an alias switch in doas

2019-07-04 Thread Joseph A Borg
may I humbly suggest the addition of an alias switch in the doas command. It would serve to shorten the command into something shorter and perhaps more memorable. I don’t think there are security implications as such but I’m no expert on security. I think it’s neater to have this functoinality t

Autostart of ssh-agent in root's .profile prevents startup

2019-07-04 Thread Rosselur Rossen
Hi! I have the following added to root's .profile: --snip-- env=~/.ssh/agent.env agent_load_env () { test -f "$env" && . "$env" >| /dev/null ; } agent_start () { (umask 077; ssh-agent >| "$env") . "$env" >| /dev/null ; } agent_load_env # agent_run_state: 0=agent running w/ k

Re: umsm0: this device is not using CDC notify message in intr pipe. HP Compaq dc5750

2019-07-04 Thread Roderick
On Fri, 5 Jul 2019, Kihaguru Gathura wrote: This was working up and until OpenBSD 6.4 amd64. With OpenBSD 6.5 i386 release on a Samsung nc10 nettop and with a Huawei E372 modem umsm is working. I do not know what is happening in current. For me it would be a catastrophe if it stops working:

Re: How to clear the screen correctly in ksh

2019-07-04 Thread Максим
Hello, Thanks for the hint, it really works out of the box on 6.5 I did not notice it because I use vi mode in ksh which does not seem to know about this key combination. In man ksh there is no option for the vi mode. --  Maksim Rodin 04.07.2019, 12:59, "Stuart Henderson" : > On 2019-07-04, Макс

Re: umsm0: this device is not using CDC notify message in intr pipe. HP Compaq dc5750

2019-07-04 Thread Kihaguru Gathura
On 6/29/19, Chris Cappuccio wrote: > Kihaguru Gathura [pqscr...@gmail.com] wrote: >> Hello, >> >> Huawei E303 modem now detaches in OpenBSD 6.5 This works fine on >> OpenBSD 6.2 same machine. >> > > There's a remote chance that this is fixed in 6.5-current. Some USB work > has been going on. But i

Re: umsm: sparc64

2019-07-04 Thread Kihaguru Gathura
On 7/4/19, Claudio Jeker wrote: > On Thu, Jul 04, 2019 at 12:52:15PM +0300, Kihaguru Gathura wrote: >> Hereby attached the new multiprocessor kernel with umsm working ok. >> >> The error message appears for each connection made to cuaU. This might >> potentially populate dmesg logs over time. >> >

Re: ed(1) man page doesn't mention use of single / and ?

2019-07-04 Thread Mohamed Fouad
To add to Ian's reference. "Ed Mastery" is the only book I know specific to ed(1). Mo On Thu, 4 Jul 2019, 6:54 pm ropers Do I understand correctly that this is in reference to these parts of man > 1 ed: > > > /re/ > >The next line containing the regular expression re. The search wraps > to t

Re: ed(1) man page doesn't mention use of single / and ?

2019-07-04 Thread ropers
Do I understand correctly that this is in reference to these parts of man 1 ed: > /re/ >The next line containing the regular expression re. The search wraps to > the beginning of the buffer and continues down to the current line, if > necessary. “//” repeats the last search. > ?re? >The

Re: ssh-keygen specify max keysize for ed25519

2019-07-04 Thread Christian Weisgerber
On 2019-07-03, jungle boogie wrote: > $ ssh-keygen -t ed25519 -b 1000 > Bits has bad value 1000 (too large) That's fine, that's a generic argument parsing error. > $ ssh-keygen -t ed25519 -b 2 > key bits exceeds maximum 16384 That error makes no sense. ED25519 keys have a fixed le

Re: OT: hardware war with manufacturers (espionage claims)

2019-07-04 Thread ropers
On 04/07/2019, cho...@jtan.com wrote: > ropers writes: >> ::I put on my robe and tinfoil hat.:: > >> ... Wow. The things you guys come up with ... > > I mean yeah, I guess, in theory maybe? > > Of course in order to achieve this level of evil you need highly competent > governments and corporation

Re: DNS Race Condition on Boot

2019-07-04 Thread sven falempin
Aren’t new version enabling (some.host) to not race ? On Thu, Jul 4, 2019 at 7:26 AM Andy Lemin wrote: > Hey guys. > > Thanks for the ideas. Sadly I cannot use static IPs as we don’t control > the domains. > > I think I’ll use Otto’s suggestion as I am already doing that to provide a > black hol

Re: AESGCM supported in IKEv1 phase 2 but not in phase 1

2019-07-04 Thread Stuart Henderson
On 2019-07-04, Daniel Polak wrote: > Just tried to configure an IKEv1 VPN connection with AESGCM but isakmpd > only supports that in phase 2 but not in phase 1. > See https://marc.info/?l=openbsd-cvs&m=128516335103833&w=2 for the commit. > > Is there any special reason why AESGCM has not been imp

Re: DNS Race Condition on Boot

2019-07-04 Thread Andy Lemin
Hey guys. Thanks for the ideas. Sadly I cannot use static IPs as we don’t control the domains. I think I’ll use Otto’s suggestion as I am already doing that to provide a black hole table for the spamhaus drop list. So I’ll just enhance that script to manage some more tables 😀 After all, the c

Re: Full Disk Encryption and (U)pgrade via snapshot installer?

2019-07-04 Thread Chris Humphries
Thank you for the tip there Maksym! I'll be sure to remember it. On Thu, Jul 04, 2019 at 12:59:37PM +0300, Maksym Sheremet wrote: > In -current you should create sd0 manually. > > # cd /dev && sh MAKEDEV sd0 > > And then use bioctl as usual. > > On Thu, Jul 04, 2019 at 02:02:39AM +, Chris H

Re: umsm: sparc64

2019-07-04 Thread Stuart Henderson
On 2019/07/04 12:52, Kihaguru Gathura wrote: > Hereby attached the new multiprocessor kernel with umsm working ok. > > The error message appears for each connection made to cuaU. This might > potentially populate dmesg logs over time. > > Error message: > umsm0: this device is not using CDC notif

Re: umsm: sparc64

2019-07-04 Thread Claudio Jeker
On Thu, Jul 04, 2019 at 12:52:15PM +0300, Kihaguru Gathura wrote: > Hereby attached the new multiprocessor kernel with umsm working ok. > > The error message appears for each connection made to cuaU. This might > potentially populate dmesg logs over time. > > Error message: > umsm0: this device i

Re: Full Disk Encryption and (U)pgrade via snapshot installer?

2019-07-04 Thread Maksym Sheremet
In -current you should create sd0 manually. # cd /dev && sh MAKEDEV sd0 And then use bioctl as usual. On Thu, Jul 04, 2019 at 02:02:39AM +, Chris Humphries wrote: > Hello, > > I have full disk encryption active on my machine. I would like to > follow -current, and the FAQ[1] said to grab an

Re: How to clear the screen correctly in ksh

2019-07-04 Thread Alexis
Joseph Mayer writes: As far as I am aware, since about 6 months ksh clears the screen on ctrl+L by default, no bind is needed anymore? You're right; it's specifically stated in the Changelog for 6.5: https://www.openbsd.org/plus65.html which apparently i didn't read closely enough. :-/

Re: How to clear the screen correctly in ksh

2019-07-04 Thread Stuart Henderson
On 2019-07-04, Максим wrote: > Hello > In bash I can press Ctrl-l to clear the screen. > In ksh this key combination does not work. I can clear the screen only > using the command "clear". > > How can I do this using hotkeys in ksh? > And how to do this when in vi mode? > > I tried a workaround by

Re: umsm: sparc64

2019-07-04 Thread Kihaguru Gathura
Hereby attached the new multiprocessor kernel with umsm working ok. The error message appears for each connection made to cuaU. This might potentially populate dmesg logs over time. Error message: umsm0: this device is not using CDC notify message in intr pipe. Please send your dmesg to , thanks.

Re: How to clear the screen correctly in ksh

2019-07-04 Thread Joseph Mayer
‐‐‐ Original Message ‐‐‐ On Thursday, 4 July 2019 16:39, Alexis wrote: > Максим a23s4a2...@yandex.ru writes: > > In bash I can press Ctrl-l to clear the screen. > > In ksh this key combination does not work. I can clear the > > screen only > > using the command "clear". > > How can I do

AESGCM supported in IKEv1 phase 2 but not in phase 1

2019-07-04 Thread Daniel Polak
Just tried to configure an IKEv1 VPN connection with AESGCM but isakmpd only supports that in phase 2 but not in phase 1. See https://marc.info/?l=openbsd-cvs&m=128516335103833&w=2 for the commit. Is there any special reason why AESGCM has not been implemented for phase 1 as well?

Re: How to clear the screen correctly in ksh

2019-07-04 Thread Alexis
Максим writes: In bash I can press Ctrl-l to clear the screen. In ksh this key combination does not work. I can clear the screen only using the command "clear". How can I do this using hotkeys in ksh? i have this in my .kshrc: bind -m '^L=^Uclear^J^Y' Alexis.

Re: DNS Race Condition on Boot

2019-07-04 Thread Otto Moerbeek
On Thu, Jul 04, 2019 at 09:14:19AM +0100, Andy Lemin wrote: > Hi guys, > > Is anyone else aware of the Unbound and PF race condition that exists when > FQDNs are used in pf.conf with a local Unbound server? Yes, it's an obvious one isn't it? > > The issue occurs when pf starts before unbound,

DNS Race Condition on Boot

2019-07-04 Thread Andy Lemin
Hi guys, Is anyone else aware of the Unbound and PF race condition that exists when FQDNs are used in pf.conf with a local Unbound server? The issue occurs when pf starts before unbound, but where pf fails to start as it cannot resolve some DNS names.. and so unbound also fails to work when it

How to clear the screen correctly in ksh

2019-07-04 Thread Максим
Hello In bash I can press Ctrl-l to clear the screen. In ksh this key combination does not work. I can clear the screen only using the command "clear". How can I do this using hotkeys in ksh? And how to do this when in vi mode? I tried a workaround by assigning the key combination to Ctrl-l to cw