The web in a box - a next generation web framework for the Perl programming language

IRC log for #mojo, 2014-10-21

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 sri which is a list of gids maintained by every process in addition to the egid
00:00 bpmedley sri: Are you refering to the non-default groups a user can belong to?
00:00 Nei but I gues such thing should be spcified explicitly then
00:00 Averna joined #mojo
00:00 sri fun thing is POSIX::setgid() does not affect them
00:00 Nei from what I can tell most user accounts dont have group switching priviledges anyway
00:01 sri so if you change your egid woth POSIX::setgid you still have your parents supplementary group IDs, with all the permissions
00:01 sri we are talking about servers that are started as root to be able to bind to port 80 here
00:02 Nei thn it becomes more critical
00:02 sri and those spawn worker processes that switch uid/gid for security
00:03 Nei the process will retain any supplementary groups including the group 0
00:03 sri on a default os x box i was able to explout it
00:03 sri s/u/i/
00:04 Nei its explicitly noted in my copy of the setgid manual
00:04 Nei "Any supplementary group IDs of the calling process shall remain unchanged"
00:04 sri <3 The Linux Programming Interface (one of the best books ever!)
00:10 Nei I found https://rt.perl.org/Public/Bug/Display.html?id=7272
00:11 Nei too bad setgroups/initgroups isnt in perl's POSIX
00:12 sri it gets more scary the deeper you dig
00:12 Nei equivalent monks answer http://www.perlmonks.org/?node_id=877616
00:13 Nei the perlvar entry for $) doesn't strike me as too bad
00:14 Nei although it doesnt talk about any security implications
00:17 sri looking through cpan is fun too https://metacpan.org/source/KMCGRAIL/Mail-SpamAssassin-3.4.0/spamd/spamd.raw#L1349
00:20 Nei I suspect more perl code may be affected by this
00:25 sri a lot according to my findings, which is why we stop linking to cpan now :)
00:26 sri feel free to keep discussing the actual "feature" though... i still want to learn more
00:26 Nei supplementary groups are quite useful to distribute permissions
00:27 Nei lp, cuda, su, modem, virtualbox, ...
00:27 sri to me it was surprising that they are a property of the process, and not tied to the egid
00:28 sri or rather euid
00:29 Nei I wish they were, then I wouldnt have to login on changing the default supplementary groups
00:29 Nei most unices also have newgrp to make a user process join a password-protected group
00:31 Nei usually non-privileged users cant alter their supplementary groups in any other way
00:34 sri POSIX::getgroups is there, but no POSIX::setgroups
00:36 Nei sometimes a perl-core ffi module would be handy
00:38 Nei btw if you like a tab=bar in irssi make sure to try my adv_windowlist
00:39 sri still looking for a way to make touch scrolling work :)
00:40 Nei tried mouse.pl?
00:41 Nei of course if you don't need your arrow up+down keys you can also rebind those to scroll....
00:42 Nei most terminals have hardcoded to just send arrow up/down keys on wheel scroll, not sure if yours is configurable there or if you want to change it
00:42 sri not sure mouse.pl would work, i have a feeling the os x terminal app translates mouse events already into arrow-up/down
00:43 Nei if you can follow there, since the translation happens at terminal side, irssi cant know if it was your arrow keys or the mouse, since they look exactly identical at the time they reach irssi
00:44 sri trying to figure out how mouse.pl works atm
00:44 Nei I think just loading it should be enough, however I heard rumours that the apple terminal does not support any application-based mouse reporting
00:46 Nei most seem to use iterm2; I prefer my open source OS;)
00:47 sri loaded mouse.pl, does nothing
00:48 Nei yea, then the terminal probably doesn't cooperate
00:59 sri oh, this is kinda nice, i now have pg-up/down bound for scrolling and home/end for previous/next window
01:01 sri joined #mojo
01:03 sri mouse seems like a lost cause... at least without using a key
01:04 Nei that's the layering issue; irssi only a text client and all the terminal etc stuff in front
01:05 Nei I can't really give good advice on osx but it works out of the box on *nix
01:05 Nei in iterm2 see if you have enabled xterm mouse reporting somewhere in the preferences
01:10 sri but my terminal looks like this ;p http://i.imgur.com/9Sp8QTc.png
01:14 Nei http://iterm2.com/ ;)
01:14 Nei no I dont think you'll have much luck with the apple terminal
01:20 Mso150 joined #mojo
01:21 tianon sri: setuid, setgid, and setgroups are kernel-level things, while /etc/passwd and /etc/group are 100% userspace (ie, the kernel doesn't care at all about what "groups" a specific uid is a member of, nor does it even care about that "user"'s name - only IDs matter to the kernel)
01:21 tianon that's why setgroups are per-process and inherited instead of implied-by-uid :)
01:32 klapperl_ joined #mojo
01:35 ignacio_ joined #mojo
01:52 asarch joined #mojo
02:03 laouji joined #mojo
02:48 noganex joined #mojo
02:52 doublelel joined #mojo
03:03 doublelel joined #mojo
03:09 preaction joined #mojo
03:14 laouji_ joined #mojo
03:15 mtj joined #mojo
03:18 marcus_ joined #mojo
03:18 Averna joined #mojo
03:19 oalders joined #mojo
03:20 Andreas joined #mojo
03:29 irq joined #mojo
03:43 basic6 joined #mojo
03:51 KCL joined #mojo
03:53 chankey joined #mojo
04:11 shadowpaste joined #mojo
04:11 Jonis joined #mojo
04:11 b^_^d joined #mojo
04:11 moritz joined #mojo
04:11 diegok joined #mojo
04:11 mishantil joined #mojo
04:11 mfontani joined #mojo
04:11 al joined #mojo
04:11 upasana joined #mojo
04:11 romel joined #mojo
04:11 genio joined #mojo
04:11 gabiruh joined #mojo
04:11 Bender joined #mojo
04:11 KindOne joined #mojo
04:11 bayashi joined #mojo
04:11 rofl__ joined #mojo
04:11 stephanj joined #mojo
04:11 Kundun joined #mojo
04:11 lestrrat joined #mojo
04:11 chansen joined #mojo
04:11 agorman joined #mojo
04:11 cpan_mojo joined #mojo
04:11 Trelane joined #mojo
04:11 bc547 joined #mojo
04:11 doby joined #mojo
04:11 xevz joined #mojo
04:11 ceej__ joined #mojo
04:11 sivoais joined #mojo
04:11 rwp joined #mojo
04:11 risugg joined #mojo
04:11 panzana` joined #mojo
04:11 wim joined #mojo
04:11 voegelas joined #mojo
04:11 nicomen joined #mojo
04:11 bobkare joined #mojo
04:11 vytas joined #mojo
04:11 Jonneh joined #mojo
04:11 aramisf joined #mojo
04:11 someanon joined #mojo
04:11 mgrimes joined #mojo
04:11 davido_home joined #mojo
04:11 oalders joined #mojo
04:11 Claudio_ joined #mojo
04:11 throughnothing joined #mojo
04:11 zivester joined #mojo
04:11 Lee_ joined #mojo
04:11 KCL joined #mojo
04:11 basic6 joined #mojo
04:11 irq joined #mojo
04:11 Andreas joined #mojo
04:11 Averna joined #mojo
04:11 marcus_ joined #mojo
04:11 mtj joined #mojo
04:11 laouji_ joined #mojo
04:11 preaction joined #mojo
04:11 noganex joined #mojo
04:11 asarch joined #mojo
04:11 klapperl_ joined #mojo
04:11 woz_ joined #mojo
04:11 D4RK-PH0ENiX joined #mojo
04:11 r0b3rt joined #mojo
04:11 marty joined #mojo
04:11 Dandre joined #mojo
04:11 icjs joined #mojo
04:11 denny joined #mojo
04:11 human39 joined #mojo
04:11 HtbaaPi joined #mojo
04:11 tbushell joined #mojo
04:11 Adurah joined #mojo
04:11 yuni joined #mojo
04:11 bpmedley joined #mojo
04:11 Mikey_ joined #mojo
04:11 callumgare joined #mojo
04:11 bzero joined #mojo
04:11 laiki joined #mojo
04:11 da5id joined #mojo
04:11 elik joined #mojo
04:11 jojo joined #mojo
04:11 tudorconstantin joined #mojo
04:11 firnsy joined #mojo
04:11 Gedge joined #mojo
04:11 dsterne joined #mojo
04:11 purl joined #mojo
04:11 mudler joined #mojo
04:11 suy joined #mojo
04:11 priodev joined #mojo
04:11 snap_ joined #mojo
04:11 go|dfish joined #mojo
04:11 ribasushi joined #mojo
04:11 dotan joined #mojo
04:11 oetiker joined #mojo
04:11 bjoernfan joined #mojo
04:11 tempire joined #mojo
04:11 jnbek joined #mojo
04:11 robinsmidsrod joined #mojo
04:11 Rallias joined #mojo
04:11 ua joined #mojo
04:11 Nei joined #mojo
04:11 phillipadsmith joined #mojo
04:11 andrefs joined #mojo
04:11 jeff joined #mojo
04:11 rblackwe joined #mojo
04:11 allison joined #mojo
04:11 janus joined #mojo
04:11 lb joined #mojo
04:11 xtetsuji joined #mojo
04:11 yusukebe joined #mojo
04:11 DaTa joined #mojo
04:11 jzawodn_ joined #mojo
04:11 jmmills joined #mojo
04:11 saki joined #mojo
04:11 stokachu joined #mojo
04:11 garu joined #mojo
04:11 mst joined #mojo
04:11 BinGOs joined #mojo
04:11 ura joined #mojo
04:11 ivan joined #mojo
04:11 dabudabu joined #mojo
04:11 tardisx joined #mojo
04:11 og01 joined #mojo
04:11 hahainternet joined #mojo
04:11 avenj joined #mojo
04:11 kthakore_ joined #mojo
04:11 adhoc joined #mojo
04:11 omega joined #mojo
04:11 rj11 joined #mojo
04:11 alnewkirk joined #mojo
04:11 charsbar joined #mojo
04:11 memowe joined #mojo
04:11 avkhozov_ joined #mojo
04:12 ashimema joined #mojo
04:20 rem_lex|pivo joined #mojo
04:23 sri joined #mojo
06:22 jamesaxl joined #mojo
06:25 preaction joined #mojo
06:33 dod joined #mojo
06:39 davido_laptop joined #mojo
06:42 Mso150 joined #mojo
06:44 davido__ joined #mojo
07:11 Vandal joined #mojo
07:12 someanon joined #mojo
07:13 someanon hi guys, about warning  "Your secret passphrase needs to be changed!!!" - a found solution
07:14 someanon method $self->secrets(...) must be first called method of $self in startup
07:16 meredith 09:39 <@Akron> Set the secrets at the beginning - the debug info is released quite early.
07:16 meredith sometimes we can only learn from ourselves :)
07:16 basiliscos joined #mojo
07:17 D4RK-PH0ENiX joined #mojo
07:20 rawler joined #mojo
07:29 dp_ joined #mojo
07:31 neyasov__ joined #mojo
07:31 aleksey joined #mojo
07:35 trone joined #mojo
07:37 camelo joined #mojo
07:37 camelo Hi
07:37 purl hi, camelo.
07:38 tempire hmm
07:38 * tempire reads up on egid
07:40 tempire interesting
07:40 tempire didn't realize you could assign to $(
07:47 tempire huh
07:47 tempire so perl doesn't even provide a way to set secondary groups?
07:47 tempire oh, misread. just more gids assigned to $)
07:49 laouji joined #mojo
07:50 neyasov joined #mojo
07:54 davido__ joined #mojo
08:04 arpadszasz joined #mojo
08:17 avkhozov joined #mojo
08:24 laouji joined #mojo
08:24 fhelmber_ joined #mojo
08:31 rem_lex joined #mojo
09:24 arthas joined #mojo
09:34 arthas joined #mojo
09:34 GillesM joined #mojo
09:46 arthas joined #mojo
09:56 dexteruk joined #mojo
09:57 basiliscos joined #mojo
10:09 Dandre joined #mojo
10:09 Dandre Hello,
10:10 Dandre if I run
10:10 Dandre lsof|wc -l
10:10 Dandre I get 64580
10:11 Dandre and if I run
10:11 Dandre ulimit -n
10:11 Dandre I get 1024
10:11 Dandre oups wrong channel, sorry
10:20 basiliscos joined #mojo
10:37 denis_boyun joined #mojo
10:38 arpadszasz joined #mojo
10:43 sujithm joined #mojo
11:24 sujithm_ joined #mojo
11:29 marcus joined #mojo
11:31 sujithm joined #mojo
11:46 Akron joined #mojo
12:04 tbushell left #mojo
12:28 asarch joined #mojo
12:32 dotan joined #mojo
13:09 zivester joined #mojo
13:16 neilhwatson joined #mojo
13:17 nicomen how do I combine a get() call with generators and subref as callback?
13:19 ignacio_ joined #mojo
13:20 d4rkie joined #mojo
13:22 nicomen ah it's the last element
13:23 nicomen *parameter
13:36 d4rkie joined #mojo
13:39 laouji joined #mojo
13:46 marty joined #mojo
13:48 vytas joined #mojo
14:00 lipizzan joined #mojo
14:00 zz_Foxcool joined #mojo
14:15 sujithm joined #mojo
14:18 sujithm_ joined #mojo
14:23 sh4 joined #mojo
14:24 sujithm joined #mojo
14:39 sh4|2 joined #mojo
14:49 aramisf joined #mojo
14:59 mad_hatter joined #mojo
14:59 mad_hatter The backports version of mojo for perl 5.8 is that this: https://github.com/jamadam/mojo-legacy?
15:21 aleksey_ joined #mojo
15:51 KCL_ joined #mojo
15:53 aleksey joined #mojo
15:54 disputin joined #mojo
15:58 rem_lex|pivo joined #mojo
16:13 meshl joined #mojo
16:29 Mso150 joined #mojo
16:39 sujithm joined #mojo
16:40 basiliscos joined #mojo
17:02 marcus I think I'm finally getting the usefulness of fugutive.
17:03 marcus fugitive even
17:07 sujithm joined #mojo
17:21 * sri wonders if something about the group assignment bug should be posted to the list
17:23 zackiv31 joined #mojo
17:39 laouji joined #mojo
18:24 asarch joined #mojo
18:29 sri oh well, posted https://groups.google.com/forum/#!topic/mojolicious/-qUNGOrhZYw
18:30 tempire sri: yes.
18:30 tempire And good.
18:30 ignacio_ joined #mojo
18:32 tempire deploying fixed version
18:32 tempire hypnotoad reloaded
18:32 tempire awesome
18:34 sri one reason i was unsure is that other servers might be affected too
18:34 sri (or rather... like are)
18:35 sri s/like/likely/
18:35 sri i've informed miyagawa yesterday, otherwise i'm not sure who else to poke
18:36 tempire ah
18:38 sri oh, firebase is dead... guess that's an opportunity for a real-time mojolicious startup :)
18:38 stephanj oh heck
18:38 stephanj not the first time i see this groups bug this year... :/
18:39 tbushell joined #mojo
18:43 tempire that's not a bad idea
18:53 jamesaxl joined #mojo
19:07 Mso150 joined #mojo
19:17 stryx` joined #mojo
19:23 * jzawodn_ prepares to increase user-facing mojolicious usage at $work by 10-20x today
19:24 marty jzawodn_++
19:24 * jzawodn_ makes mental note to clip his trailing '_'
19:26 sri \o/
19:29 Mso150 joined #mojo
19:46 kmx joined #mojo
20:08 good_news_everyon joined #mojo
20:08 good_news_everyon [mojo] kraih pushed 1 new commit to master: http://git.io/dgckug
20:08 good_news_everyon mojo/master f8ccd47 Sebastian Riedel: fixed bug where Mojo::UserAgent would try to follow redirects for protocols other than HTTP and HTTPS
20:08 good_news_everyon left #mojo
20:38 meshl joined #mojo
20:40 bobkare joined #mojo
20:41 ignacio__ joined #mojo
20:43 berov joined #mojo
20:53 neyasov joined #mojo
21:11 disputin joined #mojo
21:17 bobkare joined #mojo
21:20 fhelmber_ joined #mojo
22:21 marcus site down, sri ?
22:22 genio all good here
22:23 firnsy and here
22:32 bobkare joined #mojo
22:43 marcus it returned eventually
22:43 marcus maybe a blip in my internets
22:49 franzkafka joined #mojo
22:49 franzkafka Glen Hinkle has a nice voice.
22:50 franzkafka I listen to his caramel voice as I sleep
23:05 meshl joined #mojo
23:30 d4rkie_ joined #mojo
23:38 disputin joined #mojo
23:51 basiliscos joined #mojo

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary