > Is anyone using dhclient successfully with Current of the last week or > so? I don't use it all the time but I have been trying for the last > couple of days without success. > > It accesses the server and changes the interface ip to 0.0.0.0 netmask > 2

Re: netstat -f inet broken ?

2001-12-24 Thread Robert Watson
On Mon, 24 Dec 2001, Martin Blapp wrote: > As we just have noted, there is no output anymore for netstat -f inet. > Has the support been dropped ? > > Also there are only unix domain sockets in the normal netstat output. I > cannot see any tpc4 connections anymore. > > I noted this in 4.5 PR

Re: KSE changes available

2001-12-24 Thread Robert Watson
For those of us that live in P4-land already, it's just the head of the KSE branch? Also, for those that don't, this is also available via cvsup10. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Fri, 21 Dec 2001,

more ffs_valloc dup alloc panics

2001-12-28 Thread Robert Watson
Recently got this: ./account missinmg (directory noto created: Deviced not configured)e = 040700, inum = 6, fs = /var panic: ffs_valloc: dup alloc Debugger("panic") Stopped at Debugger+0x44: pushl %ebx db> trace Debugger(c03a3b9b) at Debugger+0x44 panic(c03bb9e1,c03bb9c0,41c0,6,c22ab0d4

Re: more ffs_valloc dup alloc panics

2001-12-28 Thread Robert Watson
c. Now fixed in the trustedbsd_mac tree -- sorry for the false alarm. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Fri, 28 Dec 2001, Robert Watson wrote: > > Recently got this: > > ./account missinmg

Re: P4 Access For Latest KSE Change(s)

2001-12-30 Thread Robert Watson
For anyone who cares, you can also check out various other in-progress projects including: TrustedBSD mandatory access control: p4-cvs-trustedbsd-mac Trustedbsd POSIX.1e capabilities: p4-cvs-trustedbsd-cap Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMA

Re: FreeBSD 5.x

2002-01-19 Thread Robert Watson
On Sat, 19 Jan 2002, Alp Atici wrote: > Is gcc 3.x going to be the default compiler starting from FBSD 5.x > series? Is the development on current branch compiled using gcc 3.0 (or > up)? > > Is 5.x series going to be based on a preemptible kernel? Can't answer the gcc question, but yes, John

Re: Diskless Boot Working in -Current ??

2002-01-20 Thread Robert Watson
I use diskless booting daily on 5.0-CURRENT, and after some tweaks to rc.diskless[12] (now committed) it works just fine. In 5.0-CURRENT, FFS is used directly over malloc disks (md) to support local storage. You should be able to configure netbooing on 5.0 in much the same way as RELENG_4. Are

Re: "Current & Etherboot"

2002-01-20 Thread Robert Watson
Most people I know of that netboot boxes on Intel platforms now use PXE. With PXE config, the pxe loader has full access to the NFS-mounted /boot directory, so there's no reason to compile in the hints. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] N

Re: __stderrp error

2002-01-21 Thread Robert Watson
On Sun, 20 Jan 2002, Julian Elischer wrote: > has NO effect whatsoever. > > The only thign I can do is recompile any package that has thos problem. > but sometimes it's hard finding which package needs to be recomiled. > > thoughts? You might also need compat3. I was quite surprised at the

Re: Panic in ufs_dirbad()

2002-01-25 Thread Robert Watson
On Fri, 25 Jan 2002, Doug Swarin wrote: > I have actually seen this panic very recently on -STABLE. Matt Dillon > suspected an issue with the RAID controller I was using (aac) after some > debugging work. > > I am still waiting on the results of diagnostic testing on the RAID > controller, but

Re: vmware

2002-01-31 Thread Robert Watson
Have to wonder if it wouldn't be worth e-mailing the VMware people about this -- they'd probably rather know in advance if there's a potential problem hosting future versions of FreeBSD under VMWare. If someone has a commercial license, it would make sense submitting this via a trouble ticket, as

Re: Not committing WARNS settings...

2002-02-06 Thread Robert Watson
On Wed, 6 Feb 2002, Terry Lambert wrote: > Ruslan Ermilov wrote: > > Nope, what David was _actually_ trying to say is to hold off with WARNS > > fixes until GCC 3.1 becomes our compiler, because otherwise this is an > > almost 100% duplicate of efforts, as GCC 3.1 is so WARNS-different from > >

Re: OK, who broke alpha this time? :-/

2002-02-18 Thread Robert Watson
Oops. Mis-merge. Thanks to Ian for fixing this. Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Sun, 17 Feb 2002, Peter Wemm wrote: > ... > sio0 at port 0x3f8-0x3ff irq 4 on isa0 > sio0: type 16550A, console >

Re: FreeBSD Project management (was: Patch sets to date and timing tests with Giant out of userret.)

2002-02-21 Thread Robert Watson
http://www.freebsd.org/smp/ Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMAIL PROTECTED] NAI Labs, Safeport Network Services On Wed, 20 Feb 2002, George V. Neville-Neil wrote: > I'm not in the core of the SMP stuff (the closest I'll get is the > networking stuff)

Re: Patch to improve mutex collision performance

2002-02-21 Thread Robert Watson
On 21 Feb 2002, Dag-Erling Smorgrav wrote: > Matthew Dillon <[EMAIL PROTECTED]> writes: > > I'm not interested in using P4. I think it's a mistake. That is, I > > think it is being severely overused. [...] > > Frankly, although I use Perforce myself for PAM work, I agree with Matt >

Re: changes to rc.diskless*

2002-02-22 Thread Robert Watson
On Fri, 22 Feb 2002, Brooks Davis wrote: > On Thu, Feb 21, 2002 at 08:00:51PM -0800, David O'Brien wrote: > > The use of an MFS /var should also be settable. Otherwise installing > > ports(packages) is just a total PITA. > > I had issues with the MFS /var and /tmp[0] a couple days ago and chang

Re: dirty buffers on reboot again?

2001-02-23 Thread Robert Watson
Hmm. I've been getting this on an ATA box as well. Don't seem to get it when softupdates is not set on the root partition, but that's just an observation from a couple of boxes. (Sample size == 2 -> confidence level = 0). Robert N M Watson FreeBSD Core Team, TrustedBSD Project [EMA

Re: telnet broken with auto-negotiation of encrypt/decrypt change

2001-03-22 Thread Robert Watson
I'm baffled as to why SRA is enabled by default. I'm fine with it being compiled in, but it appears to be substantially interfering with normal TCP operation. Either the negotiation needs to be fixed, or this feature needs to be disabled for 4.3-RELEASE (either at compile-time or run-time is fi

Re: telnet broken with auto-negotiation of encrypt/decrypt change

2001-03-26 Thread Robert Watson
, Safeport Network Services On 23 Mar 2001, Assar Westerlund wrote: > Robert Watson <[EMAIL PROTECTED]> writes: > > I'm baffled as to why SRA is enabled by default. I'm fine with it being > > compiled in, but it appears to be substantially interfering with normal &

cvsupit assumptions (was: Re: Re[2]: Can't build current...)

2001-03-27 Thread Robert Watson
On Tue, 27 Mar 2001, Gabriel Ambuehl wrote: > I'm using cvsup.de.FreeBSD.org which appears to be a cname > cvsup.uk.FreeBSD.org. But it looks like, that for some reason, > src-secure didn't get added to the cvsupfile (hmm. might be related to > the fact that cvsupit creates cvsup.intl for that

ACL support in 5.0-CURRENT (was: cvs commit: src/sys/conf files options src/sys/ufs/ufs acl.h ufs_acl.c ufs_vnops.c (fwd))

2001-03-27 Thread Robert Watson
or FreeBSD, Version 0.6.1 March 19, 2001 http://www.TrustedBSD.org/ Robert Watson <[EMAIL PROTECTED]> This is the README file for 0.6.1 of POSIX.1e ACLs for TrustedBSD. Introduction Access Control Lists provide a means by which more detailed permissions may be associated with file system o

Re: ACL support in 5.0-CURRENT (was: cvs commit: src/sys/conf files options src/sys/ufs/ufs acl.h ufs_acl.c ufs_vnops.c (fwd))

2001-03-27 Thread Robert Watson
On Tue, 27 Mar 2001, Robert Watson wrote: > acl_canonicalize_principal(3), acl_check(3), acl_exact_match(3), acl_add(3), >acl_delete(3), acl_initialize(3) - Access control list routines Note that this was included in the list by mistake -- these are actually from the Kerberos ACL l

Re: ** HEADS UP ** portmap daemon renamed to rpcbind

2001-03-28 Thread Robert Watson
> I do not. -v could easily be added to what is now rpcbind (even if it > was ignored). -d mean the same thing for both. there's then no reason > to change its name. Well, my feeling on the matter, since everyone gets to have an opinion today, is that we should stick with rpcbind: it's what e

Re: fstab weirdness / UPDATING

2001-04-04 Thread Robert Watson
I've had that problem on one box also -- when the boot occurs, my /var partition is not fsck'd. It's the second pass-two file system, which means that it *should* be checked :-). I suspect a nit in the recent fsck cleanup, so I'm CC'ing phk, whose mailbox is obviously too empty. Robert N M Wat

Re: ** HEADS UP ** Groff 1.17 (including -mdocNG) imported

2001-04-17 Thread Robert Watson
On Tue, 17 Apr 2001, Ruslan Ermilov wrote: > It is my great pleasure to announce the availability of just released > Groff 1.17. Please refer to the src/contrib/groff/NEWS for details on > what's new in this release. This is great news -- especially the argument limit removal :-). Thanks for

Native ACL support for Samba (fwd)

2001-04-24 Thread Robert Watson
Figured people running 5.0-CURRENT might be interested in this news -- I know this is a feature we've been asked about frequently, and Chris has done a great job in making it happen :-). There are still a few tweaks being worked out in the ACL code, and we need to write some regression tests, bu

  1   2   3   4   5   6   7   >