Re: doas and args matching

2022-07-28 Thread Alexis
Alexander Hall writes: There's a good chance i'm misunderstanding, but doesn't this run into the same issue? Namely, that (as far as i'm aware) it's not possible to specify that a doas-permitted command be allowed to run with arbitrary arguments (or range of arguments), rather than only

Re: serial console works only if system is booted from it

2022-07-28 Thread Todd C . Miller
On Thu, 28 Jul 2022 15:11:58 -0500, Andrew Daugherity wrote: > This is probably worth a mention in the ttys(5) man page. It's one of > those things that once you've worked through it, you know, but it's > not at all obvious that HUP-ing init applies changes from every other > column but NOT any

Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Chris Bennett
On Thu, Jul 28, 2022 at 08:13:46AM -, Stuart Henderson wrote: > Either use -d, or set CVSROOT, or replace CVS/Root files with ones > containing the path to the repo (cvschroot from the cvsutils package > makes this easy). If your original checkout had been done via anoncvs > you wouldn't have

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
On 2022 jeu 28 jui - 12:20, Kevin Wallace wrote: > On 2022-07-28 11:32 AM, Nicolas Goy wrote: > > I found something weird that might be a bug. > > > ping6 fe80:b2b:11fe:161::2%vport0 > > The KAME IPv6 code uses the second word of link-local addresses for > internal bookkeeping, and clears it

Re: serial console works only if system is booted from it

2022-07-28 Thread Andrew Daugherity
On Mon, Jul 25, 2022 at 9:01 PM Todd C. Miller wrote: > > On Sun, 24 Jul 2022 23:50:11 -0700, Kastus Shchuka wrote: > > > Apparently, restarting getty on tty00 was not enough. > > After reboot, I got login prompt on tty00 line. > > Running "ttyflags -a" as root would probably also fix it without

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
I found something weird that might be a bug. If I do doas ifconfig vport0 inet6 fe80::2/10 Then ping6 fe80:b2b:11fe:161::2%vport0 On the tcpdump output, I see a different address 20:31:15.816576 fe80::fce1:baff:fed1:b34 > ff02::1:ff00:2: icmp6: neighbor sol: who has fe80:0:11fe:161::2

Re: testing 7.2-beta ( tftpd )

2022-07-28 Thread Sven F.
On Wed, Jul 27, 2022 at 6:39 PM Sven F. wrote: > Dear readers, > > I ran tftpd like this : > > route -T 10 exec /usr/sbin/tftpd -d -v -c -l 192.168.2.1 /var/tftpd > > when trying to upload , it created an empty file in /var/tftpd > > # ls -ld /var/tftpd/; ls -l /var/tftpd/ > drwxr-xr-x 2

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
Ok, I think I found the issue. The cisco is useing the address fe80:b2b:11fe:161::2 but for some reason, openbsd doesn't link this. I cannot ping fe80:b2b:11fe:161::2%vport0 The system is adding fe80::%vport0/64 to the routing table. I am not sure, but I think that's the cause. I tried to

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
I added this as my first line in pf.conf pass quick log on vport0 proto icmp6 When I do tcpdump -i vport0 I do see the packets 19:21:09.846069 fe80:b2b:11fe:161::2 > ff02::1:ff01:1: icmp6: neighbor sol: who has [class 0xe0] But there is nothing on tcpdump -i pflog0 It seems those

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
As additional info, here are my sysctl net.inet6.ip6.forwarding=1 net.inet6.ip6.redirect=1 net.inet6.ip6.hlim=64 net.inet6.ip6.mrtproto=0 net.inet6.ip6.maxfragpackets=200 net.inet6.ip6.log_interval=5 net.inet6.ip6.hdrnestlimit=10 net.inet6.ip6.dad_count=1 net.inet6.ip6.auto_flowlabel=1

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
Ok, actually the ISP router is also trying the multicast after failing the unicast: Here are two packets, the first one works, the router responds (openbsd box), but the second one is ignored. first one (works is responded to): [+] Frame 12012: 86 bytes on wire (688 bits), 86 bytes captured

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
On 2022 jeu 28 jui - 16:14, Nicolas Goy wrote: > On 2022 jeu 28 jui - 15:52, Nicolas Goy wrote: > > On 2022 jeu 28 jui - 13:18, Nicolas Goy wrote: > > > > > > - I can ping internet from my router, but it cuts every 10 seconds or > > > so. If I inspect the traffic, I see that the ISP router is

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
On 2022 jeu 28 jui - 15:52, Nicolas Goy wrote: > On 2022 jeu 28 jui - 13:18, Nicolas Goy wrote: > > > > - I can ping internet from my router, but it cuts every 10 seconds or > > so. If I inspect the traffic, I see that the ISP router is sending > > neighbor discovery with my router address,

Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Stuart Henderson
On 2022/07/28 14:01, rsyk...@disroot.org wrote: > Stuart Henderson wrote: > > On 2022-07-28, rsyk...@disroot.org wrote: > > > Dear list, > > > > > > > > > I have a ports tree. (Most probably first obtained > > > by downloading a .tar file.) I am able to update it > > > with, e.g., > > > > > > ;

Re: Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
On 2022 jeu 28 jui - 13:18, Nicolas Goy wrote: > > - I can ping internet from my router, but it cuts every 10 seconds or > so. If I inspect the traffic, I see that the ISP router is sending > neighbor discovery with my router address, and that my router does not > respond. > This seems

Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Paul de Weerd
On Thu, Jul 28, 2022 at 02:01:54PM +0200, rsyk...@disroot.org wrote: | Ok. Now I perhaps gained some of the missing understanding, but | still not full. | | So if I obtain the tree by downloading a .tar, it is not enough | to just supply -d to cvs once and next time run cvs without the -d; | I

Re: doas and args matching

2022-07-28 Thread Alexander Hall
On July 28, 2022 5:09:54 AM GMT+02:00, Alexis wrote: > >Alexander Hall writes: > >> Better yet, the wrapper could be allowed with no argument restrictions >> and just do >> >> wsconsctl "display.brightness=$1" >> >> or even (maybe; untested) >> >> wsconsctl

Configuration of static ipv6 router

2022-07-28 Thread Nicolas Goy
Hello, My ISP gave me a /56 and told me it was statically routed (no DHCPv6-PD). Let's say this prefix 2a02:aa08::YY00::/56 is now x00::/56 What I want to do, is to split this prefix into /64 and use the /64 for my vlans. So what I did is on my interfaces I have the following ips: wan

Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Stuart Henderson
On 2022-07-28, rsyk...@disroot.org wrote: > Dear list, > > > I have a ports tree. (Most probably first obtained > by downloading a .tar file.) I am able to update it > with, e.g., > > ; CVSROOT=anon...@ftp.hostserver.de:/cvs > ; cvs -d $CVSROOT -q up -Pd -rOPENBSD_7_1 > > After that I thought --

Re: necessity to specify CVSROOT each time cvs is run?

2022-07-28 Thread Jason McIntyre
On Thu, Jul 28, 2022 at 09:26:40AM +0200, rsyk...@disroot.org wrote: > Dear list, > > > I have a ports tree. (Most probably first obtained > by downloading a .tar file.) I am able to update it > with, e.g., > > ; CVSROOT=anon...@ftp.hostserver.de:/cvs > ; cvs -d $CVSROOT -q up -Pd -rOPENBSD_7_1