/etc/opiekeys permissions?
Good day. Playing with OPIE I've noticed that the /etc/opiekeys have mode 644. As I remember there was a vulnurability related to this permissions for S/Key. But at that times that file was named /etc/skeykeys and it was created with permissions 600, so FreeBSD was not vulnerable to the disctionary attack. But now it seems to be vulnurable again. Are there any programs that are run in non-root mode and they do want to use OPIE? If there is no such programs, why the permissions are so strange? -- rea ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to reset root passwd FreeBSdD4.7
John Von Essen пишет: boot single user... mount -u / mount -a Then use vipw or passwd to clear out or change root password. If you shutdown the system un-cleanly, you may have to do an fsck / as fragmentation will prevent the filesystem from being mounted read-write-able. -john but what to do if i have "console insecure" in /etc/ttys? ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to reset root passwd FreeBSdD4.7
Vyacheslav Sotnikov wrote: but what to do if i have "consoleinsecure" in /etc/ttys? I believe you can Boot cdrom Pick "Change system manager's password" Type the new password. Worked fine from /stand/sysinstall, but you have to be root to do that from the command line :-) --Alex ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: SIMPLEQ_* macros from OpenBSD sys/queue.h
On 2005-07-14 00:22, "M. Warner Losh" <[EMAIL PROTECTED]> wrote: > In message: <[EMAIL PROTECTED]> > Giorgos Keramidas <[EMAIL PROTECTED]> writes: > : I couldn't agree more. Helping source-level compatibility, as much as > : this can be accomplished for kernel code, is definitely a plus. This is > : partly the reason why I noted that OpenBSD synchronized their queue.h > : header with NetBSD a few times in the past. I just didn't propose > : something like this because I'm not sure I can convince any of the three > : BSD teams to s/SIMPLEQ/STAILQ/ or vice versa :-) > > Yea, but adding the #defines to sys/queue.h in both directions likely > wouldn't hurt. Surely. Great idea! As long as there *is* an equivalent macro that exactly matches the expected behavior, this can work nicely. ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to reset root passwd FreeBSdD4.7
On Thu, Jul 14, 2005 at 02:16:31PM +0400, Vyacheslav Sotnikov wrote: > but what to do if i have "console insecure" in /etc/ttys? In the linux world, you would simply boot a live cd like knoppix, open a root shell in the live system and chroot into your installed system to get root access without a password. I guess you could do similar tricks with FreeSBIE, or however that's spelled... -- stefan http://stsp.in-berlin.de PGP Key: 0xF59D25F0 ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: nagios and pthreads
Jeremie Le Hen wrote: > Hi Christophe, > > a quick glance at the archives whould have helped you. I also experienced the problem and read the thread. I don't believe anybody found and shared a way to solve it. The conclusion of the thread was that the problem is more in the application then in FreeBSD - the application does things not well defined in POSIX threading environment. The right fix is probably a non trivial change to Nagios. > > i know that we add already discuss about this problem, but is there any > > solution for this problem ? > > > > --- > > What's section on nagios website > > "FreeBSD and threads. On FreeBSD there's a native user-level > > implementation of threads called 'pthread' and there's also an optional > > ports collection 'linuxthreads' that uses kernel hooks. Some folks from > > Yahoo! have reported that using the pthread library causes Nagios to pause > > under heavy I/O load, causing some service check results to be lost. > > Switching to linuxthreads seems to help this problem, but not fix it. The > > lock happens in liblthread's __pthread_acquire() - it can't ever acquire > > the spinlock. It happens when the main thread forks to execute an active > > check. On the second fork to create the grandchild, the grandchild is > > created by fork, but never returns from liblthread's fork wrapper, because > > it's stuck in __pthread_acquire(). Maybe some FreeBSD users can help out > > with this problem." > > --- > > > > > > I have just upgraded to 5.4-STABLE but i encountered again the problem. > > Sometimes, there is a nagios forked child process which consume 100% of > > CPU. > > i have heard that there was perhaps a problem with libc_r reported by > > Luigi Rizzo on this list 06/22/2005, but no news since this date... > > > > My workaround is to have a cron job which run every hour and check if > > there is a bad nagios process and kill it... i know it's very ugly... > > > > Do you any solution or what could i do to get more trace when it happen ? > > sorry, but i am not familiar with ktrace like tools... If someone could > > help me to help nagios community on freebsd ;-) ? > > > > Thanks in advance. > > This thread should countain some answers : > http://lists.freebsd.org/pipermail/freebsd-hackers/2005-June/012435.html > > Regards, ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to reset root passwd FreeBSdD4.7
Amandeep wrote: > Hi all, First, please do Not cross post, we have a rule about that ! ... so I dropped cc freebsd-questions@freebsd.org, > Is there a way to reset the root passwd without reinstalling FreeBSD 4.7. > > Thanks in advance > > Aman passwd root [ Except maybe ] Various things get crippled now, in the name of avoiding `shooting self in the foot' accidents by neophytes. So maybe if you're running at a higher kernel security level you might need to turn that off. Don't know how though, I never cripple my root access. (& similarly hate eg fdisk -a being similarly crippled by sysctl, in the same name of neophyte foot shooting prevention ) -- Julian Stacey Consultant Systems Engineer, Munich. http://berklix.com Mail in Ascii (Html = Spam). Ihr Rauch = mein allergischer Kopfschmerz. ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to reset root passwd FreeBSdD4.7
Boot with 1st CD, goto the Fixit Shell (will need 2nd CD). From there you have to manually mount the / filesystem and edit passwd (just clear out the passwd, root::). However, do an fsck on the device first (you may have to reboot afterwards) since if you have any fragmentation following an unclean shutdown, you will not be able to mount the device. -john On Thu, 14 Jul 2005, Vyacheslav Sotnikov wrote: > John Von Essen пишет: > > boot single user... > > > > mount -u / > > mount -a > > > > Then use vipw or passwd to clear out or change root password. If you > > shutdown the system un-cleanly, you may have to do an fsck / as > > fragmentation will prevent the filesystem from being mounted > > read-write-able. > > > > -john > > > but what to do if i have "console insecure" in /etc/ttys? > > > ___ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "[EMAIL PROTECTED]" > ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: Call for FreeBSD status reports
This is a friendly reminder that we are collecting status reports. Submissions are due tomorrow (July 15). If you are planning to submit something, but won't be able to make the formal deadline - please let us know, we are willing to extend the deadline a bit for a broader turnout. Looking forward to receiving your reports! On Wednesday 06 July 2005 16:24, I wrote: > All, > > Three month of fruitful development have passed since the last round of > FreeBSD status reports, and the release of FreeBSD 6.0 is on the > doorstep. We hope that you made good progress on your projects and have > interesting news to share. Please do so by sending a status report to > [EMAIL PROTECTED] Submissions are due by July 15, 2005. > > Reports should cover activities during May to June, but may of course cover > earlier work as well. In addition we encourage you to use the "Open Tasks" > section to recruit help for your project and point out future direction. > > Submissions are *not* limited to FreeBSD developers with commit rights! It > is open to everybody who is doing FreeBSD related work and wants to share > progress with the community. The status reports are also a good vehicle to > gather interested people for you WIP. > > We have introduced a new category called "soc" to pool reports related to > Google Summer of Code. We hope for interesting news from that corner! > > To help you with fileing your report you will find a webform or > xml-template linked from http://www.freebsd.org/news/status/ (as soon as > the www build completes). > > Submissions are due on July 15. Thanks a lot, and we are hoping for a big > turn-out. -- /"\ Best regards, | [EMAIL PROTECTED] \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED] / \ ASCII Ribbon Campaign | Against HTML Mail and News pgp6pKvdsCRU5.pgp Description: PGP signature
Re: How to reset root passwd FreeBSdD4.7
In <[EMAIL PROTECTED]>, John Von Essen <[EMAIL PROTECTED]> typed: > Boot with 1st CD, goto the Fixit Shell (will need 2nd CD). You an boot the second CD directly. http://www.mired.org/consulting.html Independent Network/Unix/Perforce consultant, email for more information. ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Re: How to reset root passwd FreeBSdD4.7
On Thu, Jul 14, 2005 at 09:55:16AM -0400, John Von Essen wrote: > Boot with 1st CD, goto the Fixit Shell (will need 2nd CD). From there you > have to manually mount the / filesystem and edit passwd (just clear out > the passwd, root::). However, do an fsck on the device first (you may have > to reboot afterwards) since if you have any fragmentation following an > unclean shutdown, you will not be able to mount the device. > Simply editing /etc/passwd won't do the work (this is not Linux, eah) /etc/master.passwd must be edited and then pwd_mkdb /etc/master.passwd must be run. pgpden6tDU2vh.pgp Description: PGP signature