Re: fvwm in base [was: "X -configure" segmentation fault]

2013-09-11 Thread Carson Chittom
Zoran Kolic writes: > In fact, fvwm is in base part. A while ago, there was a message to misc from the fvwm developer about relicensing fvwm to allow a more recent version into base. I wonder if there is any status update?

Re: "X -configure" segmentation fault

2013-09-11 Thread Carson Chittom
Heptas Torres writes: > Does this mean that obsd as a desktop is not really supported on the long run? I run OpenBSD as a desktop every day. Depends on how you mean "supported." (Read: The fact that upstream code isn't maintained isn't OpenBSD's fault. If X's autoconfigure system doesn't work

Re: sudo configuration !ttytickets?

2013-09-11 Thread Andy Bradford
Thus said "Michael W. Lucas" on Wed, 11 Sep 2013 20:59:08 -0400: > This, well, kind of surprised me. I'm sure you folks have thought this > through in much more detail than I have, but I can't find anything on > the rationale behind it. Is sudo enabled for any non-root users by default? Andy --

sudo configuration !ttytickets?

2013-09-11 Thread Michael W. Lucas
Hi, I've noticed that the sudo on OpenBSD seems to have !ttytickets set by default. In other words, I authenticate sudo once on, say, ttyp4, and all of my login sessions on all my other ttyp* have authenticated to sudo. This, well, kind of surprised me. I'm sure you folks have thought this throug

Quick question on PFS in ipsec

2013-09-11 Thread Jeff Simmons
The man page for ipsec.conf states, in regards to crypto 'suites': "Perfect Forward Security (PFS) is enabled unless group none is specified." So is PFS required if a group is specified or is it optional for the remote party? And is there a way to determine if PFS is being used by an existing c

Re: No sound on Intel-iMac w/ NVIDIA MCP79

2013-09-11 Thread Stefan Wollny
Am Wed, 11 Sep 2013 14:17:50 +1000 schrieb Jonathan Gray : > On Tue, Sep 10, 2013 at 09:28:38PM +0200, Stefan Wollny wrote: > > Hi there, > >   > > hope, s.o. can provide a clue on why I have no sound on my iMac, > > which with OS-X has no issues with sound at all. Full dmesg at the > > end. > >

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread David Eisner
On Wed, Sep 11, 2013 at 2:56 PM, Geoff Steckel wrote: > Disk drives are (presumably) trivial to take over. They have firmware > and mechanisms to > use alternate physical blocks for a given logical block. > You're absolutely correct, and this is not theoretical: (page navigation is in the links

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Geoff Steckel
On 09/11/2013 05:42 AM, Rudolf Leitgeb wrote: >> Second, low hanging fruit. > Contrary to what some hysterical reports may claim, and some violations > of rules aside, NSA is mostly after bad guys, some of which know quite > well what they are doing. These bad guys will not necessarily be kind > en

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread David Eisner
On Wed, Sep 11, 2013 at 10:00 AM, John Long wrote: > > You think they need to target protocols? There are much easier ways of > doing > things. Strong crypto works if you do all the management stuff. Most people > have no idea what's involved with that. Like Espie says there's plenty low > hangin

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread carlos albino garcia grijalba
full agree with John look gov its gov they have the power to do things, they have the money to do it, they have the law protecting them and if all of this its not enough they have people that can close your business if u dont cooperate so go to china or any other country that are not going to coop

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread bofh
On Wed, Sep 11, 2013 at 3:58 AM, Peter N. M. Hansteen wrote: > on that front. On a related note, I quite enjoyed reading FreeBSD > developer Colin Percival's take on the various revelations and claims: > http://www.daemonology.net/blog/2013-09-10-I-might-be-a-spook.html Isn't that classic revers

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Reyk Floeter
On Wed, Sep 11, 2013 at 02:00:38PM +, John Long wrote: > You want security, run OpenBSD on a Chinese router or SBC or fab your own > chips and build your own hardware. And stay the hell off the net. > Sorry for posting the following link, but this reminds me of an incredibly bad movie: http:/

Re: Can't get PostgreSQL to run on startup

2013-09-11 Thread opendaddy
On 11. september 2013 at 3:19 PM, "Antoine Jacoutot" wrote: > >This is not how pkg_scripts works. >See rc.conf.local(5). Thanks a lot Vijay, Antoine. Works great now. Can't recall where I got the pkg_scripts=foo,bar format from though. O.D.

Re: Can't get PostgreSQL to run on startup

2013-09-11 Thread Vijay Sankar
Quoting openda...@hushmail.com: Hi, Anybody else having trouble getting PostgreSQL to run on startup? I always have to do "/etc/rc.d/postgresql start" manually. My line in /etc/rc.conf.local reads: pkg_scripts=postgresql,enginx. Nothing fishy in the logs. I'm using postgresql-server-9.2.3

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Zoran Kolic
> After all, we could change to hardware that does not have theses things. I'd like to hear more about this. Zoran

Re: "X -configure" segmentation fault

2013-09-11 Thread Zoran Kolic
> I was referring to what's in the base system. I am looking for a > minimal window manager in the base system, so no external packages. I > wanted to try out cwm but when I run it I get " cwm: unable to open > display "" ". Is some special configuration needed to run it properly? In fact, fvwm is

Re: Modern C++ Compiler for OpenBSD

2013-09-11 Thread John Long
On Tue, Sep 10, 2013 at 06:21:56PM -0400, Brad Smith wrote: > On 10/09/13 6:10 PM, Gregor Best wrote: > >On Tue, Sep 10, 2013 at 05:40:19PM -0400, Jeffrey Walton wrote: > >>[...] > >>Does anyone have a C++ compiler recommendation for OpenBSD? > >>[...] > > > >What about GCC? Clang++'s C++11 support

Re: Help troubleshooting ehci_idone hang.

2013-09-11 Thread RD Thrush
On 09/10/13 07:56, Martin Pieuchot wrote: > On 10/09/13(Tue) 07:15, RD Thrush wrote: >> On 09/10/13 04:42, Martin Pieuchot wrote: >>> [...] >>> >>> Thanks for this detailed bug report. >>> >>> You're saying that you have 2 amd64 systems with the same problem but >>> I see only the dmesg for one mac

Can't get PostgreSQL to run on startup

2013-09-11 Thread opendaddy
Hi, Anybody else having trouble getting PostgreSQL to run on startup? I always have to do "/etc/rc.d/postgresql start" manually. My line in /etc/rc.conf.local reads: pkg_scripts=postgresql,enginx. Nothing fishy in the logs. I'm using postgresql-server-9.2.3 (initdb -D /var/postgresql/data/) on

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread John Long
On Wed, Sep 11, 2013 at 10:49:46AM +0200, Martin Schr?der wrote: > 2013/9/11 Marc Espie : > > Second, low hanging fruit. > > > > There's so much crappy software and hardware out there that you have to be > > REALLY paranoid to think the NSA would target us. I mean, come on, there > > You think ope

Re: Can't get PostgreSQL to run on startup

2013-09-11 Thread Antoine Jacoutot
On Wed, Sep 11, 2013 at 03:03:07PM +, openda...@hushmail.com wrote: > Hi, > > Anybody else having trouble getting PostgreSQL to run on startup? I always > have to do "/etc/rc.d/postgresql start" manually. My line in > /etc/rc.conf.local reads: pkg_scripts=postgresql,enginx. Nothing fishy in

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread josef . winger
> Gesendet: Mittwoch, 11. September 2013 um 11:42 Uhr > Von: "Rudolf Leitgeb" > An: es...@nerim.net > Cc: misc@openbsd.org > Betreff: Re: OpenBSD crypto and NSA/Bruce Schneier > > > Second, low hanging fruit. > > Contrary to what some hysterical reports may claim, and some violations > of rules a

Re: "X -configure" segmentation fault

2013-09-11 Thread Zé Loff
On Wed, Sep 11, 2013 at 09:15:57AM +, Heptas Torres wrote: > On 9/11/13, David Coppa wrote: > > On Wed, Sep 11, 2013 at 10:37 AM, Heptas Torres wrote: > >> On 9/10/13, Martin Brandenburg wrote: > >>> On Tue, Sep 10, 2013 at 10:18:43PM +, Heptas Torres wrote: > I am trying to generat

Re: Help with ISAKMP Nat Traversal Problem needed

2013-09-11 Thread Christoph Leser
There seems to be no interest in this issue on @misc. Would it be ok to file a bug for this? > -Ursprüngliche Nachricht- > Von: Christoph Leser > Gesendet: Montag, 9. September 2013 16:45 > An: Christoph Leser; misc@openbsd.org > Betreff: AW: Help with ISAKMP Nat Traversal Problem needed

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Indunil Jayasooriya
> As I have mentioned before: what good is perfect security in an OS if you > have no control over the hardware? Put some back doors into the CPU or the > networking hardware and OpenSSH will fall. There is really no point in > trying to outwit three letter agencies with our laptops. > > Both good

Re: pf set prio

2013-09-11 Thread Stuart Henderson
On 2013-09-10, Andy wrote: > Ah I feared as much as its so close to the 5.4 release date. > "Good things come to those who wait" In order to give time to build packages for release, prepare CDs, etc, the release was cut around the end of July. (Exact timings vary from release to release, iirc thi

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Rudolf Leitgeb
> Second, low hanging fruit. Contrary to what some hysterical reports may claim, and some violations of rules aside, NSA is mostly after bad guys, some of which know quite well what they are doing. These bad guys will not necessarily be kind enough to present NSA with unpatched Windows desktops.

Re: daily insecurity output: Login operator is off but still....

2013-09-11 Thread Antoine Jacoutot
On Wed, Sep 11, 2013 at 10:37:12AM +0100, Craig R. Skinner wrote: > For backups, I set up operator to dump & scp to another box, so he needs > $HOME/.ssh/: > > $ sudo usermod -L daemon operator > $ sudo chsh -s /bin/ksh operator > $ sudo mkdir /operator > $ sudo chown operator:operator /operator >

daily insecurity output: Login operator is off but still....

2013-09-11 Thread Craig R. Skinner
For backups, I set up operator to dump & scp to another box, so he needs $HOME/.ssh/: $ sudo usermod -L daemon operator $ sudo chsh -s /bin/ksh operator $ sudo mkdir /operator $ sudo chown operator:operator /operator $ sudo chmod 750 operator /operator $ userinfo operator login operator passwd

Re: "X -configure" segmentation fault

2013-09-11 Thread David Coppa
On Wed, Sep 11, 2013 at 11:15 AM, Heptas Torres wrote: > I was referring to what's in the base system. I am looking for a > minimal window manager in the base system, so no external packages. I > wanted to try out cwm but when I run it I get " cwm: unable to open > display "" ". Is some special c

Re: "X -configure" segmentation fault

2013-09-11 Thread Heptas Torres
On 9/11/13, David Coppa wrote: > On Wed, Sep 11, 2013 at 10:37 AM, Heptas Torres wrote: >> On 9/10/13, Martin Brandenburg wrote: >>> On Tue, Sep 10, 2013 at 10:18:43PM +, Heptas Torres wrote: I am trying to generate a starting xorg.conf file by running "X -configure" but get a segm

Re: "X -configure" segmentation fault

2013-09-11 Thread David Coppa
On Wed, Sep 11, 2013 at 10:37 AM, Heptas Torres wrote: > On 9/10/13, Martin Brandenburg wrote: >> On Tue, Sep 10, 2013 at 10:18:43PM +, Heptas Torres wrote: >>> I am trying to generate a starting xorg.conf file by running "X >>> -configure" but get a segmentation fault error (output below). A

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Marc Espie
On Wed, Sep 11, 2013 at 10:49:46AM +0200, Martin Schröder wrote: > 2013/9/11 Marc Espie : > > Second, low hanging fruit. > > > > There's so much crappy software and hardware out there that you have to be > > REALLY paranoid to think the NSA would target us. I mean, come on, there > > You think ope

Re: "X -configure" segmentation fault

2013-09-11 Thread Antoine Jacoutot
> Thanks for the pointer. Wanted to run cwm but could not make it work - > I guess it's related to the problem you mention. > > Does this mean that obsd as a desktop is not really supported on the long run? Considering that several OpenBSD developers also have commit access (and/or a high positi

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Martin Schröder
2013/9/11 Marc Espie : > Second, low hanging fruit. > > There's so much crappy software and hardware out there that you have to be > REALLY paranoid to think the NSA would target us. I mean, come on, there You think openssh isn't a valuable target? You think openbsd isn't used in commercial firewa

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Marc Espie
On Wed, Sep 11, 2013 at 09:58:12AM +0200, Peter N. M. Hansteen wrote: > Re-evaluation and auditing is very much a part of the general OpenBSD > development process (see eg http://www.openbsd.org/goals.html and > http://www.openbsd.org/security.html, with links therein) already, > but I wouldn't b

Re: "X -configure" segmentation fault

2013-09-11 Thread Heptas Torres
On 9/10/13, Martin Brandenburg wrote: > On Tue, Sep 10, 2013 at 10:18:43PM +, Heptas Torres wrote: >> I am trying to generate a starting xorg.conf file by running "X >> -configure" but get a segmentation fault error (output below). Any >> ideas what could go wrong? Have tried this both in a VM

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Martin Schröder
2013/9/11 Jiri B : > neither I want to troll, but my curiousity is if OpenBSD devs > follow Bruce Schneier arguments and whole topic and if they > have done, do or will do some re-evaluation of crypto in OpenBSD > to minimalize being vulnerable to describe attacks. The monkeys will probably keep o

Re: OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Peter N. M. Hansteen
On Wed, Sep 11, 2013 at 03:26:07AM -0400, Jiri B wrote: > I don't understand very much technical details of this topic, > neither I want to troll, but my curiousity is if OpenBSD devs > follow Bruce Schneier arguments and whole topic and if they > have done, do or will do some re-evaluation of cr

Re: Modern C++ Compiler for OpenBSD

2013-09-11 Thread Marc Espie
On Tue, Sep 10, 2013 at 05:40:19PM -0400, Jeffrey Walton wrote: > I'd like to use some C++ language features that are relatively new. > They include intializer lists, rvalue references and regex (and > perhaps a lambda on occasion). > > Does anyone have a C++ compiler recommendation for OpenBSD?

OpenBSD crypto and NSA/Bruce Schneier

2013-09-11 Thread Jiri B
Hi all, I don't understand very much technical details of this topic, neither I want to troll, but my curiousity is if OpenBSD devs follow Bruce Schneier arguments and whole topic and if they have done, do or will do some re-evaluation of crypto in OpenBSD to minimalize being vulnerable to describ

Re: Modern C++ Compiler for OpenBSD

2013-09-11 Thread David Coppa
On Tue, Sep 10, 2013 at 11:40 PM, Jeffrey Walton wrote: > I'd like to use some C++ language features that are relatively new. > They include intializer lists, rvalue references and regex (and > perhaps a lambda on occasion). > > Does anyone have a C++ compiler recommendation for OpenBSD? As of no