Re: md(8) panic

2004-05-13 Thread Pawel Jakub Dawidek
: http://people.freebsd.org/~pjd/patches/md.c.3.patch -- Pawel Jakub Dawidek http://www.FreeBSD.org [EMAIL PROTECTED] http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! pgp0.pgp Description: PGP signature

Re: md(8) panic

2004-05-13 Thread Pawel Jakub Dawidek
) * 512 = 0 -- Pawel Jakub Dawidek http://www.FreeBSD.org [EMAIL PROTECTED] http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! pgp0.pgp Description: PGP signature

Re: [patch] Raw sockets in jails

2004-04-22 Thread Pawel Jakub Dawidek
) and changed it to be usable with my multiple ips stuff. I haven't reviewed nor tested it yet. -- Pawel Jakub Dawidek http://www.FreeBSD.org [EMAIL PROTECTED] http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! pgp0

Re: kernel modules programming: struct proc question

2004-03-16 Thread Pawel Jakub Dawidek
a simple + syscall module which replaces open(2) syscall. My new open(2) looks + like this: Keep in mind, that there is no need to open file by giving its full path. For example: % cd /tmp % cat ./foo or: % ln -s /tmp/foo ~/bar % cat bar -- Pawel Jakub Dawidek

Re: GEOM + Vinum

2004-01-21 Thread Pawel Jakub Dawidek
On Tue, Jan 20, 2004 at 07:47:02PM +0100, Lukas Ertl wrote: + I think we should really get together on a separate mailing list - is it + time for freebsd-geom@ yet? My proposal is [EMAIL PROTECTED] -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

Re: Future of RAIDFrame

2004-01-12 Thread Pawel Jakub Dawidek
geom_raid. RF implementation is complex and it will take some time to well understand it in first way. Reverse-engineering is time-consuming. I'm opened for suggestions. If Scott is sure and determined to reanimate RF and help me to understand RF I think I can help. -- Pawel Jakub Dawidek

MD(4) cleanups and unload lesson.

2004-01-11 Thread Pawel Jakub Dawidek
Hello hackers... With attached patch unloading md(4) module is possible. It also cleans up big part of code according to style(9). Patch is also avaliable at: http://garage.freebsd.pl/patches/md.c.patch -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems

Re: Size-independent byte order swapping functions.

2003-11-25 Thread Pawel Jakub Dawidek
On Mon, Nov 24, 2003 at 05:13:08PM -0800, David Schultz wrote: + On Mon, Nov 24, 2003, Pawel Jakub Dawidek wrote: + If one is using strictly defined types as uint8_t, uint16_t, int32_t, etc. + those macros are helpful IMHO, because futher value size changes does not + affects code for byte

Size-independent byte order swapping functions.

2003-11-24 Thread Pawel Jakub Dawidek
perfromance, because this should be resolved at compile-time. I'm not sure if dedicated epanic() is the best way to implement out-of-range errors prevention - the more handy solution should cause compile error. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems

Re: secure file flag?

2003-11-21 Thread Pawel Jakub Dawidek
is no more reading this list I'm CCing this mail to him. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: secure file flag?

2003-11-21 Thread Pawel Jakub Dawidek
and/or link count is grater than 0. That's why allowing link(2) operation for such files don't make much sens (the problem exists when there are hardlinks before secure flag is set). -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http

Re: Questions on intercepting execve syscall

2003-11-17 Thread Pawel Jakub Dawidek
. There still will be a problem when modules are loaded and unloaded in random order. Unload order have to be reverse load order, if not, invalid pointer (of module that was already unloaded) will be stored in sysent table. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems

Re: Multiple IPs in Jail

2003-11-14 Thread Pawel Jakub Dawidek
recent -CURRENT, but I haven't added anything - for me gethostbyname(3) in jail works fine. http://garage.freebsd.pl/patches/mijail5_2.patch -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: Multiple IPs in Jail

2003-11-13 Thread Pawel Jakub Dawidek
problems with my patch in jail, that's true. I can't promise, but I'll try to find some time in few days to track this problem down. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: geom_mirror implementation

2003-11-12 Thread Pawel Jakub Dawidek
). -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: geom_mirror implementation

2003-11-10 Thread Pawel Jakub Dawidek
hope I'll find time to implement this. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Sysctls cleanup.

2003-10-16 Thread Pawel Jakub Dawidek
Helloi hackers... I think this is more correct (but I haven't test it!). I've started to implement labels for sysctls, but after thinking this over again, I think this isn't really necessary. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator

GEOM Gate.

2003-10-14 Thread Pawel Jakub Dawidek
are added, so feel free to read them first (gg(4), geom_gate(4), ggc(8), ggd(8)) http://garage.freebsd.pl/geom_gate.tbz Enjoy! -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: Dynamic reads without locking.

2003-10-10 Thread Pawel Jakub Dawidek
not-atomically why we only permit atomic reads? In atomic vs. not-atomic read only probability of race is smaller, but it is still there. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: On-line judgment kernel module

2003-10-09 Thread Pawel Jakub Dawidek
CerbNG: http://cerber.sourceforge.net It was presented on WIP session at BSDCon03, slides are here: http://garage.freebsd.pl/CerbNG.pdf 1.0-RC3 will be avaliable in near future. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator

Dynamic reads without locking.

2003-10-08 Thread Pawel Jakub Dawidek
will be sure that when he locks writes to some variable this operation is safe and he could split such writes and in kernel could be dynamic read without lock. Does this make any sense? -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http

Re: Dynamic reads without locking.

2003-10-08 Thread Pawel Jakub Dawidek
without locks (there are many such reads in sources). I hope I'm wrong. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description

Re: user malloc from kernel

2003-09-29 Thread Pawel Jakub Dawidek
/usmalloc.README -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: user malloc from kernel

2003-09-29 Thread Pawel Jakub Dawidek
to this memory. Sometime ago I proposed model which will allow to remove all copyin(9) calls and many copyout(9), but I'm not so skilled in VM to implement it. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil

GEOM Gate status.

2003-09-08 Thread Pawel Jakub Dawidek
automatically. Regression tests. Performance benchmarks. GEOM Gate is avaliable at: http://garage.freebsd.pl/geom_gate.tbz http://garage.freebsd.pl/geom_gate.README See you all at BSDCon 2003!:) -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

Safe rename(2)/link(2)/unlink(2).

2003-09-03 Thread Pawel Jakub Dawidek
will fail if 'thread 2' will create new file 'a' instead of creating hard link to file 'b'. Comments? -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http

Re: Inode Operations

2003-08-24 Thread Pawel Jakub Dawidek
such identifiers is easy. + But, I can't find any system calls that actually use this information. + + Question: Are there any system calls that allow you to + access/modify a file based only on the device number/inode number? Check getfh(2)/fhopen(2) syscall if you are root. -- Pawel Jakub Dawidek

Re: [future patch] dropping user privileges on demand

2003-08-22 Thread Pawel Jakub Dawidek
syscalls. Of course there is overhead, but I haven't heard about security feature that speeds up system. The only thing we can do, is to decrease overhead. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes

Re: [future patch] dropping user privileges on demand

2003-08-21 Thread Pawel Jakub Dawidek
). + + Exercise for the reader: find a situation where the failure to perform + a syscall that normally succeeds, leads to privilege escalation :-) The answer is: Every network daemon. If you could compromise it, you get local access. -- Pawel Jakub Dawidek [EMAIL PROTECTED

Re: [future patch] dropping user privileges on demand

2003-08-21 Thread Pawel Jakub Dawidek
transparent for applications and I think Niels Provos shares my opinion in systrace. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp

Re: [future patch] dropping user privileges on demand

2003-08-21 Thread Pawel Jakub Dawidek
the syscall through or return + a failure code, nothing else). I'm planing to do so in next CerbNG version, as well as allow jailed-roots to load rules that affects only jailed-processes. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http

Re: [future patch] dropping user privileges on demand

2003-08-21 Thread Pawel Jakub Dawidek
for non-open-source applications. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: GEOM Gate.

2003-08-16 Thread Pawel Jakub Dawidek
This was tested over 100Mbit/s network without any network tuning. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP

Re: GEOM Gate.

2003-08-16 Thread Pawel Jakub Dawidek
and without any network and NFS optimization. And this test was: for write: % dd if=/dev/zero /mnt/nfs/test bs=128k count=500 for read: % dd if=/mnt/nfs/test /dev/null bs=128k count=500 -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems

Re: GEOM Gate.

2003-08-15 Thread Pawel Jakub Dawidek
them back to the application. + This does mean that an application would get unexpected network-related + errors, but there's no obvious alternative. Or translate all of them to EIO. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http

Re: GEOM Gate.

2003-08-15 Thread Pawel Jakub Dawidek
to mount the same filesystem on more than one machines. It'll be, but probably in read-write mode on one machine and read-only mode on rest machines, because you don't export file systems here, but disk devices. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

GEOM Gate.

2003-08-14 Thread Pawel Jakub Dawidek
# mount /dev/gg6 /mnt/bar This isn't finished yet, so it also isn't bugs free. For example don't try to run client and server stuff on this same machine, this could case a deadlock. Comments, etc. are of course welcome. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems

Re: GEOM Gate.

2003-08-14 Thread Pawel Jakub Dawidek
. Handle network errors. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: VM problem...

2003-07-21 Thread Pawel Jakub Dawidek
On Mon, Jul 21, 2003 at 01:57:59AM +0200, Pawel Jakub Dawidek wrote: + So as you can see I'm listing every entry that isn't writable. + This function is called when process is killed by kernel with SIGBUS. + It shows me that only this region isn't writable: + + ENTRY:PID: 0-0xbfc0 (0:0

Re: Communications kernel - userland

2003-07-21 Thread Pawel Jakub Dawidek
ways. Thread/process could be locked if it is trying to access memory marked with mark() function. And this, I think, don't hit performance, because this happends really rarely. So maybe it is better to lock thread for a moment instead of doplicating page, but I don't think so. -- Pawel Jakub

Re: VM problem...

2003-07-21 Thread Pawel Jakub Dawidek
) are reused somehow? THANKS! -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: VM problem...

2003-07-21 Thread Pawel Jakub Dawidek
Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: VM problem...

2003-07-21 Thread Pawel Jakub Dawidek
list as VM_PROT_ALL for execve(). I'll play in the future with vm_map_delete() maybe those pages are removable in safe way. But why memory allocator, that is responsible for finding pages for stack don't check their permissions? -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX

VM problem...

2003-07-20 Thread Pawel Jakub Dawidek
and read-only stuff interact with those bus errors? PS. I'm CC-ing this to Matt Dillon also. I know he is quite busy now, but maybe he will be able to track this down. PS2. I'm talking about FreeBSD 4.x here. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

Re: Communications kernel - userland

2003-07-19 Thread Pawel Jakub Dawidek
. Creating new syscall isn't good idea, creating device is more complicated than sysctl, but of course it's up to you and your needs. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: Communications kernel - userland

2003-07-19 Thread Pawel Jakub Dawidek
On Sat, Jul 19, 2003 at 09:47:08AM +0200, Pawel Jakub Dawidek wrote: + On Fri, Jul 18, 2003 at 03:47:05PM -0400, Marc Ramirez wrote: + + I have a remote datastore that I want to present as a filesystem. There + + are two parts to this: fetching raw data over the network, and doing some

Re: running 5.1-RELEASE with no procfs mounted (lockups?)

2003-07-18 Thread Pawel Jakub Dawidek
is a bad idea. It could only display some friendly message that procfs isn't mounted instead of: truss: cannot open /proc/25217/mem: No such file or directory truss: cannot open /proc/curproc/mem: No such file or directory -- Pawel Jakub Dawidek [EMAIL PROTECTED

Re: complicated downgrade

2003-07-18 Thread Pawel Jakub Dawidek
Here is a race:) # mv /bin /bin5 # mv /bin4 /bin mv: Command not found. :) -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http

Re: running 5.1-RELEASE with no procfs mounted (lockups?)

2003-07-18 Thread Pawel Jakub Dawidek
you think ktrace should work, then fix it). Note, that I'm not for removing truss(1). I'm only saying that in most cases ktrace(1) is sufficient. You can always mount procfs in those special situations. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

Jail sysctls and new flags to sysctls.

2003-07-17 Thread Pawel Jakub Dawidek
-CURRENT, kern.osreldate: 501102. It is avaliable at: http://garage.freebsd.pl/patches/jail_sysctls.patch -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http

Re: Jail sysctls and new flags to sysctls.

2003-07-17 Thread Pawel Jakub Dawidek
On Thu, Jul 17, 2003 at 06:07:48PM +0200, Pawel Jakub Dawidek wrote: + Patch add also two flags to sysctls: + CTLFLAG_USERINV - sysctl is invisible for unprivileged users + CTLFLAG_JAILINV - sysctl is invisible in jail environment Note, that things like

Re: Bug in VM pages protection handling.

2003-07-15 Thread Pawel Jakub Dawidek
gets read-only page? But I don't think so... -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: Bug in VM pages protection handling.

2003-07-15 Thread Pawel Jakub Dawidek
, they got read-only pages and look at PID of process exiting with SIGBUS. I've spend two days(?) on tracking this down in cerb, so good luck! PS. Note that we're talking about FreeBSD 4.x here. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator

Re: Sysctls and mutexes.

2003-07-13 Thread Pawel Jakub Dawidek
On Sun, Jun 29, 2003 at 09:12:11AM +0200, Pawel Jakub Dawidek wrote: + I want to discuss two things about sysctls. [...] + 2. Secound thing. I'm wondering if there is no need to and one more field +to those macros: mutex that protects given value. Then standard functions +sysctl_handle_

Bug in VM pages protection handling.

2003-07-12 Thread Pawel Jakub Dawidek
Hello hackers... I've just send PR for this: http://www.freebsd.org/cgi/query-pr.cgi?pr=54418 I'll be greatful if somebody could review, commit and MFC it as soon as possible. I need to hold CerbNG next release until it will be fixed. Thanks! -- Pawel Jakub Dawidek

Re: Bug in VM pages protection handling.

2003-07-12 Thread Pawel Jakub Dawidek
could be closed, sorry. PS1. Maybe you (or anyone) have better solution for syscall arguments protecting to avoid this race? PS2. Where could I find FreeBSD's VM specification? Or maybe I should look for posix VM spcification? -- Pawel Jakub Dawidek [EMAIL PROTECTED

setattr() system call (task from phk TODO list).

2003-07-07 Thread Pawel Jakub Dawidek
. The best why will be made a copy of inode struct go through changes and copy it back only if everything succeeded. This cost performance of course, so... PS. This syscall will be quite usefull in tar(1) I think. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

Sysctls and mutexes.

2003-06-29 Thread Pawel Jakub Dawidek
and that they should ignore locking when this field is NULL. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: [Cerb-list] CerbNG v1.0-RC2 is now avaliable!

2003-06-11 Thread Pawel Jakub Dawidek
+ freebsd-4.8, but this failed the compilation. Could you please send any compilation output on cerb mailing list? Maybe it's just because cerb releases don't needed bison and source from CVS head branch does. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer

CerbNG v1.0-RC2 is now avaliable!

2003-06-10 Thread Pawel Jakub Dawidek
cerb mailing lists. Enjoy!! Pawel Jakub Dawidek, Slawek Zak. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP

Re: trimming of chroot jail path in df(1)

2003-06-03 Thread Pawel Jakub Dawidek
for an URL of + FreeBSD's vfs implementation documentation. Somebody has raported that there is off-by-one error somewhere, but it wasn't critical AFAIK. Have you found some other incorrect behaviour? If yes, I could always fix it in my free time. -- Pawel Jakub Dawidek

Locking, locking...

2003-06-02 Thread Pawel Jakub Dawidek
there should be malloc() version that could be called under lock. Malloc() M_NOWAIT could be called in such scenario? How do you handle with situations like this? Thanks! -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http

Re: Bug in make(1)?

2003-04-04 Thread Pawel Jakub Dawidek
. Indeed, thanks! -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Bug in make(1)?

2003-04-03 Thread Pawel Jakub Dawidek
1 Stop in /usr/home/nick/src/testdir. % ls test/tst.o ls: test/tst.o: No such file or directory % ls tst.o tst.o IMHO make(1) should put .o files in current directory _and_ look for them there when producing an executable file. Right? -- Pawel Jakub

Re: Bug in make(1)?

2003-04-03 Thread Pawel Jakub Dawidek
to change. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net pgp0.pgp Description: PGP signature

Re: Bug in make(1)?

2003-04-03 Thread Pawel Jakub Dawidek
in the current directory. And this is IMHO correct behaviour. I'll try to build world and kernel with this patch and I'm quite sure that this doesn't break anything. Thanks. -- Pawel Jakub Dawidek [EMAIL PROTECTED] UNIX Systems Programmer/Administrator http://garage.freebsd.pl

Re: CerbNG 1.0-RC1 is now avaliable.

2003-03-21 Thread Pawel Jakub Dawidek
On Fri, Mar 21, 2003 at 01:58:38AM +0100, Pawel Jakub Dawidek wrote: [...] Hackers... We have spend a lot of time on coding cerb, so we count and will be very greatful for _any_ opinions, including it suck!. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil

CerbNG 1.0-RC1 is now avaliable.

2003-03-20 Thread Pawel Jakub Dawidek
are: Pawel Jakub Dawidek [EMAIL PROTECTED] Cerb project initiator, head programmer, kernel part developer, polish documentation author. Slawek Zak [EMAIL PROTECTED] Designer of CerbNG configuration language syntax and compiler

Re: Jail seperation patch

2003-02-27 Thread Pawel Jakub Dawidek
. Does multi-level jailing add any further restrictions to the jails within + the jails, besides the standard ones + imposed? Nope, but jail runned in jail can't use IPs that aren't binded to parent jail and securelevels are checked recursively. -- Pawel Jakub Dawidek UNIX Systems Administrator

Re: Jail seperation patch

2003-02-27 Thread Pawel Jakub Dawidek
. In my opinion better way is just create another jail and don't give access to main host for regular users. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. pgp0.pgp Description: PGP signature

Re: Jail seperation patch

2003-02-26 Thread Pawel Jakub Dawidek
jailing, IMHO it's cool: http://garage.freebsd.pl/mljail.tbz http://garage.freebsd.pl/mljail.README Nice work, I'm wondering if something will be ever commited:) -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. pgp0.pgp Description

Re: patch: (forw) linux_sigvec.c

2003-02-26 Thread Pawel Jakub Dawidek
change your homepage to reflect which parts are for 4.X and + 5.X ? Cool homepage btw, many cool patches on it ;) Hmm, I'll think this over. + I'll test it this evening on a old STABLE box. Thanks! -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: Multi-level jailing.

2003-02-20 Thread Pawel Jakub Dawidek
] == ip) return (1); } return (0); } And remove mapping to specified IP, INADDR_ANY should stay there. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg40065/pgp0.pgp Description: PGP signature

Ok, IPC jailed.

2003-02-19 Thread Pawel Jakub Dawidek
it maybe. So, any volunteers?:) Patches are attached. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg40036/pgp0.pgp Description: PGP signature

Re: Ok, IPC jailed.

2003-02-19 Thread Pawel Jakub Dawidek
On Wed, Feb 19, 2003 at 07:43:19PM +0100, Pawel Jakub Dawidek wrote: + Patches are attached. Now!:) -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. diff -ru /sys/compat/linux/linux_ipc.c sys/compat/linux/linux_ipc.c --- /sys/compat/linux

IPC and jail.

2003-02-17 Thread Pawel Jakub Dawidek
anybody have any regression tests for IPC functionality? If not, which program use it and will be a good test? Thanks. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg39981/pgp0.pgp Description: PGP signature

Multi-level jailing.

2003-02-16 Thread Pawel Jakub Dawidek
://garage.freebsd.pl/mljail.tbz -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg39976/pgp0.pgp Description: PGP signature

Re: Multi-level jailing.

2003-02-16 Thread Pawel Jakub Dawidek
Now patch is attached:) -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. diff -ru /usr/src/sys/kern/kern_jail.c ./sys/kern/kern_jail.c --- /usr/src/sys/kern/kern_jail.c Tue Jan 21 09:55:54 2003 +++ ./sys/kern/kern_jail.c Mon Feb 17 07

Re: Some security questions.

2003-02-12 Thread Pawel Jakub Dawidek
or at: http://cerber.sourceforge.net/projects/cerber to. And it's better documented atm. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg39922/pgp0.pgp Description: PGP signature

Re: Some security questions.

2003-02-10 Thread Pawel Jakub Dawidek
On Mon, Feb 10, 2003 at 06:03:07PM -0800, Julian Elischer wrote: + Anyoone have any modules to REALLY log execs? Yes, we got: http://cerber.sourceforge.net If You want only execve() logging You can try rexec. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl

Re: Some security questions.

2003-02-10 Thread Pawel Jakub Dawidek
On Tue, Feb 11, 2003 at 03:40:28AM +0100, Pawel Jakub Dawidek wrote: + + Anyoone have any modules to REALLY log execs? + + Yes, we got: + + http://cerber.sourceforge.net + + If You want only execve() logging You can try rexec. Or wait on cerb-ng first release. There is defined such policy

Missing commit bit [PATCH].

2003-02-04 Thread Pawel Jakub Dawidek
Submitter-Id: current-users Originator:Pawel Jakub Dawidek Organization: Confidential: no Synopsis: Missing commit bit [PATCH]. Severity: critical Priority: high Category: misc Class: change-request Release: All of them. Environment: Any. Description

Re: Missing commit bit [PATCH].

2003-02-04 Thread Pawel Jakub Dawidek
On Tue, Feb 04, 2003 at 10:48:40AM +0100, Pawel Jakub Dawidek wrote: + There is commit bit for Matthew Dillon [EMAIL PROTECTED]. Grr:) s/is/ISN'T/ -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg39615/pgp0.pgp Description: PGP

Re: Routing within a Jail

2003-02-02 Thread Pawel Jakub Dawidek
-- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg39559/pgp0.pgp Description: PGP signature

Exceptions via setjmp/longjmp in kernel.

2003-01-09 Thread Pawel Jakub Dawidek
that are done before longjmp(). -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-hackers in the body of the message

Re: Exceptions via setjmp/longjmp in kernel.

2003-01-09 Thread Pawel Jakub Dawidek
On Thu, Jan 09, 2003 at 11:03:55AM -0500, Jake Burkholder wrote: + The kernel longjmp only ever seems to return 1. See i386/i386/support.s. That's right, thanks! But this is strange, setjmp/longjmp are defined in C99 and there setjmp() returns value from longjmp(). -- Pawel Jakub Dawidek UNIX

Re: Exceptions via setjmp/longjmp in kernel.

2003-01-09 Thread Pawel Jakub Dawidek
place and when I'm returning with longjmp() I need to just unlock everything that was locked between setjmp() and longjmp() and this is easy, because every lock is stored in my-thread structure. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: Caching [sugestion].

2003-01-07 Thread Pawel Jakub Dawidek
to patch kernel at all. This have to be done from kld module. PS. I think this over againg and You and Julian Elischer probably have right - I need to update cached names on rename(2) and unlink(2). -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am

Re: Caching [sugestion].

2003-01-06 Thread Pawel Jakub Dawidek
... ever. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-hackers in the body of the message

Re: Caching [sugestion].

2003-01-06 Thread Pawel Jakub Dawidek
]-f_ops-fo_close() functions. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-hackers in the body of the message

Re: Caching [sugestion].

2003-01-06 Thread Pawel Jakub Dawidek
better that file name isn't updated on rename(2). -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-hackers in the body of the message

Caching [sugestion].

2003-01-05 Thread Pawel Jakub Dawidek
. Exactly that same for execve() and exit1() and for open() and p-p_fd-fd_ofiles[X]-f_ops-fo_close(). This don't have to be done via VFS caching mechanism, this could also be made by some separated mechanism used only for this. Think over this, please! -- Pawel Jakub Dawidek UNIX Systems

Re: Caching [sugestion].

2003-01-05 Thread Pawel Jakub Dawidek
on filenames. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-hackers in the body of the message

Login directly as root.

2002-12-27 Thread Pawel Jakub Dawidek
Root's password: root's password ? -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-hackers in the body of the message

Hmm, sysctlfs.

2002-12-23 Thread Pawel Jakub Dawidek
Hello hackers... I've wrote file system that operate on sysctl tree. Most of work is done, but some cosmetic changes are needed. If somebody think that this can be usefull... http://garage.freebsd.pl/sysctlfs.README http://garage.freebsd.pl/sysctlfs.tbz -- Pawel Jakub Dawidek

Re: Hmm, sysctlfs.

2002-12-23 Thread Pawel Jakub Dawidek
On Tue, Dec 24, 2002 at 08:35:55AM +0100, Pawel Jakub Dawidek wrote: + Hello hackers... + + I've wrote file system that operate on sysctl tree. + Most of work is done, but some cosmetic changes are needed. + If somebody think that this can be usefull... + + http://garage.freebsd.pl

Re: Syscall number.

2002-12-21 Thread Pawel Jakub Dawidek
)); } -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg38801/pgp0.pgp Description: PGP signature

Re: Syscall number.

2002-12-21 Thread Pawel Jakub Dawidek
understand You well). -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg38804/pgp0.pgp Description: PGP signature

Syscall number.

2002-12-20 Thread Pawel Jakub Dawidek
it). So is there some diffrent way to get syscall number (in -STABLE or in -CURRENT)? Anyone? -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. msg38792/pgp0.pgp Description: PGP signature

Re: Syscall number.

2002-12-20 Thread Pawel Jakub Dawidek
On Fri, Dec 20, 2002 at 07:43:37PM +0100, Pawel Jakub Dawidek wrote: + Simple example (from kld module): + + sysent[SYS_chmod].sy_call = myfunction; + sysent[SYS_open].sy_call = myfunction; + sysent[SYS_execve].sy_call = myfunction; + + int + myfunction(register struct proc *p, register void

<    1   2   3   >