April 2007 - Darwin-dev - lists.apple.com

Re: Equivalent of get_random_bytes?
by Alex v. Below 19 Apr '07

19 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thanks, no, read_random() is what I was looking for Alex Am 19.04.2007 um 22:11 schrieb Paul Nelson: I think this is what the poster had in mind: openssl rand -out foo.dat 1024 makes a file containing 1024 bytes You can also base64 it: openssl rand -base64 1024 | wc Also, see 'man rand' Paul Nelson Thursby Software Systems, Inc. on 4/19/07 2:45 PM, Michael Smith at msmith(a)freebsd.org wrote: is there an equivalent for Linux' get_random_bytes (1) other than reading /dev/random on darwin? If you are inside the kernel, the BSD symbolset exports read_random() in <sys/random.h>. In userspace, just read from /dev/random. This email sent to nelson(a)thursby.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/nelson% 40thursby.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/newsletters% 40vonbelow.com This email sent to newsletters(a)vonbelow.com This email sent to site_archiver(a)lists.apple.com

1 0

Re: Equivalent of get_random_bytes?
by Paul Nelson 19 Apr '07

19 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Thread-index: AceCvvsCOb3WuO6yEduE0AAWy4i6sA== Thread-topic: Equivalent of get_random_bytes? User-agent: Microsoft-Entourage/11.3.3.061214 I think this is what the poster had in mind: openssl rand -out foo.dat 1024 makes a file containing 1024 bytes You can also base64 it: openssl rand -base64 1024 | wc Also, see 'man rand' Paul Nelson Thursby Software Systems, Inc. on 4/19/07 2:45 PM, Michael Smith at msmith(a)freebsd.org wrote: > >> is there an equivalent for Linux' get_random_bytes (1) other than >> reading /dev/random on darwin? > > If you are inside the kernel, the BSD symbolset exports read_random() > in <sys/random.h>. > > In userspace, just read from /dev/random. > > = Mike > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/nelson%40thursby.com > > This email sent to nelson(a)thursby.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Equivalent of get_random_bytes?
by Michael Smith 19 Apr '07

19 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com is there an equivalent for Linux' get_random_bytes (1) other than reading /dev/random on darwin? In userspace, just read from /dev/random. = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… If you are inside the kernel, the BSD symbolset exports read_random() in <sys/random.h>. This email sent to site_archiver(a)lists.apple.com

1 0

Re: launchd agent for securing mail through ssh tunnel
by Nicola Vitacolonna 19 Apr '07

19 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com ssh -L 1200:localhost:25 ... My plist looks like this: Based on my tests, I can make a few remarks: Nicola _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Hi, I have finally been able to make it work! I post my solution because I think it may be interesting for others - there are a couple of points about which I have found no discussion on the web (I am using Mac OS X Tiger). First of all, as it has already pointed out, a workaround is needed to make ssh and launchd interoperate: a tunnel established with -L, e.g. does not work properly within launchd. The workaround consists in connecting the std in/out of the processes and adding a command (I have used nc) in the public key on the server, which forwards the connection to the mail server. Since this topic is easily found by Google I will step forward. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http:// www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>my.smtp.mail.service</string> <key>OnDemand</key> <true/> <key>Program</key> <string>/usr/bin/ssh</string> <key>ProgramArguments</key> <array> <string>ssh</string> <string>-T</string> <string>-i</string> <string>/Users/myself/.ssh/my-ssh-key</string> <string>myself@ my.mail.server</string> </array> <key>RunAtLoad</key> <false/> <key>ServiceDescription</key> <string>SSH tunnel from localhost:1200 to my.mail.server:25</string> <key>Sockets</key> <dict> <key>Listeners</key> <dict> <key>SockServiceName</key> <string>1200</string> <key>SockType</key> <string>stream</string> </dict> </dict> <key>inetdCompatibility</key> <dict> <key>Wait</key> <false/> </dict>  <key>StandardErrorPath</key> <string>/dev/null</string> </dict> </plist> 1) the inetdCompatibility is mandatory, and Wait must be false; 2) the InitGroups key may be either true or false (in my tests it does not make any difference). 3) IMPORTANT: the StandardErrorPath key is mandatory (that's what I was missing!). As soon as I have redirected the standard error elsewhere, things have started to work flawlessly. The plist can be put in a user's ~/Library/LaunchAgents folder, of course, and loaded with the user's permissions. This email sent to site_archiver(a)lists.apple.com

1 0

[darwin-dev] Equivalent of get_random_bytes?
by Alexander v. Below 19 Apr '07

19 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Doubt on calling IFNET_INPUT
by Anees Alappat 19 Apr '07

19 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; b=QhgzgrrYCC4uMSS3FSDS+PP1/NPzQZrt3CJvKcMbq5q9qK20jLXY1Kd9ZSH36MyfDJuFgYCMg6n4coMwdTVbzwXTnKf396oEuwtR2B73ReWBZB0+sfPFMCqf8GxKVMOTw948S4RY9m9/DH7CXOpRg+jU8cb66joJObxly1UQ6wg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type; b=jrlj2VHjKo7TqyAiNKSsfTSqrt/R6aGzKmu40FfCxcCMm9aFd13NEqkJbt1iWxRREvmu/9Nus6n9x+Zp5hnQq+JWuEmxfwllOMKpzzYBSAOYNtUIsbDp0rIqCeWIfZvW28LyTEDfHirFkBT7UqFfWwhlhAOxTe56yDE+LrAWqa4= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Darwin 8.9 Source Code Available
by Graham J Lee 18 Apr '07

18 Apr '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com On 18 Apr 2007, at 02:45, Kevin Van Vechten wrote: <http://www.opensource.apple.com/darwinsource/10.4.9.ppc/> <http://www.opensource.apple.com/darwinsource/10.4.9.x86/> Cool! Thanks :-) Graham. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… The Darwin team is pleased to announce the availability of the source code for Darwin 8.9. These sources correspond to Mac OS X 10.4.9 for both PowerPC- and Intel-based Macintoshes. The sources are available at: This email sent to site_archiver(a)lists.apple.com

1 0

Re: launchd agent for securing mail through ssh tunnel
by James Peach 18 Apr '07

18 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Aor57x+BMewV7hG4r5xebJ9V4uKEd9Ltt6hfP+ikF7PaaM/0kX9m7NiDRPnMIDD4B2IGszY3NvTgZ6ShbA/MoQ4iZKPMPRT8rAR3oq+jqDs6dPm3NxxJrd8GJwf4qvaFmVoRQk61PKsGnamkyo2/MvIYg0v/WWsLjOr1snNJsOI= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=qlLI2WE+DqUjIJstm5W6nb36lp9Cz7pN0iNQJFTmkjkTAXRQdTdPp5TKP+jd6w6URakpazD6C5ZYuEp171gJT0uEHJbKmWpyzvUii9ZJcJ+rDuviPZ43iH3Bz5cY82Kt7vzjmgBCICgkWd0/2V5pEmxoECaXErMrkHp0V2HlLYg= On 13/apr/07, at 22:01, James Peach wrote: > On 13/04/07, Nicola Vitacolonna <vitacolo(a)dimi.uniud.it> wrote: >> Hi, >> I use to read email through an ssh tunnel and I want to turn the task >> into an on-demand launchd user agent. So far, I have come out with >> the following, "nearly working", solution: >> <snip> >> I have a couple of problems, though: > > Ar you sure that ssh isn't prompting? Yes, pretty sure. I have tried from the Terminal. > > Remove the RunAtLoad key? It should not make any difference: RunAtLoad is false by default. > I use this with Mail.app, and it works just fine: > <?xml version="1.0" encoding="UTF-8"?> > <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" > "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> > <plist version="1.0"> > <dict> > <key>Label</key> > <string>my.mail.service</string> > <key>Program</key> > <string>/usr/bin/ssh</string> > <key>ProgramArguments</key> > <array> > <string>/usr/bin/ssh</string> > <string>-L</string> > <string>9025:mailserver:25</string> > <string>jpeach@mailserver</string> > <string>imapd</string> yes I tunnel mail through ssh directly to imapd on the remote system where I have a shell account. the remote system only allows ssh access. > </array> > <key>inetdCompatibility</key> > <dict> > <key>Wait</key> > <false/> > </dict> > <key>Sockets</key> > <dict> > <key>Listeners</key> > <dict> > <key>SockNodeName</key> > <string>localhost</string> > <key>SockServiceName</key> > <integer>9220</integer> 9025 is for outgoing mail (smtp) , 9220 is for incoming mail (imap). This connects my local port 9220 directly to imapd's stdin via ssh. > <key>SockType</key> > <string>stream</string> > <key>SockFamily</key> > <string>IPv4</string> > </dict> > </dict> > <key>Debug</key> > <true/> and yet it works :) -- James Peach | jorgar(a)gmail.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On 18/04/07, Nicola Vitacolonna <vitacolo(a)dimi.uniud.it> wrote: Have you set up a passwordless account? Why are you executing imapd? This is not the same port as the tunnel's port (9025). Your solution does not seem correct. This email sent to site_archiver(a)lists.apple.com

1 0

Re: launchd agent for securing mail through ssh tunnel
by Nicola Vitacolonna 18 Apr '07

18 Apr '07

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On 13/apr/07, at 22:01, James Peach wrote: Hi, I use to read email through an ssh tunnel and I want to turn the task into an on-demand launchd user agent. So far, I have come out with the following, "nearly working", solution: <snip> I have a couple of problems, though: It should not make any difference: RunAtLoad is false by default. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>my.mail.service</string> <key>Program</key> <string>/usr/bin/ssh</string> <key>ProgramArguments</key> <array> <string>/usr/bin/ssh</string> <string>-L</string> <string>9025:mailserver:25</string> <string>jpeach@mailserver</string> <string>imapd</string> Have you set up a passwordless account? Why are you executing imapd? </array> <key>inetdCompatibility</key> <dict> <key>Wait</key> <false/> </dict> <key>Sockets</key> <dict> <key>Listeners</key> <dict> <key>SockNodeName</key> <string>localhost</string> <key>SockServiceName</key> <integer>9220</integer> This is not the same port as the tunnel's port (9025). <key>SockType</key> <string>stream</string> <key>SockFamily</key> <string>IPv4</string> </dict> </dict> <key>Debug</key> <true/> Nicola _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On 13/04/07, Nicola Vitacolonna <vitacolo(a)dimi.uniud.it> wrote: Ar you sure that ssh isn't prompting? Yes, pretty sure. I have tried from the Terminal. Remove the RunAtLoad key? I use this with Mail.app, and it works just fine: Your solution does not seem correct. Jay's explanation in a previous mail was very clear, but unfortunately, my search was no luck. The only "workaround" I have found is of the kind explained at http://cg.scs.carleton.ca/~morin/ misc/laptopmail. But even that solution does not work for me (I have also tried to use xinetd, but without success). Maybe using launchd with stunnel may be worth trying? Has anyone experience with it? This email sent to site_archiver(a)lists.apple.com

1 0

Darwin 8.9 Source Code Available
by Kevin Van Vechten 18 Apr '07

18 Apr '07

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com <http://www.opensource.apple.com/darwinsource/10.4.9.ppc/> <http://www.opensource.apple.com/darwinsource/10.4.9.x86/> _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… The Darwin team is pleased to announce the availability of the source code for Darwin 8.9. These sources correspond to Mac OS X 10.4.9 for both PowerPC- and Intel-based Macintoshes. The sources are available at: -- Kevin Van Vechten <kvv(a)apple.com> Apple Inc. This email sent to site_archiver(a)lists.apple.com

1 0