Re: Empty MFS on root

2015-12-08 Thread Ted Unangst
Tati Chevron wrote: > On Tue, Dec 08, 2015 at 08:09:47AM -0700, Theo de Raadt wrote: > >> Currently, it's possible, (as root), to do something like: > >> > >> # mount_mfs -s 1g swap / > >> > >> which succeeds, and mounts the empty filesystem as the root filesystem. > >> > >> This makes the machine

Re: Empty MFS on root

2015-12-08 Thread Ted Unangst
Tati Chevron wrote: > Currently, it's possible, (as root), to do something like: > > # mount_mfs -s 1g swap / > > which succeeds, and mounts the empty filesystem as the root filesystem. > > This makes the machine inoperable and requires a physical reset, without a > clean shutdown, as no system

Re: bsd.rd on Octeon ubnt_e200 doesn't fully boot

2015-12-05 Thread Ted Unangst
Daniel Ouellet wrote: > Not the end of the world, I was trying to see if I could boot OpenBSD on > this version of the EdgeRouter Pro from Ubiquiti. I try the latest > Octeon available just in case. > panic: pool_do_get: filepl free list modified: page 0x98041e984000; > item addr 0x98041e9

Re: A branded USB stick as an alternative to the CD set?

2015-12-04 Thread Ted Unangst
Gareth Nelson wrote: > I don't see any issue with a company wanting custom work done on the > project as long as it doesn't contradict the goals of the project. > > For example, a company might want to pay more to improve particular > hardware drivers, is that really a problem? > > Consulting cou

Re: Xorg crash

2015-12-03 Thread Ted Unangst
Sébastien Morand wrote: > Hi, > > Since last update to snapshots, Xorg crash every 15/20 minutes. known issue, fix coming soon. because the broadwell driver has issues with suspend/resume, acceleration was disabled in the X driver (which makes resume work). but the unaccelerated X codepath isn't

Re: Regex in doas.conf

2015-12-03 Thread Ted Unangst
Sebastian John wrote: > Hello, > > I used sudo wish some expressions in sudoer like: > > foo ALL=NOPASSWD: /bin/bar -a [a-zA-Z][a-zA-Z][a-zA-Z] > > This matches commands like „/bin/bar abc" for example. > > > > I try in doas.conf: > > > permit nopass foo as root cmd /bin/bar args -a [a-

Re: home keys in tmux

2015-12-03 Thread Ted Unangst
Brian Conway wrote: > Spending a little time with 'cat -v', I ended up with the following > non-.tmux.conf approach to making home/end happy in tmux with an > otherwise-unmodified ksh shell: > > bind '^[[1~'=beginning-of-line > bind '^[[4~'=end-of-line > > It doesn't appear to break normal xterm[

Re: home keys in tmux

2015-12-02 Thread Ted Unangst
Giancarlo Razzolini wrote: > Em 02-12-2015 10:42, Ted Unangst escreveu: > > How do i fix this? (Why do i need to fix it?) > Coincidentally, I saw that same question asked today on IRC and it > wasn't even on OpenBSD. The OP changed it by setting TERM to xterm-256 > if I'

Re: home keys in tmux

2015-12-02 Thread Ted Unangst
Ax0n wrote: > Do you have anything in your .tmux.conf? No, don't have one. (i don't want one)

home keys in tmux

2015-12-02 Thread Ted Unangst
When i push home at a ksh prompt in xterm, the cursor goes to the beginning of the line. When i do the same in tmux, nothing happens. TERM in xterm is xterm. TERM in tmux is screen. How do i fix this? (Why do i need to fix it?)

Re: procmap prints ?VNODE?

2015-12-01 Thread Ted Unangst
Stefan Berger wrote: > hi, > > with the command 'procmap pid', I often/always get ?VNODE? instead of > the actual filename. My question is, whether this is on purpose because > on similary BSDs (pmap on NetBSD) , I don't get ?VNODE? but the actual > filename. Any ideas what went wrong? digging

Re: Meaning of '+', '*' in disk: hd0+ hd1+* hd2*

2015-11-30 Thread Ted Unangst
edward wandasiewicz wrote: > If I have the following showing after a probe during biosboot > > disk: hd0+ hd1+* h2* > > What is the meaning of '+', '+*' and '*' next to each disk? + means big disk support. * means no openbsd disklabel. probably not the openbsd disk.

Re: "bioctl -P" is to change passphrase without wiping the encrypted partition's contents. How do you generate a new keydisk without wipingthesame?

2015-11-20 Thread Ted Unangst
Tinker wrote: > Aha. > > *Is* the keydisk the master key, and hence can't be changed? The keydisk is the mask for the master key. It can (in theory) be changed like changing a password. Really, the key disk is just a prehashed password. > > > Very low priority topic: > > What about implementi

Re: "bioctl -P" is to change passphrase without wiping the encrypted partition's contents. How do you generate a new keydisk without wiping thesame?

2015-11-20 Thread Ted Unangst
Tinker wrote: > Ah, and maybe equally importantly, what are the security ramifications > of changing password/keydisk vs. wiping and installing from scratch with > a new password/keydisk? The master key, which the data on disk is encrypted with, is masked with your password. The master key never

Re: No USB 3.0 on 5.8 -current Broadwell

2015-11-20 Thread Ted Unangst
edward wandasiewicz wrote: > On 20 Nov 2015 5:54 p.m., "Martin Pieuchot" wrote: > > > > On 20/11/15(Fri) 17:32, edward wandasiewicz wrote: > > > If I try to plug in various USB 3.0 umass(4) devices into a USB 3.0 or > > > USB 3.1 Type C port, nothing gets registered via dmesg, even if I add > > >

Re: KNFectomy

2015-11-18 Thread Ted Unangst
Adam Wolk wrote: > During the LibreSSL early days there were frequent KNFectomy procedures > executed by jsing@. Is the KNFectomy utensil script available > publicly? ;) man -k knf yields only style(9). indent -ci4 -di1 -nlp $1 That's not what joel used, but it's what i have in ~/bin/knf. It usua

Re: tmux's utf vs my latin2

2015-11-18 Thread Ted Unangst
Jan Stary wrote: > This is current/amd64. > With the recent addition of UTF to tmux, > I apparently need to change something to be able > to read my latin2 email etc as I did before. > > Here is mutt reading an email written in Czech, > (a) inside an xterm (b) inside tmux inside an xterm: > > htt

Re: Linker warnings from libX11

2015-11-17 Thread Ted Unangst
carsten.ku...@arcor.de wrote: > Hello, > > on linking something with libX11 I got the warnings > > /usr/X11R6/lib/libX11.so.16.1: warning: warning: strcpy() is almost always > misused, please use strlcpy() > /usr/X11R6/lib/libX11.so.16.1: warning: warning: strcat() is almost always > misused, p

Re: irq sharing leads to system freeze

2015-11-16 Thread Ted Unangst
Chris Mailer wrote: > Ok, thanks for the straight forward reply:) > Is there any other solution to get lan and wifi working together? Find the bug. :) Interrupt sharing should not be a problem. It indicates a some other problem exists, and that's the one that should be fixed. This is not necessar

Re: Help with diff for Samsung 950 Pro NVMe (unable to map registers)

2015-11-16 Thread Ted Unangst
Josh wrote: > Hi, > > Trying to get it recognized and initialized (Model Code MZ-V5P512BW) > Using 16th November snapshot: > ...snip... (full dmesg below) > ppb2 at pci0 dev 28 function 4 "Intel 9 Series PCIE" rev 0xe3: msi > pci3 at ppb2 bus 3 > vendor "Samsung", unknown product 0xa802 (class mas

Re: state of SSD by OpenBSD / relatime

2015-11-13 Thread Ted Unangst
Chris Cappuccio wrote: > Nick Holland [n...@holland-consulting.net] wrote: > > > > (noatime is a huge performance gain. atime is a feature looking for a > > need, I suspect). > > > > Someone had a relatime patch. Where did that go???!! I think that's the default now, thanks to guenther.

Re: Connection refused *.openbsd.org

2015-11-06 Thread Ted Unangst
Benny Lofgren wrote: > FWIW, I'm seeing the same bad ip checksum errors on my development > computer running -current (as of sometime last week). This is regardless > of what site I try to connect to (well, I tried two, www.openbsd.org and > one not running OpenBSD). > > On a stock 5.7 server (hav

Re: Ethernet not working

2015-11-05 Thread Ted Unangst
Jay Patel wrote: > do we have a compatibility list somewhere ? or can we find via mandocs page? man alc says: The alc driver provides support for Ethernet interfaces based on the Atheros AR813x/AR815x Ethernet chipset. I think we gave up trying to document every variation of every chip

Re: Missing libcrypto file in -current

2015-11-02 Thread Ted Unangst
Bryan Vyhmeister wrote: > On Mon, Nov 2, 2015, at 06:10 PM, Dutch Ingraham wrote: > > Hi all: > > > > I just installed 5.8 on the x86_64 arch. Immediately after installing, > > I upgraded to -current. Upon rebooting into the new -current, a number > > of errors appeared in the dmesg after the net

Re: GPT vs. MBR

2015-10-29 Thread Ted Unangst
Артур Истомин wrote: > I'm now in a upgrading process to OpenBSD 5.8 (backup etc.). I have laptop > with EFI(UEFI) capability and 500GB HDD. There are any benefits from GPT > with my configuration to migrate from MBR to GPT (I'm also using full disk > oencryption)? 5.8 doesn't support GPT/UEFI,

Re: Source tree

2015-10-29 Thread Ted Unangst
OlivierDebré wrote: > Hello. > > I'm in the process of upgrading our firewal from 5.7 to 5.8. > I'm about to apply the erratas (even started to do so with 001 and 002, but > now I'm > doubting, given some weird error messages in the 'make' step for errata > 001. I'll take care of that when I'll ha

Re: Killing Rebound(8) in current hard locks system.

2015-10-28 Thread Ted Unangst
Gerald Hanuer wrote: > Hello misc@, > > Killing Rebound(8) in current hard locks system. Thanks. We've found the cause of the bug. Now we're trying to find the bug. :)

Re: iPhone?

2015-10-25 Thread Ted Unangst
Maximilian Pichler wrote: > Hi, > > I just connected an iPhone to my OpenBSD box and it doesn't seem > possible to access its memory. Is there any way to make this work? In > fact, is there anything at all that can be done with OpenBSD and an > iPhone...? probably not. the decision not to attach

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-23 Thread Ted Unangst
Miod Vallat wrote: > > > Might be a stupid question, but I haven't found an answer to it yet > > > - how does one update to a new snapshot/kernel on an octeon system? > > > > boot bsd.rd and select upgrade in the installer. (i hope.) > > > I'm afraid this is not as simple as this, yet. You will a

Re: [mot] serious about clang/llvm?

2015-10-23 Thread Ted Unangst
Raul Miller wrote: > On Fri, Oct 23, 2015 at 7:58 AM, Daniel Bolgheroni > wrote: > > On Fri, Oct 23, 2015 at 04:43:50AM -0400, Mayuresh Kathe wrote: > >> i had heard rumours about the openbsd core team having a part of openbsd > >> built using 'pcc', is it true? if yes, did that effort not produce

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-20 Thread Ted Unangst
Kim Zeitler wrote: > Hello Sebastien, hello Jonathan > > @Sebastien thank you for your valuable hints and advice, I did learn > quite a bit from it. The machine has been reinstalled to the latest > snapshot, as it is needed. > > On 10/20/15 12:30, Jonathan Gray wrote: > > There is no OpenBSD boo

Re: Remove removed utilities?

2015-10-19 Thread Ted Unangst
Nick Holland wrote: > Things that are out-right replaced (i.e., sudo) should be actively > deleted. Even if it still works after upgrade, some day it is going to > break, and you should be pushed to use the new application (or the > package of the old application). Things like tip? what's the po

Re: Linux crypt(3)

2015-10-17 Thread Ted Unangst
Adam Wysocki wrote: > As OpenBSD crypt() function differs from the one in Linux libc and returns > NULL for setting "Mb", before I start porting it from libc, maybe you have > an easier solution? Maybe there is a library I can use (different than > whole bloated Linux libc)? run john the ripper

Re: Boot on a device with only one video mode 1280 x 850 x 16

2015-10-09 Thread Ted Unangst
edward wandasiewicz wrote: > I believe the reason for just the one resolution, is at present, the > SeaVGABIOS does not have support for mode switching on Intel graphics > adapters. So even if we had more than one resolution available, the > SeaVGABIOS can't switch to it. In short, this is an inco

Re: "dd if=/dev/srandom of=/dev/wd0e bs=1024 count=1" WIPES my wd0 disklabel. Is this intended, bug, how come, how workaround ??? Incl reproduction script+console output+dmesg

2015-10-06 Thread Ted Unangst
Mikael wrote: > 2015-10-07 0:58 GMT+08:00 Ted Unangst : > > > > the disklabel is the second sector of the openbsd part of the disk. > > > > *3: A6 0 1 2 - 243200 254 63 [ 64: 3907024001 ] OpenBSD > > > > so, if you overwrite sector 65, you

Re: "dd if=/dev/srandom of=/dev/wd0e bs=1024 count=1" WIPES my wd0 disklabel. Is this intended, bug, how come, how workaround ??? Incl reproduction script+console output+dmesg

2015-10-06 Thread Ted Unangst
Mikael wrote: > 2015-10-07 0:45 GMT+08:00 Ted Unangst : > > > Mikael wrote: > > > The script below includes extra considerations to see through any kernel > > > caching of the disklabel, by rebooting between every relevant step. > > > > > > "d

Re: "dd if=/dev/srandom of=/dev/wd0e bs=1024 count=1" WIPES my wd0 disklabel. Is this intended, bug, how come, how workaround ??? Incl reproduction script+console output+dmesg

2015-10-06 Thread Ted Unangst
Mikael wrote: > The script below includes extra considerations to see through any kernel > caching of the disklabel, by rebooting between every relevant step. > > "dd if=/dev/srandom of=/dev/rwd0e bs=1024 count=1" does also wipe the > disklabel. > > "dd if=/dev/srandom of=/dev/wd0a bs=1024 count=

Re: disklabel fs types, where can I find the whole list of supported types?

2015-10-05 Thread Ted Unangst
Benny Lofgren wrote: > Personally, I think it would be a good thing to bring back slices to the > vocabulary. That would emphasize the distinction between physical disk > partitions as they appear in the PC-centric hardware world and logical > partitions/slices that are a subdivision *within* a dis

Re: Is OpenSMTPD worthy of OpenBSD inclusion?

2015-10-05 Thread Ted Unangst
Jason A. Donenfeld wrote: > But I think it's time we take a step back and reassess the situation. > There are some critical questions that need to be answered. What > accounts for the high proportion of security vulnerabilities in a > project renowned for its brilliant developers and stringent revi

Re: Include "wsconsctl" on installer CD so keyboard repeat can be disabled = make VNC KVM install smooth on laggy connection?

2015-10-05 Thread Ted Unangst
Mikael wrote: > VNC KVM install means some keypresses will be interpreted as seconds-long, > ordinarily leading to multiple unintended "enter" or character key presses > which easily seriously breaks things, when the connection is not perfect, > which it many times is not. > > I believe there is n

Re: disklabel fs types, where can I find the whole list of supported types?

2015-10-05 Thread Ted Unangst
Jason McIntyre wrote: > On Mon, Oct 05, 2015 at 11:14:09AM +0200, Ingo Schwarze wrote: > > > > > On Mon, Oct 5, 2015, at 03:53 AM, Mikael wrote: > > > > >> which FS types are available in the disklabel tool? > > > > The list is in the header file /usr/include/sys/disklabel.h, > > static char *

Re: Changing directory for fetching source code

2015-10-03 Thread Ted Unangst
Lampshade wrote: > Hi, > I would like sometimes experiment with some options/custom config in kernel. > On the other hand that is not supported by OpenBSD. Suppose I need to > reproduce > problem with original kernel. I think good solution for me would be to have > two directories for OpenBSD's

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread Ted Unangst
Rob wrote: > Search for a utility on the App Store, by Apple called: Apple Configurator. does it run on openbsd..?

Re: 5.8 current: httpd error after upgrading.

2015-09-29 Thread Ted Unangst
Abu Aufa wrote: > Hi, > > I upgraded my system to 28th September's snapshot. Right after upgrade, I > saw httpd gave error in dmesg. Here's my dmesg: > I disabled the fastcgi part to test, but still the httpd dies on start > (manually and/or on boot). Httpd was ok before upgrading. Is there any

Re: OpenBSD sendfile

2015-09-29 Thread Ted Unangst
Bogdan Andu wrote: > Hi, > I have a piece o software to install that requires > sendfile functionality . > I installed hs-sendfile from ports, which should providesendfile, but now > sendfile library or binary is present: > I run the command , first:sudo /usr/local/lib/ghc/sendfile-0.7.9/register.s

Re: X security claims in FAQ considering Xorg setuid root binary (was: Slightly OT, .. 5.5 Nagios)

2015-09-29 Thread Ted Unangst
Tim Kuijsten wrote: > Op 28-09-15 om 23:29 schreef Philip Guenther: > > On Mon, Sep 28, 2015 at 1:31 PM, L. V. Lammert wrote: > > ... > >> X has never been installed on this box, .. why now? > > > > http://www.openbsd.org/faq/faq4.html#FilesNeededX > > > > From the FAQ: > "By itself, installing

Re: Xorg very slow startup (X1 Carbon, Intel 5500) -current

2015-09-28 Thread Ted Unangst
Conor O'Reilly wrote: > I am using a 2015 Thinkpad X1 Carbon and am having issues starting X. I > first came across this issue with 5.7 and it persists. I was hoping with > the addition of the Broadwell drivers that it would be corrected however > that is not the case. > > I installed -current sna

Re: powerof2()

2015-09-25 Thread Ted Unangst
Ingo Schwarze wrote: > Mark Kettenis wrote on Fri, Sep 25, 2015 at 02:27:52PM -0600: > > > CVSROOT:/cvs > > Module name:src > > Changes by: kette...@cvs.openbsd.org2015/09/25 14:27:52 > > > > Modified files: > > sys/dev/pci/drm: drm_linux.h > > > > Log message: > > Appar

Re: Adding zombies to a pf table?

2015-09-23 Thread Ted Unangst
Craig Skinner wrote: > Hello, > > Zombies are often attacking ports which don't have services running, > such as telnet (most popular indeed), mysql, 3551, 8080, 13272, etc. > > With a default pf block drop in on $ext_if, how can those source ips be > added to a table? Which all can be dropp

Re: rookie questions about flavors

2015-09-23 Thread Ted Unangst
Josh Grosse wrote: > On 2015-09-23 09:41, Peter N. M. Hansteen wrote: > > On Wed, Sep 23, 2015 at 02:55:21PM +0200, Thuban wrote: > > >> Is it possible to upgrade from 5.7 yo 5.8 using this flag : > >> cvs -d$CVSROOT checkout -rOPENBSD_5_8 -P src > > > > In almost all cases, a binary upgrade

Re: doas as root with /sbin/shutdown + related conf syntax query

2015-09-19 Thread Ted Unangst
Toby Slight wrote: > Hi there, > > I just started getting to know doas a bit, and am already stumped (pretty > typical for me..). > > I'm trying to let my user shutdown, reboot and suspend the computer without > entering a password. This is my doas.conf: > > permit keepenv { ENV PS1 SSH_AUTH_SOC

Re: top(1), ps(1): per-process CPU time accounting wrong?

2015-09-07 Thread Ted Unangst
Timo Buhrmester wrote: > On Sun, Sep 06, 2015 at 06:34:39PM -0400, Michael McConville wrote: > > When building software, you usually have a lot of compiler processes > > coming and going. The CPU utilization stats (in the header) are more > > averaged than the process list stats. So, when building

Re: 2^64 - 39 ...

2015-09-07 Thread Ted Unangst
Michael Warmuth-Uhl wrote: > Hello, > > On 2015-09-07, Otto Moerbeek wrote: > > The game is to fix the bugs > > Below is my attempt to play this game. > > It seems to fix the issues on amd64, but I'm not sure if the accuracy of > long double and sqrtl is guaranteed to be enough in general. usin

Re: dmesg Intel NUC5CPYH

2015-09-04 Thread Ted Unangst
Tim Kuijsten wrote: > tl;dr no network, dmesg for 5.7 release, 5.8 current mp and sp included. > > > With 5.7 release a dhcp response is received, but no other addresses > than the one that is assigned to the machine can be pinged (the dhcp > server is in the arp cache, but no ping reply is rec

Re: pf vs mp

2015-09-02 Thread Ted Unangst
Quartz wrote: > > On a more serious note, I don't see how one can actually buy faster > > single-core performance for this purpose. If the question was more > > detailed, describing specific models of machines, we'd be able to > > show it makes no financial sense. The cheapest stuff is good enoug

Re: doas(1) and $PATH inheritance...

2015-09-01 Thread Ted Unangst
Adam Jeanguenat wrote: > tedu wrote: > > doas allows PATH to be inherited, but resets it for itself to a > > limited set. this was so that e.g., "permit :wheel cmd ls" can't > > be tricked by creating a symlink ls -> /bin/sh. however, if there > > are no restrictions on the command, then the restri

Re: doas(1) and $PATH inheritance...

2015-08-31 Thread Ted Unangst
Adam Jeanguenat wrote: > I'm not sure where I'm going wrong here, but I've been giving doas(1) > a whirl and ran into something that's left be a bit puzzled. > > I have some scripts in ~/bin, and my user account has PATH set > as desired. I can run things out of that dir as expected without > invo

Re: Realtek RTL8111F

2015-08-24 Thread Ted Unangst
dominik...@openmailbox.org wrote: > Hi everyone, > I have some trouble figuring out if the Realtek RTL8111F network > controller is supported under OpenBSD 5.7. The re(4) man page does not > precisely mentions the 8111F version. 5.7 driver has: { RL_HWREV_8168F, "RTL8168F/8111F" },

Re: Ubiquiti EdgeRouter Lite

2015-08-18 Thread Ted Unangst
Jona Joachim wrote: > Thank you very much for the write-up! I'm looking into buying hardware > to build a small OpenBSD home router and this looks interesting. > You say that the machine will not be able to serve as an IPSEC gateway. > Is that when you consider Gigabit ethernet or do you think that

Re: Ubiquiti EdgeRouter Lite

2015-08-18 Thread Ted Unangst
Predrag Punosevac wrote: > Dear All, > > I am contemplating buying a new machine which will act as a router/DNS > caching server for my home network. Is anybody currently running OpenBSD > on the Ubiquiti Networks EdgeRouter LITE in that capacity? I saw that in > June 2015 USB support was added wh

Re: Ubiquiti EdgeRouter Lite

2015-08-16 Thread Ted Unangst
Predrag Punosevac wrote: > Dear All, > > I am contemplating buying a new machine which will act as a router/DNS > caching server for my home network. Is anybody currently running OpenBSD > on the Ubiquiti Networks EdgeRouter LITE in that capacity? I saw that in > June 2015 USB support was added wh

doas ticket workaround

2015-08-15 Thread Ted Unangst
for those of you missing sudo's ability to remember your password for repeated invocations, a sneaky workaround... create a new user _doas. make a doas.conf like the following. permit :wheel as _doas cmd ksh permit nopass _doas If you need to run multiple commands, start a shell as this new _doa

Re: Repartitioning

2015-08-07 Thread Ted Unangst
Quartz wrote: > > The general answer to your question, however, is the "growfs" command. > > growfs will let you expand an off-line file system with additional space > > immediately adjoining the end of the partition. > > OK that's the general answer providing we replace the disk with a > big

Re: CWM (calmwm): A cwm-new fork

2015-08-01 Thread Ted Unangst
David Chanters wrote: > it looks to be the same as cwm but adding some new features. > > are the openbsd devs interested in adding these changes to cwm? pick a feature, explain why it's good, submit a patch, see what happens?

Re: Maybe OT: OpenSSH connection failure unless verbose

2015-08-01 Thread Ted Unangst
Quartz wrote: > > ktrace and tcpdump. > > I should have mentioned that the laptop is using OpenSSH but it's OSX > not OpenBSD. ktrace was replaced with I think dtrace on OSX a while ago, > so I'll have to look into how to get that set up. > > As for tcpdump, I'm not sure what I'd be looking for

Re: Maybe OT: OpenSSH connection failure unless verbose

2015-08-01 Thread Ted Unangst
Quartz wrote: > Searching the web for info is worthless because the first thing > everybody tells you to do when debugging a connection issue is enable > verbose, which obviously doesn't help me here. Likewise, I can't even > confirm if anyone else has even experienced this sort of failure befor

Re: Maintaining CAs not in cert.pem

2015-07-30 Thread Ted Unangst
Stuart Henderson wrote: > On 2015-07-30, Ted Unangst wrote: > > Michael McConville wrote: > >> > Another meat could be, why you're using self-signed certificates? > >> > Given the plethora of options for getting free (valid) certificates. > >> >

Re: Maintaining CAs not in cert.pem

2015-07-30 Thread Ted Unangst
Michael McConville wrote: > > Another meat could be, why you're using self-signed certificates? > > Given the plethora of options for getting free (valid) certificates. > > He mentioned in his original email that it's a requirement where he > works. That's common, from what I hear, although probab

Re: Alleged OpenSSH bug

2015-07-23 Thread Ted Unangst
Giancarlo Razzolini wrote: > > The original post wondered if this was some mis-timed April Fool's > > joke. My reply was just to say that it's a real issue, although > > many people won't see this issue due to the way sshd is configured > > on their systems. > > You were condescending, admit it.

Re: W^X Wikipedia Executable space protection page lacking

2015-07-22 Thread Ted Unangst
Kevin Chadwick wrote: > The following wikipedia page hints to me that it may have been edited by > someone with an agenda or atleast under stated. I was going to rewrite > the OpenBSD section or undo the edit from 2008 by Guy Harris but worry > that I may be over zealous in the other direction. Any

Re: USB CD/DVD burner

2015-07-20 Thread Ted Unangst
Austin Gilbert wrote: > I'm looking for recommendations for external USB DVD burners that work with > OpenBSD 5.7 (amd64). > > I did a bit of searching, the Amazon page for Samsung's TSST Ultra-slim > optical drive SE-208GB/RSLF pulled up. Apparently, there was a comment there > at one time ref

Re: Blob-free OpenBSD kernel needed

2015-06-13 Thread Ted Unangst
Артур Истомин wrote: > Your rant is cogent. But if so, why OpenBSD does not supply > microcode updates from Intel/AMD? There are tons of security fixes. Are they free? Send a patch.

ifconfig bridge and trunk

2015-05-28 Thread Ted Unangst
Why is the ifconfig keyword to add an interface to a bridge "add" and the keyword to add an interface to a trunk "trunkport"?

Re: swap on encrypted softraid, performance penalty?

2015-05-19 Thread Ted Unangst
dan mclaughlin wrote: > in the end i found it easier to just leave it all in the softraid for other > reasons in addition to that issue. as to swap encryption, i disabled it. no > need to encrypt twice. > to the contrary, uvm swap encrypt does a better job of expiring keys and making old data unr

Re: timer_create for openbsd. Any equivalent ?

2015-04-27 Thread Ted Unangst
syphax azmole wrote: > Hello list, > > I have a small "C" program using standard POSIX timer_create(2), > timer_delete(2) and SIGEV_SIGNAL. > It seems that OpenBSD doesn't have such API. (and doesn't have librt). > I'm curious: why are they not implemented ? For security reason ? they are > not ea

Re: Whatever happened to reop?

2015-04-27 Thread Ted Unangst
Christian Weisgerber wrote: > A year ago, tedu@ published reop, which "does everything you’d > expect a PGP program to do". > http://www.tedunangst.com/flak/post/reop > > There's GitHub site that's still active and there is ports/security/reop, > maintained by jturner@, but generally it has been a

Re: weak symbols

2015-04-08 Thread Ted Unangst
Martijn van Duren wrote: > Could you inform me on the preferred way for making a library thread safe? > - always linking in lpthread into the library (which causes some extra > bloat in the loading of the extra library). > - making the required symbols available via weak symbols, as per my > orig

Re: 5.7-stable i386: crunchgen-produced programs segfault

2015-04-07 Thread Ted Unangst
Brian Conway wrote: > I get similar results when swapping in ls, pax, and so on. However, > the make release process generates a working instbin binary as used by > bsd.rd, so it's working elsewhere and it's not clear if there's a user > step I'm missing. There have been changes to the -fPIE defau

Re: jwm ; speedy window manager

2015-04-06 Thread Ted Unangst
L.R. D.S. wrote: > I think developers could do with WM the same done with lynx, remove and put > on ports. > I don't think someone need all the 9 WM on base system (fvwm, cwm, wm2, twm, > ctwm, flwm, mwm, openbox and tvtwm). Huh? carbolite:~> wm2 ksh: wm2: not found carbolite:~> ctwm ksh: ctwm:

Re: Panic: malloc: out of space in kmem_map

2015-04-04 Thread Ted Unangst
is probably going to be hard. But if you use sendbug, it will include the output of acpidump, which may be helpful. > > On Sat, Apr 4, 2015 at 6:49 PM, Ted Unangst wrote: > > Evgeniy Sudyr wrote: > >> ACPI175742 18750K 18796K 78644K 5721140 0 > > > &g

Re: Panic: malloc: out of space in kmem_map

2015-04-04 Thread Ted Unangst
Evgeniy Sudyr wrote: > ACPI175742 18750K 18796K 78644K 5721140 0 This looks rather high. I suspect a leak in the acpi code.

Re: The best way to renice cron on boot?

2015-03-22 Thread Ted Unangst
Kevin Chadwick wrote: > So I could renice the processes cron runs but decided to renice the > whole of cron instead/as well. > > I therefore added a renice line to rc.local but rc.local runs before > cron. What is the best way to do this... add a line to edit the daemon > line in /etc/rc.d/cron as

Re: iwm0: fatal firmware error on -current

2015-03-22 Thread Ted Unangst
Jonathan Gray wrote: > On Sun, Mar 22, 2015 at 09:16:08AM +0100, Stefan Sperling wrote: > > > > If the firmare image is not present at boot, no interface is created. > > After installing the firmware with fw_update (which succeeds because > > it looks for "iwm" in dmesg not ifconfig) there is no w

Re: Can't trunk wireless adapter on ThinkPad x240

2015-03-21 Thread Ted Unangst
Stefan Sperling wrote: > On Sat, Mar 21, 2015 at 11:19:18PM +0100, Aram Hăvărneanu wrote: > > I have a ThinkPad x240 (Intel 7620 wireless) running -current (to get > > the new iwm(4) driver). Wireless works fine, but when I try to use a > > trunk(4) device, in the way it's described in the faq[1],

Re: xkci recommendations

2015-03-21 Thread Ted Unangst
Ed Ahlsen-Girard wrote: > On Sat, 21 Mar 2015 21:48:06 +0100 > ropers wrote: > > > On Sat, Mar 21, 2015 at 08:47:27AM -0500, Ed Ahlsen-Girard wrote: > > > > > > I got a card to exploit the xkci support, > > > > > > > > > On 21 March 2015 at 21:00, Bryan Steele wrote: > > > You didn't send a d

Re: Libre/OpenSSL Patches in Latest amd64 Snapshot?

2015-03-19 Thread Ted Unangst
Scott Vanderbilt wrote: > On 3/19/2015 9:36 AM, Bryan Steele wrote: > > On Thu, Mar 19, 2015 at 08:53:57AM -0700, Scott Vanderbilt wrote: > >> Given that the patches in tedu's announcement to the tech@ list are all > >> time-stamped circa 18 Mar 2015 06:01:34 -, may I safely assume they are > >

Re: running multiple simultaneous X sessions as different users

2015-03-16 Thread Ted Unangst
Jean-Philippe Ouellet wrote: > On Sun, Mar 15, 2015 at 07:12:23PM -0400, Ted Unangst wrote: > > luke...@onemodel.org wrote: > > > The goal: I'd like to run multiple simultaneous X sessions and switch > > > among them with Ctrl-Alt-F8, Ctrl-Alt-F9, etc, ea

Re: running multiple simultaneous X sessions as different users

2015-03-15 Thread Ted Unangst
luke...@onemodel.org wrote: > I'm new to desktop OpenBSD (longtime debian user) and have read in > FAQs, all relevant man pages I could find, and searched the internet > and mailing list archives, and am not sure what I'm doing wrong or have > missed. > > The goal: I'd like to run multiple simult

Re: Fwd: Re: I found a sort bug! - How to sort big files?

2015-03-15 Thread Ted Unangst
sort problem wrote: > So the default "sort" command is a big pile of shit when it comes to files > bigger then 60 MByte? .. lol > > I can send the ~600 MByte txt files compressed if needed... > > I was suprised... sort is a very old command.. I think you have discovered the answer. :(

Re: httpd presenting the wrong TLS certificate

2015-03-14 Thread Ted Unangst
Hugo Osvaldo Barrera wrote: > Hi, > > I've only just recently started moving from nginx to httpd (I *loved* the > config syntax by the way!). > > I'm having an issue with httpd presenting the wrong TLS certificate for a > client - it seems to be defaulting always to the first entry, ignoring all

Re: 5.6 errata patch 006 problem

2015-03-12 Thread Ted Unangst
Marko Cupać wrote: > Hi, > > I have applied errata patch 006 related to relayd to 5.6 source code, > but it does not build. Any advices? > > # make > cc -o relayd parse.o agentx.o ca.o carp.o check_icmp.o check_script.o > check_tcp.o config.o control.o hce.o log.o name2id.o pfe.o pfe_filter.o

Re: bypass xlock/slock

2015-03-09 Thread Ted Unangst
Alexandre Ratchov wrote: > On Mon, Mar 09, 2015 at 10:25:28AM +0100, Alex Greif wrote: > > Hi, > > > > I am currently trying to find a solution to lock my desktop system (openbsd > > 5.6, amd64), but with the following steps I can always bypass xlock or > > slock: > > > > - run X session with sta

Re: Patch 009 fails on BASE-5.6 amd64

2015-03-07 Thread Ted Unangst
Andrew Lester wrote: > Hi All, > > I’ve just performed a fresh install of OpenBSD 5.6-BASE (not an upgrade) > using the purchased disc set, and have been applying the patches in order, > and all have been successful. However, the httpd patch (#009) has failed, and > I ended up with several “rej

Re: SlowCGI, on 5.5

2015-03-06 Thread Ted Unangst
Peter Fraser wrote: > The web designer had web pages that he was trying to convert from Apache to > nginx. > Those pages were calling Perl programs from nginx using slowcgi. > > I was the one that was configuring nginx. > It would have made my life easier if a couple of points were added to the

Re: lynx is gone?

2015-03-05 Thread Ted Unangst
Paolo Aglialoro wrote: > So it looks like that, till some months ago, everybody here was on the > wrong OS and risking their lives, as lynx was in base! But I have never It's not like this wasn't discussed previously. At length. http://marc.info/?t=14050482952&r=1&w=2

Re: lynx is gone?

2015-03-04 Thread Ted Unangst
L.R. D.S. wrote: > So, remove Xombrero from base too, he segfault everytime Done!

Re: Does LibreSSL support RSA export-grade keys? - FREAK Attack

2015-03-04 Thread Ted Unangst
someone wrote: > Does LibreSSL supports RSA export-grade keys? - FREAK Attack Export ciphers were deleted from LibreSSL last summer.

Re: uxterm is showing UTF-8 chars with errors?

2015-03-03 Thread Ted Unangst
Stefan Sperling wrote: > On Tue, Mar 03, 2015 at 04:55:01PM +0100, Thisis theone wrote: > > $ touch "árvíztűrő tükörfúrógép" > > $ ls -lah > > -rw--- 1 user user 0B Feb 8 18:20 ??rv??zt??r?? > > t??k??rf??r??g??p > > $ > > > > I am using uxterm on OpenBSD 5.6. How can my uxterm show t

Re: uxterm is showing UTF-8 chars with errors?

2015-03-03 Thread Ted Unangst
Thisis theone wrote: > $ touch "árvíztűrő tükörfúrógép" > $ ls -lah > -rw--- 1 user user 0B Feb 8 18:20 ??rv??zt??r?? t??k??rf??r??g??p > $ > > I am using uxterm on OpenBSD 5.6. How can my uxterm show these accents in > this way? Why doesn't it displays it as it is? ls doesn't know ab

Re: How to view man pages with restricted ksh?

2015-03-03 Thread Ted Unangst
Craig Skinner wrote: > Hi folks, > > > $ man rksh > sh: /tmp/man.v3NbpQf33a: restricted > sh: /usr/bin/more: restricted I don't know. Works for me. carbolite:~> rksh carbolite:~> man rksh | wc 2971 20398 166126 carbolite:~> cd / rksh: cd: restricted shell - can't cd

<    1   2   3   4   5   6   7   8   9   10   >