search for: dawidek

...sers to test those patches as much as possible, because I want to commit them to the HEAD and RELENG_6 branches. Because of locking changes it will be really good if you can turn on INVARIANTS, INVARIANT_SUPPORT options and eventually DIAGNOSTIC in your kernel. Thanks in advance! -- Pawel Jakub Dawidek http://www.wheel.pl pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signatur...

...ber/ Release notes are at: http://cerber.sourceforge.net/CerbNG-1.0-RC2-RELNOTES.txt Always up to date (snapshot from HEAD) policies are avaliable at: http://cerber.sourceforge.net/policies/ We would also like to invite you to subscribe cerb mailing lists. Enjoy!! Pawel Jakub Dawidek, Slawek Zak. -- Pawel Jakub Dawidek pawel@dawidek.net UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net -------------- next part -------------- A non-text attachment was scrubbed... Name...

...ber/ Release notes are at: http://cerber.sourceforge.net/CerbNG-1.0-RC2-RELNOTES.txt Always up to date (snapshot from HEAD) policies are avaliable at: http://cerber.sourceforge.net/policies/ We would also like to invite you to subscribe cerb mailing lists. Enjoy!! Pawel Jakub Dawidek, Slawek Zak. -- Pawel Jakub Dawidek pawel@dawidek.net UNIX Systems Programmer/Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am! http://cerber.sourceforge.net -------------- next part -------------- A non-text attachment was scrubbed... Name...

...if kept around. In FreeBSD VOP_INACTIVE() means "puts the vnode onto free vnodes list" and when we want to use this vnode for different file system VOP_RECLAIM() is called and VOP_RECLAIM() will be a good place to free znode as well, if possible. Any ideas how to fix it? -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...this point. This should be fixed in the future, we may also add support for sharing ZVOLs over ggate. - There is no support for ACLs and extended attributes. - There is no support for booting off of ZFS file system. Other than that, ZFS should be fully-functional. Enjoy! -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...t permitted to create hard links to files not owned by them. If sysctl security.bsd.hardlink_check_gid is set to 1, unprivileged users are not permitted to create hard links to files if they are not member of file's group. For now user is able to create hardlinks to any files. -- Pawel Jakub Dawidek http://www.FreeBSD.org pjd@FreeBSD.org http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-sig...

...sn''t exist on Solaris. To verify this someone needs to compile ZFS with debug and run this test: # zpool create tank ... # fsstress -d /tank/ -n 10000 -p 16 This will tell me if this is mine or ZFS''s insuffiecient synchronization somewhere. Thanks in advance! -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...ero of=/tank/foo/test bs=512 count=20480 dd: /tank/foo/test: Disc quota exceeded time: 306.5s Solaris: # dd if=/dev/zero of=/tank/foo/test bs=512 count=20480 write: Disc quota exceeded time: 602.7s CPU is almost entirely idle, but disk activity seems to be high. Any ideas? -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...0 0 mirror DEGRADED 0 0 0 disk1 OFFLINE 0 0 0 disk2 ONLINE 0 0 0 Note how various states changed after export/import cycle. That''s all for now, hopefully nothing more to come:) -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...conds (after I started to use Solaris atomic operations) on assertions. Maybe this only doesn''t work when compiled with gcc? Not sure, but most of the time 64bit variables are used properly. Anyway, the patch is here: http://people.freebsd.org/~pjd/opensolaris/10.patch -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

I can''t find anything using those functions. Can they be removed? -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...h faster to attach. We could make the code more complex by assuming 0.01% of the time varies, which should still be safe and will allow to collect more entropy from those long calls. The patch is here: http://people.freebsd.org/~pjd/patches/harvest_device_attach.patch Comments? -- Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://tupytaj.pl -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-sign...

Tuning should not be done in general and Best practices should be followed. So get very much acquainted with this first : http://www.solarisinternals.com/wiki/index.php/ZFS_Best_Practices_Guide Then if you must, this could soothe or sting : http://www.solarisinternals.com/wiki/index.php/ZFS_Evil_Tuning_Guide So drive carefully. -r

...set_sync+0x120 dsl_pool_sync() at dsl_pool_sync+0x72 spa_sync() at spa_sync+0x2f3 txg_sync_thread() at txg_sync_thread+0x2cd Do you have any ideas how to fix it? Kris has a way to reproduce it in his environment and I''m sure he could try a patch, if you could provide one. -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...

...om RFC 1750. If people like the idea and someone more skilled than me in this subject can review this stuff, we can start to put it into kernel "random infrastructure". It could also be implemented as userland daemon which writes collected entropy to /dev/random maybe... -- Pawel Jakub Dawidek http://www.wheel.pl pjd@FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signatur...

...aging the list at > freebsd-security-owner@freebsd.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of freebsd-security digest..." > > > Today's Topics: > > 1. Check PRIV_VFS_MOUNT when jailed. (Pawel Jakub Dawidek) > 2. Re: freebsd vpn server behind nat dsl router (Robert Johannes) > 3. Re: freebsd vpn server behind nat dsl router (Tom Judge) > 4. Re: Check PRIV_VFS_MOUNT when jailed. (Pawel Jakub Dawidek) > 5. Re: OpenBSD IPv6 remote kernel buffer overflow. FreeBSD has > th...

Hello, I think there was already a thread on this. I just want to raise the question again if anyone has successfully booted an gdbe-encrypted filesystem (everything encrypted except the bootloader). The passphrase is entered at the bootloader prompt or embedded in the bootloader. I appreciate any tips. Thanks, - ronnel

...no longer involved with ZFS and we should let their grants expire. I am nominating the following to be new Core Contributors of ZFS: Jonathan W. Adams (jwadams) Chris Kirby Lin Ling Eric C. Taylor (taylor) Mark Musante Rich Morris George Wilson Tim Haley Brendan Gregg Adam Leventhal Pawel Jakub Dawidek Ricardo Correia For Contributor I am nominating the following: Darren Moffat Richard Elling I am voting +1 for all of these (including myself) Feel free to nominate others for Contributor or Core Contributor. -Mark

.... The patches are here. Every change has individual description: http://people.freebsd.org/~pjd/patches/dhclient_capsicum.patches I'd appreciate any review, especially security audit of the proposed changes. The new and most critical function is probably send_packet_priv(). -- Pawel Jakub Dawidek http://www.wheelsystems.com FreeBSD committer http://www.FreeBSD.org Am I Evil? Yes, I Am! http://mobter.com -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-sign...

...; <<P03 D07>> <<P04 D08>> <<N03 D09 D10 D11 D12>> <<N04 D13 D14 D15>> U U U U U U U U The biggest problem for me is a method to traverse allocated blocks sorted by offset. Any hints how to do it? -- Pawel Jakub Dawidek http://www.wheel.pl pjd at FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signa...