Re: ffs and utf8

2014-12-01 Thread Anthony J. Bentley
Hi Ingo, Ingo Schwarze writes: While the article is old, the essence of what Schneier said here still stands, and it is not likely to fall in the future: https://www.schneier.com/crypto-gram-0007.html#9 The most interesting sentence here is: Unicode is just too complex to ever be secure.

Re: ffs and utf8

2014-12-01 Thread pizdelect
On Sat, Nov 29, 2014 at 09:48:53PM +0100, Dmitrij D. Czarkoff wrote: That said, the standard provides just enough facilities to make filesystem-related aspects of Unicode work nicely, particularily in case of utf-8. Eg. ability to enforce NFD for all operations on file names could actually

Re: ffs and utf8

2014-12-01 Thread Dmitrij D. Czarkoff
pizdel...@gmail.com said: How do you 'enforce' NFD? Let the kernel normalize (ie /destructively/ transform) the file names behind user's back, so that a file will be listed with a different name than that with which it was created? That's very nice and secure, indeed. I would enforce

Re: ffs and utf8

2014-12-01 Thread Janne Johansson
2014-12-01 10:20 GMT+01:00 Dmitrij D. Czarkoff czark...@gmail.com: pizdel...@gmail.com said: How do you 'enforce' NFD? Let the kernel normalize (ie /destructively/ transform) the file names behind user's back, so that a file will be listed with a different name than that with which it

Re: ffs and utf8

2014-12-01 Thread Stefan Sperling
On Mon, Dec 01, 2014 at 10:38:40AM +0200, pizdel...@gmail.com wrote: On Sat, Nov 29, 2014 at 09:48:53PM +0100, Dmitrij D. Czarkoff wrote: That said, the standard provides just enough facilities to make filesystem-related aspects of Unicode work nicely, particularily in case of utf-8. Eg.

Re: ffs and utf8

2014-12-01 Thread Stefan Sperling
On Mon, Dec 01, 2014 at 10:20:08AM +0100, Dmitrij D. Czarkoff wrote: I would enforce normalization at filename access time (open(), fopen(), readdir(), etc). Yes, destructively transform. I would reject filenames that won't decode. If this is documented, I just don't see how it is behind

Re: ffs and utf8

2014-12-01 Thread Dmitrij D. Czarkoff
Stefan Sperling said: Bad idea. See my other post. Apple did this and broke existing applications. OpenBSD changed time_t and broke existing applications, but hardly anyone thinks it was a bad idea. Fancy filenames are long known to be problematic, so filename policy enforcement is a breakage

Re: ffs and utf8

2014-12-01 Thread Janne Johansson
2014-12-01 12:05 GMT+01:00 Dmitrij D. Czarkoff czark...@gmail.com: Stefan Sperling said: Bad idea. See my other post. Apple did this and broke existing applications. OpenBSD changed time_t and broke existing applications, but hardly anyone thinks it was a bad idea. Fancy filenames are

npppd and vpn connections on the same network

2014-12-01 Thread Christer Solskogen
Hi! Is it possible to setup npppd so that the clients are on the same network as the local network behind the router/firewall? The only setups I've seen have the clients on a seperate network. -- chs

Re: ffs and utf8

2014-12-01 Thread Dmitrij D. Czarkoff
Janne Johansson said: There is quite a bit of difference between changing the storage format and making some dates impossible that previously did work. Don't think so. Something got changed, things got broken and need to be fixed. The only real question is: is the change worth the trouble. I

Re: npppd and vpn connections on the same network

2014-12-01 Thread YASUOKA Masahiko
Yes. But there is a bug with Windows clients. See http://marc.info/?l=openbsd-miscm=141627574522930w=2 On Mon, 1 Dec 2014 12:42:41 +0100 Christer Solskogen christer.solsko...@gmail.com wrote: Hi! Is it possible to setup npppd so that the clients are on the same network as the local

Re: ffs and utf8

2014-12-01 Thread Joel Rees
On Mon, Dec 1, 2014 at 8:43 PM, Dmitrij D. Czarkoff czark...@gmail.com wrote: Janne Johansson said: There is quite a bit of difference between changing the storage format and making some dates impossible that previously did work. Don't think so. Something got changed, things got broken and

Re: ffs and utf8

2014-12-01 Thread Dmitrij D. Czarkoff
Joel Rees said: Hmm. What would you suggest doing with the following file name? /etc (You may need a Japanese font to display it.) If you try to normalize it on a *nix box, it will hopefully conflict with your system file permissions. But, then what do you do with it? If you throw it

Re: Patch 009_httpd.patch did not apply cleanly

2014-12-01 Thread Raimo Niskanen
On Sat, Nov 29, 2014 at 05:44:17PM -0500, Ted Unangst wrote: On Sat, Nov 29, 2014 at 16:08, Libertas wrote: On 11/27/2014 07:38 AM, Raimo Niskanen wrote: I have also learned to use the -C flag to patch... Have we ever considered changing the suggested shell commands in the patches to

Re: npppd and vpn connections on the same network

2014-12-01 Thread trondd
I had this set up for an Android and an OSX client. Ignore the networks part and configure the connections for the end points. I took the npppd assigned IPs out of my DHCP range. My problems, though: Needed a specific npppd config for each client. Username, assigned IP, whatever else goes

Time keeping problem

2014-12-01 Thread Michał Koc
Hi All, I've got a OpenBSD installation on Microsoft Hyper-V, and there is a strange issue related to time. Actually the clock seems to be running fine, but all of the sleep operations expire 2 times too fast. I.e.: # date; sleep 60; date Mon Dec 1 18:23:18 CET 2014 Mon Dec 1 18:23:48 CET

Re: npppd and vpn connections on the same network

2014-12-01 Thread YASUOKA Masahiko
On Mon, 1 Dec 2014 11:38:31 -0500 trondd tro...@gmail.com wrote: I had this set up for an Android and an OSX client. Ignore the networks part and configure the connections for the end points. I took the npppd assigned IPs out of my DHCP range. I think I misunderstood your question. You want

Re: Time keeping problem

2014-12-01 Thread Ted Unangst
On Mon, Dec 01, 2014 at 17:33, Michał Koc wrote: Hi All, I've got a OpenBSD installation on Microsoft Hyper-V, and there is a strange issue related to time. Actually the clock seems to be running fine, but all of the sleep operations expire 2 times too fast. cpu0 at mainbus0: apid 0 (boot

sys_socket() protection fault on -current

2014-12-01 Thread Carlin Bingham
On -current, running apachebench with a large number of concurrent requests is causing a protection fault. eg. the command: ab -n 1000 -c 1000 http://my.host/ Reproduced on two different machines. CNR on 5.6-release. kernel: protection fault trap, code=0 Stopped at sys_socket+0x6a:

Re: sys_socket() protection fault on -current

2014-12-01 Thread Philip Guenther
On Tue, 2 Dec 2014, Carlin Bingham wrote: On -current, running apachebench with a large number of concurrent requests is causing a protection fault. eg. the command: ab -n 1000 -c 1000 http://my.host/ Reproduced on two different machines. CNR on 5.6-release. kernel: protection fault

Re: ffs and utf8

2014-12-01 Thread Ted Unangst
On Mon, Dec 01, 2014 at 12:43, Dmitrij D. Czarkoff wrote: Janne Johansson said: There is quite a bit of difference between changing the storage format and making some dates impossible that previously did work. Don't think so. Something got changed, things got broken and need to be fixed.

Re: ffs and utf8

2014-12-01 Thread frantisek holop
Joel Rees, 01 Dec 2014 22:04: Hmm. What would you suggest doing with the following file name? /etc (You may need a Japanese font to display it.) If you try to normalize it on a *nix box, it will hopefully conflict with your system file permissions. But, then what do you do with it?

Re: sys_socket() protection fault on -current

2014-12-01 Thread Carlin Bingham
On Tue, 2 Dec 2014, at 07:47 AM, Philip Guenther wrote: On Tue, 2 Dec 2014, Carlin Bingham wrote: On -current, running apachebench with a large number of concurrent requests is causing a protection fault. eg. the command: ab -n 1000 -c 1000 http://my.host/ Reproduced on two

Re: ffs and utf8

2014-12-01 Thread frantisek holop
Stefan Sperling, 29 Nov 2014 18:17: Are you aware of 'detox' package? There's also converters/convmv $ touch »´ÁÉǑÄ« $ convmv * wrong/unknown from encoding! $ convmv -f utf8 -t latin1 * Starting a dry run without changes... iso-8859-1 doesn't cover all needed characters for: ./»´ÁÉǑÄ« To

Re: using cua0 the easy way

2014-12-01 Thread Jason McIntyre
On Thu, Nov 20, 2014 at 05:15:24PM -0500, sven falempin wrote: On Thu, Nov 20, 2014 at 5:02 PM, Fred open...@crowsons.com wrote: On 11/20/14 21:47, sven falempin wrote: How an openBSD dev is reading the /dev/cua when the cua is a ksh shall on the other side ? stty is obscure to me,

impossibly slow installing 5.6-release on MacbookAir6,1

2014-12-01 Thread Scott Bonds
I am trying to install 5.6-release on a MacbookAir6,1. There are long (5 to 10 minute) pauses that seem to happen whenever the OS accesses the built in hard drive. I tried the 20141201 snapshot as well and observed the same pauses. The pauses/slowness is so long that after 4 days of waiting, I

Re: ffs and utf8

2014-12-01 Thread Joel Rees
On Mon, Dec 1, 2014 at 11:13 PM, Dmitrij D. Czarkoff czark...@gmail.com wrote: Joel Rees said: Hmm. What would you suggest doing with the following file name? /etc (You may need a Japanese font to display it.) If you try to normalize it on a *nix box, it will hopefully conflict with your

Re: ffs and utf8

2014-12-01 Thread Anthony J. Bentley
Ted Unangst writes: On Mon, Dec 01, 2014 at 12:43, Dmitrij D. Czarkoff wrote: Janne Johansson said: There is quite a bit of difference between changing the storage format and making some dates impossible that previously did work. Don't think so. Something got changed, things got

-current hangs during boot from xhci controller on MacbookAir6,1

2014-12-01 Thread Scott Bonds
While investigating the slow hard drive on my MacbookAir6,1, I decided to take a working installation of -current (20141201 snapshot) on a USB drive and try booting it on the MBA6,1. I discovered that booting off of a usb drive (with a full install, i.e. bsd.mp NOT bsd.rd) hangs once the boot

Re: ffs and utf8

2014-12-01 Thread Dmitrij D. Czarkoff
Joel Rees said: Now, what would you do with this? ジョエル Why not decompose it to the following? ジョエル Because it is not what Unicode normalization is. I know what the Unicode rules say, but my boss says, if I'm going to play with file names, he wants it done his way. And now you

Re: sys_socket() protection fault on -current

2014-12-01 Thread Philip Guenther
On Mon, Dec 1, 2014 at 1:52 PM, Carlin Bingham c...@viennan.net wrote: Yes this seems to work, can not reproduce it with this applied. Thanks for the report; committed! Philip Guenther

disk quotas bug fix [was: quotas grace period none right away]

2014-12-01 Thread Boris Goldberg
Hello misc, I've reported a detailed bug two months ago. The short story - grace period end time isn't being reset if the over_soft_quota stage is reached by chown command. I've confirmed it on i386 5.0 through current (as of month ago) and on amd64 5.4. Developers seemed to don't have time