Re: Qubes-OS is "fake" security

2017-05-11 Thread Florian Ermisch
Sorry, out of herrings. Have a listen to this instead: "Risky Biz Soap Box: A microvirtualisation primer with Bromium co-founder Ian Pratt (a.k.a. how to run Java plugin on IE8 and not die!)" https://risky.biz/soapbox3/ Am 12. Mai 2017 03:41:05 MESZ schrieb Kim Blackwood

Re: OpenBSD 6.1: BOOTIA32 3.32 issue

2017-05-11 Thread Michele Curti
On Fri, May 12, 2017 at 11:05:13AM +0900, YASUOKA Masahiko wrote: > On Thu, 11 May 2017 23:45:17 +0200 > Michele Curti wrote: > > All disks are identical in HARDWARE_DEVICE_PATH and ACPI_DEVICE_PATH > and they all don't have MESSAGING_DEVICE_PATH. So the boot loader >

Qubes-OS is "fake" security

2017-05-11 Thread Kim Blackwood
Hi, I am at novice level of security, studying and trying to understand some of the different aspects of running an OS and applications as securely as possible. I have been running OpenBSD for years and understand a little of what's being done to make it more secure, albeit not the technical

Re: Qubes-OS is "fake" security

2017-05-11 Thread Daniel Jakots
On Fri, 12 May 2017 03:41:05 +0200, Kim Blackwood wrote: > Hi, From: Martin Hanson To: misc Subject: Why would I need a container like Docker?! Date: Wed, 10 May 2017 05:53:07 +0200 X-Mailer: Yamail [ http://yandex.ru ]

Re: OpenBSD 6.1: BOOTIA32 3.32 issue

2017-05-11 Thread YASUOKA Masahiko
On Thu, 11 May 2017 23:45:17 +0200 Michele Curti wrote: > On Wed, May 10, 2017 at 08:35:28PM +0200, Patrick Wildt wrote: >> >> I don't think this is the correct fix. It might solve your issue, but I >> don't think it's completely right. So EFI has those so called

Re: OpenBSD 6.1: BOOTIA32 3.32 issue

2017-05-11 Thread Michele Curti
On Wed, May 10, 2017 at 08:35:28PM +0200, Patrick Wildt wrote: > > I don't think this is the correct fix. It might solve your issue, but I > don't think it's completely right. So EFI has those so called device > paths. A path is basically a list of nodes. To compare two paths you > need to

Re: Status of OpenCVS

2017-05-11 Thread Ingo Schwarze
Hi, multiplex'd wrote on Thu, May 11, 2017 at 04:48:36PM +0100: > I recently stumbled across the OpenCVS webpages and I was wondering > what the status of the project is. It is dormant. While it is *almost* ready for production, actually trying to use it in production revealed instabilities

Re: Compaq nx6310 does not suspend/resume

2017-05-11 Thread Mike Larkin
On Thu, May 11, 2017 at 01:50:58PM +0200, Jan Stary wrote: > On May 10 14:28:16, mlar...@azathoth.net wrote: > > On Wed, May 10, 2017 at 05:19:04PM +0200, Jan Stary wrote: > > > This is current/i386 on a Compaq nx6310 laptop (dmesg below). > > > > This machine is notoriously bad. Did this ever

Re: What does it mean this error when I try install a package?

2017-05-11 Thread Stuart Henderson
On 2017-05-11, Ajitabh Pandey wrote: > I got a similar message when I try to install python, but upong > investigating I realise that python was already installed - perhaps as a > pre-requisite for glib2. I am not using PKG_PATH, rather I use > /etc/installurl for

Status of OpenCVS

2017-05-11 Thread multiplex'd
Hello all, I recently stumbled across the OpenCVS webpages and I was wondering what the status of the project is. The webpage says that it is to be released soon, however commits to the CVS tree seem to be few and far between. Is the codebase in a state where it could be ported to other operating

Re: What does it mean this error when I try install a package?

2017-05-11 Thread Ron Georgia
Ajitabh, Could you copy and paste the /etc/installurl here? I can try to do the same thing on my PC to see if I get the same error. Normally I simply pkg_add python, then pick the version I want to install, as was already suggested. I run python 2.7 and 3.6 on all my machines. I typically do

Re: OpenBSD 6.1: BOOTIA32 3.32 issue

2017-05-11 Thread Michele Curti
On Thu, May 11, 2017 at 05:48:34PM +0900, YASUOKA Masahiko wrote: > Hi, > > Thank you for your tests, > > On Thu, 11 May 2017 07:40:42 +0200 > ... > > So I can use the stock bootloader without changes but I must do a > > > > boot> set device hd2a > > I'm not clear whether we still have a

Re: smtpd aliases file issue

2017-05-11 Thread Edgar Pettijohn
Just for the record using a flat "file" for aliases you don't need to run newaliases. ⁣Sent from BlueMail ​ On May 11, 2017, 2:30 AM, at 2:30 AM, Gilles Chehade wrote: >Much better :-) > >You don’t need to restart the daemon, you simply need to tell it >through smtpctl that

Re: Compaq nx6310 does not suspend/resume

2017-05-11 Thread Jan Stary
On May 10 14:28:16, mlar...@azathoth.net wrote: > On Wed, May 10, 2017 at 05:19:04PM +0200, Jan Stary wrote: > > This is current/i386 on a Compaq nx6310 laptop (dmesg below). > > This machine is notoriously bad. Did this ever work for you? I just got the machine, so this is a first install on

Re: smtpd aliases file issue

2017-05-11 Thread Ajitabh Pandey
Thanks Giles. Regards. -- ~ajitabhpandey On Thu, May 11, 2017 at 12:59 PM, Gilles Chehade wrote: > Much better :-) > > You don’t need to restart the daemon, you simply need to tell it through > smtpctl that the table aliases needs to be reloaded: > > $ doas smtpctl

[solved] Re: build amd64 kernel fails

2017-05-11 Thread Heiko
That works. Thank you :) Am 11.05.2017 um 10:08 schrieb Theo Buehler: > On Thu, May 11, 2017 at 10:04:42AM +0200, Heiko Zimmermann wrote: >> Hello Theo, >> >> Am 11.05.2017 um 09:58 schrieb Theo Buehler: >>> On Thu, May 11, 2017 at 09:18:05AM +0200, Heiko wrote: Hello List, I get

Re: OpenBSD 6.1: BOOTIA32 3.32 issue

2017-05-11 Thread YASUOKA Masahiko
Hi, Thank you for your tests, On Thu, 11 May 2017 07:40:42 +0200 Michele Curti wrote: > On Wed, May 10, 2017 at 08:35:28PM +0200, Patrick Wildt wrote: >> On Wed, May 10, 2017 at 03:14:30PM +0200, Stefan Sperling wrote: >> > On Tue, May 09, 2017 at 09:47:14PM +0200,

Re: What does it mean this error when I try install a package?

2017-05-11 Thread Ajitabh Pandey
Hi, I got a similar message when I try to install python, but upong investigating I realise that python was already installed - perhaps as a pre-requisite for glib2. I am not using PKG_PATH, rather I use /etc/installurl for specifying a list of my mirrors (man installurl(5) for details) $ doas

pf: pfi_kif_unref: rules refcount <= 0

2017-05-11 Thread Comète
Hi, I run OpenBSD 6.0 GENERIC.MP#4 amd64 on a firewall and I recently discovered lots of these messages in dmesg: pf: pfi_kif_unref: rules refcount <= 0 do you know what it is ? Thanks Morgan

Re: strange behaviour with etherip bridge over IPSEC and UDP queries

2017-05-11 Thread Comète
28 mars 2017 16:40 "Scott Bonds" a écrit: > Interesting. I may have a similar problem and was planning to post about it > soon...in my case I've > been playing with rdomains, using PF to NAT > between them, and ikedv2. I've found that when I use ikedv2 to layer IPSEC on > top of

Re: build amd64 kernel fails

2017-05-11 Thread Theo Buehler
On Thu, May 11, 2017 at 09:18:05AM +0200, Heiko wrote: > Hello List, > > I get this error: > > uvm_init.o: In function `uvm_init': > /sys/uvm/uvm_init.c:145: undefined reference to `uvm_km_page_lateinit' > *** Error 1 in /sys/arch/amd64/compile/GENERIC.MP (Makefile:869 'bsd': > @echo ld -T

Re: smtpd aliases file issue

2017-05-11 Thread Gilles Chehade
Much better :-) You don’t need to restart the daemon, you simply need to tell it through smtpctl that the table aliases needs to be reloaded: $ doas smtpctl update table aliases Gilles > On 11 May 2017, at 08:17, Ajitabh Pandey wrote: > > Hi Gilles, > > I

Re: smtpd aliases file issue

2017-05-11 Thread Gilles Chehade
Obviously you don’t need to restart the daemon to pickup new aliases. If you are using a plain file aliases map it can be reloaded atomically at runtime using smtpctl. If you are using a db file, it can be rebuilt using the newaliases / makemap utility. I can’t tell you which one to use

build amd64 kernel fails

2017-05-11 Thread Heiko
Hello List, I get this error: uvm_init.o: In function `uvm_init': /sys/uvm/uvm_init.c:145: undefined reference to `uvm_km_page_lateinit' *** Error 1 in /sys/arch/amd64/compile/GENERIC.MP (Makefile:869 'bsd': @echo ld -T /sys/arch/amd64/conf/ld.script -X --warn-common -nopie -o...) cmp -s bsd

Re: smtpd aliases file issue

2017-05-11 Thread Ajitabh Pandey
Hi Gilles, I did not change anything from the default. But I realise all may not be using default file like me and may not know what is in it. Here is a copy of the contents just for reference. The problem is solved by restarting the smtpd as sugested by Edgar. $ doas cat /etc/mail/smtpd.conf

Re: smtpd aliases file issue

2017-05-11 Thread Ajitabh Pandey
Thanks Edgar. That worked. This is what I was missing. I actually removed my .forward from the user01 account now and directly updated the aliases file to forward email to external email address. Just for documentation purpose, here are the steps - $ doas vi /etc/mail/aliases file $ doas