search for: harbaugh

...debug2: fd 12 is O_NONBLOCK debug1: Setting controlling tty using TIOCSCTTY. debug3: mm_answer_pty: tty /dev/pts/2 ptyfd 4 debug3: mm_request_receive entering debug3: monitor_read: checking request 38 Error in terminal setup. Couldn't establish session for harbaugh from ncihp1.ncifcrf.gov debug1: Calling cleanup 0x120055cac(0x140031cc8) debug1: session_pty_cleanup: session 0 release /dev/pts/2 debug1: Calling cleanup 0x12005d934(0x0) Connection closed by remote host. debug1: channel_free: channel 0: server-session, nchannels 2 de...

...#39;configure' from 3.4p1, but that does not create a Makefile from the Makefile.in. Where are the directions for building a snapshot? The INSTALL file says to use the non-existant 'configure'. Thanks, Toni ----------------------------------------------------------------------- Toni Harbaugh-Blackford harbaugh at nciaxp.ncifcrf.gov AlphaServer 8400 System Administrator SAIC/NCI Frederick Advanced Biomedical Computing Center

What do we loose by not having post-auth privsep? What code is executed between authorization and actual setting of the effective uid? On Tue, 3 Sep 2002, Chris Adams wrote: > Once upon a time, Toni L. Harbaugh-Blackford <harbaugh at nciaxp.ncifcrf.gov> said: > > It appears that the integration of the sia session setup will either > > have to be rethought or abandoned in order for privsep to work. > > That was the conclusion I came to a while back. I'd like to keep...

...that the terminal settings could be corrected outside of SIA. Does anyone see any other problems with moving session_setup_sia() to do_setusercontext() when privsep is in use? Any comments on the list above? Toni ----------------------------------------------------------------------- Toni Harbaugh-Blackford harbaugh at nciaxp.ncifcrf.gov AlphaServer 8400 System Administrator SAIC/NCI Frederick Advanced Biomedical Computing Center

...is that I have 3.4p1 working as is, so I know if I have a problem it is likely related to the patch and not some unknown. Also, can someone point me to quick and dirty instructions for the /regress stuff? Thanks, Toni ----------------------------------------------------------------------- Toni Harbaugh-Blackford harbaugh at nciaxp.ncifcrf.gov AlphaServer 8400 System Administrator SAIC/NCI Frederick Advanced Biomedical Computing Center

...kinit = cmdv[i] + 6; - } - } - - if (kinit) { + if ((kinit = get_arg(cmdc, cmdv, "kinit="))) { char *s = strrchr(kinit, '/'); if (s) { s++; } - init_argv[0] = kinit; + init_argv[0] = s; execv(kinit, init_argv); } init_argv[0] = "init"; -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20050105/bb97b7ab/attachment.bin

...pts = strchr(path, ',')) != NULL) { + *opts++ = '\0'; + argv[a++] = (char *) "-o"; + argv[a++] = opts; + } + if ((x = strchr(path, ':')) == NULL) { if (addr.s_addr == INADDR_NONE) { fprintf(stderr, "Root-NFS: no server defined\n"); -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20050105/b06ad3bb/attachment.bin

OK, I got a chance to try out the Tru64 patch for privsep. I applied the patch to 3.4p1. Partial success, in that it now works for me for logins to "root". Logins to ordinary accounts fail after authentication, when trying to set tty characteristics. See the excerpt from the debug messages below. This is for Tru64 V4.0F (with enhanced_security turned on, obviously.) I guess it's time

...s left empty, as is the 'pwd' field. Does someone know what the entity fields *should* look like after the call to sia_ses_init(), or have some other idea why the sia_ses_authent() call is failing? Thanks, Toni ----------------------------------------------------------------------- Toni Harbaugh-Blackford harbaugh at nciaxp.ncifcrf.gov AlphaServer 8400 System Administrator SAIC/NCI Frederick Advanced Biomedical Computing Center --------------------------------------------------------------------- To unsubscribe, e-mail: secureshell-unsubscribe at securityfocus.com For...

...ntf.c 2004-10-22 12:08:23.497660496 -0600 @@ -14,10 +14,10 @@ va_copy(ap1, ap); - bytes = vsnprintf(NULL, 0, format, ap1); + bytes = vsnprintf(NULL, 0, format, ap1) + 1; va_end(ap1); - *bufp = p = malloc(bytes+1); + *bufp = p = malloc(bytes); if ( !p ) return -1; -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20041022/74f45458/attachment.bin

...ipe_inode(). Has this been discussed before? Is there something that userspace can wait on until pipefs is mounted or more of the kernel is initialized? I did some searching and I just can't turn up a previous discussion about this - my apologies if it's already been covered. -- Thayne Harbaugh Linux Networx

...__optptr; +static const char *__optptr = NULL; int getopt(int argc, char * const *argv, const char *optstring) { @@ -51,6 +51,7 @@ optind += 2; } else { /* Missing argument */ + optind++; return (optstring[0] == ':') ? ':' : '?'; } } -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20050104/06d024a0/attachment.bin

...retty good klibc/hotplug/udev/kinit early userspace that just works (for me). It's taken me a bit to get things to work because I just couldn't find all the details and there were a few bugs/lacking features. Better/more documentation would have helped me (maybe I missed it?). -- Thayne Harbaugh Linux Networx

Hi Toni, I'm sorry, I haven't had much time to work on this today. When I run sshd (from the patched snapshot) in a debugger, with a breakpoint early in setup_sia(), this is what I find after connecting with a client: (1) There are two sshd processes. One is running as root, and the other as the user I logged with using the client. The root process is the one in the debugger,

...T 0x10 /* wait for child processes (unused on linux) */ +#define LOG_PERROR 0x20 /* additional logging to stderr */ + __extern void openlog(const char *, int, int); __extern void syslog(int, const char *, ...); __extern void vsyslog(int, const char *, va_list); -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20041021/b088e667/attachment.bin

Here's a patch to add klibc/utils/uname.c. I wrote uname.c and it can be published under the klibc copyright/left/middle/public domain/whatever. It supports all standard options except -p and -o. -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: klibc-uname.patch Type: text/x-patch Size: 4145 bytes Desc: not available Url : http://www.zytor.com/pipermail/klibc/attachments/20041025/f28bd860/klibc-uname.bin

....c 2005-01-05 01:38:30.740191320 -0700 @@ -168,7 +168,7 @@ for (i = 1; i < argc; i++) { if (argv[i] && strncmp(argv[i], name, len) == 0 && - (argv[i][len] == '\0')) { + (argv[i][len] != '\0')) { ret = argv[i] + len; break; } -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20050105/1ee669df/attachment.bin

...quot;, 5) ) { + if ( strncmp(name, "/dev/", 5) ) { res = (dev_t) strtoul(name, &p, 16); if (*p) return 0; @@ -111,7 +111,7 @@ } name += 5; if (strcmp(name, "nfs") == 0) - return 0; + return Root_NFS; len = strlen(name); s = alloca(len+1); -- Thayne Harbaugh Linux Networx -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://www.zytor.com/pipermail/klibc/attachments/20050105/6af08503/attachment.bin

...p.o \ memcpy.o memcmp.o memset.o memccpy.o memmem.o memswap.o \ - memmove.o memchr.o \ + memmove.o memchr.o memrchr.o \ strcasecmp.o strncasecmp.o strndup.o strerror.o \ strcat.o strchr.o strcmp.o strcpy.o strdup.o strlen.o strnlen.o \ strncat.o strlcpy.o strlcat.o \ -- Thayne Harbaugh Linux Networx

...uses... */ - if ( !(flags & IFF_LOOPBACK) && - (flags & (IFF_BROADCAST|IFF_POINTOPOINT)) ) - { - if ( !(dev = add_device(de->d_name)) ) - continue; - bringup_one_dev(template, dev); - } + bringup_one_dev(template, dev); } closedir(d); return 1; -- Thayne Harbaugh Linux Networx