Re: rc.local mystery executables

2014-08-16 Thread Joel Rees
On Sat, Aug 16, 2014 at 1:52 AM, Scott Bonds sc...@ggr.com wrote: On Fri, Aug 15, 2014 at 10:50:55AM -0500, Adam Thompson wrote: While a long way from perfect, tools such as chkrootkit and rkhunter might shed some light on your situation. As Giancarlo said, check every machine that's closely

Re: rc.local mystery executables

2014-08-16 Thread Joel Rees
On Fri, Aug 15, 2014 at 11:39 PM, Scott Bonds sc...@ggr.com wrote: [...] Perhaps I should separate the router and 'everything else' roles, so that the router only has builtin OpenBSD software on it, no packages. Strongly encourage you to get a separate box to run the router and firewall on.

Re: rc.local mystery executables

2014-08-16 Thread Todd Zimmermann
Yeah it sucks, the miscreants run 24/7 365. My guess is home systems are targeted a lot because there's only an 'IT Dept' of one. Lots of good stuff in base and the ports collection. mtree can be extended to check file integrity for anything you've modified and other local stuff (something I need

Re: Generating random.seed for network boot clients

2014-08-16 Thread Clint Pachl
Paul de Weerd wrote, On 08/15/14 14:51: At any rate, this changes that to allow world readable files (still not taking world writable files). We can't check S_IWOTH over tftp, we should probably assume 0777 for files transferred that way. But, if you're trusting the kernel you're getting over

Re: Generating random.seed for network boot clients

2014-08-16 Thread Clint Pachl
Christian Weisgerber wrote, On 08/15/14 18:36: On 2014-08-15, Paul de Weerd we...@weirdnet.nl wrote: What you could do is use the -r option to tftpd(8) to hand out a new file to each client that connects. Or just periodically (like, every hour or every minute, depending on the load of your

Why are there NSA, CSIS, and GOOGLE IDs in my ftplist.cgi

2014-08-16 Thread Clint Pachl
I checked out my saved install configurations at http://129.128.5.191/cgi-bin/ftplist.cgi and noticed that at the end of the file there are fields named NSA_ID, CSIS_ID, and GOOGLE_ID. They all sound scary. Each time I refresh the page, only one of the three IDs appear, but they seem to

Re: Generating random.seed for network boot clients

2014-08-16 Thread Christian Weisgerber
On 2014-08-16, Clint Pachl pa...@ecentryx.com wrote: # cd /tftpboot # mkfifo etc/random.seed # while true; do dd if=/dev/random count=1 etc/random.seed 2/dev/null; done # cd /tftpboot # mkfifo test.seed # while :; do dd if=/tmp/counter of=test.seed 2/dev/null; done Careful! dd ...

Re: ulpt/libusb weirdness in -current

2014-08-16 Thread Alessandro DE LAURENZIS
On Fri 15/08 20:08, Alessandro DE LAURENZIS wrote: On Fri 15/08 19:17, Antoine Jacoutot wrote: Actually missing! Is it just my system or... Nah, that's not needed. Still scratching my head... Yeah sorry, I have no other idea for now... Still debugging... I tried to revert to

Re: ulpt/libusb weirdness in -current

2014-08-16 Thread Antoine Jacoutot
Some progresses: I sorted out the things, reistalling from scratch all the packages in cups and hplip ports (with your patch, of course) and now I'm able to install the printer from the CUPS web interface and print too (I verified with the test page and some PDF documents). Cool, that's good.

Re: Generating random.seed for network boot clients

2014-08-16 Thread Christian Weisgerber
On 2014-08-16, Christian Weisgerber na...@mips.inka.de wrote: How about making etc/random.seed a named pipe and feeding chunks of /dev/random to it? I've now put this into my /etc/rc.local: --- # Provide fresh random.seed for pxeboot if cd /tftpboot/etc; then rm -f

Re: Generating random.seed for network boot clients

2014-08-16 Thread Theo de Raadt
I wonder if there would be some benefit to faking these files from inside the tftp daemon itself..

Re: rc.local mystery executables

2014-08-16 Thread Ted Unangst
On Sat, Aug 16, 2014 at 15:22, Joel Rees wrote: On Fri, Aug 15, 2014 at 11:39 PM, Scott Bonds sc...@ggr.com wrote: [...] Perhaps I should separate the router and 'everything else' roles, so that the router only has builtin OpenBSD software on it, no packages. Strongly encourage you to get

Re: Why are there NSA, CSIS, and GOOGLE IDs in my ftplist.cgi

2014-08-16 Thread Ted Unangst
On Sat, Aug 16, 2014 at 04:03, Clint Pachl wrote: I checked out my saved install configurations at http://129.128.5.191/cgi-bin/ftplist.cgi and noticed that at the end of the file there are fields named NSA_ID, CSIS_ID, and GOOGLE_ID. They all sound scary. Each time I refresh the page, only

Re: Why are there NSA, CSIS, and GOOGLE IDs in my ftplist.cgi

2014-08-16 Thread Theo de Raadt
On Sat, Aug 16, 2014 at 04:03, Clint Pachl wrote: I checked out my saved install configurations at http://129.128.5.191/cgi-bin/ftplist.cgi and noticed that at the end of the file there are fields named NSA_ID, CSIS_ID, and GOOGLE_ID. They all sound scary. Each time I refresh the page,

Re: Why are there NSA, CSIS, and GOOGLE IDs in my ftplist.cgi

2014-08-16 Thread Jack Woehr
Theo de Raadt wrote: 1 person noticed. Took about 6 years. Clark Kent, you're a real SOB when you're drunk! :) -- Jack Woehr # We commonly say we have no time when, Box 51, Golden CO 80402 # of course, we have all that there is. http://www.softwoehr.com # - James Mason, _The

Re: Generating random.seed for network boot clients

2014-08-16 Thread Brent Cook
This is starting to remind me of Ubuntu's pollen/pollinate services. On Sat, Aug 16, 2014 at 11:31 AM, Theo de Raadt dera...@cvs.openbsd.org wrote: I wonder if there would be some benefit to faking these files from inside the tftp daemon itself..

Re: ulpt/libusb weirdness in -current

2014-08-16 Thread Alessandro DE LAURENZIS
On Sat 16/08 15:31, Antoine Jacoutot wrote: But there is still something weird... When I try to open hp-systray, I receive the following message: warning: No hp: or hpfax: devices found in any installed CUPS queue. Exiting. Well the HP tools are very very Linux centric; so I am not

PDF FAQ [Was: Donations to OpenBSD]

2014-08-16 Thread Norman Gray
Greetings. Some way up this thread, I said: On 2014 Aug 14, at 11:21, Norman Gray nor...@astro.gla.ac.uk wrote: On 2014 Aug 14, at 01:10, Worik Stanton worik.stan...@gmail.com wrote: Suggestion: Package the release notes, FAQ and some other documentation into a PDF and sell that at the

Re: PDF FAQ [Was: Donations to OpenBSD]

2014-08-16 Thread sven falempin
On Sat, Aug 16, 2014 at 2:01 PM, Norman Gray nor...@astro.gla.ac.uk wrote: Greetings. Some way up this thread, I said: On 2014 Aug 14, at 11:21, Norman Gray nor...@astro.gla.ac.uk wrote: On 2014 Aug 14, at 01:10, Worik Stanton worik.stan...@gmail.com wrote: Suggestion: Package the

Re: PDF FAQ [Was: Donations to OpenBSD]

2014-08-16 Thread Adam Thompson
On 14-08-16 01:01 PM, Norman Gray wrote: To do this, I took the HTML versions of the FAQ sections, and normalised them into regular XHTML (which makes them processable into other forms). With that done, it was straightforward to transform the result into both HTML for presentation, and into

Re: PDF FAQ

2014-08-16 Thread Ingo Schwarze
Hi Adam, Adam Thompson wrote on Sat, Aug 16, 2014 at 03:27:46PM -0500: On 14-08-16 01:01 PM, Norman Gray wrote: To do this, I took the HTML versions of the FAQ sections, and normalised them into regular XHTML (which makes them processable into other forms). With that done, it was

problem with sound card

2014-08-16 Thread Long Wind
My sound card can play sound, but can't record it dmesg related to sound card: isapnp0 at isa0 port 0x279: read port 0x203 sb1 at isapnp0 Creative ViBRA16C PnP, CTL0001, , Audio port 0x220/16,0x330/2,0x388/4 irq 5 drq 1,5: dsp v4.13 midi0 at sb1: SB MPU-401 UART audio0 at sb1 opl at sb1 not

error during package installation

2014-08-16 Thread Long Wind
how to direct ouput by a command to file (so I can report error here) pkg_add nedit t1 doesn't work Thanks!

Re: problem with sound card

2014-08-16 Thread Long Wind
does that really help? OpenBSD 5.5 (GENERIC) #276: Wed Mar 5 09:57:06 MST 2014 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Celeron (GenuineIntel 686-class, 128KB L2 cache) 435 MHz cpu0:

Re: error during package installation

2014-08-16 Thread Ingo Schwarze
Hi, Long Wind wrote on Sun, Aug 17, 2014 at 07:27:09AM +0800: how to direct ouput by a command to file (so I can report error here) pkg_add nedit t1 doesn't work That only catches standard output, not standard error. Both of the following should work: $ pkg_add nedit t1 21 #

Re: error during package installation

2014-08-16 Thread Long Wind
Thank STeve Andre' I use script method I probably will disappoint Ingo Schwarze, perhaps it's not really error, but it made me feel uneasy: Error from http://ftp.sunet.se/pub/os/OpenBSD/5.5/packages/i386/quirks-1.113.tgz Redirected to

Re: error during package installation

2014-08-16 Thread Philip Guenther
On Sat, Aug 16, 2014 at 5:07 PM, Long Wind longwind2...@gmail.com wrote: Thank STeve Andre' I use script method I probably will disappoint Ingo Schwarze, perhaps it's not really error, but it made me feel uneasy: Error from

Re: problem with sound card

2014-08-16 Thread STeve Andre'
On 08/16/14 19:30, Long Wind wrote: does that really help? OpenBSD 5.5 (GENERIC) #276: Wed Mar 5 09:57:06 MST 2014 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Celeron (GenuineIntel 686-class, 128KB L2 cache) 435 MHz cpu0: