Re: Bandwidth Control in FreeBSD 8

2009-09-14 Thread Frederique Rijsdijk

On 9/15/2009 2:24 AM, perl info wrote:

I have two questions in regards to a FreeBSD Server and avoiding ISP
bandwidth charges.

Are there changes to the ways bandwidth can be controlled in FreeBSD 8.

Is there an accepted or standardized method to control and limit bandwidth
usage over an interface.



Changes I don't know about.

But you can use IPFW to limit and measure the bandwidth you're using. 
You can also use darkstat (port) to measure the traffic you're generating.



-- Frederique
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ftpd virtual www hosts

2009-09-14 Thread Odhiambo Washington
On Mon, Sep 14, 2009 at 7:10 PM, Peasoup  wrote:

> Hi
>
> Im new to the list, hope I have the right one, but if not, please let me
> know. And forgive me if I don't speak clear unix.
>
> I am trying to set up a webserver, with virtual hosting accounts.
> Naturally, I want to be able to give users the ability to upload files to
> their web directories.
>
> Setting up basic ftp is not an issue for me. I can set up a user at
> /usr/home/, and can upload via ftp just fine. Of course that directory
> is owned by user:user. I also get ftpchroot just fine.
>
> Next I go to vipw to change the user's home dir to something in the www
> area, which is owned by www:www. This is where my problems start with being
> denied. I am assuming that uploading to the unprivileged user www is getting
> in my way.
>

If you have virtualhost A, with DocumentRoot
/usr/local/www/apache2/data/siteA/htdocs, then set the home directory for
the user who uploads to this path during user creation.
chroot them to this path as well.


-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
"If you have nothing good to say about someone, just shut up!."
  -- Lucky Dube
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ftpd virtual www hosts

2009-09-14 Thread Michael Powell
Polytropon wrote:

> On Mon, 14 Sep 2009 12:10:35 -0400, Peasoup  wrote:
>> Next I go to vipw to change the user's home dir to something in the
>> www area, which is owned by www:www. This is where my problems start
>> with being denied. I am assuming that uploading to the unprivileged
>> user www is getting in my way.
> 
> A common way is to create a specific directory within the
> user's home directory, such as
> 
> ~/public_html/
> 
> which is accessed by the web server to obtain the files to
> be served. The user has his regular FTP access to his home
> directory, so he can put files into ~/public_html/ or just
> create a symlink into this directory from somewhere else in
> his home directory.
> 
> I haven't done much webserver stuff recently, and I'm not
> quite sure I did understand your question correctly, so my
> suggestion could already be outdated.
> 

This is facilitated by the Apache module mod_userdir. It utilizes the 
public_html folder in a user's home directory and usually in the default 
config shows up as http://www.someweb.somewhere/~username in the URI.

As you indicated before, each user can FTP to his own content this way. 
Because FTP is passing passwords in the clear I consider this a poor 
security practice and won't go near it myself.

However, if users could use sftp (from sshd) it would be a little more 
secure. You could also carry this one step further and issue each user a 
certificate, require certs to login, and disable password login. This is 
possibly overkill, as with sftp passwords will be inside the SSH tunnel and 
won't be in the clear.

-Mike


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Giorgos Keramidas
Hi Dan,

The right place to report security problems with FreeBSD is to the
Security Officer team.  A PGP signed email to the email address of the
security team at  is enough to get the
attention of the FreeBSD Project.

Przemyslaw should email security-officer with any details he thinks are
relevant.  Then the security team will make sure to fix the bug for all
affected releases of FreeBSD, release a patch with the fix, issue an
advisory through the usual channels, and post the details online at our
security information web pages at .

Regards,
Giorgos

On Mon, 14 Sep 2009 12:12:50 -0700, Dan Goodin  wrote:
> Hello,
>
> Dan Goodin, a reporter at technology news website The Register. Security
> researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
> has a security bug. He says he notified the FreeBSD Foundation on August
> 29 and never got a response. We'll be writing a brief article about
> this. Please let me know ASAP if someone cares to comment.
>
> Kind regards,
>
> Dan Goodin
> 415-495-5411
>
>  Original Message 
> Subject: Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer
> dereference
> Date: Sun, 13 Sep 2009 10:49:33 +0200
> From: Przemyslaw Frasunek 
> Organization: frasunek.com
> To: full-disclos...@lists.grok.org.uk, bugt...@securityfocus.com
> References: <4a9028ac.9080...@freebsd.lublin.pl>
>
> Przemyslaw Frasunek pisze:
>> FreeBSD <= 6.1 suffers from classical check/use race condition on SMP
>
> There is yet another kqueue related vulnerability. It affects 6.x, up to
> 6.4-STABLE. FreeBSD security team was notified on 29th Aug, but there is no
> response until now, so I won't publish any details.
>
> Sucessful exploitation yields local root and allows to exit from jail.
> For now,
> you can see demo on:
>
> http://www.vimeo.com/6554787
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mak Kolybabi
On 2009-09-14 12:12, Dan Goodin wrote:
> We'll be writing a brief article about this.

I didn't notice anyone link the finished article yet, so here it is:
http://www.theregister.co.uk/2009/09/14/freebsd_security_bug/

--
Matthew Anthony Kolybabi (Mak)


() ASCII Ribbon Campaign | Against HTML e-mail
/\  www.asciiribbon.org  | Against proprietary extensions

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Michael Powell
Matthew Seaman wrote:

> Mikel King wrote:
> 
>> Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected to
>> be released either later this month or early next, and 6.x will be
>> officially retired at that time, is it possible that this was
>> overlooked? Personally I don't think it's ever good to overlook
>> security, especially in the case of a root exploit.
> 
> Nope.  6.3 (RELENG_6_3) will be supported until at least 31 January 2010
> while 6.4 (RELENG_6_4) and 6-STABLE (RELENG_6) will be supported until at
> least 30 November 2010 by the Security team.
> 
> There are no more releases planned from the RELENG_6 branch, but that's
> not the same as 'unsupported' -- patches and advisories will be issued
> until the dates listed, and quite usually beyond that.
> 

Quoted from ~freebsd.security.general:

 "The bug was fixed in 6.1-STABLE, just before release of 6.2-RELEASE, but
 was not recognized as security vulnerability."

So if the bug no longer exists in the non-EOL 6.3/6.4 there is nothing to 
fix. Seems to me this is more about not getting due credit and a writer who 
doesn't grok. 

The posting to security was a forward done by another individual, since the 
original discoverer notified the FreeBSD Foundation instead of the security 
team. Since the FreeBSD foundation is largely administrative and not the 
correct entity to notify, it is not surprising they did not reply.

The writer sounds like he is attempting to spin the SNAFU into a "they knew 
about a security vulnerability and did nothing..." story. Self serving for 
him, headline grabbing and sensationalist for sure, but not true as it was 
quickly addressed at the time.

This is water under the bridge and a writer flogging a dead horse.

-Mike



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: podcast on google? Or other?

2009-09-14 Thread Gary Kline
On Mon, Sep 14, 2009 at 11:26:27PM +0200, Polytropon wrote:
> On Mon, 14 Sep 2009 14:02:18 -0700, Gary Kline  wrote:
> > 
> > hey guys, i'll deny i ever wrote this because i *should* know already...
> > but don't.  i've clicked on several podcast sites and they show links to 
> > yahoo and a couple
> > others.  does google have this [POD] icon?  OR what do i install here on 
> > freebsd-7.1 that i
> > can use to listen to podcasts or otherwise play old/archived streams?  
> 
> What format are those podcasts in? In OGG/Vorbis or MP3 format,
> you can use your favourite music player (mine is xmms) and use
> it for the specific media type; the browser's configuration
> editor should allow you to do so.
> 
> The xmms program is able to play streamed media content, but
> mplayer should be fine, too.
> 


i usually use kmplayer because i can kill it o r click-on to kill/stop.

i was looking at a particular show on national public radio [NPR] nd 
wound up
at the podcast section.  i think, am not certain, that if i select the 
'podcast'
thing, this show will show up daily or weekly, whatever   rather 
than me having to
spent minutes of finding Show, finding archive place, and then 
selecting 
Stream or Podcast.

if i'm not making enough sense, i'll wait until i've had  a good 
night's sleep!

gary

PS:  DEfinite offtopic but i may have found a legit ebook publisher ... 
they pod 
publish in us, canada, and in europe.  [[i had no idea it'd be this 
hard just 
finding the right place. =sigh=]]

> 
> 
> -- 
> Polytropon
> Magdeburg, Germany
> Happy FreeBSD user since 4.0
> Andra moi ennepe, Mousa, ...

-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
http://jottings.thought.org   http://transfinite.thought.org
The 5.67a release of Jottings: http://jottings.thought.org/index.php

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: csh issues bogus error message

2009-09-14 Thread Steven Friedrich
On Monday 14 September 2009 21:22:23 Steve Bertrand wrote:
> Steven Friedrich wrote:
> > I'm working on my .cshrc file, so I have to use csh syntax. I, like most
> > Unix shell programmers, usually steer clear of csh scripts, but
> > obviously, .cshrc requires csh syntax.
> >
> > If I create a file with just a # in it, I get:
> > set: Variable name must begin with a letter.
> >
> > I can change the # to #!/bin/csh
> > but I get the same error message
> >
> > This looks like a csh bug to me 8o)
> 
> What exactly are you trying to do?
> 
> Can you post the entire contents of your .cshrc file?
> 
> ...seems as though there is something missing here.
> 
> Steve
> 
Ok, I'm sorry. My brain farted.

I had set -x in .cshrc, and that's a good line in a BOURNE script 8o)
but in my csh scripts, I can place #!/bin/csh -x
when I need debug.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: csh issues bogus error message

2009-09-14 Thread Steve Bertrand
Steven Friedrich wrote:
> I'm working on my .cshrc file, so I have to use csh syntax. I, like most Unix 
> shell programmers, usually steer clear of csh scripts, but obviously, .cshrc 
> requires csh syntax.
> 
> If I create a file with just a # in it, I get:
> set: Variable name must begin with a letter.
> 
> I can change the # to #!/bin/csh
> but I get the same error message
> 
> This looks like a csh bug to me 8o)

What exactly are you trying to do?

Can you post the entire contents of your .cshrc file?

...seems as though there is something missing here.

Steve


smime.p7s
Description: S/MIME Cryptographic Signature


Re: rebinding keys to functions

2009-09-14 Thread Mel Flynn
On Tuesday 15 September 2009 00:40:38 Roland Smith wrote:
> On Mon, Sep 14, 2009 at 11:06:20PM +0200, Polytropon wrote:
> > On Mon, 14 Sep 2009 14:34:29 -0400, Robert Huff  
wrote:
> > > Roland Smith writes:
> > > >  > My laptop has a bunch of volume-up/down/mute internet/mail/etc
> > > >  > keys.  How do I map each of them to run a specific shell
> > > >  > command when pressed?
> > > >
> > > >  That depends on a couple of things (assuming you're running the X
> > > >  window system, I don't know if it is even possible on the
> > > >  console).
> > > >
> > > >  First you have to make sure that you actually can see the key
> > > >  signals. In X you can test that with xev(1).
> > >
> > >   If this is what I think it is, he probably can't.
> >
> > For most laptop keyboards, there was (as already explained) a
> > specific system that handled Fn+PFx outside the OS so it worked
> > always. Even my old Toshiba T1600 can do that.
> >
> > "Modern" laptops do it differently: Fn+PFx key combinations
> > have to be picked up by a specific driver that "listens" to
> > stange and custom keycodes outside the standard range, and then
> > communicate the selected purpose to the OS in order to perform
> > the action, e. g. raise the volume.
> 
> Not all of them. My laptop is based on a quite modern cantiga (aka
>  centrino2) PM45 chipset (from 2008, according to Wikipedia). The function
>  keys for changing the creen brightness and sound volume work OK with
>  FreeBSD, even though xev doesn't see them. So that signal seems to go
>  directly to the hardware.

Most likely not entirely. Having acpidump(8)ed a few laptops, I have seen 
references to multimedia keys in there. However I know not nearly enough about 
ACPI to know if the OS can intercept/reroute the bindings. A gamble I would 
take is to let FreeBSD post itself as a windows variant to acpi, by setting 
hw.acpi.osname="Windows 2001" in /boot/loader.conf. Then recheck xev.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


csh issues bogus error message

2009-09-14 Thread Steven Friedrich
I'm working on my .cshrc file, so I have to use csh syntax. I, like most Unix 
shell programmers, usually steer clear of csh scripts, but obviously, .cshrc 
requires csh syntax.

If I create a file with just a # in it, I get:
set: Variable name must begin with a letter.

I can change the # to #!/bin/csh
but I get the same error message

This looks like a csh bug to me 8o)

I'm running FreeBSD 7.2p3
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


csh issues bogus error message

2009-09-14 Thread Steven Friedrich
I'm working on my .cshrc file, so I have to use csh syntax. I, like most Unix 
shell programmers, usually steer clear of csh scripts, but obviously, .cshrc 
requires csh syntax.

If I create a file with just a # in it, I get:
set: Variable name must begin with a letter.

I can change the # to #!/bin/csh
but I get the same error message

This looks like a csh bug to me 8o)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Bandwidth Control in FreeBSD 8

2009-09-14 Thread perl info
I have two questions in regards to a FreeBSD Server and avoiding ISP
bandwidth charges.

Are there changes to the ways bandwidth can be controlled in FreeBSD 8.

Is there an accepted or standardized method to control and limit bandwidth
usage over an interface.

Thanks in advance for the help,

Marcel
http://nwvd.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: libnsl.so.1

2009-09-14 Thread Joe R. Jah
On Tue, 15 Sep 2009, Mel Flynn wrote:

> Date: Tue, 15 Sep 2009 01:17:02 +0200
> From: Mel Flynn 
> To: freebsd-questions@freebsd.org
> Cc: Joe R. Jah 
> Subject: Re: libnsl.so.1
>
> On Tuesday 15 September 2009 00:02:50 Joe R. Jah wrote:
> > Hello all,
> >
> > I want to install a dispather module from Day Communique software on
> > apache22.  The binaray mod_dispatcher.so is provided by Day as a 64 bit
> > *NIX compatible module to place in apache22 module directory.  The mocule
> > requires a shared library missing from system:
> >
> > --8<--
> > # apachectl -t
> > httpd: Syntax error on line 827 of /usr/local/etc/apache22/httpd.conf:
> > Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
> > Shared object "libnsl.so.1" not found, required by "mod_dispatcher.so"
> > --8<--
> >
> > Does anyone know where to download libnsl.so.1, or from what port it can
> > be installed?
>
> nsl=name service library. All of it's functions are in FreeBSD implement in
> libc. If this mod_dispatcher.so is indeed loadable by FreeBSD's linker, then
> you can provide a dummy libnsl.so.1, like so:
>
> $ cat <'EOF' >BSDmakefile
> SHLIB=nsl
> SHLIB_MAJOR=1
> NO_MAN=yes
> SRCS=nsl.c
>
> .include 
> EOF
> $ cat <'EOF' >nsl.c
> int nsl_dummy(void);
>
> int nsl_dummy(void) { return 0; }
> EOF
>
> $ make; sudo make LIBDIR=/usr/local/lib install
>
> The symbols it's looking for should be provided by libc, but if there's any
> undefined ones, this trickery gets a little dangerous and you're better off
> asking the developers for a native FreeBSD version.

Thank you Mel.  You were right about undefined ones;  Here's what I get:

--8<--
apachectl -t
httpd: Syntax error on line 826 of /usr/local/etc/apache22/httpd.conf:
Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
/usr/local/libexec/apache22/mod_dispatcher.so: Undefined symbol "__strdup"
--8<--

Any more trickeries?;-)

Regards,

Joe
-- 
 _/   _/_/_/   _/  __o
 _/   _/   _/  _/ __ _-\<,_
 _/  _/   _/_/_/   _/  _/ ..(_)/ (_)
  _/_/ oe _/   _/.  _/_/ ahj...@cloud.ccsf.cc.ca.us
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: libnsl.so.1

2009-09-14 Thread Joe R. Jah
On Tue, 15 Sep 2009, Polytropon wrote:

> Date: Tue, 15 Sep 2009 00:18:55 +0200
> From: Polytropon 
> To: Joe R. Jah 
> Cc: freebsd-questions@freebsd.org
> Subject: Re: libnsl.so.1
>
> On Mon, 14 Sep 2009 15:02:50 -0700 (PDT), "Joe R. Jah" 
>  wrote:
> > Does anyone know where to download libnsl.so.1, or from what port it can
> > be installed?
>
> At least on my system, it seems to be part of the Linux ABI, so
> maybe the module in question is designed for Linux?
>
>   % locate libnsl
>   /usr/compat/linux/lib/libnsl-2.3.6.so
>   /usr/compat/linux/lib/libnsl.so.1
>
> There's no "libnsl" in the ports, and "nsl" search results don't
> seem to bring up something appropriate.
>
> My suggestion would be to install the Linux ABI and have the
> setting
>
>   linux_enable="YES"
>
> in your /etc/rc.conf. The linux.ko kernel module should be loaded
> automatically, or maybe you already have it in your kernel config.

Thank you Polytropon.  I have installed /usr/ports/emulators/linux_base-fc4
and now I have the following:

  /usr/compat/linux/lib/libnsl-2.3.6.so
  /usr/compat/linux/lib/libnsl.so.1

I have put linux_enable="YES" in /etc/rc.conf and rebooted the server;
however, I still get the same response.  What am missing?

Regards,

Joe
-- 
 _/   _/_/_/   _/  __o
 _/   _/   _/  _/ __ _-\<,_
 _/  _/   _/_/_/   _/  _/ ..(_)/ (_)
  _/_/ oe _/   _/.  _/_/ ahj...@cloud.ccsf.cc.ca.us
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Approx. restore time estimate

2009-09-14 Thread Kurt Buff
On Mon, Sep 14, 2009 at 16:36, jaymax  wrote:
>
> Thanks!
>
> That might explain. Is there an alternate process you would recommend with
> at least equal reliability.
> BTW I should have mentioned that I was restoring from a disk file rather
> than from a tape
>
> Thanks again.

IME, restoring from disk or tape makes little difference, if you're
doing a full restore, and once the restore process is up and running.

The bigger bottleneck is the write speed of the disk(s) you're
restoring to - it's always slower to write than to read, often by a
very large margin.

Kurt
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Approx. restore time estimate

2009-09-14 Thread Lars Eighner

On Mon, 14 Sep 2009, jaymax wrote:



Thanks!

That might explain. Is there an alternate process you would recommend with
at least equal reliability.


I don't know of anything that isn't a bigger can of worms in a file system
of any complexity to speak of.


BTW I should have mentioned that I was restoring from a disk file rather
than from a tape


I was speaking of disk to disk.


--
Lars Eighner
http://www.larseighner.com/index.html
8800 N IH35 APT 1191 AUSTIN TX 78753-5266

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Approx. restore time estimate

2009-09-14 Thread jaymax

Thanks!

That might explain. Is there an alternate process you would recommend with
at least equal reliability.
BTW I should have mentioned that I was restoring from a disk file rather
than from a tape
 
Thanks again.


---

Lars Eighner-2 wrote:
> 
> On Mon, 14 Sep 2009, jaymax wrote:
> 
> 
> I cannot begin to give you a number in the ballpark, all I can tell you is
> that restore *is* very, very slow and lacks reassuring progress
> indicators.
> 
> -- 
> Lars Eighner
> http://www.larseighner.com/index.html
> 8800 N IH35 APT 1191 AUSTIN _
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Approx.-restore-time-estimate-tp25443580p25445497.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mel Flynn
On Monday 14 September 2009 23:46:42 David Kelly wrote:
> On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
> > Am 2009/9/14 Dan Goodin  writhed:
> > > Hello,
> > >
> > > Dan Goodin, a reporter at technology news website The Register.
> > > Security researcher Przemyslaw Frasunek says versions 6.x through 6.4
> > > of FreeBSD has a security bug. He says he notified the FreeBSD
> > > Foundation on August 29 and never got a response. We'll be writing a
> > > brief article about this. Please let me know ASAP if someone cares to
> > > comment.
> >
> > Has anyone submitted a PR about this?
> 
> Przemyslaw Frasunek has PR's posted but none recent. IMO if a PR is not
> submitted then one has *not* informed the Powers That Be.

Wrong. Security bugs should be reported to the security team, not PR'd.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: libnsl.so.1

2009-09-14 Thread Mel Flynn
On Tuesday 15 September 2009 00:02:50 Joe R. Jah wrote:
> Hello all,
> 
> I want to install a dispather module from Day Communique software on
> apache22.  The binaray mod_dispatcher.so is provided by Day as a 64 bit
> *NIX compatible module to place in apache22 module directory.  The mocule
> requires a shared library missing from system:
> 
> --8<--
> # apachectl -t
> httpd: Syntax error on line 827 of /usr/local/etc/apache22/httpd.conf:
> Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
> Shared object "libnsl.so.1" not found, required by "mod_dispatcher.so"
> --8<--
> 
> Does anyone know where to download libnsl.so.1, or from what port it can
> be installed?

nsl=name service library. All of it's functions are in FreeBSD implement in 
libc. If this mod_dispatcher.so is indeed loadable by FreeBSD's linker, then 
you can provide a dummy libnsl.so.1, like so:

$ cat <'EOF' >BSDmakefile
SHLIB=nsl
SHLIB_MAJOR=1
NO_MAN=yes
SRCS=nsl.c

.include 
EOF
$ cat <'EOF' >nsl.c
int nsl_dummy(void);

int nsl_dummy(void) { return 0; }
EOF

$ make; sudo make LIBDIR=/usr/local/lib install

The symbols it's looking for should be provided by libc, but if there's any 
undefined ones, this trickery gets a little dangerous and you're better off 
asking the developers for a native FreeBSD version.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: where to put `startx` serverargs

2009-09-14 Thread Roland Smith
On Mon, Sep 14, 2009 at 05:27:56PM -0400, ill...@gmail.com wrote:
> 2009/9/12 Alexander Best :
> > hi there,
> >
> > since i don't use ipv6 X produces the following warning when starting up:
> >
> > _XSERVTransSocketOpenCOTSServer: Unable to open socket for inet6
> > _XSERVTransOpen: transport open failed for inet6/otaku:0
> > _XSERVTransMakeAllCOTSServerListeners: failed to open listener for inet6
> >
> > so i'd to start X this way: `startx -- -nolisten inet6`.
> >
> > i looked through the man pages of startx and xinit but couldn't find where 
> > to
> > put the argument "-nolisten inet6" so `startx` picks it up automatically.
> >
> > currently i have this extra line in /usr/local/bin/startx: "serverargs =
> > -nolisten inet6" but that's just a hack because i couldn't find any
> > information on where to put the serverarg.
> >
> 
> It seems to me that there should be a place in /etc/X11/xorg.conf
> However
> I cannot find it.
 
You can put them in /usr/local/lib/X11/xinit/xserverrc, together with the X
server. 

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpcoHN8tjmeM.pgp
Description: PGP signature


Re: rebinding keys to functions

2009-09-14 Thread Roland Smith
On Mon, Sep 14, 2009 at 11:06:20PM +0200, Polytropon wrote:
> On Mon, 14 Sep 2009 14:34:29 -0400, Robert Huff  wrote:
> > Roland Smith writes:
> > 
> > >  > My laptop has a bunch of volume-up/down/mute internet/mail/etc 
> > >  > keys.  How do I map each of them to run a specific shell
> > >  > command when pressed? 
> > >  
> > >  That depends on a couple of things (assuming you're running the X
> > >  window system, I don't know if it is even possible on the
> > >  console).
> > >  
> > >  First you have to make sure that you actually can see the key
> > >  signals. In X you can test that with xev(1).
> > 
> > If this is what I think it is, he probably can't.
> 
> For most laptop keyboards, there was (as already explained) a
> specific system that handled Fn+PFx outside the OS so it worked
> always. Even my old Toshiba T1600 can do that.
> 
> "Modern" laptops do it differently: Fn+PFx key combinations
> have to be picked up by a specific driver that "listens" to
> stange and custom keycodes outside the standard range, and then
> communicate the selected purpose to the OS in order to perform
> the action, e. g. raise the volume.

Not all of them. My laptop is based on a quite modern cantiga (aka centrino2)
PM45 chipset (from 2008, according to Wikipedia). The function keys for
changing the creen brightness and sound volume work OK with FreeBSD, even
though xev doesn't see them. So that signal seems to go directly to the
hardware. Using the Fn key with the virtual numeric keypad works, and
generates normal keyboard events. I haven't tested the keys that can control a
media player, because I don't care about them.

> Even worse, "modern" laptops have replaced the simple switches
> in the earophone sockets. In the past, there was a mechanical
> switch that switched off the internal speakers when you inserted
> a 3,5mm jack. Today, a proprietary driver has to detect if a
> jack is inserted, and then switch of the speakers and then
> switch on the output of the socket.

I just tested that today, and it worked OK in FreeBSD. Plug in the headphones,
they work and the speaker goes silent.

So I guess it is all about how the machine is put together. Even if a chipset
has certain functionality, it is up to the board manufacturer to connect
it. 

Writing a driver to detect if headphones are connected sounds much more
complicated to me than connecting a couple of switches! I mean, you'd have to
measure something like the impedance of the jack. Surely that is more
expensive than a simple switch?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgptQky7ejK6H.pgp
Description: PGP signature


Re: Re: Dump/Restore?

2009-09-14 Thread utisoft

On 14 Sep 2009 23:14, Polytropon  wrote:

On Mon, 14 Sep 2009 22:02:49 +, utis...@googlemail.com wrote:



> Yeah, unfortunately I still think of 'folders', and am continually


> wrong-footed by the term 'directory' in a graphical environment, even  
after



> years of GNU and FreeBSD use.





Just imagine if the Xerox Alto and its first GUI wouldn't have



been invented in the US, but in Germany. Then we would refer



to "ring binders" or "lever arch folders", or "ordners" or



"actenordner" (the german word is "der Ordner" or "der Akten-



ordner"). Surely, this would be the default symbol:





http://www.officexl.de/kopierpapier/images/ordner.jpg





And all paper sizes defaults would refer to DIN A4 in the first



place... what a beautiful imagination! :-)








> I have all sorts of strange habits that many will recognise as symptoms  
of



> multi-booting and running servers. There's no shame in that!





Please don't get me wrong: There are correct places to use the



term "folder", eg when talking about "mail folders" (which can



be represented as files (mbox) or directories with files (MH) on



the disk level). But in the case discussed, "directory" is the



correct term. There's no need to change proven terminology just



because some company indoctrinates you to do so. :-)





How important it is to use the correct terminology is when users



start asking you questions about their "modems" (refers to PC),



their "TV" and their "brains" (refers to speakers), or start



complaining that "the file system is too big" (refers to the



icon size in the file manager used), and want "the same pictures



at home as I have them at work" (refers to the OS).





To sum it up in quite your own words: "I have all sorts of strange



habits that many will recognise as symptoms of asperger's syndrome.



There's no shame in that!" :-)




Certainly no shame in that, but also one should be corrected on errors of  
terminology. Sorry if I didn't make that clear (I didn't!). I merely meant  
to point out that the best of us make terminological errors, and that it's  
all part of our 'diversity'. However, you were still right to correct the  
term IMO.


Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: libnsl.so.1

2009-09-14 Thread Polytropon
On Mon, 14 Sep 2009 15:02:50 -0700 (PDT), "Joe R. Jah" 
 wrote:
> Does anyone know where to download libnsl.so.1, or from what port it can
> be installed?

At least on my system, it seems to be part of the Linux ABI, so
maybe the module in question is designed for Linux?

% locate libnsl
/usr/compat/linux/lib/libnsl-2.3.6.so
/usr/compat/linux/lib/libnsl.so.1

There's no "libnsl" in the ports, and "nsl" search results don't
seem to bring up something appropriate.

My suggestion would be to install the Linux ABI and have the
setting

linux_enable="YES"

in your /etc/rc.conf. The linux.ko kernel module should be loaded
automatically, or maybe you already have it in your kernel config.


-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Polytropon
On Mon, 14 Sep 2009 22:02:49 +, utis...@googlemail.com wrote:
> Yeah, unfortunately I still think of 'folders', and am continually  
> wrong-footed by the term 'directory' in a graphical environment, even after  
> years of GNU and FreeBSD use.

Just imagine if the Xerox Alto and its first GUI wouldn't have
been invented in the US, but in Germany. Then we would refer
to "ring binders" or "lever arch folders", or "ordners" or
"actenordner" (the german word is "der Ordner" or "der Akten-
ordner"). Surely, this would be the default symbol:

http://www.officexl.de/kopierpapier/images/ordner.jpg

And all paper sizes defaults would refer to DIN A4 in the first
place... what a beautiful imagination! :-)



> I have all sorts of strange habits that many will recognise as symptoms of  
> multi-booting and running servers. There's no shame in that!

Please don't get me wrong: There are correct places to use the
term "folder", e. g. when talking about "mail folders" (which can
be represented as files (mbox) or directories with files (MH) on
the disk level). But in the case discussed, "directory" is the
correct term. There's no need to change proven terminology just
because some company indoctrinates you to do so. :-)

How important it is to use the correct terminology is when users
start asking you questions about their "modems" (refers to PC),
their "TV" and their "brains" (refers to speakers), or start
complaining that "the file system is too big" (refers to the
icon size in the file manager used), and want "the same pictures
at home as I have them at work" (refers to the OS).

To sum it up in quite your own words: "I have all sorts of strange
habits that many will recognise as symptoms of asperger's syndrome.
There's no shame in that!" :-)




-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Approx. restore time estimate

2009-09-14 Thread Lars Eighner

On Mon, 14 Sep 2009, jaymax wrote:



I do not expect an exact or precise answer here, given all the subjective
& dependent parameters.

Just a rough ballpark approximation, what time frame should a restore occur
in?

param :-
an ~1Ghz system, running 6.x O/S, dumpfile ~ 30 Gb, UFS2 file systems w/
default blocksize, target directory 400 Gb w/ > 190 Gb free capacity,
minimal use system booted from Fixit

Just wanted to get an idea if I am going anywhere or workig fast being
stuck somewhere or nowhere.


I cannot begin to give you a number in the ballpark, all I can tell you is
that restore *is* very, very slow and lacks reassuring progress indicators.

--
Lars Eighner
http://www.larseighner.com/index.html
8800 N IH35 APT 1191 AUSTIN TX 78753-5266

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


libnsl.so.1

2009-09-14 Thread Joe R. Jah
Hello all,

I want to install a dispather module from Day Communique software on
apache22.  The binaray mod_dispatcher.so is provided by Day as a 64 bit
*NIX compatible module to place in apache22 module directory.  The mocule
requires a shared library missing from system:

--8<--
# apachectl -t
httpd: Syntax error on line 827 of /usr/local/etc/apache22/httpd.conf:
Cannot load /usr/local/libexec/apache22/mod_dispatcher.so into server:
Shared object "libnsl.so.1" not found, required by "mod_dispatcher.so"
--8<--

Does anyone know where to download libnsl.so.1, or from what port it can
be installed?

Regards,

Joe
-- 
 _/   _/_/_/   _/  __o
 _/   _/   _/  _/ __ _-\<,_
 _/  _/   _/_/_/   _/  _/ ..(_)/ (_)
  _/_/ oe _/   _/.  _/_/ ahj...@cloud.ccsf.cc.ca.us
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Re: Dump/Restore?

2009-09-14 Thread utisoft

On 14 Sep 2009 22:38, Richard Mahlerwein  wrote:

--- On Mon, 9/14/09, Polytropon free...@edvax.de> wrote:





From: Polytropon free...@edvax.de>



Subject: Re: Dump/Restore?



To: mahle...@yahoo.com



Cc: freebsd-questions@freebsd.org, "Chris Maness" ch...@chrismaness.com>



Date: Monday, September 14, 2009, 4:37 PM




On Mon, 14 Sep 2009 05:45:01 -0700 (PDT), Richard Mahlerwein  
mahle...@yahoo.com> wrote:



> In the "restore > : prompt you can



>



> "add "



>



> to add it to the restore list. Works with folders, too.







Excuse me, just a little terminology note: FreeBSD has directories,



not folders. It doesn't have sheets of papers instead of files,



too. :-)





Pie on my face. I work too much with multiple operating systems. *sigh*




BTW, I also work and develop heavily with a (non BSD, non-open source)  
document imaging and workflow management software, so you probably will,  
at some point, see me confuse files and sheets of paper. I will not mind  
a gentle reminder just like the above when I do that . :)



Yeah, unfortunately I still think of 'folders', and am continually  
wrong-footed by the term 'directory' in a graphical environment, even after  
years of GNU and FreeBSD use.


I have all sorts of strange habits that many will recognise as symptoms of  
multi-booting and running servers. There's no shame in that!


Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread David Kelly
On Mon, Sep 14, 2009 at 05:13:54PM -0400, ill...@gmail.com wrote:
> Am 2009/9/14 Dan Goodin  writhed:
> > Hello,
> >
> > Dan Goodin, a reporter at technology news website The Register. Security
> > researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
> > has a security bug. He says he notified the FreeBSD Foundation on August
> > 29 and never got a response. We'll be writing a brief article about
> > this. Please let me know ASAP if someone cares to comment.
> 
> Has anyone submitted a PR about this?

Przemyslaw Frasunek has PR's posted but none recent. IMO if a PR is not
submitted then one has *not* informed the Powers That Be. Having said
that, for all I know there is a PR in the system that has been given
restricted access until its dealt with. IIRC there is an option where
one may request privacy when submitting a PR, perhaps that is the case
here?

Why is this in -questions? Seems -chat is more appropriate.

-- 
David Kelly N4HHE, dke...@hiwaay.net

Whom computers would destroy, they must first drive mad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Erik Trulsson
On Mon, Sep 14, 2009 at 05:21:48PM -0400, Mikel King wrote:
> 
> On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote:
> 
> > Hello,
> >
> > Dan Goodin, a reporter at technology news website The Register.  
> > Security
> > researcher Przemyslaw Frasunek says versions 6.x through 6.4 of  
> > FreeBSD
> > has a security bug. He says he notified the FreeBSD Foundation on  
> > August
> > 29 and never got a response. We'll be writing a brief article about
> > this. Please let me know ASAP if someone cares to comment.
> >
> > Kind regards,
> >
> > Dan Goodin
> > 415-495-5411
> 
> Hasn't 6.x been End Of Lifed?

Not at all.  The 6.2 and earlier releases have been EOL'd, but 6.3 and 6.4
are still supported by the security team.  6.4 (and 6.x in general) will
be supported until November 2010, which is more than a year away.
(See http://security.freebsd.org/ for official EOL information.)

> I mean considering that 8.0 is expected  
> to be released either later this month or early next, and 6.x will be  
> officially retired at that time, is it possible that this was  
> overlooked? Personally I don't think it's ever good to overlook  
> security, especially in the case of a root exploit.
> 
> http://www.freebsd.org/releases/6.4R/announce.html

-- 

Erik Trulsson
ertr1...@student.uu.se
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Richard Mahlerwein
--- On Mon, 9/14/09, Polytropon  wrote:

From: Polytropon 
Subject: Re: Dump/Restore?
To: mahle...@yahoo.com
Cc: freebsd-questions@freebsd.org, "Chris Maness" 
Date: Monday, September 14, 2009, 4:37 PM

On Mon, 14 Sep 2009 05:45:01 -0700 (PDT), Richard Mahlerwein 
 wrote:
> In the "restore > : prompt you can 
> 
> "add "
> 
> to add it to the restore list.  Works with folders, too.
                                             
Excuse me, just a little terminology note: FreeBSD has directories,
not folders. It doesn't have sheets of papers instead of files,
too. :-)

Pie on my face.  I work too much with multiple operating systems.  *sigh*

BTW, I also work and develop heavily with a (non BSD, non-open source) document 
imaging and workflow management software, so you probably will, at some point, 
see me confuse files and sheets of paper.  I will not mind a gentle reminder 
just like the above when I do that . :)





___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Matthew Seaman

Mikel King wrote:

Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected to 
be released either later this month or early next, and 6.x will be 
officially retired at that time, is it possible that this was 
overlooked? Personally I don't think it's ever good to overlook 
security, especially in the case of a root exploit.


Nope.  6.3 (RELENG_6_3) will be supported until at least 31 January 2010
while 6.4 (RELENG_6_4) and 6-STABLE (RELENG_6) will be supported until at
least 30 November 2010 by the Security team.

There are no more releases planned from the RELENG_6 branch, but that's not
the same as 'unsupported' -- patches and advisories will be issued until the
dates listed, and quite usually beyond that.

Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Jason

On Mon, Sep 14, 2009 at 05:21:48PM -0400, Mikel King thus spake:


On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote:


Hello,

Dan Goodin, a reporter at technology news website The Register.
Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of
FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on
August
29 and never got a response. We'll be writing a brief article about
this. Please let me know ASAP if someone cares to comment.

Kind regards,

Dan Goodin
415-495-5411


Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected
to be released either later this month or early next, and 6.x will be
officially retired at that time, is it possible that this was
overlooked? Personally I don't think it's ever good to overlook
security, especially in the case of a root exploit.

http://www.freebsd.org/releases/6.4R/announce.html


Looks like the EOL will be: November 30, 2010

http://security.freebsd.org/



Regards,
Mikel King
CEO, Olivent Technologies
Senior Editor, Daemon News
Columnist, BSD Magazine
6 Alpine Court,
Medford, NY 11763

skype:mikel.king
http://olivent.com
http://mikelking.com
http://twitter.com/mikelking

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: where to put `startx` serverargs

2009-09-14 Thread ill...@gmail.com
2009/9/12 Alexander Best :
> hi there,
>
> since i don't use ipv6 X produces the following warning when starting up:
>
> _XSERVTransSocketOpenCOTSServer: Unable to open socket for inet6
> _XSERVTransOpen: transport open failed for inet6/otaku:0
> _XSERVTransMakeAllCOTSServerListeners: failed to open listener for inet6
>
> so i'd to start X this way: `startx -- -nolisten inet6`.
>
> i looked through the man pages of startx and xinit but couldn't find where to
> put the argument "-nolisten inet6" so `startx` picks it up automatically.
>
> currently i have this extra line in /usr/local/bin/startx: "serverargs =
> -nolisten inet6" but that's just a hack because i couldn't find any
> information on where to put the serverarg.
>

It seems to me that there should be a place in /etc/X11/xorg.conf
However
I cannot find it.

I know it seems a bit clunky, but I would just put a short script in
my $HOME/scripts (or wherever) rather than futzing with the
actual startx script.

-- 
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: podcast on google? Or other?

2009-09-14 Thread Polytropon
On Mon, 14 Sep 2009 14:02:18 -0700, Gary Kline  wrote:
> 
> hey guys, i'll deny i ever wrote this because i *should* know already...
> but don't.  i've clicked on several podcast sites and they show links to 
> yahoo and a couple
> others.  does google have this [POD] icon?  OR what do i install here on 
> freebsd-7.1 that i
> can use to listen to podcasts or otherwise play old/archived streams?  

What format are those podcasts in? In OGG/Vorbis or MP3 format,
you can use your favourite music player (mine is xmms) and use
it for the specific media type; the browser's configuration
editor should allow you to do so.

The xmms program is able to play streamed media content, but
mplayer should be fine, too.



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Matthew Seaman

Dan Goodin wrote:

Hello,

Dan Goodin, a reporter at technology news website The Register. Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on August
29 and never got a response. We'll be writing a brief article about
this. Please let me know ASAP if someone cares to comment.

Kind regards,

Dan Goodin
415-495-5411

 Original Message 
Subject: Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer
dereference
Date: Sun, 13 Sep 2009 10:49:33 +0200
From: Przemyslaw Frasunek 
Organization: frasunek.com
To: full-disclos...@lists.grok.org.uk, bugt...@securityfocus.com
References: <4a9028ac.9080...@freebsd.lublin.pl>

Przemyslaw Frasunek pisze:

FreeBSD <= 6.1 suffers from classical check/use race condition on SMP


There is yet another kqueue related vulnerability. It affects 6.x, up to
6.4-STABLE. FreeBSD security team was notified on 29th Aug, but there is no
response until now, so I won't publish any details.

Sucessful exploitation yields local root and allows to exit from jail.
For now,
you can see demo on:

http://www.vimeo.com/6554787



You need to contact the Security Officer to get the official position.  That's 
security-offi...@freebsd.org

I don't know why you seem to think this should have been reported to the FreeBSD
Foundation.  They aren't the responsible parties.  What to do is clearly 
explained
on this web page: http://www.freebsd.org/security/security.html (which 
Przemyslaw for one seems to have read).


Cheers,

Matthew

--
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
 Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
 Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Mikel King


On Sep 14, 2009, at 3:12 PM, Dan Goodin wrote:


Hello,

Dan Goodin, a reporter at technology news website The Register.  
Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of  
FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on  
August

29 and never got a response. We'll be writing a brief article about
this. Please let me know ASAP if someone cares to comment.

Kind regards,

Dan Goodin
415-495-5411


Hasn't 6.x been End Of Lifed? I mean considering that 8.0 is expected  
to be released either later this month or early next, and 6.x will be  
officially retired at that time, is it possible that this was  
overlooked? Personally I don't think it's ever good to overlook  
security, especially in the case of a root exploit.


http://www.freebsd.org/releases/6.4R/announce.html

Regards,
Mikel King
CEO, Olivent Technologies
Senior Editor, Daemon News
Columnist, BSD Magazine
6 Alpine Court,
Medford, NY 11763

skype:mikel.king
http://olivent.com
http://mikelking.com
http://twitter.com/mikelking

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread ill...@gmail.com
Am 2009/9/14 Dan Goodin  writhed:
> Hello,
>
> Dan Goodin, a reporter at technology news website The Register. Security
> researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
> has a security bug. He says he notified the FreeBSD Foundation on August
> 29 and never got a response. We'll be writing a brief article about
> this. Please let me know ASAP if someone cares to comment.
>

Has anyone submitted a PR about this?

-- 
--
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ftpd virtual www hosts

2009-09-14 Thread Polytropon
On Mon, 14 Sep 2009 12:10:35 -0400, Peasoup  wrote:
> Next I go to vipw to change the user's home dir to something in the  
> www area, which is owned by www:www. This is where my problems start  
> with being denied. I am assuming that uploading to the unprivileged  
> user www is getting in my way.

A common way is to create a specific directory within the
user's home directory, such as

~/public_html/

which is accessed by the web server to obtain the files to
be served. The user has his regular FTP access to his home
directory, so he can put files into ~/public_html/ or just
create a symlink into this directory from somewhere else in
his home directory.

I haven't done much webserver stuff recently, and I'm not
quite sure I did understand your question correctly, so my
suggestion could already be outdated.



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: rebinding keys to functions

2009-09-14 Thread Polytropon
On Mon, 14 Sep 2009 14:34:29 -0400, Robert Huff  wrote:
> Roland Smith writes:
> 
> >  > My laptop has a bunch of volume-up/down/mute internet/mail/etc 
> >  > keys.  How do I map each of them to run a specific shell
> >  > command when pressed? 
> >  
> >  That depends on a couple of things (assuming you're running the X
> >  window system, I don't know if it is even possible on the
> >  console).
> >  
> >  First you have to make sure that you actually can see the key
> >  signals. In X you can test that with xev(1).
> 
>   If this is what I think it is, he probably can't.

For most laptop keyboards, there was (as already explained) a
specific system that handled Fn+PFx outside the OS so it worked
always. Even my old Toshiba T1600 can do that.

"Modern" laptops do it differently: Fn+PFx key combinations
have to be picked up by a specific driver that "listens" to
stange and custom keycodes outside the standard range, and then
communicate the selected purpose to the OS in order to perform
the action, e. g. raise the volume.

Even worse, "modern" laptops have replaced the simple switches
in the earophone sockets. In the past, there was a mechanical
switch that switched off the internal speakers when you inserted
a 3,5mm jack. Today, a proprietary driver has to detect if a
jack is inserted, and then switch of the speakers and then
switch on the output of the socket.



>   I have a Logitech iTouch keyboard; it has eighteen buttons and
> two dials.  None of them register under xev.

The Apple USB keyboard is something similar. Allthough most keys
show up in xev, F13 and the four additional four keys on the right
(volume, eject) don't show up. I've been advised that it is quite
possible to look into the ukbd driver subsystem, add some
debugging and log what happens when those keys are pressed; they
can then be assigned a specific number which afterwards resolves
tp a certain key symbol. Would be great if they worked...

But life can be so easy when you've got good hardware, such as the
Sun USB type 6 keyboard. The 2x5 and 1 keys on the left as well
as the four keys on the top right show up in xev. I'm using a
xmodmap file ~/.xmodmaprc to map them to a certain (arbitrary)
key name, like

! Stop
keycode 145 = F14
! Meta links
keycode 115 = Meta_L
! Meta rechte
keycode 116 = Meta_R
! Compose
keycode 117 = Multi_key
add mod4 = Multi_key

After that, I can use the config tool of WindowMaker to connect
those key names to actions, like rolling up or hiding windows,
running specific programs or performing other actions (e. g.
moon key = log off, Ctrl+Alt+Moon = shutdown now; help = xlock).



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


podcast on google? Or other?

2009-09-14 Thread Gary Kline

hey guys, i'll deny i ever wrote this because i *should* know already...
but don't.  i've clicked on several podcast sites and they show links to yahoo 
and a couple
others.  does google have this [POD] icon?  OR what do i install here on 
freebsd-7.1 that i
can use to listen to podcasts or otherwise play old/archived streams?  

tia,



-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
http://jottings.thought.org   http://transfinite.thought.org
The 5.67a release of Jottings: http://jottings.thought.org/index.php

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Approx. restore time estimate

2009-09-14 Thread jaymax

I do not expect an exact or precise answer here, given all the subjective &
dependent parameters.

Just a rough ballpark approximation, what time frame should a restore occur
in?

param :-
an ~1Ghz system, running 6.x O/S, dumpfile ~ 30 Gb, UFS2 file systems w/
default blocksize, target directory 400 Gb w/ > 190 Gb free capacity,
minimal use system booted from Fixit

Just wanted to get an idea if I am going anywhere or workig fast being stuck
somewhere or nowhere.

Thanks
-- 
View this message in context: 
http://www.nabble.com/Approx.-restore-time-estimate-tp25443580p25443580.html
Sent from the freebsd-questions mailing list archive at Nabble.com.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Polytropon
On Mon, 14 Sep 2009 05:45:01 -0700 (PDT), Richard Mahlerwein 
 wrote:
> In the "restore > : prompt you can 
> 
> "add "
> 
> to add it to the restore list.  Works with folders, too.
 
Excuse me, just a little terminology note: FreeBSD has directories,
not folders. It doesn't have sheets of papers instead of files,
too. :-)



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Remounting a drive as read/write crashes the system and no dmesg.boot

2009-09-14 Thread Mel Flynn
On Saturday 22 August 2009 02:40:53 Scott Schappell wrote:
> On Aug 21, 2009, at 17:32:13, Mel Flynn wrote:
> > On Friday 21 August 2009 07:34:11 Scott Schappell wrote:
> >> Looking at info.0 I see:
> >>
> >>
> >> Dump header from device /dev/ad0s1b
> >>   Architecture: i386
> >>   Architecture Version: 2
> >>   Dump Length: 155131904B (147 MB)
> >>   Blocksize: 512
> >>   Dumptime: Fri Aug 21 08:27:45 2009
> >>   Hostname: arthur.silvertree.org
> >>   Magic: FreeBSD Kernel Dump
> >>   Version String: FreeBSD 7.2-RELEASE-p3 #1: Fri Aug 14 13:27:47 PDT
> >> 2009
> >> r...@arthur.silvertree.org:/usr/obj/usr/src/sys/ARTHUR
> >>   Panic String: ffs_sync: rofs mod
> >>   Dump Parity: 2778312054
> >>   Bounds: 0
> >>   Dump Status: good
> >>
> >> This is interesting:
> >>
> >> "Panic String: ffs_sync: rofs mod"
> >>
> >> It looks I'm guessing this is saying "read only file system
> >> modified".  So it looks like the problem is with mount?
> >>
> >> If there's anything you want me to pull from the vmcore.0 let me
> >> know.
> >>
> >> Again, this happens with the drive mounted RO from fstab. Unmounted
> >> then mount -o rw /backup.
> >>
> >> Something is amiss, and first blush doesn't seem to be hardware
> >> related.
> >
> > There should be a backtrace in info.0 already. That part contains more
> > relevant information.
> 
> Nope, that's all info.0 contains.

Follow up. Temp fix available here:
http://www.freebsd.org/cgi/getmsg.cgi?fetch=193338+0+current/freebsd-current
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Can't install FreeBSD 7.2-RELEASE and 8.0-BETA4

2009-09-14 Thread Chris Whitehouse

Uwe Laverenz wrote:

Am 13.09.2009 14:11, schrieb Zbigniew Komarnicki:


run_interrupt_driven_hooks: still waiting after 60 seconds for xpt_config
run_interrupt_driven_hooks: still waiting after 120 seconds for 
xpt_config
run_interrupt_driven_hooks: still waiting after 180 seconds for 
xpt_config
run_interrupt_driven_hooks: still waiting after 240 seconds for 
xpt_config
run_interrupt_driven_hooks: still waiting after 300 seconds for 
xpt_config

panic: run_interrupt_driven_config_hooks: waited too long
cpuid=0
KDB: enter: panic
[thread pid 0 tid 10]
Stopped at   kdb_enter+0x3d:  movq $0,0x68d1e0(%rip)
db>

and thats all. Is maybe also someone also have such problem?


Yes, several people reported this problem. There is a workaround that 
might help: disable the firewire device (IEEE 1394) in the BIOS of your 
machine and try again.


cu,
Uwe
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"freebsd-questions-unsubscr...@freebsd.org"



Hi,

I had the same problem on my ASUS M3N78-EM motherboard, see pr 136327. 
If you can't disable firewire you may be able to install a kernel with 
device sbp disabled. It's a bit of a fiddle, particularly for a laptop. 
You would have to


- remove your hard drive and install it in another laptop or a usb hard 
drive caddy which you then plug into another computer.

- install freebsd
- build and install a new kernel with device sbp disabled
- restore the hard disk to your laptop, see if it boots.

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


reporter on deadline seeks comment about reported security bug in FreeBSD

2009-09-14 Thread Dan Goodin
Hello,

Dan Goodin, a reporter at technology news website The Register. Security
researcher Przemyslaw Frasunek says versions 6.x through 6.4 of FreeBSD
has a security bug. He says he notified the FreeBSD Foundation on August
29 and never got a response. We'll be writing a brief article about
this. Please let me know ASAP if someone cares to comment.

Kind regards,

Dan Goodin
415-495-5411

 Original Message 
Subject: Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer
dereference
Date: Sun, 13 Sep 2009 10:49:33 +0200
From: Przemyslaw Frasunek 
Organization: frasunek.com
To: full-disclos...@lists.grok.org.uk, bugt...@securityfocus.com
References: <4a9028ac.9080...@freebsd.lublin.pl>

Przemyslaw Frasunek pisze:
> FreeBSD <= 6.1 suffers from classical check/use race condition on SMP

There is yet another kqueue related vulnerability. It affects 6.x, up to
6.4-STABLE. FreeBSD security team was notified on 29th Aug, but there is no
response until now, so I won't publish any details.

Sucessful exploitation yields local root and allows to exit from jail.
For now,
you can see demo on:

http://www.vimeo.com/6554787

-- 
* Fido: 2:480/124 ** WWW: http://www.frasunek.com ** NICHDL: PMF9-RIPE *
* Jabber ID: veng...@czuby.pl ** PGP ID: 2578FCAD ** HAM-RADIO: SQ5JIV *

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Traffic Shaping Bridge with Dummynet

2009-09-14 Thread Dan D Niles

I am trying to do traffic shaping using a bridge on FreeBSD 7.1.

I have the bridge configured and it works fine.  It looks like this:

rest of network <-> xl0 <-> bridge0 <-> xl1 <-> side to be shaped

It works with the following set of ipfw rules (pipes in but 
unlimited bw):

network=10.10.10.0/24
limit=0
ipfw -q -f flush

ipfw -q pipe 1000 config mask dst-ip 0x00ff bw $limit
ipfw -q add pipe 1000 ip from any to $network via xl1

ipfw -q pipe 1001 config mask src-ip 0x00ff bw $limit
ipfw -q add pipe 1001 ip from $network to any via xl1

ipfw -q add 6 allow all from any to any

If I change the limit to 1Mbit/s (or anything else) it stops passing
traffic.  I used tcpdump and I can see the traffic on the bridge but I
cannot see it after the bridge.  However "ipfw -a list" shows the counts
for the pipe going up, which doesn't make sense to me.

I've tried adding:
ipfw -q add allow all from any to any via bridge0
ipfw -q add allow all from any to any via xl0
before the pipes.  I also tried moving the pipes to bridge0 and xl0.

The docs on bridging
(http://www.freebsd.org/doc/en/books/handbook/network-bridging.html)
says "The bridge can be used as a traffic shaper with altq(4) or
dummynet(4)."

So what am I doing wrong?  What else do I need to do to limit the
bandwidth over a bridge?

Thanks,

Dan


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: rebinding keys to functions

2009-09-14 Thread Robert Huff
Roland Smith writes:

>  > My laptop has a bunch of volume-up/down/mute internet/mail/etc 
>  > keys.  How do I map each of them to run a specific shell
>  > command when pressed? 
>  
>  That depends on a couple of things (assuming you're running the X
>  window system, I don't know if it is even possible on the
>  console).
>  
>  First you have to make sure that you actually can see the key
>  signals. In X you can test that with xev(1).

If this is what I think it is, he probably can't.
I have a Logitech iTouch keyboard; it has eighteen buttons and
two dials.  None of them register under xev.


Robert Huff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Non-root user and accept() or listen()

2009-09-14 Thread Chris Rees
2009/9/14 Freminlins :
> Hi,
>
> I am not sure if this exists (but don't think so), so I am asking.
>
> Is there a sysctl type thing to disallow non-root users, or indeed any
> specified user or group, from running a program with listen() ?
>
> What I am looking at is improving network security, such that if a user
> account is compromised it can then not be used to run a dodgy web
> server/whatever on a non-privileged port. Although I can firewall off any
> port I wish, it seems like an obvious thing to disallow any user from
> opening a listening socket in the first place. I am suggesting something
> like "sysctl user.socket_listen" with enable or disable.
>
> Am I being really daft? Or does this exist already?
>
>
> Cheers,
> Frem.


Isn't this a bit drastic? Listening sockets are opened by very many
types of processes, as well as remembering that sendmail, BIND, and
others don't actually run as root... I suppose it'd be possible, but
would it actually be useful?

BTW, there may be an ipfw rule for this, I'll have to look it up when
my servers are back online!

Chris



-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: rebinding keys to functions

2009-09-14 Thread Roland Smith
On Mon, Sep 14, 2009 at 04:52:56PM +, Eitan Adler wrote:
> My laptop has a bunch of volume-up/down/mute internet/mail/etc keys.
> How do I map each of them to run a specific shell command when pressed?

That depends on a couple of things (assuming you're running the X window
system, I don't know if it is even possible on the console).

First you have to make sure that you actually can see the key signals. In X
you can test that with xev(1).

How you can bind keypresses to commands in X depends on the window manager or
desktop environment you are using. See the revelant documentation.

On my laptop (centrino 2 platform, PM 45 chipset), using Fn combination works
to change speaker volume and screen brightness, but this is done outside the
OS. The X server doesn't even 'see' those keypresses.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpxHGoN5b3qf.pgp
Description: PGP signature


Re: port math/gnuplot hangs and ignores "kill -9"

2009-09-14 Thread Roland Smith
On Mon, Sep 14, 2009 at 04:42:41PM +0100, Anton Shterenlikht wrote:
> On Mon, Sep 14, 2009 at 04:37:28PM +0100, Anton Shterenlikht wrote:
> > on ia64 HEAD,  gnuplot-4.2.6, any plot command
> > hangs the program. top shows gnuplot is using 100% of CPU,
> > yeat CPU time is zero:
> > 
> >   PIDUIDTHR PRI NICE   SIZERES STATE   C   TIME   WCPU COMMAND
> > 60071   1001  2  480 98008K 51424K CPU11   0:00 100.00% gnuplot
> > 
> > kill -9 60071, either from my account, or from root,
> > has no effect, the process is still there.
> > 
> > I cannot find a way to terminate this hanged process without reboot.
> > 
> > This seems to be a regression.
> 
> running gnuplot in batch (non-interactive) mode seems fine, so
> the problem seems to be with the screen terminal.
> 
> I'm mostly puzzled by the fact that I cannot kill the process..

It could be that the process is stuck in the 'D' state (uninterruptable wait).
You can veryfiy that by running 'ps -u' and looking in the eight column when
gnuplot is running. 

Does the window with the plot actually appear?
 
Interactive use of gnuplot-4.2.6 is fine on amd64 7.2-RELEASE-p2.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpStp7VLkmMQ.pgp
Description: PGP signature


rebinding keys to functions

2009-09-14 Thread Eitan Adler
My laptop has a bunch of volume-up/down/mute internet/mail/etc keys.
How do I map each of them to run a specific shell command when pressed?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Non-root user and accept() or listen()

2009-09-14 Thread Freminlins
Hi,

I am not sure if this exists (but don't think so), so I am asking.

Is there a sysctl type thing to disallow non-root users, or indeed any
specified user or group, from running a program with listen() ?

What I am looking at is improving network security, such that if a user
account is compromised it can then not be used to run a dodgy web
server/whatever on a non-privileged port. Although I can firewall off any
port I wish, it seems like an obvious thing to disallow any user from
opening a listening socket in the first place. I am suggesting something
like "sysctl user.socket_listen" with enable or disable.

Am I being really daft? Or does this exist already?


Cheers,
Frem.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: linux-pango won't install

2009-09-14 Thread Daniel Bye
On Sat, Sep 12, 2009 at 10:24:21PM -0600, Chad Perrin wrote:
> On Sat, Sep 12, 2009 at 02:19:22PM +0400, Boris Samorodov wrote:
> > On Fri, 11 Sep 2009 23:01:23 -0600 Chad Perrin wrote:
> > 
> > > How long has this been broken for 7.2?  Considering all the stuff that
> > > depends on linux-pango, I'm surprised it hasn't been fixed.
> > 
> > It will be broken until someone provide an URL to non-vulnerable
> > RPM package.
> 
> Daniel Bye's comments seem to indicate that FreeBSD 8.x doesn't have this
> problem.  Did I misunderstand?

FreeBSD 8 uses linux-f10 as its default linuxulator, and in that, pango
has been updated to 1.22.3, which doesn't seem to suffer from the same
vulnerabilities. Or at least, they haven't yet been exposed! ;-)

You may be able to use f10 on 7.2 - set compat.linux.osrelease=2.6.16 in
/etc/sysctl.conf, and 

OVERRIDE_LINUX_BASE_PORT=f10
OVERRIDE_LINUX_NONBASE_PORTS=f10

in /etc/make.conf, then reinstall all your linux stuff. I did this before
moving on to 8BETA1 and it worked OK. I think I ended up deleting all the
old stuff, before installing afresh. As all the packages are already 
compiled, it shouldn't take long.

Dan

-- 
Daniel Bye
 _
  ASCII ribbon campaign ( )
 - against HTML, vCards and  X
- proprietary attachments in e-mail / \


pgpBBmbqIrFzL.pgp
Description: PGP signature


ftpd virtual www hosts

2009-09-14 Thread Peasoup

Hi

Im new to the list, hope I have the right one, but if not, please let  
me know. And forgive me if I don't speak clear unix.


I am trying to set up a webserver, with virtual hosting accounts.  
Naturally, I want to be able to give users the ability to upload files  
to their web directories.


Setting up basic ftp is not an issue for me. I can set up a user at / 
usr/home/, and can upload via ftp just fine. Of course that  
directory is owned by user:user. I also get ftpchroot just fine.


Next I go to vipw to change the user's home dir to something in the  
www area, which is owned by www:www. This is where my problems start  
with being denied. I am assuming that uploading to the unprivileged  
user www is getting in my way.


I have tried to play with groups, ownership and permissions, etc, but  
I am not getting very far. I thought I'd see a boatload of information  
on Google about this. Any help is much appreciated, something that  
will give a user enough rights to upload his site, while at the same  
time keeping the webserver running as unprivileged as possible.


I am new to freebsd. I was using wu on solaris prior to this... will  
the freebsd ftpd do what I want?



Thank you

Matt


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: port math/gnuplot hangs and ignores "kill -9"

2009-09-14 Thread Anton Shterenlikht
On Mon, Sep 14, 2009 at 04:37:28PM +0100, Anton Shterenlikht wrote:
> on ia64 HEAD,  gnuplot-4.2.6, any plot command
> hangs the program. top shows gnuplot is using 100% of CPU,
> yeat CPU time is zero:
> 
>   PIDUIDTHR PRI NICE   SIZERES STATE   C   TIME   WCPU COMMAND
> 60071   1001  2  480 98008K 51424K CPU11   0:00 100.00% gnuplot
> 
> kill -9 60071, either from my account, or from root,
> has no effect, the process is still there.
> 
> I cannot find a way to terminate this hanged process without reboot.
> 
> This seems to be a regression.

running gnuplot in batch (non-interactive) mode seems fine, so
the problem seems to be with the screen terminal.

I'm mostly puzzled by the fact that I cannot kill the process..

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 331 5924
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


port math/gnuplot hangs and ignores "kill -9"

2009-09-14 Thread Anton Shterenlikht
on ia64 HEAD,  gnuplot-4.2.6, any plot command
hangs the program. top shows gnuplot is using 100% of CPU,
yeat CPU time is zero:

  PIDUIDTHR PRI NICE   SIZERES STATE   C   TIME   WCPU COMMAND
60071   1001  2  480 98008K 51424K CPU11   0:00 100.00% gnuplot

kill -9 60071, either from my account, or from root,
has no effect, the process is still there.

I cannot find a way to terminate this hanged process without reboot.

This seems to be a regression.

Please advise

many thanks

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 331 5924
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Routes to local addresses through lo0 on 8.0-BETA4

2009-09-14 Thread Nikos Vassiliadis

Sergey Listopad wrote:

Hi!

On  8.0-BETA4 gate I see than in routing table are number of "routes"
(link# records) through lo0 for some local addresses:

hole> netstat -rnfinet | grep lo0
127.0.0.1  link#7 UH  030764lo0
172.22.254.10  link#7 UHS 00lo0
192.168.253.254link#7 UHS 00lo0




Is it normal.
On older FreeBSD I see link# records only for network prefix.



Yes, it is normal. It's one of the user-visible changes from
the ARP and NDP rewrite in 8.0.

Nikos
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Jerry McAllister
On Sun, Sep 13, 2009 at 06:50:05PM -0700, Chris Maness wrote:

> On Sun, Sep 13, 2009 at 6:15 PM, Chris Maness  wrote:
> > I level 0 dump of my server.  I lost a file that I need back.  Is it
> > possible to use restore like tar and explode it into a directory
> > instead of a pristine partition/mount?  Or even better, is it possible
> > to just extract a single file without exploding the whole tape dump?
> >
> > Sorry if the question seems stupid.
> >
> > Chris KQ6UP
> >
> 
> Sorry, I was reading the restore man from my mac, and it was not as
> clear.  The restore does not seem to work from my mac (this is where
> my backup dumps reside as I have two massive HDs).  I guess the mac
> restore would only work with HFS+ and not UFS.  I guess the only way
> would be to move the massive dump file back over to the FreeBSD
> server.

The dump is just a file and it should not matter where it is
stored, but you will have to use some network access type thing
such as an rsh or an NFS connection to read it.

Another thing is that restores need to be done on the same OS
that the dumps were written - regardless of where they are stored.
dump/restore depends on knowing something about the underlying
filesystem, so it is not transferable from one system to another
and often even between one OS version to another, like tar tends
to be.But, you can make the dump file move between where it is 
stored and a system that can restore from it using one of the 
network protocols.

jerry


> 
> Thanks,
> Chris KQ6UP
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
> 
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Jerry McAllister
On Sun, Sep 13, 2009 at 06:15:55PM -0700, Chris Maness wrote:

> I level 0 dump of my server.  I lost a file that I need back.  Is it
> possible to use restore like tar and explode it into a directory
> instead of a pristine partition/mount?  Or even better, is it possible
> to just extract a single file without exploding the whole tape dump?

Yes, it is easily done. 
Just use the 'interactive' option.   


First, be clear where you want the restores file[s] to go.
The official way to do the interactive option is to cd in to
the bottom level of the filesystem it is in and do it from there.
Restore will then put the files in the directories where they
were when the dump was made.  So, if the file[s] were in /home/joes/files/
cd to /home and do the restore.   It will take care of knowing 
about the joes and files subdirectories and build them if they
are not there.

But, really the general recommended way (and the way I do it) to do 
an interactive restore is to create a designated directory for it
and cd in to that.   It can be anywhere there is room for the files.

So, for example, on some systems I have a large amount of extra space
in a filesystem I mount as /work.   Within that I create a directory
I can recover  (for lack of any more imaginative name).  I cd to
the /work/recover directory and do the interactive restore.

eg do:   

   cd /work/recover
   restore -if  dump_device/file

Then fish around amongst the directories.   When you find the one[s] you
need to restore, just do 
  add filename
You can keep going and add several files and directories.  
When you have all that you want/need, then type
  extract

It will ask you what tape to start with.  If the dump is a file
or of there is only one tape or other device, type 1 If there are 
more than one tape, type in the number of the last tape.  It will
search backward through the list of tapes/devices until it finds the
files.  eg.   if there are 7 tapes in the level 0 dump set, start
with 7, then give it 6 and then 5, etc.   It will quit asking when
it finds the files.

Finally, it will ask if you want to set ownership of .
Say no unless you have a good reason for doing otherwise.

Now, if you have used a separate directory as I suggest above, 
tell restore to quit and then look at the file[s] to make sure
they are all right and then manually move then to whichever directory
you want.   You can then delete them from /work/recover but leave
that directory around for when you need it again.   

This is good for any circumstance when you want to pull just one
of a few files out of a dump (or a tar file).

I do a similar thing when I untar stuff I have moved over.
I make a  /work/unroll  directory and untar stuff in there
and move whay I want to where I want it.  

This may seem to be an extra unnecessary step, but it cuts down
on errors, in my handling directories and file locations.

jerry

> 
> Sorry if the question seems stupid.
> 
> Chris KQ6UP
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Chris Rees
2009/9/14 Chris Maness :
> utis...@googlemail.com wrote:
>>
>> On 14 Sep 2009 02:50, Chris Maness  wrote:
>> > On Sun, Sep 13, 2009 at 6:15 PM, Chris Maness ch...@chrismaness.com>
>> > wrote:
>> >
>> > > I level 0 dump of my server.  I lost a file that I need back.  Is it
>> >
>> > > possible to use restore like tar and explode it into a directory
>> >
>> > > instead of a pristine partition/mount?  Or even better, is it possible
>> >
>> > > to just extract a single file without exploding the whole tape dump?
>> >
>> > >
>> >
>> > > Sorry if the question seems stupid.
>> >
>> > >
>> >
>> > > Chris KQ6UP
>> >
>> > >
>> >
>> >
>> >
>> > Sorry, I was reading the restore man from my mac, and it was not as
>> >
>> > clear.  The restore does not seem to work from my mac (this is where
>> >
>> > my backup dumps reside as I have two massive HDs).  I guess the mac
>> >
>> > restore would only work with HFS+ and not UFS.  I guess the only way
>> >
>> > would be to move the massive dump file back over to the FreeBSD
>> >
>> > server.
>> >
>> >
>> >
>> > Thanks,
>> >
>> > Chris KQ6UP
>> >
>> > ___
>>
>> Try using NFS or cat over ssh, something like
>>
>> $ ssh my_mac 'cat dumpfile' | restore -if -
>>
>> restore treats the file as a tape, so it doesn't pull any bytes until you
>> ask it to. This should be the least network intensive way of doing it
>>
>>
>> Good luck!
>>
>> Chris
>
> Thanks, that looks like a pretty cool trick.
>
> Chris
>

Let me know how you get on with it, I gzip my dumps and can pipe
together commands like that, so it should work!

Chris

-- 
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in a mailing list?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Brent Jones - Selection Into Strathmore's Who's Who

2009-09-14 Thread Strathmore Who's Who
Dear Brent Jones, 

It is my pleasure to inform you that on August 31st, 2009 your information was 
reviewed and accepted for inclusion in the 2009/2010 edition of our registry. 
 
Strathmore's Who's Who each year, recognizes and selects key executives, 
professionals and organizations in all disciplines and industries for 
outstanding business and professional achievements. 
 
This recognition is shared by those who have reached a distinguished level of 
success in their chosen profession. 
 
Please take a moment to complete the invitation by clicking on the link below. 
We ask that you complete it carefully, as it will be reviewed by our editorial 
department. 

http://www.strathmorewwonlineform.net

 
** Please complete the online link by September 30th. 
 
Strathmore's Who's Who is pleased to inform you that there are no fees or dues 
to be included in the publication. 
 
On behalf of the CEO and our esteemed staff, we wish you continued success. 
Sincerely, 
 
J.Edward Simmons
Vice President, Research Division 

Strathmore's Who's Who

This email was sent to freebsd-questions@freebsd.org, by 
Premiere Marketing

23-35A Steinway Street 
Astoria, NY 11105 United States 

If you do not wish to receive future e-mail 
from Premiere Marketing, please use the link below.

http://rm.resultsmail.com/unsubscribe.cfm?uid=ad64c3f6-a7a2-43a7-82df-17ac52ec97d7&mid=0bd7f7e4-d0bb-423f-808b-03ae0afaa1a8&route=http%3A%2F%2Frm%2Eresultsmail%2Ecom%2Funsubscribed%2Ecfm

Powered by ResultsMail (http://www.resultsmail.com/)

ResultsMail Privacy Policy: http://www.resultsmail.com/privacy
ResultsMail Permission Email Policy: http://www.resultsmail.com/permission
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: SVG and dependence on Firefox2.x?

2009-09-14 Thread Kurt Buff
On Mon, Sep 14, 2009 at 01:55, Giorgos Keramidas
 wrote:
> On Sun, 13 Sep 2009 14:59:51 -0700, Kurt Buff  wrote:
>> I notice that for both The Gimp and graphviz, and probably for others
>> as well, marking them or their dependencies as able to render SVG
>> invokes installation of FF 2.x.
>>
>> This fails, as the port is marked as forbidden, and then the
>> installation of these graphics programs fails.
>>
>> Not a huge deal, but any way to work around it?
>
> You can build most of the ports that depend on GECKO with the following
> in your `/etc/make.conf' file:
>
>    WITH_GECKO=         libxul
>
> I just finished rebuilding my packages in a chroot with this option, and
> firefox 2.x was not required for a full x11/gnome2 build:
>
> # pkg_info | fgrep firefo
> firefox-3.5.3,1     Web browser based on the browser portion of Mozilla
> #


Even better.

Many thanks.

Kurt
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: ath atheros 5424/2424 on the CQ60 Presario

2009-09-14 Thread Warren Block

On Mon, 14 Sep 2009, Kenneth wrote:


Anyone been able to use the ath driver on an atheros 5424/2424?  I have a 
Compaq Presario CQ60 and can not get the wireless light to turn blue?


For a working LED, the Atheros AR5007 (5424/2424) in my Acer requires

dev.ath.0.ledpin=3
dev.ath.0.softled=1

in /etc/sysctl.conf.  Works without that, just no LED.

-Warren Block * Rapid City, South Dakota USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Richard Mahlerwein
--- On Sun, 9/13/09, Chris Maness  wrote:

>From: Chris Maness 

>Subject: Re: Dump/Restore?

>To: freebsd-questions@freebsd.org

>Date: Sunday, September 13, 2009, 9:50 PM

>

>On Sun, Sep 13, 2009 at 6:15 PM, Chris Maness  wrote:
>> I level 0 dump of my server.  I lost a file that I need back.  Is it
>> possible to use restore like tar and explode it into a directory
>> instead of a pristine partition/mount?  Or even better, is it possible
>> to just extract a single file without exploding the whole tape dump?
>>
>> Sorry if the question seems stupid.
>>
>> Chris KQ6UP
>Sorry, I was reading the restore man from my mac, and it was not as
>clear.  The restore does not seem to work from my mac (this is where
>my backup dumps reside as I have two massive HDs).  I guess the mac
>restore would only work with HFS+ and not UFS.  I guess the only way
>would be to move the massive dump file back over to the FreeBSD
>server.


If the dump was made on the mac, it's highly likely restore will need to be run 
from the mac.  If it was made on freebsd, you'll likely need to run restore 
from freebsd.  Assuming you run it from the appropriate place..  


I don't have my Mac handy to check it's man pages, but in FreeBSD I believe in 
it that it would be 

#restore -i -f 
  or 
#restore -i 

Then use 'ls' and 'cd' to find the file you want.



In the "restore > : prompt you can 

"add "

to add it to the restore list.  Works with folders, too.



"extract"

to finally pull those out.


YMMV, so read the docs. I would suspect the Mac has similar options, though 
can't confirm that at the moment.

-Rich


  

  









___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Dump/Restore?

2009-09-14 Thread Chris Maness

utis...@googlemail.com wrote:

On 14 Sep 2009 02:50, Chris Maness  wrote:
> On Sun, Sep 13, 2009 at 6:15 PM, Chris Maness ch...@chrismaness.com> 
wrote:

>
> > I level 0 dump of my server.  I lost a file that I need back.  Is it
>
> > possible to use restore like tar and explode it into a directory
>
> > instead of a pristine partition/mount?  Or even better, is it possible
>
> > to just extract a single file without exploding the whole tape dump?
>
> >
>
> > Sorry if the question seems stupid.
>
> >
>
> > Chris KQ6UP
>
> >
>
>
>
> Sorry, I was reading the restore man from my mac, and it was not as
>
> clear.  The restore does not seem to work from my mac (this is where
>
> my backup dumps reside as I have two massive HDs).  I guess the mac
>
> restore would only work with HFS+ and not UFS.  I guess the only way
>
> would be to move the massive dump file back over to the FreeBSD
>
> server.
>
>
>
> Thanks,
>
> Chris KQ6UP
>
> ___

Try using NFS or cat over ssh, something like

$ ssh my_mac 'cat dumpfile' | restore -if -

restore treats the file as a tape, so it doesn't pull any bytes until 
you ask it to. This should be the least network intensive way of doing 
it



Good luck!

Chris 

Thanks, that looks like a pretty cool trick.

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Routes to local addresses through lo0 on 8.0-BETA4

2009-09-14 Thread Sergey Listopad
Hi!

On  8.0-BETA4 gate I see than in routing table are number of "routes"
(link# records) through lo0 for some local addresses:

hole> netstat -rnfinet | grep lo0
127.0.0.1  link#7 UH  030764lo0
172.22.254.10  link#7 UHS 00lo0
192.168.253.254link#7 UHS 00lo0

xl0: flags=8943 metric
0 mtu 1500
options=9
ether 00:04:76:16:5b:bc
inet 10.106.148.206 netmask 0xf000 broadcast 10.106.159.255
media: Ethernet autoselect (100baseTX )
status: active
[...]
xl2: flags=8843 metric 0 mtu 1500
options=9
ether 00:b0:d0:e1:6b:62
inet 192.168.253.254 netmask 0xff00 broadcast 192.168.253.255
media: Ethernet autoselect (100baseTX )
status: active
tun3: flags=8051 metric 0 mtu 1390
inet 172.22.254.10 --> 172.22.254.9 netmask 0x
Opened by PID 1971

Is it normal.
On older FreeBSD I see link# records only for network prefix.

-- 
S.Listopad
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: postgresql does not build correctly

2009-09-14 Thread Roland Smith
On Mon, Sep 14, 2009 at 01:11:51PM +0100, Graeme Dargie wrote:
> I have been trying on and off to set up postgresql for undernets
> gnuworld services for ircd.
> 
> Now according to the instructions below this should build with tcl
> support and you should end up with the following file
> 
> /usr/local/pgsql/bin/pgtclsh
> 
> Except you dont.

Try installing the databases/postgresql-tcltk port. 

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpyl0gk7bAPK.pgp
Description: PGP signature


postgresql does not build correctly

2009-09-14 Thread Graeme Dargie
I have been trying on and off to set up postgresql for undernets
gnuworld services for ircd.

 

Now according to the instructions below this should build with tcl
support and you should end up with the following file

/usr/local/pgsql/bin/pgtclsh

 

Except you dont.

 

Instructions 

 

freebsd:/root# tar -xzf postgresql-8.1.4.tar.gz
freebsd:/root# cd postgresql-8.1.4/
freebsd:/root/postgresql-8.1.4# ./configure --with-CXX \
   --enable-multibyte \
   --with-tcl --without-tk \
   --with-tclconfig=/usr/local/lib/tcl8.4  \
   --with-includes=/usr/local/include/tcl8.4 \
   --with-libraries=/usr/local/lib/tcl8.4
 
You need gmake 3.79 or above to build PostgreSQL (and you will also need
it for GNUworld later),
check you have it by running gmake --version, you should get something
like this :
Note: You will also need automake 1.6 or above in order to build
GNUworld.
 
freebsd:/root/postgresql-8.1.4# gmake --version
 
If you don't have gmake, you can get it here
 .
If you don't have automake 1.6+, you can get 1.7.9 here
 .
If that's ok, you can go on and build PostgreSQL for real, then install
it...
 
freebsd:/root/postgresql-8.1.4# gmake

 

 

freebsd:/root/postgresql-8.1.4# gmake install
 
If you are using bash as your shell programm, add the following line :
 
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/pgsql/lib
 
into /etc/profile.
zsh, sh and ksh use the same command in their respective .shrc .zshrc
.kshrc ~ files.
 
 
For csh and tcsh you will need to use setenv instead :
 
setenv LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/pgsql/lib
 
 
 
To check that your PostreSQL installation includes TCL support, check
that the following
file exists onto your system :
 
/usr/local/pgsql/bin/pgtclsh
 
 
 
 
Everything seems to work without any errors during the ./configure stage
and gmake install, I just dont end up with pgtclsh at the end of it.
 
 
Regards
 
Graeme

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: linux-pango won't install

2009-09-14 Thread ajtiM
On Monday 14 September 2009 02:37:09 Boris Samorodov wrote:
> On Sun, 13 Sep 2009 07:05:42 -0500 ajtiM wrote:
> > On Saturday 12 September 2009 05:19:22 Boris Samorodov wrote:
> > > On Fri, 11 Sep 2009 23:01:23 -0600 Chad Perrin wrote:
> > > > > If you still want to install the port, you could just add this to
> > > > > the /etc/make.conf file:
> > > > >
> > > > > # Pango
> > > > > .if $(.CURDIR:M*/x11-toolkits/linux-pango)
> > > > > DISABLE_VULNERABILITIES=yes
> > > > > .endif
> > > >
> > > > How long has this been broken for 7.2?  Considering all the stuff
> > > > that depends on linux-pango, I'm surprised it hasn't been fixed.
> > >
> > > It will be broken until someone provide an URL to non-vulnerable
> > > RPM package.
> >
> > Upgrade to the latest version of Pango (1.24 or later), available from
> > the Pango Web site
> > http://rpm.pbone.net/index.php3/stat...ch/pango/field[]/1/field[]/2
>
> Sorry, I didn't manage to find a Pango 1.24 package for Fedora Core 4.
> Can you post an URL?

I wil try but I don't know because Fedora core is very old.


-- 
Mitja
-
http://starikarp.redbubble.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


mutt users - text/enriched crashes mutt?

2009-09-14 Thread Anton Shterenlikht
I've got a text/enriched email, which crashes mutt-devel-1.5.20_1
This is FreeBSD 9.0-CURRENT ia64

When I open this email, mutt freezes, while the /tmp/mutt* file
is growing until it fills the partition, and I get a message
on the terminal, something "can't copy file, device full":

-rw---   1 mexas  wheel 215941357 14 Sep 10:48 
mutt-mech-cluster241-RHvpz380-0

Now, the manual, http://www.mutt.org/doc/manual/manual-5.html,
claims:

Mutt internally supports a number of MIME types,
including text/plain, text/enriched, ...

So is there something wrong with my installation, or
with this message?

Below is a copy of the offending email:

Please advise

many thanks

###

>From xxx@bristol.ac.uk Wed Sep  9 16:06:03 2009
Return-Path: 
Received: from some.host (localhost [127.0.0.1])
by some.host (8.14.3/8.14.3) with ESMTP id n89F62Uv090897
for ; Wed, 9 Sep 2009 16:06:02 +0100 (BST)
(envelope-from xxx@bristol.ac.uk)
Received: from epo.bris.ac.uk [137.222.10.55]
by some.host with IMAP (fetchmail-6.3.11)
for  (single-drop); Wed, 09 Sep 2009 16:06:02 +0100 
(BST)
Received: from epo.bris.ac.uk ([unix socket])
 by groucho (Cyrus v2.2.12) with LMTPA;
 Wed, 09 Sep 2009 16:02:51 +0100
X-Sieve: CMU Sieve 2.2
Received: from dirg.bris.ac.uk ([137.222.10.102])
by epo.bris.ac.uk with esmtp (Exim 4.69)
(envelope-from )
id 1MlOh9-0007Nc-Qu; Wed, 09 Sep 2009 16:02:51 +0100
Received: from ncsc.bris.ac.uk ([137.222.10.41])
by dirg.bris.ac.uk with esmtp (Exim 4.69)
(envelope-from )
id 1MlOh9-0004MN-Md; Wed, 09 Sep 2009 16:02:51 +0100
Received: from mech-sec144.men.bris.ac.uk ([137.222.184.144])
by ncsc.bris.ac.uk with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.67)
(envelope-from )
id 1MlOh9-00038K-GY; Wed, 09 Sep 2009 16:02:51 +0100
Date: Wed, 09 Sep 2009 16:02:50 +0100
From: MK zzz 
To: Anton Shterenlikht 
Subject: Re: UG projects students
Message-ID: 
In-Reply-To: <20090904113606.ga93...@some.host>
References:  <20090904113606.ga93...@some.host>
Originator-Info: 
login-token=Mulberry:01yZcCczgEb94E2Hvd9y/9L9wB+XiWCTsNMNUGAXuX9yzFd94=;
 token_authority=postmas...@bristol.ac.uk
X-Mailer: Mulberry/3.1.5 (Win32)
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="==F08EA8DED4439FC5ABE4=="
Content-Disposition: inline
Status: RO
Content-Length: 3055
Lines: 175

--==F08EA8DED4439FC5ABE4==
Content-Type: text/enriched; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

zzz

zzz



--==F08EA8DED4439FC5ABE4==--

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 331 5924
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: SVG and dependence on Firefox2.x?

2009-09-14 Thread Giorgos Keramidas
On Sun, 13 Sep 2009 14:59:51 -0700, Kurt Buff  wrote:
> I notice that for both The Gimp and graphviz, and probably for others
> as well, marking them or their dependencies as able to render SVG
> invokes installation of FF 2.x.
>
> This fails, as the port is marked as forbidden, and then the
> installation of these graphics programs fails.
>
> Not a huge deal, but any way to work around it?

You can build most of the ports that depend on GECKO with the following
in your `/etc/make.conf' file:

WITH_GECKO= libxul

I just finished rebuilding my packages in a chroot with this option, and
firefox 2.x was not required for a full x11/gnome2 build:

# pkg_info | fgrep firefo
firefox-3.5.3,1 Web browser based on the browser portion of Mozilla
#

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: linux-pango won't install

2009-09-14 Thread Boris Samorodov
On Sun, 13 Sep 2009 07:05:42 -0500 ajtiM wrote:
> On Saturday 12 September 2009 05:19:22 Boris Samorodov wrote:
> > On Fri, 11 Sep 2009 23:01:23 -0600 Chad Perrin wrote:
> > > > If you still want to install the port, you could just add this to
> > > > the /etc/make.conf file:
> > > >
> > > > # Pango
> > > > .if $(.CURDIR:M*/x11-toolkits/linux-pango)
> > > > DISABLE_VULNERABILITIES=yes
> > > > .endif
> > >
> > > How long has this been broken for 7.2?  Considering all the stuff that
> > > depends on linux-pango, I'm surprised it hasn't been fixed.
> >
> > It will be broken until someone provide an URL to non-vulnerable
> > RPM package.

> Upgrade to the latest version of Pango (1.24 or later), available from the 
> Pango Web site
> http://rpm.pbone.net/index.php3/stat...ch/pango/field[]/1/field[]/2

Sorry, I didn't manage to find a Pango 1.24 package for Fedora Core 4.
Can you post an URL?

-- 
WBR, Boris Samorodov (bsam)
Research Engineer, http://www.ipt.ru Telephone & Internet SP
FreeBSD Committer, http://www.FreeBSD.org The Power To Serve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"