Re: OpenBSD 6.0 panic

2016-09-03 Thread Bastien Durel
Le 02/09/2016 à 23:28, Ryan Freeman a écrit : On Fri, Sep 02, 2016 at 06:25:15PM +0200, Bastien Durel wrote: Hello. I upgraded my router to 6.0 yesterday, and now I got a panic each time I reboot it. Hi, Did you happen to forget to do your pkg_add -u to upgrade packages? I suspect it might

Re: might it be better to have three paths lists

2016-09-03 Thread ludovic coues
What is the use case ? 2016-09-03 4:15 GMT+02:00 Luke Small : > wouldn't it be more secure to have a write, read, and execute capable paths > lists in pledge() > -- Cordialement, Coues Ludovic +336 148 743 42

Re: Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread Teno Deuter
meaning I shall try at a later time? Thank you On Sat, Sep 3, 2016 at 12:40 PM, Ted Unangst wrote: > Teno Deuter wrote: >> installed a fresh 6.0 AMD64 and tried to build 'stable' from source. >> >> Here is what I did as 'root' (as described in: >>

Re: might it be better to have three paths lists

2016-09-03 Thread Theo de Raadt
Wow, Luke you are the man. > Probably right, if they were pushing strong release dates, they'd go with > freebsd or linux > > On Sat, Sep 3, 2016, 05:44 Theo de Raadt wrote: > > > Not a strong requirement. > > > > > If a program requires studio, wpath, rpath, dns, and

Re: might it be better to have three paths lists

2016-09-03 Thread ludovic coues
Split your program. Stricter privilege separation. Replace thread with fork, you will have self contained program unit. An overflow in one won't affect the other. And each piece will have tighter pledge. 2016-09-03 12:37 GMT+02:00 Luke Small : > If a program requires

Re: Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread Peter Hessler
Yes, the repos should be done with their surgery now. Please let us know if you still see issues. On 2016 Sep 03 (Sat) at 13:11:42 +0200 (+0200), Teno Deuter wrote: :meaning I shall try at a later time? : :Thank you : :On Sat, Sep 3, 2016 at 12:40 PM, Ted Unangst wrote: :>

rdomain incompatible with NSD ? (OpenBSD 6)

2016-09-03 Thread Bob Jones
Hi, Not sure if its a feature or a bug. ;-) OpenBSD my.example.com 6.0 GENERIC.MP#2319 amd64 Relevant bit of /var/nsd/etc/nsd.conf: ip-address: 10.1.2.3 $ cat /etc/hostname.vmx1 rdomain 1 inet 10.1.2.3 255.255.255.224 !route -T1 add default 10.1.2.65 The above yields : Sep 3 18:35:40 my

not exactly (Re: systrace removed? Why?)

2016-09-03 Thread Michal Bozon
> Why? good(?) news: sysmerge is gone in 6.0 but not removed by 5.9 to 6.0 uprade process.

Re: not exactly (Re: systrace removed? Why?)

2016-09-03 Thread Edgar Pettijohn
Sent from my iPhone On Sep 3, 2016, at 12:46 PM, Michal Bozon wrote: >> good(?) news: sysmerge is gone in 6.0 >> but not removed by 5.9 to 6.0 uprade process. > > s/sysmerge/systrace/ > pledge()

Re: Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread R0me0 ***
Hello Teno, I have successfully updated five OpenBSD 5.9 to 6.0 on release day , following https://www.openbsd.org/faq/upgrade60.html After, I rebuilt all them to stable branch from: $ cd /usr $ cvs -qd anon...@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_6_0 -P src Was magical as expected.

Re: Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread Harald Dunkel
On 09/03/16 12:40, Ted Unangst wrote: > Teno Deuter wrote: >> installed a fresh 6.0 AMD64 and tried to build 'stable' from source. >> >> Here is what I did as 'root' (as described in: >> http://www.openbsd.org/stable.html): >> >> export CVSROOT=anon...@anoncvs1.ca.openbsd.org:/cvs >> cd /usr; cvs

Re: not exactly (Re: systrace removed? Why?)

2016-09-03 Thread Theo Buehler
On Sat, Sep 03, 2016 at 05:37:22PM +, Michal Bozon wrote: > > Why? > > good(?) news: sysmerge is gone in 6.0 > but not removed by 5.9 to 6.0 uprade process. > I really have a hard time understanding what you're trying to point out. Yes, systrace is gone, but it's an ordinary binary that

Re: not exactly (Re: systrace removed? Why?)

2016-09-03 Thread Michal Bozon
> > good(?) news: sysmerge is gone in 6.0 > > but not removed by 5.9 to 6.0 uprade process. > > > > I really have a hard time understanding what you're trying to point out. > > Yes, systrace is gone, but it's an ordinary binary that does no harm, > feel free to remove it if it makes you feel

Re: not exactly (Re: systrace removed? Why?)

2016-09-03 Thread Michal Bozon
> good(?) news: sysmerge is gone in 6.0 > but not removed by 5.9 to 6.0 uprade process. s/sysmerge/systrace/

Re: rdomain incompatible with NSD ? (OpenBSD 6)

2016-09-03 Thread Uwe Werler
You have to start nsd in rdomain 1. Von meinem Samsung Galaxy Smartphone gesendet. Ursprüngliche Nachricht Von: Bob Jones Datum: 03.09.16 20:13 (GMT+01:00) An: misc@openbsd.org Betreff: rdomain incompatible with NSD ? (OpenBSD

Re: rdomain incompatible with NSD ? (OpenBSD 6)

2016-09-03 Thread Sebastian Benoit
Bob Jones(r.a.n.d.o.m.d.e.v.4+openbsdm...@gmail.com) on 2016.09.03 19:11:41 +0100: > Hi, > > Not sure if its a feature or a bug. ;-) > > OpenBSD my.example.com 6.0 GENERIC.MP#2319 amd64 > > Relevant bit of /var/nsd/etc/nsd.conf: > ip-address: 10.1.2.3 > > > $ cat /etc/hostname.vmx1 >

Re: Removal of old libraries

2016-09-03 Thread Ulises M. Alvarez
pkg_delete -a El 3 sept. 2016 3:12 PM, Ax0n escribió: > > I've got a Toshiba NB305 netbook that's been my daily-use laptop for more > than 6 years now. The last fresh install I did was OpenBSD 4.9-RELEASE in > early May 2011. I've been quite happy with how it works, and I've

Re: Removal of old libraries

2016-09-03 Thread Ax0n
Thank you very much, all! Giving it a shot now. On Sat, Sep 3, 2016, 16:35 Juan Francisco Cantero Hurtado wrote: > On Sat, Sep 03, 2016 at 03:12:53PM -0500, Ax0n wrote: > > I've got a Toshiba NB305 netbook that's been my daily-use laptop for more > > than 6 years now. The

Re: Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread STeve Andre'
On 09/03/16 11:32, Harald Dunkel wrote: On 09/03/16 12:40, Ted Unangst wrote: Teno Deuter wrote: installed a fresh 6.0 AMD64 and tried to build 'stable' from source. Here is what I did as 'root' (as described in: http://www.openbsd.org/stable.html): export

Re: Removal of old libraries

2016-09-03 Thread Juan Francisco Cantero Hurtado
On Sat, Sep 03, 2016 at 03:12:53PM -0500, Ax0n wrote: > I've got a Toshiba NB305 netbook that's been my daily-use laptop for more > than 6 years now. The last fresh install I did was OpenBSD 4.9-RELEASE in > early May 2011. I've been quite happy with how it works, and I've been > doing bsd.rd

Removal of old libraries

2016-09-03 Thread Ax0n
I've got a Toshiba NB305 netbook that's been my daily-use laptop for more than 6 years now. The last fresh install I did was OpenBSD 4.9-RELEASE in early May 2011. I've been quite happy with how it works, and I've been doing bsd.rd upgrades and M:Tier binary updates ever since. There is a lot of

Re: not exactly (Re: systrace removed? Why?)

2016-09-03 Thread Michal Bozon
if someone's interested, here a list of fs differences between 6.0 upgraded from 5.9, and 6.0 install, i found, with some obvious differences like smtpd spool or sysmerge backups removed (amd64/qemu): http://pastebin.com/raw/VPkdbvxy (text/plain) (not pasting because of long lines) hth

Re: might it be better to have three paths lists

2016-09-03 Thread Stuart Henderson
On 2016-09-03, ludovic coues wrote: > What is the use case ? More than "what is the use case" is needed here - a good start would be a diff for 3 or 4 examples of existing programs in base showing how it would be used to improve things.

Re: OpenBSD 6.0 panic

2016-09-03 Thread Stuart Henderson
On 2016-09-03, Bastien Durel wrote: > Le 02/09/2016 à 23:28, Ryan Freeman a écrit : >> On Fri, Sep 02, 2016 at 06:25:15PM +0200, Bastien Durel wrote: >>> Hello. >>> >>> I upgraded my router to 6.0 yesterday, and now I got a panic each time >>> I reboot it. >> >> Hi, >> >> Did

Re: Trying to find/install msgfmt(1) from gettext

2016-09-03 Thread Stuart Henderson
On 2016-09-02, Nick Gonella wrote: > I'm currently trying to port some code from Linux and within the > Makefile, there is a reference to the utility msgfmt(1). After some > Googling, I found that this should come as a part of gettext(1), but I > can't seem to find how to

Re: Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread Ted Unangst
Teno Deuter wrote: > installed a fresh 6.0 AMD64 and tried to build 'stable' from source. > > Here is what I did as 'root' (as described in: > http://www.openbsd.org/stable.html): > > export CVSROOT=anon...@anoncvs1.ca.openbsd.org:/cvs > cd /usr; cvs checkout -P -rOPENBSD_6_0 src there's some

Re: might it be better to have three paths lists

2016-09-03 Thread Luke Small
In pledge, presumably there will be an accessible paths list. Maybe you grant a process root access, and you need to read a file which is only granted by root access, and you need write access for another file, so the pledge permissions reflect that. On the presumed current path, you would leave

Re: System monitor in base?

2016-09-03 Thread Reyk Floeter
On Fri, Sep 02, 2016 at 05:02:07PM -0700, Aioi Yuuko wrote: > Sorry, I was vague in my original email: What I meant was, I'm aware that > there are ways of getting it off the command line; I'm mostly curious about > getting it on my desktop so it's easy to glance at. Would my best bet be >

Re: System monitor in base?

2016-09-03 Thread Stuart Henderson
On 2016-09-02, Martijn van Duren wrote: > On 09/03/16 00:46, Aioi Yuuko wrote: >> Hi, >> >> I'm trying to wean myself off external packages as much as possible. Is >> there a common, accepted way of viewing, for instance, battery life, with >> only included

Re: might it be better to have three paths lists

2016-09-03 Thread ludovic coues
2016-09-03 11:04 GMT+02:00 Luke Small : > > > Sorry I was in the middle of something, but pledge can be a broad brush, > unless you are dealing with one file, whether it is executed, read, or > written and giving per process file permissions sounds pretty neat, and it >

Building OpenBSD 6.0 -stable - Error

2016-09-03 Thread Teno Deuter
installed a fresh 6.0 AMD64 and tried to build 'stable' from source. Here is what I did as 'root' (as described in: http://www.openbsd.org/stable.html): export CVSROOT=anon...@anoncvs1.ca.openbsd.org:/cvs cd /usr; cvs checkout -P -rOPENBSD_6_0 src # cd /usr/src/sys/arch/$(uname -m)/conf #

Re: might it be better to have three paths lists

2016-09-03 Thread Luke Small
If a program requires studio, wpath, rpath, dns, and inet. It spawns multiple threads. The socket binding thread is taken over, runs arbitrary code that overflows a buffer of the thread listening to a pipe with rpath and stdio permissions it reads the binary of an executable the company wants to

Re: might it be better to have three paths lists

2016-09-03 Thread Theo de Raadt
Not a strong requirement. > If a program requires studio, wpath, rpath, dns, and inet. It spawns > multiple threads. The socket binding thread is taken over, runs arbitrary > code that overflows a buffer of the thread listening to a pipe with rpath > and stdio permissions it reads the binary of