Re: No coloring with colorls

2024-03-26 Thread Karel Lucas
It works correctly! My /etc/profile now looks like this: export TERM=xterm-256color export CLICOLOR=yes export CLICOLOR_FORCE=yes export LSCOLORS=exfxcxdxbxegedabagacad And with colorls -Ghl I get the output in color. Thank you all very much! Op 25-03-2024 om 23:46 schreef Benjamin Stürz: On

Re: sftp server empty password login

2024-03-26 Thread Darren Tucker
On Tue, 26 Mar 2024 at 23:49, Sylvain Saboua wrote: [...] > /bin/true is not in the /etc/shells file on my system. > Did you suggest I should add it ? I did suggest that as a possible resolution to your problem. Since your problem is now resolved, I wouldn't change it. -- Darren Tucker

Fastnetmon on openBSD Can't pass data to stdin of program /usr/local/bin/notify_about_attack.sh

2024-03-26 Thread Tom Smyth
Folks, Just wondering if any of you are having issues with fastnetmon notification scripts in my /var/log/fastnetmon/fastnetmon.log Im getting [ERROR] Can't pass data to stdin of program /usr/local/bin/notify_about_attack.sh [IPAddress] incoming 122936 ban has anyone come across this issue. ?

Re: rm: #08057459: Operation not permitted

2024-03-26 Thread Stuart Henderson
On 2024-03-26, deich...@placebonol.com wrote: > > can you share what caused ls to coredump=20 corrupt timestamp. https://marc.info/?t=17114738861=1=2 -> https://marc.info/?l=openbsd-bugs=17114820954=2

Re: rm: #08057459: Operation not permitted

2024-03-26 Thread Florian Obser
newfs(8), and restore from backup. Your filesystem is fubar. Or a hexeditor and a steady hand, but then you are very much on your own and we'll just watch in amazement. On 26 March 2024 21:30:14 CET, Peter Fraser wrote: >The reason why ls -l faulted has been found and is being worked on. >

Re: rm: #08057459: Operation not permitted

2024-03-26 Thread deich...@placebonol.com
can you share what caused ls to coredump On March 26, 2024 2:30:14 PM MDT, Peter Fraser wrote: >The reason why ls -l faulted has been found and is being worked on. > >The next step is trying to delete the files. >Running as root >rm fails with Operation not permitted >so does chmod and chown

rm: #08057459: Operation not permitted

2024-03-26 Thread Peter Fraser
The reason why ls -l faulted has been found and is being worked on. The next step is trying to delete the files. Running as root rm fails with Operation not permitted so does chmod and chown end chattr Any ideas on how to get rid of the files

Re: No coloring with colorls

2024-03-26 Thread h . kampmann
Hello, I use in my user .profile ~/.profile TERM=wsvt25 export PATH HOME TERM export ENV=$HOME/.kshrc export CLICOLOR=true export LSCOLORS=ExGxcxdxCxegedabagacad and in the .kshrc ~/.kshrc alias ls=/usr/local/bin/colorls For me it´s ok on the console and on X. For me it's a gimmick. Actually

Re: securelevel=2 and mount hardening

2024-03-26 Thread Lyndon Nerenberg (VE7TFX/VE6BBM)
Stuart Henderson writes: > I think you'd need to disable mount completely, otherwise you can mount > a new writable filesystem (e.g. MFS) that doesn't have noexec. Yeah, I completely missed that vector. And really, that makes more sense. How often do you live mount filesystems on a firewall?

Re: sftp server empty password login

2024-03-26 Thread Sylvain Saboua
Problem solved, thank you ! Just removing the password asterisk using vipw was enough : $ grep media /etc/passwd media::2000:2000::/home/media:/sbin/nologin and I am now able to log in, from the local network (still need to open my ISP's box port and confirm that it works remotely) Le

Re: No coloring with colorls

2024-03-26 Thread Chris Bennett
On Mon, Mar 25, 2024 at 11:40:52PM +0100, Karel Lucas wrote: > Hi all, > > LSCOLORS=exfxcxdxbxegedabagacad > I just use TERM=xterm If you use a black background (or some other dark colors), you will want to change LSCOLORS to not use a dark blue. I find that color combo unreadable. I just use

One more thought about security..

2024-03-26 Thread Dan
Hello, Just adding a simple evidence: dark mode is difficult to print. If you are dedicating time to web browser and email client development in OpenBSD.. I suggest to point antennas on dark mode too.. -Dan

Re: configure rad for ULA addresses

2024-03-26 Thread Evan Sherwood
> To reach the internet from ULA addresses you'll need NAT. > Alternatively use *both* global and ULA prefixes in rad.conf (or I > think you can use auto prefix). But I don't think you've got that far > yet. I was planning on using the ULAs for internal addressing only, and doing port-forwarding

Re: sftp server empty password login

2024-03-26 Thread Manuel Giraud
Sylvain Saboua writes: [...] > $ more /etc/ssh/sshd_config # relevant extracts and changes : > ... > PermitRootLogin no > ... > # override default of no subsystems > #Subsystem sftp/usr/libexec/sftp-server -d /home/media > Subsystem sftp internal-sftp # -d /home/media > > Match

Re: Does anyone know whether this hardware runs OpenBSD?

2024-03-26 Thread Anders Andersson
On Tue, Mar 26, 2024 at 1:07 AM Jose Maldonado wrote: > > El Mon, 25 Mar 2024 04:39:15 -0400 > Steve Litt escribió: > > Does anyone know whether this hardware runs OpenBSD? > > > >

Re: sftp server empty password login

2024-03-26 Thread Darren Tucker
You could run sshd in debug mode to be sure ("/usr/sbin/sshd -ddd -p ", then connect with "sftp -oport="), but... On Tue, 26 Mar 2024 at 22:10, Sylvain Saboua wrote: [...] > # useradd -g media -s /sbin/nologin -u 2000 -v media Unless /sbin/nologin is in /etc/shells (which it probably

Re: configure rad for ULA addresses

2024-03-26 Thread Stuart Henderson
On 2024-03-25, Evan Sherwood wrote: >>> interface igc1 { >>> prefix fdbf:e79a:8e3e::/48 >> >> lesser operating systems will refuse to form autoconf addresses if the >> prefix length is not 64. > > Thanks, this was helpful. I got addresses allocated on client

Re: some ports give "Error while reading header" while fetching

2024-03-26 Thread void
On Tue, Mar 26, 2024 at 12:32:52PM +0100, Peter Hessler wrote: There was a mistake while signing these packages, you want the set signed 2024-03-22 or later. ftp.hostserver.de and the other 2nd level mirrors most certainly has those, and the other mirrors should get them over time. thank you

Re: some ports give "Error while reading header" while fetching

2024-03-26 Thread Peter Hessler
There was a mistake while signing these packages, you want the set signed 2024-03-22 or later. ftp.hostserver.de and the other 2nd level mirrors most certainly has those, and the other mirrors should get them over time. On 2024 Mar 26 (Tue) at 11:22:08 + (+), void wrote: :Hello, :

Re: securelevel=2 and mount hardening

2024-03-26 Thread Dan
Thanks for the reply.. Good one, try to think I was sure it was meaning many western right wingers (cats) vs 1 jelly fish (cattle). Then, when I have time I explain what is coudardy.. -Dan Mar 26, 2024 11:06:17 Alexis : > Dan writes: > >> I'm curious John Doe.. you said cloud but not

some ports give "Error while reading header" while fetching

2024-03-26 Thread void
Hello, Posting in misc@ because it's an issue not limited to any particular port. context is 7.5 GENERIC.MP#138 arm64 aarch64 error: $ doas pkg_add -D snap mupdf quirks-7.14 signed on 2024-03-18T13:07:59Z Ambiguous: choose package for mupdf a 0: 1: mupdf-1.23.11 2: mupdf-1.23.11-js

sftp server empty password login

2024-03-26 Thread Sylvain Saboua
I have been using the secure shell for remote maintenance on my local machine for some time. I wish to go one step further and implement a secure file transfer server, where user(s) could download files from a read-only /home/media directory as well as upload their own files to /home/media/pub

Re: securelevel=2 and mount hardening

2024-03-26 Thread Alexis
Dan writes: I'm curious John Doe.. you said cloud but not firewall, and cattle but not pets, right? As with a number of your posts, i'm not clear on what you're saying or asking, but for those wondering, here's an explanation of "cattle vs pets" in the context of computing infrastructure:

Re: No coloring with colorls

2024-03-26 Thread Crystal Kolipe
On Mon, Mar 25, 2024 at 07:03:06PM -0400, Amelia A Lewis wrote: > Note that you need a color-capable terminal to enable colorls. This > means you should set your TERM to "wsvt25" on the wscons(4) console For several releases now, you should be able to set TERM to "xterm" even when using wscons.

Re: securelevel=2 and mount hardening

2024-03-26 Thread Stuart Henderson
On 2024-03-25, Lyndon Nerenberg (VE7TFX/VE6BBM) wrote: > I am curious to hear peoples thoughts on adding some mount(2) > hardening when the system is running at securelevel 2. Specifically: > > * do not allow removing MT_NODEV, MT_NOEXEC, MT_NOSUID, > or MT_RDONLY in conjunction

Re: No coloring with colorls

2024-03-26 Thread Stuart Henderson
On 2024-03-25, Karel Lucas wrote: > In which configuration file can I change this? Is 'wsvt25' universally > suitable for use? For X, it's configured in your terminal emulator, e.g. for xterm you can use one of these :in .Xdefaults XTerm*termName: xterm-color XTerm*termName: xterm-256color

Re: No coloring with colorls

2024-03-26 Thread Stuart Henderson
On 2024-03-25, Karel Lucas wrote: > Hi all, > > After installing colorls and making some adjustments to the system, I > still have no colored output from colorls. Below I have indicated the > settings that have been made or are present by default. I would like to > know what is wrong and what

Re: securelevel=2 and mount hardening

2024-03-26 Thread Dan
I'm curious John Doe.. you said cloud but not firewall, and cattle but not pets, right? You are a strange anglophon western toddler.. -Dan Mar 25, 2024 23:41:44 jslee : > On Tue, 26 Mar 2024, at 04:30, Dan wrote: >> Eventually, having the kernel possibility to customize the config path >>