Re: Established method to enable suid scripts?

2011-05-15 Thread Chris Telting

On 05/13/2011 14:34, Alejandro Imass wrote:

On Fri, May 13, 2011 at 6:07 AM, Chris Telting
christopher...@telting.org  wrote:

On 05/13/2011 01:32, krad wrote:

[...]

me ask you.. is sudo ping acceptable? Please explain the logical reason
why not. It would be the preferred method if suid didn't exist and sudo was
part of the base system.

The sudo versus suid theme is discussed ad-nauseam in many lists and
forums, as well as the C wrappers for doing stuff suid.
IMHO, however, sudo can give you more granular control though
paradoxically relies on suid itself.
The question here is why make the whole freaking interpreter suid when
you can granularly control the specific script.
Anyway, I would personally use a wrapper or sudo.
I honestly tried when I posted the question to avoid the question of 
right or wrong. I simply have one opinion for my own need and preference 
and don't want to go into rigid detail and did not mean to reopen the 
issue. I simply wanted to know if anyone had a patch already or a flag 
enabled it.  It's similar to the phrase that if  you have to ask you 
can't afford it except in this case it means you can. I have a feeling 
someone somewhere did it. If no one comes forward I will post a proper 
patch for review and maintain documentation of the pitfalls to the 
extent I can and that others forward to me.  I have no desire to change 
Freebsd's standard practice. I leave that to the steering committee of 
each and every distribution of unix like systems. I am simply grateful 
to be able to make my development systems work the way I want it to 
because I want it to. It's a question of complete phylosophy to me as to 
the base unix permissions system. I simply know what appeals most to me 
the way that I use systems.  We all love Freebsd because it means 
choice.  I apologize to anyone that thinks I reopened a can of worms and 
wasted time, it was not my goal.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Established method to enable suid scripts?

2011-05-13 Thread Chris Telting

On 05/13/2011 00:32, Jonathan McKeown wrote:

On Thursday 12 May 2011 17:26:49 Chris Telting wrote:

On 05/12/2011 07:57, Jonathan McKeown wrote:

I'll say that again. It is inherently insecure to run an interpreted
program set-uid, because the filename is opened twice and there's no
guarantee that someone hasn't changed the contents of the file addressed
by that name between the first and second open.

It's one thing to tell people they need to be careful with suid because
it has security implications. Deliberately introducing a well-known
security hole into the system would in my view be dangerous and wrong.

That race condition bug was fixed in ancient times. Before Freebsd or
Linux ever existed I believe. It's a meme that just won't die.  People
accepted mediocrity in old commercial versions of Unix.  I personally am
unsatisfied by kludges.

That seems somewhat unlikely given, as someone else pointed out upthread, that
Perl still comes with a compile-time option SETUID_SCRIPTS_ARE_SECURE_NOW,
suggesting that they often aren't. Yes, there are ways to avoid this race
condition - the usual one is to pass a handle on the open file to the
interpreter, rather than closing it and reopening it.

This fix is not present in every Unix or Unix-like OS. In particular (although
I'm happy to be corrected if I'm wrong) it's not present in FreeBSD, to the
best of my knowledge. Whether there's a reason for that other than lack of
developer time I don't know.

Indeed.  I think it's more of a case that since you can't count on it on 
other systems (especially closed source systems) to disable it for 
portability reasons although I would loved to be proved wrong.


Happy Friday.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Established method to enable suid scripts?

2011-05-13 Thread Chris Telting

On 05/13/2011 01:32, krad wrote:
what i cant understand is the complete aversion to sudo. Could you 
shed any light on why you are trying to avoid a tried and tested method.


That I freely admit is for no rational reason. It's just annoying. But 
let me ask you.. is sudo ping acceptable? Please explain the logical 
reason why not. It would be the preferred method if suid didn't exist 
and sudo was part of the base system.


Happy Friday.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: start X in background without it taking over the console?

2011-05-12 Thread Chris Telting

On 05/11/2011 04:07, CyberLeo Kitsana wrote:

On 05/11/2011 05:36 AM, Chris Telting wrote:

I already do... I'm want to automate it.  Every other virtual screen
terminal can start without grabbing the console, I don't want X to
either.  I do development and I suffer crashes.  I want to do work while
it boots up for a couple minutes and I'm tired of manually switching
back to text mode.  It's gets annoying the 200th time.

You could script it right after X starts, as such:

vidcontrol -s 1 # Equivalent to Alt-F1

I don't think X is currently designed to start without initializing the
graphics hardware, though, so the initial vt change is probably
unavoidable. Perhaps once KMS trickles down


Thank you for answering.  I was fearful of that.  Just means another 
project.


Related to Kernel Memory Switching I mention of Coreboot on slashdot the 
other day and I have to say I'm excited by it more than when it was 
called LinuxBIOS, my understanding now being that it isn't a full Linux 
kernel buy may eventually become a striped down version of it. I'm 
hoping that it evolves into a basic real time kernel of it's own and 
initializing drivers.  Hopefully the place where all soft firmware for 
devices eventually gets loaded rather than in OS drivers; ironically 
working with the GPL by downloading it's own initializing drivers 
directly.  Be nice to have half second boot times.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Established method to enable suid scripts?

2011-05-12 Thread Chris Telting

On 05/11/2011 07:14, Jerry McAllister wrote:

On Tue, May 10, 2011 at 05:54:04PM -0700, Chris Telting wrote:


I've googled for over an hour.

I'm not looking to get into a discussion on security or previous bugs
that are currently fixed.  Suid in and of itself is a security issue.
But if you are using suid it it should work; I don't want to use a
kludge and I don't want to use sudo.  I'm hoping it's a setting that is
just disabled by default.

My understanding is that in general the system does not allow SUID
on scripts.   The way I have gotten around that (a long time ago)
was to create a small binary that exec's the script and making
the binary SUID.



Well it's all hacks and in my not so humble option like chasing your 
tail.  The assumption is that if someone creates an executable 
(assumption is programming is C) they are more credible not to make 
mistakes.  That's a fallacy and just plain nuts.  And I'm an interpreted 
language snob saying that.  Suid is either allowable or not and should 
be a sysctl and apply equally to binaries and scripts.  Yet another 
thing to add to my project list.  Anyone know of an established patch 
for fix this freebsd issue or am I yet again going to have to create my own?


Either way thank you all again for your feedback.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Established method to enable suid scripts?

2011-05-12 Thread Chris Telting

On 05/12/2011 07:57, Jonathan McKeown wrote:

On Thursday 12 May 2011 16:13:50 Chris Telting wrote:

On 05/11/2011 07:14, Jerry McAllister wrote:

On Tue, May 10, 2011 at 05:54:04PM -0700, Chris Telting wrote:

I've googled for over an hour.

I'm not looking to get into a discussion on security or previous bugs
that are currently fixed.  Suid in and of itself is a security issue.
But if you are using suid it it should work; I don't want to use a
kludge and I don't want to use sudo.  I'm hoping it's a setting that is
just disabled by default.

My understanding is that in general the system does not allow SUID
on scripts.   The way I have gotten around that (a long time ago)
was to create a small binary that exec's the script and making
the binary SUID.

Well it's all hacks and in my not so humble option like chasing your
tail.  The assumption is that if someone creates an executable
(assumption is programming is C) they are more credible not to make
mistakes.  That's a fallacy and just plain nuts.  And I'm an interpreted
language snob saying that.  Suid is either allowable or not and should
be a sysctl and apply equally to binaries and scripts.  Yet another
thing to add to my project list.  Anyone know of an established patch
for fix this freebsd issue or am I yet again going to have to create my
own?

Have you appreciated the issue with suid on scripts? It's nothing at all to do
with whether someone writing a compiled language is a better programmer than
someone writing an interpreted language.

When the OS launches a binary, the file containing the program is opened once.

When the OS launches an interpreted program, the file is opened once to find
out which interpreter to run, and then the interpreter is told to re-open the
same filename - whose contents might meanwhile have changed.

I'll say that again. It is inherently insecure to run an interpreted program
set-uid, because the filename is opened twice and there's no guarantee that
someone hasn't changed the contents of the file addressed by that name
between the first and second open.

It's one thing to tell people they need to be careful with suid because it has
security implications. Deliberately introducing a well-known security hole
into the system would in my view be dangerous and wrong.


That race condition bug was fixed in ancient times. Before Freebsd or 
Linux ever existed I believe. It's a meme that just won't die.  People 
accepted mediocrity in old commercial versions of Unix.  I personally am 
unsatisfied by kludges.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: start X in background without it taking over the console?

2011-05-11 Thread Chris Telting

On 05/11/2011 03:10, C. P. Ghost wrote:

On Wed, May 11, 2011 at 7:21 AM, Chris Telting
christopher...@telting.org  wrote:

I know this isn't strictly a Freebsd question.

I want to start up X in the background without it taking over the console.
  I want to switch over to it manually when I press alt-F9.

Why not start if from another terminal? Say, press alt-F2, login there,
and then startx. Then, alt-F1 remains free.

Or perhaps use x11-servers/xorg-vfbserver.

I already do... I'm want to automate it.  Every other virtual screen 
terminal can start without grabbing the console, I don't want X to 
either.  I do development and I suffer crashes.  I want to do work while 
it boots up for a couple minutes and I'm tired of manually switching 
back to text mode.  It's gets annoying the 200th time.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Established method to enable suid scripts?

2011-05-10 Thread Chris Telting

I've googled for over an hour.

I'm not looking to get into a discussion on security or previous bugs 
that are currently fixed.  Suid in and of itself is a security issue.  
But if you are using suid it it should work; I don't want to use a 
kludge and I don't want to use sudo.  I'm hoping it's a setting that is 
just disabled by default.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Established method to enable suid scripts?

2011-05-10 Thread Chris Telting

On 05/10/2011 19:19, Devin Teske wrote:

On May 10, 2011, at 5:54 PM, Chris Telting wrote:


I've googled for over an hour.

I'm not looking to get into a discussion on security or previous bugs that are 
currently fixed.  Suid in and of itself is a security issue.  But if you are 
using suid it it should work; I don't want to use a kludge and I don't want to 
use sudo.  I'm hoping it's a setting that is just disabled by default.

The reason that the suid bit doesn't work on scripts (shell, perl, or 
otherwise) is because these are essentially text files that are interpreted by 
their associated interpreter. It is the interpreter itself that must be suid.

In other words, you'd have to do this (*WARNING* highly inadvisable -- even for 
the OP):

sudo chmod u+s /bin/sh

before you could have a shell script such as this:

#!/bin/sh
: anything

run as the suid user (the owner of /bin/sh -- usually root).
I thought of that.  Seemed like I read that historically unix ran the #! 
command as the suid when it executed the file.  Did Freebsd delete that 
functionality?  (Otherwise how did suid scripts get the bad reputation 
if they could never execute suid.)


I'm not exactly clear where the execute function is.  I guessing that 
it's not the shell doing the #! interpretation but rather the execute 
function of the operating system.


Either way thanks for the feedback.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


start X in background without it taking over the console?

2011-05-10 Thread Chris Telting

I know this isn't strictly a Freebsd question.

I want to start up X in the background without it taking over the 
console.  I want to switch over to it manually when I press alt-F9.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


zfs partition for /etc?

2011-04-23 Thread Chris Telting
I'm using PC-BSD and ZFS.  ZFS is outstanding.  Somewhat less impressed 
with PCBSD.


I've grown addicted to ZFS I think.  I love it's snapshots although I 
already know of new features I would love in new development beyond 
v28.  At least for PCBSD it's nice to be able to rollback to a usable 
system and so I play with my system a lot more.


The mount listing needs to be revamped because I can easily imagine in 
the future 30 plus zfs mounts, especially with jails.  Some indentation 
and grouping options along with filters.  And I think replacing the 
mounted volumes in fstab with config filenames.


A nice thing would be allowing snapshots of directories separate from 
volumes.  And it definitely needs whitespace support for unionfs and 
maybe possibly it's own unionfs solution with more capabilities.  For 
example it would be nice to promote a snapshot (or the reverse to 
generate one) into what I'll call an overlay to be able to apply to new 
directory trees.  Something that integrates with snapshots and clones 
somewhat.


And it needs a very low memory operation for systems as low as 64MB.  
Sure it might crawl but many of it's features are indispensable.


Please excuse my rambling.


So so on to my question.  I'm sure others have thought about this.  I 
kind of want /etc to be it's own zfs partition so that I can snapshot it 
separate from everything else and preserve it without much effort.  But 
I don't think I can do that because of booting.  The system depends on 
/etc before it mounts it's first file system.  Same issue I experienced 
a couple years back when I tried to do unionfs on /etc. Is it possible 
to mount multiple partitions from the kernel read only for single user 
mode and bootup? I almost feel like there should be an fstab for /boot 
just to be able to do something like this.


I want to be able to snapshot and rollback my base system in seconds.  
Since I use separate volumes for /usr and /var I'll accept using a 
script.  My only thought is to generate and archive diffs for /etc 
though another modular script to match snapshot labels.


Any thoughts?

Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


ZFS Striping and Optimizing Capabilities

2011-04-09 Thread Chris Telting
Just a few questions about what ZFS actually does.  So if anyone has 
intimate knowledge about ZFS's implementation on Freebsd I'm sure I and 
others would appreciate the answers.


When you add a second and or thrid drive/partition to a zpool I'm 
assuming that it's going to start using the drives like a raid 0 
stripe.  How do the ZFS versions differ in this?  Does it immediately 
start striping all files in the background on low priority or does it do 
it as files are accessed?  Does ZFS in any way do performance testing of 
read/right operating in light of where the data is stored on the drive? 
i.e. the outside sectors of hard drives perform faster.  If it does do 
read/write location testing can it be shut off or does it detect SSDs?  
What about tracing application sector reading and reordering sectors so 
that they follow one another according to typical usage?  i.e. the 
sectors are already in the linear read ahead buffer?


I appreciate any answers,
Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Port dependencies

2011-04-02 Thread Chris Telting



seriously, this is why i want that debian+freebsd that was
discussed recently.  the kernel is ours and number one in the
world.  and the ports stuff is basically packages that more/less
just-work.  you can get the src =with= the pkg.



How does debian get around all the make config options that we deal 
with?  Such as does such and such package pull in samba...  Or does 
debian just compile with every option more or less enabled?


Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Port dependencies

2011-04-01 Thread Chris Telting


Just in a thoughtful mood and thought I'd to the question to the cloud.

One of my biggest gripes with the ports system is dependency hell.  
Ports link against so my optional components and pull them into the 
install.  Libraries and components are built based on make file 
defines.  But this doesn't have to be so.  It's possible and easy enough 
to check a running system for which libraries are installed and only if 
a feature is enabled to load the library.  The number of console 
programs that want to pull in X window or kde is my boggling.  Knowing 
how to program myself when I see a make config menu on every single 
port it makes me want to cry.  I think the make config menus should 
have everything checked by default and only be provided to prevent 
things from being compiled such as for embedded devices.


My question is why is this so?  Why can't programs do more run time 
configuration?  Is a configuration run time system library needed to 
make it easier?


Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Kerberos and su to root

2011-04-01 Thread Chris Telting


I have multiple systems and jails at my home.  I would very much like to 
implement a single sign on strategy with kerberos.  I think it's safer 
than having private keys on every single box.  I can easily do this for 
shh user logins to multiple boxes.  But I like to sign in as a user and 
then su to root when I get there.  (Forget about sudo, I am 
administering these boxes and don't want to type sudo for every single 
command, it's not a user machine).  From what I understand of Kerberos I 
would need change identity and type a password every time I ksu which is 
what I'm trying to avoid.


Am I right that it is imposable to maintain multiple simultaneous 
credentials and get the right one to automatically be used?


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Port dependencies

2011-04-01 Thread Chris Telting

On 04/01/2011 17:51, Polytropon wrote:

On Fri, 01 Apr 2011 16:58:04 -0700, Chris Teltingchristopher...@telting.org  
wrote:

Just in a thoughtful mood and thought I'd to the question to the cloud.

Oh the joy of cloud computing, erm... discussion. :-)
Wasn't that the a subplot of the hitch hikers guide?  That the sum of 
human consciousness is just a cloud computer?  New term, old idea.



One of my biggest gripes with the ports system is dependency hell.
Ports link against so my optional components and pull them into the
install.  Libraries and components are built based on make file
defines.

If you do install a program via pkg_add (it's about
precompiled binaries, so no Makefile involved, not
even a ports tree), there are also means to determine
if something ELSE is needed - as a dependency. Hard
disk space is cheap today, so 99% of users don't even
bother installing all the stuff they primarily won't
need, but the program THAT they need insists on it.
Ports or packages, what I'm discussing is minimizing dependencies.  I 
compile my own packages and use them across all my computers.


What I'm saying I'd like to see is minimal installs.  If you need a 
feature like for instance LDAP or SQL then you need to install that 
port.  Need another feature? Install yet another port.  The program 
should detect that new programs/libraries are available or at a minimum 
enable them though uncommenting a line in a conf file.




But this doesn't have to be so.  It's possible and easy enough
to check a running system for which libraries are installed and only if
a feature is enabled to load the library.

It already works that way. Say program A needs B of version
n as dependency, then B(n) has to be installed even if
B(n-1) is already present on the system. This is no big
deal if B isn't installed at all, but requires caution
when it is (at version n-1). Of course, B may have other
dependencies that do not matter to A, but to B, so even
C(m) gets installed.
And that's the mess I don't like.  It's like the six degrees of 
separation rule.  Installing one application sometimes means installing 
100 other ports/packages with features the average user has no need or 
interest in yet.  I'm just saying we should have to need to 
install/compile all those packages when we don't need them and we should 
have to need to recompile ports just to add a new capability.



The number of console
programs that want to pull in X window or kde is my boggling.

Hmmm... The only one I remember being that way is the
old cvsup, but there was nocvsup-nogui (or -nox11?).
Well I decided I wanted to try to setup pulseaudio as a network sound 
server on a headless computer and it pulled in X.  Sure I could 
recompile just for that one computer.  But that isn't elegant.  The 
storage space doesn't matter.  What annoys me is the installation time 
and the longer compile time as well as to some extent downing time.



I think the make config menus should

have everything checked by default and only be provided to prevent
things from being compiled such as for embedded devices.

Oh no, please - NO! Everything checked by default? That
would be problematic for those who, for example, don't
WANT to use HAL+DBUS because it just doesn't work for
them. Or people who have security concerns (or maybe
even external regulations) so they do not want to install
something. And remember: Regarding codecs for mplayer
and mencoder, it's illegal to listen to MP3 in the US! :-)
The point would be that the programs wouldn't have those features 
enabled by default, you have to configure them or the program can 
auto-detect.

My question is why is this so?  Why can't programs do more run time
configuration?  Is a configuration run time system library needed to
make it easier?

You're bringing up an interesting idea, but runtime
detection of library (or feature) availability seems
to be very time consuming to me. An example is mplayer.
On older system, I did always compile it to match the
CPU that is present, means NO runtime CPU detection.
Why? Because it often runs too slow on older system if
enabled.
Well obviously that one actual good reason for people to compile their 
own ports.  Nothing can change that.  What I'm saying is that libraries 
and features shouldn't be in the config menu.



And let's assume another typical example from  the
multimedia sector. You have installed mplayer and want
to play MP3 audio or an MPEG video file, or even a
DVD - which is completely illegal in the US. :-)
But there is no libdvd installed, and no MP3 codecs
for playing or encoding. What should happen? Upon
first start, should the program request you to
download and install them? But what if the system
is offline? I would assume it's better to install
all the stuff needed at install time, no matter if
being from ports or as a package.
If it worked like like would like then you wouldn't be able to play 
those files unless you downloaded another package or compiled the ports 

SSH persistent sessions without screen?

2011-03-31 Thread Chris Telting
I would like to have something like virtual terminals that continue 
running no matter if ssh is connected to them or not.  Something like 
the screen utility.  But I don't want to use screen, I'm looking for 
something more automated.  Maybe even be able to have multiple 
connections on different computers.


I have a number of computers and I like to use each for batch processing 
different stuff, especially compiling.  I'm mostly interested in 
connecting to running sessions from a mobile android phone.  I don't 
want to keep having to manually login every time through screen and it 
should be tolerant of a dropped connection.


I'm thinking there is probably a way to do this with just ssh.  Maybe 
have separate sshd daemons running on specific ports.  Any ideas?


Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


pkg_info and an active /usr/ports is slow

2010-12-26 Thread Chris Telting
Just wondering about the interaction of pkg_info (no args) and having a 
ports directory.


Without it it's blazing fast, with it it is just slow and sometimes just 
breaks during the listing.


There is nothing in the man page about it reading the ports directory or 
why it would want or need to.


Most importantly there is no command line option to skip it.


Thanks Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


groups and login shells

2010-12-26 Thread Chris Telting

Just spent some time figuring this out.

I needed to create a group and add myself to it.

But after I added myself to the group while I could id username my 
username and
get the correct groups if I did a base id or groups the new group 
wouldn't
show up.  Not could I access a directory restricted to the group.  Turns 
out I needed
to invoke a new login shell from an existing command prompt or 
essentially shut

everything down and relogin a the console.  So I just reboot.

But owning to many years of resentment dealing with Microsoft platform I 
highly
resent reboots.  Does anyone know if it's possible to update groups in 
memory?



Thanks,
Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Connection Bandwidth Metering?

2010-08-08 Thread Chris Telting
I have my own Virtual Private Server (VPS) and was wondering what is the 
most straightforward to meter my own connection?


I would like to email notices to myself of excessive bandwidth usage as 
well as take steps that limit a DOS attack or Slashdot effect on the 
webserver.  I would also like the metering to be persistent as possible 
across reboots.  Not really looking for full logging or to do graphs 
yet, just want the current metered bandwidth.


Thanks

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: TEKEN_UTF8 TEKEN_XTERM

2010-08-07 Thread Chris Telting

On 08/05/10 01:10, David DEMELIER wrote:

I think using xterm as term definition is just stupid. If you're not
running X why will you use a term that live in X normally? By the way
it also sucks if you make some $TERM settings considering your shell.

   
The point of these options (TEKEN_UTF8 and TEKEN_XTERM) is to enable an 
internally Unicode based terminal and from there have characters mapped 
according to font files.  With standard hardware you can have 256 or 512 
text mode characters.


Unless you have a real terminal on a serial port the term at your 
console is emulated with your video card and keyboard.  xterm I believe 
is a more advanced terminal definition with a large number of additional 
capabilities over a simple vt100 terminal.  So we can try to use what 
exists now xterm or we can create yet another terminal definition.


Once the above works the next step would be to extend the terminal 
driver to use graphics modes and with modern accelerated cards it should 
be trivial to achieve the same speed we are use to with text mode.  Some 
people were playing around with this years ago but so far I haven't 
found anything new.


And while English is my native language I welcome the evolution of new 
international capabilities.  What can I say, I'm a fan of text mode.



Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Is VTC dead?

2010-08-01 Thread Chris Telting
Googling around I discovered VTC 
http://wiki.freebsd.org/dev/vtc%284%29 and it looks interesting.  A 
graphical syscons terminal.


I'm surprised there isn't more interest.

Is the group that worked on this concept dead?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


TEKEN_UTF8 TEKEN_XTERM

2010-08-01 Thread Chris Telting

Just wondering if anyone else has played with this?

I compiled it into the kernel but the terms are still cons25.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


window/app aware bindkey/input control application?

2010-05-02 Thread Chris Telting

Sorry don't have the necessary words to describe what I want.

I'm wondering if there exists an app or set of apps that are 
window/application aware for use in conjunction with multimedia keys, 
remote control, input control surfaces.


Simple example: detect all mutimedia applications, if only one or none 
is started then issue command1 otherwise see if any of the above 
applications has the focus and issue it's appropriate command else play 
an error sound.


I guess you could say I'm interested in scripting keyboard input in 
conjunction with the window manager.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


spreculative: /bin2 /usr/bin2 and alternative package/ports trees?

2010-03-01 Thread Chris Telting

Just wondering if anyone cares to share their thoughts about this.

There are a few ports that I would love to see included in the base tree 
such as OpenLDAP and the Openbsd pdksh or bash.  But It hasn't happened 
and isn't likely to happen.  So I was thinking about the pkg 
infrastructure.  The location of the pkg file database I believe can be 
specified.  And the installation directories I believe can also be 
specified.  Other than that paths would have to be changed for binaries 
and libraries and probably share and other installation points.


This should allow separate package trees meaning that when I delete and 
reinstall my main ports these programs will not be affected and the 
package database info for these will not be screwed up.


Is it possible and if it is has anyone implemented it on their own systems?

Or have people simply taken to installing ports in the main directories?


Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Web server mailing list?

2006-08-18 Thread Chris Telting
Any recomondations for a apache/php/mysql mailing list?  Anything as 
awsome as this list?


Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Non blob frebsd raid 5 drivers...

2006-07-27 Thread Telting
I just wanted to get it straight.  I think I read some post that said 
that 3ware actually has and uses commit access to the freebsd source 
tree.  Can anyone comfirm this for me?


I currently have a highpoint 2220 controller.  I got it because of the 
Freebsd support what appeared to be available driver source code only to 
be humilitated to discover after the fact that what's labeled source is 
a blob module, and not source at all.


Areca is a name I never heard before this list.  They appartly support 
bsd but, what level of support?  Binary Driver, blob, source, or docs?


Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Sendmail, Cyrus-IMAP, mbox, maildir, berkeley-db

2006-05-08 Thread Chris Telting
I am confused as to a number of things so I'd appreciate being 
straighted out.  I keep searching the web and looking at documentation 
but I'm getting more confused.


Sendmail stores mail in mbox format.  I'm not sure if it allows other 
storage formats such as maildir or berkeley-db.  And if so how it's enabled.


Cyrus-IMAP unless I'm mistaken by default looks for mail in the 
derkeley-db file format.  I'm not sure if it also supports mbox and if 
so how to configure that.



Chris Telting

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Getting DHCP to use resolv.conf?

2006-04-26 Thread Telting
I would like to know how I can propagate the dns servers which the dhcp 
client puts in resolv.conf to dhcpd.  I only see how I can only 
explicitly list a domain server with option domain-name-servers.  How 
do I propogate non static dns servers?


Chris

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Getting DHCP to use resolv.conf?

2006-04-26 Thread Telting

I would like to know how I can propagate the dns servers which the dhcp
client puts in resolv.conf to dhcpd.  I only see how I can only
explicitly list a domain server with option domain-name-servers.  How
do I propogate non static dns servers?

Chris


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]