search for: af_unix

...equested: > > debug1: channel 1: new [forwarded-streamlocal at openssh.com] > get_socket_address: getnameinfo 1 failed: ai_family not supported > get_sock_port: getnameinfo NI_NUMERICSERV failed: ai_family not supported That's strange, because we do: if (addr.ss_family == AF_UNIX) { /* Get the Unix domain socket path. */ return xstrdup(((struct sockaddr_un *)&addr)->sun_path); } so AF_UNIX should never get to getnameinfo...

Hi, I' trying to read datas sent by my KVM host within the Guest. Host send these datas trough a channel UNIX type , by using AF_UNIX socket stuff. If i try to retrive the datas by using such type of thing in the Guest : #define NAME "/dev/virtio-ports/agent" sock = socket(AF_UNIX, SOCK_STREAM, 0); 12 if (sock < 0) { 13 perror("opening stream socket"); 14 exit(1); 15 } 16 ser...

Hi, Attached is a new patch, which introduces an option(SockUmask) for sshd and ssh and a command line argument(-m) for ssh-agent. Those options are used to specify the umask for the AF_UNIX socket. Currently, ssh-agent, ssh and sshd use the system umask for the AF_UNIX socket, however, this is lack of flexibility in some cases for security considerations, that's why I provide the patch. Would you please take a look and see if it could be used in the next openssh release? Thanks Xi...

Hi, I've been planning to develop a support for tunneling between "local_tcp => server_AF_UNIX". This way, every user of server machine, can have: 1. personal address space (if socket is located on personal directory). Currently one must check assigned local port every time starting a server (e.g. vncserver), and redirect a local port to "random" remote port. 2. Added securit...

...file changed, 2 insertions(+), 1 deletion(-) diff --git a/generator/states-connect.c b/generator/states-connect.c index 04e894c..d62b0f5 100644 --- a/generator/states-connect.c +++ b/generator/states-connect.c @@ -51,7 +51,8 @@ STATE_MACHINE { int fd; assert (!h->sock); - fd = socket (AF_UNIX, SOCK_STREAM|SOCK_NONBLOCK|SOCK_CLOEXEC, 0); + fd = socket (h->connaddr.ss_family, + SOCK_STREAM|SOCK_NONBLOCK|SOCK_CLOEXEC, 0); if (fd == -1) { SET_NEXT_STATE (%.DEAD); set_error (errno, "socket"); -- 2.23.0

...640),IP_NEXTHOP(0.0.193.232) sockname: AF_INET 134.84.119.102 port: 143 peername: AF_INET 160.94.23.17 port: 38847 8: S_IFSOCK mode:0666 dev:293,0 ino:63591 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK SOCK_STREAM SO_SNDBUF(16384),SO_RCVBUF(5120) sockname: AF_UNIX peername: AF_UNIX default 9: S_IFSOCK mode:0666 dev:293,0 ino:43728 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK SOCK_STREAM SO_SNDBUF(16384),SO_RCVBUF(5120) sockname: AF_UNIX On Fri, Jan 19, 2007 at 11:34:44PM +0200, Timo Sirainen wrote: > On Wed, 2007-01-17 a...

...td.h> +#include <fcntl.h> #include <errno.h> #include <signal.h> #include <netdb.h> @@ -183,12 +184,12 @@ CONNECT_COMMAND.START: int sv[2]; pid_t pid; + int flags; assert (!h->sock); assert (h->argv); assert (h->argv[0]); - if (socketpair (AF_UNIX, SOCK_STREAM|SOCK_NONBLOCK|SOCK_CLOEXEC, 0, - sv) == -1) { + if (socketpair (AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC, 0, sv) == -1) { SET_NEXT_STATE (%.DEAD); set_error (errno, "socketpair"); return -1; @@ -219,13 +220,27 @@ } /* Parent. */ + close (sv[...

...gt;> root@vm-host:~# tail -10 /tmp/trace >> access("/etc/libvirt/libvirt.conf", F_OK) = 0 >> open("/etc/libvirt/libvirt.conf", O_RDONLY) = 5 >> access("/proc/vz", F_OK) = -1 ENOENT (No such file or >> directory) >> socket(AF_UNIX, SOCK_STREAM, 0) = 5 >> connect(5, {sa_family=AF_UNIX, >> sun_path="/var/run/libvirt/libvirt-sock"}, 110) = 0 >> getsockname(5, {sa_family=AF_UNIX}, [128->2]) = 0 >> poll([{fd=5, events=POLLOUT}, {fd=6, events=POLLIN}], 2, -1) = 1 >> ([{fd=5, reven...

...s to make a callout to dovecot-lmtp. At RCPT TO: swaks hangs 5.0<something-small> seconds then process normally (exim is waiting for callout completion). with strace, I see 5 second delay with many tries to socket connection. (PID 9652 was an auth process freshly forked) [pid 9652] socket(AF_UNIX, SOCK_STREAM, 0) = 14 [pid 9652] fcntl(14, F_GETFL) = 0x2 (flags O_RDWR) [pid 9652] fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK) = 0 [pid 9652] connect(14, {sa_family=AF_UNIX, sun_path="anvil-auth-penalty"}, 110) = -1 ECONNREFUSED (Connection refused) [pid 9652] close(14)...

kevent(10,0x0,0,{ 7,EVFILT_READ,0x0,0x0,0x1,0x4207a140 },4,{ 2147483.000000000 }) = 1 (0x1) accept(7,{ AF_UNIX \"\" },0x7fffffffe7fc) = 11 (0xb) getsockname(11,{ AF_UNIX \"/var/run/dovecot/imap-hibe\" },0x7fffffffe7fc) = 0 (0x0) fcntl(11,F_GETFL,) = 6 (0x6) fcntl(11,F_SETFL,O_NONBLOCK|0x2) = 0 (0x0) getpid()...

Just forwarding this changelog from yesterday. xcs now uses Unix domain sockets in unstable. This was a hot thread a couple months back with strong opinions on both sides and no clear resolution on the list, so I thought some people might like to know the developers'' resolution. This should be good news for those seeking tighter dom0''s, particularly those who

...t;>>> Link to the POSIX document: >>>>> https://www.open-std.org/jtc1/sc22/open/n4217.pdf >>>>> >>>>> TCP (I think we must rely on it), KCM, SMC sockets (all of them are stream) work in the same >>>>> way by calling this function. AF_UNIX also works in the same way, but it implements SIGPIPE handling >>>>> without this function. >>>> >>>> I'm okay calling this function. >>>> >>>>> >>>>> The only thing that confused me a little bit, that sockets abov...

http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz.sig Documentation is probably the only important thing left before v1.0. * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. * mbox: X-Delivery-ID header is now dropped when saving mails. * mbox: If

http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz http://dovecot.org/releases/dovecot-1.0.rc23.tar.gz.sig Documentation is probably the only important thing left before v1.0. * deliver doesn't ever exit with Dovecot's internal exit codes anymore. All its internal exit codes are changed to EX_TEMPFAIL. * mbox: X-Delivery-ID header is now dropped when saving mails. * mbox: If

...ist # virsh list ..nothing just hangs When I ran strace on these broken machines it get stuck at same spot: strace virsh list ... access("/var/run/libvirt/virtqemud-sock", F_OK) = -1 ENOENT (No such file or directory) access("/var/run/libvirt/libvirt-sock", F_OK) = 0 socket(AF_UNIX, SOCK_STREAM, 0) = 5 connect(5, {sa_family=AF_UNIX, sun_path="/var/run/libvirt/libvirt-sock"}, 110) = 0 getsockname(5, {sa_family=AF_UNIX}, [128 => 2]) = 0 futex(0x7fa716a672f0, FUTEX_WAKE_PRIVATE, 2147483647) = 0 fcntl(5, F_GETFD) = 0 fcntl(5, F_SETFD, FD...

...d authentication to go through the trouble of retyping their pass phrase every time they wish to use ssh, slogin, or scp, the SSH package includes a program called ssh-agent, which manages RSA keys for the SSH program. The ssh-agent program creates a mode 700 directory in /tmp, and then creates an AF_UNIX socket in that directory. Later, the user runs the ssh-add program, which adds his private key to the set of keys managed by the ssh-agent program. When the user wishes to access a service which permits him to log in using only his RSA key, the SSH client connects to the AF_UNIX socket, and asks...

...at, it will > mark auth-penalty as disabled and it will not try connecting to it > again. Is that what you're referring to? > > > Regards, > > Stephan. > > > > >> >> (PID 9652 was an auth process freshly forked) >> >> [pid? 9652] socket(AF_UNIX, SOCK_STREAM, 0) = 14 >> [pid? 9652] fcntl(14, F_GETFL)????????? = 0x2 (flags O_RDWR) >> [pid? 9652] fcntl(14, F_SETFL, O_RDWR|O_NONBLOCK) = 0 >> [pid? 9652] connect(14, {sa_family=AF_UNIX, >> sun_path="anvil-auth-penalty"}, 110) = -1 ECONNREFUSED (Connection &gt...

...> error paths. >> --- >> generator/states-connect.c | 21 ++++++++++++++++++--- >> 1 file changed, 18 insertions(+), 3 deletions(-) >> > >> assert (!h->sock); >> assert (h->argv); >> assert (h->argv[0]); >> - if (socketpair (AF_UNIX, SOCK_STREAM|SOCK_NONBLOCK|SOCK_CLOEXEC, 0, >> - sv) == -1) { >> + if (socketpair (AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC, 0, sv) == -1) { > > Is it any easier to keep SOCK_NONBLOCK here and then clear O_NONBLOCK in > the child process? It may matter if we try to...