Re: 80 users

2017-04-29 Thread Wiremu Demchick
I'm new to the OpenBSD source, so I welcome correction from someone who knows more. But, I'll put my neck out and attempt to give a basic tour of this aspect of the source. The maxusers entry in the config(8) file is where it all begins. http://man.openbsd.org/config.8 The figure of 80

Re: Etnernal & infernal browser woes

2017-04-29 Thread Philipp Buehler
Am 30.04.2017 00:07 schrieb Mihai Popescu: Do you know a method like this to disable kernel panic screen, too? Also something for hidding the dmesg scroll on boot will be nice. Maybe something to show a nice picture with a text like "sit back and relax while your OS is loading ..." - the last

Re: Etnernal & infernal browser woes

2017-04-29 Thread trondd
On Sat, April 29, 2017 6:07 pm, Mihai Popescu wrote: > Do not forget to use (activate) uBlock Origin too, there is in Add-Ons > for Firefox. > > Teh guy with 134 opened tabs at once in firefox was funny. How many > monitors is firefox windows spreading across? > > Thanks. > It's tabs. You only

80 users

2017-04-29 Thread Luke Small
As I recall, there is a build configuration of 80 users for some kernel components. What happens if the system exceeds that number?

Re: Etnernal & infernal browser woes

2017-04-29 Thread Sterling Archer
On Sun, Apr 30, 2017 at 12:07 AM, Mihai Popescu wrote: > Do you know a method like this to disable kernel panic screen, too? > Also something for hidding the dmesg scroll on boot will be nice. > > Maybe something to show a nice picture with a text like "sit back and > relax

Re: Etnernal & infernal browser woes

2017-04-29 Thread Mihai Popescu
Do not forget to use (activate) uBlock Origin too, there is in Add-Ons for Firefox. And one more thing, from this thread: > If you want to disable core dump for a program, you could (should ?) > configure your RLIMIT_CORE to 0. > > $ ulimit -c 0 > $ firefox > > Ah, yes. That's a much better

Re: OpenBSD/octeon on EdgeRouter PoE - my experience

2017-04-29 Thread Doggie
W dniu 2017-04-25 o 18:47, Daniel Gracia pisze: EdgeRouter PoE octeon has 3 Ethernet hardware ports (it is the very same platform for PoE and Lite). In the case of the PoE unit: * Two first ports are connected to a PHY device (so you can connect an actual UTP/FTP cable). * Third port is

Re: iwm0 problems

2017-04-29 Thread Steve Throckmorton
I recently installed -current on a Dell laptop my mother decided she didn’t want. I have the same problems with iwm0 on this machine (with its AC 3160 wireless device) as were reported for the 3165. The dmesg I’m reproducing below includes this error msg at the end: iwm0: hw rev 0x160, fw

Re: pledge for sockets

2017-04-29 Thread Luke Small
I think I found a way to configure the redis.conf to connect to redis through a unix socket instead, which will seem to clean up some stuff. If I need to later, I could probably spawn a process to relay commands from a unix socket to an inet socket that is limited to a single port through a

Re: Etnernal & infernal browser woes

2017-04-29 Thread Bryan Linton
On 2017-04-29 17:28:33, Sebastien Marie wrote: > On Sat, Apr 29, 2017 at 11:21:25PM +0900, Bryan Linton wrote: > > > > One hack I've done when I don't care about actually getting or > > using a corefile from large programs is to do the following: > > > > # rm

Re: Etnernal & infernal browser woes

2017-04-29 Thread Sebastien Marie
On Sat, Apr 29, 2017 at 11:21:25PM +0900, Bryan Linton wrote: > On 2017-04-29 15:48:51, Ingo Schwarze wrote: > > > > Chris Bennett wrote on Sat, Apr 29, 2017 at 07:10:05AM -0500: > > > >> Firefox [...] takes a long period to actually finish crashing > > > > It dumps core.

Re: pledge for sockets

2017-04-29 Thread Luke Small
I have a program that I believe needs inet to talk to a database(libhiredis). I do pass file descriptors to it. I don't suppose making it run as a different user and limiting the pf config would really lock it down without losing functionality. Maybe I'm too paranoid. On Sat, Apr 29, 2017 at 9:51

Re: pledge for sockets

2017-04-29 Thread Theo de Raadt
> I can imagine pledge(2) becoming very complex if individual ports are > blocked. It is not just the syscall, it's also the code in the > kernel. From what I can gather, pledge is really to restrict processes > to a subset of functions available, rather than restricting each > individual

Re: pledge for sockets

2017-04-29 Thread Reyk Floeter
> Am 26.04.2017 um 13:38 schrieb Luke Small : > > Pledge will presumably have per process (including fork()ed process) **path > limitations on rpath rpath and wpath calls, why not limitations on inet and > unix? We usually want to isolate our network speakers from the

Re: Etnernal & infernal browser woes

2017-04-29 Thread Riccardo Mottola
Hi, On 28/04/2017 14:18, Jyri Hovila [iki.fi] wrote: which is properly coded, very stable and secure, but (when it comes to a "normal" user or even an experienced sysadmin) utterly useless when it comes to doing the stuff everyone does these days -- browsing the net. Yes, I know many of you

Re: pledge for sockets

2017-04-29 Thread bytevolcano
I can imagine pledge(2) becoming very complex if individual ports are blocked. It is not just the syscall, it's also the code in the kernel. From what I can gather, pledge is really to restrict processes to a subset of functions available, rather than restricting each individual argument, unless

Re: Etnernal & infernal browser woes

2017-04-29 Thread Bryan Linton
On 2017-04-29 15:48:51, Ingo Schwarze wrote: > > Chris Bennett wrote on Sat, Apr 29, 2017 at 07:10:05AM -0500: > >> Firefox [...] takes a long period to actually finish crashing > > It dumps core. That takes a long time because firefox tends > to waste huge amounts of memory

Re: Etnernal & infernal browser woes

2017-04-29 Thread Ingo Schwarze
Hi Chris, Chris Bennett wrote on Sat, Apr 29, 2017 at 07:10:05AM -0500: > Firefox [...] takes a long period to actually finish crashing It dumps core. That takes a long time because firefox tends to waste huge amounts of memory, and it's favourite pretext for crashing is ENOMEM, see errno(2),

Re: Etnernal & infernal browser woes

2017-04-29 Thread Gregor Best
Hi Jyri, would you mind sharing a dmesg with us, or at least any sort of general info in what environment you're experiencing these kinds of problems? Of course running a current chrome on an old iMac won't yield the same performance as running chrome on a laptop fresh out of the box, but the OS

Re: Etnernal & infernal browser woes

2017-04-29 Thread Chris Bennett
On Fri, Apr 28, 2017 at 04:32:49PM +0200, Martin Pieuchot wrote: > On 28/04/17(Fri) 16:20, Anders Andersson wrote: > > [...] > > From what I read, it seems as if the problems are mostly from when you > > try websites which are heavy on javascript. > > If javascript was the problem others OSes

Hosted CI with OpenBSD targets

2017-04-29 Thread Derek (openbsd-misc)
Hi! Wondering if anyone has experience with hosted CI services that support OpenBSD targets for building + tests. I haven't been successful finding any. Looking to add native OpenBSD support to a project's CI, hoping to draw on the community's experience. Would also prefer to run a

Re: OpenBSD 6.1 - Song released

2017-04-29 Thread flipchan
Nice!! On April 27, 2017 6:51:20 PM GMT+02:00, R0me0 *** wrote: >Great work ! > > >Bryan Adams - Summer of 69 - Parody > > >Long Life to Puffy > >Cheers -- Take Care Sincerely flipchan layerprox dev