Re: Experiences of different networking vendors

2012-03-23 Thread Stuart Henderson
This is really the wrong place to be asking. Maybe try the cisco-nsp and juniper-nsp mailing lists and HP ITRC web forums. There are other decent switch vendors too of course - brocade extreme arista etc. Since you are mainly concerned about ACS and 802.1x and this is probably the area where

kernel security level changed from 1 to 0

2012-03-23 Thread Walter Haidinger
Hi! I've recently installed OpenBSD 5.0/i386 on a virtualized root-server (Linux-KVM, dmesg below). Installation was fine. Now I'm dropped from multiuser to the shell, usually a couple of seconds after login with the message: init: kernel security level changed from 1 to 0 No error messages

Re: [l...@ecentrum.hu: Re: ls(1) multibyte support]

2012-03-23 Thread LEVAI Daniel
On Thu, Mar 22, 2012 at 12:24:28 +0100, Stefan Sperling wrote: On Thu, Mar 22, 2012 at 11:18:43AM +0100, Peter Hessler wrote: from what I can tell, the problems blocking this diff from going in have been fixed, and it looks good to me. [...] For now, if you really require multi-byte

Bad priority for routes? Lan IP goes via default GW

2012-03-23 Thread Jiri B
Hello, I'm not sure if this is my PEBKAC but I see something very strange. I have no strange setup, egress is configured via dhclient, ingress static ip for 192.168.10/23 network. I see that trying to access my lan machines it goes via egress. My routing table without man ingress (lan)

Re: Bad priority for routes? Lan IP goes via default GW

2012-03-23 Thread Jiri B
Crap, ignore plz, typo, 168 != 186 :) jirib

Re: Experiences of different networking vendors

2012-03-23 Thread TS Lura
Thank you guys for the replies. Yes, I agree that asking on misc@openbsd.org is probably not the most optimum choice. But my thoughts where that this is a somewhat neutral grounds (Or maybe not.. regarding proprietary vendors.. :) ), and my impression about the openbsd community is that, many are

Curso de Desarrollo de Habilidades Gerenciales y de Supervisión

2012-03-23 Thread Antonio Robles
!Muy Importante! Si no puede visualizar correctamente este correo, le pedimos que lo arrastre a su Bandeja de Entrada Apreciable Ejecutivo: Debido al gran Exito Obtenido abrimos una nueva fecha para el curso de: Desarrollo de Habilidades Gerenciales y de Supervisisn Esta Programado para el dma:

Re: error out if PORTSDIR is not set to the real directory.

2012-03-23 Thread Jan Stary
On Mar 23 13:58:08, RD Thrush wrote: On 03/23/12 07:25, Stuart Henderson wrote: On 2012/03/23 07:11, RD Thrush wrote: My PORTSDIR is on an nfs server. Mounting the particular nfs directory on /usr/ports (and setting PORTSDIR accordingly) fails the new test in bsd.port.mk. Apparently test

using access(2)

2012-03-23 Thread Jan Stary
The manpage of access(2) says CAVEATS access() and faccessat() should never be used for actual access control. Doing so can result in a time of check vs. time of use security hole. However, access() is used in test(1): case FILRD: return

Re: using access(2)

2012-03-23 Thread Theo de Raadt
The manpage of access(2) says CAVEATS access() and faccessat() should never be used for actual access control. Doing so can result in a time of check vs. time of use security hole. However, access() is used in test(1): case FILRD: return

Re: using access(2)

2012-03-23 Thread Pieter Verberne
On 2012-03-23 21:04, Theo de Raadt wrote: The manpage of access(2) says CAVEATS access() and faccessat() should never be used for actual access control. Doing so can result in a time of check vs. time of use security hole. However, access() is used in test(1):

Shut up and Hack

2012-03-23 Thread Theo de Raadt
Today we are releasing one of the extra songs which can be found on the 11-release celebration audio CD. KMFDM! It is called Shut up and Hack, and you can find a description of it at http://www.openbsd.org/lyrics.html#audio_extra51 As well, the MP3 file:

Re: error out if PORTSDIR is not set to the real directory.

2012-03-23 Thread Stuart Henderson
On 2012-03-23, Jan Stary h...@stare.cz wrote: I had previously removed the symlink and NFS mounted the ports directory on /usr/ports. I believe people do that. indeed, this is quite common.

ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Brett
Hi, I just locked my screen with xlock, and pressed ctrl+alt+backspace. This shut down the x server and brought me to a command prompt. I have never seen this happen before...but maybe I just never tried this key combination before now. Should this happen? I'm running amd64-current compiled

6:37:45 AM

2012-03-23 Thread Francis Yue-Cheong
Are the user of misc@openbsd.org ? Please contact me with your details,full names,telephone number address for a profitable deal

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread patrick keshishian
$ man xorg.conf /DontZap On Fri, Mar 23, 2012 at 3:59 PM, Brett brett.ma...@gmx.com wrote: Hi, I just locked my screen with xlock, and pressed ctrl+alt+backspace. This shut down the x server and brought me to a command prompt. I have never seen this happen before...but maybe I just never tried

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Brett
On Sat, 24 Mar 2012 00:51:19 +0100 Sebastian Benoit benoit-li...@fb12.de wrote: Brett(brett.ma...@gmx.com) on 2012.03.24 09:59:19 +1100: Hi, I just locked my screen with xlock, and pressed ctrl+alt+backspace. This shut down the x server and brought me to a command prompt. I have never

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Henning Brauer
* Brett brett.ma...@gmx.com [2012-03-24 01:56]: its normal behaviour. from xorg.conf(5): Option DontZap boolean This disallows the use of the Terminate_Server XKB action (usually on Ctrl+Alt+Backspace, depending on XKB options). This action is normally used to terminate

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Brett
On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: * Brett brett.ma...@gmx.com [2012-03-24 01:56]: its normal behaviour. from xorg.conf(5): Option DontZap boolean This disallows the use of the Terminate_Server XKB action (usually on

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Nick Holland
On 03/23/12 22:02, Brett wrote: On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: * Brett brett.ma...@gmx.com [2012-03-24 01:56]: its normal behaviour. from xorg.conf(5): Option DontZap boolean This disallows the use of the Terminate_Server XKB

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Philip Guenther
On Fri, Mar 23, 2012 at 7:03 PM, Brett brett.ma...@gmx.com wrote: On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: ... how exactly is preventing yourself from killing your own X server increasing security again? By stopping anyone wandering by my desk (or the

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Henning Brauer
* Brett brett.ma...@gmx.com [2012-03-24 03:18]: On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: * Brett brett.ma...@gmx.com [2012-03-24 01:56]: its normal behaviour. from xorg.conf(5): Option DontZap boolean This disallows the use of the

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Ted Unangst
On Sat, Mar 24, 2012, Brett wrote: On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: how exactly is preventing yourself from killing your own X server increasing security again? By stopping anyone wandering by my desk (or the cat) from pressing a few buttons

Re: using access(2)

2012-03-23 Thread Ted Unangst
On Fri, Mar 23, 2012, Jan Stary wrote: However, access() is used in test(1): Is this a problem? It is not possible to close the race between when test sees a file and when the parent process sees test's exit code. Write your shell scripts with caution.

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Jeremie Courreges-Anglas
By stopping anyone wandering by my desk (or the cat) from pressing a few buttons and getting into a console. Have you considered ''exec startx'' instead of plain ''startx''? -- Jeremie Courreges-Anglas GPG fingerprint: 61DB D9A0 00A4 67CF 2A90 8961 6191 8FBF 06A1 1494

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Brett
On Fri, 23 Mar 2012 22:30:40 -0400 Nick Holland n...@holland-consulting.net wrote: On 03/23/12 22:02, Brett wrote: On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: * Brett brett.ma...@gmx.com [2012-03-24 01:56]: its normal behaviour. from xorg.conf(5):

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread Brett
On Sat, 24 Mar 2012 03:59:33 +0100 Jeremie Courreges-Anglas jca+m...@wxcvbn.org wrote: By stopping anyone wandering by my desk (or the cat) from pressing a few buttons and getting into a console. Have you considered ''exec startx'' instead of plain ''startx''? -- Jeremie

Re: ctrl+alt+backspace bypasses xlock and allows terminal access

2012-03-23 Thread patrick keshishian
On Fri, Mar 23, 2012 at 7:48 PM, Brett brett.ma...@gmx.com wrote: On Fri, 23 Mar 2012 22:30:40 -0400 Nick Holland n...@holland-consulting.net wrote: On 03/23/12 22:02, Brett wrote: On Sat, 24 Mar 2012 02:43:53 +0100 Henning Brauer lists-open...@bsws.de wrote: * Brett

Re: Shut up and Hack

2012-03-23 Thread Eric Oyen
the sound is quite good. not quite as hard as KMFDM can get, but a good tune for what most of us are. Some other good material would include Jefferson Airplane, Cream, Black Sabbath, Rush and Kiss. Btw, How did you ever get KMFDM to come on board with this? -eric On Mar 23, 2012, at 3:07 PM,