Re: sandboxing untrusted binaries

2002-05-29 Thread Mike Silbersack
On Thu, 30 May 2002, Bjoern Fischer wrote: > Hello, > > OpenBSD has a new interesting feature: systrace. It is a system call > policy generator for "sandboxing" untrusted or semi-trusted binaries. > > The whole idea looks interesting. The implementation details look > relatively simple (read: no

Re: sandboxing untrusted binaries

2002-05-29 Thread M. Warner Losh
In message: <[EMAIL PROTECTED]> Bjoern Fischer <[EMAIL PROTECTED]> writes: : Hello, : : OpenBSD has a new interesting feature: systrace. It is a system call : policy generator for "sandboxing" untrusted or semi-trusted binaries. : : The whole idea looks interesting. The implementatio

jail man page

2002-05-29 Thread Michael R. Wayne
Posted to -hackers in the hope that this can be tweaked in 4.6 RELEASE. 4.5-RELEASE-p4 % man jail D=/here/is/the/jail cd /usr/src make world DESTDIR=$D ^ | shouldn't that really be make installworld DESTDIR=$D |

sandboxing untrusted binaries

2002-05-29 Thread Bjoern Fischer
Hello, OpenBSD has a new interesting feature: systrace. It is a system call policy generator for "sandboxing" untrusted or semi-trusted binaries. The whole idea looks interesting. The implementation details look relatively simple (read: not too complicated). Anyone interested in having a closer

Re: mbuf problems on 4.5/4.6-RC2

2002-05-29 Thread Mike Silbersack
On Wed, 29 May 2002, Gary Stanley wrote: > Hi. > > We have a webserver setup with 1 Intel Pro/1000 Gigabit Ethernet card. The > old server was using around 95mbit/s of traffic or so (sustained rate). We > decided to replace that card/machine with something that could handle the > high network lo

Re: mbuf problems on 4.5/4.6-RC2

2002-05-29 Thread Dan Nelson
In the last episode (May 29), Gary Stanley said: > We have a webserver setup with 1 Intel Pro/1000 Gigabit Ethernet > card. The old server was using around 95mbit/s of traffic or so > (sustained rate). We decided to replace that card/machine with > something that could handle the high network load

mbuf problems on 4.5/4.6-RC2

2002-05-29 Thread Gary Stanley
Hi. We have a webserver setup with 1 Intel Pro/1000 Gigabit Ethernet card. The old server was using around 95mbit/s of traffic or so (sustained rate). We decided to replace that card/machine with something that could handle the high network load. The question would be, What's a good size for

Interest Rates Have Dropped! - SAVE Now 222_3963

2002-05-29 Thread
Interest Rates Have Dropped - SAVE Now Now is the time to refinance your home or get a second mortgage to consolidate all of your high interest credit card debt. Get all the Smart Cash you'll need! Cash out your equity while rates are low! (UP TO 125%) All USA Homeowners Easily Qualify! Damag

Re: process hang in atprq state

2002-05-29 Thread Soeren Schmidt
It seems Soeren Schmidt wrote: > It seems Richard Nyberg wrote: > > Hi there. > > I seem to have some problems with my cd read program. > > > > I've attached a small prototype program that for some reason hangs > > in atprq, even though I use a timeout of 5 seconds. The program reads > > a cd in

Re: process hang in atprq state

2002-05-29 Thread Soeren Schmidt
It seems Richard Nyberg wrote: > Hi there. > I seem to have some problems with my cd read program. > > I've attached a small prototype program that for some reason hangs > in atprq, even though I use a timeout of 5 seconds. The program reads > a cd in raw format using the MMC READ_CD command. It

process hang in atprq state

2002-05-29 Thread Richard Nyberg
Hi there. I seem to have some problems with my cd read program. I've attached a small prototype program that for some reason hangs in atprq, even though I use a timeout of 5 seconds. The program reads a cd in raw format using the MMC READ_CD command. It works fine :) except that it never manages

Re: raidframe

2002-05-29 Thread Brandon D. Valentine
On Wed, 29 May 2002, Miguel Mendez wrote: >On Wed, May 29, 2002 at 01:15:10PM -0500, Brandon D. Valentine wrote: > >> Is there a reason you can't use vinum(4)? > >Yes, sir, there is one, like I said before, I want to play with >raidframe. Being a geek yourself you should understand that :-) I un

Re: non-root /var/run files (was Re: Sendmail, smmsp, and pid file)

2002-05-29 Thread Jos Backus
On Wed, May 29, 2002 at 05:03:02AM +0400, "."@babolo.ru wrote: > I doubt that goes to ports ever. > Make Problem Report. ports/38674 -- Jos Backus _/ _/_/_/Santa Clara, CA _/ _/ _/ _/ _/_/_/

Re: raidframe

2002-05-29 Thread Miguel Mendez
On Wed, May 29, 2002 at 01:15:10PM -0500, Brandon D. Valentine wrote: Hi, > Is there a reason you can't use vinum(4)? Yes, sir, there is one, like I said before, I want to play with raidframe. Being a geek yourself you should understand that :-) Cheers, -- Miguel Mendez - [EMAIL PROTE

Re: raidframe

2002-05-29 Thread Brandon D. Valentine
On Wed, 29 May 2002, Miguel Mendez wrote: >The latest raidframe patch seems to be a bit date now, I'd like to know >if any of you has worked on getting it cleanly applying to a recent >4.5-STABLE (4.6-RC indeed) system of even 5.0-CURRENT tree. I'd like to >play with it and would like to know if

raidframe

2002-05-29 Thread Miguel Mendez
Hi hackers, The latest raidframe patch seems to be a bit date now, I'd like to know if any of you has worked on getting it cleanly applying to a recent 4.5-STABLE (4.6-RC indeed) system of even 5.0-CURRENT tree. I'd like to play with it and would like to know if someone has taken care of it befor

Re: kern/30712: fatal kernel trap during ufs_rename

2002-05-29 Thread Jacques A. Vidrine
Hello, Does this ring any bells with anyone? This issue still exists with FreeBSD 4.5-STABLE (4.6-PRERELEASE) and can be triggered on SMP machines e.g. by having several process attempting to create/rename/remove the same directory entry. Cheers, -- Jacques A. Vidrine <[EMAIL PROTECTED]>

Re: __STDC__ removal?

2002-05-29 Thread Peter Wemm
Alfred Perlstein wrote: > * Peter Wemm <[EMAIL PROTECTED]> [020529 00:42] wrote: > > Alfred Perlstein wrote: > > > NetBSD is nuking almost all __STDC__ usages because it's always > > > defined. Do we want to do the same? The exception I've seen > > > is for assembler files where old style C is n

Re: __STDC__ removal?

2002-05-29 Thread Alfred Perlstein
* Peter Wemm <[EMAIL PROTECTED]> [020529 00:42] wrote: > Alfred Perlstein wrote: > > NetBSD is nuking almost all __STDC__ usages because it's always > > defined. Do we want to do the same? The exception I've seen > > is for assembler files where old style C is needed to avoid > > conflicts. > >

Re: __STDC__ removal?

2002-05-29 Thread Peter Wemm
Alfred Perlstein wrote: > NetBSD is nuking almost all __STDC__ usages because it's always > defined. Do we want to do the same? The exception I've seen > is for assembler files where old style C is needed to avoid > conflicts. Umm, do we need it there in asm headers? We do not use the traditio