Re: I cant boot GNU/Hurd (i386)

2002-08-20 Thread louie miranda
I found it!! http://www.debian.org/ports/hurd/hurd-cd = Thanks, Louie Miranda... WebUrl: http://axis0.endofinternet.org Email: [EMAIL PROTECTED] - [EMAIL PROTECTED] - Original Message - From: "louie miranda" <[EMAIL PROTECTED]> To: Sent: Wednesday, August 21, 2002 12:42 PM Sub

I cant boot GNU/Hurd (i386)

2002-08-20 Thread louie miranda
I' have a GNU/Hurd J1 CD. I boot from cd, and change the keyboard settings and change the partition to hurd, and install the base package.. Now im wondering how will i boot from my new hurd? if u'll tell me what happen when i boot, it does not! :( first time!, Im not yet experiencing a lot form

Re: About the login shell

2002-08-20 Thread David Walter
[EMAIL PROTECTED] writes: > I investigated file permissions for the Hurd a couple of years ago. > The upstream maintainer of fileutils (Michael Stone I think it was?) > told me the Hurd shouldn't bother with the extra permission bits for > the unauthenticated user since the problem would be much m

Re: About the login shell

2002-08-20 Thread Wolfgang Jährling
Moritz Schulte <[EMAIL PROTECTED]> wrote: > One of the few reasons for the login shell, which come to my mind, > is: it is nice to demonstrate our feature of having zero auth handles. (Using the terminology from auth.defs, the login shell actually has an auth handle, it is just associated with f

Re: About the login shell

2002-08-20 Thread bobstopper
I investigated file permissions for the Hurd a couple of years ago. The upstream maintainer of fileutils (Michael Stone I think it was?) told me the Hurd shouldn't bother with the extra permission bits for the unauthenticated user since the problem would be much more effectively solved by ACLs. He

Re: About the login shell

2002-08-20 Thread Hubert Chan
> "Tom" == Tom Hart <[EMAIL PROTECTED]> writes: Tom> However, wouldn't it still be necessary to patch programs written Tom> for the traditional UN*X model so that they could see the ACL's, Tom> and respect the more fine-grained control when present? FWIW, there are already Linux patches out t

Re: How does it go on the AGP-bus front?

2002-08-20 Thread B. Douglas Hilton
Danalien wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! I use an AGP card with Hurd (GeForce2MX) What a coincidence, I am also GeForce2MX(200) user :) So can I just burn the hurd iso images, reboot, start installing? Xor, is there a trick to get it running? No trick. Just set XFree86 to

Re: Permission models

2002-08-20 Thread Lionel Elie Mamane
On Tue, Aug 20, 2002 at 02:21:10PM -0500, Tom Hart wrote: > Lionel Elie Mamane wrote: >> More importantly, I don't see many programs that rely on the Unix >> security model. What interactions does a typical program have with >> the security model: >> The user requests some action (e.g. open a fil

Re: Permission models [was: Re: About the login shell]

2002-08-20 Thread Wolfgang Jährling
Lionel Elie Mamane <[EMAIL PROTECTED]> wrote: > On Tue, Aug 20, 2002 at 11:28:07AM -0500, Tom Hart wrote: > > I assume that the Hurd is sticking with the traditional UN*X model > > because most sysadmins who are used to UNIX will find this easier to > > work with. > > Hmm... The Hurd clearly depar

Re: About the login shell

2002-08-20 Thread Robert Millan
On Tue, Aug 20, 2002 at 01:26:17PM -0500, Tom Hart wrote: > > That said, if the traditional UN*X permissions model could be exposed to > the user by default (by such programs as ls and chmod), and the ugly ACL > business could be taken care of behind the scenes, that would be nice. > By providi

Re: Re: How does it go on the AGP-bus front?

2002-08-20 Thread Danalien
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! >I use an AGP card with Hurd (GeForce2MX) What a coincidence, I am also GeForce2MX(200) user :) So can I just burn the hurd iso images, reboot, start installing? Xor, is there a trick to get it running? >but AFAIK it just treats it like a PCI

Re: Permission models [was: Re: About the login shell]

2002-08-20 Thread Tom Hart
Lionel Elie Mamane wrote: ACL's (Access Control Lists, for those who haven't heard the term before), are, theoretically, a superior form of security for an OS, since they allow the administrator to have more fine-grained control over access to the system. Not only the administrator: The use

Re: About the login shell

2002-08-20 Thread Tom Hart
Robert Millan wrote: On Tue, Aug 20, 2002 at 11:28:07AM -0500, Tom Hart wrote: I assume that the Hurd is sticking with the traditional UN*X model because most sysadmins who are used to UNIX will find this easier to work with. Furthermore, switching to an ACL-based model would probably break com

Permission models [was: Re: About the login shell]

2002-08-20 Thread Lionel Elie Mamane
On Tue, Aug 20, 2002 at 11:28:07AM -0500, Tom Hart wrote: > Lionel Elie Mamane wrote: >>On Tue, Aug 20, 2002 at 05:28:12PM +0200, Robert Millan wrote: >>> Well i think we can reach something much more secure than the "all >>> or nothing" unix traditional approach, too. >>> Let's say i want to set

Re: About the login shell

2002-08-20 Thread Marcus Brinkmann
On Tue, Aug 20, 2002 at 09:57:14AM -0700, Jason Dagit wrote: > I guess my problem is that I don't believe that having the OS trap > ctrl-alt-del, and then using that to start the login is any safer. The problem is in what you believe, not the object of your belief. Security is not only measured by

Re: About the login shell

2002-08-20 Thread Robert Millan
On Tue, Aug 20, 2002 at 11:28:07AM -0500, Tom Hart wrote: > > However, the only system I'm familiar with that uses them is Windows > NT/2K/XP. In my experience, they actually make the system less secure, > because they are much less intuitive to work with than the standard UN*X > file permissio

Re: About the login shell

2002-08-20 Thread Moritz Schulte
Jason Dagit <[EMAIL PROTECTED]> writes: > It is a programmable interrupt, you just overwrite the function > pointer the OS whats to use with your value. Well, note the difference: * login-fake-program-0 is simply a normal user program, which displays a login screen and receives the password.

Re: About the login shell

2002-08-20 Thread Jason Dagit
On Tue, 20 Aug 2002, Sean Neakums wrote: > That came from the Orange Book security guidelines, I believe. The > idea is that the SAS (secure attention sequence) is not overrideable > and thus the user can be sure that once the sequence has been entered > he is communicating with the OS and not

Re: How does it go on the AGP-bus front?

2002-08-20 Thread B. Douglas Hilton
I use an AGP card with Hurd (GeForce2MX), but AFAIK it just treats it like a PCI board. - Doug Ognyan Kulev wrote: Danalien wrote: I am wondering if there is now AGP-bus support för HURD? (I first asked this question a while back) In GNU/Hurd Hardware Compatibility Guide[1] is the answer to y

Re: About the login shell

2002-08-20 Thread Tom Hart
Lionel Elie Mamane wrote: On Tue, Aug 20, 2002 at 05:28:12PM +0200, Robert Millan wrote: On Tue, Aug 20, 2002 at 03:15:22AM +0200, Marcus Brinkmann wrote: On Tue, Aug 20, 2002 at 03:15:49AM +0200, Robert Millan wrote: Do we have file permission bits for the unauthentificated user?

Re: About the login shell

2002-08-20 Thread Lionel Elie Mamane
On Tue, Aug 20, 2002 at 05:28:12PM +0200, Robert Millan wrote: > On Tue, Aug 20, 2002 at 03:15:22AM +0200, Marcus Brinkmann wrote: >> On Tue, Aug 20, 2002 at 03:15:49AM +0200, Robert Millan wrote: >>> Do we have file permission bits for the unauthentificated user? >> Yes. And a bit to control if

Re: About the login shell

2002-08-20 Thread Robert Millan
On Tue, Aug 20, 2002 at 03:15:22AM +0200, Marcus Brinkmann wrote: > On Tue, Aug 20, 2002 at 03:15:49AM +0200, Robert Millan wrote: > > Do we have file permission bits for the unauthentificated user? > > Yes. And a bit to control if it should use those or the o bits. Currently, > the default is t

Re: How does it go on the AGP-bus front?

2002-08-20 Thread Ognyan Kulev
Danalien wrote: I am wondering if there is now AGP-bus support för HURD? (I first asked this question a while back) In GNU/Hurd Hardware Compatibility Guide[1] is the answer to your question: GNU Mach[2] doesn't support AGP. Perhaps OSKit[3] and XFree86[4] need to be "patched". [1] http://w

Re: About the login shell

2002-08-20 Thread Sean Neakums
commence Jason Dagit quotation: > Marcus these are my feelings exactly. I think having to type login > to login is redundant. Just like win2k where you type ctrl-alt-del > (which according to MS improves security), before you login. That came from the Orange Book security guidelines, I believe

Re: Libc upgrade

2002-08-20 Thread Michal 'hramrach' Suchanek
On Mon, Aug 19, 2002 at 07:03:16PM +0200, Marcus Brinkmann wrote: > On Mon, Aug 19, 2002 at 11:36:15AM +0200, Michal Suchanek wrote: > > I have just tried to upgrade libc: > > Preparing to replace libc0.3 2.2.5-6 (using > > .../libc0.3_2.2.5-13_hurd-i386.deb) ... > > http://www.debian.org/ports/h