Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Ville Valkonen
On 7 November 2013 04:24, Philip Guenther wrote: > On Wed, 6 Nov 2013, Torbjorn Granlund wrote: > ... >> The change makes be quite worried, since it *seems* to be done without >> proper understanding of the issues involved. > > Appearances can be deceiving. > > >> Furthermore, the ABI change has n

Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Philip Guenther
On Wed, 6 Nov 2013, Torbjorn Granlund wrote: ... > The change makes be quite worried, since it *seems* to be done without > proper understanding of the issues involved. Appearances can be deceiving. > Furthermore, the ABI change has not been properly announced, I guess the release announcement

bgpd: fib-priority

2013-11-06 Thread Florian Obser
First stab, only lightly tested, reload is *not* working. I need to think a bit more how to handle reloads exactly. Note that if you try to shoot yourself in the foot by specifing another already used priority (e.g. 32), it will not only take of your foot but take the thigh right with it... (at le

Re: Weard security report

2013-11-06 Thread Rajneesh N. Shetty
http://sans.org/ English Version (PDF) http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201311_en.pdf English Version (.epub -- tablets only) http://www.securingthehuman.org/newsletters/ouch/issues/OUCH-201311_eneb.epub Translations & Archives http://www.securingthehuman.org/ouch I

document 'machine boot' on i386/amd64

2013-11-06 Thread Brynet
It seems boot(8) on i386/amd64 has an undocumented feature that is occasionally handy. This adds a small blurb to the man pages for both so that people can find it. -Bryan. Index: i386/stand/boot/boot.8 === RCS file: /cvs/src/sys/arc

Re: Weard security report

2013-11-06 Thread sven falempin
On Wed, Nov 6, 2013 at 11:43 AM, Alexander Hall wrote: > > > Joerg Sonnenberger wrote: > >On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: > >> == > >> /var/db/cloud.json diffs (-OLD +NEW) > >> == > >> --- /dev/null Fri Oct 25 01:30:33 2013 > >> +++ /var/db/cloud.json

Re: Weard security report

2013-11-06 Thread Alexander Hall
Joerg Sonnenberger wrote: >On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: >> == >> /var/db/cloud.json diffs (-OLD +NEW) >> == >> --- /dev/null Fri Oct 25 01:30:33 2013 >> +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 > >This just means that the file was created

Re: Weard security report

2013-11-06 Thread sven falempin
On Wed, Nov 6, 2013 at 10:50 AM, Joerg Sonnenberger wrote: > On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: > > == > > /var/db/cloud.json diffs (-OLD +NEW) > > == > > --- /dev/null Fri Oct 25 01:30:33 2013 > > +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 > > Thi

Re: Weard security report

2013-11-06 Thread Joerg Sonnenberger
On Wed, Nov 06, 2013 at 10:24:53AM -0500, sven falempin wrote: > == > /var/db/cloud.json diffs (-OLD +NEW) > == > --- /dev/null Fri Oct 25 01:30:33 2013 > +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 This just means that the file was created as opposed to empty. Joerg

Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Torbjorn Granlund
ni...@lysator.liu.se (Niels Möller) writes: I don't understand the fine details of which reloc types make sense in pic code, but if I understand Philip correctly, the main problem is not a ABI change, but changed compiler default. And then you get link errors when linking together pic obje

Re: Weard security report

2013-11-06 Thread Kirill Bychkov
On Wed, November 6, 2013 19:24, sven falempin wrote: > Hello, > Hi > I love daily scripts and used it to follow some > activity on server(s) > > One of my server got this entry: > > Running security(8): > > == > /var/db/cloud.json diffs (-OLD +NEW) > == > --- /dev/null Fri Oct 25 01:30:

Re: Amd64 relocation R_X86_64_32S in a static lib

2013-11-06 Thread Torbjorn Granlund
Philip Guenther writes: Ah, but you are, sorta. In OpenBSD 5.3, platforms where the compiler and toolchain support were for robust for it were switched to build PIE objects and executables by default. So yes, that object _is_ expected to be position independent. c.f. the gcc-local(1

Weard security report

2013-11-06 Thread sven falempin
Hello, I love daily scripts and used it to follow some activity on server(s) One of my server got this entry: Running security(8): == /var/db/cloud.json diffs (-OLD +NEW) == --- /dev/null Fri Oct 25 01:30:33 2013 +++ /var/db/cloud.json Thu Oct 17 17:21:15 2013 [...] Previous s

use arc4random() in sppp(4) IPv6CP

2013-11-06 Thread Stefan Sperling
The IPv6CP code generates interface IDs based on getmicrouptime(), in the sppp_suggest_ip6_addr() function. Interface IDs provide parts of the link-local addresses used for the endpoints of the point-to-point link. RFC 5072 says the ifid may be generated from a good random source if available. We