Re: pledge(2) hangman(6)

2015-10-20 Thread Doug Hogan
On Tue, Oct 20, 2015 at 09:04:51PM +0100, Ricardo Mestre wrote: > Let's give some pledge(2) love to hangman(6)! > > It seems to work fine for me with the patch mentioned below, nevertheless > please be aware that I don't consider myself a developer, just a mere > OpenBSD user with 'security uncle

Re: Unlocking ix(4) a bit further

2015-10-20 Thread Hrvoje Popovski
On 16.10.2015. 20:30, Mark Kettenis wrote: >> Date: Fri, 16 Oct 2015 14:13:52 +0200 >> From: Martin Pieuchot >> >> On 08/10/15(Thu) 20:49, Mark Kettenis wrote: Date: Wed, 30 Sep 2015 14:30:11 +0200 (CEST) From: Mark Kettenis Since people seemed to like my diff for em(4), here

A couple of style(9) tweaks

2015-10-20 Thread Ilya Kaliman
=== RCS file: /cvs/src/bin/ed/main.c,v retrieving revision 1.53 diff -u -p -r1.53 main.c --- bin/ed/main.c 9 Oct 2015 21:24:05 - 1.53 +++ bin/ed/main.c 20 Oct 2015 22:49:53 - @@ -174,7 +174,7 @@ top: s

Re: make iked not static

2015-10-20 Thread Stuart Henderson
On 2015/10/20 23:00, Sebastian Benoit wrote: > Christian Weisgerber(na...@mips.inka.de) on 2015.10.20 20:46:12 +: > > On 2015-10-20, Reyk Floeter wrote: > > > > > For historical reasons, isakmpd and iked are compiled static: > > > people used NFS over ipsec. isakmpd is an odd one. Reading cv

Re: make iked not static

2015-10-20 Thread Sebastian Benoit
Christian Weisgerber(na...@mips.inka.de) on 2015.10.20 20:46:12 +: > On 2015-10-20, Reyk Floeter wrote: > > > For historical reasons, isakmpd and iked are compiled static: > > people used NFS over ipsec. > > > > Is anyone still using this? Is it more than one person? > > > > Otherwise I'd su

Re: make iked not static

2015-10-20 Thread Christian Weisgerber
On 2015-10-20, Reyk Floeter wrote: > For historical reasons, isakmpd and iked are compiled static: > people used NFS over ipsec. > > Is anyone still using this? Is it more than one person? > > Otherwise I'd suggest to make iked dynamic. Already, iked is started after /usr has been mounted, so w

accept 39B9-1135-C247

2015-10-20 Thread Ricardo Mestre
accept 39B9-1135-C247

pledge(2) hangman(6)

2015-10-20 Thread Ricardo Mestre
Hi tech@! Let's give some pledge(2) love to hangman(6)! It seems to work fine for me with the patch mentioned below, nevertheless please be aware that I don't consider myself a developer, just a mere OpenBSD user with 'security uncle syndrome' :D That being said please don't beat me to death

pledge(2) hangman(6)

2015-10-20 Thread Ricardo Mestre
Hi tech@! Let's give some pledge(2) love to hangman(6)! It seems to work fine for me with the patch mentioned below, nevertheless please be aware that I don't consider myself a developer, just a mere OpenBSD user with 'security uncle syndrome' :D Index: src/games/hangman/main.c =

make iked not static

2015-10-20 Thread Reyk Floeter
Hi, For historical reasons, isakmpd and iked are compiled static: people used NFS over ipsec. Is anyone still using this? Is it more than one person? Otherwise I'd suggest to make iked dynamic. (btw., isakmpd is a bit special since it needs the ipsecctl dance, so I am not touching it - I'm a b

Re: [patch] tcpdump segfault on invalid DECnet packet

2015-10-20 Thread Stuart Henderson
On 2015/10/14 11:11, Kevin Reay wrote: > Thanks for the review and feedback. > Updated patch with removed whitespace changes included. This is fine with me. Any OKs to commit it? > Index: print-decnet.c > === > RCS file: /cvs/src/us

fcntl F_SETOWN pipe

2015-10-20 Thread Alexander Bluhm
Hi, Setting fcntl(F_SETOWN) for a pipe does not work. fcntl F_SETOWN: Inappropriate ioctl for device In sys_fcntl() the ioctl(TIOCSPGRP) is called, but the pipe expects SIOCSPGRP. Sockets have a specal case for the same reason. I would prefer that socketpair and pipe behave identical, so I have

openssl.cnf req defaults -> default_md sha256

2015-10-20 Thread Brent Cook
U On Tue, Oct 20, 2015 at 12:12 AM, Jonathan Gray > wrote: > On Wed, Oct 01, 2014 at 10:53:34AM +0100, Stuart Henderson wrote: >> On 2014/10/01 19:05, Joel Sing wrote: >> > > I should also add that the other obvious/easy "fix" is to initialise digest >> > > in openssl/req.c to the SHA-256 EVP. Tha

pledge support for renice

2015-10-20 Thread Theo Buehler
renice(1) needs "proc" for {get,set}priority and in addition it needs "getpw" throughout option parsing for getpwnam and getpwuid. Drop "getpw" as soon as possible. Index: renice.c === RCS file: /var/cvs/src/usr.bin/renice/renice.c,v

Re: pledge(2) in script(1)

2015-10-20 Thread Sebastien Marie
On Tue, Oct 20, 2015 at 12:18:07PM +0200, Theo Buehler wrote: > On Tue, Oct 20, 2015 at 11:45:59AM +0200, Jan Stary wrote: > > My script(1) just got killed with > > > > script(15938): syscall 37 > > Can you provide a reproducible test case? What did you do? > syscall 37 is SYS_kill: $ grep

Re: nsd 4.1.6rc1

2015-10-20 Thread Stuart Henderson
On 2015/10/15 17:03, Todd C. Miller wrote: > On Thu, 15 Oct 2015 22:50:44 +0100, Stuart Henderson wrote: > > > It does not build as-is, there's an issue with "c_get_text" (a renamed > > yyget_text) with our version of flex. I have two possible workarounds > > so far but neither is particularly nic