nsd question

Hi, I wasn't going to ask, but the book I have (alternative dns servers - jpm) is somewhat outdated on nsd. If I'm correct, in order to pull the zones to disk on a slave nsd setup, one has to manually or crontab "nsd-control write example.com". Is this correct? Is there an automated way to do

Re: Running your own mail server

On Sun, Sep 09, 2018 at 10:08:39AM +, Stuart Henderson wrote: > >> own email server, when I have never done it before on any OS, worth it > >> over some > >> other solution. And yes I am very open to other suggestions for a > >> solution, even > >> if it is something I have to pay for, to

Re: wifi gui manager

It is possible to put together a gui, wifi tray applet that utilizes doas. http://daemonforums.org/showthread.php?t=10400 -- J. Scott Heppler

Re: wifi gui manager

Consus writes: > On 18:07 Tue 21 Aug, Stuart Henderson wrote: > > On 2018-08-21, Consus wrote: > > > On 15:05 Tue 21 Aug, Stuart Henderson wrote: > > >> > Also what's wrong with gitlab/github? > > >> > > >> They encourage devs to be lazy and not produce proper stable release ass > ets. > > >>

Re: Let's Encrypt Error with cgit, httpd, acme-client

he...@ezaquarii.com writes: > On 21/08/2018 20:46, Parikh, Samir wrote:> # cgit CGI > > root "/cgi-bin/cgit.cgi" > > fastcgi socket "/run/slowcgi.sock" > > location "/.well-known/acme-challenge/*" { > > root { "/acme", strip 2 } > > } > > } > > Do you have

Re: Let's Encrypt Error with cgit, httpd, acme-client

Hi Samir, Parikh, Samir writes: > I am running cgit to host my git repositories on OpenBSD 6.3 and am > trying enable https using Let's Encrypt. I run cgit as well (with the same httpd.conf, acme-client.conf, file permissions, etc), and have no trouble creating and renewing certs. Do you see

Re: IPQoS values in sshd

Hello Daren, Thank you for your answer, I didn't see it earlier today. This change in current makes sense to me. Regards Le mercredi 8 août 2018 à 06:07:10 UTC+2, Darren Tucker a écrit : On 8 August 2018 at 05:29, Mik J wrote: > Does anyone knows what means lowdelay and though

Re: IPQoS values in sshd

ercredi 8 août 2018 à 11:31:39 UTC+2, Dahlberg, David a écrit : Am Dienstag, den 07.08.2018, 19:29 + schrieb Mik J: > Does anyone knows what means lowdelay and thoughput for IPQoS > parameter ? Bits 3 and 4 of old IP TOS field. > To what DSCP correspond these words You

IPQoS values in sshd

Hello, Does anyone knows what means lowdelay and thoughput for IPQoS parameter ? To what DSCP correspond these words I did a capture when writing ls in my terminal and I see DSCP=cs0. I would have expected something else. Regards

Re: "Missing operating system" after i386 dual boot install

Success! > Did you read the FAQ on multi-booting where they talk about > creating the> openbsd.pbr file and using bcdedit? In running dual-boot with > Win7/OpenBSD on one system, and Win10/OpenBSD on another, and the > procedure in the FAQ has worked well for me. >

"Missing operating system" after i386 dual boot install

y ideas? Output of "fdisk wd0", "disklabel wd0", and "installboot -nv wd0" reproduced below. Thanks, Sijmen J. Mulder --> fdisk wd0 Disk: wd0 geometry: 4998/255/63 [80293248 Sectors] Offset: 0 Signature: 0xAA55 Starting En

Re: POWER9 hardware donation

On Tue, Jul 24, 2018 at 09:21:09PM +0200, Peter J. Philipp wrote: > Hi, > > I'm working on a powerpc64 port, I've been at it 2 weeks non-stop.?? I don't > know if I'll finish.?? But I gotta say hey! this is a generous offer. > > Since I'm focusing on the big endian

Re: POWER9 hardware donation

Hi, I'm working on a powerpc64 port, I've been at it 2 weeks non-stop.  I don't know if I'll finish.  But I gotta say hey! this is a generous offer. Since I'm focusing on the big endian machine byte order and on PowerPC 970's it would need to be ported again to little endian afaik.  If it's

Re: Employers, Jobs and OpenBSD

I was extremely lucky 2 jobs ago to have an employer who requires only that I be able to SSH, and be able to work remotely across continents.  So I made OpenBSD my workstation.  The last job I had to use windows10 and I cried... and eventually quit, I can't work with that, and I wish I had my

Coming from FreeBSD, lower networking performance

Hi all, After migrating a VPS from FreeBSD to OpenBSD I noticed reduced networking performance. Both incoming and outgoing traffic seems to be 2-3 times slower on average. By testing 100MB file transfers I've mostly eliminated the following factors: - Protocol and ciphers (tested SCP, SFTP,

Re: nvi and unicode

Thuban writes: > Default vi (nvi) in OpenBSD doesn't handle correctly most of UTF-8 > sings such as "é", "à" or so. One need to install nvi package to do so. > Is it planned to replace the vi binary in the future? > Is there any reason I can't think to keep this vi version? nvi2's main deficiency

Re: OpenSMTPD and tls no-verify

On Sat, Jun 23, 2018 at 01:33:59PM +0200, Sebastien Marie wrote: > Hi Peter, > > The short response is: no. > > The long one is that currently `tls no-verify' applies only for > smarthost configuration (`relay' with `host url', when tls is implied). > > smtpd(8) should complains if you try the

OpenSMTPD and tls no-verify

Hi, This is more a question to the OpenSMTPD community. In OpenBSD 6.4 and already in -current there is a new config file syntax. I did the work and converted my config: http://www.centroid.eu/blog/c?article=1529689653 That is from my blog. I have a question though whether my config is

Re: egdgerouter 6 and mp

On Tue, Jun 12, 2018 at 03:08:49PM +0200, Holger Glaess wrote: > hi hello, > i bought the edgerouter 6 to play around wird openbsd 6.3 current. > > i install and boot current susccessful on a usb stick. > > my problem is that he only use one core. > > if i boot the boot the bsd.mp kernel by

Re: IKED with multiple clients and nat

Thank you Stuart, for the clues. Even a little context can make a huge difference when trying to understand something new. Really appreciate it. :)

Re: i915 witness log

Same here. Everything *seems* to be working fine. $ sysctl kern.version kern.version=OpenBSD 6.3-current (GENERIC.MP) #84: Tue Jun  5 19:22:09 MDT 2018 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP OpenBSD 6.3-current (GENERIC.MP) #81: Tue Jun  5 07:23:00 MDT 2018

Re: Is anyone able to use certificates with openbsd iked/ikev2 and Apple iOS (iphone)?

> Hello > > Last year (before about 3/27/2017 when "Add support for RFC4754 (ECDSA) and > RFC7427 authentication" diff was committed to current), I had set up and had > been able to connect iOS devices (iphone/ipad) to OpenBSD's iked, and have ikev2 > VPN's happen, almost as if by, magic. > >

Re: IKED with multiple clients and nat

> On Jun 2, 2018, at 6:03 AM, Stuart Henderson wrote: > > > On 2018-06-01, J Vans <3...@startmail.com> wrote: > > I am trying to route all of my ipv4 traffic through a particular server > > using OpenIKED. I have it successfully set up so that each client can

IKED with multiple clients and nat

I am trying to route all of my ipv4 traffic through a particular server using OpenIKED. I have it successfully set up so that each client can connect, and the traffic passes through correctly, but it only works for one client at a time. If Client A is connected by itself things work just fine,

Re: Open source RISC-V 64bit w ECC RAM & PCIe this summer

On Fri, May 18, 2018 at 03:31:51PM +0200, Karel Gardas wrote: > On Fri, 18 May 2018 02:30:13 -0400 > Joseph Mayer wrote: > > > 4-core (5-core?) 1.5Ghz, 8GB DDR4 ECC RAM, two PCIe slots (one one-lane > > and one two-lane PCIe 2.0?), SATA, gigabit ethernet, microSD,

Re: pkg_add with packages created by ports

Thank you for your answers. I did a first test with exporting the variable and it worked fine. Have a nice week Le mercredi 9 mai 2018 à 16:17:01 UTC+2, Marc Espie <es...@nerim.net> a écrit : On Wed, May 09, 2018 at 01:08:49PM +, Mik J wrote: >  Thank you Martijn for t

Re: pkg_add with packages created by ports

Thank you Martijn for this quick answer.So should I do something likeexport TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ Le mercredi 9 mai 2018 à 15:04:29 UTC+2, Martijn van Duren <openbsd+m...@list.imperialat.at> a écrit : On 05/09/18 15:00, Mik J wrote: > Hello, >

pkg_add with packages created by ports

Hello, I probably miss something in what I'm doing. I install packages through ports, for example I want to install php.Many other packages are also built but not installed (php-imap, php-curl...) So when I want to install this kind of packages I dopkg_add

Intel X-550T 10 GbE Adapter cards

Hi, The ix(4) manpage mentions there is support: o   Intel X550-T 10GbE Adapter (10GbaseT/1000baseT/100baseTX) However there is a X550-T1 and a X550-T2 model are both supported or just the X550-T1? Please clarify this for me. Also is there any comparable products that you'd recommend that I

Re: re0: watchdog timeout on recent current

Gregory Edigarov writes: > Hello everybody, > > ok, so here is the symptoms. the thing happens usually during the high > traffic, like when I am trying to watch video on a tv, which is > connected to my home server/router on re0 (it is the local interface). > > the video freezes immediately.

question regarding iked on rdomain 2

Hi, I have successfully managed to put an iked on an rdomain 2 interface. Everything is nicely on that domain/rtable. Now I want to route some parts of that into rdomain 0 and get the return traffic back on rdomain 2. But I can't for the life of me figure this way out. I've had error

Re: Having problems sleeping a used computer

On Tue, Apr 10, 2018 at 06:44:33PM +0200, Peter J. Philipp wrote: > I have expanded on the patch a little bit, it can guarantee a resume from > suspend exactly once, after that the box won't suspend anymore, but is > otherwise useable. Here the new patch. After my signature follow

Re: signify and ftp.eu.openbsd.org

On Wed, Apr 11, 2018 at 10:20:37PM +0200, Paul de Weerd wrote: > ftp doesn't do this itself, but the error detection in tcp and ssl > (ok, so that's linked into the ftp binary) do. > > The file is unlikely to have been changed in flight. OK, odd. What I find odd is that the SHA256.sig file I got

Re: signify and ftp.eu.openbsd.org

On Wed, Apr 11, 2018 at 08:45:40PM +0200, Paul de Weerd wrote: > Hi Peter, Hello Paul, > I downloaded those exact two files from the same IP addresses and the > signature verified OK for me: > > [weerd@pom] $ ftp -4 https://ftp.eu.openbsd.org/pub/OpenBSD/snapshots/amd64/i > > > Trying

Re: signify and ftp.eu.openbsd.org

ftp.eu.openbsd.org +short 2001:700:3:4017::100 that is in my DNS cache is this all correct? Best Regards, -peter On 04/11/18 19:54, Peter J. Philipp wrote: > Hi, > > I just downloaded this install63.iso from https://ftp.eu.openbsd.org: > > beta$ signify -C -p /etc/signify/open

signify and ftp.eu.openbsd.org

Hi, I just downloaded this install63.iso from https://ftp.eu.openbsd.org: beta$ signify -C -p /etc/signify/openbsd-63-base.pub \ > -x SHA256.sig bsd Signature Verified bsd: OK beta$ signify -C -p /etc/signify/openbsd-63-base.pub \ > -x SHA256.sig install63.iso Signature

Re: Having problems sleeping a used computer

On Mon, Apr 09, 2018 at 11:51:19PM +0200, Peter J. Philipp wrote: > Hi, > > I inherited a computer which I want to make a sleeping backup computer. The > idea is that it sleeps during the day and then I wake it with arp -W and it > receives backups and then it goes back to sleep,

Having problems sleeping a used computer

Hi, I inherited a computer which I want to make a sleeping backup computer. The idea is that it sleeps during the day and then I wake it with arp -W and it receives backups and then it goes back to sleep, but I'm running into problems. First with a snapshot kernel when I wake the box I get

is there foomatic-rip for lpd on openBSD 6.3?

It is in print/cups-filters http://cvsweb.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/print/cups-filters/pkg/README?rev=1.9=text/plain -- J. Scott Heppler

is gif(4) not backward compatible between 6.3 and 6.2?

Hi, I am in need of setting up an IPV4 tunnel over IPv6 in gif between a 6.3-current and a 6.2 router.  Only I'm not able to establish the tunnel.  In revision 1.109 of /sys/net/if_gif.c there went a change that changed the next header (protocol) to IPPROTO_GRE (protocol 47?) and that's what I'm

Re: Check if fsck will be run on a partition

net> a écrit : On 04/02/18 02:28, Mik J wrote: > @Theo: The fsck is not superfast, it takes 20s I end with that message39256 > files, 5904368 used, 10865841 free (15345 frags, 1356312 blocks, 0.1% > fragmentation) you missed his point. If it took 20 seconds to run, you needed to ru

Re: Check if fsck will be run on a partition

Hello, Thank you for your answers@Christian: The command takes 1s, and seem to work as you said# dumpfs sd1c | grep clean cgrotor 64  fmod    0   ronly   0   clean   0 @Theo: The fsck is not superfast, it takes 20s I end with that message39256 files, 5904368 used, 10865841 free

Check if fsck will be run on a partition

Hello, I have a script that mounts a partition and it works well except when the partition needs to be fsck checked.How can I know if the partition needs to be checked by fsck, I'd like to test that.If the partition needs to be checked by fsck, I run fsck firstElse I mount the partition Happy

monkeying around with pf (why scrub twice?)

Hi, I wrote a patch to program a very simple steganographic buffer into the pf firewalling system. However I'm running into a problem. It turns out at least to me, that pf's scrub gets called twice on output. Why is this? I'm making my patch available and the program to program the buffer

Re: OT strange nsd behavior

On Fri, Mar 16, 2018 at 10:40:37PM +0200, Ivo Chutkin wrote: > It should be, here is the result: > > ~ # nsd-checkzone proprevod.com /var/nsd/zones/master/clients/proprevod.com > zone proprevod.com is ok > > and nsd-checkconf does not return errors. > > I am lost here... Make sure you don't

Re: VM intermittent console output, AMD E-450 cpu

On 2018-03-15 15:23, Mike Larkin wrote: On Thu, Mar 15, 2018 at 12:01:32PM -0600, j...@bitminer.ca wrote: I am trying to create a VM on 6.2-stable and running into intermittent text output on the console; it takes from 0.2 seconds to 180 seconds to output text segments. A segment is a few

VM intermittent console output, AMD E-450 cpu

I am trying to create a VM on 6.2-stable and running into intermittent text output on the console; it takes from 0.2 seconds to 180 seconds to output text segments. A segment is a few bytes to several lines of text. It times out and often enough to prevent autoinstall from succeeding, most

Re: [Patch] remove xdm reference from X(7)

o X updates. Improvements to OpenBSD-maintained docs like cwm(1) and xenodm(1) are welcome though. > I also found that the first line of the file is a comment with a > character 't' alone. Manpages often do that as a marker to run the tbl preprocessor (similarly with 'e' for eqn, and so on). -- Anthony J. Bentley

6.3-beta quirk

Hi, I love the 6.3-beta but there is only 1 thing that is noticeable on it. This I want to report. When the green mode goes on, on the monitor and has been like that for a few hours, it will take a long time (2+ minutes?) to come back when I press a key. Workaround is turning the monitor off

Re: Webserver Meltdown Patch Importance?

tch for Meltdown. It’s best to assume someone has already “walked” through the memory space of your server and captured this information. - J

Re: drm permissions error with i965 on amd64 6.2 with libGL applications

Hi, does the xf86 manpage help any?  I don't know if the two are related but when it comes to permissions of the vga card, I think this is a spot to look. Regards, -peter On 03/03/18 12:52, Z Ero wrote: > "libGL error: failed to open drm device: Permission denied > libGL error: failed to load

Re: Lenovo X130e blank video at boot.rd

On 2018-02-28 11:18, Stefan Sperling wrote: The x130e can boot in either UEFI or legacy mode. I have 'UEFI/Legacy Boot' set to 'Both' and 'UEFI/Legacy Boot Priority' set to 'Legacy First'. Maybe this issue only happens with UEFI? Yes, that does it. "Legacy First" resolves the problem.

Re: Lenovo X130e blank video at boot.rd

On 2018-02-28 06:51, Stefan Sperling wrote: On Tue, Feb 27, 2018 at 04:53:06PM -0700, j...@bitminer.ca wrote: My x130e has no problems booting -current miniroot62.fs from USB. Video works fine ("ATI Radeon HD 6310"). dmesg below. Did you boot from OpenBSd powered-off sta

Lenovo X130e blank video at boot.rd

I am replacing my ancient X60 with an X130e of lesser age. This model is previously found as working on misc. When trying to install 6.2 (release) over Windows 10 there is no video to see. By booting miniroot62.fs from USB the kernel loads, but the "OpenBSD 6.2 " and subsequent boot

FIx inconsistant upgrade instructions

I noticed a couple of inconsistencies between upgradexx.html and INSTALL.platform. They don't state to remove man pages and include files. Here is a patch to fix upgradexx but I'm not sure how to go about fixing all INSTALL. so here is just the amd64 fix (based on -release, not -current). And,

Re: Kernel panic with openbsd 6.2

22 janvier 2018 à 10:35:47 UTC+1, Stuart Henderson <s...@spacehopper.org> a écrit : On 2018/01/22 00:22, Mik J wrote: > Le dimanche 21 janvier 2018 à 11:48:00 UTC+1, Stuart Henderson > <s...@spacehopper.org> a écrit : > On 2018-01-19, Mik J <mikyde...@yahoo.fr> w

Re: Kernel panic with openbsd 6.2

à 11:48:00 UTC+1, Stuart Henderson <s...@spacehopper.org> a écrit : On 2018-01-19, Mik J <mikyde...@yahoo.fr> wrote: > I had many kernel panic these past days. This is a 6.2 openbsd VM running o= > n esxi 5.5 > > # grep "" /tmp/if_vmx.dis I've reported a lo

Re: Flatbed scanner that works well with OpenBSD?

Base Pr1me writes: > Did you give your userland user/group permissions to use the uhub/ugen > device? Of course; without that I wasn't able to detect the scanner in the first place. > On Fri, Jan 19, 2018 at 9:59 AM, Anthony J. Bentley <anth...@anjbe.name> > wrote: > &g

Re: Flatbed scanner that works well with OpenBSD?

Bryan Linton writes: > Hello misc@ > > I'm currently looking to purchase a scanner that works well with OpenBSD. > > I'm aware of the list provided at: > > http://www.sane-project.org/sane-mfgs.html > > but I recently purchased (and returned) a scanner that was listed as being > fully

Re: Start 2 instances of ftp-proxy one for ftp one for reverse proxy

Le 17/01/2018 à 22:24, Mik J a écrit : > Hello, > I'd like my firewall to start two instances one for ftp proxy and one for ftp > proxy.So far I have in rc.confftpproxy_flags="-D7 -v -p 8021" > > I can run manually/usr/sbin/ftp-proxy -D7 -v -R 10.1.1.1 -p21 -b 3and t

Re: identifying software and licenses used in base install

cho...@jtan.com writes: > "Theo de Raadt" writes: > > > Is there, by chance, such a breakdown available for these already? > > > > > No. We did our best. > > To be fair, these statements are potentially contradictory. If you > (plural) only "did your best" (and what more could have been done?) >

Start 2 instances of ftp-proxy one for ftp one for reverse proxy

Hello, I'd like my firewall to start two instances one for ftp proxy and one for ftp proxy.So far I have in rc.confftpproxy_flags="-D7 -v -p 8021" I can run manually/usr/sbin/ftp-proxy -D7 -v -R 10.1.1.1 -p21 -b 3and the reverse proxy works But I would like these to instance to start

Re: risc-v

On Mon, Jan 15, 2018 at 08:25:58AM +, flipchan wrote: > I love risc-v ! > > But has risc-v started producing on real hardware and not kvm/qemu ? would be > cool to have that > In the riscv.org news there is this: https://abopen.com/news/future-ships-avalanche-fpga-dev-board-risc-v-core/

Re: risc-v

compiled (perhaps with a freebsd locore?) and that would further my goal of booting a bsd.rd or something in qemu. Cheers, -peter > 2018-01-14 21:43 GMT+01:00 Peter J. Philipp <p...@centroid.eu>: > > > Is anyone interested/working/planning around this ingenious open source >

risc-v

Is anyone interested/working/planning around this ingenious open source Instruction Set Architecture? Not many developer boards yet but there is simulators... Small contribution from me (how to compile riscv-qemu on OpenBSD 6.2-stable): http://centroid.eu/blog/index.php?article=1515597453 <--

Re: warn: smtpd: parent_forward_open

smtp://127.0.0.1:10025 Le samedi 6 janvier 2018 à 17:00:55 UTC+1, Edgar Pettijohn <ed...@pettijohn-web.com> a écrit : On Sat, Jan 06, 2018 at 02:40:00PM +, Mik J wrote: > Hello Edgar, > I just found that the path is related to the home directory of the virtual >

Re: warn: smtpd: parent_forward_open

at 11:09:13PM +, Mik J wrote: > Hello all, > What do you think about my initial question.When I receive an email, I have > the following messagewarn: smtpd: parent_forward_open: /var/mail/_vmail: No > such file or directory >  With /var/mail... not /var/rep... like I wrote in

Re: Thinkpad x230 usb3 xhci(4) issues with usb drives

I am running Current on an x230 with coreboot and do not have a problem with the usb 3.0 port. I haven't updated coreboot for awhile, so either they changed something or your build config needs to be modified (my guess is the latter). $ dmesg | grep coreboot bios0: vendor coreboot version

Should I enable APM on VMs ?

Hello, I have multiple VMs running on ESXi.I would like to know if it's worth enabling the apm daemon on my VM in order to spare ressources of the ESXi Thank you

Re: xterm(1) changing UTF-8 characters when copy-pasting?

Ingo Schwarze writes: > Hi, > > Anthony J. Bentley wrote on Fri, Dec 01, 2017 at 08:18:59AM -0700: > > Philippe Meunier writes: > > >> - In addition, when the precompose resource is set to false and TrueType > >> fonts are used, the result of printf

Re: xterm(1) changing UTF-8 characters when copy-pasting?

Philippe Meunier writes: > - When the precompose resource is set to false, copy-pasting the result of > printf "e\xcc\x81\n" never works correctly in xterm, regardless of > whether I use TrueType fonts or not. xterm copy-pastes the correct > sequence of bytes but that sequence is not

Re: xterm(1) changing UTF-8 characters when copy-pasting?

Ingo Schwarze writes: > >> +*precompose: false > > > Sure. > > On a more serious note, i'll commit that tomorrow then > based on OK bentley@ unless somebody can point out a downside. Please update the OPENBSD SPECIFICS section of the manual as well. > Hum, i don't doubt your analysis. But now i

Re: xterm(1) changing UTF-8 characters when copy-pasting?

edium-r-normal--20-200-75-75-c-100-iso10646-1 These are already the default according to appres(1). -- Anthony J. Bentley

Re: xterm(1) changing UTF-8 characters when copy-pasting?

Philippe Meunier writes: > The strange part is that, when I copy the first filename and paste > it to become the second filename, the second filename is shown without > any accent, even though the first and second filenames are now the exact > same sequence of bytes (I checked using od(1)). So on

Re: xterm(1) changing UTF-8 characters when copy-pasting?

e. The only unexpected thing here is xterm doing these transformations without asking. -- Anthony J. Bentley

Re: Stabilize Inteldrm on Braswell

> I was encountering the same crashes as some other Braswell-Users. > (Black Screen after youtube and pmap_flush_cache in panic message in > /var/log/messages) > For *me* those crashes went away as i added two Fixes which Matt Dillon > used in Dragonfly BSD. > The Patch below was applied to an

odd problem with etherip(4)

Hi, I have an etherip(4) interface in down state, yet I still receive carp's through it. I don't know how that's possible... beta# ifconfig etherip0 etherip0: flags=8902 mtu 1500 lladdr fe:e1:ba:db:a8:15 index 35 priority 0 llprio

Lenovo 110s Laptop - bug or unsupported hardware?

I decided to post this in misc because I am not sure if this a bug or unsupported hardware. It is a Lenovo 110s laptop. Apm works on this machine. Suspend and resume work on this machine. When running X, and doing things that require a lot of memory (open firefox and watch a youtube video + 3

Re: is there something missing in pledge?

On Tue, Oct 24, 2017 at 01:45:42PM +0200, Daniel Hartmeier wrote: > So all an attacker has to do is call pledge() again, with LESS > permissive promises, i.e. giving up getpw? > > #include > #include > > int main() > { > if (pledge("stdio rpath getpw", NULL) == -1) >

Re: is there something missing in pledge?

) and it bypasses all pledge checks, which satisfies me. When someone comes along and has the same problem all they have is search engines to find out why this all is. :-) I'm good with it. Cheers, -peter On 10/24/17 20:25, Ingo Schwarze wrote: > Hi Peter, > > Peter J. Philipp wrote on

Re: is there something missing in pledge?

On Tue, Oct 24, 2017 at 08:09:14AM -0600, Theo de Raadt wrote: > > I agree that it could be disappointing. but cpio is pledged, so it > > couldn't open /etc/spwd.db, because we considered this operation as > > a privilegied operation. > > > > in order to backup this file, you need another tool.

Re: is there something missing in pledge?

Hi, I've refactored my code, I added imsg and privsep in chroot. Nothing has changed. Still ugly code of mine and still unable to cpio /etc/spwd.db into a cpio file. Only added bonus is that I was able to tighten the pledge() in my code a wee bit. Here is my (refactored) code:

Re: is there something missing in pledge?

Deal, I'll redesign it, with imsg and privsep to do the inet functions. In the process it'll probably fix what I want from it. Thanks! -peter On 10/23/17 19:25, Theo de Raadt wrote: > Basically, you want your program to be able to do everything. > > pledge isn't a wand you wave over software

Re: is there something missing in pledge?

Hi, It unfortunately is not that simple to me. Because I don't have any getpw* code really. But when I take getpw out of pledge it aborts the program upon execution like so: beta# rbdaemon -s 192.168.35.4 mkdir: File exists Abort trap (core dumped) beta# dmesg|tail -1

is there something missing in pledge?

Hi, I'm debugging a program that doesn't work around reading /etc/spwd.db. In a ktrace it gives this: 78130 rbdaemon CALL open(0xeca79d7b000,0) 78130 rbdaemon NAMI "/etc/spwd.db" 78130 rbdaemon RET open -1 errno 1 Operation not permitted When I take the pledge code out which is: if

Question about sshd log disconnect entry

represent (in this case - 11) ? Thanks, - J

Re: cyrus imapd in 6.2 ports

12:27:59PM +, Peter J. Philipp wrote: >> Hi, >> >> I got these messages with the new 6.2 cyrus imapd: >> >> Oct 14 11:03:26 mercury imaps[55561]: client id sessionid=: >> "name" "Thunderbird" "version" "52.2.1" >> O

Re: Postfix tlsmgr(8) entropy source on OpenBSD

; - never block > > As I said, it doesn't matter which one you use. Thanks for your quick reply! Ok, I will make a note of this in my config notes and proceed accordingly. - J

Postfix tlsmgr(8) entropy source on OpenBSD

of the message regarding /dev/arandom and /dev/urandom would it now be correct to use *ONLY* /dev/urandom on current versions of OpenBSD ? Thanks, - J Sources: [1] https://marc.info/?l=openbsd-misc=150796373110940=2 [2] https://www.postfix.org/TLS_README.html

cyrus imapd in 6.2 ports

Hi, I got these messages with the new 6.2 cyrus imapd: Oct 14 11:03:26 mercury imaps[55561]: client id sessionid=: "name" "Thunderbird" "version" "52.2.1" Oct 14 11:03:26 mercury imaps[55561]: Fatal error: Internal error: assertion failed: imap/message.c: 4286: !message_need(m, M_RECORD) Oct 14

Re: Xbox 360 controller emulators/snes9x hangs at startup

Nam Nguyen writes: > After further research, this commit[1][2] may explain what is going on. > > > Remove SIGIO support. Base tools do not implement it and ports relying > > on libusbhid, generally via SDL, shouldn't do it either since it's not > > portable. > > If I understand correctly, I

MediaTek Mt7601

few months? I'm presently using an older, larger rum(4) usb device. Thanks -- J. Scott Heppler

Re: touchpad input driver: testing needed

Ulf Brosziewski wrote: > Hi Jeff, > > thanks for the test and the report. I'm pleased with the > result, of course. But there is a strange thing in > the wsconsctl output: The touchpad reports its vertical > but not its horizontal resolution. By itself, that's

Re: odd segfault when adding -lutil

sent. -peter On 08/08/17 01:36, Jeremie Courreges-Anglas wrote: > On Mon, Aug 07 2017, "Peter J. Philipp" <p...@centroid.eu> wrote: >> Hi, > Hi, > >> I'm writing to misc because I did a change with my programming project and >> it doesn't

odd segfault when adding -lutil

7:16 - 1.14 +++ delphinusdnsd.c 7 Aug 2017 16:30:31 - @@ -1,5 +1,5 @@ /* - * Copyright (c) 2002-2015 Peter J. Philipp + * Copyright (c) 2002-2017 Peter J. Philipp * All rights reserved. * * Redistribution and use in source and binary forms, with or without @@ -33,7 +33

Re: touchpad input driver: testing needed

Hello, The outputs from 'dmesg' and 'wsconsctl | grep mouse' on my Dell Inspiron 5567 follow: % dmesg OpenBSD 6.1-current (GENERIC.MP) #34: Tue Aug 1 18:56:18 MDT 2017 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8389611520 (8000MB) avail mem = 8128987136

Re: touchpad input driver: testing needed

Hello, The outputs from 'dmesg' and 'wsconsctl | grep mouse' on my Dell Inspiron 5567 follow: % dmesg OpenBSD 6.1-current (GENERIC.MP) #34: Tue Aug 1 18:56:18 MDT 2017 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 8389611520 (8000MB) avail mem = 8128987136

Re: octeon port, ubiquity edgerouter

On Wed, Jul 26, 2017 at 12:20:23AM +0200, Doggie wrote: > W dniu 2017-07-25 o 19:39, Peter J. Philipp pisze: > > Actually I bought the silent fans. So I don't have to write any code, > > too bad the foxconn fans are a misdesign. I'll maintenance this router > > next week f

Re: octeon port, ubiquity edgerouter

Actually I bought the silent fans. So I don't have to write any code, too bad the foxconn fans are a misdesign. I'll maintenance this router next week for the new fans. I'm putting it into production at home tomorrow though. Cheers, -peter On 07/25/17 18:38, Peter J. Philipp wrote: > On

Re: octeon port, ubiquity edgerouter

On Tue, Jul 25, 2017 at 10:58:13AM +0200, Peter J. Philipp wrote: > Hi, I got the ER-8. First impression is that it's in good condition, but the > fans are a little noisy, hoping it won't be a pain. cnmac0 starts on eth4 > instead of eth0 but that's no problem as long as I remember

<    1   2   3   4   5   6   7   8   9   10   >