Root as R/O

2009-03-01 Thread Jean-Francois
Hi All, One could develop a little bit the addvantage(s) of mounting root as read only ? Regards J-F

Re: Root as R/O

2009-03-01 Thread Jean-Francois
Janusz, I try to secure a box by forbidding the change to main system files. /dev /etc /tmp /var are on separate slides and would be w/r of course. Le dimanche 01 mars 2009 C 13:15 +0100, Janusz Gumkowski a C)crit : On Sun, Mar 01, 2009 at 10:18:54AM +0100, Jean-Francois wrote: Hi All,

Re: nv driver and 4.5 beta

2009-03-01 Thread J.C. Roberts
On Sat, 28 Feb 2009 18:30:01 -0700 (MST) j...@bitminer.ca wrote: After getting almost there (thanks JC Roberts) on Intel 845G, I tried the other computer, an old nforce2-based machine. It works on 4.3-stable, and on 4.5beta Xorg -configure says No devices to configure. Configuration

Re: Root as R/O

2009-03-01 Thread Bret S. Lambert
On Sun, Mar 01, 2009 at 03:03:53PM +0100, Jean-Francois wrote: Janusz, I try to secure a box by forbidding the change to main system files. /dev /etc /tmp /var are on separate slides and would be w/r of course. If /etc/ is on a seperate partition, how would you read /etc/fstab in order to

Re: nroff -mandoc alternative

2009-03-01 Thread Christian Weisgerber
Kristaps DEonsons krist...@kth.se wrote: Hello, if anybody's interested in an alternative to groff for viewing BSD mdoc manual pages, I'm actively looking for patches and problem reports for mdocml. From the site http://mdocml.bsd.lv: Does this also handle man(7) or only mdoc(7)? --

Re: nroff -mandoc alternative

2009-03-01 Thread Jason McIntyre
On Sun, Mar 01, 2009 at 03:22:33PM +, Christian Weisgerber wrote: Kristaps DEonsons krist...@kth.se wrote: Hello, if anybody's interested in an alternative to groff for viewing BSD mdoc manual pages, I'm actively looking for patches and problem reports for mdocml. From the site

Re: Root as R/O

2009-03-01 Thread Nick Holland
Jean-Francois wrote: Hi All, One could develop a little bit the addvantage(s) of mounting root as read only ? considering the collection of fairly basic questions coming from you in the last few weeks, may I suggest a bit more walking before you try running? Run the system as intended

Re: Robots on Mediawiki OpenBSD behind OpenBSD router

2009-03-01 Thread ropers
2009/2/18 Vivek Ayer vivek.a...@gmail.com: Hi guys, Just wondering why google hasn't indexed my website yet. I have a mediawiki running on OpenBSD 4.3 behind a router that's running OpenBSD 4.3 which has the public IP. Do I need to create a robots.txt file in /var/www and /var/www/mediawiki

Re: Root as R/O

2009-03-01 Thread Nigel J. Taylor
Take a look at Live CD or Live DVD methods for OpenBSD, / contains /dev /etc copies are made in memory file systems (changes to /etc will be lost). Mounting a read-only / can simply be reversed with mount -u -w /. To make it more difficult take a look at chflags schg, which make files immutable

Re: Root as R/O

2009-03-01 Thread Tomáš Bodžár
Hi, if you want to protect some important files on system.Try first things in base. Like man chflags and man securelevel 2009/3/1 Nick Holland n...@holland-consulting.net: Jean-Francois wrote: Hi All, One could develop a little bit the addvantage(s) of mounting root as read only ?

Re: nv driver and 4.5 beta

2009-03-01 Thread j
From the dmesg, it's obviously not the IBM Netvista box you mentioned previously. There's one strange thing about the IBM Netvista boxes that is highly annoying; some of them have an AGP slot, but the chips/bios needed to make the AGP usable are completely missing. Yah, I'm working through

Re: Robots on Mediawiki OpenBSD behind OpenBSD router

2009-03-01 Thread Vivek Ayer
it's been crawled. I used google webmaster tools and everything is fine now. Thanks, Vivek On Sun, Mar 1, 2009 at 8:55 AM, ropers rop...@gmail.com wrote: 2009/2/18 Vivek Ayer vivek.a...@gmail.com: Hi guys, Just wondering why google hasn't indexed my website yet. I have a mediawiki running

dm...@openbsd.org Question

2009-03-01 Thread J.C. Roberts
Due to having a usage cap on my Internet connection (cellular), I don't typically run -CURRENT, and I could find no mention of this question in either faq4.html or current.html When running -CURRENT snapshots, should we send in a new dmesg every time we install a new snapshot? thanks, jon --

Re: dm...@openbsd.org Question

2009-03-01 Thread Theo de Raadt
Due to having a usage cap on my Internet connection (cellular), I don't typically run -CURRENT, and I could find no mention of this question in either faq4.html or current.html When running -CURRENT snapshots, should we send in a new dmesg every time we install a new snapshot? When new

in/out altq + ipsec + bridge = brainbug?

2009-03-01 Thread peters
Hi list, i'm working since a while (honestly weeks) on an soekris 5501, trying to build a nice soho router and somehow i don't get any further, i'm not even sure if my approach is correct, so i would appreciate a bit help. setup is quite usual: 1 dsl, 1 lan and 1 wlan link. in the beginning it

Re: nv driver and 4.5 beta

2009-03-01 Thread j
The nvidia-based machine (nforce2 chipset, AMD 2500XP, circa 2003) is either not showing any video cards at all, or with apm turned off, not functioning ethernet-wise. Never mind, the machdep.allowaperture was not set. Sorry for the noise. --John

man windowrc

2009-03-01 Thread punosevac72
Is there are chance that somebody writes a man pages for windowrc? I am finding that launching more than 2 windows in the same console (which is the default number) is quite cumbersome at least comparing to dtwm. I found only one thread about the topic

Re: tcpdump and IPv6 on OpenBSD 4.4 possible bug

2009-03-01 Thread new_guy
I tried loading the most recent snapshot (2-28-2009) and running the tests again. Same results. I loaded some screenshots and other information here: http://filebox.vt.edu/users/rtilley/public/tcpdump It could be I'm doing something incorrectly with syntax as I don't dp this often. The exact

Re: dm...@openbsd.org Question

2009-03-01 Thread new_guy
J.C. Roberts-3 wrote: When running -CURRENT snapshots, should we send in a new dmesg every time we install a new snapshot? I sent one today. I seldom do, but an on board Ethernet device using (lii) that had not worked in 4.4, worked in the latest snapshot (I had not ran a snapshot since

Re: Install 4.4 Sparc64 on SunFire V120

2009-03-01 Thread Daniel Ouellet
The only issue I have, and it's been there for years is the CD-Rom give issues at time, so I just unplug them after the install and a very minor thing that really doesn't do much, but there is a off by one in the USB code somewhere that makes the kernel try to reinitialize the USB all the time

aue0 can't send packets

2009-03-01 Thread Nenhum_de_Nos
hail, I have an usb th ethernet and can't use it on OpenBSD 4.4. It detects ok, ifconfigs shows but can't ever get an ip from dhcp server, if I force ip with ifconfig I can't use either. the device is: aue0 at uhub2 port 1 ADMtek USB To LAN Converter rev 1.10/2.01 addr 2 aue0: address

Re: man windowrc

2009-03-01 Thread Mike Erdely
On Sun, Mar 01, 2009 at 06:29:36PM -0500, punoseva...@gmail.com wrote: Is there are chance that somebody writes a man pages for windowrc? I am finding that launching more than 2 windows in the same console (which is the default number) is quite cumbersome at least comparing to dtwm. I found

openssl freezes ssh and entire inet service

2009-03-01 Thread Vivek Ayer
Hi, I'm not sure why it happens, but I tried running: openssl genrsa -out /etc/ssl/private/server.key 1024 over an ssh connection to a web server that I wanted to setup as https. Believe it or not, it froze while it was running openssl. Now I can't ping it or do anything. Could this be because

Re: openssl freezes ssh and entire inet service

2009-03-01 Thread Damien Miller
On Sun, 1 Mar 2009, Vivek Ayer wrote: Hi, I'm not sure why it happens, but I tried running: openssl genrsa -out /etc/ssl/private/server.key 1024 over an ssh connection to a web server that I wanted to setup as https. Believe it or not, it froze while it was running openssl. Now I

Re: openssl freezes ssh and entire inet service

2009-03-01 Thread Vivek Ayer
why would this occur? I thought openssl was stable. Does it have to do with the key length? Btw, I'm running openbsd/sparc64 just so that you know Thanks for the quick reply, Vivek On Sun, Mar 1, 2009 at 9:49 PM, Damien Miller d...@mindrot.org wrote: On Sun, 1 Mar 2009, Vivek Ayer wrote: Hi,

Re: openssl freezes ssh and entire inet service

2009-03-01 Thread Damien Miller
On Sun, 1 Mar 2009, Vivek Ayer wrote: why would this occur? Without you looking at the console, who knows? I thought openssl was stable. It is. It almost certainly isn't OpenSSL that has crashed, but rather your host. Does it have to do with the key length? No. -d