select(2) nit

2012-02-12 Thread Joachim Schipper
The sample code given in the BUGS section of select(2) contains an unnecessary cast. Joachim Index: select.2 === RCS file: /usr/cvs/src/src/lib/libc/sys/select.2,v retrieving revision 1.28 diff -u -p -r1.28 select.2

Xsearch(3) nit

2012-02-12 Thread Joachim Schipper
bsearch(3), tsearch(3) contains some superfluous spaces. Joachim Index: bsearch.3 === RCS file: /usr/cvs/src/src/lib/libc/stdlib/bsearch.3,v retrieving revision 1.7 diff -u -p -r1.7 bsearch.3 --- bsearch.3 31 May

Re: iwn0 firmware errors

2012-02-12 Thread Joachim Schipper
On Sun, Feb 12, 2012 at 08:58:31PM +, Edd Barrett wrote: On Sun, Feb 12, 2012 at 09:24:17PM +0100, Sebastian Benoit wrote: i was using a x61s until a month ago. I had these errors too, but only with certain wifi networks (specifically 2 events with 30+ access points and 1000+ wifi

uname(3) return values

2011-04-18 Thread Joachim Schipper
The uname(3) man page suggests that checking the return value against -1 makes sense. That is not the case: On Sun, Apr 03, 2011, Ingo Schwarze wrote to the mandoc mailing list: Yuri Pankov wrote: uname(2) on Solaris (...) states: RETURN VALUES Upon successful completion, a

Re: sparc64, hardware timer, security/botan

2011-03-25 Thread Joachim Schipper
On Fri, Mar 25, 2011 at 01:36:13PM +0100, Mark Kettenis wrote: Date: Tue, 15 Mar 2011 14:22:16 +0100 From: Aleksander Piotrowski a...@openbsd.org i have signal 4, Illegal instruction crash on sparc64 with security/botan (required by newer devel/monotone). it looks like they are trying to

Re: Syslogd: Adding log sockets that are only writeable by a single group

2011-02-21 Thread Joachim Schipper
On Sat, Feb 19, 2011 at 10:17:21PM -0500, Eric wrote: On Sun, Feb 13, 2011 at 8:45 PM, Philip Guenther guent...@gmail.com wrote: On Sun, Feb 13, 2011 at 8:27 AM, Eric airu...@gmail.com wrote: On (...) Philip Guenther guent...@gmail.com wrote: (...) if you're intending that this should

Re: IMPORTANT: video reposting diff

2011-02-18 Thread Joachim Schipper
On Sat, Feb 12, 2011 at 04:16:19AM +0200, Paul Irofti wrote: On Sat, Feb 12, 2011 at 03:33:35AM +0200, Paul Irofti wrote: Please everyone test the following diff even if video reposting *works* for you at the moment. And everyone with a non-working video reposting card that *isn't* nvidia

Re: Allegations regarding OpenBSD IPSEC

2010-12-22 Thread Joachim Schipper
On Wed, Dec 22, 2010 at 04:29:59PM +0100, Kurt Knochner wrote: 2010/12/22 Theo de Raadt dera...@cvs.openbsd.org: Go ahead, do a FIPS check on it. You will be doing a FIPS check on 4096 bytes here, then a gap of unknown length, then 4096 bytes here, then a gap of unknown length, then 4096

Re: Allegations regarding OpenBSD IPSEC

2010-12-21 Thread Joachim Schipper
On Tue, Dec 21, 2010 at 01:33:46PM -0700, Theo de Raadt wrote: - Instead of XOR'ing the results of nanotime into the buffer, XOR MD5(time), MD5(time + 1ns), MD5(time + 2ns) etc into the buffer. This does not increase entropy, but having more-or-less uncorrelated data in the entire

Re: Allegations regarding OpenBSD IPSEC

2010-12-21 Thread Joachim Schipper
On Tue, Dec 21, 2010 at 01:33:46PM -0700, Theo de Raadt wrote: I do not understand what hashing principle you are basing this on. On closer reflection, neither do I (MD5 in CTR mode? Cute, but not necessarily a good idea). Can we just pretend I never sent that message? Joachim

Re: Improving early randomness (was: Allegations regarding OpenBSD IPSEC)

2010-12-21 Thread Joachim Schipper
On Tue, Dec 21, 2010 at 01:24:55PM -0700, Kjell Wooding wrote: MD5(time), MD5(time + 1ns), MD5(time + 2ns) etc into the buffer. This does not increase entropy, but having more-or-less uncorrelated data in the entire buffer should make attacks more difficult. No. Unless you know something I

Re: Allegations regarding OpenBSD IPSEC

2010-12-16 Thread Joachim Schipper
On Wed, Dec 15, 2010 at 07:04:27PM +, Kevin Chadwick wrote: Jason L. Wright ja...@thought.net wrote: I cannot fathom his motivation for writing such falsehood The real work on OCF did not begin in earnest until February 2000. I can't see how this gives you credibility but maybe the

Re: slower logins

2010-12-16 Thread Joachim Schipper
On Wed, Dec 15, 2010 at 09:42:52PM -0700, Bob Beck wrote: I don't mind [increasing the number of Blowfish rounds] if the eventual goal is to think about diddling with it per arch.. I certainly do NOT want a 2^11 blowfish password when logging into my sparc Why not? An attacker can, after

Re: slower logins

2010-12-16 Thread Joachim Schipper
On Thu, Dec 16, 2010 at 08:14:06AM -0700, Bob Beck wrote: Why not? An attacker can, after all, brute-force your password on a machine of his choice. Silently decreasing the number of rounds on older architectures surprises the user in a way that can lead to password compromise (My password

Re: hotplug(4) r1.10 ignoring hotplug_put_event() prior to hotplugopen() [Was: hotplugd(8) ignoring devices attached before boot]

2010-12-14 Thread Joachim Schipper
On Mon, Dec 13, 2010 at 09:27:51PM +0100, Mark Kettenis wrote: From: Ted Unangst ted.unan...@gmail.com On Mon, Dec 13, 2010 at 7:41 AM, Mark Kettenis mark.kette...@xs4all.nl wrote: (...) I don't really agree with Tedu that the changed behaviour is an improvement. Say I have

Re: apmd action scripts

2010-12-02 Thread Joachim Schipper
On Wed, Dec 01, 2010 at 11:05:03PM +0100, Holger Mikolon wrote: Hi tech@ ! A couple of times now I didn't notice when my laptop battery reached the 0% remaining capacity. I am not aware of any tool in base that could issue a beep or nice sound in case of critical battery. Currently, apmd

Re: allow bioctl to read passphrase from stdin

2010-11-30 Thread Joachim Schipper
On Mon, Nov 29, 2010 at 02:22:35PM -0800, Chris Kuethe wrote: Currently bioctl invokes readpassphrase(3) with RPP_REQUIRE_TTY, which means that there must be a controlling tty to read the password from. This diff adds an option (-s) to force bioctl to read the passphrase from stdin. Without

random(4) clarifications (was: How to use /dev/srandom)

2010-10-01 Thread Joachim Schipper
On Wed, Sep 29, 2010, Theo de Raadt wrote to m...@openbsd.org: [Ted Unangst wrote: -- Joachim] On Wed, Sep 29, 2010 at 12:49 PM, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote: [Joachim Schipper wrote: -- Joachim] And isn't srandom sometimes (very rarely!) appropriate? E.g

fuser(1): -MN are also extensions to POSIX

2010-09-24 Thread Joachim Schipper
The fuser(1) man page mentions that -ks are extensions to POSIX. This is true, but so are -MN; add them. (Compare e.g. http://www.opengroup.org/onlinepubs/009695399/utilities/fuser.html.) Joachim Index: fuser.1 ===

Re: find(1) manpage patch

2010-09-14 Thread Joachim Schipper
On Tue, Sep 14, 2010 at 04:35:24AM +0100, Stuart Henderson wrote: On 2010/09/14 01:48, Ingo Schwarze wrote: I like most of this, one thing though, I like those tweaks too; thanks Ingo! +This is dangerous in conjunction with +.Xr xargs 1 , +see +.Sx CAVEATS . This is also dangerous

Re: find(1) manpage patch (was: system/6462: find(1) -print wtf [non-bug])

2010-09-14 Thread Joachim Schipper
On Tue, Sep 14, 2010 at 02:48:01PM +0100, Jason McIntyre wrote: On Tue, Sep 14, 2010 at 01:42:17PM +0200, Joachim Schipper wrote: On Mon, Sep 13, 2010 at 08:01:28PM +0100, Jason McIntyre wrote: On Mon, Sep 13, 2010 at 02:49:58PM +0200, Joachim Schipper wrote: The first diff changes

find(1) manpage patch (was: system/6462: find(1) -print wtf [non-bug])

2010-09-13 Thread Joachim Schipper
On Mon, Sep 13, 2010 at 09:55:17AM +0200, Joachim Schipper wrote: On Thu, Sep 09, 2010 at 10:15:01PM -0600, Tim Chase wrote: On 09/09/10 20:37, d...@mindrot.org wrote [lightly edited]: $ touch foo.orig foo.rej $ find . -type f -name \*.orig -or -name \*.rej ./foo.orig ./foo.rej

tty(4) nit

2010-07-31 Thread Joachim Schipper
Remove a redundant comma in tty(4). Joachim Index: tty.4 === RCS file: /usr/cvs/src/src/share/man/man4/tty.4,v retrieving revision 1.36 diff -u -p -r1.36 tty.4 --- tty.4 13 Apr 2010 20:38:26 - 1.36 +++

Re: Colemak layout?

2010-07-25 Thread Joachim Schipper
On Sun, Jul 25, 2010 at 03:11:17PM +0300, Timo Myyrd wrote: Why the colemak layout hasn't found its way to base? There has been a diff to add support but apparently it didn't made into base for some reason. Because it uses precious kernel memory for very little gain. Search the archives.

Re: Patch for bogus pointer arithmetic in adw(4)

2010-06-23 Thread Joachim Schipper
On Tue, Jun 22, 2010 at 03:40:44PM -0300, Hudson Flavio V Mateus wrote: Is there any reson you use bcopy() not memcpy()? If not considder using memcpy() please. :) We couldn't care what you believe, unless you have diffs of your own to submit. I think the guy there asked if there is

Re: typo sys/conf/GENERIC

2010-05-12 Thread Joachim Schipper
On Wed, May 12, 2010 at 07:49:54AM -0700, J.C. Roberts wrote: On Wed, 12 May 2010 14:36:08 +0200 Joachim Schipper joac...@joachimschipper.nl wrote: On Wed, May 12, 2010 at 03:01:50AM -0700, J.C. Roberts wrote: minor typo It's meant to be interface; following ifconfig(8), one could say

[patch] vis(3): NUL terminate - NUL-terminate

2010-04-23 Thread Joachim Schipper
I noticed that vis(3) talks about NUL terminated strings, whereas almost other sources (including e.g. strlcat(3), strtok(3), strpbrk(3)) talk about NUL-terminated strings (i.e. with a hyphen.) The following patch fixes this. Joachim Index: vis.3

Re: save some entropy

2009-12-15 Thread Joachim Schipper
On Mon, Dec 14, 2009 at 09:58:19AM +0100, Otto Moerbeek wrote: On Wed, Dec 02, 2009 at 10:38:10AM +0100, Otto Moerbeek wrote: [A]part from the random page addresses obtained form mmap(2) malloc(3) itself also randomizes cache en chunk operations. It uses a nibble of randomness per call, so