Re: slaacd, MTUs, and pledge

2022-11-20 Thread Stuart Henderson
On 2022-11-21, Stefan R. Filipek wrote: > On the IPv6 front: > > What gives me further hesitation is that not matching the > router-advertised MTU may still lead to issues. > > RFC 4861 notes: >> Neighbor Discovery allows routers to specify an >> MTU for the link, which all nodes then use. All

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Jan Stary
On Nov 21 01:38:41, rto...@ceti.pl wrote: > I guess it would not be very hard to just add few more *roff hacks Stop right here.

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Stefan Hagen
Jason McIntyre wrote (2022-11-20 21:45 CET): > On Sun, Nov 20, 2022 at 08:09:13PM +0100, Tomasz Rola wrote: > > On Sun, Nov 20, 2022 at 01:32:54PM -, Christian Weisgerber wrote: > > > On 2022-11-20, Reuben mac Saoidhea wrote: > > > > > > >> It is a builtin, so it is documented inside ksh. >

Warning in .xsession-errors Actions not found: exec-formatted

2022-11-20 Thread Maksim Rodin
Recently I found the following in the OpenBSD 7.0 Changelog https://www.openbsd.org/plus70.html """ Added unveil(2) calls to xterm in the case where there are no exec-formatted or exec-selected resources set. """ Do I understand it right: if I do have these types of resources set they are

Re: UNIX manual volume 2 (Supplementary Documents) Re: less prints superfluous characters with --no-init

2022-11-20 Thread Theo de Raadt
Reuben mac Saoidhea wrote: > > [what about ssh?] > > man(1) should document commands you might from the shell. Oh, so man(1) should cover *ANY* shell thing. # man if if(3p) Perl Programmers Reference Guide if(3p) NAME if - "use" a Perl module if a

UNIX manual volume 2 (Supplementary Documents) Re: less prints superfluous characters with --no-init

2022-11-20 Thread Reuben mac Saoidhea
> am i being punished in the same way as you??? its not me thats being punished... i would encourage UNIX newbies to read volume 2 of the V7 man https://s3.amazonaws.com/plan9-bell-labs/7thEdMan/index.html it has the tutorials and references and all that good stuff. it lacks the BSD stuff

Re: Locking network card configuration

2022-11-20 Thread Steve Litt
Theo de Raadt said on Sun, 20 Nov 2022 19:35:22 -0700 >Steve Litt wrote: > >> Vitaliy Makkoveev said on Mon, 21 Nov 2022 03:48:21 +0300 >> >> >> On 20 Nov 2022, at 18:06, Odd Martin Baanrud >> >> wrote: >> >> >> >> Hello, >> >> >> >> I have a Raspberry Pi 4 with 2 USB NIC’s attached. >> >>

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Theo de Raadt
Forgive me, I don't spend my life using ksh esoterica But I do use ssh all the time man AddKeysToAgent man AddressFamily man BatchMode man BindAddress man CanonicalDomains man CanonicalizeFallbackLocal man CanonicalizeHostname man CanonicalizeMaxDots man CanonicalizePermittedCNAMEs man

Re: Error from reorder_kernel

2022-11-20 Thread Aaron Miller
I agree. I think I'll get a larger disk. Thanks for the help! --Aaron On 11/20/22 01:14, Stuart Henderson wrote: I doubt there's enough free space on /usr for reorder_kernel to work. But the disk overall is small and there's probably not a lot that you can clear out. If you were to

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Reuben mac Saoidhea
i feel i ought to repeat myself: you really ought to use: type [command ...] some problems with the manual: * you have to type `man sh'. you cant type `man type'. * sh(1) does not explain that `tracked alias' in the output of `type' relates to the output of `hash'. see `hash' in

Re: Locking network card configuration

2022-11-20 Thread Theo de Raadt
Steve Litt wrote: > Vitaliy Makkoveev said on Mon, 21 Nov 2022 03:48:21 +0300 > > >> On 20 Nov 2022, at 18:06, Odd Martin Baanrud > >> wrote: > >> > >> Hello, > >> > >> I have a Raspberry Pi 4 with 2 USB NIC’s attached. > >> One via USB3 (ure0), and the other via USB2 (ure1). > >> Since

Re: Locking network card configuration

2022-11-20 Thread Steve Litt
Vitaliy Makkoveev said on Mon, 21 Nov 2022 03:48:21 +0300 >> On 20 Nov 2022, at 18:06, Odd Martin Baanrud >> wrote: >> >> Hello, >> >> I have a Raspberry Pi 4 with 2 USB NIC’s attached. >> One via USB3 (ure0), and the other via USB2 (ure1). >> Since they are connected to different USB

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Tomasz Rola
On Mon, Nov 21, 2022 at 01:38:41AM +0100, Tomasz Rola wrote: [...] > I guess it would not be very hard to just add few more *roff hacks > similar to one above. Or maybe a command (shell script) to retrieve > relevant subsection from manpage and print just this one. And maybe > also list names of

Re: Locking network card configuration

2022-11-20 Thread Vitaliy Makkoveev
> On 20 Nov 2022, at 18:06, Odd Martin Baanrud wrote: > > Hello, > > I have a Raspberry Pi 4 with 2 USB NIC’s attached. > One via USB3 (ure0), and the other via USB2 (ure1). > Since they are connected to different USB interfaces, I thaught they would > get configured the same way on reboot. >

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Tomasz Rola
On Sun, Nov 20, 2022 at 08:45:01PM +, Jason McIntyre wrote: > On Sun, Nov 20, 2022 at 08:09:13PM +0100, Tomasz Rola wrote: [...] > > I am writing this from ParrotOS (Debian derivative) and since I am > > avid user of bash, I can do "man bash-builtins" and it prints me a > > very nice looking

Re: Locking network card configuration

2022-11-20 Thread Stuart Henderson
On 2022-11-20, Odd Martin Baanrud wrote: > Hello Stuart, > > Can you recommend a USB 2 or 3 NIC which uses a different driver then ure,, > with good performance? > Does any of the known manufactures, Asus e.i, use a different chipset? I'd look at "man -k 1gb|grep -i usb" and search for chipset

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Stefan R. Filipek
> But it is still more kernel code reached. Very true. And I appreciate the feedback on due diligence in general. On the IPv6 front: What gives me further hesitation is that not matching the router-advertised MTU may still lead to issues. RFC 4861 notes: > Neighbor Discovery allows routers to

Re: Locking network card configuration

2022-11-20 Thread Odd Martin Baanrud
Hello Stuart, Can you recommend a USB 2 or 3 NIC which uses a different driver then ure,, with good performance? Does any of the known manufactures, Asus e.i, use a different chipset? Martin

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Theo de Raadt
Stefan R. Filipek wrote: > > they could change the mtu on an interface. > > No. I'm only proposing the ability to GET the MTU (SIOCG...). > > Setting the MTU (SIOCSIFMTU) is currently in "wroute", which slaacd > already has pledged. OK. But it is still more kernel code reached.

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Stefan R. Filipek
> they could change the mtu on an interface. No. I'm only proposing the ability to GET the MTU (SIOCG...). Setting the MTU (SIOCSIFMTU) is currently in "wroute", which slaacd already has pledged. On Sun, Nov 20, 2022 at 5:59 PM Theo de Raadt wrote: > > the v6 people in the group will consider

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Theo de Raadt
the v6 people in the group will consider the v6 aspects. I wanted to comment on the "let's change pledge!" enthusiasm, which is again failed to consider the other programs which are affected by such a proposed change. Any proposal must consider the impact in *ALL PROGRAMS*. I do this all the

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Theo de Raadt
sorry you've missed the point entire, and didn't answer either question. the shortlist of affected programs is: dhclientdhcpleased iked route slaacd bgpd dhcpddhcrelay ifstatedradroute6d with your proposal, if any of

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Stefan R. Filipek
> you've failed to ask the two required questions They were implied (with the security-minded audience in mind). I chose brevity. > If one of them gets subverted, what danger can it cause? This question matters the most, and the answer really determines if we even care about the first implied

Re: slaacd, MTUs, and pledge

2022-11-20 Thread Theo de Raadt
> 1. Does it make sense to add SIOCGIFHARDMTU (and maybe SIOCGIFMTU too) > to pledge("route")? No, I don't think so. Set it ahead of time. (In particular, you've failed to ask the two required questions: If this is capability is added to all programs that use "route", what is that list of

slaacd, MTUs, and pledge

2022-11-20 Thread Stefan R. Filipek
My router advertises its MTU over ICMPv6 router advertisements. It's somewhat large (9216), and exceeds the hardware capabilities of my OpenBSD system's rge interface (9194). This results in a bunch of noisy log messages of: > slaacd[...]: failed to set MTU: Invalid argument And the obvious

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Jason McIntyre
On Sun, Nov 20, 2022 at 08:09:13PM +0100, Tomasz Rola wrote: > On Sun, Nov 20, 2022 at 01:32:54PM -, Christian Weisgerber wrote: > > On 2022-11-20, Reuben mac Saoidhea wrote: > > > > >> It is a builtin, so it is documented inside ksh. > > > > > > i think the 4.3BSD manual allowed for example

Re: Locking network card configuration

2022-11-20 Thread Stuart Henderson
On 2022-11-20, Odd Martin Baanrud wrote: > Hello, > > I have a Raspberry Pi 4 with 2 USB NIC’s attached. > One via USB3 (ure0), and the other via USB2 (ure1). > Since they are connected to different USB interfaces, I thaught they would > get configured the same way on reboot. > But that’s not

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Tomasz Rola
On Sun, Nov 20, 2022 at 01:32:54PM -, Christian Weisgerber wrote: > On 2022-11-20, Reuben mac Saoidhea wrote: > > >> It is a builtin, so it is documented inside ksh. > > > > i think the 4.3BSD manual allowed for example `man while' for `man sh'? > > FreeBSD has a builtin(1) man page that

Locking network card configuration

2022-11-20 Thread Odd Martin Baanrud
Hello, I have a Raspberry Pi 4 with 2 USB NIC’s attached. One via USB3 (ure0), and the other via USB2 (ure1). Since they are connected to different USB interfaces, I thaught they would get configured the same way on reboot. But that’s not the case. They became swapped on reboot. Is there a way

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Stefan Hagen
indivC wrote (2022-11-19 16:13 CET): > I can't say I understand the technical differences > between 'type' and which(1). > However, I will mention these points: > > 1. There is no man page for 'type', but there is for which(1) try ksh(1): typeShort form of command -V There is also whence.

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Theo de Raadt
Reuben mac Saoidhea wrote: > > It is a builtin, so it is documented inside ksh. > > i think the 4.3BSD manual allowed for example `man while' for `man sh'? I rather doubt that, and this is not 4.3BSD

Re: OpenIKE2 question

2022-11-20 Thread Thomas Bohl
Hello everyone.I'm planning to use OpenIKEv2 not just for VPN tunnel, but also to give client Internet access through that tunnel (none other for that client). Is it possible? Do I need additional config options or will default gateway become available on the system once connected to VPN?

Re: less prints superfluous characters with --no-init

2022-11-20 Thread Christian Weisgerber
On 2022-11-20, Reuben mac Saoidhea wrote: >> It is a builtin, so it is documented inside ksh. > > i think the 4.3BSD manual allowed for example `man while' for `man sh'? FreeBSD has a builtin(1) man page that attempts to list the csh(1) and sh(1) builtins and points to the respective man pages:

Re: Error from reorder_kernel

2022-11-20 Thread Stuart Henderson
I doubt there's enough free space on /usr for reorder_kernel to work. But the disk overall is small and there's probably not a lot that you can clear out. If you were to reinstall, not create /usr/src, and add that space to /usr instead, that would buy you a bit of time, but ideally you'd want