| From | Subject | Date |
|---|---|---|
| Mrs. Vishali | Abu Dhabi: Professional Proposal & Report Writing, Dt. 2 ...
PROFESSIONAL PROPOSAL & REPORT WRITING
(Informative, Persuasive, Clear & Professional)
28
| Oct 30, 10:19 am 2010 |
| Janne Johansson | small nit in nsd.conf manpage.
The word "slave" will not appear in the manpage when the nsd.conf source
looks like it
does.
Patch here:
Index: nsd.conf.5
===================================================================
RCS file: /cvs/src/usr.sbin/nsd/nsd.conf.5,v
retrieving revision 1.2
diff -u -r1.2 nsd.conf.5
--- nsd.conf.5 1 Oct 2010 20:45:09 -0000 1.2
+++ nsd.conf.5 30 Oct 2010 20:00:09 -0000
@@ -345,8 +345,7 @@
file, which may have different security policies, can be split apart.
.SH "NSD ...
| Oct 30, 1:03 pm 2010 |
| Ingo Schwarze | Re: small nit in nsd.conf manpage.
Hi Janne, hi Jakob,
OK schwarze@; but please make sure this is also sent upstream,
ideally coordinated with the rest of the cleanup (Jakob?).
This is indeed a manual formatting bug.
It is not specific to OpenBSD.
It happens with groff-1.15, groff-1.20 and mandoc.
The point is that a single quote in column 1 is a macro
control character, see here:
$ mandoc -Tlint /usr/src/usr.sbin/nsd/nsd.conf.5
[...]
/usr/src/usr.sbin/nsd/nsd.conf.5:349:2:
ERROR: skipping unknown macro: unknown ...
| Oct 30, 3:18 pm 2010 |
| OpenBSD Geek | OpenBSD Course online
Is there someone who can give me OpenBSD Administration course online
(practice using ssh) ? That will cover BSDP Objectives.
Thanks
| Oct 29, 9:54 pm 2010 |
| Andres Perera | less stupid kshrc example
Defining a bunch of functions just to update the term title is
ridiculous.
--- src/etc/ksh.kshrc.orig Fri Oct 29 21:40:51 2010
+++ src/etc/ksh.kshrc Fri Oct 29 21:51:48 2010
@@ -45,16 +45,7 @@
HOSTNAME=${HOSTNAME:-`uname -n`}
HOST=${HOSTNAME%%.*}
- PROMPT="$USER:!$PS1S"
- #PROMPT="<$USER@$HOST:!>$PS1S"
- PPROMPT='$USER:$PWD:!'"$PS1S"
- #PPROMPT='<$USER@$HOST:$PWD:!>'"$PS1S"
- PS1=$PPROMPT
- # $TTY is the tty we logged in on,
- # $tty is that which we are in now (might by ...
| Oct 29, 7:25 pm 2010 |
| Stuart Henderson | Oct 30, 6:34 am 2010 | |
| Brynet | Re: sync adduser with installer
I believe the real problem here is that you're allowing users on your
systems that are incapable of properly setting the group/world
permissions of their home directories.
It's also a possibility that you are derelict in your duties as a
systems administrator.
No cookies for you.
-Bryan.
| Oct 29, 10:12 pm 2010 |
| Philip Guenther | Re: sync adduser with installer
You're right, I should have required new CS and physics students to
defeat me in single CLI combat before they could take the courses that
You're suggesting that selecting a default that reduces support calls
and reduces user aggravation is a sign of *bad* systems administration
practice? That's an interesting take on best practices.
Philip Guenther
| Oct 30, 2:51 pm 2010 |
| Daniel C. Sinclair | Re: sync adduser with installer
My employer lets a variety of people on their systems - they just want
work to get done and don't know or care about this kind of thing.
Don't you have this problem where you work?
Seriously, putting everyone in the same 'users' group is like running
all your daemons as 'nobody'. I can quote a stack of UNIX books that
recommend against both (a couple examples are Secure Architectures
with OpenBSD, the AbsoluteBSD books, and the ones I linked to above).
They all talk about using 'adduser' and ...
| Oct 30, 2:50 pm 2010 |
| Paul de Weerd | Re: sync adduser with installer
On Sat, Oct 30, 2010 at 01:12:54AM -0400, Brynet wrote:
| Daniel wrote:
| > Same here. Really, I'm surprised that anyone is using the 'users'
| > group at all these days, especially on OpenBSD. If all users are in
| > the same group, group permissions are no different from world
| > permissions.
|
| I believe the real problem here is that you're allowing users on your
| systems that are incapable of properly setting the group/world
| permissions of their home directories.
Welcome, to the ...
| Oct 30, 1:10 am 2010 |
| Henning Brauer | Re: sync adduser with installer
[ ] you grok "sane defaults"
--
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting
| Oct 30, 4:39 am 2010 |
| Daniel C. Sinclair | Re: sync adduser with installer
On Fri, Oct 29, 2010 at 11:25 AM, Henning Brauer
Same here. Really, I'm surprised that anyone is using the 'users'
group at all these days, especially on OpenBSD. If all users are in
the same group, group permissions are no different from world
permissions.
The book "Mastering FreeBSD and OpenBSD security" talks about per-user
groups being the best option ...
| Oct 29, 6:41 pm 2010 |
| Brynet | Re: sync adduser with installer
So wait, are you for or against creating lone groups for individual users?
All I was trying to communicate is that the exposure of a users home
directory is something that must be dealt with by system administrators
or preferably by the individual users themselves.
By default on OpenBSD, home directories are world readable, the
installer (..if directed) uses user(8) tools to create a default
account, this adds the user to the shared 'users' group.
This is expected behaviour for people who ...
| Oct 30, 2:10 am 2010 |
| Philip Guenther | Re: testing rthreads
The problem was actually introduced during the c2k10 hackathon, where I
changed getthrid() to always add THREAD_PID_OFFSET to the proc's real pid
(which closes a race for pthread_kill)...but failed to teach fork1() to do
that too. The patch at bottom fixes this in my testing.
(I wasn't seeing this myself becauswe I'm normally running a severely
hacked librthread that uses the platform's per-thread register to
implement pthread_self() instead of having to walk the thread list.
Oh ...
| Oct 30, 4:00 pm 2010 |
| Gilles Chehade | Re: smtpd w/ async DNS
Hi tech@,
A new tarball with all reported issues fixed is available at:
http://www.poolp.org/~gilles/smtpd-asyncdns.tar.gz
smtpd now catches changes in /etc/resolv.conf and should work fine with
inet6 records.
I have done some stress testing here and it's been stable.
asr has also been improved by eric@ who cleaned up code, fixed some bugs
and added tcp support, honors the family keyword in /etc/resolv.conf.
Please test fast and report issues so that we can move to the next ...
| Oct 30, 7:55 am 2010 |
| Gilles Chehade | Re: smtpd w/ async DNS
It was a typo indeed, tarball has been updated and also contains a fix for
a crash experienced by todd@ when using "relay via"
Gilles
| Oct 30, 8:28 am 2010 |
| Peter J. Philipp | Re: smtpd w/ async DNS
Hi,
Is this a typo? on line 40 in asr.c
#define DEFAULT_CONF "lookup bind file\nameserver 127.0.0.1\n"
should it be
"lookup bind file\nnameserver 127.0.0.1\n"?
regards,
-peter
| Oct 30, 8:23 am 2010 |
| Peter J. Philipp | Re: smtpd w/ async DNS
I had a look at the pack.c file where the DNS compression is being handled.
It looks good to me. But I have one concern that needs to be confirmed.
In function dname_expand() on lines:
54 ptr = 256 * (n & ~0xc0) + data[offset + 1];
55 if (ptr >= offset)
56 return (-1);
The pointer is checked against offset meaning that a compression loop can't
occur. This is good. However what happens if you ...
| Oct 30, 10:26 am 2010 |
| Eric Faurot | Re: smtpd w/ async DNS
You are totally right. The following patch should fix it. Thanks a lot.
Eric.
--- pack.c.orig Sat Oct 30 21:22:14 2010
+++ pack.c Sat Oct 30 21:22:06 2010
@@ -38,21 +38,21 @@ ssize_t
dname_expand(const unsigned char *data, size_t len, size_t offset,
size_t *newoffset, char *dst, size_t max)
{
- size_t n, count, end, ptr;
+ size_t n, count, end, ptr, start;
ssize_t res;
if (offset >= len)
return (-1);
res = 0;
- end = offset;
+ end = start = offset;
...
| Oct 30, 12:26 pm 2010 |
| previous day | today | next day |
|---|---|---|
| October 29, 2010 | October 30, 2010 | October 31, 2010 |
