re: CVS commit: src/share/man/man4

2009-05-10 Thread matthew green
On Sat, May 09, 2009 at 07:51:41AM -0700, Paul Goyette wrote: > So really should simply document the option DRM_NO_AGP rather than > telling folks to include unnecessary drivers! Just because it compiles doesn't mean it works properly. For most drivers at least, you really need

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Alistair Crooks
On Mon, May 11, 2009 at 12:11:03PM +1000, Daniel Carosone wrote: > On Mon, May 11, 2009 at 02:55:03AM +0100, Alistair Crooks wrote: > > On Mon, May 11, 2009 at 11:09:40AM +1000, Daniel Carosone wrote: > > > On Sat, May 09, 2009 at 03:46:28AM +0100, Alistair Crooks wrote: > > > > > > > [...] since

Re: CVS commit: src/sbin/fsck_ffs

2009-05-10 Thread M. Warner Losh
In message: <20090511015855.gd16...@britannica.bec.de> Joerg Sonnenberger writes: : On Sun, May 10, 2009 at 07:51:41PM -0600, M. Warner Losh wrote: : > I've missed much of the discussion, can someone recap exactly what : > you'd like to see changed? That would be the starting point fo

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Daniel Carosone
On Mon, May 11, 2009 at 02:55:03AM +0100, Alistair Crooks wrote: > On Mon, May 11, 2009 at 11:09:40AM +1000, Daniel Carosone wrote: > > On Sat, May 09, 2009 at 03:46:28AM +0100, Alistair Crooks wrote: > > > > > [...] since there's no way of changing a PGP passphrase > > > short of generating a new

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Joerg Sonnenberger
On Mon, May 11, 2009 at 02:55:03AM +0100, Alistair Crooks wrote: > On Mon, May 11, 2009 at 11:09:40AM +1000, Daniel Carosone wrote: > > On Sat, May 09, 2009 at 03:46:28AM +0100, Alistair Crooks wrote: > > > > > [...] since there's no way of changing a PGP passphrase > > > short of generating a new

Re: CVS commit: src/sbin/fsck_ffs

2009-05-10 Thread Joerg Sonnenberger
On Sun, May 10, 2009 at 07:51:41PM -0600, M. Warner Losh wrote: > I've missed much of the discussion, can someone recap exactly what > you'd like to see changed? That would be the starting point for any > user-visisble changes to FreeBSD... There is currently a mixed naming convention when referi

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Alistair Crooks
On Mon, May 11, 2009 at 11:09:40AM +1000, Daniel Carosone wrote: > On Sat, May 09, 2009 at 03:46:28AM +0100, Alistair Crooks wrote: > > > [...] since there's no way of changing a PGP passphrase > > short of generating a new key. > > Huh? Sure, you have a need to deal with keyring copies from bef

Re: CVS commit: src/sbin/fsck_ffs

2009-05-10 Thread M. Warner Losh
In message: <20090510220227.gd16...@britannica.bec.de> Joerg Sonnenberger writes: : On Sun, May 10, 2009 at 04:31:34AM +, YAMAMOTO Takashi wrote: : > have you tried to convince freebsd guys to use your preferred name? : > being different creates another layer of confusion. : : We

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Daniel Carosone
On Sat, May 09, 2009 at 03:46:28AM +0100, Alistair Crooks wrote: > [...] since there's no way of changing a PGP passphrase > short of generating a new key. Huh? Sure, you have a need to deal with keyring copies from before the change, maybe with some more rm -P and its limtations, but otherwise,

Re: CVS commit: src/sbin/fsck_ffs

2009-05-10 Thread Joerg Sonnenberger
On Sun, May 10, 2009 at 04:31:34AM +, YAMAMOTO Takashi wrote: > have you tried to convince freebsd guys to use your preferred name? > being different creates another layer of confusion. We had a short discussion about this during BSDCan. Kirk didn't mind and if it should be reasonable to get c

Re: CVS commit: src/sys/dist/ipf/netinet

2009-05-10 Thread Elad Efrat
Mihai Chelaru wrote: Module Name:src Committed By: kefren Date: Fri May 8 05:18:34 UTC 2009 Modified Files: src/sys/dist/ipf/netinet: ip_fil_netbsd.c Log Message: Don't call callout_stop() without callout_init() Fixes PR/41364 To generate a diff of this commit: cvs rd

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Perry E. Metzger
Simon Burge writes: > "Perry E. Metzger" wrote: > >> [ ... ] Encrypted swap should >> be the default -- either using cgd or by simply encrypting the blocks as >> they go in and out without using the cgd layer. > > You've benchmarked the effect of this, especially on older hardware? No, but other

Re: CVS commit: src/sys/nfs

2009-05-10 Thread YAMAMOTO Takashi
hi, > On Sun, May 10, 2009 at 05:18:26AM +, YAMAMOTO Takashi wrote: > > Module Name: src > > Committed By: yamt > > Date: Sun May 10 05:18:26 UTC 2009 > > > > Modified Files: > >src/sys/nfs: nfs_vnops.c > > > > Log Message: > > nfs_lookup: vn_lock the vno

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Adam Hoka
On Sat, 9 May 2009 03:46:28 +0100 Alistair Crooks wrote: > On Fri, May 08, 2009 at 01:18:38PM -0400, Perry E. Metzger wrote: > > > > "Alistair G. Crooks" writes: > > > > > Module Name: src > > > Committed By: agc > > > Date: Fri May 8 06:06:39 UTC 2009 > > > > > > Modifie

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Elad Efrat
Simon Burge wrote: "Perry E. Metzger" wrote: [ ... ] Encrypted swap should be the default -- either using cgd or by simply encrypting the blocks as they go in and out without using the cgd layer. You've benchmarked the effect of this, especially on older hardware? Let's first have it as an

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread David Holland
On Sat, May 09, 2009 at 12:44:27PM -0400, Perry E. Metzger wrote: > By that token, it would be of use for NetBSD to port over the encrypted > swap features other OSes have (it should be essentially no performance > hit), Writing even an encrypted copy of a passphrase to disk is still a hazard

Re: CVS commit: src/sys/nfs

2009-05-10 Thread David Holland
On Sun, May 10, 2009 at 05:18:26AM +, YAMAMOTO Takashi wrote: > Module Name: src > Committed By:yamt > Date:Sun May 10 05:18:26 UTC 2009 > > Modified Files: > src/sys/nfs: nfs_vnops.c > > Log Message: > nfs_lookup: vn_lock the vnode returned by cache_look

Re: CVS commit: src/sbin/fsck_ffs

2009-05-10 Thread Luke Mewburn
On Sun, May 10, 2009 at 04:31:34AM +, YAMAMOTO Takashi wrote: | have you tried to convince freebsd guys to use your preferred name? | being different creates another layer of confusion. As I explained in my original thread about this issue [1], it is the inconsistency in use of "ffs" versu

Re: CVS commit: src/crypto/external/bsd/netpgp/dist

2009-05-10 Thread Simon Burge
"Perry E. Metzger" wrote: > [ ... ] Encrypted swap should > be the default -- either using cgd or by simply encrypting the blocks as > they go in and out without using the cgd layer. You've benchmarked the effect of this, especially on older hardware? Simon.

Re: CVS commit: src/sys/netinet6

2009-05-10 Thread Elad Efrat
On Sun, May 10, 2009 at 1:12 PM, YAMAMOTO Takashi wrote: >> That said, where we now return EPERM is where in the future we'll >> return the error value returned by kauth(9), like many many other >> places in the kernel. Other parts of the networking stacks (say, >> opening a raw socket) now retur

Re: CVS commit: src/sys

2009-05-10 Thread Elad Efrat
On Sun, May 10, 2009 at 1:16 PM, YAMAMOTO Takashi wrote: > isn't KAUTH_REQ_NETWORK_SOCKET_RAWSOCK being deprecated in favor of _OPEN? I'm still trying to decide, that's why I used this one (so removing it causes errors). On one hand, it would be nice to centralize everything like we planned. On

Re: CVS commit: src/sys

2009-05-10 Thread YAMAMOTO Takashi
hi, > Module Name: src > Committed By: elad > Date: Wed May 6 21:41:59 UTC 2009 > > Modified Files: > src/sys/netinet: ip_output.c > src/sys/netinet6: ip6_output.c ip6_var.h ipsec.c ipsec.h raw_ip6.c > udp6_output.c > > Log Message: > Remove some usage of "priv" a

Re: CVS commit: src/sys/netinet6

2009-05-10 Thread YAMAMOTO Takashi
hi, > On Sun, May 10, 2009 at 8:44 AM, YAMAMOTO Takashi > wrote: > have you checked callers and ensure that the change from EACCES to EPERM won't be a problem? >>> >>> Only ipsec_set_policy() returns EPERM instead of EACCES now, and I >>> don't think it should be a problem. >> >> "don'

Re: CVS commit: src/sys/netinet6

2009-05-10 Thread Elad Efrat
On Sun, May 10, 2009 at 8:44 AM, YAMAMOTO Takashi wrote: >>> have you checked callers and ensure that the change from EACCES to EPERM >>> won't be a problem? >> >> Only ipsec_set_policy() returns EPERM instead of EACCES now, and I >> don't think it should be a problem. > > "don't think"?  why not