I have recently redefined a problem which has been plaguing me for close
to a year now. I have several FBSD boxes at a site fed by a Sprint T1 (Site
A). Each of these boxes is capable of ftp'ing to each other on the same
subnet at speeds approaching the limits of the disk subsystem. In short,
Yar Tikhiy writes:
> I'd suggest the following fix. Not sure if it should be pushed
> into the upcoming 4.4-RELEASE...
>
> Index: ng_ether.c
> ===
> RCS file: /home/ncvs/src/sys/netgraph/ng_ether.c,v
> retrieving revision 1.18
> dif
< said:
> + if (rtm->rtm_type != RTM_GET && so->so_cred->cr_uid != 0)
> + senderr(EACCES);
I'm certain rwatson would object to this. suser_xxx() allows checking
on the basis of credentials rather than a process, so that's what
should be used. In any case, the correct error is E
On Thu, Aug 30, 2001 at 11:33:34AM -0400, Garrett Wollman wrote:
> < said:
>
> > raw_uattach(struct socket *so, int proto, struct proc *p)
> > {
> > struct rawcb *rp = sotorawcb(so);
> > - int error;
>
> > if (rp == 0)
> > return EINVAL;
> > - if (p && (error = suser(p
On Thu, Aug 30, 2001 at 01:14:16PM +0200, Roman Le Houelleur wrote:
> Can someone tell me why it is not possible to kldunload
> some modules like if_sl or if_vlan ?
> Is it because these are old modules not yet fully compatible
> with the new kld facility or is there a technical restriction ?
Y
Hi
I'm having some problems with ipfilter :
# ipfstat -s
IP states added:
4572145 TCP
573649 UDP
463188 ICMP
1165608186 hits
34257625 misses
0 maximum
1546129 no memory
8208 bkts in use
22215 active
959216 expired
[adding -net to the Cc: list]
On Wed, Aug 29, 2001 at 03:47:06PM -0700, Archie Cobbs wrote:
> Yar Tikhiy writes:
> > Why does gdb report the values of "ifp" and "mp" inconsistently?
> > The kernel crashed at the first line of ng_ether_output(), so
> > the arguments couldn't be modified... I'm con
< said:
> raw_uattach(struct socket *so, int proto, struct proc *p)
> {
> struct rawcb *rp = sotorawcb(so);
> - int error;
> if (rp == 0)
> return EINVAL;
> - if (p && (error = suser(p)) != 0)
> - return error;
> return raw_attach(so, proto)
Hi!
The attached patch allows non-superuser to open, listen to, and send
safe commands on the routing socket. Superuser privilege is required
for all commands but RTM_GET.
This has been in NetBSD and OpenBSD since 1997. This also allows us
to drop setuid root privilege from the route(8) comman
hi,
Can someone tell me why it is not possible to kldunload
some modules like if_sl or if_vlan ?
Is it because these are old modules not yet fully compatible
with the new kld facility or is there a technical restriction ?
Actually I've tried to add the detach functionnality and it
seems to wo
10 matches
Mail list logo
