On 6.5.2016. 23:24, Hrvoje Popovski wrote:
> On 6.5.2016. 18:08, Mike Belopuhov wrote:
>> Or alternatively, if there are some devices with working Lynx Point
>> xhci, we could disable enforced port routing on these models and use
>> the default port configuration that machine comes up with (in my
>
On 6 May 2016 at 23:24, Hrvoje Popovski wrote:
> On 6.5.2016. 18:08, Mike Belopuhov wrote:
>> Or alternatively, if there are some devices with working Lynx Point
>> xhci, we could disable enforced port routing on these models and use
>> the default port configuration that machine comes up with (in
On 17.5.2016. 13:16, Mike Belopuhov wrote:
> Sorry, forgot to answer that. No and no. I think Martin will get some
> hardware soon.
>
ok, sorry for spam ...
Hi there,
Since OpenBSD 5.9 it's no longer possible to run skeyinit for another
user while being root:
root@testpc:~# skeyinit -md5 admin
[Adding admin with md5]
skeyinit: can't set owner/mode for admin: Operation not permitted
As far as I unterstand the check in pledge_chown() in kern_pledge
On Tue, May 17, 2016 at 01:45:18PM +0200, Silamael wrote:
> Since OpenBSD 5.9 it's no longer possible to run skeyinit for another
> user while being root:
>
> root@testpc:~# skeyinit -md5 admin
> [Adding admin with md5]
> skeyinit: can't set owner/mode for admin: Operation not permitted
>
> As fa
On Tue, 17 May 2016 16:21:47 +0200, Theo Buehler wrote:
> I agree with your diagnosis. skeyinit tries to fchown the file to the
> target user and gets EPERM since it is running with pledge.
>
> Here's a patch that disables pledge for skeyinit if it is run as root
> and there is a target user spec
On Tue, May 17, 2016 at 08:52:28AM -0600, Todd C. Miller wrote:
> On Tue, 17 May 2016 16:21:47 +0200, Theo Buehler wrote:
>
> > I agree with your diagnosis. skeyinit tries to fchown the file to the
> > target user and gets EPERM since it is running with pledge.
> >
> > Here's a patch that disable
> @@ -151,6 +157,11 @@ main(int argc, char **argv)
> } else if (strcmp(pp->pw_name, me) != 0 && getuid() != 0) {
> /* Only root can change other's S/Keys. */
> errx(1, "Permission denied.");
> + } else {
> + /
Looks good to me.
On Tue, 17 May 2016 17:03:06 +0200, Theo Buehler wrote:
> > @@ -151,6 +157,11 @@ main(int argc, char **argv)
> > } else if (strcmp(pp->pw_name, me) != 0 && getuid() != 0) {
> > /* Only root can change other's S/Keys. */
> > errx(1, "Permission de
>Synopsis: Only one interface of lan1841 "detected"
>Category: kernel
>Environment:
System : OpenBSD 6.0
Details : OpenBSD 6.0-beta (GENERIC.MP) #2059: Tue May 17
06:01:31 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
Arch
> We can do more than drop id, we can use the same minimal pledge
> that will be enforced later since root doesn't need to call
> auth_userokay().
>
> In fact, root doesn't need proc or exec. Is this going too far?
That's a nice observation. Your diff looks fine to me as it is.
In the patch be
I would like to submit a feature request to where networks could be announced
per neighbor instead of globally. This would afford the benefit of
manipulating inbound BGP preferences to utilize a larger inbound connection by
announcing the smaller ranges, being more specific than the larger rang
On 2016/05/17 18:35, Kevin Wier wrote:
> I would like to submit a feature request to where networks could
> be announced per neighbor instead of globally. This would afford the
> benefit of manipulating inbound BGP preferences to utilize a larger
> inbound connection by announcing the smaller range
On 2016/05/17 21:34, Stuart Henderson wrote:
> On 2016/05/17 18:35, Kevin Wier wrote:
> > I would like to submit a feature request to where networks could
> > be announced per neighbor instead of globally. This would afford the
> > benefit of manipulating inbound BGP preferences to utilize a larger
>Synopsis: acpitz0: _AL0[0] _PR0 failed
>Category: system
>Environment:
System : OpenBSD 6.0
Details : OpenBSD 6.0-beta (GENERIC) #1925: Tue May 17 09:37:26 MDT
2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
16 matches
Mail list logo
