From owner-freebsd-stable@FreeBSD.ORG  Mon Jul  4 12:44:53 2011
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 58CA6106564A
	for <stable@freebsd.org>; Mon,  4 Jul 2011 12:44:53 +0000 (UTC)
	(envelope-from oliver.pntr@gmail.com)
Received: from mail-wy0-f196.google.com (mail-wy0-f196.google.com
	[74.125.82.196])
	by mx1.freebsd.org (Postfix) with ESMTP id E0B858FC08
	for <stable@freebsd.org>; Mon,  4 Jul 2011 12:44:52 +0000 (UTC)
Received: by wyh11 with SMTP id 11so1232070wyh.7
	for <stable@freebsd.org>; Mon, 04 Jul 2011 05:44:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=mime-version:in-reply-to:references:date:message-id:subject:from:to
	:cc:content-type;
	bh=LDrJO4mpHPhR2SW5UirhQNletWTWbjGGM22qL7Lj95c=;
	b=miVu1k1dDr9wJh4Ns1ppd24zeqLlDBibCGLV5tXZ1o7WY5+JNjmGE1Gz5L3TRyfGy7
	/QNyzupxBps9BdJ6hAXtpM0P+R1km5e0vXH3MTNiX1YQ74WtoPB/aE4wM5ez8m4CnOXD
	ZfXiYzZhU2IVtR3EFn/SegVmC8r+XpTh1vL0w=
MIME-Version: 1.0
Received: by 10.227.2.81 with SMTP id 17mr5468154wbi.15.1309782644769; Mon, 04
	Jul 2011 05:30:44 -0700 (PDT)
Received: by 10.227.209.209 with HTTP; Mon, 4 Jul 2011 05:30:44 -0700 (PDT)
In-Reply-To: <CABfUBAzMPP1s08ER837_v-jZLNOhra+P8+78ovikYSPYqnDw4g@mail.gmail.com>
References: <CABfUBAzMPP1s08ER837_v-jZLNOhra+P8+78ovikYSPYqnDw4g@mail.gmail.com>
Date: Mon, 4 Jul 2011 14:30:44 +0200
Message-ID: <CAPjTQNG7s+5XhWytsOYrmWMNxSuccqVCctEt_JkRbkk9GKm3pQ@mail.gmail.com>
From: Oliver Pinter <oliver.pntr@gmail.com>
To: Eugene Kim <astralblue@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: stable@freebsd.org
Subject: Re: Request for MFC r215299: Echoing asterisks for GELI passphrase
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jul 2011 12:44:53 -0000

Hi Eugene,

Just a note:

The /var/run/dmesg.boot file is world readable by default ;)

opv@pandora-d ~> dmesg
dmesg: sysctl kern.msgbuf: Operation not permitted
opv@pandora-d ~> tail -n 5 /var/run/dmesg.boot
pcm4: <HDA Analog Devices AD1989B PCM #3 Digital> at cad 0 nid 1 on hdac1
SMP: AP CPU #1 Launched!
SMP: AP CPU #2 Launched!
SMP: AP CPU #3 Launched!
Trying to mount root from ufs:/dev/ufs/deskroot
opv@pandora-d ~> ll /var/run/dmesg.boot
-rw-r--r--  1 root  wheel  10619 Jul  1 19:30 /var/run/dmesg.boot


On 7/4/11, Eugene Kim <astralblue@gmail.com> wrote:
> Greetings,
>
> Could someone please MFC r215299?  This commit enhances a workaround
> for a long-standing bug (kern/105368) and is pretty much required for
> any production system affected by the bug.  (Without the patch, anyone
> that can run dmesg can see the passphrase entered for the root
> filesystem. ;_;)
>
> Regards,
> Eugene Kim
> _______________________________________________
> freebsd-stable@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
>