From owner-freebsd-current@FreeBSD.ORG Wed Jun 6 16:28:57 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9EB9616A41F for ; Wed, 6 Jun 2007 16:28:57 +0000 (UTC) (envelope-from volker@vwsoft.com) Received: from frontmail.ipactive.de (frontmail.maindns.de [85.214.95.103]) by mx1.freebsd.org (Postfix) with ESMTP id 37C7E13C4C4 for ; Wed, 6 Jun 2007 16:28:56 +0000 (UTC) (envelope-from volker@vwsoft.com) Received: from mail.vtec.ipme.de (Q7cb2.q.ppp-pool.de [89.53.124.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by frontmail.ipactive.de (Postfix) with ESMTP id 2214112883F; Wed, 6 Jun 2007 18:11:42 +0200 (CEST) Received: from cesar.sz.vwsoft.com (unknown [192.168.18.3]) by mail.vtec.ipme.de (Postfix) with ESMTP id B43E13F9E5; Wed, 6 Jun 2007 18:10:50 +0200 (CEST) Message-ID: <4666DC8F.9040309@vwsoft.com> Date: Wed, 06 Jun 2007 18:10:55 +0200 From: Volker User-Agent: Thunderbird 2.0.0.0 (X11/20070528) MIME-Version: 1.0 To: Max Laier References: <20070417153357.GA1335@seekingfire.com> <200704182213.50663.max@love2party.net> <20070418214855.GQ1225@seekingfire.com> <200706061629.21923.max@love2party.net> In-Reply-To: <200706061629.21923.max@love2party.net> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-VWSoft-MailScanner: Found to be clean X-MailScanner-From: volker@vwsoft.com X-ipactive-MailScanner-Information: Please contact the ISP for more information X-ipactive-MailScanner: Found to be clean X-ipactive-MailScanner-From: volker@vwsoft.com X-Mailman-Approved-At: Wed, 06 Jun 2007 18:23:50 +0000 Cc: freebsd-current@freebsd.org, freebsd-pf@freebsd.org Subject: Re: USER/GROUP rules on the chopping Block [ Re: Panic on boot with April 16 src (lengthy info attached) ] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jun 2007 16:28:57 -0000 On 06/06/07 16:29, Max Laier wrote: > After several attempts to fix user/group rules which ended like the most > recent one - cited below - with *ZERO* feedback, I won't waste anymore > effort. Either somebody steps up, does proper testing and reports back, > or user/group rules go! End of story! > > This is not personal against Tillman - he just happend to be the most > recent one to hit the problem. > > On Wednesday 18 April 2007, Tillman Hodgson wrote: >> On Wed, Apr 18, 2007 at 10:13:42PM +0200, Max Laier wrote: >>> On Wednesday 18 April 2007 21:28, Tillman Hodgson wrote: >>>> Oh, interesting! I'm rebuilding right now with that option :-) >>>> I'll report back in a few days how it goes. >>> Actually, could you test this? It should enable the hack on the fly >>> as a user/group rule is added. See "sysctl debug.pfugidhack" or >>> "pfctl -x misc" to confirm it's on. >> Sure, I've restarted the build with this patch. > > and again ... the thread ends here - zero feedback received :-( Does > anyone care about user/group rules at all? If so - speak up now or I'll > just disable them with the upcoming update!!! > > Max, despite the fact I'm lacking a lot of your responses, I really do understand the fact that you're pissed about doing something but not getting responses. And I really appreciate your work! I wasn't aware of the fact that user/group rules have been discussed in detail (I must have missed that topic somehow or it hasn't happened in pf@). To your question, I do care about that topic, I'm able to to beta tests and check things out. Also I do have the machines to check things in a safe environment, if needed. If you have something to checkout, I will be happy to check it out and feed back to you (if you're talking to me... again, I haven't received any responses for weeks from you). If you still care about user/group based rules, keep me up to date (I'm not on current@) and I'll beta test for you and give you any needed feed back. >From my view, the response issue can somewhat been seen as the core team sitting on an island and the user base is far, far away of them. Volker