Subject: Linux-Development Digest #756
From: Digestifier <Linux-Development-Request@senator-bedfellow.MIT.EDU>
To: Linux-Development@senator-bedfellow.MIT.EDU
Reply-To: Linux-Development@senator-bedfellow.MIT.EDU
Date:     Wed, 25 May 94 07:13:07 EDT

Linux-Development Digest #756, Volume #1         Wed, 25 May 94 07:13:07 EDT

Contents:
  Another Huge Security Hole! (Uri Blumenthal)
  Re: ETHERFIND anywhere? (John Paul Morrison)
  Re: Another Huge Security Hole! (Erik Olson)
  [BUG?] IP forewarding in v1.1.13 and v1.1.14 does not work for ppp and eth (Remco Treffkorn)
  iBCS-2 support (Scott Michel)
  Problems with MKE2FS (Blake McBride)
  Re: Why is Linux monolithic? (Elizabeth Atkins)
  Re: Gnu ASM docs wanted (Michael Will)
  1.1.14: when posting in nn using vi trouble occurs... (Michael Will)
  Re: setlocale() bug or feature? (Steve M. Robbins)
  Can I get a core dump of a process I need to kill? (Karl Renaut)
  Re: O_SYNC support (Matthias Urlichs)
  Re: strftime() bug (Matthias Urlichs)
  Re: Linux and Bernoulli? (Bob Perkins)
  Re: Anyone know where to get ADA for linux? (Elaine Walton)
  Motif for Linux - FREE ? (Kevin L. McWhirter)
  Re: Another Huge Security Hole!dir (lcvanveen@et.tudelft.nl)
  Re: enhanced IDE and SCSI-2 supported? (lcvanveen@et.tudelft.nl)
  Re: 32-bit Novell desktop OS combines Unix, DOS 7 (chris ulrich)
  Re: Another Huge Security Hole! (Rob Janssen)
  Re: SIGHUP: We tried it! (Ken Pizzini)
  DOSEmu mail-list dismiss ? (Franck Coquillard)

----------------------------------------------------------------------------

From: uri@watson.ibm.com (Uri Blumenthal)
Crossposted-To: comp.os.linux.admin
Subject: Another Huge Security Hole!
Date: 24 May 1994 20:08:28 GMT
Reply-To: uri@watson.ibm.com

Hi,
        It's Linux-1.1.14. The problem is: when you
        log in as <whoever>, it still gives you UID
        [you guessed it :-] 0.  I.e. to become root
        on Linux-1.1.14,  you just have to login to
        the box...

        Linux-1.1.13 doesn't exhibit such bad behavior.

        No fix yet, as I didn't figure out the cause.
        One thing seems certain - it has nothing to 
        to with getty/login/whatever program...The
        new (1.1.14) kernel has your UID==0 always,
        1.1.13 seems to be correct.

        Regards,
        Uri.
============
<Disclaimer>

------------------------------

From: jmorriso@bogomips.ee.ubc.ca (John Paul Morrison)
Subject: Re: ETHERFIND anywhere?
Date: Tue, 24 May 1994 18:42:01 GMT

In article <2rs7bs$bo7@news.cs.tu-berlin.de>,
Tilo Schuerer <tilo@cs.tu-berlin.de> wrote:
>
>Hy,
>
>I'm looking for ETHERFIND in order to have a look at the
>packets running over ethernet. Is there a port anywhere?

use tcpdump instead (look for source and binaries on sunsite)


-- 
===========================================================================
BogoMIPS Research Labs  --  bogosity research & simulation  --  VE7JPM  --      
jmorriso@bogomips.ee.ubc.ca ve7jpm@ve7jpm.ampr.org jmorriso@rflab.ee.ubc.ca
===========================================================================

------------------------------

From: erik@hilo.phys.washington.edu (Erik Olson)
Crossposted-To: comp.os.linux.admin
Subject: Re: Another Huge Security Hole!
Date: 25 May 1994 02:12:37 GMT

uri@watson.ibm.com (Uri Blumenthal) writes:

>Hi,
>       It's Linux-1.1.14. The problem is: when you
>       log in as <whoever>, it still gives you UID
>       [you guessed it :-] 0.  I.e. to become root
>       on Linux-1.1.14,  you just have to login to
>       the box...

This would appear to be an effect of not doing a "make mrproper" after
upgrading from 1.1.13 to 1.1.14.

   - Erik
--
---
Erik D. Olson                                olson@phys.washington.edu
Fish guy                                erik@marge.phys.washington.edu

------------------------------

From: remco@emc.rvt.com (Remco Treffkorn)
Subject: [BUG?] IP forewarding in v1.1.13 and v1.1.14 does not work for ppp and eth
Date: Wed, 25 May 1994 02:07:15 GMT
Reply-To: remco@emc.rvt.com

I am currently runing v1.1.12 with ppp. IP packets from other computers on my
network are forewarded. Local ether to internet via ppp works fine.

Neither version 1.1.13 nor 1.1.14 does it. And: YES, it is configured in.
I read about another chap on the kernel channel (I have it r/o) who has the
same problem with slip.

The routing table looks fine.

Remco
-- 

Remco Treffkorn, DC2XT
remco@emc.rvt.com
(408) 685-1201

------------------------------

Crossposted-To: comp.sys.intel
From: michel@tornado.seas.ucla.edu (Scott Michel)
Subject: iBCS-2 support
Date: Wed, 25 May 1994 02:33:12 GMT
Reply-To: scottm@intime.com

Sorry I came to the "Linux Distributions thread a wee bit late, but
hey, that's what I get for working full time and holding three courses
down. But the question is: Will there be iBCS-2 binary support?

Why? I've been playing and hacking on Linux for a couple of weeks at
work, and it is *really* nice. Seems well built, and apart from a few
security holes here and there, decent. But it'd be nice to bring over
a few existing apps. from SCO and have them run in place (well, even a
couple of applications to which I no longer have the source, too!)

If there isn't any effort on iBCS-2, is it possible to get the spec
from Intel?

-scottm

------------------------------

From: blake@netcom.com (Blake McBride)
Subject: Problems with MKE2FS
Date: Wed, 25 May 1994 03:51:10 GMT

I have been using Linux for about a year and a half on the same
hardware.  I have an UltraStor 12F-24 controler and 2 ESDI hard disks.
In the past I have always used mke2fs (or mkfs.ext2) without any
problems.  The last mke2fs I used without any problem was .3

I few days ago I received the latest yggdrasil CD which contains
mke2fs version 0.5 When I tried to mke2fs it detected a few bad blocks
and stopped testing for any other bad blocks and just continued with
the making of the FS.  Naturally the drive had other bad spots which
ended up causing all kinds of problems.

I then tried downloading the latest (.5a) mke2fs.  That version made
the fs on my first partition ok but reported over 4000 bad blocks on
my second partition.?

The next thing I tried was to use the old mke2fs (.3) I had.  It
worked perfectly!  It found 7 bad spots on my first partition and 54
on my second.  Everything now seems to work fine.

Can anyone tell me whats going on with the new mke2fs?  Once I got .3
to correctly detect the bad blocks, I put the bad block list into a
file and retried all versions of mke2fs with the -l (instead of the
-c) option.  .3 used the file perfectly.  .5 and .5a were both totally
unable to use the badblock file.

Is there a newer (fixed) version of the ext2 utils?  Are these bugs known?
Is there someone working on it?

Thanks.

(PS: all the tests were run with the latest yggrasil CD kernel)
-- 
Blake McBride                           (615) 790-8521  voice
3020 Liberty Hills Drive                (615) 791-7736  fax
Franklin, TN  37064                     blake@netcom.com
U.S.A.

------------------------------

From: eatkins@alpha.wright.edu (Elizabeth Atkins)
Subject: Re: Why is Linux monolithic?
Date: Wed, 25 May 1994 04:10:14 GMT

In article <2rt19o$3mil@ns2.cc.lehigh.edu>,
DAVID L. JOHNSON <dlj0@ns2.CC.Lehigh.EDU> wrote:
>Perhaps you should re-think posting it at all, since people are developing
>loadable drivers, in particular, SLS 1.05's kernel is modular.
>
>OTOH, the claims of microkernel arrangements are a little far-fetched in 
>general.  I forget the source, but some afficionato was discussing a
>microkernel system (could it be NT?) that had this incredibly small kernel.
>Only thing was, one needed to add modules to drive the disk, the keyboard,
>and the monitor.  It would seem that there is little advantage in making
>such device drivers loadable (maybe the monitor to lighten the load on
>a headless server).  
>
the Dr. Dobbs that had the interview with Linus had several articles on 
up and coming OS's.  QNX was one object oriented microkernel where everything
was loadable.  i believe they were also talking about either taligent or the
new OS/2 that would be using a version of the mach kernel with loadalbe
modules to emulate other OS's.  but i bought it just for the interview with
linus.




------------------------------

From: michaelw@desaster.student.uni-tuebingen.de (Michael Will)
Subject: Re: Gnu ASM docs wanted
Date: Tue, 24 May 1994 11:20:28 GMT

nthirion@rkw-risc.cs.up.ac.za (Nicolaus Thirion) writes:

>Hi,
>I am really in a dead end, anybody know of documentation 
>for Gnu assembly (GAS).

I would be quite interested into that as well.

I have learned quite a lot by compiling little pieces of c-code into
assembler with the command "gcc -S test.c" and trying to understand what
gcc did... it is no problem if test.c is something like 
#include <stdio.h>

int main() {
        char i;

        for (i=1; i < 5; i++) printf("i=%d\n", i);
        return 0;
}

which produces 
        .file   "t.c"
gcc2_compiled.:
___gnu_compiled_c:
.text
LC0:
        .ascii "i=%d\12\0"
        .align 4
.globl _main
_main:
        pushl %ebp
        movl %esp,%ebp
        subl $4,%esp
        call ___main
        movb $1,-1(%ebp)
L2:
        cmpb $4,-1(%ebp)
        jg L3
        movsbl -1(%ebp),%eax
        pushl %eax
        pushl $LC0
        call _printf
        addl $8,%esp
L4:
        incb -1(%ebp)
        jmp L2
        .align 4,0x90
L3:
        xorl %eax,%eax
        jmp L1
        .align 4,0x90
L1:
        movl %ebp,%esp
        popl %ebp
        ret

Cheers, Michael Will
-- 
   In my experience, and there are some social psychology studies
to support me, in real life, smart people make just about as many
        really dumb decisions as dumb people, they just make them
                                for more sophisticated reasons...

------------------------------

From: michaelw@desaster.student.uni-tuebingen.de (Michael Will)
Subject: 1.1.14: when posting in nn using vi trouble occurs...
Date: Tue, 24 May 1994 11:45:55 GMT

Hi,

I am using 1.1.14 and have a problem when using X-window. (xdm invoked
from inittab)

I use nnpost to post something, which invokes vi. I can edit up to the point
where I want to include some text into my posting with the vi-command like

        :r ~/Work/S/test.s

after that the editor seems to run in the background competing with nn on
the tty...

What can I look up to give you more details for hunting down this bug?

It has is the same with 1.1.11 as with 1.1.14...

Cheers, Michael Will

   In my experience, and there are some social psychology studies
to support me, in real life, smart people make just about as many
        really dumb decisions as dumb people, they just make them
                                for more sophisticated reasons...
-- 
   In my experience, and there are some social psychology studies
to support me, in real life, smart people make just about as many
        really dumb decisions as dumb people, they just make them
                                for more sophisticated reasons...

------------------------------

From: steve@nyongwa.montreal.qc.ca (Steve M. Robbins)
Subject: Re: setlocale() bug or feature?
Date: Wed, 25 May 1994 02:17:42 GMT

> | Trying to use X/OPEN message catalogues, I found out that setlocale()
> | does not accept anything for LC_MESSAGES.  As far as I understood the

In 4.5.21, setlocale() is broken.  It is still broken in 4.5.26, but
in a different way.  I've sent my version to HJ, maybe it will see
light of day.

> or French or Polish currently. setting LC_MESSAGES to ISO-8859-1 gives you
> extended diactric and accented characters.

Setting LC_MESSAGES to iso-8859-1 is silly.  Messages is for setting
the language of the strings, not the character set.  LC_CTYPE is for
how the characters are collated, etc, and here iso makes sense.

> | I would also appreciate if getcat(1) would be included in the library
> | image release.

I have an 'even more extended' version of gencat, for ftp from
thym.remm.uqam.ca.  It will generate even more (hopefully useful)
#defines in the C header files.  There are no docs as yet, but if you
run it, it should be clear what's happening.

-- 
Steve Robbins                                 <steve@nyongwa.montreal.qc.ca>
This is not a locker room; and that's a surfboard, not a yacht.

------------------------------

From: root@jaxnet.jaxnet.com (Karl Renaut)
Subject: Can I get a core dump of a process I need to kill?
Date: Tue, 24 May 1994 21:34:33 GMT

The subject pretty much says it.  I'm trying to debug a program that is
going into a loop.  Is there anyway to get a core dump when I kill the
process?  This would really help since it usually takes about three hours
of use before the program goes into the loop so stepping through with
debug is obviously out of the question.
==========
Karl Renaut
root@jaxnet.com

------------------------------

From: urlichs@smurf.noris.de (Matthias Urlichs)
Subject: Re: O_SYNC support
Date: 25 May 1994 06:41:02 +0200

In comp.os.linux.development, article <1994May19.210917.21905@unlv.edu>,
  ftlofaro@unlv.edu (Frank Lofaro) writes:
> 
> +        if (file->f_flags & O_SYNC)
> +                return file->f_op->fsync(inode, file);

Hmm. You should change that to
                        if ((file->f_flags & O_SYNC) && (file->f_op->fsync != NULL))

since not all file systems implement fsync. Or, change open() and fcntl()
to return an error if O_SYNC is set but no fsync code is present.

-- 
Roofers do it up oosiop.
-- 
Matthias Urlichs        \ XLink-POP N|rnberg  | EMail: urlichs@smurf.noris.de
Schleiermacherstra_e 12  \  Unix+Linux+Mac    | Phone: ...please use email.
90491 N|rnberg (Germany)  \   Consulting+Networking+Programming+etc'ing     42

Click <A HREF="http://smurf.noris.de/~urlichs/finger">here</A>.

------------------------------

From: urlichs@smurf.noris.de (Matthias Urlichs)
Subject: Re: strftime() bug
Date: 25 May 1994 06:44:21 +0200

In comp.os.linux.development, article <2rfo4e$2mb@news.cs.tu-berlin.de>,
  brandes@cs.tu-berlin.de (Olaf Brandes) writes:
> 
> I've come across the phenomen that strftime()'s %j outputs the same value
> as the struct tm member tm_yday.
> According to POSIX, the %j output value should be in the range from 001
> to 366. Actually, values 000 to 365 are returned.
> 
That bug is corrected as of libc 4.5.26.

PLEASE, people, if you notice such bugs -- say which kernel and libc
versions you're using!

-- 
The faster I go, the behinder I get.
                                     -- Lewis Carroll
-- 
Matthias Urlichs        \ XLink-POP N|rnberg  | EMail: urlichs@smurf.noris.de
Schleiermacherstra_e 12  \  Unix+Linux+Mac    | Phone: ...please use email.
90491 N|rnberg (Germany)  \   Consulting+Networking+Programming+etc'ing     42

Click <A HREF="http://smurf.noris.de/~urlichs/finger">here</A>.

------------------------------

Crossposted-To: comp.os.linux,comp.os.linux.misc,comp.os.linux.help
From: news@edus.oau.org (Bob Perkins)
Subject: Re: Linux and Bernoulli?
Date: Wed, 25 May 1994 04:16:50 GMT

I will toss this into the pot.
I have 2 Bernoullis, an external 'Transportable' and an internal 150.
Both are SCSI and will work with the Adaptec 1540/42 and 1522. Both
are solid, and just treat them like an additional hard drive. IDE and
'PCPowered' units are different animals, tho, and I have had no experience
with them.
--
rcp@edus.oau.org

------------------------------

From: ewalton@magnus.acs.ohio-state.edu (Elaine Walton)
Subject: Re: Anyone know where to get ADA for linux?
Date: 24 May 1994 23:55:22 GMT

In article <CqA67G.q3F@mozo.cc.purdue.edu>,
Clinton Wong <wongcd2@symphony.cc.purdue.edu> wrote:
>   If you know where to get a pre-compiled ADA package for Linux,
>please e-mail me.
>
>Clinton
>

tsx-11.mit.edu pub/linux/packages/Ada
-Sean

------------------------------

From: klmcw@crl.com (Kevin L. McWhirter)
Subject: Motif for Linux - FREE ?
Date: 24 May 1994 23:22:18 -0700

I have heard that there is a project in the undertaking for Motif/Linux GPL
style. I would be interested in testing that product. I am a new X-windows
programmer that would like a Motif LIKE toolkit with which to learn!
klmcw
--
===================================+==================================
                                   | "We give you shampoo, because
          klmcw@crl.com            |  we couldn't find any REAL poo."
                                   |        -Hawkeye Pierce
===================================+=================================

------------------------------

From: lcvanveen@et.tudelft.nl
Crossposted-To: comp.os.linux.admin
Subject: Re: Another Huge Security Hole!dir
Date: 25 May 94 10:45:21 +0200

In article <2rtmrs$ugq@watnews1.watson.ibm.com>, uri@watson.ibm.com (Uri Blumenthal) writes:
> Hi,
>       It's Linux-1.1.14. The problem is: when you
>       log in as <whoever>, it still gives you UID
>       [you guessed it :-] 0.  I.e. to become root
>       on Linux-1.1.14,  you just have to login to
>       the box...
> 
>       Linux-1.1.13 doesn't exhibit such bad behavior.
> 
>       No fix yet, as I didn't figure out the cause.
>       One thing seems certain - it has nothing to 
>       to with getty/login/whatever program...The
>       new (1.1.14) kernel has your UID==0 always,
>       1.1.13 seems to be correct.
> 
>       Regards,
>       Uri.
> ------------
> <Disclaimer>
After a first rush of slight panic after reading your mail,
I quickly booted-up linux 1.1.14 and logged in as myself.
My UID is still at 406, so on my machines nothing goes wrong.
I got my 1.1.13 from ftp.helsinki.fi because for some strange
reason my own 1.1.12 woulnd't patch into 1.1.13. Maybe you
also have something like that on your system, only it still
compiles. Although it does sound strange to me that this really
could be the case.
Goodluck,
Martijn.

------------------------------

From: lcvanveen@et.tudelft.nl
Subject: Re: enhanced IDE and SCSI-2 supported?
Date: 25 May 94 11:05:50 +0200

In article <CqCFpC.CC7@mercury.wright.edu>, eatkins@alpha.wright.edu (Elizabeth Atkins) writes:
> 
>       Just out of curiosity.....are the "enhanced IDE" and SCSI-2 
> supported already, or are there going to have to be new drivers for 
> them.  I'm going to be purchasing a couple systems in the near future
> for Linux specific work.  Also, I needed to know if these DX4/100 will
> work OK with Linux.  I have heard that Linux does fine with minor
> modifications on the Pentium and was wondering what the minor mods are 
> and where I can get them.
> 
> BTW:  My highest regards to everyone who has worked on the kernel and 
> Slackware.  I recently installed Slackware with kernel 1.0.8 on a 486dx2/66
> AMD computer the other day and I was in heaven.  kudos to all.
> 
> red
If you mean burst-mode IDE support then the answer is a solid YES.
There is a IDE-patch that has been posted in the news-groups.
If you missed that one, I'll be happy to post it again.
Concerning SCSI-2 support, I strongly believe that has been part
of the drivers for a long time now.
Hope this answers your question,
Martijn.

------------------------------

From: insom@galaxy.ucr.edu (chris ulrich)
Subject: Re: 32-bit Novell desktop OS combines Unix, DOS 7
Date: 25 May 1994 02:36:56 -0700

In article <newcombe.212.0064BFCB@aa.csc.peachnet.edu>,
Dan Newcombe <newcombe@aa.csc.peachnet.edu> wrote:
>In article <HJSTEIN.94May22155333@sunset.huji.ac.il> hjstein@sunset.huji.ac.il (Harvey J. Stein) writes:
>
>>Except that they probably won't write dosemu or wine from scratch.
>>Since (as far as I know) both dosemu & wine are under the GPL, we get
>>all their fixes & enhancements there too.
>
>Two words: 
>       SoftPC
>       WABI
>
>It could all be done that way, which means again that we would get nothing :(

Except they would have to include IPX/SPX to sell it in an existing
novell network, and the only way they could do that is if they put
it in the kernel.  Bugger the rest, just give me netware interoperability
and I can burn novell and toss netware.
chris

insom@ac.ucr.edu                                Ecstatic peace
insom@ucrvms                                    Savage conquest

------------------------------

Crossposted-To: comp.os.linux.admin
From: rob@pe1chl.ampr.org (Rob Janssen)
Subject: Re: Another Huge Security Hole!
Reply-To: pe1chl@rabo.nl
Date: Wed, 25 May 1994 08:08:45 GMT

In <2rtmrs$ugq@watnews1.watson.ibm.com> uri@watson.ibm.com (Uri Blumenthal) writes:

>Hi,
>       It's Linux-1.1.14. The problem is: when you
>       log in as <whoever>, it still gives you UID
>       [you guessed it :-] 0.  I.e. to become root
>       on Linux-1.1.14,  you just have to login to
>       the box...

>       Linux-1.1.13 doesn't exhibit such bad behavior.

>       No fix yet, as I didn't figure out the cause.
>       One thing seems certain - it has nothing to 
>       to with getty/login/whatever program...The
>       new (1.1.14) kernel has your UID==0 always,
>       1.1.13 seems to be correct.

Not on my system...  Maybe you did install one of the not-so-correct
attempts at fixing the security bug?

Rob
-- 
=========================================================================
| Rob Janssen                | AMPRnet:   rob@pe1chl.ampr.org           |
| e-mail: pe1chl@rabo.nl     | AX.25 BBS: PE1CHL@PI8UTR.#UTR.NLD.EU     |
=========================================================================

------------------------------

From: ken@coho.halcyon.com (Ken Pizzini)
Subject: Re: SIGHUP: We tried it!
Date: 25 May 1994 09:31:55 GMT

In article <2rj7n2$rv6@charm.magnus.acs.ohio-state.edu>,
Charles E Meier <cemeier@magnus.acs.ohio-state.edu> wrote:
>BTW - how were your kernel mods going to handle programs started by users 
>with a "nohup" option?  This is at least 1 reason why the kernel doesn't
>automatically SIGHUP all of a user's processes just because they hung
>up the phone line.

"nohup" should be setting signal(SIGHUP, SIG_IGN) before exec'ing
the new process, so whether SIGHUP is sent to the process becomes
somewhat irrelevant in this case.

                --Ken Pizzini

------------------------------

From: coquilla@castor.scinfo.u-nancy.fr (Franck Coquillard)
Subject: DOSEmu mail-list dismiss ?
Date: 25 May 1994 10:32:34 GMT

Hello !

Sorry to bother you, don't know if it's the place to put this question but
it doesn't hurt to ask it :

How to unsubscribe the DOSEmu mail-list ? Have tried "dismiss", "unjoin", etc
but it doesn't seem to be successful..

Can you help me.. Please email me your answers..

Thanks.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Franck COQUILLARD               | "Don't sell oar's skin, NO, don't sell it !"
(coquilla@scinfo.u-nancy.fr)    |
Unversity of Nancy - FRANCE     | French proverb by JM.BIGARD
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: Linux-Development-Request@NEWS-DIGESTS.MIT.EDU

You can send mail to the entire list (and comp.os.linux.development) via:

    Internet: Linux-Development@NEWS-DIGESTS.MIT.EDU

Linux may be obtained via one of these FTP sites:
    nic.funet.fi				pub/OS/Linux
    tsx-11.mit.edu				pub/linux
    sunsite.unc.edu				pub/Linux

End of Linux-Development Digest
******************************
