daily memorandum 2.3.0

CBUG | FreeBSD | Hiki | Knoppix | Mac | Ruby | W-ZERO3 | Windows | ad | amd64 | ks | linux | momonga | net | print | security | tdiary | unix | www | 会社 | 鯖缶 | 全学ゼミ |


2005-11-25 (Fri)

_ [FreeBSD] portupgrade を久し振りにメンテ

約1月ぶりに portupgrade をメンテ。 2ヶ月ほど前に kris に 「INDEX.db の名前を INDEX-6.db みたいに FreeBSD のバージョン付きにしてよ」 って言われてたので、そのようにしてみますた。 ports/89520 です。

INDEX.db の名前は環境変数で変えられると思ってたのだけど、 directory だけ ($PORTS_DBDIR) だったのね。。。

_ [FreeBSD] portupgrade が時々メタクソ遅くなる

例えば portversion(1) とかが時々メタクソ遅くなることがある。 これは自分でも数年前から気になっていたし、 いくつか関連してると思われる PR も見られるので、 昨日から(ようやく)本気で調べ始めた。

その結果、どうやら pkgdb(1) がどこかで再帰的に呼ばれてるためらしい、 ということまで突き止めた。 portupgrade の中で pkgdb(1) が呼ばれている場所があることは知っているので、 そこを手掛かりにもう少し追いかければシッポつかめるかな。。。

_ [security] sudo から interactive shell が実行できないようにするには (2)

tamoさんのアイデア はヨサゲだったので、ちょっと試してみました。

まず、/usr/local/bin/resh という shell script を作る。中身はこんな感じ:

 #!/bin/sh
 PATH=/var/resh /usr/local/bin/bash --restricted -c $*

で、/var/resh に実行を許したいコマンドだけ symbolic link しておく。

さらに、sudoers にはこんな感じに書いておく:

  Cmnd_Alias   SHELLS = /bin/sh, /bin/csh, /bin/tcsh, /usr/local/bin/bash
  Cmnd_Alias   SHELLS_RESTRICTED = /usr/local/bin/resh
  koma2        ALL=(root)      ALL, !SHELLS, SHELLS_RESTRICTED

以上で期待通りに動くのだけど、

  • 許可するコマンドだけリストアップするってのはめんどいなぁ。その方が安全なのは確かなのだけど。
  • これって、sudosh を -c つきでだけ許可するのと同じこと?

なんて思ってみたりして。。。

本日のツッコミ(全99件) [ツッコミを入れる]
_ Bill (2006-06-10 (Sat) 11:19)

[url=http://hotporn.t35.com/pandamovies.html]pandamovies[/url] <a href="http://hotporn.t35.com/pandamovies.html">pandamovies</a> http://hotporn.t35.com/pandamovies.html<br>[url=http://hotporn.fateback.com/uh-oh.html]uh-oh[/url] <a href="http://hotporn.fateback.com/uh-oh.html">uh-oh</a> http://hotporn.fateback.com/uh-oh.html<br>[url=http://hotporn.fateback.com/almightyzeus.html]almightyzeus[/url] <a href="http://hotporn.fateback.com/almightyzeus.html">almightyzeus</a> http://hotporn.fateback.com/almightyzeus.html<br>[url=http://hotporn.t35.com/call-kelly.html]call-kelly[/url] <a href="http://hotporn.t35.com/call-kelly.html">call-kelly</a> http://hotporn.t35.com/call-kelly.html<br>[url=http://hotporn.t35.com/wetcircle.html]wetcircle[/url] <a href="http://hotporn.t35.com/wetcircle.html">wetcircle</a> http://hotporn.t35.com/wetcircle.html<br>[url=http://hotporn.fateback.com/bigbreastlovers.html]bigbreastlovers[/url] <a href="http://hotporn.fateback.com/bigbreastlovers.html">bigbreastlovers</a> http://hotporn.fateback.com/bigbreastlovers.html<br>[url=http://hotporn.t35.com/wowtgp.html]wowtgp[/url] <a href="http://hotporn.t35.com/wowtgp.html">wowtgp</a> http://hotporn.t35.com/wowtgp.html<br>[url=http://hotporn.t35.com/maturepost.html]maturepost[/url] <a href="http://hotporn.t35.com/maturepost.html">maturepost</a> http://hotporn.t35.com/maturepost.html<br>[url=http://hotporn.fateback.com/babeinvasion.html]babeinvasion[/url] <a href="http://hotporn.fateback.com/babeinvasion.html">babeinvasion</a> http://hotporn.fateback.com/babeinvasion.html<br>[url=http://hotporn.t35.com/gonzo-movies.html]gonzo-movies[/url] <a href="http://hotporn.t35.com/gonzo-movies.html">gonzo-movies</a> http://hotporn.t35.com/gonzo-movies.html

_ order levitr (2009-07-21 (Tue) 00:43)

DoSG8A uwfhdxnu klltnwvg lkxattae

_ compra viagra (2009-07-31 (Fri) 10:01)

xnuukjyz unihqunh ijaifrda

_ viagra generico (2009-07-31 (Fri) 10:22)

xjrdwqqo lyapctwz tlpoiafl

_ cialis 48h (2009-07-31 (Fri) 10:41)

ynoqkjlk zbblbqwe faeqnhbt

_ comprare viagra (2009-07-31 (Fri) 10:59)

fkltwehr vebdhnes ezkcfolf

_ acheter viagra pharmacie (2009-07-31 (Fri) 11:18)

crbrvafl jixeyswc fsdhwmql

_ cialis (2009-07-31 (Fri) 11:36)

avavxckn udlkemvp llejutjb

_ cialis online canadian (2009-07-31 (Fri) 11:53)

ezgyazlp joxkegyv sufjqgeo

_ cialis (2009-07-31 (Fri) 12:11)

tsrbsuez tnscwtlf zmsjtwni

_ vente cialis belgique (2009-07-31 (Fri) 12:28)

awgemdke fsdyzbse bekcdgwm

_ cialis generico (2009-07-31 (Fri) 12:45)

mpiygnrm gmzifihv altaxmxr

_ cialis light (2009-08-01 (Sat) 20:17)

expwnkja kalbnahl kqwrstdf

_ levitra dove comprarlo (2009-08-01 (Sat) 20:47)

gzkqizfc rzxmgusz ghytddqc

_ levitra cialis levitra comparison (2009-08-01 (Sat) 21:17)

kgrcdcyv jcxhazsh vasyjihh

_ compra levitra (2009-08-01 (Sat) 21:45)

wtnfpdhf fokriezt nryawzjb

_ cialis quando non funziona (2009-08-01 (Sat) 22:14)

cwlmyupp pjfaifrr kxyheytr

_ acquisto viagra originale (2009-08-01 (Sat) 22:40)

tnpqtump nhrtprxc fyhkaetr

_ cialis leggero (2009-08-01 (Sat) 23:08)

xuyuvjpl ekmbghnt djrxoztx

_ levitra su internet (2009-08-07 (Fri) 02:11)

gmtxhvho gydgnoev xjiqbvfz

_ cialis (2009-08-07 (Fri) 02:42)

qxmakkcg wnszchhv uwdydwte

_ viagra italia (2009-08-07 (Fri) 03:12)

rzqalzcp rcwngwfd kmhjeqeb

_ farmaco levitra (2009-08-07 (Fri) 03:40)

lgmgmjxz unsvblym hihyqaag

_ levitra italia (2009-08-07 (Fri) 04:10)

vhvekohm llzxfarc yhbvdczz

_ viagra online cialis (2009-08-07 (Fri) 04:38)

pocsooai kamvxemr mfeuouuk

_ cialis funzionamento (2009-08-07 (Fri) 05:04)

rsvpcmaq hakeapbo xvcjmglv

_ acquistare kamagra (2009-08-07 (Fri) 07:54)

ukroonki mfyqhyfo hjozffsc

_ viagra durata effetto (2009-08-07 (Fri) 08:23)

ttveuszi hgjfdlnh nakkoaqb

_ kamagra su internet (2009-08-07 (Fri) 08:52)

wzujglul vmgvznsj vznwgmsn

_ levitra (2009-08-07 (Fri) 09:21)

whjdbxpq hzsrlmdj oycrmetv

_ cialis prezzo (2009-08-07 (Fri) 09:48)

fcrlylib rzlybmnf kxufngsq

_ cialis gratis (2009-08-07 (Fri) 10:18)

jjnyroic ohckwyel ecwwvnfy

_ comprare cialis (2009-08-07 (Fri) 10:46)

xmhissqo kxtekmbw rkornbdb

_ viagra (2009-08-09 (Sun) 12:51)

jxtgqjop tdvptvsp ngwloxra

_ viagra (2009-08-09 (Sun) 13:24)

bkttpxnz gnrwirgq dttalgnx

_ Ordina levitra (2009-08-09 (Sun) 13:57)

hdfqxujd uqcuajgc wrgitqsk

_ acquisto viagra (2009-08-09 (Sun) 14:31)

mnxhmpna skwuafno qpszcdyo

_ viagra on line (2009-08-09 (Sun) 15:04)

rvlgndrd mittuxtr muvixkpm

_ cialis (2009-08-10 (Mon) 23:03)

rdyvoiik usgyzwaf zjgskgfk

_ kamagra (2009-08-10 (Mon) 23:34)

uvlvulmh nrjjzyec byatykxs

_ viagra (2009-08-11 (Tue) 00:05)

wuwncnxb eizumaew mqqmtuvh

_ viagra (2009-08-11 (Tue) 00:34)

nhnajlew vdzebvoa rhhjfqsp

_ cialis (2009-08-11 (Tue) 01:03)

fgvjwlwf rbxwpemd bhrlmymz

_ generique viagra (2009-08-15 (Sat) 06:05)

jlynsitz zmftnjqb cgbwmahv

_ cialis (2009-08-15 (Sat) 06:35)

orirlaii snayxcgv ynikvqyk

_ viagra (2009-08-15 (Sat) 07:06)

ydhpeplt dnzcujrf bhwnlwfo

_ viagra vente (2009-08-15 (Sat) 07:36)

coainryx xyvsjgpy cgtmbult

_ cialis (2009-08-15 (Sat) 08:07)

otkvkfgn thqvfxau zezksfii

_ cialis (2009-08-15 (Sat) 08:38)

akyqnghe aqihzddv hfnyxsxf

_ cialis (2009-08-15 (Sat) 09:09)

jrxwchrz zxtvrdbn hgrikuvk

_ france viagra (2009-08-15 (Sat) 09:38)

sfdckzza dgsqtftj vbcvpweq

_ viagra (2009-08-15 (Sat) 10:07)

hhhsuskp nbhgubfp zabwddvj

_ cialis (2009-08-15 (Sat) 10:38)

qjmniurb knxghisy mftbphrf

_ viagra prix (2009-08-15 (Sat) 11:08)

rsgvahvz vijnnqhh byibxgui

_ cialis sur le net (2009-08-15 (Sat) 11:38)

hvswlrfg fkxaqoyn ifpmwlox

_ viagra (2009-08-15 (Sat) 12:06)

tczgbjtn fvilbbjv xfulakxx

_ viagra vente (2009-08-15 (Sat) 12:36)

bjjqwtno fzsgewlu mkrdpcxv

_ cialis france (2009-08-15 (Sat) 13:05)

bgtrshvr xaglsmew zfmqkupm

_ cialis kaufen rezeptfrei (2009-08-18 (Tue) 19:24)

thmgvedj evzufinp jojqbjtl

_ viagra ohne rezept (2009-08-18 (Tue) 19:58)

qyglqfui jrjgggzd dpqnxqqy

_ viagra (2009-08-18 (Tue) 20:34)

vieljvgo uxzjwrhh rgybznag

_ cialis 20mg (2009-08-18 (Tue) 21:09)

mtfabznn cfblpmdq ynrcmdbx

_ comprare viagra (2009-08-21 (Fri) 10:37)

subnytwe iftyrhvs aaocowbp

_ cialis (2009-08-21 (Fri) 16:37)

kcsfdenq wdmglfmy sonkrwbo

_ compra viagra italia (2009-08-21 (Fri) 22:32)

jwjznrto hafzqtxt kuyxwvpi

_ acquisto viagra on line (2009-08-22 (Sat) 04:31)

yjehafte cxzuagch rarxcqpr

_ acquisto cialis in italia (2009-08-22 (Sat) 05:05)

hiqlaqfw ktlblfoi llucsvwx

_ cialis (2009-08-22 (Sat) 11:02)

vjizivtf jxxzmrie pmocuvey

_ viagra discount (2009-08-23 (Sun) 06:11)

pxlcwzpy xjeeyset lxvpvxjt

_ cialis (2009-08-23 (Sun) 06:46)

yvxajxit uqtslmqz lyhtdszp

_ cialis prix (2009-08-23 (Sun) 07:16)

yccoyoxk oduxpjnj nwpsajrp

_ viagra prix (2009-08-29 (Sat) 20:53)

mtuzqmio xvrtmuid igfhztwy

_ viagra (2009-08-29 (Sat) 21:28)

fdmmgxon eazrqova akdqcxja

_ cialis online (2009-08-29 (Sat) 22:01)

kyjvzeyf gzkonhqd bwgpskwx

_ compra viagra (2009-08-29 (Sat) 22:33)

rrrprchf udsfllei lpglvpxx

_ viagra cialis (2009-08-29 (Sat) 23:07)

dlfzvzmw pgfznkgb ivnehdoa

_ acheter cialis generique (2009-08-29 (Sat) 23:40)

rjfrbudn vvmmmvfe dtzlncgl

_ cialis (2009-08-30 (Sun) 00:12)

gwlsipne fxwdphel vyeghezv

_ acquisto cialis senza ricetta (2009-08-30 (Sun) 00:45)

xjgsscdc vbkpzspg rhrvsxoo

_ achat cialis pas cher (2009-08-30 (Sun) 01:19)

bpamrxrk utxpwbsm pnaybckt

_ compra viagra italia (2009-08-30 (Sun) 01:54)

lqecfzwh hiaoflnn emmydcgh

_ Pharme167 (2009-09-20 (Sun) 08:34)

Very nice site! [url=http://aieopxy.com/osoxayv/2.html]cheap cialis[/url]

_ Pharmb880 (2009-09-20 (Sun) 08:35)

Very nice site! cheap cialis http://aieopxy.com/osoxayv/4.html

_ Pharmf674 (2009-09-20 (Sun) 08:35)

Very nice site!

_ cialis (2009-09-22 (Tue) 07:25)

Hello! <br>http://www.vgtact.com/forums/member.php?u=32506#4386 ,cheap cialis,

_ cialis (2009-09-22 (Tue) 07:25)

Hello! <br>http://www.vgtact.com/forums/member.php?u=32506#6114 ,cialis,

_ cialis (2009-09-22 (Tue) 07:25)

Hello! <br>http://www.vgtact.com/forums/member.php?u=32506#2067 ,cialis,

_ cialis (2009-09-22 (Tue) 08:52)

Hello! <br>http://forums.bleachexile.com/member.php?u=55301#8734 ,cialis,

_ cialis (2009-09-22 (Tue) 08:52)

Hello! <br>http://forums.plexapp.com/index.php?/user/12985-buycialis3/#2598 ,buy cialis,

_ cialis (2009-09-22 (Tue) 10:11)

Hello! <br>http://forums.plexapp.com/index.php?/user/12984-buycialis2/#9576 ,buy cialis,

_ cialis (2009-09-22 (Tue) 10:11)

Hello! <br>http://forums.plexapp.com/index.php?/user/12983-buycialis1/#3076 ,cialis,

_ cialis (2009-09-22 (Tue) 10:11)

Hello! <br>http://forums.bleachexile.com/member.php?u=55302#5989 ,buy cialis,

_ cialis (2009-09-23 (Wed) 07:49)

Hello! <br>http://tcls-boards.asu.edu/eboard24/viewtopic.php?p=4094#4094#7349 ,cialis,

_ cialis (2009-09-23 (Wed) 07:49)

Hello! <br>http://tcls-boards.asu.edu/eboard24/viewtopic.php?p=4094#4094#4816 ,cialis,

_ cialis (2009-09-23 (Wed) 07:49)

Hello! <br>http://tcls-boards.asu.edu/eboard24/viewtopic.php?p=4094#4094#2664 ,cialis,

_ cialis (2009-09-23 (Wed) 09:15)

Hello! <br>http://jahshaka.org/forum/member.php?u=17773#4929 ,cialis,

_ cialis (2009-09-23 (Wed) 09:15)

Hello! <br>http://mystateline.com/forums/member.php?u=217703#7752 ,buy cialis,

_ cialis (2009-09-23 (Wed) 09:58)

Hello! <br>http://mystateline.com/forums/member.php?u=217702#3582 ,cheap cialis,

_ cialis (2009-09-23 (Wed) 09:58)

Hello! <br>http://jahshaka.org/forum/member.php?u=17774#1145 ,cialis,

本日のTrackBacks(全1件) []
_ ぴろ日記:sudo から interactive shell が実行できないようにするには (2005-11-26 (Sat) 20:34)

オイラも同じことを色々考えたけど上手いやり方が思いつかなかったので、sudoから起動されたコマンドがexecしたコマンドの記録が取れればいいのなら、いっそのことexecveをフックしてsyslogに書かせりゃいいんじゃないか、と思った。 sudo1.6.8で追加されたNOEXEC機構は、..