netstat -i

2012-12-05 Thread Olivier Nicole
Hello, I used netstat -i for the first time and I saw something I cannot understand: # netstat -ibh -I em1 NameMtu Network Address Ipkts Opkts em19000 00:0e:0c:5c:32:29 92M 129M em19000 10.41.170/24 ufo2000 924K 926K I understand that th

Re: grep -Dskip doesn't skip FIFOs

2012-12-05 Thread David Xu
On 2012/12/06 11:28, David Xu wrote: On 2012/12/06 07:07, Marco Steinbach wrote: Hi there, grep(1) does not seem to skip FIFOs when told to. I think you need a patch to fix it, the bug is in ggrep, it tries to open a FIFO before checking if it is a FIFO, then blocked. http://people.freebsd

Re: grep -Dskip doesn't skip FIFOs

2012-12-05 Thread David Xu
On 2012/12/06 07:07, Marco Steinbach wrote: Hi there, grep(1) does not seem to skip FIFOs when told to. I think you need a patch to fix it, the bug is in ggrep, it tries to open a FIFO before checking if it is a FIFO, then blocked. http://people.freebsd.org/~davidxu/patch/grep.c.diff _

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Paul Schmehl
--On December 5, 2012 7:01:21 PM -0600 Tim Daneliuk wrote: On 12/05/2012 06:35 PM, Kurt Buff wrote: On Wed, Dec 5, 2012 at 3:48 PM, Tim Daneliuk wrote: On 12/05/2012 05:44 PM, Kurt Buff wrote: On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk wrote: I am working with an institution that tod

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Adam Vande More
On Wed, Dec 5, 2012 at 5:42 PM, Damien Fleuriot wrote: > > > On 6 Dec 2012, at 00:19, Tim Daneliuk wrote: > > > sudo chown root:wheel my_naughty_script > > sudo chmod 700 my_naughty script > > sudo ./my_naughty_script > > > > The sudo log will note that I ran the script, but no

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Tim Daneliuk
On 12/05/2012 06:35 PM, Kurt Buff wrote: On Wed, Dec 5, 2012 at 3:48 PM, Tim Daneliuk wrote: On 12/05/2012 05:44 PM, Kurt Buff wrote: On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk wrote: I am working with an institution that today provides limited privilege escalation on their servers via v

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Kurt Buff
On Wed, Dec 5, 2012 at 3:48 PM, Tim Daneliuk wrote: > On 12/05/2012 05:44 PM, Kurt Buff wrote: >> >> On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk >> wrote: >>> >>> I am working with an institution that today provides limited privilege >>> escalation >>> on their servers via very specific sudo rul

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Tim Daneliuk
On 12/05/2012 05:44 PM, Kurt Buff wrote: On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk wrote: I am working with an institution that today provides limited privilege escalation on their servers via very specific sudo rules. The problem is that the administrators can do 'sudo su -'. sudo is m

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Tim Daneliuk
On 12/05/2012 05:42 PM, Damien Fleuriot wrote: On 6 Dec 2012, at 00:19, Tim Daneliuk wrote: sudo chown root:wheel my_naughty_script sudo chmod 700 my_naughty script sudo ./my_naughty_script The sudo log will note that I ran the script, but not what it did. wow, way

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Kurt Buff
On Wed, Dec 5, 2012 at 3:19 PM, Tim Daneliuk wrote: > I am working with an institution that today provides limited privilege > escalation > on their servers via very specific sudo rules. The problem is that the > administrators can do 'sudo su -'. sudo is misconfigured. man 5 sudoers and man

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Damien Fleuriot
On 6 Dec 2012, at 00:19, Tim Daneliuk wrote: > sudo chown root:wheel my_naughty_script > sudo chmod 700 my_naughty script > sudo ./my_naughty_script > > The sudo log will note that I ran the script, but not what it did. > > wow, way to complicate matters. sudo csh > So

Re: Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Adam Vande More
On Wed, Dec 5, 2012 at 5:19 PM, Tim Daneliuk wrote: > This is a little bit outside the strict boundaries of a FreeBSD question, > but I am hoping someone in this community has solved this problem and > that I might be able to adapt it for non-FreeBSD systems (AIX and Linux, > specifically). > > P

Somewhat OT: Is Full Command Logging Possible?

2012-12-05 Thread Tim Daneliuk
This is a little bit outside the strict boundaries of a FreeBSD question, but I am hoping someone in this community has solved this problem and that I might be able to adapt it for non-FreeBSD systems (AIX and Linux, specifically). I am working with an institution that today provides limited priv

grep -Dskip doesn't skip FIFOs

2012-12-05 Thread Marco Steinbach
Hi there, grep(1) does not seem to skip FIFOs when told to. coco@probsd:~ uname -a FreeBSD probsd.c0c0.intra 8.3-STABLE FreeBSD 8.3-STABLE #0 r243477: Sat Nov 24 11:07:17 CET 2012 root@x2.c0c0.intra:/usr/obj/usr/src/sys/GATEKEEPER i386 coco@probsd:~ mkfifo bleh coco@probsd:~ ls -l ble

12/5/2012

2012-12-05 Thread LOTTO IT
Hello freebsd-questions@freebsd.org , Please confirm if you are the owner of this email. Reply ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questio

Re: installworld strangeness

2012-12-05 Thread David Noel
On 11/22/12, David Noel wrote: > On 11/22/12, Paul Schmehl wrote: >> --On November 22, 2012 7:14:35 AM -0600 David Noel >> >> >> wrote: >> >>> Updating from 8.2 to 8.3 I'm running into the following: >>> >>> ===> include (install) >>> creating osreldate.h from newvers.sh >>> dirname: not found >

Re: getpwnam_r returns EINVAL on FreeBSD 8.3

2012-12-05 Thread Dan Lists
On Mon, Dec 3, 2012 at 5:54 PM, Dan Lists wrote: > After upgrading a server from FreeBSD 7.3 to FreeBSD 8.3 I noticed > this bug. Since upgrading, getpwnam_r is acting inconsistently. If I > look up a user that does not exist and the name is 16 characters or > less, getpwnam_r returns 0 and the

Save € 2,000 with Gan Direct All-in-One Insurance

2012-12-05 Thread Gan Direct
Save € 2,000 by switching your Motor, Property and Health Insurance to Gan Direct All-in-One http://us4.campaign-archive1.com/?u=953e7a73414b04f0ff6056f55&id=d52abfa867&e=45a40e088c (http://www.GanDirect.com?utm_source=New+Prospective+Cus

Save € 2,000 with Gan Direct All-in-One Insurance

2012-12-05 Thread Gan Direct
Save € 2,000 by switching your Motor, Property and Health Insurance to Gan Direct All-in-One http://us4.campaign-archive1.com/?u=953e7a73414b04f0ff6056f55&id=d52abfa867&e=a8af35d56f (http://www.GanDirect.com?utm_source=New+Prospective+Cus

SOLVED - Re: CARP within VirtualBox Does it work?

2012-12-05 Thread Fleuriot Damien
On Dec 4, 2012, at 8:17 PM, dweimer wrote: > On 2012-12-01 03:14, Damien Fleuriot wrote: >> On 30 November 2012 20:44, dweimer wrote: >>> On 2012-11-29 14:07, dweimer wrote: On 2012-11-29 12:53, Fleuriot Damien wrote: > > On Nov 29, 2012, at 6:43 PM, dweimer wrote: > >

sssd 1.8.4

2012-12-05 Thread Alexey Tyurikov
Dear list members, does anyone use sssd 1.8.4? I try to set it up on on FreeBSD 9.1-RC3 but get no success. First of all, there is no log files under /var/log/sssd, so that I can not see, what is going wrong. I've edited two config files and expect to be able to list LDAP(SAMBA4) users but it does