DaemonForums

Security Would you knowingly trust an irrevocable SSL certificate?

J65nko — Fri, 24 May 2013 18:56:23 GMT

From http://news.netcraft.com/archives/20...rtificate.html

Quote:

Despite the inconsistent treatment of certificate revocation by browsers, providing reliable revocation information is an integral part of operating a trustworthy certificate authority (CA) and a well-accepted requirement of Mozilla's CA root program. However, there are presently thousands of certificates in use which are irrevocable in some major browsers, and hundreds in those browsers which do everything right.

Security Improving the security of your SSH private key files

J65nko — Fri, 24 May 2013 18:51:06 GMT

See http://martin.kleppmann.com/2013/05/...vate-keys.html

Why is Xfce not updated in NetBSD's pkgsrc

cray — Fri, 24 May 2013 15:10:12 GMT

Hi,
The question is in subject. I suppose this is a lack of maintainers?
Because OpenBSD already has Xfce 4.10

Automatic dual xterm setup for log file monitoring

J65nko — Fri, 24 May 2013 00:51:13 GMT

While testing a Apache webserver configuration, I became tired of setting up two xterms for monitoring both the /var/log/httpd-access and /var/log/httpd-error.log files.

The following simple script does this now for me:

Code:

#!/bin/sh



# Set up two xterms

#   1) tail -f /var/log/httpd-access.log

#   2) tail -f /var/log/http-error.log



ACCESS='ssh j65nko.org "tail -f /var/log/httpd-access.log"'

ERROR='ssh j65nko.org "tail -f /var/log/httpd-error.log"'



# geometry (See X(7)  'GEOMETRY SPECIFICATIONS')

# WidthxHeight+X_offset+Y_offset

# Width and Height either in pixels or characters

# X_offset and Y_offset in pixels



# See xterm(1) for the other options



xterm -geometry 200x30+0+0   -bg black -fg green -e "${ACCESS}" &

xterm -geometry 200x30+0+500 -bg black -fg red   -e "${ERROR}" &

Please note that according to the xterm manual page. the -e option for specifiying the command needs to be the last one.

This script has been tested and is being used in Debian as you can see in the trimmed screenshot. ;)

FreeBSD monitoring tool

alexander10bees — Thu, 23 May 2013 07:06:59 GMT

Hi,

we made a first public release of the FreeBSD monitoring solution (it's cross-platform, but we consider FreeBSD as one of our primary platform) and I'm looking for those, who interested to give it a try and come back with the feedback. You're only required to register and install the monitoring part on your server - FreeBSD 7.* and higher (which is just 1-2 minutes - depending on how fast you are) and provide your feedback (as much as you'd like).

We looking to build a proper, useful full coverage monitoring solution for FreeBSD and need your feedback. Those who interested - please, let me know or, if the moderator will allow, I drop the link here.

Kind regards,
Alexander.

SQLite gets memory-mapped I/O

J65nko — Wed, 22 May 2013 19:28:06 GMT

From http://h-online.com/-1867275

Quote:

SQLite, the ubiquitous, lightweight, C-based SQL engine, which is embedded in many applications, has been updated to SQLite version 3.7.17 with support for memory-mapped I/O which could potentially double performance and use less RAM. The new functionality adds xFetch() and xUnfetch() methods which are automatically called if memory-mapped I/O is activated, to map the data into memory.

Dragonflybsd: installing pkgsrc

sgt_learn — Wed, 22 May 2013 04:36:38 GMT

I've Dragonflybsd 3.4.1 amd64 installed and have been having a darned time installing packages from pkgsrc.

The dragonflybsd website instructions mention, for first time installation, to create it with the following commands:

# cd /usr
# make pkgsrc-create

Installation fails with:

cd /usr/pkgsrc && git fetch origin
fatal: unable to connect to git.dragonflybsd.org
git.dragonflybsd.org[0: 199.233.90.72]: errno=Operation timed out

In addition, GITHOST was set to avalon.dragonflybsd.org (set GITHOST=avalon.dragonflybsd.org)

git.dragonflybsd.org and avalon.dragonflybsd.org are accessible from a web browser.

I am eager to try df-3.4.1

Thanks for your advise.

QEMU 1.5: GPU pass-through and ARM support

J65nko — Tue, 21 May 2013 17:52:18 GMT

From http://h-online.com/-1866327

Quote:

The recently released QEMU 1.5 supports virtualisation with KVM on the Cortex A15 series of ARM cores. Another new addition is an experimental feature for passing through graphics chips from the host to the guest via VFIO; however, the feature is currently only thought to work reliably with some of the graphics chips. Both features rely on Linux kernel support that became available with Linux 3.9.

Continuous database migration with Liquibase and Flyway

J65nko — Tue, 21 May 2013 08:35:49 GMT

From http://h-online.com/-1860080

Quote:

An application's version-controlled source code is stored in the repository. Why not that of the database? To reproduce arbitrary database states in development, test or production environments, two powerful Java libraries are at hand that can be seamlessly integrated into a build for an agile Continuous Delivery.

NetBSD NetBSD 6.1 and 6.0.2 released

J65nko — Mon, 20 May 2013 12:35:34 GMT

From http://h-online.com/-1866077

Quote:

The NetBSD Foundation has announced the first feature update of NetBSD 6 in the form of NetBSD 6.1. The changes in 6.1 include fixes in the kernel for processes with attributes. Networking gets fixes for "atomic fragments" in IPv6, fixes for locking issues in the ipf packet filter, many changes to the npf packet filter library and a correction to the VirtIO NIC driver which had been crashing recent QEMU versions. Filesystem changes include various fixes and working big-endian support for smbfs and an ability to mount ext2fs and msdosfs in 32-bit compat mode.

[snip]
...the ARM platform now has "greatly improved" support for the Raspberry Pi, with both USB and on-board Ethernet networking functioning, ......

OpenBSD multicast

unkmail — Mon, 20 May 2013 10:43:39 GMT

How to send multicast datagram via non-default network interface?
I try this:

Code:

#include 

#include 

#include 

#include 

#include 

#include 

#include 

#include 

#include 

#include 

#include 

#include 



#define IFACE_ADDR      "192.168.2.1"

#define MCAST_ADDR      "239.1.2.3"

#define MCAST_PORT      1234



int main(void)

{

        struct sockaddr_in      ifaddr, mcaddr;

        int                     sock, on;

        char                    msg[] = "test test test";



        if ((sock = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP)) == -1)

                err(1, "socket");



        on = 1;

        if (setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &on, sizeof on) == -1)

                err(1, "setsockopt(SO_REUSEADDR)");



        ifaddr.sin_addr.s_addr = inet_addr(IFACE_ADDR);

        if (setsockopt(sock, IPPROTO_IP, IP_MULTICAST_IF,

            &ifaddr.sin_addr.s_addr, sizeof(ifaddr.sin_addr.s_addr)) == -1)

                err(1, "setsockopt(IP_MULTICAST_IF)");



        memset(&mcaddr, 0, sizeof mcaddr);

        mcaddr.sin_family = AF_INET;

        mcaddr.sin_addr.s_addr = inet_addr(MCAST_ADDR);

        mcaddr.sin_port = (unsigned short)htons(MCAST_PORT);



        if (sendto(sock, msg, sizeof msg, 0,

            (struct sockaddr *)&mcaddr, sizeof mcaddr) == -1)

                err(1, "sendto");

        close(sock);

        return (0);

}

but allways get "sendto: No route to host".

Joomla FreeBSD port file permissions

J65nko — Mon, 20 May 2013 04:31:33 GMT

The FreeBSD port of Joomla 2.5.11 has the file ownership and permissions of the joomla directories
set as:

Code:

drwxr-xr-x 4 root wheel

The files are:

Code:

-r--r--r-- 1 www www

Because of these restricted permissions the Joomla configuration, done through the Joomla web-based PHP code, fails.
The Apache webserver runs as user www and thus cannot modify/write the configuration and remove the Joomla installation directory, that for the sake of security, needs to be done.

So the only way out is to temporarily loosen the permissions and then restore them after configuration.

Is this normal or am I missing something? ;)

Unexpected / Inconsistent shell behaviour

IdOp — Mon, 20 May 2013 00:55:59 GMT

A while ago I was working with a system shell script and encountered a really unexpected result when I tried to do something a certain way. Below I've distilled it into a simple example. Odd shell behaviour of some sort has been discussed on this forum before, but I couldn't find it, so I hope this isn't a duplicate discussion.

Consider the following example script for a Bourne-like shell:

Code:

#!/path/to/shell



VAR=Old



echo A | while read REPLY; do



    echo Here



    VAR=New



done



echo VAR = $VAR

Note that the first line of the script (in red) shouldn't be used literally. Replace it with paths to various Bourne-like shells to be tested.

At this point, to get the most out of this, you shouldn't read past the end of this paragraph. Just study the script above and decide what you think the output should be. Then come back and read the rest of the post. No cheating now, look at the script first. ;)

Unexpected Behaviour

When I ran the script on "most" shells, the output was totally unexpected. It gave this:

Here
VAR = Old

Note that since it prints "Here", the script does go into the do loop where VAR gets set to New. Yet upon exiting the loop, VAR is back to the "Old" value! It's as if what happens in the loop is somehow quite local, and is lost after leaving the loop. I got this weird behaviour with the following shells:

bash
sh NetBSD
ksh NetBSD
ksh OpenBSD
sh SunOS

Expected Behaviour

The output I'd expected was this:

Here
VAR = New

After checking more shells, this output was produced by:

ksh93 CentOS
ksh SunOS

One conclusion is that Bourne-like shells are not consistent about this.

Question: Is the "locality" of the unexpected output intended and is it documented somewhere? I looked at some man pages a bit and didn't find anything, but maybe it's subtle or I plain missed it.

Thanks for reading, and for any comments.

GUI for MYSQL55

philo_neo71 — Sat, 18 May 2013 01:20:57 GMT

Hi,
I search GUI tools for Mysql55 on freebsd 9.1p3, because mysql_workbench52 is not supported.

Code:

===> mysql-workbench-oss52-5.2.1_8 cannot install: does not work with MySQL version 55 (MySQL 41 55 not supported).

where are a software GUI tools for Mysql 55 ?

regards
Phil

Bi quad Opteron

don't detect keyboard

philo_neo71 — Fri, 17 May 2013 17:22:05 GMT

hi,
Since 2 days ago, i have the keyboard don't detected by Freebsd 9.1 (i686).
at boot time the keyboard can selected item boot menu,
but after gnome2 started the keyboard don't work. I search,
how to plug keyboard for active it under x-windows manager Gnome2.
i try with another keyboard. The keyboard interface is PS/2.
i try to activate keyboard under x, the keyboard declaration are corrects,
fr and usa. the Mouse are working. i can do ssh commands by another host for to change parametres keyboard files configuration.

regards
Philippe