From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <9front-bounces@9front.inri.net>
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.0 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI autolearn=ham autolearn_force=no version=3.4.4
Received: from 9front.inri.net (9front.inri.net [168.235.81.73])
	by inbox.vuxu.org (Postfix) with ESMTP id DB08A28965
	for <ml@inbox.vuxu.org>; Sun,  7 Jul 2024 17:03:56 +0200 (CEST)
Received: from berlin.kesim.org ([159.69.178.44]) by 9front; Sun Jul  7 11:02:22 -0400 2024
Received: (qmail 113307 invoked by uid 112); 7 Jul 2024 15:02:20 -0000
Received: from unknown (HELO kesim.org) (oec@2a02:8106:4:4000:2c4d:7ae9:934:d6bc)
  by 2a01:4f8:c010:1226::1 with ESMTPA; 7 Jul 2024 15:02:20 -0000
Date: Sun, 7 Jul 2024 17:02:18 +0200
From: =?utf-8?B?w5Z6Z8O8cg==?= Kesim <oec-9front@kesim.org>
To: 9front@9front.org
Message-ID: <juhepjdn2xcfkyd7gvk7qtlngfqnctqlr2ficzncn6mrxm4zpn@4bad6iqd4tmc>
References: <jvgtrenspl5xclbqdnxajwmascsfeqwgk2zeq3k4c6kfqpiubw@4rhwej3affkk>
 <63CF3BA90858CA35AA9002FE604EF323@eigenstate.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <63CF3BA90858CA35AA9002FE604EF323@eigenstate.org>
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: shared metadata module-aware replication cloud-aware STM layer 
Subject: Re: [9front] fqa 7.3.3.1 - Stop cwfs from allowing user none to
 attach without authentication
Reply-To: 9front@9front.org
Precedence: bulk

Thanks for the quick reply. In the meantime I found
another thread on this topic containing that same
explanation.

Problem fixed.  Even `netaudit` looks happy.

cheers,
oec

PS:
Your pointer to 7.3.3.1 is correct, but you quoted the
snippet from 7.3.3 instead.

The snippet should read:
  bootargs is (tcp, local!device)
      [local!/dev/sdXX/fscache] local!/dev/sdXX/fscache -c
  config: nonone
  none disabled
  config: end

(Adding this here so that future generations of archive
readers in search for answers find the correct snippet.)

Thus spake ori@eigenstate.org (ori@eigenstate.org):

> 
> The 'nonone' command was removed because it doesn't
> change the config permanently, leading to some really
> stupid footguns.
> 
> 7.3.3.1 has the correct instructions, in the text
> below the meme:
> 
> 	bootargs is (tcp, local!device)
> 	    [local!/dev/sdXX/fscache] local!/dev/sdXX/fscache -c
> 	config: noauth
> 	auth is now disabled
> 	config: noauth
> 	auth is now enabled
> 	config: end
> 
> Note that adding '-c' to the end fo the bootargs is
> how you get into config mode.
> 
> Quoth Özgür Kesim <oec-9front@kesim.org>:
> > Thus spake sl@stanleylieber.com (sl@stanleylieber.com):
> > 
> > > fyi:
> > > 
> > > echo nonone >>/srv/cwfs.cmd
> > > 
> > > sl
> > 
> > I just installed the latest relase "DO NOT INSTALL" and
> > tried that, but for no avail:
> > 
> > cpu% echo nonone >>/srv/cwfs.cmd
> > cpu% cat /srv/cwfs.cmd
> > cmd_exec: unknown command: nonone
> > 
> > In fact, the command is not listed at all:
> > 
> > cpu% con -C /srv/cwfs.cmd
> > help
> > 	allow [uid] -- disable permission checking
> > 	cfs [file] -- set current filesystem
> > 	chatty n -- set chattiness
> > 	check [options]
> > 	clean file [bno [addr]] -- block print/fix
> > 	clri [file ...] -- purge files/dirs
> > 	create path uid gid perm [lad] -- make a file/dir
> > 	cwcmd subcommand -- cache/worm errata
> > 	disallow -- (re)enable permission checking
> > 	duallow uid -- duallow
> > 	dump -- make dump backup to worm
> > 	files -- report on files structure
> > 	flag -- print set flags
> > 	fstat path -- print info on a file/dir
> > 	halt -- return to boot rom
> > 	hangup chan -- clunk files
> > 	help
> > 	newuser username -- add user to /adm/users
> > 	noattach -- toggle noattach flag
> > 	printconf -- print configuration
> > 	profile [01] -- fs profile
> > 	remove [file ...] -- remove files/dirs
> > 	stata -- overall stats
> > 	stats [[-]flags ...] -- various stats
> > 	statw -- cache/worm stats
> > 	sync
> > 	time command -- time another command
> > 	users [file] -- read /adm/users
> > 	version -- print time of mk and boot
> > 	who [user ...] -- print attaches
> > nonone
> > cmd_exec: unknown command: nonone
> > 
> > Is there any other mechanism to switch of 'none' access
> > without booting into configure mode?
> > 
> > cheers,
> > oec
>