Re: delete pltime and vltime

From: Florian Obser Date: Wed, 12 Apr 2023 14:45:10 +0200 I had overlooked SIOCAIFADDR_IN6. > On 2023-04-12 20:13 +09, Masato Asou wrote: >> Hi, >> >> SIOCSIFALIFETIME_IN6 has been removed from sys/netinet6/in6_var.h with >> the following commit: >> >> commit

Add -pweneighbor to ifconfig.8

The ifconfig command has -pweneighbor option. However, it is not described in the manual ifconfig.8. comment, ok? -- ASOU Masato Index: sbin/ifconfig/ifconfig.8 === RCS file: /cvs/src/sbin/ifconfig/ifconfig.8,v retrieving revision

ntpd: log hostname of constraint with IP address

While debugging some NTP weirdness, I noticed an outlier amongst the constraints (all except one had an offset less than 1s, the one outlier was over 7 hours off). Unfortunately, I couldn't tell which constraint had the outlier, because the IP's rDNS didn't correspond to one of the constraints

Re: Call sysctl_source() with shared netlock

Now rtable_*source() are polished, so we could push this diff to tree. ok? On Mon, Apr 17, 2023 at 02:36:57AM +0300, Vitaliy Makkoveev wrote: > It seems rt_setsource() needs some attention, but sysctl_source() could > be called with shared netlock just now. > > Index: sys/net/rtsock.c >

bgpctl show flowspec

This diff implements 'bgpctl show flowspec' and on top of that also 'bgpctl flowspec flush'. bgpctl now uses both util.c and flowspec.c from bgpd. The code to print flowspec is stolen from printconf.c and I did not implement the json output yet because I have not decided on how to dump the NLRI

Re: bgpctl show flowspec

On Thu, Apr 20, 2023 at 03:02:33PM +0200, Claudio Jeker wrote: > This diff implements 'bgpctl show flowspec' and on top of that also > 'bgpctl flowspec flush'. bgpctl now uses both util.c and flowspec.c from > bgpd. The code to print flowspec is stolen from printconf.c and I did not > implement

Re: bgpctl flowspec add / delete

On Thu, Apr 20, 2023 at 06:23:45PM +0200, Claudio Jeker wrote: > This currently only supports prefixes and numeric options. > It does not handle TCP and fragment flags right now. > Appart from that lists of options work. ok, some small suggestions inline. Do it the way you like it better. > >

OpenSMTPD: Don't return message body in successfull DNS reports

Hi, delivery success DSNs include the message body if not explicitely disabled by RET HDRS. But according to rfc3461 4.3 the body should _only_ be included for failure DSNs: […] If a DSN contains no indications of delivery failure, only the headers of the message should be returned. The

bgpctl flowspec add / delete

This currently only supports prefixes and numeric options. It does not handle TCP and fragment flags right now. Appart from that lists of options work. -- :wq Claudio Index: bgpctl.c === RCS file:

Re: Call sysctl_source() with shared netlock

On Thu, Apr 20, 2023 at 03:11:15PM +0300, Vitaliy Makkoveev wrote: > Now rtable_*source() are polished, so we could push this diff to tree. > > ok? OK bluhm@ > On Mon, Apr 17, 2023 at 02:36:57AM +0300, Vitaliy Makkoveev wrote: > > It seems rt_setsource() needs some attention, but

Re: plt section in kernel due to endbr64

Thank you. That is correct. Alexander Bluhm wrote: > Hi, > > After enabling -fcf-protection=branch for the kernel, we have a new > .plt section in the kernel. It was not there before. > > $ objdump -s .../snapshots/amd64/bsd > ... > 82048540 c7c13140 0682c9e9 c43646ff

Re: plt section in kernel due to endbr64

I wonder if the same happens on arm64. Someone might want to try to do endbr32 on i386. It lacks a solid tail-CFI (only stack-protector on some functions), mostly because retguard isn't possible on the limited registers. So i386 would benefit from having a head CFI.

Re: OpenSMTPD: Don't return message body in successfull DNS reports

On Thu, 20 Apr 2023 19:40:49 +0200, Christopher Zimmermann wrote: > delivery success DSNs include the message body if not explicitely > disabled by RET HDRS. > But according to rfc3461 4.3 the body should _only_ be included for > failure DSNs. > > To me it seems more sane to not include the

plt section in kernel due to endbr64

Hi, After enabling -fcf-protection=branch for the kernel, we have a new .plt section in the kernel. It was not there before. $ objdump -s .../snapshots/amd64/bsd ... 82048540 c7c13140 0682c9e9 c43646ff ..1@.6F. Contents of section .plt: 82048550

Re: [patch] Avoid change of permissions in /etc/resolv.conf

But this situation does not arise, not in this program, and not in 20 other daemons. You changed something to cause this problem. Juan Picca wrote: > Force a standard umask in /sbin/resolvd/resolvd.c. > If not done and the default mask is a restrictive one, /etc/resolv.conf > ends up not

Re: OpenBSD 7.2 on Oracle Cloud

On Fri, Apr 21, 2023 at 1:39 PM Aaron Mason wrote: > > On Fri, Apr 7, 2023 at 3:25 AM Antun Matanović > wrote: > > > > On Thu, 6 Apr 2023 at 12:55, Fabio Martins wrote: > > > > > > Try to add an entry in grub like in this article: > > > > > >

[patch] Avoid change of permissions in /etc/resolv.conf

Force a standard umask in /sbin/resolvd/resolvd.c. If not done and the default mask is a restrictive one, /etc/resolv.conf ends up not readable. Regards, JMPC diff --git sbin/resolvd/resolvd.c sbin/resolvd/resolvd.c index 2ffdfc6ddb4..133559819f6 100644 --- sbin/resolvd/resolvd.c +++

Re: [patch] Avoid change of permissions in /etc/resolv.conf

On Thu, Apr 20, 2023 at 11:33:30PM -0600, Theo de Raadt wrote: > But this situation does not arise, not in this program, and not in 20 other > daemons. > > You changed something to cause this problem. Yes. I found a similar case in