Displaying 20 results from an estimated 1000 matches similar to: "A simple rc.d jail patch to enable priority"
2006 Jun 28
3
limit on the number of NICs per domU
Hello,
Xen FAQ states that there''s a limitation of 3 virtual network interfaces
per domU:
http://wiki.xensource.com/xenwiki/XenFaq#head-9896478cf65a16f43ab4fb066f74c0e0d67a16ac
My question is: is there any way (like setting some #define or something
in the sources) to rise this limit to 4 or 5? Why is the limit set to 3
actually?
I tried to google, but I couldn''t find any
2007 Jan 31
1
IMAP on move message command launch
Hello,
Is it possible with dovecot IMAP server to do the following thing:
After the clients moves a message from any folder to the given one, I
want to launch a command and feed that message into it, as well as
physically move the message to this folder.
Is that possible?
--
Jan Srzednicki
w at expro.pl
2008 May 22
4
Jail resource limits
http://wiki.freebsd.org/JailResourceLimits
Is this anthing people are working on? Is it on its way to RELENG_7?
Is there a 7-version of the patch or anything? This would be a _VERY_
useful feature.
--
Peter Ankerst?l
peter@pean.org
2007 Jun 01
1
CMU Sieve pluigin missing proper charset support
Hello,
After testing the Sieve plugin for the LDA, I have noticed that it does
not handle charset issues properly. IETF draft says:
4.3. Subject and From Parameters
The ":subject" parameter specifies a subject line to attach to any
vacation response that is generated. UTF-8 characters can be used in
the string argument; implementations MUST convert the string to
2006 Nov 11
5
src/etc/rc.firewall simple ${fw_pass} tcp from any to any established
Hi security@ list,
In my self written, large ipfw rule set, I had something that passed
http to allow me to browse most but not all remote sites. For years
I assumed the few sites I had difficulty with were cases pppoed MTU
!= 1500, from not having installed tcpmssd on my 4.*-RELEASE, but
then running 6.1-RELEASE I realised that wasn't the problem.
http://www.web.de Still failed, &
2012 Feb 10
21
Reducing the need to compile a custom kernel
Hi,
during some big discussions in the last monts on various lists, one of
the problems was that some people would like to use freebsd-update but
can't as they are using a custom kernel. With all the kernel modules
we provide, the need for a custom kernel should be small, but on the
other hand, we do not provide a small kernel-skeleton where you can
load just the modules you need.
2007 Aug 17
1
Jailed X applications
Hello.
Has anyone here ever successfully set up a jail for X apps, connecting
to an external X server? I'm trying an experimental sandbox setup here.
I have a jail running on an aliased IP on my local machine and X
programs connect out of the jail to my local X server via an SSH
tunneled TCP connection. All other packets to and from the jail are
denied by the packet filter. The trouble I am
2008 Dec 12
2
Proper use of LD_LIBRARY_PATH for Linux progs?
Hi!
I ran into a problem with programs exec:ed by print/acroread8 picking
up Linux libraries and thus failed to run. This includes the print
program in the print dialogue and the browser configured in
edit/preferences/internet.
The reason is that the acroread launch script sets LD_LIBRARY_PATH
which is propagated to its childs. See this PR:
2007 Jan 14
3
MOAB advisories
Hi Colin!
I would like to know, that these following "vulnerabilities" does
affect FreeBSD's reliability? If the answer is "yes", what version of
FreeBSD affected, when will be fixed, etc.
http://projects.info-pull.com/moab/MOAB-12-01-2007.html
http://projects.info-pull.com/moab/MOAB-10-01-2007.html
Thank you!
--
kobi
2006 Nov 08
2
freebsd-security Digest, Vol 184, Issue 2
On Nov 4, 2006, at 8:30 AM, Wesley Shields <wxs@atarininja.org> wrote:
>
> On Fri, Nov 03, 2006 at 07:54:59AM -0800, Ricardo A. Reis wrote:
> [...]
>> In the II COLARIS - Joanna Rutkowska alert the possible
>> new technology of Malware's using hardware virtualization, present
>> in AMD and INTEL new processor.
>>
>> I've two questions ...
2007 Jan 11
2
FreeBSD Security Advisory FreeBSD-SA-07:01.jail
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=============================================================================
FreeBSD-SA-07:01.jail Security Advisory
The FreeBSD Project
Topic: Jail rc.d script privilege escalation
Category: core
Module: etc_rc.d
Announced:
2007 Mar 29
1
nx-bit and TPM
Hello,
I'm was looking through handbook and wikipedia and it appears FreeBSD
doesn't support hardware (nor software) nx bit.
There also doesn't seem to be any support for TPM (Trusted Platform Module).
I was wondering if it is due to a general lack of interest and/or
personal preference (gcc?) or are there other issues. The reason I'm asking
is I'm currently doing a MSc degree
2005 Aug 21
1
Security warning with sshd
In my recent security email, I got the following errors:
cantona.dnswatchdog.com login failures:
Aug 20 02:37:19 cantona sshd[9444]: fatal: Write failed: Operation not permitted
Aug 20 04:30:42 cantona sshd[16142]: fatal: Write failed: Operation
not permitted
Aug 20 21:21:51 cantona sshd[45716]: fatal: Write failed: Operation
not permitted
So three questions: What is it? Should I be worried?
2005 Jul 29
1
booting gbde-encrypted filesystem
Hello,
I think there was already a thread on this. I just
want to raise the question again if anyone has successfully
booted an gdbe-encrypted filesystem (everything encrypted except
the bootloader). The passphrase is entered at the bootloader prompt
or embedded in the bootloader.
I appreciate any tips.
Thanks,
- ronnel
2006 Dec 19
3
/etc/rc.d/jail: losing IPs if jail_x_interface set and syntax error in jails /etc/rc?
Hi *,
I recently triggered an error when setting up a jail-host: I configured
the jail(s) like evry jail I set up in the past:
On the jail-hosts /etc/rc.conf:
# ---- Jail-Globals ----
jail_enable="YES" # Set to NO to disable starting of any jails
jail_list="ftp mx1 relay" # Space separated list of names of jails
2007 Mar 19
1
abode acrobat professional 7.0 installation problem
Hi all,
When I try to install acrobat pro 7.0, I get the following error and
execution stops:
"fixme:msi:MsiInstallProductW L"Z:\\home\\emre\\tmp\\Acrobat
Professional 7.0\\Adobe Acrobat 7.0 Professional\\AcroPro.msi" L"
SETUPEXEDIR=\"Z:\\home\\emre\\tmp\\Acrobat Professional 7.0\\Adobe
Acrobat 7.0 Professional\""
err:msi:ITERATE_Actions Execution halted,
2014 Sep 03
7
Does virsh actually work?
I have been beating my head against a wall attempting to get virsh to
migrate a simple VM from one host to another.
I have two systems running Ubuntu 14.04 with libvirt 1.2.2. Yes, they are
bridged. Non-shared storage. Modest guest VM that only requires 100G of
disk space; there is far more available.
In trying to accomplish even the simplest migration (per every page I can
find from both the
2005 Nov 26
7
Reflections on Trusting Trust
or "How do I know my copy of FreeBSD is the same as yours?"
I have recently been meditating on the issue of validating X.509
root certificates. An obvious extension to that is validating
FreeBSD itself.
Under "The Cutting Edge", the handbook lists 3 methods of
synchronising your personal copy of FreeBSD with the Project's copy:
Anonymous CVS, CTM and CVSup. There are
2006 Nov 27
1
freebsd-security Digest, Vol 187, Issue 4
> [It's just a panic]
> I was so transfixed on Josh stating that the attacker could as well
> just mount a filesystem with suid root binaries and how that would be
> more useful than a buffer overflow in the filesystem driver. I totally
> missed the fact that we were talking about two bugs where the kernel
> deliberately called panic() ;).
>
> So in this case I'd
2006 Jun 11
2
Kerberos5 / Heimdal
I have FreeBSD-6.1 and it appears the default installation has a full
complement of Kerberos5. But, /usr/src/kerberos5/README states:
This subtree is world-exportable, as it does not contain any
cryptographic code.
At the time of writing, it did not even contain source code, only
Makefiles and headers.
Please maintain this "exportable" status quo.
Thanks!