From owner-freebsd-security@freebsd.org Tue Mar 31 16:59:17 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B019E263601 for ; Tue, 31 Mar 2020 16:59:17 +0000 (UTC) (envelope-from kalin@el.net) Received: from mail-qk1-x72a.google.com (mail-qk1-x72a.google.com [IPv6:2607:f8b0:4864:20::72a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48sFsW3bymz4XNX for ; Tue, 31 Mar 2020 16:58:55 +0000 (UTC) (envelope-from kalin@el.net) Received: by mail-qk1-x72a.google.com with SMTP id d11so23796543qko.3 for ; Tue, 31 Mar 2020 09:58:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=el-net.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=43esRIblMs9APC4pUA3jfgAP43v7u5WBUh0Awb/GJ3Q=; b=NOGXWDVvcpSam8tPOfQrv1Chjn79J1C9pRDlcodFWb6BDwV4H1CIjLovwsziW8zw8G eQt5oySu2viOz9wCav46BFxS5jLVswIbur5+Z2ndhEne73Wx9i6CMc0B0usinRPbqCpz nFc5XRhT3/zedOhovhPO+z3JqVZCLsx5lx+VU++diFrWqLkHKWRdkxa4sFniE24NNaty mfyrOr6vqzDALY44Q5mtQKtSWV76+dHS1gbYucdh2fOKEl5F9ZZ7QyrM+pszhiRe9iTh Zys6y61Ax3DCRM5GBVXbwHeHK8wWK+D5wqkrgzFBTM35DurwWnDcBiu3hneasYS+gjlc oUtQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=43esRIblMs9APC4pUA3jfgAP43v7u5WBUh0Awb/GJ3Q=; b=URSuz2SMrEAmEwN1a2eTi0wYpintaIz+a8NNdMSWQt97OlIUJLi/PQy6T5rCrR8uGx jQFyJMQYWDIVt3vIR1dqZ00bT+lVeDYGWjj4dZoDvjO3A/kjvg7IZtNau267d3GBbcsy z7yF5D9xNWFrHSxeEGz6iCafSIFyjFGXy35Tk7LBfOdUTpbQe7bpBibOqbfSYgl4vatU DFYeZ4zF7yg6umnGKF4LtfLpgvd6ztPeOJ3iSw+ND7JCvgmLwT5iquGClQd5o/ym+xVZ x+PUHi02bZiNnpASYal1k5Hekb+vN2NA1RtOpzsZuNnRTE+S8uyo1iwkJUv5YosQ668f iYzw== X-Gm-Message-State: ANhLgQ06GUjoFLtqRbyzZ5wZjNW7hqLNyBK6Ppv7u35J1NlXazJr+08y fYJ3QG7Asx5luARX4gQXPXbaxZqohAK/pnJWGcvcKXJCTQ== X-Google-Smtp-Source: ADFU+vsk1ONW7DyH8VIqX/KmkMrP8TvAsgGRKoEkv4HDSxGKLq9XKMcsSghWaGVRlFjzcfmVQpRYGs1bp7ShVPRkqWY= X-Received: by 2002:a37:a915:: with SMTP id s21mr5989699qke.436.1585673925420; Tue, 31 Mar 2020 09:58:45 -0700 (PDT) MIME-Version: 1.0 From: el kalin Date: Tue, 31 Mar 2020 12:58:36 -0400 Message-ID: Subject: root .history To: freebsd-security@freebsd.org X-Rspamd-Queue-Id: 48sFsW3bymz4XNX X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=el-net.20150623.gappssmtp.com header.s=20150623 header.b=NOGXWDVv; dmarc=none; spf=pass (mx1.freebsd.org: domain of kalin@el.net designates 2607:f8b0:4864:20::72a as permitted sender) smtp.mailfrom=kalin@el.net X-Spamd-Result: default: False [-3.01 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[el-net.20150623.gappssmtp.com:s=20150623]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; DMARC_NA(0.00)[el.net]; DKIM_TRACE(0.00)[el-net.20150623.gappssmtp.com:+]; RCVD_IN_DNSWL_NONE(0.00)[a.2.7.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; IP_SCORE(-2.01)[ip: (-9.22), ipnet: 2607:f8b0::/32(-0.35), asn: 15169(-0.45), country: US(-0.05)]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; HFILTER_FROMHOST_NORES_A_OR_MX(1.50)[el.net]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 16:59:17 -0000 hi all... noticed that over night the shell .history file for root was emptied. the file is there but there is no history in it. this is unusual and it's the second time it happens in 2 months. it's particularly peculiar since nobody else has the root password for this machine. i can't see any ssh access in auth.log and ssh access is limited to a handful of ips... how could i figure out what is emptying the .history file? thanks... also, the .cshrc looks like this: set promptchars = "%#" set filec set history = 1000 set savehist = (1000 merge) set autolist = ambiguous # Use history to aid expansion set autoexpand set autorehash set mail = (/var/mail/$USER) if ( $?tcsh ) then bindkey "^W" backward-delete-word bindkey -k up history-search-backward bindkey -k down history-search-forward endif From owner-freebsd-security@freebsd.org Tue Mar 31 18:16:44 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 3ABBF26631D for ; Tue, 31 Mar 2020 18:16:44 +0000 (UTC) (envelope-from selphie.keller@gmail.com) Received: from mail-pg1-x531.google.com (mail-pg1-x531.google.com [IPv6:2607:f8b0:4864:20::531]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48sHb5617dz43vx for ; Tue, 31 Mar 2020 18:16:33 +0000 (UTC) (envelope-from selphie.keller@gmail.com) Received: by mail-pg1-x531.google.com with SMTP id k5so8491576pga.2 for ; Tue, 31 Mar 2020 11:16:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=QW1RFR/QfXRpnFD9wL5m3taON7aNlBHidxP58iWsDHI=; b=MuE+y9MNf7HNvKxoYfxvJ60mtqxLIMuApm2T7RzM0ydCZD8wdL6PSIYEOsQTJrzcpQ DoQ+HjCpwMmLKLepRZUJ1cLM5UmQ3Y0MQc+jPX3R7oE0HEG17R5LjPWgegnMe6QobHtU Q2JhMbtZS8NwalzwVSGEOY2kxX8hU5+ZNqIkmppWUn7WsRyUOau3Hko3n/uZsfSN6+Ow insWg87cFI1jIZDsIqR/oFEkST6J4hqQ70h+5lANc18wgbkS+1dOwTlqc6fn4131nRZp D04tsgHrasehY8ZwjJj+n6pb1CLbsQadQM1zyuZDMquh1XlvyXGrH7Dvd56Pu4y4u1/H JlgQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=QW1RFR/QfXRpnFD9wL5m3taON7aNlBHidxP58iWsDHI=; b=KRK7fuYkQ+dtDFdlYmDOJmC1j5Q4rSx76vyYM2ZF345PxQy9DjRwOHpB/6cIEUR4l6 /u1pjes32SVXxeK25GxBDp4RCWSwn3giGdKYHgLNPGf/Wj0p9UNqSR+844liiyJsLCrb TUVX5DVzFQTsAGjgoB3kjO4VZj0NSF0IoLETySPsuCFWCznK//P5REPDlCeqafzfaLBq 6sNJDtLLHxhsVDB79tSJ0ZO3aUKrgQQbuX9IECDlO3cG/l79S7bFpHHbAfe0MDQaL95U IgqDhIxS4OcUgIpNtPPOgwMxxoyxvVcXewTmPN+6Xh+65/YTdUCtu+/Uz8jZRMDP6Nd1 DTnw== X-Gm-Message-State: AGi0PuaiTy1g9oy5/LnpJd0HvfUgBfFOeJrkSDU+ofByMqP35FHrP61X Uy7c3qwSwhQi+P+KnJHnb2tzbO/RVxcxj0vdOWlU3/o6q/k= X-Google-Smtp-Source: ADFU+vtkkbcKwE/0c2Our5nNErHMfmDYa1BId+tYe+pGLsURSmVfzv0Syh8oEX8XgsE3S55UIoMfwj/l2k2eFR/lI+s= X-Received: by 2002:a92:b6db:: with SMTP id m88mr18221492ill.115.1585678176967; Tue, 31 Mar 2020 11:09:36 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Selphie Keller Date: Tue, 31 Mar 2020 12:09:25 -0600 Message-ID: Subject: Re: root .history To: el kalin Cc: freebsd-security@freebsd.org X-Rspamd-Queue-Id: 48sHb5617dz43vx X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=MuE+y9MN; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of selphiekeller@gmail.com designates 2607:f8b0:4864:20::531 as permitted sender) smtp.mailfrom=selphiekeller@gmail.com X-Spamd-Result: default: False [-2.00 / 15.00]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; URI_COUNT_ODD(1.00)[3]; DKIM_TRACE(0.00)[gmail.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; FROM_EQ_ENVFROM(0.00)[]; IP_SCORE(0.00)[ip: (-9.01), ipnet: 2607:f8b0::/32(-0.35), asn: 15169(-0.45), country: US(-0.05)]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TAGGED_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; IP_SCORE_FREEMAIL(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[1.3.5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 18:16:44 -0000 You could set a higher securelevel and use system flags like: chflags sappnd .history Which will prevent it from being erased and only allow appending. On Tue, 31 Mar 2020 at 10:59, el kalin wrote: > hi all... > > noticed that over night the shell .history file for root was emptied. the > file is there but there is no history in it. this is unusual and it's the > second time it happens in 2 months. it's particularly peculiar since nobody > else has the root password for this machine. i can't see any ssh access in > auth.log and ssh access is limited to a handful of ips... how could i > figure out what is emptying the .history file? > > thanks... > > also, the .cshrc looks like this: > > set promptchars = "%#" > > set filec > set history = 1000 > set savehist = (1000 merge) > set autolist = ambiguous > # Use history to aid expansion > set autoexpand > set autorehash > set mail = (/var/mail/$USER) > if ( $?tcsh ) then > bindkey "^W" backward-delete-word > bindkey -k up history-search-backward > bindkey -k down history-search-forward > endif > _______________________________________________ > freebsd-security@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org > " > From owner-freebsd-security@freebsd.org Tue Mar 31 18:26:27 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 7E4C426699A for ; Tue, 31 Mar 2020 18:26:27 +0000 (UTC) (envelope-from jhellenthal@dataix.net) Received: from mail-qt1-x829.google.com (mail-qt1-x829.google.com [IPv6:2607:f8b0:4864:20::829]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48sHp91vvNz47DM for ; Tue, 31 Mar 2020 18:26:08 +0000 (UTC) (envelope-from jhellenthal@dataix.net) Received: by mail-qt1-x829.google.com with SMTP id y25so335691qtv.7 for ; Tue, 31 Mar 2020 11:26:08 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:mime-version:disposition-notification-to :from:in-reply-to:date:cc:message-id:references:to; bh=xoSw8YbzPnactE+uOy/FVxgySXoha2VCf4jZFK5/ocs=; b=bl06Bxj0zVmbl9Rt1Gpn58j00cV3fTrh1aTBwl42rK5JMZmyE8pk9OJ/xJcLw4LxNg 0OK6jUUVOl46V/6rkJVTU82Q8acAC4SnKNvuxz5uXDTyDTI64JXz+ufzrttkhdJUhJaw jB36vKg1EjZ+yEeFfxwLr3301OsPDVhAWZQ4XGwMT+PzQjP539MUdryaXwnb0kkIwlAK yvAzIGAb9sS5mqdEYYIVUMRViRZNqNCAEbLconzLNfAC3LUOliMfgp85fUFPjKxi0dOR 9Xr1If2MIJQ3qTWjZvXhlKgstNRJzyPWoyuWfL+QKrbXEhGWXW9igHas56LqRCM0AEqU UriQ== X-Gm-Message-State: ANhLgQ0Z7VF4XoIKIwwwmXXZFkVvCIKNEyZKKfTqypuqHgkwr27Pn0NQ XPBvbfHUaMyAU0fvcJOT37L74w== X-Google-Smtp-Source: ADFU+vux9YfQUX3Bdyws7/eV+uq3yNCP/D/7qPY9p+3YwmGTKUzqDPzzHV2LC5FqiTXN9ZyQPUuOgw== X-Received: by 2002:ac8:2c33:: with SMTP id d48mr6558917qta.323.1585679158572; Tue, 31 Mar 2020 11:25:58 -0700 (PDT) Received: from 2603-6000-ca4c-0de4-004e-0946-7cbf-323b.res6.spectrum.com (2603-6000-ca4c-0de4-004e-0946-7cbf-323b.res6.spectrum.com. [2603:6000:ca4c:de4:4e:946:7cbf:323b]) by smtp.gmail.com with ESMTPSA id 128sm13057885qki.103.2020.03.31.11.25.56 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 31 Mar 2020 11:25:57 -0700 (PDT) Subject: Re: root .history Mime-Version: REDACTED Content-Type: multipart/signed; boundary="Apple-Mail=_E64ED81E-DFCA-4889-8606-48BD3EE9E409"; protocol="application/pkcs7-signature"; micalg=sha-256 From: "J. Hellenthal" X-Mailer: REDACTED In-Reply-To: Date: Tue, 31 Mar 2020 13:25:55 -0500 Cc: el kalin , freebsd-security@freebsd.org Message-Id: References: To: Selphie Keller X-Rspamd-Queue-Id: 48sHp91vvNz47DM X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.61 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; XM_UA_NO_VERSION(0.01)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MV_CASE(0.50)[]; HAS_ATTACHMENT(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[dataix.net:+]; DMARC_POLICY_ALLOW(-0.50)[dataix.net,reject]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; IP_SCORE(-2.02)[ip: (-9.27), ipnet: 2607:f8b0::/32(-0.35), asn: 15169(-0.45), country: US(-0.05)]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[dataix.net:s=net]; FROM_HAS_DN(0.00)[]; SIGNED_SMIME(-2.00)[]; RCPT_COUNT_THREE(0.00)[3]; TAGGED_RCPT(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; TO_MATCH_ENVRCPT_SOME(0.00)[]; ZRD_FAIL(0.00)[query timed out]; RCVD_IN_DNSWL_NONE(0.00)[9.2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 18:26:27 -0000 --Apple-Mail=_E64ED81E-DFCA-4889-8606-48BD3EE9E409 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Seems a little extreme, you could check other users .cshrc .tcshrc flies = and see if there is a builtin mech for (history -c) in a trap or = otherwise that might explain it. If root history is a concern, audit should probably setup on that system = if it runs that deep in the infrastructure before evaluating a secure = level and chflags.=20 > On Mar 31, 2020, at 13:09, Selphie Keller = wrote: >=20 > You could set a higher securelevel and use system flags like: > chflags sappnd .history > Which will prevent it from being erased and only allow appending. >=20 > On Tue, 31 Mar 2020 at 10:59, el kalin wrote: >=20 >> hi all... >>=20 >> noticed that over night the shell .history file for root was emptied. = the >> file is there but there is no history in it. this is unusual and it's = the >> second time it happens in 2 months. it's particularly peculiar since = nobody >> else has the root password for this machine. i can't see any ssh = access in >> auth.log and ssh access is limited to a handful of ips... how could = i >> figure out what is emptying the .history file? >>=20 >> thanks... >>=20 >> also, the .cshrc looks like this: >>=20 >> set promptchars =3D "%#" >>=20 >> set filec >> set history =3D 1000 >> set savehist =3D (1000 merge) >> set autolist =3D ambiguous >> # Use history to aid expansion >> set autoexpand >> set autorehash >> set mail =3D (/var/mail/$USER) >> if ( $?tcsh ) then >> bindkey "^W" backward-delete-word >> bindkey -k up history-search-backward >> bindkey -k down history-search-forward >> endif >> _______________________________________________ >> freebsd-security@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-security >> To unsubscribe, send any mail to = "freebsd-security-unsubscribe@freebsd.org >> " >>=20 > _______________________________________________ > freebsd-security@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to = "freebsd-security-unsubscribe@freebsd.org" --=20 J. Hellenthal The fact that there's a highway to Hell but only a stairway to Heaven = says a lot about anticipated traffic volume. --Apple-Mail=_E64ED81E-DFCA-4889-8606-48BD3EE9E409 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCC30w ggTyMIID2qADAgECAhAkjIYJxGnGR6eZmmZkpZCpMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQG EwJJVDEQMA4GA1UECAwHQmVyZ2FtbzEZMBcGA1UEBwwQUG9udGUgU2FuIFBpZXRybzEjMCEGA1UE CgwaQWN0YWxpcyBTLnAuQS4vMDMzNTg1MjA5NjcxLDAqBgNVBAMMI0FjdGFsaXMgQ2xpZW50IEF1 dGhlbnRpY2F0aW9uIENBIEcyMB4XDTE5MTIxODE1MzMyNVoXDTIwMTIxODE1MzMyNVowITEfMB0G A1UEAwwWamhlbGxlbnRoYWxARGF0YUlYLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuOyYfFZO7sDZ2xvZmWHxNFr13InRzm8npMvK0S3gZuV+foEql68NraMDvg8kZzPGF5gKJU xT3ULrXY/TnwWYRoYUftUx2DSWbx/fZrh7D6jXlmrTymbdBSEfqhg1Z3VQKSPRVsXfM0aCFh/M9H yu0yAMnfFojOfneQj9Ui57BaK7X5lsfi1a5OpPOux8jt0xc69wtHY9oB6dGxNNa7lvhnYoR/fwXD 85ZmpA/KCUSOHRswNj3FKxe5ar5+t/2Y3sx8beLRBGziLMiSpkQsuRf5eC+ASrPfqVh0aYPU+fBu CHdpvQd4g+j+2AC2gaNevi3W+GHbqJcxFYVoE6QdADECAwEAAaOCAbcwggGzMAwGA1UdEwEB/wQC MAAwHwYDVR0jBBgwFoAUa/KNnmjBJQQfUTRX9hZclOpNaRowfgYIKwYBBQUHAQEEcjBwMDsGCCsG AQUFBzAChi9odHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQvY2VydHMvYWN0YWxpcy1hdXRjbGlnMjAx BggrBgEFBQcwAYYlaHR0cDovL29jc3AwOS5hY3RhbGlzLml0L1ZBL0FVVEhDTC1HMjAhBgNVHREE GjAYgRZqaGVsbGVudGhhbEBEYXRhSVgubmV0MEcGA1UdIARAMD4wPAYGK4EfARgBMDIwMAYIKwYB BQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMuaXQvYXJlYS1kb3dubG9hZDAdBgNVHSUEFjAUBggr BgEFBQcDAgYIKwYBBQUHAwQwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDA5LmFjdGFsaXMu aXQvUmVwb3NpdG9yeS9BVVRIQ0wtRzIvZ2V0TGFzdENSTDAdBgNVHQ4EFgQU6wfraIwID26TibOY ZqUs7EeHIcAwDgYDVR0PAQH/BAQDAgWgMA0GCSqGSIb3DQEBCwUAA4IBAQAUqup9iuEK2eij2dDi 9F0zE86hkqszB95cI+EUSqpCpWo+9QEVanEpgLdithMEV3E7ZGYSXe+lQIvPa2eS8cTLQG3UMggC wYzlkLqE55KEChdkDmzpcZM2i1ektdEJADzP0EonVM8yz+Qs1ZdlXf7dUsjksgLV0PVyil7wo/Fo 08duWa/SmBMcHO71DbTgJfKzAa77KmoXXiaUpkK9PhXsCQwReZKkIC+hEYe77F/J/ck8Ne29DyC0 zi82uTbHU6o5lm2u78GLtnueNLGrNOeZm9bTSDRk+BNnRYHO07m1k+62+qxlZX5YmTuklyvum8Vw Y0tgc2GXvFuoRioro8AdMIIGgzCCBGugAwIBAgIQT94QS+2VW96LrWWHzEFe4zANBgkqhkiG9w0B AQsFADBrMQswCQYDVQQGEwJJVDEOMAwGA1UEBwwFTWlsYW4xIzAhBgNVBAoMGkFjdGFsaXMgUy5w LkEuLzAzMzU4NTIwOTY3MScwJQYDVQQDDB5BY3RhbGlzIEF1dGhlbnRpY2F0aW9uIFJvb3QgQ0Ew HhcNMTkwOTIwMDcxMjA1WhcNMzAwOTIyMTEyMjAyWjCBjTELMAkGA1UEBhMCSVQxEDAOBgNVBAgM B0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRlIFNhbiBQaWV0cm8xIzAhBgNVBAoMGkFjdGFsaXMgUy5w LkEuLzAzMzU4NTIwOTY3MSwwKgYDVQQDDCNBY3RhbGlzIENsaWVudCBBdXRoZW50aWNhdGlvbiBD QSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALdoc3rZPNQv+9xnyj3OlHz/iRnO 2hpj8xlHkCdYKNwnRabAT6J0RA11A3ZkQiEZEw66B99ES7Ezv9IRBYmIwsr720lUptObF5L3yVzl 3nzaittXwWsq+CQoDEci1cKkWF5SiO22+Np2Epu2HFxkw5nXMnZibrqnC6hUGsFogTDUUVRIuLlu blwWYFhpqvDaCh//ucRgRW3+rTU1nBoT1XHkXrLsCteefjoh+o01tNTWvGi4+3OyABidGPXuoYh7 UbYX1u0sG1O8rO92t5zV7/Cr/Vza9EbySh6DrCqsY333sNxikKzFyBwebZv43t1xJyMVE/CRt7BL JOyHxd1Yq0sCAwEAAaOCAf4wggH6MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUUtiIOsif eGbtifN7OHCUyQICNtAwQQYIKwYBBQUHAQEENTAzMDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA1 LmFjdGFsaXMuaXQvVkEvQVVUSC1ST09UMEUGA1UdIAQ+MDwwOgYEVR0gADAyMDAGCCsGAQUFBwIB FiRodHRwczovL3d3dy5hY3RhbGlzLml0L2FyZWEtZG93bmxvYWQwJwYDVR0lBCAwHgYIKwYBBQUH AwIGCCsGAQUFBwMEBggrBgEFBQcDCTCB4wYDVR0fBIHbMIHYMIGWoIGToIGQhoGNbGRhcDovL2xk YXAwNS5hY3RhbGlzLml0L2NuJTNkQWN0YWxpcyUyMEF1dGhlbnRpY2F0aW9uJTIwUm9vdCUyMENB LG8lM2RBY3RhbGlzJTIwUy5wLkEuJTJmMDMzNTg1MjA5NjcsYyUzZElUP2NlcnRpZmljYXRlUmV2 b2NhdGlvbkxpc3Q7YmluYXJ5MD2gO6A5hjdodHRwOi8vY3JsMDUuYWN0YWxpcy5pdC9SZXBvc2l0 b3J5L0FVVEgtUk9PVC9nZXRMYXN0Q1JMMB0GA1UdDgQWBBRr8o2eaMElBB9RNFf2FlyU6k1pGjAO BgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAGBEuhmiq3L7DkGaRMG6FTm9na4v3ya3 KW+xkhFvSZgPinqeBi5qfV+dCL/BCuO/JMH9mgI5z57DnYiLQC3CIHnEtalcTfhGPleRgjRMuFQL AeYM5UAZiiPT+D8S7faZ0CZ3glRLw51QTGQJZSC+bN7mgoiBG/HmGahvLWjlkjNZ6o6AmVC3HIV1 mGowamiYNEVDmen+SAdJW9uhwP+xFFZodZ0lYJQ6FHg+3pSDVx6YdM94n9e9tlMnXKB+CY92WmPX bUOMCUjYUmTsxEu9lJEusHv+eehThrO6HiVrkHvEathHnkhphpYmSlG2KOIwfwtqJjJ9C+EMCOcD Da1ndhUTVFMMTAZmyWLRGg0U0O9hzwPA520ZL0Q0iZI7E6KlOmaQZQX+LORMK4V6hVW9qzPZhgjw 2SYux8N8vAWA/3d4ky+j1uVIzk0qRXJ0iD+B1uTyOjEx15fmm+mowp7ycOhNUxi4d8ycqb+QkPBb ZtM+zCi7eWa9hOI6I2V3mZ9bFKUqonWcqfZhvy2DEZhzJLYQ0Zw5ztrR7+fmDjuHFBG07eQcMBOU T46qL7J3ncneUooyCvpNTAlxSzE3xEc96lDd4v38Lnl3BsuIxH9p/xb2LBGNxgR12QjFVj33wX25 fyE47PUPTRt+2wBJv5oNsjatNjS4w20CCoLfVtGgVPUrMYIDqTCCA6UCAQEwgaIwgY0xCzAJBgNV BAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQHDBBQb250ZSBTYW4gUGlldHJvMSMwIQYD VQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEsMCoGA1UEAwwjQWN0YWxpcyBDbGllbnQg QXV0aGVudGljYXRpb24gQ0EgRzICECSMhgnEacZHp5maZmSlkKkwDQYJYIZIAWUDBAIBBQCgggHX MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIwMDMzMTE4MjU1NVow LwYJKoZIhvcNAQkEMSIEIDVwV4WQB/1RQEWIBcXZ6PICVZTlfTT9fSUbj+GQmMiwMIGzBgkrBgEE AYI3EAQxgaUwgaIwgY0xCzAJBgNVBAYTAklUMRAwDgYDVQQIDAdCZXJnYW1vMRkwFwYDVQQHDBBQ b250ZSBTYW4gUGlldHJvMSMwIQYDVQQKDBpBY3RhbGlzIFMucC5BLi8wMzM1ODUyMDk2NzEsMCoG A1UEAwwjQWN0YWxpcyBDbGllbnQgQXV0aGVudGljYXRpb24gQ0EgRzICECSMhgnEacZHp5maZmSl kKkwgbUGCyqGSIb3DQEJEAILMYGloIGiMIGNMQswCQYDVQQGEwJJVDEQMA4GA1UECAwHQmVyZ2Ft bzEZMBcGA1UEBwwQUG9udGUgU2FuIFBpZXRybzEjMCEGA1UECgwaQWN0YWxpcyBTLnAuQS4vMDMz NTg1MjA5NjcxLDAqBgNVBAMMI0FjdGFsaXMgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIENBIEcyAhAk jIYJxGnGR6eZmmZkpZCpMA0GCSqGSIb3DQEBAQUABIIBAHfBm+wmjkLQAJ8cHb0Z1HCadBeK+kyP 9HB39aa1kXJcO/irPYuVZyz5YeYluXmqzKEQa46vJildUG3xGvGVGi9Z+C8XtJtZaGN8O4+vK/Cx s82K9BYPSyg9JjIL7ybINMAwvf0HZGlt28myYHF3G7jSAmrvNKoNdPB/Wg8TVhVhr/p2HwBpSmea w2yWUKcTWdBSklE8+QUcI8caRFFci4j1oPFBbguYGDKwRhMiXkkrJtgtkGswFSNszNQ3DqJRXSQn UC+kLcd/iDSNEbR5gYovwL6pgAWdPQnD5wTKGa0oQnX55B5gD97ZK4vAKiBabgAhSt/2zbMUj3uh WkBFmasAAAAAAAA= --Apple-Mail=_E64ED81E-DFCA-4889-8606-48BD3EE9E409-- From owner-freebsd-security@freebsd.org Tue Mar 31 22:38:16 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 08CFA26EC96 for ; Tue, 31 Mar 2020 22:38:15 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) Received: from APC01-PU1-obe.outbound.protection.outlook.com (mail-pu1apc01olkn0804.outbound.protection.outlook.com [IPv6:2a01:111:f400:febe::804]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "GlobalSign Organization Validation CA - SHA256 - G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48sPNv1hwBz3Hh6 for ; Tue, 31 Mar 2020 22:38:06 +0000 (UTC) (envelope-from tatsuki_makino@hotmail.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=c4jFx+bbLyUmC+GwW0o06CowbaZpdgB6hvfCsrKHWM2LYKxp4XemZXyvesM9paEw3ekPu5Jb3qJzOuYBYtxKih1j25Dtzakd5c4ITLU69B1YhoJNMTHjbsVc+l0p5V8mj/OXM3yqH6EjCoq659TYjr6tlQ38riV7JzbeIEY//0Xrd20w5lHBxqQwbe4/z44b32JN8n7XDe3SMTeQ6kzLOd0RT5DaOLv2Uf3H7jwxEJ93f7EtY91WW5TF7X8XMlvEpqA0yn1faFYNzKpozp5gyJApNq+Pd5u3yoD7Eihyji431T/VKq4eQR1gu1GkCkUYaqxGTRBuWxLYqaYsTer3JQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vNcNhJBD/vom3D9+TMHZqdz2zOw99gaV3Ed+PwwByq4=; b=Wv1Ejg4zDPK7c9tkAbQVrTvM3O3mpzKrWC/FL/MbiYMiSmTIAEx5u3fShPCemdN7dPNdaUzfYfY4A/nJZSmHKSiAJE7G3Ens5nXpksPFaqz/iQ7/HN/NSQL8FE/YGNRAuEE2mHdrQeXYYpioOb9jA0s+aEF+SJfYY02YSFFMhrjJDyxhuMEQHkG+J9YEGnj5yVNDGxszhX3yGnW5Cuf2Qr5yC37JDufjeIfnL3W40VwUUU9XMTX6iEyCjTBsPHMJ85Y5EcH6MpESVh/xlXpBHbWhPWad0nhVyyoKoqIOJTnnmx8THTCAKSWmetUwcC+hbwjWVwctOZsjfWssQV3Q6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=hotmail.com; dmarc=pass action=none header.from=hotmail.com; dkim=pass header.d=hotmail.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vNcNhJBD/vom3D9+TMHZqdz2zOw99gaV3Ed+PwwByq4=; b=KjV8Bc3XcWufgVFq/WoPHdsiHe/DlKZgtvc2l/APsQNb9ggK4IWQzTOD/FsoNQlob8IzsNOWoZEmG3XHUrReIEmLPcWFPcyAJ/gBLds+PlL6plTjFvtbPuI7fY7C94flviB8HAN5FpHdJH6oqqWm9oZU/d5xaDWOJeRUPUjX2uroYxdVWOYFuaZKJuSAeuMjw8nCLUA1QCDqOc+iaiFthoaD634Odem5EuvymmQJeyFx8bQfmMOrMbMYewRR2llXneVREPK7OzpqWFnNHENh/xIRQqOOVqk+ZEYhgw4VEQNRVLT20HhUmw06C9b1dP5mLLUhDKlfVQi23hOrpb5S1w== Received: from SG2APC01FT025.eop-APC01.prod.protection.outlook.com (2a01:111:e400:7ebd::4d) by SG2APC01HT186.eop-APC01.prod.protection.outlook.com (2a01:111:e400:7ebd::235) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2856.17; Tue, 31 Mar 2020 22:37:53 +0000 Received: from SL2PR06MB3225.apcprd06.prod.outlook.com (10.152.250.53) by SG2APC01FT025.mail.protection.outlook.com (10.152.250.187) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2856.17 via Frontend Transport; Tue, 31 Mar 2020 22:37:53 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:70E527439BC3A7A001A2ADF2842E77A27F4B884EEC4CF4BA09D82B96249CBAF3; UpperCasedChecksum:6B4465A6AB8983AC72860B8B90148A9BE68576F65DFE17ACF8D4CE9B47869CE3; SizeAsReceived:9006; Count:49 Received: from SL2PR06MB3225.apcprd06.prod.outlook.com ([fe80::fd38:8388:f41d:f979]) by SL2PR06MB3225.apcprd06.prod.outlook.com ([fe80::fd38:8388:f41d:f979%4]) with mapi id 15.20.2856.019; Tue, 31 Mar 2020 22:37:53 +0000 Subject: Re: root .history To: "J. Hellenthal" , Selphie Keller Cc: freebsd-security@freebsd.org, el kalin References: From: Tatsuki Makino Message-ID: Date: Wed, 1 Apr 2020 07:37:50 +0900 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.4 In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-ClientProxiedBy: TY2PR02CA0054.apcprd02.prod.outlook.com (2603:1096:404:e2::18) To SL2PR06MB3225.apcprd06.prod.outlook.com (2603:1096:100:3b::19) X-Microsoft-Original-Message-ID: MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from T4.test (218.229.246.57) by TY2PR02CA0054.apcprd02.prod.outlook.com (2603:1096:404:e2::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2878.15 via Frontend Transport; Tue, 31 Mar 2020 22:37:52 +0000 X-Microsoft-Original-Message-ID: X-TMN: [5XTBeddQsWm39emB3eY1eAkdLI8YbLJI] X-MS-PublicTrafficType: Email X-IncomingHeaderCount: 49 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-Correlation-Id: 4d6b652b-60ed-4b64-f19d-08d7d5c42610 X-MS-Exchange-SLBlob-MailProps: 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 X-MS-TrafficTypeDiagnostic: SG2APC01HT186: X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: KyZz5KPUQ+OHApNyLKvFbJU8Ju9HKR1Q3QpJxXZ58EVCtQZopcZt5Kk6WMQGYd6GvBr4ek4rBZKuqFItKeac6WKzQfZHeKZGmpk4zZIOWAGfO4z8Mwag7aRp7NGV8z9MduKJjqdio1FC2J/bFSouNWv5i5DGL9p214CB6h9wmwyYE0qWJxu+YvH/b137lSme X-MS-Exchange-AntiSpam-MessageData: OGvfdKBqqM8kLa+cyXclmwZ/cqiwNmv7nFgjwJMPira0wbTicps49v0wF+FfgPT3CzRMDlQHvHtqfPoROu7DZwBcd9d/wjDAOgbnLguGQbggIMhTHwdEMJ8GtuN3Jtm740g1CBLCOZXNLdbMjwLxPA== X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4d6b652b-60ed-4b64-f19d-08d7d5c42610 X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Mar 2020 22:37:52.9512 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2APC01HT186 X-Rspamd-Queue-Id: 48sPNv1hwBz3Hh6 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hotmail.com header.s=selector1 header.b=KjV8Bc3X; dmarc=pass (policy=none) header.from=hotmail.com; spf=pass (mx1.freebsd.org: domain of tatsuki_makino@hotmail.com designates 2a01:111:f400:febe::804 as permitted sender) smtp.mailfrom=tatsuki_makino@hotmail.com X-Spamd-Result: default: False [-1.50 / 15.00]; MIME_TRACE(0.00)[0:+]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FORGED_MUA_SEAMONKEY_MSGID_UNKNOWN(2.50)[]; R_DKIM_ALLOW(-0.20)[hotmail.com:s=selector1]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f400::/48]; FREEMAIL_FROM(0.00)[hotmail.com]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[text/plain]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TO_DN_SOME(0.00)[]; RCVD_COUNT_FIVE(0.00)[5]; IP_SCORE_FREEMAIL(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[hotmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[hotmail.com,none]; RCVD_TLS_LAST(0.00)[]; RECEIVED_SPAMHAUS_PBL(0.00)[57.246.229.218.khpj7ygk5idzvmvt5x4ziurxhy.zen.dq.spamhaus.net : 127.0.0.11]; FROM_EQ_ENVFROM(0.00)[]; FREEMAIL_ENVFROM(0.00)[hotmail.com]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; ARC_ALLOW(-1.00)[i=1]; IP_SCORE(0.00)[ipnet: 2a01:111:f000::/36(-4.03), asn: 8075(-3.13), country: US(-0.05)]; DWL_DNSWL_NONE(0.00)[hotmail.com.dwl.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2020 22:38:16 -0000 set savehist = (1000 merge) is broken from 6.21.00 or another before. You must run history -M before exiting tcsh. From owner-freebsd-security@freebsd.org Wed Apr 1 16:19:44 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 1C4AA278106 for ; Wed, 1 Apr 2020 16:19:44 +0000 (UTC) (envelope-from kalin@el.net) Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48srxd2bgrz4XhS for ; Wed, 1 Apr 2020 16:19:33 +0000 (UTC) (envelope-from kalin@el.net) Received: by mail-qk1-x72b.google.com with SMTP id v7so548197qkc.0 for ; Wed, 01 Apr 2020 09:19:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=el-net.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sDQGYuGV46kteXNYBu0V8UW+hqgv32K483lIFpcCB3g=; b=wLn4+nrkC98oLTQzNW3ZOqVfIytviORjl/WnPh6df56s4rgbFMZx+onL4IIZERVEfY emId5qmUTnLH7vIrwfQ346ZNfC+TWABWJIlCnxryR8LVytEXP4ByqndrUygxByuDYy5N FM5KjeNCNIqZdkPfgAFGylSjK+LHEEyMpzINVPFAFEv1kulusUFf4FLM0m3AZmmMekQ8 I8azYrhp3o8ywE7f7P+kJyik9SDaXC6kWcK4aHA3O1rg33d5xNao5Pz7DFZDNKWJnd2n p5yLOvGipScNEGJz1uQ6MRGfIdaqFOYF9Owp8xulMWNIzQrw2EvRBTHXeQt95/WRbnO1 X/iA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sDQGYuGV46kteXNYBu0V8UW+hqgv32K483lIFpcCB3g=; b=sxz0WSvnbhvMx6neaisK+eE7Igbf5NwcxZp/1PMtzjJCtOjSADCPHaj7vXaM6MDbfb 2jIPPC+Ypl14V3UAWX/lKPitm7C0/bWyYwKM19gCJsC8OnvoqImU35/izcRcwbFFmv5g EjJFSWR0hGIV0ZPLqqQ7/zL3fcmAyQxNH/1ReXqyY5s1zQyZTpPw1idnY/ArLJ4iJwEd sSd2aktG9DD/LyGSNtMPhWgeeiLf7yXiR7pxT7V40leqwlQwNOPjnIl/Wm24v6qFQomd BXSZRjKntg3Ga0QmwDdMddTfqZZYZdK2Hzi5rjOm/seyD7wfsD3ewo4McT2DfgdxqYa3 66IA== X-Gm-Message-State: ANhLgQ3ng2r65YqWRASc7IBZVIsHuGwOSb3nr+qhf3hhtxtekrRBF4V8 DYVkj/rDtZeFFNMpAzV5/7Bce38lwF522jmH8JbW X-Google-Smtp-Source: ADFU+vs3uzSF1cHB/g+PxLNSjBZA4+wzOWgWuLjvQi76TbE5Xy5jQ2zlv+jQMZT3OQ97CSAQju3pCax5sfaUV6nDg9E= X-Received: by 2002:a37:a484:: with SMTP id n126mr10343620qke.362.1585757962574; Wed, 01 Apr 2020 09:19:22 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: el kalin Date: Wed, 1 Apr 2020 12:19:11 -0400 Message-ID: Subject: Re: root .history To: Tatsuki Makino Cc: "J. Hellenthal" , Selphie Keller , freebsd-security@freebsd.org X-Rspamd-Queue-Id: 48srxd2bgrz4XhS X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=el-net.20150623.gappssmtp.com header.s=20150623 header.b=wLn4+nrk; dmarc=none; spf=pass (mx1.freebsd.org: domain of kalin@el.net designates 2607:f8b0:4864:20::72b as permitted sender) smtp.mailfrom=kalin@el.net X-Spamd-Result: default: False [-4.53 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[el-net.20150623.gappssmtp.com:s=20150623]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; TAGGED_RCPT(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-security@freebsd.org]; DMARC_NA(0.00)[el.net]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[el-net.20150623.gappssmtp.com:+]; RCVD_IN_DNSWL_NONE(0.00)[b.2.7.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; FREEMAIL_TO(0.00)[hotmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; IP_SCORE(-2.03)[ip: (-9.33), ipnet: 2607:f8b0::/32(-0.35), asn: 15169(-0.45), country: US(-0.05)]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2020 16:19:44 -0000 thanks to all... appreciate your replies... On Tue, Mar 31, 2020 at 6:37 PM Tatsuki Makino wrote: > set savehist = (1000 merge) is broken from 6.21.00 or another before. > You must run history -M before exiting tcsh. >