Re: Have sudo and login changed between 5.6 and 5.7?

2015-06-01 Thread Joel Rees
Checked in openbsd 5.6. 2015/05/31 23:38 "Joel Rees" : > > I have a home directory buried one deep in a directory owned by a > non-login user: > > /home > /home/bubble > /home/bubble/userA > > where /home/bubble is owned by user/group bubble, with read and search > permissions set for owner and gr

httpd.conf macros

2015-06-01 Thread Steve Shockley
I'm trying to set up roundcubemail on 5.7, following a combination of http://technoquarter.blogspot.com/2015/02/openbsd-mail-server-part-7-roundcube.html and https://github.com/reyk/httpd/wiki/Running-ownCloud-with-httpd-on-OpenBSD to set up httpd.conf. I'm having some trouble getting macros t

Re: OpenSMTPD: Unable to use desktop clients to send email.

2015-06-01 Thread Black Rider
DIsregard. It was a client problem. The server is working 100%. Black Rider wrote: > I have an instance of OpenSMTPD running with the following configuration: > > /etc/mail/smtpd.conf > > pki cryptoforliberty.org key "/etc/mail/cryptoforliberty.org.key" > pki cryptoforliberty.org certificate "/e

OpenSMTPD: Unable to use desktop clients to send email.

2015-06-01 Thread Black Rider
I have an instance of OpenSMTPD running with the following configuration: /etc/mail/smtpd.conf pki cryptoforliberty.org key "/etc/mail/cryptoforliberty.org.key" pki cryptoforliberty.org certificate "/etc/mail/cryptoforliberty.org.crt" listen on lo0 listen on msk0 port 25 auth tls pki cryptoforli

Re: NATing out enc0 traffic

2015-06-01 Thread Justin Mayes
No problem. I guess I should add that I'm not NATing enc0 as my subject suggests. I just have the usual 'match out on $ext_if...' nat rule in pf.conf and a 'set skip on enc0'. The real solution was understanding that ipsec tunnel in openbsd doesn’t use the route table so looking for a way to 'st

Re: NATing out enc0 traffic

2015-06-01 Thread Adam Van Ymeren
Thanks for posting your adventure. I didn't have enough PF knowledge to help debug, but it was an interesting read. On Mon, Jun 1, 2015 at 3:11 PM, Justin Mayes wrote: > I have this working. After learning more about route vs policy ipsec tunnels > I added a policy for 'any' to 10.x and return

Re: NATing out enc0 traffic

2015-06-01 Thread Justin Mayes
I have this working. After learning more about route vs policy ipsec tunnels I added a policy for 'any' to 10.x and return traffic from the net is now passed back. I will go back to my cave now -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf

Re: Install file sets from msdos fs

2015-06-01 Thread ludovic coues
2015-06-01 16:53 GMT+02:00 Raimo Niskanen : > Hello misc. > > Yesterday I upgraded a laptop (i386) from 5.6 snapshot to 5.7. This laptop > has no CD reader so I copied 5.7/i386 directory to an msdos formatted USB > stick on a Windows 7 machine and adjusted all filenames manually according > to the

Install file sets from msdos fs

2015-06-01 Thread Raimo Niskanen
Hello misc. Yesterday I upgraded a laptop (i386) from 5.6 snapshot to 5.7. This laptop has no CD reader so I copied 5.7/i386 directory to an msdos formatted USB stick on a Windows 7 machine and adjusted all filenames manually according to the TRANS.TBL files. I tested the USB stick before upgrad

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Zé Loff
On Mon, Jun 01, 2015 at 11:49:39AM -0500, Okupandolared wrote: > Hi, > > I have an web form. > > I need send of webform to script bash > > webform.html --> PHP proces --> create.sh > > create.sh > #!/bin/ksh > # Create user > > echo "hi!! your pass $1" > crypted="$(echo -n "$1" | smtpctl encry

Re: Thinkpad E550

2015-06-01 Thread Stefan Sperling
On Mon, Jun 01, 2015 at 03:41:24PM +, Sébastien Morand wrote: > Hi, > > I got a Lenovo Thinkpad E550. I installed -current and everything looks > fine except a few things: > iwm0 at pci2 dev 0 function 0 "Intel Dual Band Wirelsss AC 3160" rev 0x93, So 3160 intel cards work fine? Excellent! F

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Gareth Nelson
If you made these mistakes you'll have made others - get guidance from someone who knows what they're doing and have them audit your whole system. --- “Lanie, I’m going to print more printers. Lots more printers. One for everyone. That’s worth going to jail for. That’s worth anything.” -

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Okupandolared
thank you all for the support, I think in another way, as well sanitize my form. maybe python goes outside the chroot. Thanks again On 06/01/15 10:21, Sebastien Marie wrote: > Hi, > > Just to report how it is a bad idea... at least two sql injection and > one shell injection in your files. >

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Sebastien Marie
Hi, Just to report how it is a bad idea... at least two sql injection and one shell injection in your files. On Mon, Jun 01, 2015 at 11:49:39AM -0500, Okupandolared wrote: > Hi, > > I have an web form. > > I need send of webform to script bash > > webform.html --> PHP proces --> create.sh > >

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Okupandolared
This was an example I wrote this email really is not implemented anywhere. But thanks for observation. If I decide to put it online. "think of this security issue? On 06/01/15 10:20, Gareth Nelson wrote: > my domain is: > ',); DROP mails;-- > > Sanitise your inputs > > --- > “Lanie, I’m going

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Gareth Nelson
my domain is: ',); DROP mails;-- Sanitise your inputs --- “Lanie, I’m going to print more printers. Lots more printers. One for everyone. That’s worth going to jail for. That’s worth anything.” - Printcrime by Cory Doctrow Please avoid sending me Word or PowerPoint attachments. See htt

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Okupandolared
Really you could use php to insert into mysql, but as I need to run ejabberdctl and smtpdctl. I thought it would do everything from bash I have no idea how it could call smtpctl from php, maybe you go look at python. On 06/01/15 10:09, Gareth Nelson wrote: > Why on earth are you using the shell

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Gareth Nelson
Why on earth are you using the shell to insert into MySQL? I would redesign this whole setup under the guidance of someone more experienced to be honest, there's MANY mistakes you're making here, and thus likely other mistakes --- “Lanie, I’m going to print more printers. Lots more printers.

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Florian Obser
On 01/06/15 18:49, Okupandolared wrote: > Hi, > > I have an web form. > > I need send of webform to script bash > > webform.html --> PHP proces --> create.sh > > create.sh > #!/bin/ksh > # Create user > > echo "hi!! your pass $1" > crypted="$(echo -n "$1" | smtpctl encrypt )" > maildir="$3/$2/

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Jiri B
On Mon, Jun 01, 2015 at 11:49:39AM -0500, Okupandolared wrote: > Hi, > > I have an web form. > > I need send of webform to script bash > > webform.html --> PHP proces --> create.sh > > create.sh > #!/bin/ksh > # Create user > > echo "hi!! your pass $1" > crypted="$(echo -n "$1" | smtpctl encry

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Okupandolared
Hi, I have an web form. I need send of webform to script bash webform.html --> PHP proces --> create.sh create.sh #!/bin/ksh # Create user echo "hi!! your pass $1" crypted="$(echo -n "$1" | smtpctl encrypt )" maildir="$3/$2/" echo -e "$2@$3" >> recipients echo -e "$2@$3\t$crypted" >> credentia

Re: Unable to start dhcp server at boot on 5.7 stable

2015-06-01 Thread Ivo Chutkin
On 29.5.2015 г. 01:41 ч., Edgar Pettijohn III wrote: On May 28, 2015, at 2:06 AM, Ivo Chutkin wrote: Hello guys, I am lost with this simple task. DHCP server does not start at boot. If I started by #/etc/rc.d/dhcpd start, it starts and works properly. If I check it with #/etc/rc.d/dhcpd check,

OpenBSD 5.7 CD 2

2015-06-01 Thread OpenBSD Store Misc
Hello all, CD 2 has been dispatched for replacement on all orders. Sorry about the delay. Regards,

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Gareth Nelson
Everyone is missing the bigger picture here: Why is a PHP script calling the shell? 9 times out of 10, that's a bad idea and things should be redesigned so that it's not needed. --- “Lanie, I’m going to print more printers. Lots more printers. One for everyone. That’s worth going to jail fo

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread dan mclaughlin
On Mon, 1 Jun 2015 06:05:28 -0400 Josh Grosse wrote: > On Mon, Jun 01, 2015 at 04:45:01AM -0400, dan mclaughlin wrote: > > On Sun, 31 May 2015 22:20:17 -0500 Okupandolared wrote: > > > does not exist, > > > > > > so I can copy /usr/bin/whoami to /var/www/usr/bin/whoami? > > > > > > that try "ls

Re: Intel i217-LM Ethernet not working in -current

2015-06-01 Thread Sonic
On Mon, Jun 1, 2015 at 5:30 AM, Jonathan Gray wrote: > Are you using vlans or anything that would raise the mtu? > > There aren't many revisions between 5.6 and 5.7 for em and none > look all that suspicous for i217. Can you find which revision > introduced the regression? No vlans, plain config

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Josh Grosse
Corrected for typos. What I'd just Emailed was without any coffee... On Mon, Jun 01, 2015 at 06:05:28AM -0400, Josh Grosse wrote: > Also, in a chrooted filesystem, every dynamically linked executable needs > access > to ld.so and its shared libraries. Which means /var/www/usr/lib and > /var/

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread Josh Grosse
On Mon, Jun 01, 2015 at 04:45:01AM -0400, dan mclaughlin wrote: > On Sun, 31 May 2015 22:20:17 -0500 Okupandolared wrote: > > does not exist, > > > > so I can copy /usr/bin/whoami to /var/www/usr/bin/whoami? > > > > that try "ls" and "/bin/ls" and "/var/www/bin/ls" > > > > and it does not work,

Re: Intel i217-LM Ethernet not working in -current

2015-06-01 Thread Jonathan Gray
On Sun, May 31, 2015 at 10:16:57PM -0400, Sonic wrote: > On Sun, May 31, 2015 at 3:37 PM, Sonic wrote: > > On Sun, May 31, 2015 at 3:49 AM, Paul de Weerd wrote: > >> I can confirm my i217-LM still works with the latest snapshot (typing > >> this e-mail over it). > > > > I'm currently upgrading -c

Re: How does it work, shell_exec and exec of php-fpm in OpenBSD 5.6?

2015-06-01 Thread dan mclaughlin
On Sun, 31 May 2015 22:20:17 -0500 Okupandolared wrote: > does not exist, > > so I can copy /usr/bin/whoami to /var/www/usr/bin/whoami? > > that try "ls" and "/bin/ls" and "/var/www/bin/ls" > > and it does not work, > "/bin/ls" exist > "/var/www/bin/ls" exist > > thanks > > On 05/31/15 19:43,