cryptosoft SLIST

2021-07-08 Thread Alexander Bluhm
Hi, Can we use the SLIST macro for cryptosoft sessions? ok? bluhm Index: crypto/cryptosoft.c === RCS file: /data/mirror/openbsd/cvs/src/sys/crypto/cryptosoft.c,v retrieving revision 1.87 diff -u -p -r1.87 cryptosoft.c ---

Re: update xf86-video-amdgpu to latest git

2021-07-08 Thread Matthieu Herrb
On Thu, Jul 08, 2021 at 05:29:01PM +1000, Jonathan Gray wrote: > The latest xf86-video-amdgpu release was in 2019. > > xf86-video-amdgpu-19.1.0..origin/master Hi, Works so far here on my X395 (Vega Mobile 8) with -current. -- Matthieu Herrb

feature request: dhclient reject more than a single IP address

2021-07-08 Thread Andras Vinter
Dear devs, I came across a limitation which I would like to request to be implemented: In dhclient.conf the reject declaration only accepts a single IP address, and it would be great if we could define more than one by comma separation and even ranges in CIDR notation like in Linux. I wanted

const struct xformsw

2021-07-08 Thread Alexander Bluhm
Hi, The array of struct xformsw can also be declared constant. ok? bluhm Index: netinet/ip_ah.c === RCS file: /data/mirror/openbsd/cvs/src/sys/netinet/ip_ah.c,v retrieving revision 1.149 diff -u -p -r1.149 ip_ah.c ---

Re: forwarding in parallel with ipsec panic

2021-07-08 Thread Vitaliy Makkoveev
On Thu, Jul 08, 2021 at 08:08:23AM +0200, Hrvoje Popovski wrote: > On 8.7.2021. 0:10, Vitaliy Makkoveev wrote: > > On Wed, Jul 07, 2021 at 11:07:08PM +0200, Hrvoje Popovski wrote: > >> On 7.7.2021. 22:36, Vitaliy Makkoveev wrote: > >>> Thanks. ipsp_spd_lookup() stopped panic in pool_get(9). > >>>

Re: /etc/ssl/cert.pem doesn't need to be unveiled on ntpd(8)

2021-07-08 Thread Ricardo Mestre
my eyes may be tricking me, but it looks like the main proc doesn't speak with sockets during the main loop and setpriority plus privdrop at this point are all set and done so pledge("inet id") are not required. I have it running for a couple of hours now without issues so far so is this change

Re: /etc/ssl/cert.pem doesn't need to be unveiled on ntpd(8)

2021-07-08 Thread Klemens Nanni
On Thu, Jul 08, 2021 at 08:43:30AM +0100, Ricardo Mestre wrote: > /etc/ssl/cert.pem is loaded into mem with tls_load_file(3) on local function > priv_constraint_child() which is called before we reach the code below, > therefore we don't need to unveil(2) it nor having pledge(2) "rpath". OK kn

/etc/ssl/cert.pem doesn't need to be unveiled on ntpd(8)

2021-07-08 Thread Ricardo Mestre
Hi, /etc/ssl/cert.pem is loaded into mem with tls_load_file(3) on local function priv_constraint_child() which is called before we reach the code below, therefore we don't need to unveil(2) it nor having pledge(2) "rpath". Comments? OK? Index: ntpd.c

update xf86-video-amdgpu to latest git

2021-07-08 Thread Jonathan Gray
The latest xf86-video-amdgpu release was in 2019. xf86-video-amdgpu-19.1.0..origin/master minus commits we already have cb27a5b Handle NULL fb_ptr in pixmap_get_fb e2cd67a Bail from amdgpu_pixmap_get_handle with ShadowFB edcbe5f Fix link failure with gcc 10 With a X_PRIVSEP path added to

Re: forwarding in parallel with ipsec panic

2021-07-08 Thread Hrvoje Popovski
On 8.7.2021. 0:10, Vitaliy Makkoveev wrote: > On Wed, Jul 07, 2021 at 11:07:08PM +0200, Hrvoje Popovski wrote: >> On 7.7.2021. 22:36, Vitaliy Makkoveev wrote: >>> Thanks. ipsp_spd_lookup() stopped panic in pool_get(9). >>> >>> I guess the panics continue because simultaneous modifications of >>>