Menu
▾
▴
devil-linux-develop — developer discussions
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(55) |
Oct
(44) |
Nov
(156) |
Dec
(123) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(130) |
Feb
(156) |
Mar
(162) |
Apr
(171) |
May
(97) |
Jun
(127) |
Jul
(58) |
Aug
(81) |
Sep
(86) |
Oct
(45) |
Nov
(41) |
Dec
(84) |
| 2003 |
Jan
(71) |
Feb
(87) |
Mar
(133) |
Apr
(152) |
May
(151) |
Jun
(232) |
Jul
(320) |
Aug
(237) |
Sep
(271) |
Oct
(536) |
Nov
(301) |
Dec
(393) |
| 2004 |
Jan
(393) |
Feb
(184) |
Mar
(314) |
Apr
(225) |
May
(139) |
Jun
(77) |
Jul
(87) |
Aug
(75) |
Sep
(139) |
Oct
(50) |
Nov
(8) |
Dec
(28) |
| 2005 |
Jan
(66) |
Feb
(63) |
Mar
(14) |
Apr
(14) |
May
(8) |
Jun
(23) |
Jul
(21) |
Aug
(6) |
Sep
(29) |
Oct
(55) |
Nov
(38) |
Dec
(8) |
| 2006 |
Jan
(5) |
Feb
(10) |
Mar
(1) |
Apr
(15) |
May
(32) |
Jun
(44) |
Jul
(11) |
Aug
(8) |
Sep
(9) |
Oct
(14) |
Nov
(4) |
Dec
(3) |
| 2007 |
Jan
(3) |
Feb
(3) |
Mar
(2) |
Apr
|
May
|
Jun
|
Jul
(35) |
Aug
(49) |
Sep
(8) |
Oct
(42) |
Nov
(44) |
Dec
(7) |
| 2008 |
Jan
(2) |
Feb
(7) |
Mar
(8) |
Apr
(80) |
May
(74) |
Jun
(29) |
Jul
(5) |
Aug
(7) |
Sep
(6) |
Oct
(1) |
Nov
|
Dec
|
| 2009 |
Jan
(8) |
Feb
(19) |
Mar
(3) |
Apr
(24) |
May
(22) |
Jun
(23) |
Jul
(8) |
Aug
(23) |
Sep
(8) |
Oct
(27) |
Nov
(52) |
Dec
(27) |
| 2010 |
Jan
(36) |
Feb
(29) |
Mar
(17) |
Apr
(28) |
May
(21) |
Jun
(4) |
Jul
|
Aug
(28) |
Sep
(18) |
Oct
(6) |
Nov
(34) |
Dec
(16) |
| 2011 |
Jan
(18) |
Feb
(12) |
Mar
|
Apr
|
May
(9) |
Jun
(1) |
Jul
(5) |
Aug
(5) |
Sep
(7) |
Oct
(16) |
Nov
(26) |
Dec
(17) |
| 2012 |
Jan
(6) |
Feb
(34) |
Mar
(52) |
Apr
(10) |
May
(3) |
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
(4) |
Nov
(1) |
Dec
(4) |
| 2013 |
Jan
(5) |
Feb
|
Mar
|
Apr
(5) |
May
(4) |
Jun
|
Jul
|
Aug
(14) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2014 |
Jan
|
Feb
(2) |
Mar
(5) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(3) |
Dec
(11) |
| 2015 |
Jan
(5) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(1) |
Oct
(1) |
Nov
|
Dec
|
| 2016 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(2) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2017 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2018 |
Jan
(2) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Bruce S. <bw...@ar...> - 2004-03-20 23:46:49
|
> > I looked through the pending feature requests, found these: > > > > 2002-12-04 20:52 > > [ 648606 ] split /etc/sysconfig/config > > move the "START_FOO" stuff to another file > > we could use software.start as file name and then > > rename the software file to software.install > > > > Is this still an issue? > > I still like this, to get the stuff a little more organized. Personally I'd leave it. I'd rather search for something inside a big config file, instead of trying to find the file containing the info. And I don't think it's too cluttered yet, by any means. If someone does move it, the setup program AND the upgrade-to-a-new-release process will need to be changed. > > I'd suggest moving START_FOO and the variables DAEMON, PARAMETERS, ... from > > the /etc/init.d/ scripts into /etc/sysconfig/foo . Would make it look more > > tidy perhaps ;-) > > I wouldn't do this, I think we should leave it in the init scripts. Yeah, leave them. > > [ 564057 ] ifconfig -> ip > > switch from the ifconfig command in the network script > > to the ip command. > > > > All occasion of ifconfig in /etc/init.d/network can be easily changed to ip, > > except for the setting of the hardware mac address. ip can't do this, I am > > not even aware of any program except ifconfig that can do this... > > comments? > > I'm not sure if we really should do this changes (yeah I know I > suggested it... ;-) ). > Any opinions about it? I don't see a need for a change. - BS |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 22:21:17
|
Jaroslav Kysela wrote: > Hello all, > > I'm missing the variable HZ patch in current devil 2.4 kernel. > The attached set of patches adds these two options: > > CONFIG_HZ - HZ value for 2.4 kernels > CONFIG_PSCHED_CLOCK_SOURCE - clock source for packet schedulers > > The later option will allow to configure more better accuracy for the > packet schedulers (like HTB etc.) for 686 based machines (and maybe for > other machines using PSCHED_GETTIMEOFDAY option, but it might get some CPU > power, because gettimeofday() function is slow). This option is valid for > 2.6 kernels, too. > > Step-by-step applying of this change: > > 1) get vhz+jiffies64 patch from rml > > ftp://ftp.kernel.org/pub/linux/kernel/people/rml/variable-HZ/v2.4/vhz-j64-2.4.23.patch > > 2) add this patch to kernel-patches-2.4.tar.bz2: > > root:/build/src# tar tjf kernel-patches-2.4.tar.bz2 > kernel-patches-2.4/ > kernel-patches-2.4/cflags_extra.diff > kernel-patches-2.4/imq-2.4.22-through-to-2.4.25-pre6.diff > kernel-patches-2.4/linux-2.4.25-i2c-2.8.4.patch > kernel-patches-2.4/netfilter-imq-patch-2.4.21.diff > kernel-patches-2.4/vhz-j64-2.4.23.patch > > 3) copy grsecurity-kernel-vhz?.patch attachments to /build/src directory > 4) apply the devil-vhz.patch in /build directory with -p0 Where did you get the patches for grsecurity ? I'm concerned about the availability of updated patches once newer grsec updates are available. Heiko |
|
From: Diego T. <dt...@co...> - 2004-03-20 20:51:22
|
On Sat, Mar 20, 2004 at 02:10:03PM -0500, Heiko Zuerker wrote: > >that in english means "Permission denied" :) > > I hate when that happens. ;-) > > It's fixed. could you please upload : http://prdownloads.sourceforge.net/shfs/shfs-0.32.tar.gz?download it now has 2.6 support. i'll add the 2.4 scripts, and ask for help with the 2.6 version :) pd.- why we don't have cdrecord/mkisofs included on the iso? :) -- -- gnupg keyfingerprint -- 48AF 5BF9 8F54 2966 64CC 2327 7CD0 DD91 B09D 5799 -- Use of a keyboard or mouse may be linked to serious injuries or disorders. Diego Torres - dtorres at anthalia dot org - Madrid / España |
|
From: Jaroslav K. <pe...@pe...> - 2004-03-20 19:38:27
|
On Sat, 20 Mar 2004, Heiko Zuerker wrote: > Jaroslav Kysela wrote: > > Hi, > > > > as promised, it's first attempt to get the Frox FTP proxy into the > > Devil Linux distribution. > > > > Instructions: > > > > - unpack frox.tgz in $DL_DIR > > - put the latest frox release (0.7.13) to $DL_DIR/src > > http://frox.sourceforge.net/download/frox-0.7.13.tar.bz2 > > - select CONFIG_FROX and recompile distro > > DONE Thanks. Here is minor update: Index: frox =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/frox,v retrieving revision 1.1 diff -u -r1.1 frox --- frox 20 Mar 2004 16:18:00 -0000 1.1 +++ frox 20 Mar 2004 19:29:36 -0000 @@ -50,6 +50,7 @@ mkdir -p $WORKDIR/tmp/usr/share/man/man5 || exit 1 gzip -c -9 < doc/frox.conf.man > $WORKDIR/tmp/usr/share/man/man5/frox.5.gz || exit 1 #copy_docs $WORKDIR/tmp + copy_files $WORKDIR/tmp/etc $ETCDIR || exit 1 copy_files $WORKDIR/tmp/usr $CDDIR || exit 1 rm -rf $WORKDIR/tmp || exit 1 > > BTW: Is something wrong about my variable HZ patch? We get also as bonus > > the 64-bit jiffy counter which will allow us to run 2.4 kernel for more > > than 497 days (with HZ=100) without wrapping of this timer counter. I > > think that now is time to test it (after 1.0.5 release). > > I'll start a new threat about his later, when I got some more time. Fine. Jaroslav ----- Jaroslav Kysela <pe...@pe...> |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 19:11:40
|
Diego Torres wrote: > On Sat, Mar 20, 2004 at 09:45:55AM -0800, SourceForge.net wrote: > > >>Summary: update 2.6 loop driver >> >>Initial Comment: >>add to loop-aes to replace the existing 2.6 kernel >>driver, since this one is always newer. >> > > > mirror: Falló el acceso: 550 loop-AES-v2.0g.tar.bz2: Permission denied > > that in english means "Permission denied" :) I hate when that happens. ;-) It's fixed. Heiko |
|
From: Diego T. <dt...@co...> - 2004-03-20 18:53:27
|
On Sat, Mar 20, 2004 at 09:45:55AM -0800, SourceForge.net wrote: > Summary: update 2.6 loop driver > > Initial Comment: > add to loop-aes to replace the existing 2.6 kernel > driver, since this one is always newer. > mirror: Falló el acceso: 550 loop-AES-v2.0g.tar.bz2: Permission denied that in english means "Permission denied" :) -- gnupg keyfingerprint -- 48AF 5BF9 8F54 2966 64CC 2327 7CD0 DD91 B09D 5799 -- Use of a keyboard or mouse may be linked to serious injuries or disorders. Diego Torres - dtorres at anthalia dot org - Madrid / España |
|
From: SourceForge.net <no...@so...> - 2004-03-20 17:45:57
|
Bugs item #920135, was opened at 2004-03-20 12:45 Message generated for change (Tracker Item Submitted) made by Item Submitter You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=410643&aid=920135&group_id=34096 Category: Base System Group: None Status: Open Resolution: None Priority: 5 Submitted By: Heiko Zuerker (smiley73) Assigned to: Nobody/Anonymous (nobody) Summary: update 2.6 loop driver Initial Comment: add to loop-aes to replace the existing 2.6 kernel driver, since this one is always newer. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=410643&aid=920135&group_id=34096 |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 17:26:30
|
Philippe Midol-Monnet wrote: > Hi > > It look like my firts mail never reach the list.. > > I use DL with with an usb adsl modem based on eagle chipset (Sagem 800). > This modem need a specific driver and configuration tools. You can find > more information here (mostly in french): > http://eagle-usb.ath.cx/pub/ > > I have build my own DL version based on the last 1.0 stable. To do this > I wrote the build script and create the files needed for the config script. > > When the modem is configured a new network interface is create. To have > a better integration in the DL system I created a start/stop script to > be run during the boot before the network initialisation. > > You can download the source here: > http://tbasic.free.fr/eagle/eagle-usb-1.9.5.tar.bz2 > > The attached tarball contain the scripts for DL > DONE, but it's in 1.1.x, not 1.0.x. Can you please contact the author of this software and tell him to add and entry to freshmeat.net ? This is the best way to announce and track software updates. You forgott to add the eagle-usb.help file, I took care of this. There are 2 huge files in /etc/eagle-usb/dsp_code*.bin , can we move them to /usr/share/eagle-usb and just symlink them ? Heiko |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 17:05:28
|
Roland Pabel wrote: > Hi, > I looked through the pending feature requests, found these: > > 2002-12-04 20:52 > [ 648606 ] split /etc/sysconfig/config > move the "START_FOO" stuff to another file > we could use software.start as file name and then > rename the software file to software.install > > Is this still an issue? I still like this, to get the stuff a little more organized. > I'd suggest moving START_FOO and the variables DAEMON, PARAMETERS, ... from > the /etc/init.d/ scripts into /etc/sysconfig/foo . Would make it look more > tidy perhaps ;-) I wouldn't do this, I think we should leave it in the init scripts. > [ 564057 ] ifconfig -> ip > switch from the ifconfig command in the network script > to the ip command. > > All occasion of ifconfig in /etc/init.d/network can be easily changed to ip, > except for the setting of the hardware mac address. ip can't do this, I am > not even aware of any program except ifconfig that can do this... > comments? I'm not sure if we really should do this changes (yeah I know I suggested it... ;-) ). Any opinions about it? Heiko |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 16:36:26
|
Jaroslav Kysela wrote: > Hi, > > as promised, it's first attempt to get the Frox FTP proxy into the > Devil Linux distribution. > > Instructions: > > - unpack frox.tgz in $DL_DIR > - put the latest frox release (0.7.13) to $DL_DIR/src > http://frox.sourceforge.net/download/frox-0.7.13.tar.bz2 > - select CONFIG_FROX and recompile distro DONE > > Jaroslav > > BTW: Is something wrong about my variable HZ patch? We get also as bonus > the 64-bit jiffy counter which will allow us to run 2.4 kernel for more > than 497 days (with HZ=100) without wrapping of this timer counter. I > think that now is time to test it (after 1.0.5 release). I'll start a new threat about his later, when I got some more time. Heiko |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 16:36:24
|
Jaroslav Kysela wrote: > Hi, > > the attached tarbal adds SIP Express Router to the Devil Linux > distribution. > > Instructions: > > - unpack ser.tgz in $DL_DIR > - put the latest ser release 0.8.12 to $DL_DIR/src > ftp://ftp.berlios.de/pub/ser/0.8.12/src/ser-0.8.12_src.tar.gz > - select CONFIG_SER and recompile distro DONE Heiko |
|
From: Heiko Z. <he...@zu...> - 2004-03-20 15:46:19
|
Oliver Jehle wrote: > src replace openssl 0.9.7c with openssl 0.9.7d > > build works... DONE Heiko |
|
From: Roland P. <pa...@ta...> - 2004-03-19 15:27:51
|
Hi, I looked through the pending feature requests, found these: 2002-12-04 20:52 [ 648606 ] split /etc/sysconfig/config move the "START_FOO" stuff to another file we could use software.start as file name and then rename the software file to software.install Is this still an issue? I'd suggest moving START_FOO and the variables DAEMON, PARAMETERS, ... from the /etc/init.d/ scripts into /etc/sysconfig/foo . Would make it look more tidy perhaps ;-) [ 564057 ] ifconfig -> ip switch from the ifconfig command in the network script to the ip command. All occasion of ifconfig in /etc/init.d/network can be easily changed to ip, except for the setting of the hardware mac address. ip can't do this, I am not even aware of any program except ifconfig that can do this... comments? Roland -- ICQ UIN 49339118 Linux Counter #88774 GPG-Key 1024D/59C6AFA6 2003-02-07 Roland Pabel <ro...@pa...> |
|
From: Friedrich L. <fl...@fl...> - 2004-03-19 14:23:46
|
hzu...@ra... wrote on 19.03.2004 15:15 MET: > On 03/18/2004 02:27:24 PM "Heiko Zuerker" wrote: > >>>On Fri, 2004-03-12 at 12:57, Roland Pabel wrote: >>> >>>>On Friday 12 March 2004 11:04, Oliver Jehle wrote: >>>> >>>>>missed to set LVM="2" in case of lvm2 >>>> >>>>-# Default-Start: B >>>>+# Default-Start: S >>>>You just changed it back to Runlevel S, a mistake? >>>>Roland >>> >>>i've make another mistake (used vgchange instead of vgscan..)... >>>now its working... hopefully for others too... >> >>The mounting of the LVM1 stuff doesn't work anymore. >>Unfortunately I had no time checking into the problem. > > > It's not the new mountfs script, it seems to be the new boot system. > Since I'm doing an upgrade from another 1.1.x release, I guess something > goes wrong. > > One thing we probably should add to upgrade-config is to run insserv to > make sure the scripts are ordered correctly. But take care to run insserv only for those scripts that where active before. Don't run it for every available script. -- MfG / Regards Friedrich Lobenstock ____________________________________________________________________ Friedrich Lobenstock Linux Services Lobenstock URL: http://www.lsl.at/ Email: fl...@fl... ____________________________________________________________________ |
|
From: <hzu...@ra...> - 2004-03-19 14:15:39
|
On 03/18/2004 02:27:24 PM "Heiko Zuerker" wrote: >> On Fri, 2004-03-12 at 12:57, Roland Pabel wrote: >>> On Friday 12 March 2004 11:04, Oliver Jehle wrote: >>> > missed to set LVM="2" in case of lvm2 >>> -# Default-Start: B >>> +# Default-Start: S >>> You just changed it back to Runlevel S, a mistake? >>> Roland >> >> i've make another mistake (used vgchange instead of vgscan..)... >> now its working... hopefully for others too... > >The mounting of the LVM1 stuff doesn't work anymore. >Unfortunately I had no time checking into the problem. It's not the new mountfs script, it seems to be the new boot system. Since I'm doing an upgrade from another 1.1.x release, I guess something goes wrong. One thing we probably should add to upgrade-config is to run insserv to make sure the scripts are ordered correctly. Heiko |
|
From: Oliver J. <oli...@mo...> - 2004-03-19 09:24:41
|
src replace openssl 0.9.7c with openssl 0.9.7d build works... thx oliver |
|
From: Heiko Z. <he...@zu...> - 2004-03-18 19:31:17
|
> On Fri, 2004-03-12 at 12:57, Roland Pabel wrote: >> On Friday 12 March 2004 11:04, Oliver Jehle wrote: >> > missed to set LVM="2" in case of lvm2 >> -# Default-Start: B >> +# Default-Start: S >> You just changed it back to Runlevel S, a mistake? >> Roland > > i've make another mistake (used vgchange instead of vgscan..)... > now its working... hopefully for others too... The mounting of the LVM1 stuff doesn't work anymore. Unfortunately I had no time checking into the problem. -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Philippe Midol-M. <phi...@mi...> - 2004-03-17 20:01:55
|
Hi It look like my firts mail never reach the list.. I use DL with with an usb adsl modem based on eagle chipset (Sagem 800). This modem need a specific driver and configuration tools. You can find more information here (mostly in french): http://eagle-usb.ath.cx/pub/ I have build my own DL version based on the last 1.0 stable. To do this I wrote the build script and create the files needed for the config script. When the modem is configured a new network interface is create. To have a better integration in the DL system I created a start/stop script to be run during the boot before the network initialisation. You can download the source here: http://tbasic.free.fr/eagle/eagle-usb-1.9.5.tar.bz2 The attached tarball contain the scripts for DL -- Philippe Midol-Monnet |
|
From: <hzu...@ra...> - 2004-03-17 14:16:19
|
On 03/16/2004 05:57:59 PM Diego Torres wrote: >On Tue, Mar 16, 2004 at 02:54:28PM -0500, Bruce Smith wrote: >> > >> > I know. But you would not enable it from any IP, would you? >> >> But IP spoofing is easy, and it's not like there is a conversation >going >> on. All someone has to do is spoof the source IP and send a packet. > >i dare you to do any ip spoofing nowadays :) > >you isp has filters that prevents you from doing that... for sure! > >> > Maybe those numbers can be supplied on some other way in the future. >> > May let's mail the author. What do you think? >> >> Yes, it would be nice if the numbers could be supplied as an option >when >> loading the module, and as an option in the client program (along with >> the port number). As it is now, I wouldn't include it in DL. > >if the author has made the port number configurable, i don't think that >he/she has/wants to put more effort on it... Actually we're in contact with the author and he's very interested getting the issues resolved. Heiko |
|
From: Diego T. <dt...@co...> - 2004-03-16 22:58:40
|
On Tue, Mar 16, 2004 at 02:54:28PM -0500, Bruce Smith wrote: > > > > I know. But you would not enable it from any IP, would you? > > But IP spoofing is easy, and it's not like there is a conversation going > on. All someone has to do is spoof the source IP and send a packet. i dare you to do any ip spoofing nowadays :) you isp has filters that prevents you from doing that... for sure! > > Maybe those numbers can be supplied on some other way in the future. > > May let's mail the author. What do you think? > > Yes, it would be nice if the numbers could be supplied as an option when > loading the module, and as an option in the client program (along with > the port number). As it is now, I wouldn't include it in DL. if the author has made the port number configurable, i don't think that he/she has/wants to put more effort on it... -- -- gnupg keyfingerprint -- 48AF 5BF9 8F54 2966 64CC 2327 7CD0 DD91 B09D 5799 -- Use of a keyboard or mouse may be linked to serious injuries or disorders. Diego Torres - dtorres at anthalia dot org - Madrid / España |
|
From: <hzu...@ra...> - 2004-03-16 20:50:23
|
On 03/16/2004 02:43:30 PM Friedrich Lobenstock wrote: >Bruce Smith wrote on 16.03.2004 20:08 MET: >>>>>>I'm sure they come up with some better authentication in the >future. >>>>> >>>>>Or even better authorization. :-) >>>> >>>>Minor details..... ;-) >>> >>>Either one would be an improvement! :-) >> >> >> WAIT A MINUTE! (imagine light bulb going on over my head :) >> >> You supply two prime numbers (manually) while running "make". >> This would be in the DL build process? This means the encryption is >> static and can only be changed by recompiling DL? This means the key >> is burned on the CD and is the same for everyone with a stock distro? >> SECURITY HOLE!!! I changed my mind about including this! Or at least >> turn it off by default for all distro's available for download. YUCK! > >I know. But you would not enable it from any IP, would you? Maybe those >numbers can be supplied on some other way in the future. May let's mail >the >author. What do you think? Good idea. Don't forgett he's in an early stage of the development and probably didn't consider distro's like DL. Heiko |
|
From: Bruce S. <bw...@ar...> - 2004-03-16 19:54:32
|
> > You supply two prime numbers (manually) while running "make". > > This would be in the DL build process? This means the encryption is > > static and can only be changed by recompiling DL? This means the key > > is burned on the CD and is the same for everyone with a stock distro? > > SECURITY HOLE!!! I changed my mind about including this! Or at least > > turn it off by default for all distro's available for download. YUCK! > > I know. But you would not enable it from any IP, would you? But IP spoofing is easy, and it's not like there is a conversation going on. All someone has to do is spoof the source IP and send a packet. > Maybe those numbers can be supplied on some other way in the future. > May let's mail the author. What do you think? Yes, it would be nice if the numbers could be supplied as an option when loading the module, and as an option in the client program (along with the port number). As it is now, I wouldn't include it in DL. - BS |
|
From: Friedrich L. <fl...@fl...> - 2004-03-16 19:43:53
|
Bruce Smith wrote on 16.03.2004 20:08 MET: >>>>>I'm sure they come up with some better authentication in the future. >>>> >>>>Or even better authorization. :-) >>> >>>Minor details..... ;-) >> >>Either one would be an improvement! :-) > > > WAIT A MINUTE! (imagine light bulb going on over my head :) > > You supply two prime numbers (manually) while running "make". > This would be in the DL build process? This means the encryption is > static and can only be changed by recompiling DL? This means the key > is burned on the CD and is the same for everyone with a stock distro? > SECURITY HOLE!!! I changed my mind about including this! Or at least > turn it off by default for all distro's available for download. YUCK! I know. But you would not enable it from any IP, would you? Maybe those numbers can be supplied on some other way in the future. May let's mail the author. What do you think? -- MfG / Regards Friedrich Lobenstock ____________________________________________________________________ Friedrich Lobenstock Linux Services Lobenstock URL: http://www.lsl.at/ Email: fl...@fl... ____________________________________________________________________ |
|
From: Bruce S. <bw...@ar...> - 2004-03-16 19:08:52
|
> > >> I'm sure they come up with some better authentication in the future. > > > > > >Or even better authorization. :-) > > > > Minor details..... ;-) > > Either one would be an improvement! :-) WAIT A MINUTE! (imagine light bulb going on over my head :) You supply two prime numbers (manually) while running "make". This would be in the DL build process? This means the encryption is static and can only be changed by recompiling DL? This means the key is burned on the CD and is the same for everyone with a stock distro? SECURITY HOLE!!! I changed my mind about including this! Or at least turn it off by default for all distro's available for download. YUCK! - BS |
|
From: Bruce S. <bw...@ar...> - 2004-03-16 19:01:04
|
> >> >About: > >> >IP Tables network magic SysRq is a Linux iptables target that allows > >to > >> >do the same as the magic SysRq key on a keyboard does, but over the > >> >network. It includes syncing disks, remounting them read-only, > >rebooting > >> >the machine, etc. > >> > > >> >Release focus: Initial freshmeat announcement > >> > >> I'd say include it, it sound very interesting. > > > >This is only useful if (according to the docs): "Sometimes a remote > >server hangs and only responds to icmp echo request (ping)." > > > >Yeah, I've seen that happen, but in my experience, it's very rare. > >How useful is this really going to be? (just wondering :) > > For example when your box is hundrets of miles away, or your just to lazy > to get up. OK, you sold me, I'm lazy! :-) > >> I'm sure they come up with some better authentication in the future. > > > >Or even better authorization. :-) > > Minor details..... ;-) Either one would be an improvement! :-) This also caught my eye in the documentation: "Note that UDP port 9 is determined by a send_sysrq program and you can change it by editing the send_sysrq.c file." What, the guy can't make it a command line parameter or have it read a config file? Sheesh!!! - BS |
35 messages has been excluded from this view by a project administrator.
