Re: Natd+PKT_ALIAS_PUNCH_FW missing something?

1999-10-30 Thread Eivind Eklund
On Sat, Oct 30, 1999 at 05:13:09PM +0200, Rene de Vries wrote: > Hello, > > Am I missing something? I modified natd.c so an extra option was available to > turn on punch firewall (see diff below). When I activated this option it did > not seem to work (ftp-data is still blocked by my firewall). W

Re: Obtaining the filename for a vnode

1999-10-30 Thread Chuck Youse
On Sun, 31 Oct 1999, Borja Marcos wrote: > I see (kern_exec.c) I have the vnode of the process > text, but, how can I obtain the filename for the vnode? Is there a > routine in the kernel to do that? Careful here: the UNIX filesystem separates vnodes from directory entries. One can eas

Obtaining the filename for a vnode

1999-10-30 Thread Borja Marcos
Hi, I'm modifying execve() so that it will log attempts to execute a program from a filesystem mounted as noexec. I think it is interesting to log the UID, the filename of the program which called execve() and the program it tried to executed. I see (kern_exec.

Re: exec() security enhancement

1999-10-30 Thread Borja Marcos
> > I forgot, the same could be applied to filesystems mounted as "nosuid". Borja. -- *** Borja Marcos* Internet: [EMAIL PROTECTED] Alangoeta, 11 1 izq * [EMAIL PROTE

semaphores/semget problem

1999-10-30 Thread Kent Boortz
I tried to port the Linux sound program GramoFile but failed. The source was found at http://cardit.et.tudelft.nl/~card06/ It was easy to make it compile and link, mostly changing to , and -lcurses to -lncurses. But creating the System V semaphores fails when trying to play some sound. A c

exec() security enhancement

1999-10-30 Thread Borja Marcos
Hello, Many security exploits create files in the /tmp directory and execute them. I think it would be a good idea to add logging to the to exec_check_permissions() in kern.exec.c so that attempts to run files from a filesystem mounted as "noexec" can be detected. With

Natd+PKT_ALIAS_PUNCH_FW missing something?

1999-10-30 Thread Rene de Vries
Hello, Am I missing something? I modified natd.c so an extra option was available to turn on punch firewall (see diff below). When I activated this option it did not seem to work (ftp-data is still blocked by my firewall). When I add a general allow line for any traffic from 20 to 1023- it (of co

Re: journaling UFS and LFS

1999-10-30 Thread Don
> is anybody working on adding journaling to the (Free)BSD ufs - or > are there any docs in that direction avalibale - any papers or > so ? how much harder this is getting due to the complex > FreeBSD vm/buffercache and soft updates ? - is > anybody intereseted in starting to work on > this ? Thi

journaling UFS and LFS

1999-10-30 Thread Thomas Graichen
is anybody working on adding journaling to the (Free)BSD ufs - or are there any docs in that direction avalibale - any papers or so ? how much harder this is getting due to the complex FreeBSD vm/buffercache and soft updates ? - is anybody intereseted in starting to work on this ? and the next q

Re: Limitations in FreeBSD

1999-10-30 Thread Chuck Youse
On Fri, 29 Oct 1999, Oren Sarig wrote: > actual physical addresses, by using paging tables. Most of the addresses > are mapped outside of the actual memory, and so whenever somebody wants to > access them, a general protection fault occurs. The kernel taps the GPF, > gets the page from the swap,

Re: bootpd on Alpha / alignment problems

1999-10-30 Thread Marcel Moolenaar
Wilko Bulte wrote: > > On Alpha the bootpd does not work, it assert-fails on the > size of the struct bootp being != to BP_MINPKTSZ. > > My best bet is that the Alpha alignment inside the struct results > in a bigger bootp struct. I am, however, not sure on what the right > way is to fix this.