use arc4random() in sppp(4) IPv6CP

2013-11-06 Thread Stefan Sperling
The IPv6CP code generates interface IDs based on getmicrouptime(), in the sppp_suggest_ip6_addr() function. Interface IDs provide parts of the link-local addresses used for the endpoints of the point-to-point link. RFC 5072 says the ifid may be generated from a good random source if available.

Weard security report

2013-11-06 Thread sven falempin
Hello, I love daily scripts and used it to follow some activity on server(s) One of my server got this entry: Running security(8): == /var/db/cloud.json diffs (-OLD +NEW) == --- /dev/null Fri Oct 25 01:30:33 2013 +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 [...] Previous

Re: Weard security report

2013-11-06 Thread Kirill Bychkov
On Wed, November 6, 2013 19:24, sven falempin wrote: Hello, Hi I love daily scripts and used it to follow some activity on server(s) One of my server got this entry: Running security(8): == /var/db/cloud.json diffs (-OLD +NEW) == --- /dev/null Fri Oct 25 01:30:33 2013 +++

Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Torbjorn Granlund
ni...@lysator.liu.se (Niels Möller) writes: I don't understand the fine details of which reloc types make sense in pic code, but if I understand Philip correctly, the main problem is not a ABI change, but changed compiler default. And then you get link errors when linking together pic

Re: Weard security report

2013-11-06 Thread Joerg Sonnenberger
On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: == /var/db/cloud.json diffs (-OLD +NEW) == --- /dev/null Fri Oct 25 01:30:33 2013 +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 This just means that the file was created as opposed to empty. Joerg

Re: Weard security report

2013-11-06 Thread Alexander Hall
Joerg Sonnenberger jo...@britannica.bec.de wrote: On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: == /var/db/cloud.json diffs (-OLD +NEW) == --- /dev/null Fri Oct 25 01:30:33 2013 +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 This just means that the file

Re: Weard security report

2013-11-06 Thread sven falempin
On Wed, Nov 6, 2013 at 11:43 AM, Alexander Hall alexan...@beard.se wrote: Joerg Sonnenberger jo...@britannica.bec.de wrote: On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: == /var/db/cloud.json diffs (-OLD +NEW) == --- /dev/null Fri Oct 25 01:30:33 2013 +++

Re: Weard security report

2013-11-06 Thread Rajneesh N. Shetty
http://sans.org/ English Version (PDF) http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201311_en.pdf English Version (.epub -- tablets only) http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201311_eneb.epub Translations Archives http://www.securingthehuman.org/ouch

bgpd: fib-priority

2013-11-06 Thread Florian Obser
First stab, only lightly tested, reload is *not* working. I need to think a bit more how to handle reloads exactly. Note that if you try to shoot yourself in the foot by specifing another already used priority (e.g. 32), it will not only take of your foot but take the thigh right with it... (at

Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Philip Guenther
On Wed, 6 Nov 2013, Torbjorn Granlund wrote: ... The change makes be quite worried, since it *seems* to be done without proper understanding of the issues involved. Appearances can be deceiving. Furthermore, the ABI change has not been properly announced, I guess the release announcement

Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Ville Valkonen
On 7 November 2013 04:24, Philip Guenther guent...@gmail.com wrote: On Wed, 6 Nov 2013, Torbjorn Granlund wrote: ... The change makes be quite worried, since it *seems* to be done without proper understanding of the issues involved. Appearances can be deceiving. Furthermore, the ABI