negative group permissions?

2012-02-28 Thread Anton Shterenlikht
This was discussed in questions@ with no resolution. Anybody here can advise further? Thanks - Forwarded message from Anton Shterenlikht me...@bris.ac.uk - Recently I started seeing this line in daily security output: Checking negative group permissions:

Re: [CFT] modular kernel config

2012-02-28 Thread ~Lst
2012/2/28 Steve Wills swi...@freebsd.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/27/12 10:53, Łukasz Wąsikowski wrote: W dniu 2012-02-22 23:31, Bjoern A. Zeeb pisze: You cannot ship that on by default for non-tecnical reasons in a kernel.  Please do not commit a kernel config

Re: No working IDE in FreeBSD!

2012-02-28 Thread Pietro Cerutti
On 2012-Feb-26, 11:48, O. Hartmann wrote: On 02/23/12 14:38, Eduardo Morras wrote: At 12:22 23/02/2012, O. Hartmann wrote: Codelite, i use it and works fine (Freebsd 8.2) with Clang. Version on ports is 3.0 not 3.5. On the webpage you have information about how to configure for use with

Re: negative group permissions?

2012-02-28 Thread jb
Anton Shterenlikht mexas at bristol.ac.uk writes: This was discussed in questions@ with no resolution. Anybody here can advise further? ... Regarding file .seq or .SEQ It is an intermediate-processing (run-time) lockfile found in various spool dirs and their sub-dirs, like

Re: revisiting tunables under Safe Mode menu option

2012-02-28 Thread John Baldwin
On Monday, February 27, 2012 2:03:21 pm Scott Long wrote: On Feb 27, 2012, at 3:45 AM, Andriy Gapon wrote: on 30/01/2012 18:59 Andriy Gapon said the following: First, I think that this proposal/discussion could have been more useful before the 9.0. Maybe the RE would be

Re: revisiting tunables under Safe Mode menu option

2012-02-28 Thread John Baldwin
On Tuesday, February 28, 2012 1:23:11 am Scott Long wrote: I still think that it's useful to be able to disable ACPI. Just because ACPI works well on modern hardware doesn't mean that everything crummy from 2000-2007 suddenly disappeared off the face of the earth. But I agree that turning it

Re: revisiting tunables under Safe Mode menu option

2012-02-28 Thread John Baldwin
On Monday, February 27, 2012 4:49:34 pm Andriy Gapon wrote: on 27/02/2012 18:26 John Baldwin said the following: On Monday, February 27, 2012 5:45:39 am Andriy Gapon wrote: How does the following look? diff --git a/sys/boot/forth/menu-commands.4th b/sys/boot/forth/menu-commands.4th

Re: revisiting tunables under Safe Mode menu option

2012-02-28 Thread Scott Long
On Feb 28, 2012, at 6:44 AM, John Baldwin wrote: On Monday, February 27, 2012 2:03:21 pm Scott Long wrote: On Feb 27, 2012, at 3:45 AM, Andriy Gapon wrote: on 30/01/2012 18:59 Andriy Gapon said the following: First, I think that this proposal/discussion could have been more useful

Re: revisiting tunables under Safe Mode menu option

2012-02-28 Thread Scott Long
On Feb 28, 2012, at 6:46 AM, John Baldwin wrote: On Tuesday, February 28, 2012 1:23:11 am Scott Long wrote: I still think that it's useful to be able to disable ACPI. Just because ACPI works well on modern hardware doesn't mean that everything crummy from 2000-2007 suddenly disappeared

Re: [CFT] modular kernel config

2012-02-28 Thread Alexander Leidinger
Quoting ~Lst slack...@gmail.com (from Tue, 28 Feb 2012 16:38:43 +0700): 2012/2/28 Steve Wills swi...@freebsd.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/27/12 10:53, Łukasz Wąsikowski wrote: W dniu 2012-02-22 23:31, Bjoern A. Zeeb pisze: You cannot ship that on by default for

Re: negative group permissions?

2012-02-28 Thread Anton Shterenlikht
On Tue, Feb 28, 2012 at 03:07:43PM +, jb wrote: Anton Shterenlikht mexas at bristol.ac.uk writes: This was discussed in questions@ with no resolution. Anybody here can advise further? ... Regarding file .seq or .SEQ It is an intermediate-processing (run-time) lockfile found

Re: [CFT] modular kernel config

2012-02-28 Thread Arnaud Lacombe
Hi, 2012/2/27 Łukasz Wąsikowski luk...@wasikowski.net: W dniu 2012-02-22 23:31, Bjoern A. Zeeb pisze: You cannot ship that on by default for non-tecnical reasons in a kernel.   Please do not commit a kernel config that can be booted (no LINT cannot be booted) with these on without

Re: [CFT] modular kernel config

2012-02-28 Thread Arnaud Lacombe
Hi, 2012/2/27 Steve Wills swi...@freebsd.org: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/27/12 10:53, Łukasz Wąsikowski wrote: W dniu 2012-02-22 23:31, Bjoern A. Zeeb pisze: You cannot ship that on by default for non-tecnical reasons in a kernel.  Please do not commit a kernel

Re: [CFT] modular kernel config

2012-02-28 Thread Łukasz Wąsikowski
W dniu 2012-02-28 19:55, Arnaud Lacombe pisze: FLOWTABLE on 8.x crashed BGP routers (kern/144917). no crash dump, no backtrace, no follow-up whatsoever after 1 year and 2 years, what's your points ? You could really have chosen a better PR to back up your argument... Sorry, but I don't want

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Dimitry Andric
On 2012-02-26 22:37, Alexander Best wrote: any chance support for setting CC/CXX/CPP unconditionally in src.conf could be added before the release of freebsd 10.0? the way it is done atm is really not intuitive. the rule should really be: - make.conf = applies globally - src.conf = applies

Re: [CFT] modular kernel config

2012-02-28 Thread Arnaud Lacombe
Hi, 2012/2/28 Łukasz Wąsikowski luk...@wasikowski.net: W dniu 2012-02-28 19:55, Arnaud Lacombe pisze: FLOWTABLE on 8.x crashed BGP routers (kern/144917). no crash dump, no backtrace, no follow-up whatsoever after 1 year and 2 years, what's your points ? You could really have chosen a better

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Alexander Best
On Tue Feb 28 12, Dimitry Andric wrote: On 2012-02-26 22:37, Alexander Best wrote: any chance support for setting CC/CXX/CPP unconditionally in src.conf could be added before the release of freebsd 10.0? the way it is done atm is really not intuitive. the rule should really be: -

Re: [CFT] modular kernel config

2012-02-28 Thread Łukasz Wąsikowski
W dniu 2012-02-28 22:22, Arnaud Lacombe pisze: FLOWTABLE on 8.x crashed BGP routers (kern/144917). no crash dump, no backtrace, no follow-up whatsoever after 1 year and 2 years, what's your points ? You could really have chosen a better PR to back up your argument... Sorry, but I don't

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Alexander Best
On Tue Feb 28 12, Dimitry Andric wrote: On 2012-02-26 22:37, Alexander Best wrote: any chance support for setting CC/CXX/CPP unconditionally in src.conf could be added before the release of freebsd 10.0? the way it is done atm is really not intuitive. the rule should really be: -

Re: [CFT] modular kernel config

2012-02-28 Thread Łukasz Wąsikowski
W dniu 2012-02-28 22:56, Łukasz Wąsikowski pisze: FLOWTABLE on 8.x crashed BGP routers (kern/144917). no crash dump, no backtrace, no follow-up whatsoever after 1 year and 2 years, what's your points ? You could really have chosen a better PR to back up your argument... Sorry, but I don't

Re: [CFT] modular kernel config

2012-02-28 Thread Doug Barton
On 2/28/2012 10:48 AM, Arnaud Lacombe wrote: You will sure go really far with this kind of It is broken ? Let's not fix it and disable it instead mentality, even more when coming from a committer. As long as there will be these kind of comments around here, FreeBSD will deserve nothing but

Re: revisiting tunables under Safe Mode menu option

2012-02-28 Thread Kevin Oberman
On Mon, Feb 27, 2012 at 10:23 PM, Scott Long sco...@samsco.org wrote: On Feb 27, 2012, at 3:38 PM, Andriy Gapon wrote: Turning off the APIC turns off SMP in a very efficient, clean manner.  I added this not to isolate the APIC code, but to turn off SMP.  That's why it's there, and I'd like

flowtable usable or not (was: Re: [CFT] modular kernel config

2012-02-28 Thread Florian Smeets
On 28.02.12 23:14, Doug Barton wrote: On 2/28/2012 10:48 AM, Arnaud Lacombe wrote: You will sure go really far with this kind of It is broken ? Let's not fix it and disable it instead mentality, even more when coming from a committer. As long as there will be these kind of comments around

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Ade Lovett
On 2/28/2012 14:11, Alexander Best wrote: any chance we can have a CFLAGS.gcc and CFLAGS.clang in the future? that would make certain things a lot easier. dealing with gcc specific options, such as -mpreferred-stack-boundary=2 would simply work by setting CFLAGS.gcc=-mpreferred-stack-boundary=2

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Alexander Best
On Tue Feb 28 12, Alexander Best wrote: On Tue Feb 28 12, Dimitry Andric wrote: On 2012-02-26 22:37, Alexander Best wrote: any chance support for setting CC/CXX/CPP unconditionally in src.conf could be added before the release of freebsd 10.0? the way it is done atm is really not

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Chuck Burns
On 2/28/2012 4:55 PM, Ade Lovett wrote: On 2/28/2012 14:11, Alexander Best wrote: any chance we can have a CFLAGS.gcc and CFLAGS.clang in the future? that would make certain things a lot easier. dealing with gcc specific options, such as -mpreferred-stack-boundary=2 would simply work by setting

Re: setting CC/CXX/CPP unconditionally in src.conf

2012-02-28 Thread Ade Lovett
On 2/28/2012 16:08, Chuck Burns wrote: On 2/28/2012 4:55 PM, Ade Lovett wrote: On 2/28/2012 14:11, Alexander Best wrote: any chance we can have a CFLAGS.gcc and CFLAGS.clang in the future? that would make certain things a lot easier. dealing with gcc specific options, such as

Re: flowtable usable or not

2012-02-28 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02/28/2012 15:08, Florian Smeets wrote: I talked to Kip Macy, who implemented flowtable, about this. He thinks that the problem was caused by inappropriate default setting of net.inet.ip.output_flowtable_size. This should have been fixed by

Re: negative group permissions?

2012-02-28 Thread Jason Hellenthal
On Tue, Feb 28, 2012 at 04:24:47PM +, Anton Shterenlikht wrote: On Tue, Feb 28, 2012 at 03:07:43PM +, jb wrote: Anton Shterenlikht mexas at bristol.ac.uk writes: This was discussed in questions@ with no resolution. Anybody here can advise further? ... Regarding