Re: chroot for go webserver with pledge and unveil

2022-03-15 Thread Nick Holland
On 3/15/22 6:32 PM, i...@tutanota.com wrote: ... $ doas chroot -u www -g www /var/www /bin/go-server But that wouldn't keep it running after a reboot. The "easy" and historic way: man 8 rc more specifically, rc.local The "better" way: man 8 rc.d (and read the "see also"s.) Probably

Re: chroot for go webserver with pledge and unveil

2022-03-15 Thread Raul Miller
On Tue, Mar 15, 2022 at 10:25 PM wrote: > Is there something to restart it if it crashes? If that's a concern you could use a shell script that launches and relaunches the thing, But ask yourself: why would you want it to restart automatically after a crash, if you are concerned about security?

Re: chroot for go webserver with pledge and unveil

2022-03-15 Thread bigato
Em Tue, 2022-03-15 às 23:32 +0100, i...@tutanota.com escreveu: > I was thinking that since Go by default doesn't run a webserver on >  port 80 or 443 What does it even mean. Go is a programming language. If you want to build and run a webserver with it and have it listen on whatever port you

Re: Latency and loss persist with iwm0 (Was Re: Latency with run0 interface)

2022-03-15 Thread readme
On Tue, Mar 15, 2022 at 05:19:34PM +0100, Stefan Sperling wrote: >On Tue, Mar 15, 2022 at 09:09:57AM -0500, rea...@catastrophe.net wrote: [..] >> # ifconfig iwm0 mediaopt monitor mode 11n >> # ifconfig iwm0 chan 132 >> # ifconfig iwm0 up [..] > >> Next I'll try join the network using the 5Ghz

Re: How much does battle-testing weigh?

2022-03-15 Thread Daniel Ouellet
Economics 101: doesn't matter what you say, it matters what you DO. Everyone says security is important; few actually give a shit about it. Amen brother! That's right to the point! Nick.

Re: How much does battle-testing weigh?

2022-03-15 Thread Nick Holland
On 3/14/22 4:31 PM, the guy who couldn't solve a trivial problem without vi on the install media wrote: Billions of companies world wide use the Linux kernel and several of the major Linux distributions daily. It would stand to reason that that would make a lot more bugs be discovered. The

Re: Latency and loss persist with iwm0 (Was Re: Latency with run0 interface)

2022-03-15 Thread Stefan Sperling
On Tue, Mar 15, 2022 at 09:09:57AM -0500, rea...@catastrophe.net wrote: > Yes you did, and I greatly appreciate it. However, the interface won't > join to anything once out of monitor mode. > > # uname -a > OpenBSD server.example.org 7.0 GENERIC.MP#5 amd64 > > # ifconfig iwm0 mediaopt monitor

Re: How much does battle-testing weigh?

2022-03-15 Thread readme
On Tue, Mar 15, 2022 at 01:08:38AM +0100, i...@tutanota.com wrote: >Do you believe that OpenBSD has less attack vectors? I fail to see >that. If I install a basic Debian, just as an example, with only the >base system, there is nothing running to attack. If I install NGINX on >OpenBSD and on

Re: Latency and loss persist with iwm0 (Was Re: Latency with run0 interface)

2022-03-15 Thread readme
On Tue, Mar 15, 2022 at 02:15:41PM +0100, Stefan Sperling wrote: >On Tue, Mar 15, 2022 at 08:02:07AM -0500, rea...@catastrophe.net wrote: >> Unfortunately it appears as though I've run into it. Is there any recourse >> to provide more useful debugging information to find the issue? > >I already

Re: Latency and loss persist with iwm0 (Was Re: Latency with run0 interface)

2022-03-15 Thread Stefan Sperling
On Tue, Mar 15, 2022 at 08:02:07AM -0500, rea...@catastrophe.net wrote: > On Mon, Mar 14, 2022 at 11:37:15PM +0100, Stefan Sperling wrote: > >In the implementation, the mode determines which channels are available, > >not the other way around. > >And for some reason your interface goes into a mode

Re: Latency and loss persist with iwm0 (Was Re: Latency with run0 interface)

2022-03-15 Thread readme
On Mon, Mar 14, 2022 at 11:37:15PM +0100, Stefan Sperling wrote: >On Mon, Mar 14, 2022 at 05:16:32PM -0500, rea...@catastrophe.net wrote: >> Trying to manually monitor channel 132, I get an error, SIOCS80211CHANNEL. >> [..] >> # ifconfig iwm0 chan 132 >> ifconfig: SIOCS80211CHANNEL: Invalid

Re: Hardware for OpenBSD based access point

2022-03-15 Thread Laurence Tratt
On Mon, Mar 14, 2022 at 01:52:15AM +0100, Nicolas Goy wrote: Hello Nicolas, > I use OpenBSD for all my network gears except wireless access points. > > My current access points are getting old and I'd like to replace them. I was also in the same place a year or so ago. After seeing many

Re: Hardware for OpenBSD based access point

2022-03-15 Thread Stuart Henderson
On 2022-03-15, Stuart Longland wrote: > On Mon, 14 Mar 2022 20:16:14 +0100 > Nicolas Goy wrote: > >> I heard that controller based AP "fleet" can mitigate that by >> kicking devices that are on the "wrong" AP. But I am not sure how it >> works in practice as I only read about it and it is not

cwm and twm windows handling

2022-03-15 Thread Mihai Popescu
Hello, I have some new behavior of cwm lately: if i start chromium with a window at 0:0 and maximized, it increments the base position with +1, so that the following positions are +1:+1, +2:+2, etc. I was using cwm with chromium a lot and the windows was always fixed at 0:0, no matter what. Is

Re: Please put vi in base

2022-03-15 Thread Michael Hekeler
Am 13.03.22 03:38 schrieb i...@tutanota.com: > (...) > In my 30 years of doing sysadmin work, I have never - not even once - come > across a > situation where a normal editor like vi or nano or something equally simple > didn't > exist on the install media. Maybe I am wrong, but I am thinking