/etc/opiekeys permissions?

2005-07-14 Thread Eygene A. Ryabinkin
  Good day.
 Playing with OPIE I've noticed that the /etc/opiekeys have mode 644. As I
remember there was a vulnurability related to this permissions for S/Key. But
at that times that file was named /etc/skeykeys and it was created with
permissions 600, so FreeBSD was not vulnerable to the disctionary attack.
 But now it seems to be vulnurable again. Are there any programs that are
run in non-root mode and they do want to use OPIE? If there is no such
programs, why the permissions are so strange?
-- 
 rea
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread Vyacheslav Sotnikov

John Von Essen пишет:

boot single user...

mount -u /
mount -a

Then use vipw or passwd to clear out or change root password. If you 
shutdown the system un-cleanly, you may have to do an fsck / as 
fragmentation will prevent the filesystem from being mounted 
read-write-able.


-john



but what to do if i have "console  insecure" in /etc/ttys?


___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread Alex Zbyslaw

Vyacheslav Sotnikov wrote:


but what to do if i have "consoleinsecure" in /etc/ttys?


I believe you can
   Boot cdrom
   Pick "Change system manager's password"
   Type the new password.

Worked fine from /stand/sysinstall, but you have to be root to do that 
from the command line :-)


--Alex

___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: SIMPLEQ_* macros from OpenBSD sys/queue.h

2005-07-14 Thread Giorgos Keramidas
On 2005-07-14 00:22, "M. Warner Losh" <[EMAIL PROTECTED]> wrote:
> In message: <[EMAIL PROTECTED]>
> Giorgos Keramidas <[EMAIL PROTECTED]> writes:
> : I couldn't agree more.  Helping source-level compatibility, as much as
> : this can be accomplished for kernel code, is definitely a plus.  This is
> : partly the reason why I noted that OpenBSD synchronized their queue.h
> : header with NetBSD a few times in the past.  I just didn't propose
> : something like this because I'm not sure I can convince any of the three
> : BSD teams to s/SIMPLEQ/STAILQ/ or vice versa :-)
>
> Yea, but adding the #defines to sys/queue.h in both directions likely
> wouldn't hurt.

Surely.  Great idea!

As long as there *is* an equivalent macro that exactly matches the
expected behavior, this can work nicely.

___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread stsp
On Thu, Jul 14, 2005 at 02:16:31PM +0400, Vyacheslav Sotnikov wrote:
> but what to do if i have "console insecure" in /etc/ttys?

In the linux world, you would simply boot a live cd like knoppix,
open a root shell in the live system and chroot into your installed
system to get root access without a password.

I guess you could do similar tricks with FreeSBIE, or however
that's spelled...
-- 
stefan
http://stsp.in-berlin.de PGP Key: 0xF59D25F0
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: nagios and pthreads

2005-07-14 Thread Michal Mertl
Jeremie Le Hen wrote:
> Hi Christophe,
> 
> a quick glance at the archives whould have helped you.

I also experienced the problem and read the thread. I don't believe
anybody found and shared a way to solve it. The conclusion of the thread
was that the problem is more in the application then in FreeBSD - the
application does things not well defined in POSIX threading environment.

The right fix is probably a non trivial change to Nagios.


> > i know that we add already discuss about this problem, but is there any
> > solution for this problem ?
> > 
> > ---
> > What's section on nagios website
> > "FreeBSD and threads. On FreeBSD there's a native user-level
> > implementation of threads called 'pthread' and there's also an optional
> > ports collection 'linuxthreads' that uses kernel hooks. Some folks from
> > Yahoo! have reported that using the pthread library causes Nagios to pause
> > under heavy I/O load, causing some service check results to be lost.
> > Switching to linuxthreads seems to help this problem, but not fix it. The
> > lock happens in liblthread's __pthread_acquire() - it can't ever acquire
> > the spinlock. It happens when the main thread forks to execute an active
> > check. On the second fork to create the grandchild, the grandchild is
> > created by fork, but never returns from liblthread's fork wrapper, because
> > it's stuck in __pthread_acquire(). Maybe some FreeBSD users can help out
> > with this problem."
> > ---
> > 
> > 
> > I have just upgraded to 5.4-STABLE but i encountered again the problem.
> > Sometimes, there is a nagios forked child process which consume 100% of
> > CPU.
> > i have heard that there was perhaps a problem with libc_r reported by
> > Luigi Rizzo on this list 06/22/2005, but no news since this date...
> > 
> > My workaround is to have a cron job which run every hour and check if
> > there is a bad nagios process and kill it... i know it's very ugly...
> > 
> > Do you any solution or what could i do to get more trace when it happen ?
> > sorry, but i am not familiar with ktrace like tools... If someone could
> > help me to help nagios community on freebsd ;-) ?
> > 
> > Thanks in advance.
> 
> This thread should countain some answers :
> http://lists.freebsd.org/pipermail/freebsd-hackers/2005-June/012435.html
> 
> Regards,

___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread Julian H. Stacey
Amandeep wrote:
> Hi all,

First, please do Not cross post, we have a rule about that !

... so I dropped cc freebsd-questions@freebsd.org,

> Is there a way to reset the root passwd without reinstalling FreeBSD 4.7.
> 
> Thanks in advance
> 
> Aman

passwd root

[ Except maybe ]
Various things get crippled now, in the name of avoiding
`shooting self in the foot' accidents by neophytes. So maybe
if you're running at a higher kernel security level you
might need to turn that off.  Don't know how though, I never
cripple my root access. (& similarly hate eg fdisk -a being
similarly crippled by sysctl, in the same name of neophyte
foot shooting prevention )

-- 
Julian Stacey Consultant Systems Engineer, Munich. http://berklix.com
Mail in Ascii (Html = Spam).  Ihr Rauch = mein allergischer Kopfschmerz.
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread John Von Essen
Boot with 1st CD, goto the Fixit Shell (will need 2nd CD). From there you
have to manually mount the / filesystem and edit passwd (just clear out
the passwd, root::). However, do an fsck on the device first (you may have
to reboot afterwards) since if you have any fragmentation following an
unclean shutdown, you will not be able to mount the device.

-john

On Thu, 14 Jul 2005, Vyacheslav Sotnikov wrote:

> John Von Essen пишет:
> > boot single user...
> >
> > mount -u /
> > mount -a
> >
> > Then use vipw or passwd to clear out or change root password. If you
> > shutdown the system un-cleanly, you may have to do an fsck / as
> > fragmentation will prevent the filesystem from being mounted
> > read-write-able.
> >
> > -john
>
>
> but what to do if i have "console insecure" in /etc/ttys?
>
>
> ___
> freebsd-hackers@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Call for FreeBSD status reports

2005-07-14 Thread Max Laier
This is a friendly reminder that we are collecting status reports.  
Submissions are due tomorrow (July 15).  If you are planning to submit 
something, but won't be able to make the formal deadline - please let us 
know, we are willing to extend the deadline a bit for a broader turnout.

Looking forward to receiving your reports!

On Wednesday 06 July 2005 16:24, I wrote:
> All,
>
> Three month of fruitful development have passed since the last round of
> FreeBSD status reports, and the release of FreeBSD 6.0 is on the
> doorstep.  We hope that you made good progress on your projects and have
> interesting news to share.  Please do so by sending a status report to
> [EMAIL PROTECTED]  Submissions are due by July 15, 2005.
>
> Reports should cover activities during May to June, but may of course cover
> earlier work as well.  In addition we encourage you to use the "Open Tasks"
> section to recruit help for your project and point out future direction.
>
> Submissions are *not* limited to FreeBSD developers with commit rights!  It
> is open to everybody who is doing FreeBSD related work and wants to share
> progress with the community.  The status reports are also a good vehicle to
> gather interested people for you WIP.
>
> We have introduced a new category called "soc" to pool reports related to
> Google Summer of Code.  We hope for interesting news from that corner!
>
> To help you with fileing your report you will find a webform or
> xml-template linked from http://www.freebsd.org/news/status/ (as soon as
> the www build completes).
>
> Submissions are due on July 15.  Thanks a lot, and we are hoping for a big
> turn-out.

-- 
/"\  Best regards,  | [EMAIL PROTECTED]
\ /  Max Laier  | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | [EMAIL PROTECTED]
/ \  ASCII Ribbon Campaign  | Against HTML Mail and News


pgp6pKvdsCRU5.pgp
Description: PGP signature


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread Mike Meyer
In <[EMAIL PROTECTED]>, John Von Essen <[EMAIL PROTECTED]> typed:
> Boot with 1st CD, goto the Fixit Shell (will need 2nd CD).

You an boot the second CD directly.

  http://www.mired.org/consulting.html
Independent Network/Unix/Perforce consultant, email for more information.
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: How to reset root passwd FreeBSdD4.7

2005-07-14 Thread Vasil Dimov
On Thu, Jul 14, 2005 at 09:55:16AM -0400, John Von Essen wrote:
> Boot with 1st CD, goto the Fixit Shell (will need 2nd CD). From there you
> have to manually mount the / filesystem and edit passwd (just clear out
> the passwd, root::). However, do an fsck on the device first (you may have
> to reboot afterwards) since if you have any fragmentation following an
> unclean shutdown, you will not be able to mount the device.
> 

Simply editing /etc/passwd won't do the work (this is not Linux, eah)
/etc/master.passwd must be edited and then pwd_mkdb /etc/master.passwd
must be run.


pgpden6tDU2vh.pgp
Description: PGP signature