gmane.linux.openwall.user

community wiki

Solar Designer — 2008-05-14T00:04:24

Hi, We've just setup the Openwall Community Wiki at: http://openwall.info/wiki/ and there's a DokuWiki "namespace" for Owl user community resources: http://openwall.info/wiki/Owl It may contain pages on and links to things such as tutorials for new users, advanced usage examples, and more. I have provided broken links for some pages to be created. If you have something relevant to share, please register for an account and edit away! Thanks, Alexander

An interesting link and possibly a candidate package for Owl

(GalaxyMaster — 2008-04-26T19:36:28

Hello, The following technology looks promising and we might want to consider it for an inclusion into Owl. Is anybody interested in such a package? Ksplice - allows applying patches to the running kernel. More info at: http://web.mit.edu/ksplice/

Re: Owl and 2.6 kernel

Solar Designer — 2008-04-26T14:01:46

We wanted to do it before the next release, but right now it seems more likely that the next release will be the last one to use a 2.4 kernel - that is, that we'd switch to 2.6 after the next release. We are also very likely to integrate OpenVZ. Yes, if your hardware is unsupported by 2.4 kernels, you'll have to use a 2.6 kernel without our patches. We're often using the OpenVZ kernels from OpenVZ's "RHEL5" branch. They work fine with the Owl userland, which we use both on the host system and inside containers (also known as VEs or VPSes). The short answer is: none. In fact, it is more correct to have your packages built against the same kernel headers that glibc was built against. So if you don't rebuild glibc (and there should be no need to do that), it is more correct to not rebuild any other packages against 2.6 kernel headers as well.

Re: Owl and 2.6 kernel

2008-04-25T07:10:48

> I had to exchange several machines with newer hardware and > now I have to use a newer kernel (2.6.25) because of the > unsupported ICH9 chipset in 2.4.35. > Are there any roadmaps/timetables to switch Owl to an 2.6 > Kernel, or do I have to use an unpatched kernel for my new > hardware? Try building 2.6.24.5 with grsecurity.org's patches (most of them are not really needed, but some are really good). > Which packages are kernel-dependent and should be rebuild > under the new kernel? None I'm aware of. > Any experiences? I use Owl with 2.6 kernels for over 3 years and have no problem with that.

Autoreply: [owl-users] Owl and 2.6 kernel

2008-04-25T06:03:27

Owl and 2.6 kernel

Bernhard Fischer — 2008-04-25T06:02:45

Hi together, I had to exchange several machines with newer hardware and now I have to use a newer kernel (2.6.25) because of the unsupported ICH9 chipset in 2.4.35. Are there any roadmaps/timetables to switch Owl to an 2.6 Kernel, or do I have to use an unpatched kernel for my new hardware? Which packages are kernel-dependent and should be rebuild under the new kernel? Any experiences? Greetings Bernhard

Re: named SysV order seems to be wrong

Andrey V Stolyarov — 2008-03-26T13:01:58

Hi all, On Wed, 26 Mar 2008, Dmitry V. Levin wrote: [...] I'd say that even in case syslog.conf does use remote host names, such names should (hmm, may I say "must"?) be explicitly mentioned in /etc/hosts. Named is good and more or less stable, but it crashes from time to time, there can be various human mistakes that lead to unavailability of some DNS zones, etc. Logging is the thing which should never be dependent on these. IMHO. -- Croco

Re: named SysV order seems to be wrong

Dmitry V. Levin — 2008-03-26T12:37:40

Hi, On Wed, Mar 26, 2008 at 08:08:18AM +0300, (GalaxyMaster) wrote: Unless syslog.conf uses remote host names, yes, the "syslog" service could be started prior to the "bind" service.

named SysV order seems to be wrong

(GalaxyMaster — 2008-03-26T05:08:18

Hello, I'd like to point out that it doesn't look right: peach!root:~# ls -ld /etc/rc.d/rc3.d/S*{syslog,named} lrwxrwxrwx 1 root root 15 Feb 25 2006 /etc/rc.d/rc3.d/S20named -> ../init.d/named lrwxrwxrwx 1 root root 16 Oct 25 2005 /etc/rc.d/rc3.d/S30syslog -> ../init.d/syslog peach!root:~# I think that the syslog service should be started prior any other service which wants to use syslog. Is this a bug or am I missing something? P.S. I haven't checked the current branch but I believe that the order is the same as in Owl 2.0-stable which I'm actively using lately (as you might already noticed :) )

Re: no 2.0-stable ISO?

Solar Designer — 2008-03-21T01:02:19

... Yes - but perhaps this is to be fixed for 2.1-stable (once we have it), not for 2.0-stable. That's because we only have the "make iso.gz" functionality in -current (which the next release will be based on), not in 2.0-stable, and we're being very conservative at getting changes into 2.0-stable. I don't think we should change that approach now; I think that it is more productive for us to concentrate on getting a new release out sooner rather than later. Right now, our users who want 2.0-stable should install 2.0-release, then upgrade to 2.0-stable. Indeed, this is not perfect - more work to do and potential extra hardware support issues with the older kernel in 2.0-release. Thanks,

no 2.0-stable ISO?

(GalaxyMaster — 2008-03-20T23:17:43

Hi, Today I was asked for a recommendation what other person should install on their office router. No doubt I suggested Owl, but when I was asked for an ISO image URL I figured out that I can provide them with the Owl-current ISO only since Owl-2.0-release is too old and Owl-2.0-stable has no ISO image at all: lftp ftp.ru.openwall.com:/pub/Owl> ls -l 2.0-release | fgrep iso drwxr-xr-x 2 ftp ftp 4096 Feb 15 2006 iso lftp ftp.ru.openwall.com:/pub/Owl> ls -l 2.0-stable | fgrep iso lftp ftp.ru.openwall.com:/pub/Owl> ls -l current | fgrep iso drwxr-xr-x 2 ftp ftp 4096 Jun 01 2007 iso lftp ftp.ru.openwall.com:/pub/Owl> Perhaps this is something to fix?

Re: bug: sed segfaults

Solar Designer — 2008-03-17T00:42:17

... This has now been done, and the update will be propagating to our mirrors. Dmitry - thank you for being so quick! Alexander

Re: bug: sed segfaults

Solar Designer — 2008-03-16T23:39:07

Galaxy - thank you for revitalizing this mailing list. It does feel wrong when all discussions occur on our private development list, with this public one staying silent. Having some discussions in public may encourage our actual users (who, unlike you, don't happen to be Owl developers at the same time) to point out any issues and ask any questions in public as well, rather than continue to approach us via private e-mail... Dmitry - On Sun, Mar 16, 2008 at 04:10:08PM +0300, Dmitry V. Levin wrote: Same here - segfault on Owl 2.0-stable, nothing on -current. Given that -current has been at 4.1.5-owl1 since Feb 20 2006, it should be safe to sync the package in 2.0-stable to that version as well. I'd appreciate it if you do that. Thanks,

Re: bug: sed segfaults

Dmitry V. Levin — 2008-03-16T13:10:08

Hi, On Sun, Mar 16, 2008 at 03:24:58PM +0300, (GalaxyMaster) wrote: Unable to reproduce with sed from -current: $ rpmquery sed sed-4.1.5-owl1

bug: sed segfaults

(GalaxyMaster — 2008-03-16T12:24:58

Hello, I've just encountered a bug in Owl sed and narrowed this bug down to the shortest pattern that is triggering the bug: mother!galaxy:~$ sed '/^$/d' /dev/null Segmentation fault mother!galaxy:~$ sed --version | head -n1 GNU sed version 4.1.4 mother!galaxy:~$ rpm -q sed sed-4.1.4-owl1 mother!galaxy:~$ I've also checked sed in Ubuntu, their sed has no such bug: galaxy< at >intruder:~$ sed '/^$/d' /dev/null galaxy< at >intruder:~$ sed --version | head -n1 GNU sed version 4.1.5 galaxy< at >intruder:~$ dpkg -l sed | sed -n 6p ii sed 4.1.5-2 The GNU sed stream editor galaxy< at >intruder:~$

Re: x86-64 ISO image

(GalaxyMaster — 2007-11-13T22:14:27

[moved to owl-users] On Tue, Nov 13, 2007 at 09:22:46PM +0300, gremlin< at >gremlin.ru wrote: I did, however, it was done on my home machine. Will try to upload the image to ftp.ru.openwall.com once I get home. How urgent is this?

Re: OWL on Routerboard and cross building?

(GalaxyMaster — 2007-09-02T20:34:49

Michael, On Thu, Aug 30, 2007 at 03:49:32PM +0300, Michael Dexter wrote: I did some cross-building of Owl to Edimax BR6104K and to Linksys WRT54. Could you please be more specific what is(are) the issue(s) you are experiencing? For the technical standpoint the process of porting Owl to another platform is the same as for any other Linux distro.

OWL on Routerboard and cross building?

Michael Dexter — 2007-08-30T12:49:32

Hello, Is anyone using OWL on the MikroTik Routerboards? Is anyone cross-building OWL on non-Linux platforms? Thanks! Michael.

address inversion of conntrack match

Stanislav — 2007-08-20T09:59:06

JFYI: OWL uses iptables 1.2.11 and i came into that place where my iptables rules shows an inversion bug in iptables-save, libipt_conntrack. The fix of the address inversion of conntrack matchcomes from Tom Eastep. And was merged into iptables 1.3.4. --- iptables-1.3.3/extensions/libipt_conntrack.c~2005-02-19 11:19:17.000000000 -0800 +++ iptables-1.3.3/extensions/libipt_conntrack.c2005-09-14 14:58:12.000000000 -0700 < at >< at > -414,8 +414,8 < at >< at > { char buf[BUFSIZ]; - if (inv) - fputc('!', stdout); + if (inv) + printf("! "); if (mask->s_addr == 0L && !numeric) printf("%s ", "anywhere"); Regards Stanislav

Re: Installing without a boot device?

Jean-Luc Delatre — 2007-08-19T20:27:52

Le Fri, 17 Aug 2007 15:49:17 +0200, Jean-Luc Delatre (Kevembuangga) club-internet.fr> a écrit : Responding to my own question, in case anyone else has this silly problem: # don't even need to burn a CD mount -t iso9660 -o ro,loop /opt/owl/Owl-current-20070601-i386.iso /mnt # locate the proper inittab find /mnt -type f -name inittab /mnt/rom/etc/inittab /mnt/rom/world/native/Owl/packages/owl-startup/inittab # find out about the bootscript grep ":sysinit:" /mnt/rom/etc/inittab |cut -f 4 -d ':' /etc/rc.d/rc.sysinit # run the bootscript chroot /mnt /etc/rc.d/rc.sysinit # check what the root shell is grep "^root:" /mnt/rom/etc/passwd |cut -f 7 -d ':' /bin/bash # enter the Owl universe exec chroot /mnt /bin/bash # install settle Of course the partition has to exist before and be unmounted, 'settle' also complain about the already mounted partitions and cannot put them into the tree. Just a matter of redoing the fstab afterward. Another minor annoyance upon the install reboot the mounted partitions in the host OS are hung and need a fsck. It took a few tries to find the proper sequence and this wasn't *really* for a secure install but for evaluation of Owl ;-) JLD

Re: Installing without a boot device?

Jean-Luc Delatre — 2007-08-17T13:49:17

On Fri, 17 Aug 2007 17:35:17 +0400 gremlin< at >gremlin.ru wrote: That's not the kind of hack I have in mind, I rather plan to mount the CD image on a loop device, find out the install scripts and hack them to run the install from the mounted image into a free partition. I could, but I had nasty surprises doing that with a Knoppix DVD. It took quite a bit of work to fix the misconfigured devices and modules from the installation machine when the disk was moved to the running machine. JLD