Re: authentication methods: how do they work?

2019-03-26 Thread Todd C . Miller
On Tue, 26 Mar 2019 11:11:35 -0400, Daniel Jakots wrote: > On Tue, 26 Mar 2019 10:01:59 -0400, Boris Epstein > wrote: > > > Hello listmates, > > > > Let's say I have the following configured in my /etc/login.conf > > > > auth-defaults:auth=password,skey,yubikey > > > > Would that mean either p

Re: After upgrade to -current on sparc64 unable to su

2019-03-23 Thread Todd C . Miller
I just committed a fix for this, the next snapshot should include it. - todd CVSROOT:/cvs Module name:src Changes by: mill...@cvs.openbsd.org 2019/03/23 11:03:00 Modified files: lib/libc/gen : login_cap.c auth_subr.c Log message: Remove useless secure_path(3) calls. T

Re: Is there a fix for stock vi's bug-for-bug compatible ESC-equals-return feature?

2019-02-20 Thread Todd C . Miller
On Mon, 18 Feb 2019 09:04:36 +0100, ropers wrote: > While this feature/bug is counter-intuitive (IMHO), I presume nvi acts > this way so as to be bug-for-bug compatible with original vi. (That's > my guess. I haven't actually confirmed this.) You can install the traditional-vi port and compare th

Re: what would a POP3s daemon best look like?

2018-11-04 Thread Todd C. Miller
On Sun, 04 Nov 2018 12:26:27 +0100, Walter Alejandro Iglesias wrote: > I've been assuming that running pop3d(8) from ports, listening in 995 > only and with 110 port firewalled my passwords aren't traveling in plain > text. Am I assuming right? Port 995 is pop3 protocol over TLS/SSL so that shou

Re: what would a POP3s daemon best look like?

2018-10-30 Thread Todd C. Miller
On Tue, 30 Oct 2018 09:32:45 -0600, "Todd C. Miller" wrote: > I don't think there is much interest in having a pop3 daemon in > base due to the use of plain-text passwords but if you want to check > out a copy the old one, you can do it like this: > > cvs get -rO

Re: what would a POP3s daemon best look like?

2018-10-30 Thread Todd C. Miller
I don't think there is much interest in having a pop3 daemon in base due to the use of plain-text passwords but if you want to check out a copy the old one, you can do it like this: cvs get -rOPENBSD_5_4 src/usr.sbin/popa3d The DESIGN file in that directory describes the security model. - todd

Re: network problem with latest snapshots

2018-10-05 Thread Todd C. Miller
On Fri, 05 Oct 2018 01:45:22 -0300, Thanos Tsouanas wrote: > I was hoping it could have been some "bad timing" with the snapshots > back then but the problem is still there with the latest snapshot: > this ethernet card cannot work under -current, but works fine under > 6.3, and used to work under

Re: checking source with pvs-studio

2018-10-03 Thread Todd C. Miller
On Wed, 03 Oct 2018 18:07:00 +0100, Tom Smyth wrote: > I was thinking ... it might be possible to examine > a copy of the code out of band on a different OS system ... > and deal with the bugs that are flagged > as part of the normal OpenBSD development process, It is possible to generate pre-pro

Re: checking source with pvs-studio

2018-10-03 Thread Todd C. Miller
On Wed, 03 Oct 2018 17:42:16 +0100, Tom Smyth wrote: > ... is it just 750 for a License ? > If one were to donate a License ? would that work for the project ? No, it would not. Their licensing model simply won't work for us. Even if it did, it's not like we could run it natively on OpenBSD.

Re: checking source with pvs-studio

2018-10-03 Thread Todd C. Miller
On Wed, 03 Oct 2018 10:20:45 +0200, Ingo Schwarze wrote: > Which is of course trivial to do - you write a script to do a > checkout, run "sed -i", run the tool, collect the the results, > and delete the checkout. So the harassment by the author is not > even effective for his intended purpose. T

Re: Problem building GCC 8.2.0 amd64-to-i386 cross-compiler

2018-09-25 Thread Todd C. Miller
On Mon, 24 Sep 2018 23:43:20 -0400, Katherine Rohl wrote: > I need to build a GCC cross-compiler targeting i386-pc-elf. I'm running > into problems with the build on OpenBSD 6.3. > > I've already successfully built a binutils-2.31.1 for i386-pc-elf. > > Trying to use the GCC 4.9.4 package (as GCC

Re: want.html reachable from homepage?

2018-08-28 Thread Todd C. Miller
On Tue, 28 Aug 2018 22:00:11 +0200, =?UTF-8?Q?Martin_Schr=C3=B6der?= wrote: > is there a clickpath from www.openbsd.org to want.html? There is a link to it at the bottom of http://www.openbsd.org/report.html (reachable via "Reporting Problems" on the main page) as well as the first page of the FA

Re: newaliases vs makemap

2018-07-21 Thread Todd C. Miller
On Thu, 19 Jul 2018 15:13:57 -0600, Theo de Raadt wrote: > An interface was copied from sendmail because that is what everyone > knows. Therefore a program has to exist, which works exactly like > everyone already knows. Therefore it must not have glitches and > behaviours which cause confusion.

Re: newaliases vs makemap

2018-07-16 Thread Todd C. Miller
On Mon, 16 Jul 2018 09:11:50 -0700, Scott Vanderbilt wrote: > BTW, newaliases seg faults for me with latest couple of snapshots > (amd64). No message other than "segmentation fault". Just submitted a PR > with sendbug. Already fixed in -current by: CVSROOT:/cvs Module name:src Chan

Re: newaliases vs makemap

2018-07-16 Thread Todd C. Miller
On Sun, 15 Jul 2018 17:59:58 -0700, Scott Vanderbilt wrote: > In /etc/mail/aliases, there is the following note: > > # >> The program "newaliases" must be run after > # >> NOTE >> this file is updated for any changes to > # >> show through to smtpd. That

Re: how to know the progressive state of dd

2018-06-25 Thread Todd C. Miller
As someone else mentioned you would use pkill on OpenBSD. However, you will also need to use SIGINFO, not SIGUSR1, to get dd's status. BSD systems have traditionally used SIGINFO for this purpose. Linux lacks SIGINFO so there is no consistent signal for this kind of a thing there. - todd

Re: sgtty.h

2018-06-11 Thread Todd C. Miller
On Mon, 11 Jun 2018 17:05:02 +0200, Pau wrote: > I am trying to compile a very old piece of software, supermongo, on -current. > > The first complain I get from gmake is that > > get1char.c:26:14: fatal error: 'sgtty.h' file not found > #include > ^ > 1 error generated. >

Re: Viewport for man.openbsd.org -- readability on phones

2018-05-17 Thread Todd C. Miller
On Fri, 18 May 2018 02:47:29 +0200, Ingo Schwarze wrote: > I must say i never particularly liked that line in the CSS file. > It always felt like fiddling with details that it might be better > not to touch, given that display devices running browsers differ > more than terminal emulators. And he

Re: mail and newaliases do not work 6.1 and 6.2 for me

2018-05-01 Thread Todd C. Miller
On Tue, 01 May 2018 13:09:27 -0600, "Todd C. Miller" wrote: > You need to restart smptd if you are using a file-based table for > aliases. If you use a db instead of file you don't need to restart. Actually, you don't need to restart smtpd for file-based tables if you

Re: mail and newaliases do not work 6.1 and 6.2 for me

2018-05-01 Thread Todd C. Miller
On Tue, 01 May 2018 21:04:19 +0300, Ivo Chutkin wrote: > Restarting smtpd did it. > > I did not know I have to restart smtpd in order to get it working after > change in alias. You need to restart smptd if you are using a file-based table for aliases. If you use a db instead of file you don't n

Re: 4-ports router under $150

2018-04-11 Thread Todd C. Miller
On Wed, 11 Apr 2018 10:49:54 +0300, lilit-aibolit wrote: > Hi, I've been looking for more then one year to get something similar > until I found this: > > https://pt.aliexpress.com/item/Celeron-J1900-Mini-pc-free-shipping-micro-sd-t > wo-usb-and-four-lan-laptop-overwatch-Computer/32794678352.html

Re: unbound reload crashes the server

2018-03-22 Thread Todd C. Miller
On Thu, 22 Mar 2018 16:02:56 -0500, Edgar Pettijohn wrote: > It is chroot'd to /var/unbound so it looks for /etc/unbound.conf from > that false root. At least that is my best guess. What is in > /etc/rc.conf.local? > > I have the following: > unbound_flags=-c /var/unbound/etc/unbound.conf > > I

Re: OpenSMTPd maillist "compatible" manager Majordomo or what?

2018-03-20 Thread Todd C. Miller
On Tue, 20 Mar 2018 09:32:09 -0400, Allan Streib wrote: > Does mlmmj provide self-service-via-email? I could not quite tell from > their online man pages. > > E.g. as a subscriber to a list, can I send an email to something like > listname+unsubscr...@example.com to unsubscribe? Yes. The documen

Re: Loop problem in sending mail to root

2018-03-05 Thread Todd C. Miller
The answer is probably in your /etc/mail/aliases file. Do you have an entry for root in there? If so, it needs to point to a different user. An entry like the following would cause the error: root: root For sendmail, an entry like this would cause the mail to be delivered locally for the user.

Re: at/batch(1) and ssh-agent(1) environment variables

2018-01-31 Thread Todd C. Miller
On Wed, 31 Jan 2018 11:39:23 +0100, Erwin Geerdink wrote: > at/batch(1) appears to not retain SSH_AUTH_SOCK and SSH_AGENT_PID > environment variables when commands are executed. According to the man > page: > > "(...) The working directory, the environment (except for the variables > TERM, TERMCA

Re: OpenBSD: signal handling and strange behaviour.

2018-01-30 Thread Todd C. Miller
There are known clock/timer issues with OpenBSD under KVM due to what appear to be bugs in KVM. There is some info in the following thread: https://marc.info/?l=openbsd-bugs&m=151430928212450&w=2 I'm afraid you are on a wild goose chase. The behavior you are seeing is not what you'd see on bare

Re: Writing "ones" instead of "zeroes" when wiping disk

2018-01-11 Thread Todd C. Miller
On Thu, 11 Jan 2018 22:09:32 -0500, "trondd" wrote: > A 1 is too narrow to fully cover the original data. You need to use an 8 to wipe out all seven segments. - todd

Re: Performance issues as KVM guest?

2018-01-11 Thread Todd C. Miller
This sounds like the same issue as was described here: https://marc.info/?l=openbsd-bugs&m=151430928212450&w=2 - todd

Re: Code Storing point

2017-12-27 Thread Todd C. Miller
On Thu, 28 Dec 2017 01:57:31 +0300, "jin&hitman&Barracuda" wrote: > My company wrote an authentication software and dev. teams decided to close > code to others. A customer requested to see codes under one certain > condition. They demand to see our codes if our company fall into problems > that c

Re: something wrong with softraid

2017-12-20 Thread Todd C. Miller
There should be no /dev/rsd4, the correct device nodes are /dev/rsd4a through /dev/rsd4p. As you've shown, the /dev/rsd4 file you have is not a device node anyway, it is a regular file. You might want to take a look at its contents to try to understand what created it but it should be safe to jus

Re: gtar: ambiguous package

2017-10-09 Thread Todd C. Miller
On Mon, 09 Oct 2017 17:24:53 +0200, Max Power wrote: > Hi guys, and wishes for the new release, Thank You Theo. > > Installing gtar ask me: > Ambiguos: choose package for gtar > a 0: > 1: gtar-1.28p1 > 2: gtar-1.28p1-static > Your choice: > > Ok, but differece between 'nor

Re: Excited for 6.2 - C'mon and release this bad boy!

2017-10-06 Thread Todd C. Miller
On Fri, 06 Oct 2017 16:34:24 +0100, Rui Ribeiro wrote: > Sorry, have not been able to use the installation image in the last few > days. The 6.2 directory started popping last week without it existing, and > even 2-3 days ago the installation was not working yet even trying to point > to the new d

Re: What is the correct debugger used for debugging program built with clang++?

2017-10-05 Thread Todd C. Miller
The gdb in base is very old. To debug programs compiled with clang you should use egdb from ports. - todd

Re: sudoreplay in sudo 1.8.21 on 6.2-snapshot

2017-09-02 Thread Todd C. Miller
This is fixed in sudo 1.8.21p1. It's in ports now but you'll need to wait a bit for a prebuild package, though you can of course build your own. - todd

Re: sudoreplay in sudo 1.8.21 on 6.2-snapshot

2017-09-01 Thread Todd C. Miller
The sudoreplay event loop was rewritten in 1.8.21. The bug only occurs when logging input as well as output. I've reproduced this now and will debug it later today. - todd

Re: how to know the state of the dd's progression

2017-08-09 Thread Todd C. Miller
dd will display progress when it receives SIGINFO, usually bound to the Control-T keypress. - todd

Re: fsck_ffs: cannot alloc 131427074 bytes for lncntp

2017-07-26 Thread Todd C. Miller
On Wed, 26 Jul 2017 17:24:14 +0200, Jon S wrote: > Problem solved/workaround: running fsck /dev/... worked. The problem seemd > to be with running fsck_ffs /dev/... That is because the fsck front-end will increase the resource limits before executing fsck_ffs. You should never invoke fsck_fstype

Re: bgp-spamd added 192.43.244.163

2017-06-04 Thread Todd C. Miller
On Sun, 04 Jun 2017 12:09:51 -0500, Edgar Pettijohn wrote: > Did a little more digging. Looks like the list 192.43.244.163 is on the > SORBS Spam list. I have delisted it. - todd

Re: majordomo errata

2017-05-24 Thread Todd C. Miller
On Wed, 24 May 2017 16:59:23 -0400, Choose a display name wrote: > The first sentence of the "Unsubscribing from Mailing Lists" section > of majordomo's response to "help" command contains a typo. > > >Your original intro message should contains the exact command > > It should contain, not "cont

Re: 6.1: /usr/local/bin/node: W^X binary outside wxallowed mountpoint

2017-04-25 Thread Todd C. Miller
On Tue, 25 Apr 2017 16:49:36 +0200, Maxim Bourmistrov wrote: > Any work around for this one? > > Mount with wxallowed not working. Two things are required: 1) The binary must be on a file system mounted with the wxallowed option. 2) The binary must have the OPENBSD_WXNEED type in the ELF he

Re: OpenBSD 6.1, boot can't find kernel anymore

2017-04-24 Thread Todd C. Miller
You need to post your /var/run/dmesg.boot if you want someone to help you debug this. - todd

Re: ftpsesame package

2017-04-12 Thread Todd C. Miller
On Wed, 12 Apr 2017 21:27:49 +0200, Olivier Regnier wrote: > "ftpsesame chroots to "/var/empty" and changes to user "proxy" to drop > privileges. It does keep a file descriptor to both bpf > (4) and pf >

Re: getifaddrs()

2017-04-04 Thread Todd C. Miller
On Tue, 04 Apr 2017 09:21:45 -0500, Edgar Pettijohn wrote: > This is somewhat a continuation of my previous question about max > interfaces. I wanted to know how much space I needed for a buffer using > ioctl(). Then I discovered getifaddrs() Good, you want to use getifaddrs() and not the old

Re: Just to understand, ARM64 has SMP and ARM32 does not? &, OpenBSD design fine with ARM's weak mem coherency?

2017-02-26 Thread Todd C. Miller
On Sun, 26 Feb 2017 03:56:33 +, Tinker wrote: > Did I get it right, that ARM64 has SMP (as of the patches this week), > but ARM32 does not have SMP and will not get it too? As Peter says, someone has to step up andf do the work for ARM32 SMP. That said, it probably doesn't make sense to wor

Re: Problem with "xargs -0"

2017-01-16 Thread Todd C. Miller
We just need to increment count in the NUL case, nothing more. - todd Index: usr.bin/xargs/xargs.c === RCS file: /cvs/src/usr.bin/xargs/xargs.c,v retrieving revision 1.31 diff -u -p -u -r1.31 xargs.c --- usr.bin/xargs/xargs.c

Re: Problem with "xargs -0"

2017-01-16 Thread Todd C. Miller
On Mon, 16 Jan 2017 17:05:30 +0100, Martin Ziemer wrote: > As I said in the other mail: The -I separates at new LINES (in the > Code it sets the Parameter -L to 1, so it starts a new entry on every > non empty line. I'm sorry but that is a documentation error if anything. When using -0 a "line"

Re: Problem with "xargs -0"

2017-01-16 Thread Todd C. Miller
On Mon, 16 Jan 2017 16:51:16 +0100, Andreas Kusalananda =?iso-8859-1?B?S+Ro5HJp ?= wrote: > Well, the manual also says, about "-0": > > Change xargs to expect NUL (‘\0’) characters as separators, instead > of spaces and newlines. > > Note the "instead of". It is definitely a bug. The f

Re: Problem with "xargs -0"

2017-01-16 Thread Todd C. Miller
On Mon, 16 Jan 2017 12:19:31 +0100, Andreas Kusalananda =?iso-8859-1?B?S+Ro5HJp ?= wrote: > However, when I use nul-termination instead: > > $ printf 'hello\00world\00' | xargs -0 -I arg printf '>%s<\n' "arg" > >hello world< This appears to be a bug with the -I handling. Without -I it w

Re: maybe move texinfo from base in the ports?

2017-01-05 Thread Todd C. Miller
On Thu, 05 Jan 2017 21:18:45 +0300, =?UTF-8?B?0JDQvdC00YDQtdC5INCR0L7Qu9C60L7Qv dGB0LrQuNC5?= wrote: > https://github.com/openbsd/src/tree/master/usr.bin/keynote > remove this obsolete directory, please... How is it obsolete? The keynote binary is still built from there, it's just that the sourc

Re: usermod: Invalid password: `*'

2017-01-05 Thread Todd C. Miller
This works in -current. I've verified that it works with rev 1.112 of user.c but OpenBSD 6.0 has user.c rev 1.111. - todd

Re: PC-Engines Wireless - PPPOE timeouts.

2016-12-20 Thread Todd C. Miller
On Tue, 20 Dec 2016 08:58:43 -0600, Patrick Dohman wrote: > I'm currently running a ZyXEL C1100Z VDSL2 modem. > > At this point the hardware WAN interface (RE1) is configured with an MTU of > 1500 > > In addition the PPPOE interface is configured with an MTU of 1492 Are you setting the MSS to 1

Re: gethost.. replacement?

2016-12-07 Thread Todd C. Miller
On Wed, 07 Dec 2016 17:52:38 -0500, gwes wrote: > The gethost* DNS query functions don't have a man page in 6.0. > What is the approved replacement for a user-written program? You should still have the gethostbyname(3) man page on 6.0, I do. However, new code should really be using getaddrinfo(3)

Re: LibC openBSD affected ?

2016-12-07 Thread Todd C. Miller
On Wed, 07 Dec 2016 13:25:48 +0100, "Peter N. M. Hansteen" wrote: > Yes. See http://www.tedunangst.com/flak/post/who-even-calls-link-ntoa Right, link_ntoa(3) is not called with untrusted input so this is a very minor issue. Also, route and netstat are not setuid or setgid on OpenBSD. - todd

Re: LibC openBSD affected ?

2016-12-06 Thread Todd C. Miller
On Tue, 06 Dec 2016 20:40:47 +, carlos albino garcia grijalba wrote: > its openbsd affected by http://tinyurl.com/js2vd28 ? Yes, the same code is present in OpenBSD. - todd

Re: console mode not allowing login

2016-10-21 Thread Todd C. Miller
It sounds like you need to enable getty on the serial port. To login on the serial console you should have a line like the following in /etc/ttys: tty00 "/usr/libexec/getty std.9600" vt220 on secure - todd

Re: OpenBSD on HPE DL20 G9

2016-10-10 Thread Todd C. Miller
Can't you enable serial console redirection with the built-in iLO? That should make it easier to get the boot messages in legacy mode. - todd

Re: kernel chmod

2016-09-22 Thread Todd C. Miller
On Thu, 22 Sep 2016 16:51:28 +0200, Jan Stary wrote: > The /bsd kernel as installed by the installer has > -rw-r--r-- 1 root wheel 10571887 Sep 22 16:27 /bsd > > The /bsd kernel recompiled and installed by make install has > -rwxr-xr-x 1 root wheel 10572001 Sep 22 16:49 /bsd > > Not that I

Re: UPS, Network UPS Tools and UPD(4)

2016-09-11 Thread Todd C. Miller
On Sun, 11 Sep 2016 21:35:46 -0400, Lawrence Wieser wrote: > I have a CyberPower UPS that my OpenBSD 5.8 system sees just fine at uhidev0 > on upd0. But the `usbhid-ups` driver for NUT is unable to talk to it. I'm successfully using a CyberPower CP1000PFCLCD with NUT and have no problems with the

Re: DMARC and misc@ (and likely other OpenBSD lists)

2016-08-26 Thread Todd C. Miller
On Fri, 26 Aug 2016 11:54:59 -, Stuart Henderson wrote: > > If the OpenBSD list admins are reading this: would it be possible to > > make a similar change in the OpenBSD mailing list configuration? > > I think it's more than a config change, afaik it would mean modifying > majordomo to do DMA

Re: reorder_libs() from /etc/rc when using NFS root FS

2016-07-09 Thread Todd C. Miller
On Sat, 09 Jul 2016 18:25:08 +0200, Frank Scheiner wrote: > Running the command substitution alone after the machine has finished > booting - which takes a considerable extra amount of time as the > SPARCclassic is a slow machine and its root FS is mounted via NFS - > gives the following in my

Re: Using "> /tmp/debug.log 2>&" in a startup script

2016-07-08 Thread Todd C. Miller
I suspect your are getting tripped up by the ">/dev/null 2>&1" in _rc_do(). Try setting _RC_DEBUG=1 in the rc.d file and see if that makes a difference. I suppose you could also provide your own implementation of _rc_do() in the rc.d file too. - todd

Re: rcs(1) and -I parameter

2016-07-03 Thread Todd C. Miller
On Sun, 03 Jul 2016 13:22:48 +0200, =?utf-8?Q?Sol=C3=A8ne?= RAPENNE wrote: > I am not familiar with rcs(1), from the man page I found parameter "-I Intera > ctive mode." > and rcs usage displays "usage: rcs [-IiLqTUV] [...]" > > When I type "rcs -I" I get > > rcs: unknown option -I > > Does the

Re: Issue with numbers of pty

2016-07-01 Thread Todd C. Miller
On Fri, 01 Jul 2016 10:50:24 -0400, "Ted Unangst" wrote: > Stuart Henderson wrote: > > On 2016-06-30, Oriol Demaria wrote: > > > Trying tmuxinator here I have noticed that I ran out of pty, according > > > to man pty(4) there is a kernel parameter specifiying the max > > > number. I'm running a s

Re: sshfs key exchange fails

2016-06-17 Thread Todd C. Miller
On Fri, 17 Jun 2016 19:49:44 +0200, "Dennis Matthiesen" wrote: > I'm not sure if this a configuration issue or could this be a general > problem with the 'Diffie-Hellman Group Exchange Request' not being > processed properly by OpenBSD. > > Problem: OpenBSD SSH server isn't responding to the 'Dif

Re: FW: smtpd and syslog

2016-06-10 Thread Todd C. Miller
On Fri, 10 Jun 2016 19:20:23 -, Peter Fraser wrote: > But what bothered me was the thousands of lines in /var/log/messages > saying > > sendsyslog: dropped 2 messages, error 55 > > when I first noticed I had forgot that I had modified smtd_flags > and had no idea why my log files were fillin

Re: smtpd and syslog

2016-06-10 Thread Todd C. Miller
The trace messages are logged at the debug level. You'll need to edit /etc/syslog.conf and change: mail.info /var/log/maillog to: mail.debug /var/log/maillog Then you should see the trace information. - todd

Re: patch: fix usage of mkstemp() in rdistd

2016-03-28 Thread Todd C. Miller
On Mon, 28 Mar 2016 10:19:12 +0200, Paul Kelly wrote: > On 03/28/16 04:05, Todd C. Miller wrote: > > I think it's best to just check the parent directories first and > > then create the temp name. > > > > - todd > > This works for me and avoids my

Re: patch: fix usage of mkstemp() in rdistd

2016-03-27 Thread Todd C. Miller
I think it's best to just check the parent directories first and then create the temp name. - todd Index: server.c === RCS file: /cvs/src/usr.bin/rdistd/server.c,v retrieving revision 1.40 diff -u -p -u -r1.40 server.c --- server.c

Re: groupdel 'command' don't remove group id

2016-03-15 Thread Todd C. Miller
A user's active groups are set at login time. Removing a group from the group file does not affect processes that are already running. If you logout and login again after removing the group you should no longer be a member of the group. - todd

Re: doas(1) and $PATH

2016-02-19 Thread Todd C. Miller
On Fri, 19 Feb 2016 13:45:28 -0700, "Todd C. Miller" wrote: > On Wed, 13 Jan 2016 11:17:55 -0500, Philippe Meunier wrote: > > > By the way, while playing with which(1) and doas(1) and $PATH, I > > managed to get which(1) to core dump, twice, although I have not b

Re: doas(1) and $PATH

2016-02-19 Thread Todd C. Miller
On Wed, 13 Jan 2016 11:17:55 -0500, Philippe Meunier wrote: > By the way, while playing with which(1) and doas(1) and $PATH, I > managed to get which(1) to core dump, twice, although I have not been > able to reproduce it reliably. The crash in which was fixed recently. - todd

Re: question about fprintf()

2016-02-15 Thread Todd C. Miller
On Mon, 15 Feb 2016 21:08:20 +0300, Alexei Malinin wrote: > But can fprintf() set errno to EINTR if a program has no signal handlers > (i. e. there are default handlers for all signals)? > For example what will happen with fprintf() in a program with default > signal dispositions if the program's

Re: question about fprintf()

2016-02-15 Thread Todd C. Miller
On Mon, 15 Feb 2016 19:22:59 +0300, Alexei Malinin wrote: > Please tell me can fprintf() set errno to EINTR? Yes, it is possible but see below. > I have not found assignments such as "errno=EINTR" in libc sources > (src/lib/libc/stdio, amd64 OpenBSD-5.6 ) but I'm not sure. > > fprintf()'s man p

Re: sudo and globbing

2016-01-08 Thread Todd C. Miller
You are comparing two very different versions of sudo. The sudo that used to ship with OpenBSD is version 1.7.2p8 which is rather ancient. On Linux you probably have some variant of sudo 1.8.x. Newer versions of sudo escape spaces in the command run via "sudo -s" whereas the ancient 1.7.2p8 does

Re: Inconsistency in utimes(2) manpage

2016-01-05 Thread Todd C. Miller
On Tue, 05 Jan 2016 16:38:46 +0100, Carsten Kunze wrote: > the DESCRIPTION section of utimes(2) refers to "path" while > the SYNOPSIS section uses the term "file". Maybe the term > "path" should be used instead of "file" in SYNOPSIS. Fixed, thanks. - todd

Re: cron daily insecurity output

2015-11-11 Thread Todd C. Miller
On Wed, 11 Nov 2015 20:31:03 +0100, Adam Wolk wrote: > cron started to be recently reported in my insecurity output after > upgrading to snapshot from Nov 6: > > Checking special files and directories. > Output format is: > filename: > criteria (shouldbe, reallyis) > var/cron/

Re: cron log in /var/log

2015-11-11 Thread Todd C. Miller
On Wed, 11 Nov 2015 12:52:51 -0500, Jiri B wrote: > Other thing, when I was playing with most filesystems r/o I also > found having '.sock' in /var/cron/tabs little annoying, > as we usually use /var/run and I was already having /var/run > as mfs. Since like piece of cake to move it to /var/run.

Re: cron log in /var/log

2015-11-11 Thread Todd C. Miller
On Wed, 11 Nov 2015 12:29:30 -0500, Jiri B wrote: > As cron got a quite interested recently, isn't > right time to move its log to /var/log? > Or does having /var/cron/log have any specific reason? Since it is just another syslog file /var/log makes sense. I worry a bit about people's log watchin

Re: dig and DNSSEC

2015-09-26 Thread Todd C. Miller
On Sat, 26 Sep 2015 22:03:50 +0200, Denis Fondras wrote: > As Unbound/nsd are in base now, perhaps it could be easier to get > drill in and drop dig ? That's a great idea. We'd need to add nslookup(1) and host(1) wrappers though. - todd

Re: OpenBSD parts in Toyota Highlander

2015-09-26 Thread Todd C. Miller
On Sat, 26 Sep 2015 12:51:27 -0600, Diana Eichert wrote: > Todd's is most likely sudo That's probably strlcpy/strlcat. - todd

Re: missing mailing list message(s)?

2015-09-01 Thread Todd C. Miller
The mailing list server has been hitting a kernel bug that may have caused some outgoing messages to be lost. - todd

Re: no more sudo on openbsd 5.8

2015-08-07 Thread Todd C. Miller
On Fri, 07 Aug 2015 17:06:03 +0200, John Naggets wrote: > I just installed OpenBSD snapshot (5.8) through an automated install > and was surprise to login with my normal user and to find out that > there is no sudo command available. Is this normal? Yes, sudo has moved to ports. The new doas(1)

Re: ksh not loading .profile

2015-07-15 Thread Todd C. Miller
On Wed, 15 Jul 2015 17:05:51 +0100, Laurence Rochfort wrote: > I've followed the faq at http://www.openbsd.org/faq/faq8.html#ksh and it > still does not work. The problem is that your .xsession file merges ~/.Xresources but your actual XTerm*loginShell setting is in ~/.Xdefaults. Copy that line i

Re: passwd without argument in sudo

2015-07-15 Thread Todd C. Miller
On Wed, 15 Jul 2015 14:51:00 +0200, Alex Greif wrote: > when I 'sudo su - ' into a root shell and issue a 'passwd' without a > username > argument, then it does not try to change the passwd for the current user (in > this case root) but for the user from which I issued the 'sudo'. This is becaus

Re: comsat-biff issue

2015-07-06 Thread Todd C. Miller
On Mon, 06 Jul 2015 16:53:27 +0200, Walter Alejandro Iglesias wrote: > Till you mentioned about it I've ignored the existence of > /usr/libexec/mail.local. :-) I'm a new to OpenBSD. Is it some kind of > procmail's alike functionality? It's what delivers messages to /var/mail/username when invok

Re: comsat-biff issue

2015-07-06 Thread Todd C. Miller
It looks like this is fallout from the strtonum() conversion in comsat. The issue is that mail.local writes a trailing newline after the offset that we need to trim. This fixes it. - todd Index: libexec/comsat/comsat.c === RCS fil

Re: comsat-biff issue

2015-07-06 Thread Todd C. Miller
Is your mail being delivered to /var/mail/yourname or do you have a .forward file? The comsat daemon is notified by mail.local which delivers mail to the local mail spool. If you have a .forward file, mail.local is not used and you won't get a biff notification. - todd

Re: sudoers documentation bug?

2015-06-07 Thread Todd C. Miller
It is far too late in the game to change this behavior as you will break people's working sudoers files. - todd

Re: Resolve names from chroot'ed OpenBSD httpd

2015-05-22 Thread Todd C. Miller
On Fri, 22 May 2015 11:54:10 -0300, Daniel Bolgheroni wrote: > On Fri, May 22, 2015 at 06:39:53AM -0400, Dain Bentley wrote: > > I had this issue a while back. Have you tried restarting the server? > > Sure, but didn't solve the problem. > > http://marc.info/?l=openbsd-misc&m=135603654831609&w=

Re: man -m broken without man.conf ?

2015-05-06 Thread Todd C. Miller
On Wed, 06 May 2015 19:47:23 +0200, Ingo Schwarze wrote: > Are you OK with the following patch? > It uses the default path if and only if /etc/man.conf (or the -C > argument) does not exist or does not contain any manpath or > _whatdb directive. That looks reasonable. Having the logic in manconf

Re: man -m broken without man.conf ?

2015-05-06 Thread Todd C. Miller
On Wed, 06 May 2015 17:23:20 +0200, Jan Stary wrote: > This is the latest amd64 snapshot. > Is seems that there is a subtle bug in man(1). > > If I augment my man path with -m ~/man, > as I do with alias man='man -m ~/man', > man(1) does not find the system manpages, saying > > man: No ent

Re: What bad things could happen if we don't use sudoedit?

2015-04-28 Thread Todd C. Miller
On Tue, 28 Apr 2015 07:19:34 +0200, someone wrote: > You are perfectly correct, it was ed, not vi and sudoedit could be the > solution, thanks. > I will try to search the internet how to do the LD_PRELOAD trick with ed. You cannot as LD_PRELOAD only works with dynamic executables and ed is static

Re: spamdb - can't delete spam db entry (Error 22)

2015-04-27 Thread Todd C. Miller
On Mon, 27 Apr 2015 20:06:59 +0200, Adam Wolk wrote: > Apr 27 19:54:55 tintagel spamd[27724]: can't delete 66.111.4.25 > out1-smtp.messagingengine.com > from spamd db (Error 22) > > Does anyone know how serious that error is (should I be worried) and > what might have caused it? Error 22 is EIN

Re: post mortem analysis

2015-04-02 Thread Todd C. Miller
On Thu, 02 Apr 2015 23:57:21 +0200, Riccardo Mottola wrote: > I checked messages and I see the "dmesg" from one boot then directly the > other boot, no messages in between. > Where else could I check? Since you don't have a console you might want to add the following to /etc/sysctl.conf if you d

Re: What happens to OpenBSD when Secure Boot becomes manditory?

2015-04-02 Thread Todd C. Miller
On Thu, 02 Apr 2015 16:38:29 -0400, Steve Litt wrote: > What happens to OpenBSD when Secure Boot becomes manditory? Please read those articles again, "Secure Boot" is *not* mandatory for Windows 10. The major change is that for Windows 8 Microsoft *required* hardware vendors to provide a setting

Re: I found a sort bug! - How to sort big files?

2015-03-14 Thread Todd C. Miller
On Sat, 14 Mar 2015 12:29:21 -, Stuart Henderson wrote: > I think the consensus was to try and replace it with another version but > not sure what happened. I have a port of the FreeBSD sort but it is slower than our current sort (and slower than GNU sort). - todd

Re: Diffs for OpenBSD /src

2015-03-13 Thread Todd C. Miller
On Fri, 13 Mar 2015 10:42:21 -0500, Matthew Markfort wrote: > What is an appropriate channel for relaying diffs for review? The t...@openbsd.org list is usually the right place for diffs to be reviewed. - todd

Re: modify /etc/ksh.kshrc

2015-02-20 Thread Todd C. Miller
On Fri, 20 Feb 2015 12:06:48 -0500, "Ted Unangst" wrote: > butresin wrote: > > I surprised on this. > > Why discouraged to modify /etc/ksh.kshrc? > > Because you have to be root to do it? Why wouldn't it be better for users to > edit their own .kshrc? There's nothing wrong with wanting to have s

Re: sudo nohup tcpdump at startup

2015-02-04 Thread Todd C. Miller
On Wed, 04 Feb 2015 15:06:41 +0100, Hrvoje Popovski wrote: > is there any problem to just put this in crontab? > > @reboot /usr/sbin/tcpdump -lnqttti pflog0 2> error.log | /usr/bin/logger > -t pf -p local2.info & You should not try to run the command in the background since cron runs commands as

Re: sudo bad practice or inconsistency?

2014-10-14 Thread Todd C. Miller
On Tue, 14 Oct 2014 20:58:56 +0200, Alessandro DE LAURENZIS wrote: > Now, launching sudo that way returns an error: > > just22@poseidon:[xfe]> sudo su -c ls > su: no such login class: ls > > so basically sudo is parsing the "-c" option instead of passing it to > su. Probably this is just a bad p

<    1   2   3   >