Re: [patch] Avoid change of permissions in /etc/resolv.conf

2023-04-22 Thread Juan Picca
Hi Stuart > I'd suggest targetting the umask setting, either by giving all users > class 'staff' or adding a new one which inherits from default. Thanks for your explanations. > This is a sensitive file. Keep a root shell open when modifying and > don't close it until tested, there are various

Re: pax: GNU tar base-256 size field support

2023-04-22 Thread Marc Espie
On Tue, Apr 18, 2023 at 08:10:06PM -0600, Todd C. Miller wrote: > I recently ran into a problem with busybox tar generating archives > where the size field is base-256 encoded for files larger than 8GB. > Apparently this is a GNU tar extension. > > Do we want to support this in pax? Below is an

Re: spurious error message from signify

2023-04-22 Thread Marc Espie
On Sat, Apr 22, 2023 at 11:02:23AM +0200, Marc Espie wrote: > Well, sdk stumbled upon it > (see docbooks-dsssl-1.79.tgz in snapshots right now) > > Turns out that, if the archive is *exactly* a multiple of 64KB, > we will error out at EOF. > > I believe keeping the check for short reads and

Re: Recognize Kingston KC3000 NVME SSD

2023-04-22 Thread Paul de Weerd
ping Is this worth it? Rebased diff at the bottom for convenience On Sun, Mar 19, 2023 at 05:12:18PM +0100, Paul de Weerd wrote: | I put a Kingston KC3000 NVME SSD[1] in my new machine. This diff | recognizes that device: | | Index: pcidevs |

Re: plt section in kernel due to endbr64

2023-04-22 Thread Mark Kettenis
> Date: Fri, 21 Apr 2023 18:28:38 +0200 > From: Alexander Bluhm > > On Fri, Apr 21, 2023 at 07:35:22AM -0600, Theo de Raadt wrote: > > It may still be better to add it to match the style. On i386, also. > > Here is the diff for arm64. No -fcf-protection for i386 yet. > > Before: > >

spurious error message from signify

2023-04-22 Thread Marc Espie
Well, sdk stumbled upon it (see docbooks-dsssl-1.79.tgz in snapshots right now) Turns out that, if the archive is *exactly* a multiple of 64KB, we will error out at EOF. I believe keeping the check for short reads and exiting as well for files that do not match 64KB lengths is the right thing to

Re: vmd(8): fix restoring virtio devs on vm receive

2023-04-22 Thread Mike Larkin
On Sun, Apr 16, 2023 at 01:14:00PM -0400, Dave Voutila wrote: > Moving vmd to use zero-copy semantics for virtqueues introduced a bug in > the vm send/receive functionality. The host va is potentially invalid on > restore if vmd has restarted and re-randomized the address space of the > vmm

Re: [patch] Avoid change of permissions in /etc/resolv.conf

2023-04-22 Thread Stuart Henderson
On 2023/04/21 20:23, Juan Picca wrote: > But maybe a less surprise config for /etc/login.conf can be: > > --- /etc/login.conf.orig > +++ /etc/login.conf > @@ -58,6 +58,7 @@ > # Be sure to reset these values to system defaults in the default class! > # > daemon:\ > + :umask=022:\ >