Re: extracting new login.conf from /usr/src/etc in -current

2005-08-17 Thread Todd C. Miller
Is it really so difficult to run mklogin.conf? - todd

Re: A question to lib/libc/gen/daemon.c

2005-08-21 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Alexander Farber (alexander.farber): In the file /usr/src/lib/libc/gen/daemon.c if (!noclose (fd = open(_PATH_DEVNULL, O_RDWR, 0)) != -1) { (void)dup2(fd, STDIN_FILENO); (void)dup2(fd, STDOUT_FILENO);

Re: isc_log_open 'named.run' failed

2005-08-29 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Todd C. Miller (Todd.Miller): If you know the exact pathnames named is trying to use you may be able to just create them in the right place, owned by user named. If all you need to write is the dump file you should be able to add something like

cheap mini-pci ral(4) cards

2005-08-30 Thread Todd C. Miller
The MSI MP54G4 (aka MSI MS-6833) seems to be readily available in the US now. I just picked one up from www.thenerds.net but a cheaper price can be found at newegg.com. It seems to work fine in my Sony SRX77. The trick is to search for both the model name (MP54G4) and the part number (MS-6833)

Re: ccdconfig not giving me all available space?

2005-09-02 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Erik Sabowski (sabowski): i thought that leaving 63 sectors free at the start of each disk would be enough room, but apparently not. when i bumped it up to an offset of 3120 sectors, it worked perfectly. You need to leave at least 8192 bytes

Re: UKC and VGA configuration

2005-10-31 Thread Todd C. Miller
Go into your bios config menu and look for an option to expand or stretch the display to match the given resolution. The problem is that flat panels are fixed frequency and so to do VGA text mode you either have to tell the BIOS to scale things or you end up with a smaller display using the

FYI: new mailing list anti-spam measures

2005-11-03 Thread Todd C. Miller
The mailing list server is now using several blacklists from the SORBS project (http://www.sorbs.net) to prevent spam. So far it is using the SORBS zombie, spam, web form and dialup blacklists. This does mean that people sending mail from a dynamic IP address (cable modem, dynamic DSL or dialup)

Re: FYI: new mailing list anti-spam measures

2005-11-06 Thread Todd C. Miller
After talking to some folks who would be negatively impacted by this I've decided to drop the dial-ups blacklist and hope that greylisting catches the bulk of the spam (which for most compromised windows hosts is the case). - todd

Re: sudo/env_keep/pkg_add

2007-08-01 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Stuart Henderson (stu): Does anyone feel it would be useful to add PKG_PATH to the default env_keep for sudo? Otherwise there are going to be an awful lot of pkg_add is broken posts... Since that is OpenBSD-specific I don't think it makes sense to

Re: looking for confirmed working dvd record on amd64

2007-08-02 Thread Todd C. Miller
I've had good luck with the Sony NEC Optiarc Model 7170A-0B. It's cheap too ($30 from newegg). - todd

Re: list of all files in the filesystem

2007-09-11 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Tom Bombadil (grlists): I guess this is a stupid question... But is there any way to get a list of all files in the filesystem without using 'find'? For a big drive with millions of small files, running find is just too slow. If all you want

Re: DocBook and OBSD man pages

2005-05-06 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Gustavo Rios (rios.gustavo): i wonder if there is a docbook template for those that would like to write OpenBSD manpages. I know about there is a template in /usr/share/somewhere but it's not docbook. The OpenBSD man pages are writtern in mdoc(7),

Re: Bind 9 - nsc or similar tool?

2005-05-18 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Jack J. Woehr (jax): Is there anything on OBSD like nsc on Linux which generates Bind 9 config files? The default named.conf that ships with OpenBSD (aka named-simple.conf) is a good starting point. You can then just plug in your zones. - todd

Re: Dell HW?

2005-05-20 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake chefren (chefren): Hm, I cannot get the audio working on the SC400's, I believe something is wrong with the mixer. Tried 3.6 and all kind of patches. Dell seems to hook up the ac97 stuff differently than most others. On the Dells I've seen the

Re: Getting Yesterday's Date (Repost due to error)

2005-05-30 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Timothy A. Napthali (timothya): How can I do this in OpenBSD? I've mucked about with date -r $(expr $(date +%d) - 86400) but I can't get it to work properly. In sh or ksh you could do: date -r $(( `date +%s` - 86400 )) +%Y%m%d - todd

Re: perl crashes

2005-05-31 Thread Todd C. Miller
Same on current. My guess is perl has a bug that is being exposed by the mmap malloc with address randomization. - todd

Re: Compiling Sendmail

2005-06-06 Thread Todd C. Miller
Edit devtools/OS/OpenBSD and remove -DNETISO from confENVDEF - todd

Re: perl crashes

2005-06-06 Thread Todd C. Miller
As I suspected this was caused by the change to random addresses returned by malloc. In this specific case, PL_oldbufptr is NULL and, depending on the addresses of the other buf pointers, the while() loop that trims spaces can go off into la la land. The fix is to simply check that the buf ptr

Re: How do I restart sendmail?

2005-06-08 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Timothy Horie (tak): I changed some options in the .mc file and rebuilt the /etc/mail/sendmail.cf file. How do I restart sendmail? This is what I do (as root): kill -HUP `sed q /var/run/sendmail.pid` Sending SIGHUP to sendmail causes it to

Re: problem with www.openbsd.org/spamd/SBL.cidr.gz

2005-06-12 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Tristan Delsol (tdelsol): OK. Do I need to change the URL in the spamd.conf or will you use another sou rce pretty soon? Bob is back from camping so this is fixed now ;-) - todd

Re: sudo vulnerability

2005-06-20 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Steffen Kluge (kluge): Is it recommendable to fetch and install 1.6.8p9 straight away? No, you should grab the OpenBSD patch, as announced on the security-announce list. ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch

Re: sudo vulnerability

2005-06-20 Thread Todd C. Miller
No, you should grab the OpenBSD patch, as announced on the security-announce list. ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/003_sudo.patch ftp.openbsd.org is having problems at the moment but the patch

Re: spamd greylisting and server pools

2005-06-21 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Heinrich Rebehn (rebehn): Would it be possible to change this behaviour so that the whitelisting is done as soon as the same sender/receiver pair is seen again, ignoring the ip address? This could speed up things a bit. This would allow in mail

Re: can't find /etc/crontab ?

2005-06-25 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Neta (netasys): Hello All, I have fresh install machine openbsd 3.7, i couldn't locate any /etc/crontab ? is this crontab disable by default? how i can enable it? /etc/crontab is not used by default, it predates the availability of per-user

Re: perl -MCPAN checksum mismatch on anything

2005-06-26 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake WR (gen2): Checksum mismatch for distribution file. Please investigate. I'd recommend removing /root/.cpan/sources/authors/id/R/RE/REATMON/Net-Jabber-2.0.tar.gz. Its MD5 checksum is incorrect. Maybe you have configured your 'urllist' with a bad

Re: Is it possible to run named not in chroot?

2005-06-28 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Rene Rivera (grafik.list): Because my configuration files, named.conf and all the zone files, must be at /export/config/named/... And there's no way, other than removing the chroot AFAIK, to get named to read the configuration from where I have

Re: OpenBSD-specific Perl problem

2005-06-30 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Dan Brosemer (odin): I've been trying to make a forking daemon in Perl with little success. The whole daemon terminates as soon as the first child terminates. This exact same code performs as I'd expect (ie perfectly) on other platforms (even

Re: OpenBSD-specific Perl problem

2005-06-30 Thread Todd C. Miller
I bet accept() is getting EINTR. Try checking for that and restarting the loop in that case. Here's the relevant bits from perlipc(1) Restartable system calls On systems that supported it, older versions of Perl used the SA_RESTART flag when installing %SIG han-

Re: perl -MCPAN checksum mismatch on anything

2005-06-30 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake WR (gen2): This does not appear to be true -- see my posting from 6/18/05 using only wget (lynx disabled in the mcpan conf), I get the same error Then I have no idea what the problem is. Cpan works for me out of the box and uses Net::FTP (not

Re: ATRUN Job / Cron file

2005-06-30 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Dave Beckstrom (dbeck): I've been using a cron file (shown below) for some years and it references the atrun command. It appears that the atrun command no longer exists as the man pages no longer reference it. Is there a replacement for the

Re: sleep patterns...

2005-07-04 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake unixadmin99 (unixadmin99): Accidently emptied half the contents of src.tar.gz into /usr/bin while undergoing an install under the intoxication of sleep. Be glad you didn't do this in /usr (as I have done). Things get downright unhappy when

Re: No DMA? What's going on here?

2005-07-09 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Dave Anderson (dave): If I'm reading it correctly, this bit of the dmesg says that my hard drive is not using DMA -- and so is running very inefficiently: The IDE controller on that machine does not have working PCI-based IDE so you are stuck with

Re: 005_libz.patch - fails to change directory

2005-07-22 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Uwe Dippel (udippel): Strange, we had the same thing with the last patch. Looks like the main ftp mirror is not updating. I've left a message but it may not get fixed for a while... - todd

Re: bugtracker is getting spammed

2005-11-22 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Alexander Hall (alexander): I just noticed a lot of cannot mount cf/sd card with usb adapter and could cause panic reports on the bugtracker. Some misconfigured mailserver possibly? Just notifying since It's been going on for a while. Is

Re: Frequency of 3.8 Malloc Options Check

2005-11-29 Thread Todd C. Miller
Note that you can also set the malloc options from within a program you are developing. I've found this to be quite useful for adding a belt and suspenders mode during developement (the use after free checks in particular). - todd

Re: exit and eject should have their second letter in upper-case in cdio(1) help output

2005-12-21 Thread Todd C. Miller
Actually, the correct thing to do is to make one match with a single letter and the other match with two or more letters. I chose to make eject match e. This resolves the ambiguity. - todd

Re: How Do I Get snprintf(3) to Return -1?

2006-01-05 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Ray Lai (ray): I'm having trouble making snprintf return -1. I've tried stuff like: len = snprintf(str, 0, %.-Z\n, 9); printf(%d, len); but that just prints `2'. Does snprintf ever return -1? Not on OpenBSD. It can on other

Re: Moving to a bigger HD, is dump still the best way - dump problem

2006-01-09 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Hannah Schroeter (hannah): dump/restore need some space in /tmp. Just mount a mfs to /tmp so that that doesn't fill up the initial ramdisk. Or just point the TMPDIR environment variable to a mounted partition with enough space. - todd

Re: Apple MacBook Pro support

2006-01-12 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Dries Schellekens (gwyllion): The final Intel Macs use EFI (Extensible Firmware Interface) instead of the old BIOS. So a new boot loader is required. Maybe code can be borrowed from FreeBSD ia64. EFI has a legacy mode that is supposedly

for those following -current

2006-01-13 Thread Todd C. Miller
Due to some just-committed types changes you will have to build install gcc before a make build will succeed. New snapshots will be available in the next few days. - todd

Re: skeyinit and lock - login class data unavailable (side effect of login_ldap permissions for login.conf)

2006-09-01 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Rogier Krieger (rkrieger): Is there a way to open up login.conf without divulging the bindpw? Reading the login_ldap and login.conf man pages, I did not find any. So far, I see two possible remedies: [1] patching login_ldap to obtain sensitive

Re: Workaround/Solution for i386/5873: No sound on Eee PC 900 with OpenBSD 4.4-beta

2008-10-07 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Dawe (dawedawe): I had the same problem with my eee pc 900 as stated in i386/5873: azalia(4) seemed to work, but the speakers didn't produce any output. Running a snapshot from last week, I played again with some mixerctl settings and found the

Re: Question about sudo -v

2008-12-08 Thread Todd C. Miller
Sounds like you have a line like this in sudoers: # Same thing without a password %wheelALL=(ALL) NOPASSWD: SETENV: ALL which would explain why you don't get prompted for a password. But since you didn't include the output of sudo -l I can't tell for sure. - todd

Re: Question about sudo -v

2008-12-08 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Andreas Kahari (andreas.kahari): Here you go: $ sudo -l Matching Defaults entries for ak on this host: env_keep+=DESTDIR FETCH_CMD FLAVOR FTPMODE GROUP MAKE MULTI_PACKAGES, env_keep+=OKAY_FILES OWNER PKG_DBDIR PKG_DESTDIR PKG_CACHE

Re: Question about sudo -v

2008-12-08 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Andreas Kahari (andreas.kahari): Ah, I think I found it. It is this line in my sudoers file that does it: %users ALL=(ALL) NOPASSWD: /usr/local/libexec/xfsm-shutdown-helper What's wrong with it? I was intending to let any member of the 'users'

Re: lpd printing problem

2011-10-14 Thread Todd C. Miller
The (existing) abuse of toprec is a bit kludgy but this should fix the problem for now. - todd Index: lib/libc/gen/getcap.c === RCS file: /home/cvs/openbsd/src/lib/libc/gen/getcap.c,v retrieving revision 1.29 diff -u -r1.29

Re: Bad MD5 of install42.iso

2007-11-01 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake =?ISO-8859-2?B?UHJ6ZW15c7NhdyBQYXdls2N6eWs=?= (pp): 1) MD5s for downloaded files md5sum install42.iso 03dc43a1d18d3003843a1f13b3861917 install42.iso 03dc43a1d18d3003843a1f13b3861917 is correct. The MD5 file has been updated but will take some

Re: can't change password with passwd comand

2007-11-20 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Jumping Mouse (kafriki): When I try to change a user password I get an error. I do this: # passwd username enter a new password and get: pwd_mkdb: corrupted entrypwd_mkdb: at line #24pwd_mkdb: /etc/ptmp: Innapropriate file type or

Re: login_radius possible changes.

2007-12-12 Thread Todd C. Miller
In message [EMAIL PROTECTED] so spake Brad Arrington (bradla): Would it be possible to change login_radius.c actually raddauth.c so that: 1. The admin can change what port login_radius uses, such as the old datametrics port. It is currently hard coded to radius(1812). I have no

Re: Tentakel and exec sudo ...

2009-02-08 Thread Todd C. Miller
In message c4bb3a29-8051-4d34-a691-53d4f035d...@smartterra.eu so spake Falk Brockerhoff - smartTERRA GmbH (nmc): is there any way to execute sudo (in combination with a password to provide) on remote servers using tentakel? Actualy tentakel hangs, when I'm executing sudo ls -l / on

Re: sudo 1.6.9p20 patch in OPENBSD_4_3 and OPENBSD_4_4

2009-02-10 Thread Todd C. Miller
In message 1234278635.17569.9.ca...@soundwave.ws.pitbpa0.priv.collaborativefus ion.com so spake Brian A. Seklecki (lavalamp): Do we want to slip this into presently supported branches containing 1.6.9p17? It's a quick patch:

Re: sudo won't work with login_fingerprint

2009-04-24 Thread Todd C. Miller
login_fingerprint only supports login auth, not support challenge/response mode which is what sudo (and other things) uses. - todd

Re: Weird sudo behavior?

2012-10-08 Thread Todd C. Miller
This is normal behavior for the version of sudo that ships with OpenBSD. You can enable per-tty timestamps by enabling the tty_tickets option. E.g., in sudoers add a line like: Defaults tty_tickets - todd

Re: problem compiling userland in -current

2013-02-25 Thread Todd C. Miller
On Sun, 24 Feb 2013 21:10:30 GMT, Stuart Henderson wrote: On 2013-02-24, Chris Smith obsd_m...@chrissmith.org wrote: cc -I. -I/usr/src/usr.sbin/nsd -O2 -pipe -c /usr/src/usr.sbin/nsd/nsd-xfe r.c /usr/src/usr.sbin/nsd/nsd-xfer.c:175: error: static declaration of

Re: sudo configuration !ttytickets?

2013-09-12 Thread Todd C. Miller
On Wed, 11 Sep 2013 20:59:08 -0400, Michael W. Lucas wrote: I've noticed that the sudo on OpenBSD seems to have !ttytickets set by default. In other words, I authenticate sudo once on, say, ttyp4, and all of my login sessions on all my other ttyp* have authenticated to sudo. This, well,

Re: sudo configuration !ttytickets?

2013-09-14 Thread Todd C. Miller
On Fri, 13 Sep 2013 12:44:45 +0200, Donovan Watteau wrote: Am I right thinking that sudo in base is still vulnerable to CVE-2013-1776 for those who enable tty_tickets? Yes, but the situation is no worse than with tty_tickets disabled. If you are really worried about this you can simply disable

Re: Sudo no longer working with RADIUS logins after upgrade to 5.4

2013-11-06 Thread Todd C. Miller
The only change I see to sudo between 5.3 and 5.4 that might be related is this one. You could try backing it out via patch -R and see if the old behavior is restored. - todd Index: sudo.c === RCS file:

Re: Sudo no longer working with RADIUS logins after upgrade to 5.4

2013-11-06 Thread Todd C. Miller
On Wed, 06 Nov 2013 13:01:38 -0800, Andrew Klettke wrote: Which is odd, and definitely incorrect, as it works with the old binary, and radius is set up correctly in login.conf (IP censored): radius:\ :auth=radius:\ :radius-server=***.***.***.***:\ :ignorenologin:\ :requirehome@:\

Re: Sudo no longer working with RADIUS logins after upgrade to 5.4

2013-11-07 Thread Todd C. Miller
On Thu, 07 Nov 2013 00:08:00 -0500, Ted Unangst wrote: Is this the correct behavior? As I understand it, when I run sudo, it asks for my password because it wants me to prove I'm me. I don't have to authenticate as the destination user, so why is the destination user's auth style being used?

Re: sudo bad practice or inconsistency?

2014-10-14 Thread Todd C. Miller
On Tue, 14 Oct 2014 20:58:56 +0200, Alessandro DE LAURENZIS wrote: Now, launching sudo that way returns an error: just22@poseidon:[xfe] sudo su -c ls su: no such login class: ls so basically sudo is parsing the -c option instead of passing it to su. Probably this is just a bad practice

Re: sudo nohup tcpdump at startup

2015-02-04 Thread Todd C. Miller
On Wed, 04 Feb 2015 15:06:41 +0100, Hrvoje Popovski wrote: is there any problem to just put this in crontab? @reboot /usr/sbin/tcpdump -lnqttti pflog0 2 error.log | /usr/bin/logger -t pf -p local2.info You should not try to run the command in the background since cron runs commands

Re: I found a sort bug! - How to sort big files?

2015-03-14 Thread Todd C. Miller
On Sat, 14 Mar 2015 12:29:21 -, Stuart Henderson wrote: I think the consensus was to try and replace it with another version but not sure what happened. I have a port of the FreeBSD sort but it is slower than our current sort (and slower than GNU sort). - todd

Re: Diffs for OpenBSD /src

2015-03-13 Thread Todd C. Miller
On Fri, 13 Mar 2015 10:42:21 -0500, Matthew Markfort wrote: What is an appropriate channel for relaying diffs for review? The t...@openbsd.org list is usually the right place for diffs to be reviewed. - todd

Re: modify /etc/ksh.kshrc

2015-02-20 Thread Todd C. Miller
On Fri, 20 Feb 2015 12:06:48 -0500, Ted Unangst wrote: butresin wrote: I surprised on this. Why discouraged to modify /etc/ksh.kshrc? Because you have to be root to do it? Why wouldn't it be better for users to edit their own .kshrc? There's nothing wrong with wanting to have

Re: What happens to OpenBSD when Secure Boot becomes manditory?

2015-04-02 Thread Todd C. Miller
On Thu, 02 Apr 2015 16:38:29 -0400, Steve Litt wrote: What happens to OpenBSD when Secure Boot becomes manditory? Please read those articles again, Secure Boot is *not* mandatory for Windows 10. The major change is that for Windows 8 Microsoft *required* hardware vendors to provide a setting

Re: What bad things could happen if we don't use sudoedit?

2015-04-28 Thread Todd C. Miller
On Tue, 28 Apr 2015 07:19:34 +0200, someone wrote: You are perfectly correct, it was ed, not vi and sudoedit could be the solution, thanks. I will try to search the internet how to do the LD_PRELOAD trick with ed. You cannot as LD_PRELOAD only works with dynamic executables and ed is static.

Re: spamdb - can't delete spam db entry (Error 22)

2015-04-27 Thread Todd C. Miller
On Mon, 27 Apr 2015 20:06:59 +0200, Adam Wolk wrote: Apr 27 19:54:55 tintagel spamd[27724]: can't delete 66.111.4.25 out1-smtp.messagingengine.com adam.w...@koparo.com adam.w...@tintagel.pl from spamd db (Error 22) Does anyone know how serious that error is (should I be worried) and what

Re: man -m broken without man.conf ?

2015-05-06 Thread Todd C. Miller
On Wed, 06 May 2015 19:47:23 +0200, Ingo Schwarze wrote: Are you OK with the following patch? It uses the default path if and only if /etc/man.conf (or the -C argument) does not exist or does not contain any manpath or _whatdb directive. That looks reasonable. Having the logic in

Re: man -m broken without man.conf ?

2015-05-06 Thread Todd C. Miller
On Wed, 06 May 2015 17:23:20 +0200, Jan Stary wrote: This is the latest amd64 snapshot. Is seems that there is a subtle bug in man(1). If I augment my man path with -m ~/man, as I do with alias man='man -m ~/man', man(1) does not find the system manpages, saying man: No entry for

Re: post mortem analysis

2015-04-02 Thread Todd C. Miller
On Thu, 02 Apr 2015 23:57:21 +0200, Riccardo Mottola wrote: I checked messages and I see the dmesg from one boot then directly the other boot, no messages in between. Where else could I check? Since you don't have a console you might want to add the following to /etc/sysctl.conf if you don't

Re: sudoers documentation bug?

2015-06-07 Thread Todd C. Miller
It is far too late in the game to change this behavior as you will break people's working sudoers files. - todd

Re: comsat-biff issue

2015-07-06 Thread Todd C. Miller
Is your mail being delivered to /var/mail/yourname or do you have a .forward file? The comsat daemon is notified by mail.local which delivers mail to the local mail spool. If you have a .forward file, mail.local is not used and you won't get a biff notification. - todd

Re: comsat-biff issue

2015-07-06 Thread Todd C. Miller
On Mon, 06 Jul 2015 16:53:27 +0200, Walter Alejandro Iglesias wrote: Till you mentioned about it I've ignored the existence of /usr/libexec/mail.local. :-) I'm a new to OpenBSD. Is it some kind of procmail's alike functionality? It's what delivers messages to /var/mail/username when invoked

Re: Resolve names from chroot'ed OpenBSD httpd

2015-05-22 Thread Todd C. Miller
On Fri, 22 May 2015 11:54:10 -0300, Daniel Bolgheroni wrote: On Fri, May 22, 2015 at 06:39:53AM -0400, Dain Bentley wrote: I had this issue a while back. Have you tried restarting the server? Sure, but didn't solve the problem. http://marc.info/?l=openbsd-miscm=135603654831609w=2 You

Re: comsat-biff issue

2015-07-06 Thread Todd C. Miller
It looks like this is fallout from the strtonum() conversion in comsat. The issue is that mail.local writes a trailing newline after the offset that we need to trim. This fixes it. - todd Index: libexec/comsat/comsat.c === RCS

Re: no more sudo on openbsd 5.8

2015-08-07 Thread Todd C. Miller
On Fri, 07 Aug 2015 17:06:03 +0200, John Naggets wrote: I just installed OpenBSD snapshot (5.8) through an automated install and was surprise to login with my normal user and to find out that there is no sudo command available. Is this normal? Yes, sudo has moved to ports. The new doas(1)

Re: passwd without argument in sudo

2015-07-15 Thread Todd C. Miller
On Wed, 15 Jul 2015 14:51:00 +0200, Alex Greif wrote: when I 'sudo su - ' into a root shell and issue a 'passwd' without a username argument, then it does not try to change the passwd for the current user (in this case root) but for the user from which I issued the 'sudo'. This is because

Re: ksh not loading .profile

2015-07-15 Thread Todd C. Miller
On Wed, 15 Jul 2015 17:05:51 +0100, Laurence Rochfort wrote: I've followed the faq at http://www.openbsd.org/faq/faq8.html#ksh and it still does not work. The problem is that your .xsession file merges ~/.Xresources but your actual XTerm*loginShell setting is in ~/.Xdefaults. Copy that line

Re: cron log in /var/log

2015-11-11 Thread Todd C. Miller
On Wed, 11 Nov 2015 12:29:30 -0500, Jiri B wrote: > As cron got a quite interested recently, isn't > right time to move its log to /var/log? > Or does having /var/cron/log have any specific reason? Since it is just another syslog file /var/log makes sense. I worry a bit about people's log

Re: cron log in /var/log

2015-11-11 Thread Todd C. Miller
On Wed, 11 Nov 2015 12:52:51 -0500, Jiri B wrote: > Other thing, when I was playing with most filesystems r/o I also > found having '.sock' in /var/cron/tabs little annoying, > as we usually use /var/run and I was already having /var/run > as mfs. Since like piece of cake to move it to /var/run.

Re: cron daily insecurity output

2015-11-11 Thread Todd C. Miller
On Wed, 11 Nov 2015 20:31:03 +0100, Adam Wolk wrote: > cron started to be recently reported in my insecurity output after > upgrading to snapshot from Nov 6: > > Checking special files and directories. > Output format is: > filename: > criteria (shouldbe, reallyis) >

Re: missing mailing list message(s)?

2015-09-01 Thread Todd C. Miller
The mailing list server has been hitting a kernel bug that may have caused some outgoing messages to be lost. - todd

Re: OpenBSD parts in Toyota Highlander

2015-09-26 Thread Todd C. Miller
On Sat, 26 Sep 2015 12:51:27 -0600, Diana Eichert wrote: > Todd's is most likely sudo That's probably strlcpy/strlcat. - todd

Re: dig and DNSSEC

2015-09-26 Thread Todd C. Miller
On Sat, 26 Sep 2015 22:03:50 +0200, Denis Fondras wrote: > As Unbound/nsd are in base now, perhaps it could be easier to get > drill in and drop dig ? That's a great idea. We'd need to add nslookup(1) and host(1) wrappers though. - todd

Re: Inconsistency in utimes(2) manpage

2016-01-05 Thread Todd C. Miller
On Tue, 05 Jan 2016 16:38:46 +0100, Carsten Kunze wrote: > the DESCRIPTION section of utimes(2) refers to "path" while > the SYNOPSIS section uses the term "file". Maybe the term > "path" should be used instead of "file" in SYNOPSIS. Fixed, thanks. - todd

Re: smtpd and syslog

2016-06-10 Thread Todd C. Miller
The trace messages are logged at the debug level. You'll need to edit /etc/syslog.conf and change: mail.info /var/log/maillog to: mail.debug /var/log/maillog Then you should see the trace information. - todd

Re: FW: smtpd and syslog

2016-06-10 Thread Todd C. Miller
On Fri, 10 Jun 2016 19:20:23 -, Peter Fraser wrote: > But what bothered me was the thousands of lines in /var/log/messages > saying > > sendsyslog: dropped 2 messages, error 55 > > when I first noticed I had forgot that I had modified smtd_flags > and had no idea why my log files were

Re: sshfs key exchange fails

2016-06-17 Thread Todd C. Miller
On Fri, 17 Jun 2016 19:49:44 +0200, "Dennis Matthiesen" wrote: > I'm not sure if this a configuration issue or could this be a general > problem with the 'Diffie-Hellman Group Exchange Request' not being > processed properly by OpenBSD. > > Problem: OpenBSD SSH server isn't responding to the

Re: sudo and globbing

2016-01-08 Thread Todd C. Miller
You are comparing two very different versions of sudo. The sudo that used to ship with OpenBSD is version 1.7.2p8 which is rather ancient. On Linux you probably have some variant of sudo 1.8.x. Newer versions of sudo escape spaces in the command run via "sudo -s" whereas the ancient 1.7.2p8 does

Re: question about fprintf()

2016-02-15 Thread Todd C. Miller
On Mon, 15 Feb 2016 19:22:59 +0300, Alexei Malinin wrote: > Please tell me can fprintf() set errno to EINTR? Yes, it is possible but see below. > I have not found assignments such as "errno=EINTR" in libc sources > (src/lib/libc/stdio, amd64 OpenBSD-5.6 ) but I'm not sure. > > fprintf()'s man

Re: question about fprintf()

2016-02-15 Thread Todd C. Miller
On Mon, 15 Feb 2016 21:08:20 +0300, Alexei Malinin wrote: > But can fprintf() set errno to EINTR if a program has no signal handlers > (i. e. there are default handlers for all signals)? > For example what will happen with fprintf() in a program with default > signal dispositions if the program's

Re: doas(1) and $PATH

2016-02-19 Thread Todd C. Miller
On Wed, 13 Jan 2016 11:17:55 -0500, Philippe Meunier wrote: > By the way, while playing with which(1) and doas(1) and $PATH, I > managed to get which(1) to core dump, twice, although I have not been > able to reproduce it reliably. The crash in which was fixed recently. - todd

Re: doas(1) and $PATH

2016-02-19 Thread Todd C. Miller
On Fri, 19 Feb 2016 13:45:28 -0700, "Todd C. Miller" wrote: > On Wed, 13 Jan 2016 11:17:55 -0500, Philippe Meunier wrote: > > > By the way, while playing with which(1) and doas(1) and $PATH, I > > managed to get which(1) to core dump, twice, although I have no

Re: groupdel 'command' don't remove group id

2016-03-15 Thread Todd C. Miller
A user's active groups are set at login time. Removing a group from the group file does not affect processes that are already running. If you logout and login again after removing the group you should no longer be a member of the group. - todd

Re: patch: fix usage of mkstemp() in rdistd

2016-03-27 Thread Todd C. Miller
I think it's best to just check the parent directories first and then create the temp name. - todd Index: server.c === RCS file: /cvs/src/usr.bin/rdistd/server.c,v retrieving revision 1.40 diff -u -p -u -r1.40 server.c --- server.c

Re: patch: fix usage of mkstemp() in rdistd

2016-03-28 Thread Todd C. Miller
On Mon, 28 Mar 2016 10:19:12 +0200, Paul Kelly wrote: > On 03/28/16 04:05, Todd C. Miller wrote: > > I think it's best to just check the parent directories first and > > then create the temp name. > > > > - todd > > This works for me and avoids my hacki

Re: Using "> /tmp/debug.log 2>&" in a startup script

2016-07-08 Thread Todd C. Miller
I suspect your are getting tripped up by the ">/dev/null 2>&1" in _rc_do(). Try setting _RC_DEBUG=1 in the rc.d file and see if that makes a difference. I suppose you could also provide your own implementation of _rc_do() in the rc.d file too. - todd

Re: reorder_libs() from /etc/rc when using NFS root FS

2016-07-09 Thread Todd C. Miller
On Sat, 09 Jul 2016 18:25:08 +0200, Frank Scheiner wrote: > Running the command substitution alone after the machine has finished > booting - which takes a considerable extra amount of time as the > SPARCclassic is a slow machine and its root FS is mounted via NFS - > gives the following in my

Re: Issue with numbers of pty

2016-07-01 Thread Todd C. Miller
On Fri, 01 Jul 2016 10:50:24 -0400, "Ted Unangst" wrote: > Stuart Henderson wrote: > > On 2016-06-30, Oriol Demaria wrote: > > > Trying tmuxinator here I have noticed that I ran out of pty, according > > > to man pty(4) there is a kernel parameter specifiying the max > > >

Re: rcs(1) and -I parameter

2016-07-03 Thread Todd C. Miller
On Sun, 03 Jul 2016 13:22:48 +0200, =?utf-8?Q?Sol=C3=A8ne?= RAPENNE wrote: > I am not familiar with rcs(1), from the man page I found parameter "-I Intera > ctive mode." > and rcs usage displays "usage: rcs [-IiLqTUV] [...]" > > When I type "rcs -I" I get > > rcs: unknown option -I > > Does

  1   2   3   >