On Tue, Sep 19, 2017 at 22:35 +0200, Mike Belopuhov wrote:
> Keeping all of what Reyk said in mind, here's an updated diff that
> incorporates additional changes:
>
> 1) doesn't break i386 kernel compilation;
>
> 2) allows for multiple recalibrations using better timecounter
> sources since acpih
On Thu, Sep 14, 2017 at 15:41 +0200, Reyk Floeter wrote:
> I'd like to raise another point: as we figured out, the TSC frequency
> can be different than the CPU frequency on modern Intel CPUs. The
> const+invar TSC can even run faster than the CPU.
>
> For example, my X1 4th Gen currently boots u
This patch adapts hidmt - which is used by imt(4) - to the multitouch
interface of wsmouse, and it adds the compat-mode configuration required
by the wsmouse-internal touchpad input driver.
Tests with both the synaptics driver and the internal driver would be
appreciated (see https://marc.info/?l=
Sorry, If I have not made it clear.
It is supposed to *help* an expert not to *replace* one.
This could help an expert prioritize picking up patches so that the easy
patches could be applied without much testing.
On Tue, Sep 19, 2017 at 12:30 PM, Theo de Raadt wrote:
> Yeah we'll rely upon it
Yeah we'll rely upon it if you put up a (minimum) $100,000 bond
which pays out the first time the software makes a mistake which
introduces risk and someone is potentially holed...
Who needs expert review, right?
> Hi Developer and maintainers,
>
> We (researchers for UC Santa Barbara) are devel
Hi Developer and maintainers,
We (researchers for UC Santa Barbara) are developing a tool that will help
in propagating patches.
Please, It would be great if you can fill a 2-question anonymous survey:
https://goo.gl/forms/5cBSx4axKmc8BEtA3
Would you be interested in a tool, which identifies pa
Finally, the last part..
Drop root privileges in the monitor process before we service any DNS
lookups for the parser process, and if we know beforehand that we never
will, chroot(2).
-Bryan.
diff -Nru tcpdump_orig/privsep.c tcpdump/privsep.c
--- usr.sbin/tcpdump/privsep.c Tue Sep 19 13:31:52 2
We can now pledge(2) "stdio bpf" when using tcpdump '-n' (don't convert
addresses to names), or when writing packet captures to stdout '-w -',
removing the "rpath" promise.
In the normal use case, the pledge(2) now becomes "stdio rpath dns bpf"
'rpath' is still needed to handle late opening of /e
Remove the internal privsep "getline" code, which was passing lines over
the socketpair, this was used previously to load the pf.os fingerprints
for the unpriv process, replaced by explicit descriptor passing.
-Bryan.
diff -Nru tcpdump_orig/privsep.c tcpdump/privsep.c
--- usr.sbin/tcpdump/privsep
My last diff was too big, here's an attempt to split it up for easier
review. Please apply them in order.
This hoists opening pf.os(5) fingerprints '-o' from the 'RUN' state to
the 'FILTER' state, this will allow for a reduced pledge(2) at runtime
in the monitor process.
-Bryan.
Index: pfctl_osf
OK
On 2017 Sep 19 (Tue) at 16:54:04 +1000 (+1000), David Gwynne wrote:
:this helsp if you want to have a tap interface joined to a bridge
:on boot.
:
:ok?
:
:Index: netstart
:===
:RCS file: /cvs/src/etc/netstart,v
:retrieving revision
11 matches
Mail list logo
