FreeBSD

1. We should not caclucate the superblock summary, since it can at most lag 30 seconds’ change, and doing the caclucate is painful delay. What we should do is to transfer the responsibility to background fsck
2. newfs(8) should warn about the snapshot is actually unable to create, in case fssize is greater than maxfilesize.

The patch for 1) is available at http://people.freebsd.org/~delphij/ffs/patch-sbsummary. I will work on 2) shortly, as it’s quite simpler than 1).

好事多磨：

初一：修正了一组SCSI配置问题，MFC掉的那个CAM改进也加入了内核。发现有4台机器硬件存在不同的毛病。
初二：深夜发现一些机器panic，连夜进一步加入新近MFC的UFS2错误修正。
初三：正式部署新的kernel，看上去运转良好。
初四：软件现在已经足够稳定了，但是居然有一台机器SCSI卡出了问题，已经通知厂商取备机……

Currently under review. You can visit through http://www.freebsd.org.cn/snap/zh_CN and let me know if there’s any mistakes.

I have set up a mirror for the major BSD software, especially DragonFly/Free/Open/NetBSD and KAME at my personal server, tarsier.delphij.net for about two weeks. Today I have annouced that on kernel@dfly and Liam Foy has added it to the official download list.

Some cvsweb and other related site is ongoing. I’m very pleased that I can support BSD related software, no matter joining their development, or providing mirrors for wider spread.

What is a privilege elevation? It meant that someone who (maliciouslly) obtain higher privilege through some method that is not predicated by programmer.

In order to prevent it, we should avoid giving unnecessary privileges, and validate all input. However, in a imperfect world, just validating everything is not enough, since there are too many things that can not be validated easily.

On most Unix systems, we have a “set uid” bit that can allow subsequent process to run under other credentials. This, however, opens an window that we can potentially allow malicious code to be injected into the system, to obtain higher privileges.

So you want to download some ancient FreeBSD release to fit your wierd need? Of course! Check out here.

I have finally got skeljail implemented through the RCng way. After some test I will post the patch for review.

A skel jail is a jail that share essential binaries/libraries with the base system (optionally, other base template if you want) through mount_nullfs.

It seems that Kris Kenneway likes prime numbers so much that he written it into our ports/INDEX files’ commit logs. Today I found that gfans has posted a knowledge about the largest prime number, which is 41st Meissen prime number.

tarsier的配置如下：

Pentium 4 3.0E
1G RAM
250G ATA * 2

tarsier将是我的第一个非职务管理的、同时又使用了jail service的FreeBSD服务器。tarsier上将采用我所提出的fast jail技术。

I started the work almost four months ago, but I have lost all my work last month. Therefore, I’m trying to integrate as much as possible whenever possible. The current workflow is:

• Bump WARNS
• Fix errors
• Testdrive on almost all T1 platform I can touch
• Commit