My first security run output. Anyone see any problems or changes needed.

[climb2bhi]

I just got my Email from FreeNAS working and now have my first Security run output.

I have no idea what most of this means. Does anyone see any problems or BIOS changes that I need to make?

Thanks.

Total N00b.

freenas.local kernel log messages:
> Copyright (c) 1992-2013 The FreeBSD Project.
> Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
> The Regents of the University of California. All rights reserved.
> FreeBSD is a registered trademark of The FreeBSD Foundation.
> FreeBSD 9.2-RELEASE-p3 #0 r262572+38751c8: Thu Mar 20 21:13:02 PDT 2014
> root@build.ixsystems.com:/tank/home/jkh/9.2.1-BRANCH/freenas/os-base/amd64/tank/home/jkh/9.2.1-BRANCH/freenas/FreeBSD/src/sys/FREENAS.amd64 amd64
> gcc version 4.2.1 20070831 patched [FreeBSD]
> CPU: Dual-Core AMD Opteron(tm) Processor 1218 HE (2613.45-MHz K8-class CPU)
> Origin = "AuthenticAMD" Id = 0x40f33 Family = 0xf Model = 0x43 Stepping = 3
> Features=0x178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT>
> Features2=0x2001<SSE3,CX16>
> AMD Features=0xea500800<SYSCALL,NX,MMX+,FFXSR,RDTSCP,LM,3DNow!+,3DNow!>
> AMD Features2=0x1f<LAHF,CMP,SVM,ExtAPIC,CR8>
> real memory = 8589934592 (8192 MB)
> avail memory = 7725715456 (7367 MB)
> Event timer "LAPIC" quality 400
> ACPI APIC Table: <A M I OEMAPIC >
> FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
> FreeBSD/SMP: 1 package(s) x 2 core(s)
> cpu0 (BSP): APIC ID: 0
> cpu1 (AP): APIC ID: 1
> WARNING: VIMAGE (virtualized network stack) is a highly experimental feature.
> ioapic0 <Version 1.1> irqs 0-23 on motherboard
> kbd1 at kbdmux0
> cryptosoft0: <software crypto> on motherboard
> aesni0: No AESNI support.
> padlock0: No ACE support.
> acpi0: <A M I OEMRSDT> on motherboard
> acpi0: Power Button (fixed)
> acpi0: reservation of fec00000, 1000 (3) failed
> acpi0: reservation of fee00000, 1000 (3) failed
> acpi0: reservation of 0, a0000 (3) failed
> acpi0: reservation of 100000, dff00000 (3) failed
> cpu0: <ACPI CPU> on acpi0
> cpu1: <ACPI CPU> on acpi0
> attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
> Timecounter "i8254" frequency 1193182 Hz quality 0
> Event timer "i8254" frequency 1193182 Hz quality 100
> atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
> Event timer "RTC" frequency 32768 Hz quality 0
> hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed00fff on acpi0
> Timecounter "HPET" frequency 25000000 Hz quality 950
> Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
> acpi_timer0: <24-bit timer at 3.579545MHz> port 0x2008-0x200b on acpi0
> pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
> pci0: <ACPI PCI bus> on pcib0
> pci0: <memory, RAM> at device 0.0 (no driver attached)
> isab0: <PCI-ISA bridge> at device 1.0 on pci0
> isa0: <ISA bus> on isab0
> pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
> ohci0: <nVidia nForce MCP55 USB Controller> mem 0xfe9fb000-0xfe9fbfff irq 21 at device 2.0 on pci0
> usbus0 on ohci0
> ehci0: <NVIDIA nForce MCP55 USB 2.0 controller> mem 0xfe9fac00-0xfe9facff irq 22 at device 2.1 on pci0
> usbus1: EHCI version 1.0
> usbus1 on ehci0
> atapci0: <nVidia nForce MCP55 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf at device 4.0 on pci0
> ata0: <ATA channel> at channel 0 on atapci0
> ata1: <ATA channel> at channel 1 on atapci0
> atapci1: <nVidia nForce MCP55 SATA300 controller> port 0xb480-0xb487,0xb400-0xb403,0xb080-0xb087,0xb000-0xb003,0xac00-0xac0f mem 0xfe9f9000-0xfe9f9fff irq 23 at device 5.0 on pci0
> ata2: <ATA channel> at channel 0 on atapci1
> ata3: <ATA channel> at channel 1 on atapci1
> atapci2: <nVidia nForce MCP55 SATA300 controller> port 0xa880-0xa887,0xa800-0xa803,0xa480-0xa487,0xa400-0xa403,0xa080-0xa08f mem 0xfe9f8000-0xfe9f8fff irq 20 at device 5.1 on pci0
> ata4: <ATA channel> at channel 0 on atapci2
> ata5: <ATA channel> at channel 1 on atapci2
> atapci3: <nVidia nForce MCP55 SATA300 controller> port 0xa000-0xa007,0x9c00-0x9c03,0x9880-0x9887,0x9800-0x9803,0x9480-0x948f mem 0xfe9f7000-0xfe9f7fff irq 21 at device 5.2 on pci0
> ata6: <ATA channel> at channel 0 on atapci3
> ata7: <ATA channel> at channel 1 on atapci3
> pcib1: <ACPI PCI-PCI bridge> at device 6.0 on pci0
> pci1: <ACPI PCI bus> on pcib1
> atapci4: <SiI 3114 SATA150 controller> port 0xdc00-0xdc07,0xd880-0xd883,0xd800-0xd807,0xd480-0xd483,0xd400-0xd40f mem 0xfeaffc00-0xfeafffff irq 16 at device 2.0 on pci1
> ata8: <ATA channel> at channel 0 on atapci4
> ata9: <ATA channel> at channel 1 on atapci4
> ata10: <ATA channel> at channel 2 on atapci4
> ata11: <ATA channel> at channel 3 on atapci4
> vgapci0: <VGA-compatible display> port 0xc000-0xc0ff mem 0xf0000000-0xf7ffffff,0xfeae0000-0xfeaeffff irq 17 at device 6.0 on pci1
> nfe0: <NVIDIA nForce MCP55 Networking Adapter> port 0x9400-0x9407 mem 0xfe9f6000-0xfe9f6fff,0xfe9fa800-0xfe9fa8ff,0xfe9fa400-0xfe9fa40f irq 22 at device 8.0 on pci0
> miibus0: <MII bus> on nfe0
> e1000phy0: <Marvell 88E1149 Gigabit PHY> PHY 2 on miibus0
> e1000phy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto, auto-flow
> nfe0: Ethernet address: 00:30:48:60:54:42
> nfe1: <NVIDIA nForce MCP55 Networking Adapter> port 0x9080-0x9087 mem 0xfe9f5000-0xfe9f5fff,0xfe9fa000-0xfe9fa0ff,0xfe9f4c00-0xfe9f4c0f irq 23 at device 9.0 on pci0
> miibus1: <MII bus> on nfe1
> e1000phy1: <Marvell 88E1149 Gigabit PHY> PHY 3 on miibus1
> e1000phy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto, auto-flow
> nfe1: Ethernet address: 00:30:48:60:54:43
> pcib2: <ACPI PCI-PCI bridge> at device 10.0 on pci0
> pci2: <ACPI PCI bus> on pcib2
> pcib3: <ACPI PCI-PCI bridge> at device 11.0 on pci0
> pci3: <ACPI PCI bus> on pcib3
> pcib4: <ACPI PCI-PCI bridge> at device 12.0 on pci0
> pci4: <ACPI PCI bus> on pcib4
> pcib5: <ACPI PCI-PCI bridge> at device 13.0 on pci0
> pci5: <ACPI PCI bus> on pcib5
> siis0: <SiI3132 SATA controller> port 0xec00-0xec7f mem 0xfebffc00-0xfebffc7f,0xfebf8000-0xfebfbfff irq 18 at device 0.0 on pci5
> siisch0: <SIIS channel> at channel 0 on siis0
> siisch1: <SIIS channel> at channel 1 on siis0
> pcib6: <ACPI PCI-PCI bridge> at device 14.0 on pci0
> pci6: <ACPI PCI bus> on pcib6
> pcib7: <ACPI PCI-PCI bridge> at device 15.0 on pci0
> pci7: <ACPI PCI bus> on pcib7
> amdtemp0: <AMD CPU On-Die Thermal Sensors> on hostb3
> acpi_button0: <Power Button> on acpi0
> uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
> uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
> atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
> atkbd0: <AT Keyboard> irq 1 on atkbdc0
> kbd0 at atkbd0
> atkbd0: [GIANT-LOCKED]
> wbwd0: <Winbond 83627HF/F/HG/G Rev. UD-A> at port 0x2e-0x2f on isa0
> orm0: <ISA Option ROMs> at iomem 0xc0000-0xcafff,0xcb000-0xcc7ff on isa0
> sc0: <System console> at flags 0x100 on isa0
> sc0: VGA <16 virtual consoles, flags=0x300>
> vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
> powernow0: <PowerNow! K8> on cpu0
> powernow1: <PowerNow! K8> on cpu1
> Timecounters tick every 1.000 msec
> ipfw2 (+ipv6) initialized, divert enabled, nat enabled, default to accept, logging disabled
> DUMMYNET 0xfffffe00040d2d00 with IPv6 initialized (100409)
> load_dn_sched dn_sched RR loaded
> load_dn_sched dn_sched WF2Q+ loaded
> load_dn_sched dn_sched FIFO loaded
> load_dn_sched dn_sched PRIO loaded
> load_dn_sched dn_sched QFQ loaded
> usbus0: 12Mbps Full Speed USB v1.0
> usbus1: 480Mbps High Speed USB v2.0
> ugen0.1: <nVidia> at usbus0
> uhub0: <nVidia OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
> ugen1.1: <nVidia> at usbus1
> uhub1: <nVidia EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1
> uhub0: 10 ports with 10 removable, self powered
> uhub1: 10 ports with 10 removable, self powered
> ugen1.2: <vendor 0x090c> at usbus1
> umass0: <vendor 0x090c product 0x6200, class 0/0, rev 2.00/1.00, addr 2> on usbus1
> umass0: SCSI over Bulk-Only; quirks = 0x4000
> umass0:15:0:-1: Attached to scbus15
> ada0 at ata2 bus 0 scbus2 target 0 lun 0
> ada0: <WDC WD30EZRX-00MMMB0 80.00A80> ATA-8 SATA 3.x device
> ada0: Serial Number WD-WCAWZ1377509
> ada0: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
> ada0: 2861588MB (5860533168 512 byte sectors: 16H 63S/T 16383C)
> ada0: quirks=0x1<4K>
> ada0: Previously was known as ad4
> ada1 at ata3 bus 0 scbus3 target 0 lun 0
> ada1: <WDC WD30EZRX-00MMMB0 80.00A80> ATA-8 SATA 3.x device
> ada1: Serial Number WD-WCAWZ1566267
> ada1: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
> ada1: 2861588MB (5860533168 512 byte sectors: 16H 63S/T 16383C)
> ada1: quirks=0x1<4K>
> ada1: Previously was known as ad6
> ada2 at ata4 bus 0 scbus4 target 0 lun 0
> ada2: <WDC WD30EZRX-00D8PB0 80.00A80> ATA-9 SATA 3.x device
> ada2: Serial Number WD-WCC4N0425489
> ada2: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
> ada2: 2861556MB (5860467633 512 byte sectors: 16H 63S/T 16383C)
> ada2: quirks=0x1<4K>
> ada2: Previously was known as ad8
> ada3 at ata5 bus 0 scbus5 target 0 lun 0
> ada3: <WDC WD30EZRX-00MMMB0 80.00A80> ATA-8 SATA 3.x device
> ada3: Serial Number WD-WCAWZ1188655
> ada3: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
> ada3: 2861588MB (5860533168 512 byte sectors: 16H 63S/T 16383C)
> ada3: quirks=0x1<4K>
> ada3: Previously was known as ad10
> ada4 at ata6 bus 0 scbus6 target 0 lun 0
> ada4: <WDC WD30EZRX-00D8PB0 80.00A80> ATA-9 SATA 3.x device
> ada4: Serial Number WD-WMC4N0246288
> ada4: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
> ada4: 2861556MB (5860467633 512 byte sectors: 16H 63S/T 16383C)
> ada4: quirks=0x1<4K>
> ada4: Previously was known as ad12
> ada5 at ata7 bus 0 scbus7 target 0 lun 0
> ada5: <WDC WD30EZRX-00D8PB0 80.00A80> ATA-9 SATA 3.x device
> ada5: Serial Number WD-WCC4N0401648
> ada5: 300.000MB/s transfers (SATA 2.x, UDMA5, PIO 8192bytes)
> ada5: 2861556MB (5860467633 512 byte sectors: 16H 63S/T 16383C)
> ada5: quirks=0x1<4K>
> ada5: Previously was known as ad14
> cd0 at ata0 bus 0 scbus0 target 1 lun 0
> cd0: <ARTEC WSM-52X 1.10> Removable CD-ROM SCSI-0 device
> cd0: 33.300MB/s transfers (UDMA2, ATAPI 12bytes, PIO 65534bytes)
> cd0: Attempt to query device size failed: NOT READY, Medium not present - tray closed
> SMP: AP CPU #1 Launched!
> da0 at umass-sim0 bus 0 scbus15 target 0 lun 0
> da0: <Generic USB SD Reader 1.00> Removable Direct Access SCSI-0 device
> da0: 40.000MB/s transfers
> da0: 7580MB (15523840 512 byte sectors: 255H 63S/T 966C)
> da0: quirks=0x2<NO_6_BYTE>
> (da0:umass-sim0:0:0:0): PREVENT ALLOW MEDIUM REMOVAL. CDB: 1e 00 00 00 01 00
> (da0:umass-sim0:0:0:0): CAM status: Auto-Sense Retrieval Failed
> (da0:umass-sim0:0:0:0): Error 5, Unretryable error

This repeats about 70 times with no changes. I removed most of the text to shorten this post.

> (da0:umass-sim0:0:0:0): PREVENT ALLOW MEDIUM REMOVAL. CDB: 1e 00 00 00 01 00
> (da0:umass-sim0:0:0:0): CAM status: Auto-Sense Retrieval Failed
> (da0:umass-sim0:0:0:0): Error 5, Unretryable error
> Trying to mount root from ufs:/dev/ufs/FreeNASs1a [ro]...
> (da0:umass-sim0:0:0:0): PREVENT ALLOW MEDIUM REMOVAL. CDB: 1e 00 00 00 01 00
> (da0:umass-sim0:0:0:0): CAM status: Auto-Sense Retrieval Failed
> (da0:umass-sim0:0:0:0): Error 5, Unretryable error
> WARNING: /data was not properly dismounted
> WARNING: /data: mount pending error: blocks 6 files 1
> GEOM_RAID5: Module loaded, version 1.1.20130907.44 (rev 5c6d2a159411)
> ZFS filesystem version: 5
> ZFS storage pool version: features support (5000)
> GEOM_ELI: Device ada0p1.eli created.
> GEOM_ELI: Encryption: AES-XTS 256
> GEOM_ELI: Crypto: software
> GEOM_ELI: Device ada3p1.eli created.
> GEOM_ELI: Encryption: AES-XTS 256
> GEOM_ELI: Crypto: software
> GEOM_ELI: Device ada4p1.eli created.
> GEOM_ELI: Encryption: AES-XTS 256
> GEOM_ELI: Crypto: software
> GEOM_ELI: Device ada5p1.eli created.
> GEOM_ELI: Encryption: AES-XTS 256
> GEOM_ELI: Crypto: software
> GEOM_ELI: Device ada1p1.eli created.
> GEOM_ELI: Encryption: AES-XTS 256
> GEOM_ELI: Crypto: software
> GEOM_ELI: Device ada2p1.eli created.
> GEOM_ELI: Encryption: AES-XTS 256
> GEOM_ELI: Crypto: software

-- End of security output --

 

[ewhac]

The "security" run is, more or less, a list of log messages that appeared since the last security run. On a day-to-day basis, what you'll typically see are messages relating to changes you made to the system (added/deleted users, added/deleted jails, added/deleted storage pools, etc.). However, since this is your first security run, you're seeing all the log messages since the system first booted.

Nothing stands out as bad. The messages concerning da0 are a little chatty, but it simply appears to be warning you that the system can't prevent you from yanking out your 8GB USB stick, so be careful.

 

[cyberjock]

Actually, that da0 message is because you are using a SD card reader to USB converter. Those are not recommended per the manual and have been known to be problems. Those messages are because you ARE having problems already.

 

[climb2bhi]

The "security" run is, more or less, a list of log messages that appeared since the last security run. On a day-to-day basis, what you'll typically see are messages relating to changes you made to the system (added/deleted users, added/deleted jails, added/deleted storage pools, etc.). However, since this is your first security run, you're seeing all the log messages since the system first booted.

Nothing stands out as bad. The messages concerning da0 are a little chatty, but it simply appears to be warning you that the system can't prevent you from yanking out your 8GB USB stick, so be careful.

Thanks

 

[climb2bhi]

Actually, that da0 message is because you are using a SD card reader to USB converter. Those are not recommended per the manual and have been known to be problems. Those messages are because you ARE having problems already.

Strange the USB is plugged into the motherboard. Would a BIOS setting make it happier?

 

[cyberjock]

I'm confused... What USB drive are you using for FreeNAS?

 

[climb2bhi]

8GB USB stick in the back of the motherboard.