Re: (fwd) [FD] OpenBSD kernel relinking is not transactional and a local exploit exists

2023-06-19 Thread Aaron Mason
On Tue, Jun 20, 2023 at 9:27 AM Tomasz Rola wrote: > > [REDACTED] > > https://marc.info/?l=openbsd-bugs=159074964523007=2 (noted lack of > idempotency) > https://marc.info/?l=openbsd-bugs=168688579123005=2 (noted lack of > integrity or provenance verification and the consumption of invalid >

Re: (fwd) [FD] OpenBSD kernel relinking is not transactional and a local exploit exists

2023-06-19 Thread Aaron Mason
Like Theo said, if an attacker has root on your system, having the kernel relink messed with is the least of your concerns. On Tue, Jun 20, 2023 at 9:27 AM Tomasz Rola wrote: > > This happened in my mailbox today. FD means "full disclosure" and is > publicly available mailing list. > > I repost

Re: (fwd) [FD] OpenBSD kernel relinking is not transactional and a local exploit exists

2023-06-19 Thread Theo de Raadt
That writeup is bullshit. If an attacker can replace files owned by root, they can replace other files rather than these files. Why replace some .o files and depend on a future reboot, I dunno, replacing ssh, or ksh, some things in /etc, or tens of thousands of other files? OR, why not replace

(fwd) [FD] OpenBSD kernel relinking is not transactional and a local exploit exists

2023-06-19 Thread Tomasz Rola
This happened in my mailbox today. FD means "full disclosure" and is publicly available mailing list. I repost onto misc because if this is a real cat, seems it is out of the bag already. Other than being subscribed to FD, I have no connection. - Forwarded message from "Schech, C. W.

Re: newfs /usr/local

2023-06-19 Thread Alexander Hall
On June 19, 2023 8:57:34 PM GMT+02:00, "Pau A.S." wrote: >Hello, > >I would like to newfs /usr/local > >I have copied the contents to a different partition as root. > >My guess is that I would have to bring up the system in single user mode. > >My problem is that when I do that, /usr/local

newfs /usr/local

2023-06-19 Thread Pau A.S.
Hello, I would like to newfs /usr/local I have copied the contents to a different partition as root. My guess is that I would have to bring up the system in single user mode. My problem is that when I do that, /usr/local does not exist because it has not been mounted. I can however identify

Wrong SHA256 sums for latest snapshot

2023-06-19 Thread Benjamin Stürz
Hi misc@, I have issues installing the latest snapshot from cdn.openbsd.org. $ sysupgrade -sn Fetching from https://cdn.openbsd.org/pub/OpenBSD/snapshots/amd64/ [Downloading SHA256.sig...] Signature Verified Verifying old sets. [Downloading sets...] Verifying sets. (SHA256) base73.tgz: FAILED

Re: increasing NET_TASKQ for better performance?

2023-06-19 Thread Chris Cappuccio
Valdrin MUJA [valdrin_m...@outlook.com] wrote: > Hello Misc, > > I run OpenBSD 7.3 as L3 firewall under VMware. I have some rdr-to rules. > > Here System information: > cpu15: Intel(R) Xeon(R) Gold 6338 CPU @ 2.00GHz, 1995.63 MHz, 06-6a-06 > I know CPU cores are not at too important at the

Re: Possible typo in pf NAT FAQ

2023-06-19 Thread Philipp Buehler
Am 18.06.2023 20:35 schrieb Stephan Neuhaus: Here you can see that the "from" part is what the above description calls the src_addr, not the ext_addr, as it claims. This makes much more sense and is consistent with all the other documentation that I've seen. The "match" is rewriting to

Re: load custom acpi table

2023-06-19 Thread Mike Larkin
On Mon, Jun 19, 2023 at 08:55:10AM +0300, S V wrote: > Hello, list! > > Is it possible to load custom acpi table on boot ? > > in FreeBSD it was possible by strings in conf like > > acpi_dsdt_load="YES" acpi_dsdt_name="filename.aml" no