Latest activity

mysql> SELECT User, Host -> FROM mysql.user; +------------------+-----------+ | User | Host | +------------------+-----------+ | mysql.infoschema | localhost | | mysql.session | localhost | | mysql.sys | localhost |...

I have a script which is supposed to set the whole thing up. This the MySQL bit: #install wordpress database in mysql iocage exec $JAIL mysql -u root <<EOF CREATE DATABASE wordpress; CREATE USER wp_user@localhost IDENTIFIED BY 'wp_pass'; GRANT...

First of all, this is likely not what you want and blocking ICMP will break things. See https://forums.freebsd.org/threads/generic-nat-firewall-pf-config-template.60144/ You probably don't need to change the DNS on the gateway itself (as...

I have made some tests now, and as expected, adapter igb0 get both its Gateway IP and DNS IP from the Internet Router, which is a Huawei 4G SIM Card router (before testing on the fiber). Default is 192.168.8. on this router btw. lease {...

There you see clearly the inflation I spoke about. Command with same name, but different functionality across systems, many commands for the same functionality in the same system, etc. That is wise, because pw mimics the SYSV commands that are...

The tunnel itself is layer 3 (because it's TCP), what's sent over that tunnel might be layer 2 (L2TP for example).

👍 👍 👍

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296838

Old site, still useful, but might need an update: https://bhami.com/rosetta.html Users and groups? Mostly pw. One command to rule them all. Though I also use adduser and rmuser because they're convenient.

As you do: edit the files in /etc/ by hand (through vipw if necessary). My passwd and group files are commented and well structured; automated editing tools would lose that.

Me too 😅

hm, I can't even add ip addresses to a table any more

Oh: one more matter: when I remove the word "root" from my crontab, and then attempt to test-run the cronjob, it never seems to finish, and just hangs until I Ctrl-C out of it. Ken Gordon

Here is the cron-job as I have written it: #!/bin/sh # Automated Lynis Scan Script #Define log and report paths LOGFILE="/var/log/lynis-cron.log" REPORTFILE="/var/log/lynis-report.dat" /usr/local/bin/lynis audit system > $LOGFILE 2>&1 #Send an...

I DID follow the instructions suggested in your July 9 msg, but if I remove the word "root" from my cron-tab, I get zero emails to root from my cron-job. In order to get the email report in my root mail, I MUST include the root addressee in the...

Wow, thanks, fast enough. Haven't updated ports tree today yet.

Well, now this bug reappeared at 153.0,2

Hi T-Aoki, you are correct, as my friend discovered, one cannot mix them. However, my confusion was about reading the specification as meaning that the non-ECC must be RDIMM and LRDIMM. Kindest regards, M

Not sure it applies to all hardwares, but if I recall correctly, every hardwares I've ever used supporting ECC and/or buffered (registered) memory modules (starting from SIMM) didn't support mixups of ECC/non-ECC and/or buffered/unbuffered...

I'm running Google Chrome on linuxulator to take classes online and noticed that audio will won't work if another browser on freebsd audio is playing so had to exit that browser to release the audio device. Since I'm running the audio driver...

Original article here. Consider this when replying. During BSDCan, the FreeBSD Foundation holds its annual meeting and Board elections. Following this year’s meeting, we are pleased to welcome Dave Cottlehuber to the FreeBSD Foundation Board of...

Original article here. Consider this when replying. FreeBSD Community member and former Core Representative, Dave Cottlehuber, was elected to the FreeBSD Foundation Board during the Annual Meeting on June 15, 2026. We sat down with Dave to learn...

Hi cracauer@, thank you for the reply. Yes, this appears to be consistent with my friend's claim that the non-ECC memory worked. What I was confused about that it listed only RDIMM and LRDIMM. In other words as long as the specification lists...

Some boards would take both registered and unbuffered memory.

Some boards would take both registered and unbuffered memory.

Greetings all, I am planning to build another computer since a friend gave me some DDR4 memory, that came from his Supermicro X10ADi motherboard. Regarding the System Memory, the specification lists Memory Capacity as: 1TB 3DS ECC/non-ECC...

I think it's fine while creating the db through mysql, but the actual WP config site page should have 127.0.0.1 Not too sure how to see a log, but I'd try recreating the DB and use IP instead of localhost on WP. You might be able to do...

I have been trying all sorts of things so error msgs from apache are no longer a problem. It's Wordpress that is failing, that is, after I enter the database details into Wordpress.

I think it's fine while creating the db through mysql, but the actual WP config site page should have 127.0.0.1 Not too sure how to see a log, but I'd try recreating the DB and use IP instead of localhost on WP. You might be able to do...

Time for a bit of this... View: https://www.youtube.com/watch?v=01-2-7_IRFA And the album version View: https://www.youtube.com/watch?v=bAzjVdD06z8

I don't think mdo is made to be a sudo or doas replacement. I believe it is made for things like services to switch users for subprograms. This way, the original service does not have to be root in order to assume another user's credentials, and...

Quoting fernandel 's linked article.

Yes, physical and digital security are two different things. If you have reason to believe somebody malicious could get hands on access, then the digital security part must be done differently, with encryption and very large levels of prudency in...

Purpose of mdo is to not rely on setuid programs (sudo, doas) for privilege escalation. Binaries with setuid bit come with their own surface attack. But as you mentionned, mdo cons is that it won't prompt for auth (at least for the moment). Maybe...

If mdo is not secure enough, and you want to avoid GPL software, security/doas from OpenBSD is a great alternative.

This is how it works. Your characterisation of the risks is accurate. If you want gated access to root, su - is probably better.

I mean in a broader sense, not the technical "[to allow] unprivileged users to change process credentials" from mac_do. You see, before switching from MS Windows to FreeBSD I became a bit familiar with sudo on some linux machines at my job. My...

I'm running Wordpress in an IOCAGE jail. Here is how I setup mysql to handle Wordpress: #install wordpress database in mysql iocage exec $JAIL mysql -u root <<EOF CREATE DATABASE wordpress; CREATE USER wp_user@localhost IDENTIFIED BY 'wp_pass'...

Not sure if it's related, but did you use localhost or 127.0.0.1? I had issues with localhost

I'm making some progress but the installation process from within Wordpress has failed after entering database details. There has been a critical error on this website. Is there an error log which gives me a clue about this critical error ...

root@KensOffice:/usr/local/bin # ls -l /usr/local/bin/lynis_cron.sh -rwx------ 1 root wheel 338 Jul 14 09:35 /usr/local/bin/lynis_cron.sh Ken Gordon

Post the output of ls -l /usr/local/bin/lynis_cron.sh

It has plenty of spaces like LWN. It also had Groklaw in the past when they had the water in the neck. And in the worst case scenario it wouldn't be hard to fix. We geeks should discuss geek stuff and leave lawyer stuff to lawyers.

View: https://www.youtube.com/watch?v=5ANSNVo05lE&list=RD5ANSNVo05lE&start_radio=1 View: https://www.youtube.com/watch?v=iwfQKua9B18 View: https://www.youtube.com/watch?v=6CtfWa-lICw View: https://www.youtube.com/watch?v=WlAW4FaZKeM View...

I personally had to remove amdgpu from my rc.conf after I upgraded and then manually force upgrades of the installed software. I had it upgrade everything rather than trying to be targeted about it before rebooting and re-adding the entry to load...

In periodic daily I try to determine which pkgs need updating. Then I update by hand.

BTW, If I do pkg search realtek-re-kmod, I get realtek-re-kmod-1102.01.1500068_1 Kernel driver for Realtek PCIe Ethernet Controllers realtek-re-kmod198-198.00.1500068 Kernel driver for Realtek PCIe Ethernet Controllers...

I don't understand this. First. pkg version -vR gives the same result as pkg version -v. If I do pkg bootstrap, I get pkg already bootstrapped at /usr/local/sbin/pkg

The paper on sched_ule: https://www.usenix.org/legacy/event/bsdcon03/tech/full_papers/roberson/roberson.pdf Worth reading before turning knobs. See also sysctl -d kern.sched.ule, and, of course, the source. sched_ule tries to dynamically...

I seldom have to deal with user / group creation and modification. I tend to use primitive ways like vipw, vi /etc group or just use man to find a command and apply. The same with openbsd and with linux. There is an inflation of commands, some...