search for: noschg

...;m running 4.8-STABLE but I'm having some problems installing a new kernel. (in /usr/src make installkernel). mv /kernel /kernel.old operation not permitted My securelevel is currently set to -1 (kern_securelevel=-1) and kern_securelevel_enable="NO" I have already executed chflags noschg /kernel and /kernel.old (while in single user mode). What am I missing? Thanks. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3257 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-s...

...oking at files that did not get touched by the install. Is it safe to remove all such files? In particular, I am looking at /usr/libexec/lib-elf.so.1, which has the schg flag set. I am afraid to remove this for fear of making my system unbootable. Could somebody please reassure me that it is ok to noschg and remove this old file? Thanks Geoffrey

...r to the release of FreeBSD 4.1. III. Impact Local users can obtain root privileges on the local machine. IV. Workaround Remove the setuid bit on the following utilities. This has the side-effect that non-root users cannot change their finger information, passwords, or login shells. # chflags noschg /usr/bin/chfn /usr/bin/chpass /usr/bin/chsh # chmod u-s /usr/bin/chfn /usr/bin/chpass /usr/bin/chsh # chflags noschg /usr/bin/ypchfn /usr/bin/ypchpass /usr/bin/ypchsh # chmod u-s /usr/bin/ypchfn /usr/bin/ypchpass /usr/bin/ypchsh # chflags noschg /usr/bin/passwd # chmod u-s /usr/bin/passwd V. Sol...

I'm currently administering a machine about 1500mi from me with nobody local to the machine to assist me. Anyways, my only access to this machine is via SSH, no remote serial console or anything. When I try to do a "make installworld" I end up with install: rename: /lib/INS@aTxk to /lib/libcrypt.so.3: Operation not permitted very shortly thereafter. I cannot boot

Hourly I have an rsync job backup /home to /home/backup. I have 24 directories (one for each hour): home.0 ... home.23 Here is the script I am running via cron: #! /usr/local/bin/bash dest=`date +%k | sed 's/ //g'` linkdir=`date -v-1H +%k | sed 's/ //g'` chflags -R noschg /home/backup rm -rf /home/backup/home.$dest rsync -ahHP --numeric-ids --delete --stats --link-dest=../ home."$linkdir"\ --exclude=/backup/* /home/ /home/backup/home."$dest"/ > /var/ rsync.log sleep 2 chflags -R schg /home/backup Per reading this list and other googl...

...yes" in sshd_config or the attacker has access to a local user in the "wheel" group, the attacker can gain root privileges. IV. Workaround Disable OPIE authentication in PAM: # sed -i "" -e /opie/s/^/#/ /etc/pam.d/* or Remove the setuid bit from opiepasswd: # chflags noschg /usr/bin/opiepasswd # chmod 555 /usr/bin/opiepasswd # chflags schg /usr/bin/opiepasswd V. Solution Perform one of the following: 1) Upgrade your vulnerable system to 4-STABLE, 5-STABLE, or 6-STABLE, or to the RELENG_6_0, RELENG_5_4, RELENG_5_3, RELENG_4_11, or RELENG_4_10 security branch dated...

...yes" in sshd_config or the attacker has access to a local user in the "wheel" group, the attacker can gain root privileges. IV. Workaround Disable OPIE authentication in PAM: # sed -i "" -e /opie/s/^/#/ /etc/pam.d/* or Remove the setuid bit from opiepasswd: # chflags noschg /usr/bin/opiepasswd # chmod 555 /usr/bin/opiepasswd # chflags schg /usr/bin/opiepasswd V. Solution Perform one of the following: 1) Upgrade your vulnerable system to 4-STABLE, 5-STABLE, or 6-STABLE, or to the RELENG_6_0, RELENG_5_4, RELENG_5_3, RELENG_4_11, or RELENG_4_10 security branch dated...

Hello, I installed 4.8-RELEASE a few weeks ago, and since I let the effort sit stagnant for a while I decided to do the cvsup/buildworld/buildkernel/installkernel/installworld/mergemaster/MAKEDEV steps to get current. Went fine, rebooted, then noticed that just one CPU was recognized: FreeBSD 4.8-STABLE #0: Thu Jun 19 17:05:20 PDT 2003

currently i'm trying to setup diskless client, which netboots 6.1-PRERELEASE kernel with help of etherboot. i've built custom kernel with `sudo make -j4 buildkernel KERNCONF=DISKLESS CPUTYPE=pentium-mmx -DNO_MODULES' and attached config. kernell loads off tftp server fine, detecting devices, but traps, when trying to mount root fs from nfs server. i've managed to get copy of

...6.0-RELEASE-p2 FreeBSD 6.0-RELEASE-p2 #7: Thu Jan 12 09:30:38 EST 2006 root@pc-racine1.mcmaster.ca:/usr/obj/usr/src/sys/OPTIPLEX i386 Just tried a fresh cvsup from cvsup9, a standard compile via cvsup -g -L 2 /usr/share/examples/cvsup/current-supfile && cd /usr/obj && chflags -R noschg * && rm -rf /usr/obj/* && cd /usr/src && nice -20 make buildworld && nice -20 make buildkernel and got hung up rather quickly... here is the message... ===> gnu/usr.bin/groff/contrib (depend) ===> gnu/usr.bin/groff/contrib/mm (depend) ===> gnu/usr.bin/gro...