Re: [update] security/keyringer 0.5.5

2021-03-16 Thread Jeremie Courreges-Anglas
On Mon, Mar 15 2021, Grégoire Jadi wrote: > Hi, > > Here is an update to keyringer 0.5.5. Works with my workflow and the > new settings *_AFTER_ENCRYPT work too. > > 2019-03-25 - 0.5.5 - Silvio Rhatto > Adds COMMIT_AFTER_ENCRYPT setting > Adds PUSH_AFTER_ENCRYPT setting >

NEW: telephony/sngrep

2021-03-16 Thread Stuart Henderson
This is a curses-based tool to display packet flows from SIP packets (either live or via pcap files). OK to import? I've had it in mystuff/ for getting on for 2 years because it hanged when viewing an INVITE; I only just figured out that they did this in an attempt to cope with OpenBSD bpf #if d

NEW: security/evil-winrm

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: WinRM (Windows Remote Management) is the Microsoft implementation of WS-Management Protocol. A standard SOAP based protocol that allows hardware and operating systems from different vendors to interoperate. Microsoft included it in their Operating Systems in order to make life easie

NEW: devel/ruby-winrm-fs

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: File system operations over Windows Remote Management (WinRM) for Ruby. This needs a number of other other gems just sent as dependency, as well as it would be a dependency of evil-winrm. OK to import? cheers, Sebastian ruby-winrm-fs.tar.gz Description: application/gzip

NEW: devel/ruby-winrm

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: This is a SOAP library that uses the functionality in Windows Remote Management(WinRM) to call native object in Windows. This includes, but is not limited to, running batch scripts, powershell scripts and fetching WMI variables. For more information on WinRM, please visit Microsoft'

Re: [testing] exim-4.94 without pledge

2021-03-16 Thread Renaud Allard
On 16/03/2021 17:46, Stuart Henderson wrote: Exim has a big monolothic process design and lots of optional features many of which pull in third party libraries which are complex themselves (and *also* will have to deal with the same pledge restrictions which again may vary in what functions th

NEW: devel/ruby-gssapi

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: A FFI wrapper around the system GSSAPI library. Please make sure and read the Yard docs or standard GSSAPI documentation if you have any questions. There is also a class called GSSAPI::Simple that wraps many of the common features used for GSSAPI. this gem would be a dependency of

NEW: archivers/ruby-rubyzip

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: Rubyzip is a ruby library for reading and writing zip files. this little gem is a dependency for evil-winrm. OK to import? cheers, Sebastian ruby-rubyzip.tar.gz Description: application/gzip

NEW: textproc/ruby-erubi

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: Erubi is a ERB template engine for ruby. It is a simplified fork of Erubis, using the same basic algorithm, with a few differences. this simple gem is a dependency of evil-winrm. OK to import? cheers, Sebastian ruby-erubi.tar.gz Description: application/gzip

NEW: devel/ruby-logging

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: **Logging** is a flexible logging library for use in Ruby programs based on the design of Java's log4j library. It features a hierarchical logging system, custom level names, multiple output destinations per log event, custom formatting, and more. This port requires the just sent d

NEW: devel/ruby-little-plugger

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: LittlePlugger is a module that provides Gem based plugin management. By extending your own class or module with LittlePlugger you can easily manage the loading and initializing of plugins provided by other gems. I'd need it as dependency for evil-winrm. OK to import? cheers, Seba

NEW: devel/ruby-stringio

2021-03-16 Thread Sebastian Reitenbach
Hi, cat DESCR: Pseudo IO class from/to String. This is not a pure gem, but also compiles library. I tried to remove the stuffs in the ext/ directory in PLIST, but then got odd warnings, about pieces missing, therefore left it in there. It would be required as dependency of evil-winrm. Any hint

READD: textproc/ruby-gyoku

2021-03-16 Thread Sebastian Reitenbach
This simple port was packaged before. I'd need it as dependency for evil-winrm. Take MAINTAINER. OK to re-add? cheers, Sebastian ruby-gyoku.tar.gz Description: application/gzip

READD: textproc/ruby-nori

2021-03-16 Thread Sebastian Reitenbach
Hi, this is a simple port of ruby-nori, that was there before. I'd need it as a dependency for evil-winrm. nori itself doesn't have other dependencies. Take MAINTAINER. OK to re-add? cheers, Sebastian ruby-nori.tar.gz Description: application/gzip

READD: www/ruby-httpclient

2021-03-16 Thread Sebastian Reitenbach
Hi, this is a simple port of ruby-httpclient. No dependencies. was ported before, I'd need it again, as it is required dependency for evil-winrm. take MAINTAINER. OK to re-add? cheers, Sebastian ruby-httpclient.tar.gz Description: application/gzip

Re: lua 5.1: fix fix for CVE-2014-5461

2021-03-16 Thread Stuart Henderson
On 2021/03/16 19:56, Theo Buehler wrote: > I think the diff from https://www.lua.org/bugs.html#5.2.2-1 was > backported to the wrong function (to adjust_varargs() instead of > luaD_precall(). Compare with https://github.com/redis/redis/pull/7733 > > While I did not manage to make the PoC crash on

Re: shells/nsh build failure

2021-03-16 Thread Stuart Henderson
On 2021/03/16 20:03, Christian Weisgerber wrote: > The recent network changes to inet{4,6} autoconf have broken shells/nsh. > AGAIN. > I'm getting rather tired of cleaning this up each time. sthen@ too, > I think. Yes, it's not ideal having something so tightly coupled to the base OS in ports. W

Re: ports that will fail with LLVM 11

2021-03-16 Thread Christian Weisgerber
Christian Weisgerber: > On 2021-03-09, Stuart Henderson wrote: > > > Some ports have failures that appear to be issues with the compiler/diff > > and I haven't listed them below; the following are problems with the > > ports themselves: All of those have been fixed. -- Christian "naddy" Weisg

Re: [testing] exim-4.94 with pledge

2021-03-16 Thread Renaud Allard
On 3/16/21 4:11 PM, Theo de Raadt wrote: Renaud Allard wrote: This is a small patch to try to add a basic pledge() to exim. It also avoids exim from calling some "inappropriate" ioctls. This seems to run fine on my server, but I would like a wider testing and bug reporting if possible. I'l

[testing] exim-4.94 with pledge

2021-03-16 Thread Renaud Allard
Hello, This is a small patch to try to add a basic pledge() to exim. It also avoids exim from calling some "inappropriate" ioctls. This seems to run fine on my server, but I would like a wider testing and bug reporting if possible. Thank you Index: Makefile ===

shells/nsh build failure

2021-03-16 Thread Christian Weisgerber
The recent network changes to inet{4,6} autoconf have broken shells/nsh. AGAIN. I'm getting rather tired of cleaning this up each time. sthen@ too, I think. >>> Building on amd64-1 under shells/nsh BDEPENDS = [datab

lua 5.1: fix fix for CVE-2014-5461

2021-03-16 Thread Theo Buehler
I think the diff from https://www.lua.org/bugs.html#5.2.2-1 was backported to the wrong function (to adjust_varargs() instead of luaD_precall(). Compare with https://github.com/redis/redis/pull/7733 While I did not manage to make the PoC crash on my machines, I'm pretty sure the diff used by Redis

Re: [testing] exim-4.94 without pledge

2021-03-16 Thread Theo de Raadt
Stuart Henderson wrote: > > In fact, I scanned the code looking for calls, so this should be ready for > > general use. I could have restricted it way more for my own use only. > > Though, I agree, this only protects from a very limited subset like route, > > settime, pf, audio, video. > > Even

Re: [testing] exim-4.94 without pledge

2021-03-16 Thread Stuart Henderson
On 2021/03/16 18:18, Renaud Allard wrote: > > > On 16/03/2021 17:46, Stuart Henderson wrote: > > > Exim has a big monolothic process design and lots of optional features > > many of which pull in third party libraries which are complex themselves > > (and *also* will have to deal with the same p

Re: Revive ONLY_FOR_ARCHS in lang/ghc

2021-03-16 Thread Matthias Kilian
Hi, On Mon, Mar 15, 2021 at 09:16:40PM -0700, Greg Steuck wrote: > This was previously in all ghc-dependent ports. Let me know if adding a > similar setting to cabal.port.mk makes or sense. Otherwise I expect the > lang/ghc depedency they all have to effectively block them. > > OK? Sure. Ciao,

Re: update net/gajim to 1.3.0 (and net/py-nbxmpp to 2.0.1)

2021-03-16 Thread Paco Esteban
On Wed, 24 Feb 2021, Paco Esteban wrote: > On Sun, 14 Feb 2021, Paco Esteban wrote: > > > On Wed, 10 Feb 2021, 3un0s wrote: > > > > > Hi ports@, > > > > > > This is an update for net/gajim and also net/py-nbxmpp as gajim requires > > > that. I've been running beta of 1.3.0 and this release on a

Re: [testing] exim-4.94 with pledge

2021-03-16 Thread Theo de Raadt
Stuart Henderson wrote: > On 2021/03/16 09:28, Theo de Raadt wrote: > > > > > > Yes, I know, it's a "better than nothing" solution. I tried to make it > > > run for all use cases, which is quite wide as you said. > > > > Hang on -- it is not "better than nothing". It leaves the programs with >

Re: [testing] exim-4.94 with pledge

2021-03-16 Thread Stuart Henderson
On 2021/03/16 09:28, Theo de Raadt wrote: > > > > Yes, I know, it's a "better than nothing" solution. I tried to make it > > run for all use cases, which is quite wide as you said. > > Hang on -- it is not "better than nothing". It leaves the programs with > enough abilities so that, if it got h

Re: [testing] exim-4.94 with pledge

2021-03-16 Thread Stuart Henderson
On 2021/03/16 16:05, Renaud Allard wrote: > This is a small patch to try to add a basic pledge() to exim. It also avoids > exim from calling some "inappropriate" ioctls. > This seems to run fine on my server, but I would like a wider testing and > bug reporting if possible. To my eye the only real

Re: [testing] exim-4.94 with pledge

2021-03-16 Thread Theo de Raadt
Renaud Allard wrote: > On 3/16/21 4:11 PM, Theo de Raadt wrote: > > Renaud Allard wrote: > > > >> This is a small patch to try to add a basic pledge() to exim. It also > >> avoids exim from calling some "inappropriate" ioctls. > >> This seems to run fine on my server, but I would like a wider te

Re: [testing] exim-4.94 with pledge

2021-03-16 Thread Theo de Raadt
Renaud Allard wrote: > This is a small patch to try to add a basic pledge() to exim. It also > avoids exim from calling some "inappropriate" ioctls. > This seems to run fine on my server, but I would like a wider testing > and bug reporting if possible. I'll step in and say I am really sceptical

devel/git: update to 2.31.0

2021-03-16 Thread Klemens Nanni
Backward incompatible and other important changes * The "pack-redundant" command, which has been left stale with almost unusable performance issues, now warns loudly when it gets used, as we no longer want to recommend its use (instead just "repack -d" instead). * The development commu

Re: NEW: sysutils/xmem

2021-03-16 Thread Omar Polo
Michael writes: > On Mon, Mar 08, 2021 at 04:46:27PM +0100, Michael wrote: >> Hello ports, >> >> there was already an attempt to get this port in in 2017 [1]. After >> talking to the original author of the port (CCed) here is another try >> with a newer version. >> >> From pkg/DESCR: >> Grap

Re: NEW: sysutils/xmem

2021-03-16 Thread Michael
On Mon, Mar 08, 2021 at 04:46:27PM +0100, Michael wrote: > Hello ports, > > there was already an attempt to get this port in in 2017 [1]. After > talking to the original author of the port (CCed) here is another try > with a newer version. > > From pkg/DESCR: > Graphical application that displa