pledge(2) binding for Haskell

2016-01-19 Thread Matthias Kilian
Add a binding to pledge(2) to package 'unix'. To use it: - run ghc with -package unix - import System.OpenBSD.Process ( pledge ) - call the pledge function as needed. It returns an IO () computation, which will throw an exception in case of an error. Notes: - I'll also merge the -main and -

Re: pledge(2) binding for Haskell

2016-01-19 Thread Sebastien Marie
On Tue, Jan 19, 2016 at 09:09:49AM +0100, Matthias Kilian wrote: > Add a binding to pledge(2) to package 'unix'. Just a question, as I am unsure by just reading the code. > Index: files/Process.hsc > === > RCS file: files/Process.hsc

Re: pledge(2) binding for Haskell

2016-01-19 Thread Sebastien Marie
On Tue, Jan 19, 2016 at 09:29:58AM +0100, Sebastien Marie wrote: > > char *empty = {NULL}; > pledge("stdio rpath", empty); > should be better with an array of char *, sorry. char *empty[] = { NULL }; pledge("stdio rpath", empty); -- Sebastien Marie

New: textproc/p5-Sourcecode-Spellchecker

2016-01-19 Thread David Coppa
Sourcecode::Spellchecker is a Perl module that scans a source file for common misspellings - including in comments, string literals, and identifier names - and suggests corrections. I find it very useful. OK? P.S.: created using portgen (and then hand-edited) Ciao! David p5-Sourcecode-Spellch

security/jailkit - a diff for more relax on openbsd

2016-01-19 Thread Jiri B
Hi, jailkit doesn't like 'daemon' as group on chroots, that's what we have for /var/www. What about this? https://savannah.nongnu.org/bugs/index.php?46930 --- jk_lib.py.orig Tue Jan 19 11:21:16 2016 +++ jk_lib.py Tue Jan 19 11:32:16 2016 @ -65,18 +65,9 @@ def path_is_safe(path, failquiet

NEW: py-Fabric

2016-01-19 Thread Pablo Méndez Hernández
$ cat sysutils/py-Fabric/pkg/DESCR Fabric is a Python (2.5-2.7) library and command-line tool for streamlining the use of SSH for application deployment or systems administration tasks. It provides a basic suite of operations for executing local or remote shell commands (normally or via sudo) and

Re: New: textproc/p5-Sourcecode-Spellchecker

2016-01-19 Thread David Coppa
On Tue, Jan 19, 2016 at 1:19 PM, Stuart Henderson wrote: > On 2016/01/19 11:26, David Coppa wrote: >> Sourcecode::Spellchecker is a Perl module that scans a source file for >> common misspellings - including in comments, string literals, and >> identifier names - and suggests corrections. >> >> I

Re: New: textproc/p5-Sourcecode-Spellchecker

2016-01-19 Thread David Coppa
On Tue, Jan 19, 2016 at 1:31 PM, David Coppa wrote: > On Tue, Jan 19, 2016 at 1:19 PM, Stuart Henderson wrote: >> On 2016/01/19 11:26, David Coppa wrote: >>> Sourcecode::Spellchecker is a Perl module that scans a source file for >>> common misspellings - including in comments, string literals, an

pledge tor

2016-01-19 Thread Carlin Bingham
The compat.c patch is by tb@ and stops tor from calling sysctl() to get the total memory everytime it receives sighup, so we don't need `ps' after tor_init(). I originally thought tor repeatedly called setgroups() but it does avoid this so we don't need `id' after tor_init() either. What's left

Re: New: textproc/p5-Sourcecode-Spellchecker

2016-01-19 Thread Stuart Henderson
On 2016/01/19 13:40, David Coppa wrote: > On Tue, Jan 19, 2016 at 1:31 PM, David Coppa wrote: > > On Tue, Jan 19, 2016 at 1:19 PM, Stuart Henderson wrote: > >> On 2016/01/19 11:26, David Coppa wrote: > >>> Sourcecode::Spellchecker is a Perl module that scans a source file for > >>> common misspel

Re: update: sysutils/cfengine

2016-01-19 Thread Stuart Henderson
On 2016/01/19 00:26, Rodrigo Mosconi wrote: > Follow the cvs diff > > 2016-01-19 0:15 GMT-02:00 Stuart Henderson : > > On 2016/01/18 23:54, Rodrigo Mosconi wrote: > > Hi! > > > > This updates sysutils/cfengine to 3.7.3. > > > > The users promise is not enabled, because it

Re: pledge tor

2016-01-19 Thread Stuart Henderson
On 2016/01/20 02:04, Carlin Bingham wrote: > pf - tor supports transparent proxying to pf I think it would be reasonable to kill support for the DIOCNATLOOK method for rdr-to, and only allow the pf-divert ("divert-to") method that's used by spamd, ftp-proxy, squid, etc. It just uses getsockname()

Re: pledge(2) binding for Haskell

2016-01-19 Thread Aaron Bieber
Matthias Kilian writes: > Add a binding to pledge(2) to package 'unix'. > > To use it: > > - run ghc with -package unix > > - import System.OpenBSD.Process ( pledge ) > > - call the pledge function as needed. It returns an IO () computation, > which will throw an exception in case of an error.

Re: pledge tor

2016-01-19 Thread Pascal Stumpf
On Tue, 19 Jan 2016 14:35:24 +, Stuart Henderson wrote: > On 2016/01/20 02:04, Carlin Bingham wrote: > > pf - tor supports transparent proxying to pf > > I think it would be reasonable to kill support for the DIOCNATLOOK > method for rdr-to, and only allow the pf-divert ("divert-to") method >

UPDATE: PyPy-4.0.1

2016-01-19 Thread Edd Barrett
Hi, Here's an update to the latest PyPy. Last year I pushed changes upstream to detect RAND_egd() at build time, so many SSL-related patches have been removed. Stuart has kindly hosted the new bootstrap. Thanks. OK? Index: Makefile =

Re: pledge in ports

2016-01-19 Thread lists
Tue, 19 Jan 2016 02:40:18 +1300 Carlin Bingham > None of these can be dropped later or made conditional on the > configuration, as tor's config can be changed and reloaded while it's > running and it needs them all to handle that. > > Is a wide pledge like this still beneficial? Shows obvious ap

Re: update: sysutils/cfengine

2016-01-19 Thread Rodrigo Mosconi
Follow the cvs diff 2016-01-19 0:15 GMT-02:00 Stuart Henderson : > On 2016/01/18 23:54, Rodrigo Mosconi wrote: > > Hi! > > > > This updates sysutils/cfengine to 3.7.3. > > > > The users promise is not enabled, because it require some PAM interface. > I > > didn`t looked what need, and if has a "P

Re: pledge in ports

2016-01-19 Thread Theo de Raadt
> Tue, 19 Jan 2016 02:40:18 +1300 Carlin Bingham > > None of these can be dropped later or made conditional on the > > configuration, as tor's config can be changed and reloaded while it's > > running and it needs them all to handle that. > > > > Is a wide pledge like this still beneficial? > >

Re: NEW: lua-lyaml

2016-01-19 Thread Florian Stinglmayr
Since I haven't received any suggestions for fixes or improvements I assume it is ready to be imported, no? ;-) Regards, Florian

Re: pledge tor

2016-01-19 Thread Theo de Raadt
> On Tue, 19 Jan 2016 14:35:24 +, Stuart Henderson wrote: > > On 2016/01/20 02:04, Carlin Bingham wrote: > > > pf - tor supports transparent proxying to pf > > > > I think it would be reasonable to kill support for the DIOCNATLOOK > > method for rdr-to, and only allow the pf-divert ("divert-to

maintainer update mail/claws-mail

2016-01-19 Thread Daniel Jakots
Hi, 3.13.1 was released to fix a "remotely exploitable bug", sadly it was only partially fixed, so here is 3.13.2. The release note is only: * Bug fixes: o bug 2358, '"Disposition-Notification-To:" should default to same value as "From:' o bug 3557, 'Remotely

Re: maintainer update mail/claws-mail

2016-01-19 Thread Landry Breuil
On Tue, Jan 19, 2016 at 07:01:00PM +0100, Daniel Jakots wrote: > Hi, > > 3.13.1 was released to fix a "remotely exploitable bug", sadly it was > only partially fixed, so here is 3.13.2. > > The release note is only: > * Bug fixes: > o bug 2358, '"Disposition-Notification-To:" should default

Re: [NEW] games/typespeed

2016-01-19 Thread Landry Breuil
On Mon, Jan 18, 2016 at 03:43:58PM +0100, n.reu...@hxgn.net wrote: > > Hi, > > > > attached you find a port for the typing game 'typespeed' [1]. Someone > > tried to get this imported in 2004, but did not succeed: > > http://marc.info/?l=openbsd-ports&w=2&r=1&s=typespeed&q=b > > > > The last rel

Re: pledge(2) binding for Haskell

2016-01-19 Thread Matthias Kilian
Hi, On Tue, Jan 19, 2016 at 09:29:58AM +0100, Sebastien Marie wrote: > Just a question, as I am unsure by just reading the code. [...] > > +pledge :: String -> [FilePath] -> IO () > > Shouldn't be: > > pledge :: String -> Maybe [FilePath] -> IO () > > in order to differenciate passing not sec

Re: pledge(2) binding for Haskell

2016-01-19 Thread Matthias Kilian
On Tue, Jan 19, 2016 at 08:22:54PM +0100, Matthias Kilian wrote: > Below is a hopefully correct and more complete diff. Again without > bump because I'll also merge -main and -doc. Famous last words. I missed the plist changes. Will send a new diff later (at the moment i'm rebuilding ghc). Ciao,

Re: [NEW] games/typespeed

2016-01-19 Thread Landry Breuil
On Tue, Jan 19, 2016 at 07:26:50PM +0100, Landry Breuil wrote: > On Mon, Jan 18, 2016 at 03:43:58PM +0100, n.reu...@hxgn.net wrote: > > > Hi, > > > > > > attached you find a port for the typing game 'typespeed' [1]. Someone > > > tried to get this imported in 2004, but did not succeed: > > > http

Re: pledge(2) binding for Haskell

2016-01-19 Thread Matthias Kilian
On Tue, Jan 19, 2016 at 08:43:17PM +0100, Matthias Kilian wrote: > > Below is a hopefully correct and more complete diff. Again without > > bump because I'll also merge -main and -doc. > > Famous last words. I missed the plist changes. Will send a new diff > later (at the moment i'm rebuilding ghc

[wip] Firefox 44.0rc1

2016-01-19 Thread Landry Breuil
Hi, 44 is now at rc1, i dont know yet if this will make 5.9. If you want to build it, you'll need the attached mozilla.port.mk diff. https://cgit.rhaalovely.net/mozilla-firefox/?h=release git clone -b release https://rhaalovely.net/git/mozilla-firefox doas env PKG_PATH=https://rhaalovely.net/stu