Re: malloc.conf heads up

2018-11-06 Thread Otto Moerbeek
On Wed, Nov 07, 2018 at 07:26:21AM +0100, Otto Moerbeek wrote: > Hi, > > We are moving away from the /etc/malloc.conf symbolic link to a new sysctl: > > $ sysctl vm.malloc_conf > vm.malloc_conf=C > > This will allow unveiled and chrooted processes to access the

malloc.conf heads up

2018-11-06 Thread Otto Moerbeek
Hi, We are moving away from the /etc/malloc.conf symbolic link to a new sysctl: $ sysctl vm.malloc_conf vm.malloc_conf=C This will allow unveiled and chrooted processes to access the malloc options without having to do anything special in the code or chroot dir.

Re: performance of intel multithreading

2018-11-06 Thread Nick Holland
On 11/05/18 23:51, Kihaguru Gathura wrote: > Hi, > > From a security standpoint, > which platform will offer better performance huh? What's your priority, security or performance? > solution in web and database now that OpenBSD > multithreading is switched off for Intel? > > > (Fujitsu

Re: [OpenIKED] Is it impossible to differentiate the policies by dstid?

2018-11-06 Thread Daniel Ouellet
The source ID does default yes, but I have a tunnel gateway for multiple VPN and I HAD to specify the dstid on the passive side as well or ONLY the last rule was picked up for the 0.0.0.0/0 of some of them as an example for all the traffic flowing via the VPN. Any overlapping routes where not

Re: [OpenIKED] Is it impossible to differentiate the policies by dstid?

2018-11-06 Thread 雷致强
Thanks for the input, however, I think srcid defaults to the hostname when it’s omitted. Explicitly setting it didn’t give me any luck. > On Nov 7, 2018, at 2:33 AM, J Evans <3...@startmail.com> wrote: > > I am by no means an expert, but for my setup, in order to get multiple > policies

Re: [OpenIKED] Is it impossible to differentiate the policies by dstid?

2018-11-06 Thread J Evans
I am by no means an expert, but for my setup, in order to get multiple policies working, I had to specify both srcid and dstid for each policy on the passive peer. And then I set srcid and dstid for the policies on the active peers.

Re: growfs(8) to lower offset

2018-11-06 Thread Chris Bennett
On Tue, Nov 06, 2018 at 09:18:27AM -0500, David Higgs wrote: > > As the FAQ entry states, you can use growfs(8) if the empty space > > is after the existing partition, not prior. You can only grow a > > partition "down", never "up". What you want to do would require the > > following steps: > > >

Re: growfs(8) to lower offset

2018-11-06 Thread David Higgs
On Tue, Nov 6, 2018 at 8:58 AM Bruno Flueckiger wrote: > > On 05.11.18 19:47, David Higgs wrote: > > I read both the FAQ section and the growfs(8) man page but I am not > > yet confident that what I want to do is supported / safe. > > > > http://www.openbsd.org/faq/faq14.html#GrowPartition > > >

Re: growfs(8) to lower offset

2018-11-06 Thread Bruno Flueckiger
On 05.11.18 19:47, David Higgs wrote: > I read both the FAQ section and the growfs(8) man page but I am not > yet confident that what I want to do is supported / safe. > > http://www.openbsd.org/faq/faq14.html#GrowPartition > > I started with a number of partitions and a bunch of free space. I

Re: ikev2 and road warriors setup

2018-11-06 Thread Radek
Hello Kim, > My question was concerning the VPN_server, is the server NATed? A.B.C.0/23 is not NATed, it is a public pool. VPN_server is not NATed. > How is A.B.C.0/23 connected to the 'rest' of the world? Router/Firewall ... I only have switches in my building. All routers/firewalls of my

Re: cannot perform newline in sed substitution

2018-11-06 Thread Andreas Kusalananda Kähäri
On Tue, Nov 06, 2018 at 09:50:09AM +0100, Damien Thiriet wrote: > Hello misc@, > > > This is OpenBSD 6.4 stable. Since 6.3, I have troubles with > newline insersion in sed replacement pattern. I remember > doing it in previous versions. I bet I forgot the good way > to do it, but I am not sure.

Re: ldap search fails with Let's Encrypt certificate

2018-11-06 Thread Joel Carnat
Le 05/11/2018 17:07, Stuart Henderson a écrit : On 2018/11/05 17:02, Joel Carnat wrote: Le 05/11/2018 16:38, Stuart Henderson a écrit : > On 2018-11-05, Joel Carnat wrote: > > Le 05/11/2018 13:48, Stuart Henderson a écrit : > > > On 2018-11-05, Joel Carnat wrote: > > > > Hi, > > > > > > > >

cannot perform newline in sed substitution

2018-11-06 Thread Damien Thiriet
Hello misc@, This is OpenBSD 6.4 stable. Since 6.3, I have troubles with newline insersion in sed replacement pattern. I remember doing it in previous versions. I bet I forgot the good way to do it, but I am not sure. When I do echo \\page > foo sed "s/\\page/\ \\stopDiapo/" foo The output is