On Thu, 27 Dec 2007 12:54:34 EST, [EMAIL PROTECTED] said:
> [15345.901919] Unable to handle kernel paging request at 00af008c00cd RIP:
> [15345.901934] [] scheduler_tick+0xdb/0x1c4
> [15345.901952] PGD 0
> [15345.901959] Oops: [1] PREEMPT SMP
> [15345.901972] last sysfs file: /sys/device
On Sat, 29 Dec 2007 12:40:47 PST, dean gaudet said:
> > See, this is where you show that you don't understand the system. I'll
> > explain it, just once. /var/home contains home directories. /var/log and
> > /var/home are on the same filesystem. So /var/log/* can be linked to
> > /var/home/ma
On Sun, 30 Dec 2007 14:29:50 +0900, Tetsuo Handa said:
> Use of "learning mode" is independent from "correct policy".
My point *exactly*.
> The "learning mode" merely takes your duty of appending permissions to policy.
> We can develop and share procedures for how to exercise infrequently used c
On Wed, 28 Nov 2007 16:46:13 GMT, Christoph Hellwig said:
> On Wed, Nov 28, 2007 at 08:38:43AM -0800, Casey Schaufler wrote:
> > Would you like to expound on that, or do you feel your claws
> > are sharp enough already?
>
> Just take a look at code.
Just to clarify - you're OK with the *concept*
On Wed, 28 Nov 2007 19:52:46 GMT, Alan Cox said:
> > It might be better to identify the services (gateway, samba, file
> > server whatever) that are actually dealing with possible infected
> > "external" files and then define some generic interface that would
> > allow you to check those as the dat
On Wed, 28 Nov 2007 03:41:40 PST, Andrew Morton said:
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.24-rc3/2.6.24-rc3-mm2/
This one built and booted cleanly on the first try. Whatever was in the -mm1
version of git-x86.patch that gave it indigestion is gone
pgpO6fjHuu
On Thu, 29 Nov 2007 14:45:51 EST, Jon Masters said:
> Ah, but I could write a sequence of pages that on their own looked
> garbage, but in reality, when executed would print out a copy of the
> Jargon File in all its glory. And if you still think you could look for
> patterns, how about executable
On Thu, 29 Nov 2007 18:34:33 EST, Jon Masters said:
>
> On Thu, 2007-11-29 at 21:45 +, Alan Cox wrote:
> > > Jargon File in all its glory. And if you still think you could look for
> > > patterns, how about executable code that self-modifies in random ways
> > > but when executed as a whole ac
On Fri, 30 Nov 2007 10:21:28 +0800, Zhao Yakui said:
> Thanks for the acpidump & dmesg.
> In the acpidump there are so many IO resource definitions in the device
> of mem2 and the number exceeds the predefined number(24).
On a semi-related note, I'm seeing 7 of these at each boot on a Dell L
Question:
The patch does the semantic equivalent of:
-#define cap_clear(c) do { cap_t(c) = 0; } while(0)
-#define cap_set_full(c) do { cap_t(c) = ~0; } while(0)
+# define cap_clear(c) do { (c) = __cap_empty_set; } while (0)
+# define cap_set_full(c) do { (c) = __cap_fu
On Sun, 02 Dec 2007 13:51:04 GMT, Alan Cox said:
> On Sat, 1 Dec 2007 16:30:35 -0800
> > I spoke too soon earlier, ndiswrapper builds and loads against current
> > 2.6.24-rc3. Vmware and proprietary VPN software probably do not. Once again
> > I don't
> > give a damn, but the enterprise distro ven
On Sun, 02 Dec 2007 13:03:35 +0100, Christer Weinigel said:
> WARNING: no space between function name and open parenthesis '('
> #520: FILE: drivers/spi/spi_s3c24xx_dma.c:478:
> + list_for_each_entry (transfer, &message->transfers, transfer_list) {
>
> which I think is a bit bogus since it
On Sat, 01 Dec 2007 08:43:32 GMT, Pavel Machek said:
> So what you are trying to do is 'application may never read bad
> sequence of bits from disk', right?
No, in many of the use cases, we're trying to do "if application reads certain
specified sequences of bits from disk we know about it", whic
On Sun, 02 Dec 2007 21:22:40 +0100, Pavel Machek said:
> Well, if you only want to detect viruses _sometimes_, you can just
> LD_PRELOAD your scanner.
And for some use cases, that probably *is* the best answer..
> I guess the A/V people should describe what they are trying to do, as
> in
>
> "fo
On Tue, 04 Dec 2007 21:17:01 PST, Andrew Morton said:
>
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.24-rc4/2.6.24-rc4-mm1/
Something in here broke LVM support - an initrd that has worked fine for
quite some time suddenly couldn't mount /dev/VolGroup00/root so we get the
On Mon, 26 Nov 2007 12:27:07 GMT, Pavel Machek said:
> I don't think this is good idea. But perhaps 'experimental' should be
> removed from stuff that is really stable these days, like SATA?
I suspect that given the "once it escapes, it's cast in stone" view we take
towards user-visible API/etc,
On Sun, 25 Nov 2007 21:46:26 PST, kernel coder said:
> hi,
>
> I have added some code to netif_receive_skb function.As linux kernel
> is multhreaded , so there is no gaurantee than mine code is completely
> executed without being disturbed by any other process .Timer interrupt
> handler is an exam
On Tue, 27 Nov 2007 02:39:08 +0100, Patrick McHardy said:
> Tomasz K wrote:
> > On Mon, 26 Nov 2007, Greg Kroah-Hartman wrote:
> > [..]
> >
> > Still there is no aroud officialy released iptables tarball with
> > support for rules for new xt_{connlimit,time,u32} modules.
> > Anyone know where are
On Mon, 26 Nov 2007 23:34:11 EST, Dave Jones said:
> On Mon, Nov 26, 2007 at 10:44:44PM -0500, [EMAIL PROTECTED] wrote:
>
> > I suspect that given the "once it escapes, it's cast in stone" view we take
> > towards user-visible API/etc, there isn't much *real* room for an
> > 'EXPERIMENTAL' fla
On Tue, 20 Nov 2007 20:45:25 PST, Andrew Morton said:
>
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.24-rc3/2.6.24-rc3-mm1/
Finally got both time and motivation to at least start a bisect..
2.6.23-mm1 works on my D820 (x86_64 kernel, Core2 Duo T7200)
24-rc3-mm1 (plus 3 pa
On Tue, 27 Nov 2007 08:09:19 +0100, Eric Dumazet said:
> Changing NR_OPEN is not considered safe because of vmalloc space potential
> exhaust.
Verbiage about this point...
> +nr_open
> +---
> +
> +Denotes the maximum number of file-handles a process can
> +allocate. Default value is 1024*1
On Mon, 26 Nov 2007 23:27:03 PST, Andrew Morton said:
> > git-x86.patch
> > git-x86-fixup.patch
> > git-x86-thread_order-borkage.patch
> > git-x86-thread_order-borkage-fix.patch
> > git-x86-identify_cpu-fix.patch
> > git-x86-memory_add_physaddr_to_nid-export-for-acpi-memhotplugko.patch
> > git-x86
On Tue, 27 Nov 2007 16:25:22 +0800, Dave Young said:
> does boot_delay helps?
It might, if the kernel lived long enough to output a first printk for
us to delay after. :)
Shooting this one would be *easy* if the problem was an boot-time oops that
would otherwise scroll off the screen without a
Scenario - Dell Latitude D820 laptop, tg3 driver says this at boot:
eth0: Tigon3 [partno(BCM5752KFBG) rev 6002 PHY(5752)] (PCI Express)
10/100/1000Base-T Ethernet 00:15:c5:c8:33:4e
eth0: RXcsums[1] LinkChgREG[0] MIirq[0] ASF[0] WireSpeed[1] TSOcap[1]
eth0: dma_rwctrl[7618] dma_mask[64-bit]
#
On Tue, 27 Nov 2007 08:04:28 PST, Michael Chan said:
> [EMAIL PROTECTED] wrote:
>
> > (a) the Dell factory default is WOL disabled and (b)
> > if it wasn't
> > the default, I'd have *set* it to disabled, and (c) I even
> > went back and
> > rebooted and checked the BIOS setting - disabled. Nonethe
On Tue, 27 Nov 2007 15:12:42 +0100, Andi Kleen said:
> > OK, short of making IPv4 a module (which would be a worthy task :)
>
> At some point there were patches, it is probably not very difficult.
> But DaveM resisted at some point because he didn't want people
> to replace the network stack (alth
On Tue, 27 Nov 2007 13:34:57 PST, Michael Chan said:
> Ideally, the BIOS should modify the NVRAM's setting when it is changed.
> We will talk to Dell to get their opinion on this as this is very
> confusing to the user.
That would certainly explain what I'm seeing, and I can certainly wait
if the
On Tue, 27 Nov 2007 22:09:42 +0100, Adrian Bunk said:
> Are there common reasons why these drivers are not upstream?
Well, on my laptop, I'm currently dragging along 3 out-of-tree kernel modules.
2 are well-known binary blobs so it's between me and the vendor, as usual.
The third is a USB webcam
On Fri, 11 Jan 2008 17:32:49 +0100, Andrea Righi said:
> The interesting feature is that it allows to set a priority for each
> process container, but AFAIK it doesn't allow to "partition" the
> bandwidth between different containers (that would be a nice feature
> IMHO). For example it would be g
On Fri, 11 Jan 2008 13:31:47 PST, Roland McGrath said:
> > thanks, applied. Does this explain the crash/hang problems with 32-bit
> > apps on 64-bit kernels? What was the exact failure mode?
>
> It does. Any 32-bit process trying to run a signal handler when it had
> used the FPU, would clobber
(Reposting, nobody from lkml or tpmdd-devel chirped on the Dec 27 post)
On Sat, 22 Dec 2007 23:30:56 PST, Andrew Morton said:
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.24-rc6/2.6.24-rc6-mm1/
Looks like an uninitialized variable dereference for SEPARATOR events:
# mount
I'm seeing problems with Sendmail on 24-rc6-mm1, where the main Sendmail is
listening on ::1/25, and Fetchmail connects to 127.0.0.1:25 to inject mail it
has just fetched from an outside server via IMAP - it will often just hang and
not make any further progress. Looking at netstat shows something
On Sun, 13 Jan 2008 02:35:33 EST, [EMAIL PROTECTED] said:
> I'm seeing problems with Sendmail on 24-rc6-mm1, where the main Sendmail is
> listening on ::1/25, and Fetchmail connects to 127.0.0.1:25 to inject mail it
> has just fetched from an outside server via IMAP - it will often just hang and
>
On Mon, 14 Jan 2008 11:36:40 EST, Paul Moore said:
> Are you still only seeing these problems on loopback? I can't help but
> wonder
> if this is the skb_clone() problem where it wasn't copying skb->iif causing
> SELinux to silently drop the packets.
Yes, I've only spotted it on loopback. Th
On Mon, 14 Jan 2008 13:05:48 EST, [EMAIL PROTECTED] said:
> I'm pulling git://git.infradead.org/users/pcmoore/lblnet-2.6_testing at the
> moment, and seeing if there's already a fix in there for this.
Apparently the only new commit in there since the tree that was in
24-rc6-mm1 is 5d95575903fd38
On Mon, 14 Jan 2008 13:22:10 EST, [EMAIL PROTECTED] said:
> Apparently the only new commit in there since the tree that was in
> 24-rc6-mm1 is 5d95575903fd3865b884952bd93c339d48725c33 adding some warning
> printk's. Would it be more productive to test against the full tree, or
> leaving out the on
On Mon, 14 Jan 2008 14:07:46 EST, Paul Moore said:
> There have been quite a few changes in lblnet-2.6_testing since
> 2.6.24-rc6-mm1
> so I would recommend taking the whole tree. I'm also not quite sure if
Weird. I did a 'git clone
git://git.infradead.org/users/pcmoore/lblnet-2.6_testing'
in
On Mon, 14 Jan 2008 14:07:46 EST, Paul Moore said:
>
> http://git.infradead.org/?p=users/pcmoore/lblnet-2.6_testing;a=commitdiff;h=02f1c89d6e36507476f78108a3dcc78538be460b
Initial testing indicates that 2.6.24-rc6-mm1 plus this one commit is
behaving itself correctly - my Tcl test case that reliab
On Tue, 15 Jan 2008 02:37:37 +0200, =?utf-8?q?S=2E=C3=87a=C4=9Flar?= Onur said:
> And because of mcount-add-basic-support-for-gcc-profiler-instrum.patch, closed
> source nvidia-new module cannot be used with this release (mcount is exported
> GPL only), i know this is not supported but i used it wi
On Tue, 15 Jan 2008 13:02:26 +0800, Shaohua Li said:
> In my test, power difference between powersave mode and performance mode
> is about 1.3w in a system with 3 PCIE links.
Do you have any numbers on what the added latency is for powersave mode, and
a rough idea of how quickly chipsets will dro
On Tue, 15 Jan 2008 03:04:41 PST, Andrew Morton said:
> In any decent environment, people will fsck their ext3 filesystems during
> planned downtime, and the benefit of reducing that downtime from 6
> hours/machine to 2 hours/machine is probably fairly small, given that there
> is no service inter
On Tue, 15 Jan 2008 10:09:16 EST, Ric Wheeler said:
> I actually think that the value of this kind of reduction is huge. We
> have seen fsck run for days (not just hours) which makes the "restore
> from backup" versus "fsck" decision favor the tapes...
Funny thing is that for many of these sorts
On Tue, 15 Jan 2008 23:04:39 EST, Steven Rostedt said:
>
> On Tue, 15 Jan 2008 [EMAIL PROTECTED] wrote:
>
> > On Tue, 15 Jan 2008 02:37:37 +0200, =?utf-8?q?S=2E=C3=87a=C4=9Flar?= Onur
> > said:
> > > And because of mcount-add-basic-support-for-gcc-profiler-instrum.patch,
> > > closed
> > > sour
On Wed, 16 Jan 2008 13:26:14 +0800, Shaohua Li said:
> On Tue, 2008-01-15 at 22:56 -0500, [EMAIL PROTECTED] wrote:
> > Do you have any numbers on what the added latency is for powersave mode, and
> > a rough idea of how quickly chipsets will drop to low-power? It may affect
> > usability a lot if i
On Wed, 16 Jan 2008 18:03:17 +0800, Dave Young said:
> On Jan 16, 2008 5:46 PM, Rogier Wolff <[EMAIL PROTECTED]> wrote:
> >
> > Hi,
> >
> > I wrote a small app yesterday that updates a file by mmapping the
> > file (RW), changing the thing around, and then exiting.
> >
> > This did not trigger a c
On Wed, 16 Jan 2008 16:15:41 +0530, Balbir Singh said:
> Thanks for doing this. I am going to review the patches in greater
> detail and also test them. Why do you use configfs when we have a
> control group filesystem available for grouping tasks and providing a
> file system based interface for
On Wed, 16 Jan 2008 12:51:44 +0100, Pavel Machek said:
> I guess I should try to measure it. (Linux already does writeback
> caching, with 2GB of memory. I wonder how important disks's 2MB of
> cache can be).
It serves essentially the same purpose as the 'async' option in /etc/exports
(i.e. we de
On Wed, 16 Jan 2008 17:35:33 +0530, Balbir Singh said:
> Control groups is derived from cpusets and for those interested in
> grouping tasks for control, is the preferred method of providing
> control.
Ahh, that's why I didn't notice it - "cpusets" didn't seem to do much for the 1
and 2 CPU syste
On Fri, 14 Dec 2007 23:20:30 PST, Matti Linnanvuori said:
> From: Matti Linnanvuori <[EMAIL PROTECTED]>
>
> /dev/urandom use no uninit bytes, leak no user data
>
> Signed-off-by: Matti Linnanvuori <[EMAIL PROTECTED]>
>
> ---
>
> --- a/drivers/char/random.c 2007-12-15 09:09:37.895414000 +0200
On Thu, 13 Dec 2007 02:40:50 PST, Andrew Morton said:
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.24-rc5/2.6.24-rc5-mm1/
OK, so I'm trying to 'dd' a CD and the drive on the laptop is having issues
reading the disk.
I try it once, and get an I/O error about 117M in - dd rep
On Mon, 17 Dec 2007 14:56:44 PST, Andrew Morton said:
(Adding Al Viro to the list, he's listed as "file systems" and MAINTAINERS
doesn't list 'isofs' anyplace. Will Al or Andrew please vector to whoever
actually does that code?)
> > I try it again, and it reports it died at the same exact place,
On Thu, 13 Dec 2007 02:40:50 PST, Andrew Morton said:
> ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.24-rc5/2.6.24-rc5-mm1/
git-net.patch (I'm guessing one of Daniel's commits, but not sure which one)
causes some complaints:
LD vmlinux.o
MODPOST vmlinux.o
WARNING: v
(Adding Dave Howells, his name is on
iget-stop-isofs-from-using-read_inode.patch)
On Tue, 18 Dec 2007 10:37:32 +0800, Dave Young said:
> > I don't mind it failing the mount, but the oops seems excessive. I suspect
> > that *somewhere* in that stack trace, we're wanting something like a
> >
> >
On Thu, 06 Dec 2007 15:29:07 GMT, Pavel Machek said:
>
> > Why not use SELinux?
> >
> > Because SELinux doesn't guarantee filename and its attribute.
> > The purpose of this filesystem is to ensure filename and its attribute
> > (e.g. /dev/null is guaranteed to be a character device file
> >
On Wed, 05 Dec 2007 13:39:04 MST, Bjorn Helgaas said:
> > -#define PNP_MAX_PORT 24
> > +#define PNP_MAX_PORT 128
> > #define PNP_MAX_MEM12
> > #define PNP_MAX_IRQ2
> > #define PNP_MAX_DMA2
>
> I don't think we can incr
On Fri, 25 Jan 2008 08:56:09 +0100, Jan Engelhardt said:
> So what is needed is an Oops with an explaining message
> if (kernel_tainted) "blame that proprietary module first",
> and make sure the user sees that oops even if in X.
The person who solves the "even if in X" problem will probably be no
On Fri, 25 Jan 2008 10:10:11 +0100, "Giacomo A. Catenazzi" said:
> As a tester I would like:
> - slow merges, so that developer could rebase and test
>(compile test) the interaction of the new code.
An amazing amount of stuff gets caught when it's tested in Andrew Morton's -mm
tree. You thin
On Sat, 26 Jan 2008 00:50:44 +0100, Stefan Richter said:
> How often is "bisectability" being broken already before merge in
> subsystem trees, and how often only in the context of the merge result?
I don't bisect git trees often - but I'd say that at least half the time
I have to bisect -mm, I'll
On Sat, 26 Jan 2008 01:05:26 +0100, Ingo Molnar said:
> all it takes for me on Fedora is to boot a modular distro kernel once,
> then copy the /dev to the real (persistent) /dev:
>
>mkdir /tmp2
>mount /dev/sda1 /tmp2
>cp -a /dev/* /tmp2/dev/
>
> and from that point on a bzImage/vmli
On Sat, 26 Jan 2008 01:42:43 +0100, Stefan Richter said:
> Even if you only look at the Subject: and number of postings in a
> thread, how to judge whether there is a stability risk for the next -rc
> in the making, without experience or personal interest in the domain?
My general rule of thumb i
On Fri, 25 Jan 2008 09:25:59 EST, Lennart Sorensen said:
> Personally I just don't bother with memtest anymore. The only thing it
> tells you is that you have errors or that you might have errors but it
> didn't find them. It never tells you that you do not have errors and it
> often does miss t
On Fri, 25 Jan 2008 16:26:45 +0100, Jiri Kosina said:
> On Fri, 25 Jan 2008, Bodo Eggert wrote:
>
> > Enabling this option changes a hard panic on boot errors to a
> > soft panic, which does not stop the system completely.
> > You can still scroll the screen and read the messages.
>
> Hi Bodo,
>
On Fri, 25 Jan 2008 14:21:33 +0100, Jan Engelhardt said:
>
> On Jan 25 2008 13:44, Frank Seidel wrote:
> >> >+/*
> >> >+ * CHANGELOG
> >>
> >> Changelogs go into git, not files, at least that is what was mentioned
> >> time and again.
> >
> >i removed them
> >
> If you want to keep them, add it t
On Sat, 26 Jan 2008 14:31:01 +0100, Stefan Richter said:
> Does your laptop have for example chained sg lists? :-)
Beats me - I don't see it on an 'lspci' ;) But I'm pretty sure it doesn't
have a 'powerpc' in it, so those threads get *totally* skipped...
My point was "personal interest in the d
Sorry for the late notice - I hit the original issue with this code,
and I tested the *first* patch, which addressed my immediate problem, but
didn't test the subsequent flurry of "better" patches due to time issues
here.
I back up my laptop by doing one or more 'dump' commands into a $STAGE
dire
On Tue, 29 Jan 2008 16:22:45 EST, Pavel Roskin said:
> Hello!
>
> It have come to my attention that a patch has been committed to the
> kernel with the explicit purpose of tainting ndiswrapper - the kernel
> module allowing Windows NDIS drivers for Ethernet and Wireless cards to
> be used by the k
On Wed, 30 Jan 2008 13:32:58 CST, Matt Mackall said:
> "Use the exact same C compiler." -> OK, idiomatic
> "Use the same exact C compiler." -> OK, idiomatic
> "Use the exactly same C compiler." -> very awkward
> "Use exactly the same C compiler." -> formally correct
"You are trapped in a maze of
On Sat, 12 Mar 2005 20:41:14 MST, Frank Sorenson said:
> These patches look pretty good. A few comments (with a patch--tested on
> my Inspiron 9200):
I tested your patch on top of Dmitry's on a Dell Latitude C840, seems to work.
> - - Some of the Dell motherboards provide more than 1 temperatur
On Tue, 15 Mar 2005 11:59:22 +0100, Giuseppe Bilotta said:
> > According to your patch, the C840 has 2 temp sensors. I'll have to figure
> > out what the second one is (prob either the GPU or the disk drive?)
>
> If it runs over 40 C easily it's probably the GPU :)
Well, (a) the next rev of the p
On Wed, 16 Mar 2005 12:57:15 EST, Patrick McFarland said:
> I've been running -mm for about a year now, and the whole thing with 2.6.11.x
> releases coming out quite often is a little confusing. Does 2.6.11-mm4 still
> apply to 2.6.11 (no bloody 1, 2, 3, or 4), and if so, what does -mm4 contain
>
On Wed, 16 Mar 2005 14:38:50 MST, Frank Sorenson said:
> Okay, I replaced the sysfs_ops with ops of my own, and now all the show
> and store functions also accept the name of the attribute as a parameter.
> This lets the functions know what attribute is being accessed, and allows
> us to create att
On Sat, 19 Mar 2005 21:59:16 EST, Ioan Ionita said:
> applications which use the UDP protocol. However, certain firewalls
> don't allow UDP traffic, therefore I tried UDP over TCP as a
> workaround.
That's the firewall's problem, not yours. There's very few firewalls
that prohibit *all* UDP tra
On Mon, 21 Mar 2005 20:07:21 +0100, Arjan van de Ven said:
> On Mon, Mar 21, 2005 at 11:54:10AM -0700, jmerkey wrote:
> > which 2.4 kernels will work properly on RH ES release 3, Taroon Update 4.
>
> Only kernels with NPTL in, which for 2.4 limits you to the RH supplied one.
Well, strictly spea
On Mon, 31 Jan 2005 17:50:25 +0100, Adrian Bunk said:
> On Sat, Jan 29, 2005 at 04:15:43AM -0500, [EMAIL PROTECTED] wrote:
> > Note that obsd_rand.c started off life as a BSD-licensed file - I was told
> > that was a show-stopper when I submitted basically the same patch a while
> > back.
> >...
On Mon, 07 Feb 2005 07:38:36 +0100, Arjan van de Ven said:
> On Sun, 2005-02-06 at 22:17 -0800, linux lover wrote:
> > Now what i want is to use same bufproc_read &
> > bufproc_write functions defined in /proc file
> > handling kernel module to be used in another kernel
> > module to read that /p
On Mon, 07 Feb 2005 19:57:06 +0100, Lorenzo =?ISO-8859-1?Q?Hern=E1ndez_?=
=?ISO-8859-1?Q?Garc=EDa-Hierro?= said:
> This patch adds two checks to do_follow_link() and sys_link(), for
> prevent users to follow (untrusted) symlinks owned by other users in
> world-writable +t directories (i.e. /tmp),
On Mon, 07 Feb 2005 20:34:33 +0100, Lorenzo =?ISO-8859-1?Q?Hern=E1ndez_?=
=?ISO-8859-1?Q?Garc=EDa-Hierro?= said:
> But It's better to give users a "secure-by-default" status, at least on
> those parts that don't affect negatively the stability or the
> performance itself.
It's still policy, and
On Mon, 07 Feb 2005 23:00:33 +0100, Lorenzo =?ISO-8859-1?Q?Hern=E1ndez_?=
=?ISO-8859-1?Q?Garc=EDa-Hierro?= said:
> A sysctl can be a good option, creating a CTL_SECURITY and then
> registering stuff under it, but this requires to have the kernel hackers
> agree with implementing a new security su
On Mon, 07 Feb 2005 14:26:03 PST, Chris Wright said:
> Hard links still point to same inode, what's the issue that this
> addresses?
For those systems that have everything on one big partition, you can often
do stuff like:
ln /etc/passwd /tmp/
and wait for /etc/passwd to get clobbered by a cron
On Mon, 07 Feb 2005 14:26:03 PST, Chris Wright said:
> * Michael Halcrow ([EMAIL PROTECTED]) wrote:
> > This is the third in a series of eight patches to the BSD Secure
> > Levels LSM. It moves the claim on the block device from the inode
> > struct to the file struct in order to address a potenti
On Tue, 08 Feb 2005 01:48:40 GMT, David Wagner said:
> How would /etc/passwd get clobbered? Are you thinking that a tmp
> cleaner run by cron might delete /tmp/whatever (i.e., delete the hardlink
> you created above)? But deleting /tmp/whatever is safe; it doesn't affect
> /etc/passwd. I'm gues
On Mon, 07 Feb 2005 18:20:36 PST, Chris Wright said:
> * [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote:
> > open("/tmp/sh-thd-1107848098", O_WRONLY|O_CREAT|O_TRUNC|O_EXCL|O_LARGEFILE,
0600) = 3
>
> O_EXCL
>
> > Wow - if my /tmp was on the same partition, and I'd hard-linked that
> > file to /etc/p
On Fri, 04 Feb 2005 11:03:47 +0100, Ingo Molnar said:
>
> i have released the -V0.7.38-01 Real-Time Preemption patch, which can be
> downloaded from the usual place:
Hey Ingo.. Sorry to keep breaking stuff on you, but.. ;)
Summary: Looks like CONFIG_NET_PKTGEN=y gives -V0.7.38-03 indigestion.
I
On Tue, 08 Feb 2005 09:45:29 +0100, Ingo Molnar said:
> i tried to enable NET_PKTGEN in my vanilla-based -RT tree and it
> boots/works fine. Could you try a vanilla-based -RT tree too, with
> NET_PKTGEN enabled
Plain -rc3-V0.7.38-03 loops at boot as well, so that rules out any -mm1
issues or a bo
On Tue, 08 Feb 2005 17:15:53 +0100, Roman Zippel said:
> Why should I pay for something, I could easily do myself in less time?
Why does the phrase "Shut up and code..." suddenly wander through my mind???
pgpO0Xrma93ma.pgp
Description: PGP signature
On Tue, 08 Feb 2005 11:24:50 CST, Michael Halcrow said:
> While the program is waiting for a keystroke, mount the block device.
> Enter a keystroke. The result without the patch is 1, which is a
> security violation. This occurs because the bd_release function will
> bd_release(bdev) and set ino
On Mon, 07 Feb 2005 17:20:06 PST, Linus Torvalds said:
> I'm not going to put this into 2.6.11, since I worry about compiler
> interactions, but the more people who test it anyway, the better.
Well, since I'm a known glutton for punishment. ;)
a 2.6.11-rc3-RT tree I had handy from last night sh
On Wed, 09 Feb 2005 12:30:54 EST, Nicolas Pitre said:
> If I don't want to use a certain filesystem, I mount it and copy the
> files over to another filesystem. What users are interested in are the
> files themselves of course, and the efficiency with which the filesystem
> handles those files
On Tue, 15 Feb 2005 14:51:06 EST, Lee Revell said:
> I wonder if XP's solution is patented.
If it is, IBM's OS/360 and OS/VS1 and MVS had prior art way back in the 70's.
There were *plenty* of products that would look at the system call usage and
spit out an ordered load list for SYS1.LINKLIB and
On Tue, 15 Feb 2005 13:56:14 CST, Linas Vepstas said:
> Now I like this idea. It need not have anything to do with startup,
> or with any particular program or distro whatsoever. Rather, one
> would have a daemon keeping track of disk i/o patterns, and constantly
> trying to figure out if there
On Tue, 15 Feb 2005 20:48:13 +0100, "Kiniger, Karl (GE Healthcare)" said:
> I can confirm that. Creating a correct iso image from a CD is a
> major pain w/o ide-scsi. Depending on what one has done before the iso
> image is missing some data at the end most of the time.
> (paired with lots of ker
On Tue, 15 Feb 2005 23:38:09 +0100, Lorenzo =?ISO-8859-1?Q?Hern=E1ndez_?=
=?ISO-8859-1?Q?Garc=EDa-Hierro?= said:
> Yes, and that's noticed from the "official" documentation.
> But, who says that we can't place auditing facilities inside the
> existing hooks? or even file system linking related tw
On Wed, 16 Feb 2005 10:42:21 +0100, "Kiniger, Karl (GE Healthcare)" said:
> >Have you tested the ISO on some *OTHER* hardware? The impression I got
> >was that the cd was *burned* right by ide-cd, but when *read back*, it
> >bollixed things up at the end of the CD.
>
> Using ide-
On Wed, 16 Feb 2005 07:52:51 PST, Casey Schaufler said:
> The advice given by the NSA during our B1
> evaluation was that is was that in the case
> above was that the MAC check should be done
> first (because it's more important) and
> because you want the audit record to report
> the MAC failure
On Fri, 18 Feb 2005 15:23:44 EST, Bill Davidsen said:
> I'll try to build a truth table for this, I'm now working with some
> non-iso data sets, so I'm a bit more interested. I would expect read()
> to only try to read one sector, so I'll just do a quick and dirty to get
> the size from the com
On Mon, 21 Feb 2005 12:57:22 +0800, Ian Kent said:
> This is the first time I've heard this and the first time I wrote a Unix
> daemon was fifteen years ago.
>
> As far as I'm concerned redirecting stdin, stdout and stderr to the null
> device, then closing it and setting the process to a be the
On Wed, 26 Jan 2005 14:31:00 EST, John Richard Moser said:
> [*] Grsecurity
> Security Level (Custom) --->
> Address Space Protection --->
> Role Based Access Control Options --->
> Filesystem Protections --->
> Kernel Auditing --->
> Executable Protections --->
> Network Prote
On Wed, 26 Jan 2005 22:35:18 EST, John Richard Moser said:
> This particular problem pertains to proc_misc.c and trying to create a
> hook for some grsecurity protections that alter the modes on certain
> /proc entries. The chunk of the patch I'm trying to immitate is:
> +#ifdef CONFIG_GRKERNSEC
On Thu, 27 Jan 2005 01:40:12 EST, [EMAIL PROTECTED] said:
> You may want to use a properly timed initcall() to create a callback that
> happens after proc_misc_init() happens, but before userspace gets going, and
> walk through the /proc tree at that time and cache info on the files you care
> abo
On Thu, 27 Jan 2005 01:51:05 EST, John Richard Moser said:
> mmm. I'd thought about that actually-- for modules to get a whack at
> this they'd have to be compiled in. Loaded as modules would break the
> security.
And that, my friends, is *exactly* why SELinux can't be built as a module ;)
pg
201 - 300 of 1041 matches
Mail list logo
