Re: syscall call-from verification

2019-11-30 Thread Pavel Korovin
I missed the point, sorry. What I mean that without the patch, lang/go and go ports are fine on -current. On 11/30, Christian Weisgerber wrote: > Pavel Korovin: > > > In my partial dpb build, lang/go goes fine. > > My amd64 snapshot was custom-built from sources, dated 2019-11-30 ~02 a.m. > > ..

libressl: Allow custom config location

2019-11-30 Thread Mikhail Novosyolov
Hi, I was packaging LibreSSL for a GNU/Linux distro (ROSA) and had to slightly patch it to adopt for needed usage scenario. I wanted LibreSSL to: - coexist with OpenSSL - be installed into /opt - do not conflict with OpenSSL devel packages - use /etc/ssl (/etc/pki/tls in ROSA) from OpenSSL Fo

Add sizes for free() in auvia(4)

2019-11-30 Thread Frederic Cambus
Hi tech@, Here is a diff to add sizes for free() in auvia(4). Comments? OK? Index: sys/dev/pci/auvia.c === RCS file: /cvs/src/sys/dev/pci/auvia.c,v retrieving revision 1.59 diff -u -p -r1.59 auvia.c --- sys/dev/pci/auvia.c 14 Sep 20

Re: syscall call-from verification

2019-11-30 Thread Christian Weisgerber
Pavel Korovin: > In my partial dpb build, lang/go goes fine. > My amd64 snapshot was custom-built from sources, dated 2019-11-30 ~02 a.m. ... and obviously without Theo's patch to sys/kern/exec_elf.c from earlier in this thread. -- Christian "naddy" Weisgerber na...@mip

Re: syscall call-from verification

2019-11-30 Thread Pavel Korovin
In my partial dpb build, lang/go goes fine. My amd64 snapshot was custom-built from sources, dated 2019-11-30 ~02 a.m. go ports (net/mattermos-server, sysutils/beats/filebeat, www/gitea) are functional. On 11/30, Christian Weisgerber wrote: > > I'm running an amd64 bulk build with this. > > The

Re: syscall call-from verification

2019-11-30 Thread Christian Weisgerber
On 2019-11-30, Christian Weisgerber wrote: >> If other things are broken, we need accurate reports instead of drama. >> The commited diff allows main-program-syscall in dynamic binaries until >> go is fixed. >> >> Here's a kernel diff which will expose such problems, by removing that >> permissi

iked(8): deduplicate flows sent in traffic selectors

2019-11-30 Thread Tobias Heider
Hi, currently iked and the kernel treat flows as pair of source and destination networks. The downside is that it is not possible to specify a 1-to-n relation without repeating the source network. The IKEv2 protocol on the other hand uses traffic selectors to describe source and destination nets

Re: syscall call-from verification

2019-11-30 Thread Christian Weisgerber
On 2019-11-29, "Theo de Raadt" wrote: > If other things are broken, we need accurate reports instead of drama. > The commited diff allows main-program-syscall in dynamic binaries until > go is fixed. > > Here's a kernel diff which will expose such problems, by removing that > permission. I'm ru

unwind(8): unified cache

2019-11-30 Thread Florian Obser
So far all libunbound based resolvers had their own cache. That's a bit wasteful and slows things down unecessarily when we need to switch between strategies. This lets all of them run off of the same cache. otto@ already pointed out that there might be situations where we would need to drop the