Re: 7.3: Squid 6.3 with multiple workers - net.unix.dgram.sendspace too low

2023-10-21 Thread Stuart Henderson
On 2023/10/21 09:31, Silamael Darkomen wrote: > On 20 Oct 2023 19:33, Stuart Henderson wrote: > > After a few hours digging around, I eventually figured out where the > > relevant sockets are created and have added a patch (to 7.4-stable and > > -current) to bump buffers on

Re: 7.3: Squid 6.3 with multiple workers - net.unix.dgram.sendspace too low

2023-10-20 Thread Stuart Henderson
After a few hours digging around, I eventually figured out where the relevant sockets are created and have added a patch (to 7.4-stable and -current) to bump buffers on them.

Re: 7.3: Squid 6.3 with multiple workers - net.unix.dgram.sendspace too low

2023-10-20 Thread Stuart Henderson
On 2023/10/20 13:57, Stuart Henderson wrote: > On 2023/10/19 15:09, Silamael Darkomen wrote: > > Hi, > > > > Today I upgraded to the brand new Squid version 6.3 from ports and noticed, > > that Squid no longer starts properly if configured with multiple worker > &g

Re: 7.3: Squid 6.3 with multiple workers - net.unix.dgram.sendspace too low

2023-10-20 Thread Stuart Henderson
On 2023/10/19 15:09, Silamael Darkomen wrote: > Hi, > > Today I upgraded to the brand new Squid version 6.3 from ports and noticed, > that Squid no longer starts properly if configured with multiple worker > processes. > > After some debugging the limit from net.unix.dgram.sendspace came up as >

Re: HAMMER2 filesystem for OpenBSD

2023-10-20 Thread Stuart Henderson
On 2023/10/20 11:51, Chris Narkiewicz wrote: > On Thu, 2023-10-19 at 15:03 +0200, Denis Fondras wrote: > > > > https://marc.info/?l=openbsd-misc=169272174500676=2 > > > > > > Thank you, I missed that one. > > So the key piece of information from that thread is that > Kusumi's implementation

Re: smtpd: implement nullmx RFC 7505

2023-10-18 Thread Stuart Henderson
On 2023/10/17 22:27, Philipp wrote: > [2023-10-17 17:32] Omar Polo > > > > There is one part of the RFC7505 that I'd like to quote and discuss > > with you however. The last paragraph of the section 3 says: > > > > : A domain that advertises a null MX MUST NOT advertise any other MX > > : RR. >

Re: CVS: cvs.openbsd.org: src

2023-10-10 Thread Stuart Henderson
On 2023/10/09 14:55, Todd C. Miller wrote: > CVSROOT: /cvs > Module name: src > Changes by: mill...@cvs.openbsd.org 2023/10/09 14:55:33 > > Modified files: > usr.sbin/smtpd : smtp_session.c > > Log message: > Add Message-Id as needed for messages received on the submission port. >

Re: xenodm greeter pixmaps

2023-10-03 Thread Stuart Henderson
On 2023/10/03 13:47, Paianis wrote: > I wanted some cleaner pixmaps of the logo for the login greeter than > those currently in the tree, so I remade them from the PDFs that used to > be on the website, using mutool and imagemagick's convert. > > The low-color and greyscale versions are untested

Re: [newvers] sysupgrade(8) -release to -beta narrow of sets version

2023-09-26 Thread Stuart Henderson
On 2023/09/26 11:04, Eponymous Pseudonym wrote: > There is a small window of mixed version sets at the newvers tagging > from release to beta, likely due to the way currently mirrors are > clearing the previous and syncing during that automatically (not > signalled). There will be another one

Re: [patch] Sort of fix for game "phantasia"

2023-09-18 Thread Stuart Henderson
On 2023/09/18 23:38, S V wrote: > === > RCS file: /cvs/src/games/phantasia/misc.c,v > retrieving revision 1.21 > diff -u -p -r1.21 misc.c > --- games/phantasia/misc.c10 Jan 2016 13:35:10 - 1.21 > +++

Re: rc.d/unbound: enable configtest

2023-09-16 Thread Stuart Henderson
On 2023/09/16 14:26, Bjorn Ketelaars wrote: > Currently /etc/rc.d/unbound only checks a configuration (using > unbound-checkconf) upon starting as part of rc_pre(). It would would be > nice to have a configtest, which checks a configuration before > restarting/reloading as well. > > I recently

Re: [feature] ssh-agent: new -A option (like -a) that overwrites existing sockets

2023-09-14 Thread Stuart Henderson
On 2023/09/14 11:55, Moritz Fain wrote: > > My initial reaction is that it's easy to run "rm -f" before starting > > the agent with the existing "-a" option. same. also if there's an existing agent running you probably don't want to blindly remove the socket - and as the manual says "The sockets

Re: ps.1/kvm documentation

2023-09-11 Thread Stuart Henderson
-H is userland threads, -k is kernel threads. I guess "kernel visible" was to distinguish between the old uthread where threads were handled in userland and not visible to the kernel, and rthread ... -- Sent from a phone, apologies for poor formatting. On 11 September 2023 10:02:32 Marc

Re: [OpenSMTPD] Setting personal mailserver

2023-09-10 Thread Stuart Henderson
On 2023/09/09 13:49, Sagar Acharya wrote: > Thanks Peter, your comments were very helpful and I made some progress > > I have currently hosted server at 587. I have also set > > _submission._tcp.humaaraartha.in. SRV > > records which point to 587. However, I think such a thing is not

Re: btop++

2023-09-04 Thread Stuart Henderson
On 2023/09/04 11:13, Jos Dehaes wrote: > How could we go about including this in OpenBSD (ports or native package)? it would need to be added as a port, then packages will be built. ports cannot be built with gcc 11 (gcc 8 and 11 can't be installed together and other ports require gcc 8). so

Re: sshd: reduce preauth log verbosity

2023-08-18 Thread Stuart Henderson
On 2023/08/18 17:39, Tobias Heider wrote: > Hi, > > I was looking at my authlog today and as expected on a server exposed on the > public internet it is filled with random scanners and brute force attacks. > One thing I noticed is that there is a lot of information we log multiple > times for a

Re: [PATCH] Implement ext2 incompat feature 64-bit

2023-08-16 Thread Stuart Henderson
On 2023/08/15 18:16, Vladimir 'phcoder' Serbinenko wrote: > Did I do something wrong and should send it to another list, CC someone or > did I do something stupid? 64-bit incompat feature is enabled on new ext4's > by default, at least on Ubuntu It's the right list. However as ext2fs support is

Re: Have sysupgrade run fw_update -vv

2023-08-13 Thread Stuart Henderson
On 2023/08/13 11:44, Andrew Hewus Fresh wrote: > My laptop doesn't have the fastest wifi and sysupgrade already uses a > progress bar to show what it's doing, so I'd really like to provide more > feedback on what it is doing: Does a single -v give enough feedback? It's a fair bit quieter (it

Re: Virtio fix for testing

2023-08-13 Thread Stuart Henderson
On 2023/08/13 16:10, Andrew Cagney wrote: > On Sun, 13 Aug 2023 at 11:38, Tobias Heider wrote: > > > > On Sun, Aug 13, 2023 at 08:33:54AM -0400, Andrew Cagney wrote: > > > > Hi Andrew, > > > > > > > > can you share the qemu cmd you are using in your tests? > > > > I'd like to see if I can

Re: httpd server "default" is not what I expected

2023-08-13 Thread Stuart Henderson
On 2023/08/13 11:13, Omar Polo wrote: > @@ -179,7 +179,8 @@ section starts with a declaration of the server > Each > .Ic server > section starts with a declaration of the server > -.Ar name : > +.Ar name . > +If no one matches the request the first one defined is used. > .Bl -tag -width Ds >

Re: [diff] selectable curves in smtpd ?

2023-08-12 Thread Stuart Henderson
On 2023/08/12 19:07, Marc Espie wrote: > On Sat, Aug 12, 2023 at 03:21:00PM +, gil...@poolp.org wrote: > > August 12, 2023 4:34 PM, "Theo Buehler" wrote: > > > > > On Sat, Aug 12, 2023 at 02:29:45PM +, gil...@poolp.org wrote: > > > > > >> Hello, > > >> > > >> Someone asked about

Re: Virtio fix for testing

2023-08-12 Thread Stuart Henderson
On 2023/08/12 13:16, Andrew Cagney wrote: > Ref: https://marc.info/?l=openbsd-tech=168458764424059=2 > https://marc.info/?l=openbsd-misc=168071258109433=2 > > I'm trying to update libreswan's automated test framework so that it > creates an OpenBSD 7.3 test VM using install7.3.iso. Unfortunately

Re: installer: disk crypto: crank KDF rounds to hardware based default

2023-08-11 Thread Stuart Henderson
On 2023/08/11 16:43, Mark Kettenis wrote: > > Date: Fri, 11 Aug 2023 11:13:23 + > > From: Klemens Nanni > > > > On Mon, May 08, 2023 at 11:00:27AM +, Klemens Nanni wrote: > > > On Sun, Apr 23, 2023 at 05:07:30PM +, Klemens Nanni wrote: > > > > For new installs, it seems adequate to

Re: standardize and simplify GitHub submodule handling in ports?

2023-08-07 Thread Stuart Henderson
On 2023/08/07 14:53, Thomas Frohwein wrote: > On Mon, Aug 07, 2023 at 06:59:15PM +0100, Stuart Henderson wrote: > [...] > > > I haven't looked at other ports, but asterisk, vim and vmm-firmware do > > not use git submodules. > > With vim, it's the way colorscheme

Re: standardize and simplify GitHub submodule handling in ports?

2023-08-07 Thread Stuart Henderson
On 2023/08/07 12:44, Thomas Frohwein wrote: > I tested this with the about 30 ports I could identify that use GitHub > submodules, by adjusting the Makefile to use GH_SUBMODULES. Here a few > points from what I've observed: .. > > The full table of what I tested and the result up to if the port

Re: add extract example to tar(1) man page

2023-08-03 Thread Stuart Henderson
On 2023/08/03 07:23, Jason McIntyre wrote: > On Wed, Aug 02, 2023 at 05:52:02PM -0400, aisha wrote: > > Hi, > > Someone - https://www.youtube.com/watch?v=NQ5uD5x8vzg - mentioned that > > our man page for tar(1) doesn't have an extract example, so I thought it > > would be good to add a simple

cron -n/-s/-q whitespace and /etc/crontab

2023-07-19 Thread Stuart Henderson
When /etc/crontab is used, cron only skips over a single whitespace character between the username and -n/-s/-q flags; more than one and the flag is taken as part of the command: printf '*\t*\t*\t*\t*\tnobody\t-n true 1\n' | doas tee -a /etc/crontab printf '*\t*\t*\t*\t*\tnobody\t\t-n true 2\n' |

Re: Stop using direct syscall(2) from perl(1)

2023-07-13 Thread Stuart Henderson
On 2023/07/13 00:57, George Koehler wrote: > On Sun, 9 Jul 2023 13:29:58 -0700 > Andrew Hewus Fresh wrote: > > > Here is a patch to replace perl(1)'s use of syscall(2) with a dispatcher > > that will call the libc function instead. > > patch(1) didn't "chmod +x gen_syscall_emulator.pl", but I

Re: pf.os database /p0f

2023-07-04 Thread Stuart Henderson
On 2023/07/04 09:48, Solène Rapenne wrote: > On Tue, 2023-07-04 at 03:39 +, Lee, Jonathan D wrote: > > [cid:cd2efd41-42cb-4d83-9173-521bbb8f4539@namprd04.prod.outlook.com] > > > > Hello fellow software developers, > > > > I have noticed that p0f database files are not being updated. Many > >

Re: pkg_add optional behavior "like syspatch"

2023-07-02 Thread Stuart Henderson
On 2023/07/02 16:49, Solène Rapenne wrote: > On Sun, 2023-07-02 at 15:51 +0200, Marc Espie wrote: > > Use-case: some people want to branch automated installs based on > > whether > > pkg_add -u (or some other variation) actually did something. > > > > As usual we ignore quirks. This adds a flag

Re: Add Intel Wi-Fi 6 AX211 0x51f1 device

2023-06-27 Thread Stuart Henderson
On 2023/06/27 10:55, Stuart Henderson wrote: > I have this (AP is mikrotik hapax2 > 0x0001, country 'GB ', channel 36 limit 23dB, channel 40 limit > 23dB, channel 44 limit 23dB, channel 48 limit 23dB, channel 52 limit > 23dB, channel 56 limit 23dB, channel 60 limit 23dB, chan

Re: Add Intel Wi-Fi 6 AX211 0x51f1 device

2023-06-27 Thread Stuart Henderson
On 2023/06/27 10:55, Reyk Floeter wrote: > This works fine with my 11ac setup and performance seems OK (around > 200Mbps - what can I expect on OpenBSD these days?). I don't know if > the device supports UHB channels. That seems a little on the low side but in the right ballpark, I have this (AP

Re: ports: brz Distributed version control system based on bzr

2023-06-26 Thread Stuart Henderson
wrong mailing list, moved to ports@ & reply-to set. On 2023/06/24 23:02, Alfred Morgan wrote: > bzr got deleted from openbsd ports about 2 years ago (died along with > Python2). > https://cvsweb.openbsd.org/ports/devel/bzr/Attic/Makefile?only_with_tag=HEAD > bzr was superseded by brz but brz

[s...@spacehopper.org: ospf6d fib reload [Re: bgpd fix for possible crash in SE]]

2023-06-20 Thread Stuart Henderson
This hasn't blown up yet... any interest? - Forwarded message from Stuart Henderson - From: Stuart Henderson Date: Fri, 26 May 2023 14:40:45 +0100 To: tech@openbsd.org Subject: ospf6d fib reload [Re: bgpd fix for possible crash in SE] Mail-Followup-To: tech@openbsd.org On 2023/05/26

Re: reorder libssl and libtls at boot?

2023-06-17 Thread Stuart Henderson
On 2023/06/17 09:02, Theo de Raadt wrote: > I don't see a positive value:cost tradeoff here, where cost is "time during > boot, and potential for fragility in case of relink failure". + extra difficulty in debugging from core dumps.

Re: seq: fix check for rounding error/truncation

2023-06-12 Thread Stuart Henderson
On 2023/06/12 11:20, Todd C. Miller wrote: > We need to compare the printable version of the last value displayed, > not the floating point representation. Otherwise, we may print the > last value twice. > > Old: > > $ seq 105 105 > 1.05e+06 > 1.05e+06 > > New: > > $

ospf6d fib reload [Re: bgpd fix for possible crash in SE]

2023-05-26 Thread Stuart Henderson
On 2023/05/26 13:52, Stuart Henderson wrote: > I think my main issues come around LS_REFRESH_TIME intervals, when > there's loads of churn and "ospf6d: ospf engine" can be busy for > minutes at a time (not always, but very often). Don't know if that rings > any bells f

Re: bgpd fix for possible crash in SE

2023-05-26 Thread Stuart Henderson
On 2023/05/25 16:15, Claudio Jeker wrote: > On Thu, May 25, 2023 at 02:20:37PM +0100, Stuart Henderson wrote: > > On 2023/05/25 15:06, Claudio Jeker wrote: > > > sthen@ reported a bgpd SE crash to me and after inspection of the report > > > it looks like he m

Re: bgpd fix for possible crash in SE

2023-05-25 Thread Stuart Henderson
On 2023/05/25 15:06, Claudio Jeker wrote: > sthen@ reported a bgpd SE crash to me and after inspection of the report > it looks like he managed to trigger a mistake in session_process_msg(). > When for example a NOTIFICATION message is received then the state change > clears the rbuf. Now normally

Re: 443 udp for /etc/services

2023-05-25 Thread Stuart Henderson
On 2023/05/25 10:29, Tom Smyth wrote: > Folks, > > Can I suggest calling it quic as opposed to https I think it should follow the name in the IANA registry which uses https. > do we want PF Firewal to match https for TCP and UDP (for traditional) > servers that only require https TCP ... PF

443 udp for /etc/services

2023-05-25 Thread Stuart Henderson
- Forwarded message from Renaud Allard - From: Renaud Allard Date: Thu, 25 May 2023 10:48:24 +0200 To: po...@openbsd.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.9.0 Subject: Re: http3 in nginx On 5/24/23 18:01, Theo Buehler wrote: > This

Re: userdel: remove login group for =uid

2023-05-24 Thread Stuart Henderson
On 2023/05/24 20:00, Omar Polo wrote: > On 2023/05/19 10:24:58 -0600, Todd C. Miller wrote: > > If /etc/usermgmt.conf has a line like: > > > > group =uid > > > > where a new user's group ID in the passwd file is the same as their > > user ID, remove that group when the user is removed.

Re: changelist: add tmux.conf

2023-04-24 Thread Stuart Henderson
On 2023/04/24 16:24, Klemens Nanni wrote: > Would be nice to have a backup of it and track changes. > > OK? No? ok > Index: changelist > === > RCS file: /cvs/src/etc/changelist,v > retrieving revision 1.135 > diff -u -p -r1.135

Re: [patch] Avoid change of permissions in /etc/resolv.conf

2023-04-22 Thread Stuart Henderson
On 2023/04/21 20:23, Juan Picca wrote: > But maybe a less surprise config for /etc/login.conf can be: > > --- /etc/login.conf.orig > +++ /etc/login.conf > @@ -58,6 +58,7 @@ > # Be sure to reset these values to system defaults in the default class! > # > daemon:\ > + :umask=022:\ >

Re: efi(4): Support for EFI variables and tables in the kernel

2023-04-21 Thread Stuart Henderson
On 2023/04/21 12:32, Landry Breuil wrote: > Le Fri, Apr 21, 2023 at 09:27:35AM +0100, Stuart Henderson a écrit : > > On 2023/04/20 00:55, Mark Kettenis wrote: > > > > Date: Tue, 18 Apr 2023 19:11:40 +0300 > > > > From: Sergii Dmytruk > > > > >

Re: efi(4): Support for EFI variables and tables in the kernel

2023-04-21 Thread Stuart Henderson
On 2023/04/20 00:55, Mark Kettenis wrote: > > Date: Tue, 18 Apr 2023 19:11:40 +0300 > > From: Sergii Dmytruk > > > > Hi there, > > > > Pinging to say that this thread is silent for 3 months. EFI runtime and > > bootloader changes are there, /dev/efi is the last piece left to be > > committed

Re: [patch] Avoid change of permissions in /etc/resolv.conf

2023-04-21 Thread Stuart Henderson
On 2023/04/21 02:45, Juan Picca wrote: > On Thu, Apr 20, 2023 at 11:33:30PM -0600, Theo de Raadt wrote: > > But this situation does not arise, not in this program, and not in 20 other > > daemons. > > > > You changed something to cause this problem. > > Yes. > > I found a similar case in >

Re: em(4) multiqueue

2023-04-13 Thread Stuart Henderson
On 2023/04/13 16:45, Sonic wrote: > Is this multiqueue support in 7.3 or does it require patching? > According to Intel the i211 should have 2 queues but I see no msi-x > support in dmesg: > em0 at pci1 dev 0 function 0 "Intel I211" rev 0x03: msi, address It is not committed, there's a diff.

Re: em(4) multiqueue

2023-04-13 Thread Stuart Henderson
On 2023/04/13 13:30, Brian Conway wrote: > Reviving this thread, apologies for discontinuity in mail readers: > https://marc.info/?t=16564219358 > > After rebasing on 7.3, my results have mirrored Hrvoje's testing at the end > of that thread. No issues with throughput, unusual latency, or

Re: vmm firmware: omit datetime and hostname from version string

2023-04-06 Thread Stuart Henderson
On 2023/04/06 15:49, Klemens Nanni wrote: > bios0: vendor SeaBIOS version > "1.14.0-20230330_133212-symphytum.spacehopper.orgp2-OpenBSD-vmm" date > 01/01/2011 > > in dmesg is a weird concat of port version, datetime, hostname, > port revision, uname(?) and a fixed string(?) in that order. oh

Re: [PATCH] Add -executable, -readable, and -writable options to /usr/bin/find

2023-04-02 Thread Stuart Henderson
On 2023/03/31 19:40, Jared Harper wrote: > However, I had some difficulty finding the source of access(2) so I could not > vet by assumptions. see sys_access() in sys/kern/vfs_syscalls.c

Re: [PATCH] Add -executable, -readable, and -writable options to /usr/bin/find

2023-04-02 Thread Stuart Henderson
On 2023/04/01 11:27, Jared Harper wrote: > For some reason I haven't received the email from Solène (even after > requesting it re-sent on lists.openbsd.org; nor is it in spam; I will > look further into this issue), so I'm adding my reply in-line here: Solène's domain publishes a DMARC p=reject

Re: cd CDPATH is attempted before dir

2023-03-10 Thread Stuart Henderson
On 2023/03/10 13:31, Theo Buehler wrote: > > Other shells do not have this bug, such as bash, yash, mksh, ash, dash. mksh does behave the same way as OpenBSD's ksh. I tested a source build and the Debian package. > On the other hand, ksh93 behaves the same way as ksh. > > Obviously zsh has a

Re: rc.d.8: fix daemon_* markup

2023-03-07 Thread Stuart Henderson
On 2023/03/06 14:16, Klemens Nanni wrote: > 06.03.2023 13:49, Raf Czlonka пишет: > > To quote sthen@[0]: > > > > But that isn't, it is talking about _execdir, > > _flags, etc where you need to replace the > > > > [0] https://marc.info/?l=openbsd-tech=165364961710717=2 > > I find this

Re: rc.conf.8: list fsck_flags

2023-03-06 Thread Stuart Henderson
On 2023/03/06 13:10, Klemens Nanni wrote: > All relevant variables should be explained. > > Feedback? OK? > > Index: rc.conf.8 > === > RCS file: /cvs/src/share/man/man8/rc.conf.8,v > retrieving revision 1.31 > diff -u -p -r1.31

Re: /dev/full

2023-03-02 Thread Stuart Henderson
On 2023/03/02 10:50, Dave Voutila wrote: > Is this really a problem with ports? That Python issue was related to a > Python 2.7 unit test and from 2014. not really, no. there has been the odd patch over the years but nothing current (no more than 4 including the Python one).

Re: Authentication in OpenIKED

2023-03-02 Thread Stuart Henderson
add a couple more lines to make that more clear though, and give some hints for people who don't know what PKI is - see below. On 2023/03/02 05:35, Crystal Kolipe wrote: > On Wed, Mar 01, 2023 at 04:53:00PM +, Stuart Henderson wrote: > > How about this? Show a strong psk in the exam

Re: Authentication in OpenIKED

2023-03-01 Thread Stuart Henderson
[from misc] > > I don't see that in the iked.conf manual. There is some reference to not > > using psk in /etc/examples/iked.conf but it's not clear whether that's > > because of the need to share a single psk with all endpoints connecting > > via the same iked.conf configuration line (certainly a

Re: freeradius denies to authentocate with eap-tls

2023-02-27 Thread Stuart Henderson
(moving to ports#, reply-to is set, although this is unlikely to be OpenBSD-specific) On 2023/02/25 02:18, Mikhael Lialin wrote: > Trying to setup witi with radius eap-tls authentication. > > And getting time out while authenticated. > > Tried with custome setup, and default setup with

Re: ttycreate from FreeBSD equivalent

2023-02-25 Thread Stuart Henderson
On 2023/02/25 11:32, jon@elytron.openbsd.amsterdam wrote: > Hello, I'm in the process of adapting a driver from freebsd to > openbsd. I was wondering what I should use in place of a call like > ttycreate(tmptty, TS_CALLOUT, "N%r", i); > > any hints appreciated, tmptty is a struct tty from

Re: Patch to add -p (reading/parsing /etc/sysctl.conf) option to sysctl

2023-02-21 Thread Stuart Henderson
A couple of comments, > - while ((ch = getopt(argc, argv, "Aanqw")) != -1) { > + while ((ch = getopt(argc, argv, "Aanpqw")) != -1) { The use of -p as the flag seems a bit odd, -f would be my instinctive choice - though it does match one of the three possibliities in Linux' sysctl(8).

llvm-strip vs ld.bfd (at least on i386): SIGABRT in sys_execve

2023-02-15 Thread Stuart Henderson
Noticed while testing with LLVM 15, but it affects plain -current as well. If I take a binary that was linked with ld.bfd and strip it (i.e. this is now using llvm-strip), it breaks the output file in such a way that it cannot be executed: : i386.p; cat a.c #include int main() {

Re: patch for httpd implementing clickjacking protection

2023-02-07 Thread Stuart Henderson
On 2023/02/07 12:29, Peter J. Philipp wrote: > On Tue, Feb 07, 2023 at 10:41:34AM +0000, Stuart Henderson wrote: > > On 2023/02/07 10:20, Peter J. Philipp wrote: > > > Hi, > > > > > > Arslan Kabeer (on the Internet) made me aware of clickjacking being done

Re: patch for httpd implementing clickjacking protection

2023-02-07 Thread Stuart Henderson
On 2023/02/07 10:20, Peter J. Philipp wrote: > Hi, > > Arslan Kabeer (on the Internet) made me aware of clickjacking being done on > my site using OpenBSD httpd. This following patch implements a RFC 7034 > protection called "noiframe" which disallows other sites (but not the same > site) to add

Re: Wireless Media Modes Identified in Man Page for ifmedia(4)

2023-01-21 Thread Stuart Henderson
On 2023/01/21 14:00, Thomas Dunn wrote: > Hello, > > The man page for ifmedia(4) identifies the media modes defined for IEEE802.11 > Wireless LAN under the heading "MEDIA TYPES AND OPTIONS FOR IEEE802.11 > WIRELESS LAN". > > For better consistency, I suggest changing "TYPES" to "MODES" in this

Re: mem.4: be more accurate about securelevel

2023-01-21 Thread Stuart Henderson
On 2023/01/20 18:14, Crystal Kolipe wrote: > On Fri, Jan 20, 2023 at 01:15:29PM -0700, Theo de Raadt wrote: > > Todd C. Miller wrote: > > > I wonder if it makes sense to have a version of sysctl.conf that > > > only gets used for the next reboot and then is removed, kind of > > > like

Re: mem.4: be more accurate about securelevel

2023-01-20 Thread Stuart Henderson
On 2023/01/18 12:46, Theo de Raadt wrote: > But you should not start a sentence with also. > Also you should not start a sentence with but. > > Not the best english. jmc can weight in perhaps. > > Jan Klemkow wrote: > > .Pp > > Even with sufficient file system permissions, > > these devices

Re: Preferred TERM for pkg_add

2023-01-18 Thread Stuart Henderson
Is there any benefit to pkg_add's TERM handling now that it no longers uses the full terminal width? To my eye the visual output looks the same with TERM=dumb (though presumably it will avoid the intermittent problem where somewhere between pkg_add, termcap and urxvt, pkg_add -u output jumps to

Re: ifconfig description for wireguard peers

2023-01-14 Thread Stuart Henderson
On 2023/01/12 04:49, Mikolaj Kucharski wrote: > Hi, > > Is there anything else which I can do, to help this diff reviwed and > increase the chance of getting in? > > Thread at https://marc.info/?t=16347829861=1=2 > > Last version of the diff at >

Re: [patchset] 256 colour console and other enhancements

2023-01-10 Thread Stuart Henderson
On 2023/01/09 18:39, Crystal Kolipe wrote: > Another update to the console patchset... i386 ramdisk still fits. ; diff /tmp/old /tmp/new --- /tmp/oldTue Jan 10 03:56:19 2023 +++ /tmp/newTue Jan 10 03:54:13 2023 @@ -4,12 +4,12 @@ text databss dec hex 1083 0 0

Re: Suggested change to ports.7 man page

2023-01-04 Thread Stuart Henderson
I don't think this helps. It's the same for clean, update-patches, install, update-plist, port-lib-depends-check, [...] and we already have "and of course, use the same settings for the subsequent invocations of make" in the section showing how to work with flavours. -- Sent from a phone,

Re: libcbor v0.10.0

2022-12-30 Thread Stuart Henderson
On 2022/12/30 02:06, Theo Buehler wrote: > I understand that it is a libcbor major bump. Why is the libfido2 bump > needed? We can run into a problem with bumps with inter-library dependencies in base. If software from packages uses functions from both libraries, if you _don't_ bump major for

Re: [patch(es)] fix a few typos in /src

2022-12-26 Thread Stuart Henderson
On 2022/12/26 11:25, Theo Buehler wrote: > On Mon, Dec 26, 2022 at 07:18:45AM -0300, Crystal Kolipe wrote: > > On Mon, Dec 26, 2022 at 07:34:04AM +, Jason McIntyre wrote: > > > On Thu, Dec 22, 2022 at 10:49:06PM -0500, Paul Tagliamonte wrote: > > > > > > hi. i've committed the parts of this

Re: [patch(es)] fix a few typos in /src

2022-12-23 Thread Stuart Henderson
> +++ usr.bin/ctfconv/parse.c 22 Dec 2022 21:15:27 - > @@ -72,7 +72,7 @@ RB_HEAD(itype_tree, itype) itypet[CTF_K > */ > struct isymb_tree isymbt; > > -struct itype *void_it; /* no type is emited for void */ > +struct itype *void_it; /*

Re: [patch] add show.c style flag descriptions to route(8)

2022-12-22 Thread Stuart Henderson
On 2022/12/22 17:58, Jason McIntyre wrote: > > > flag. > > > Just like for IPsec, using the > > > -.Fl r > > > -flag, > > > -.Xr netstat 1 > > > +.Xr route 8 > > > +.Cm show > > > +command > > > displays information about IPComp flows. > > > > That's a lie. Neither netstat nor route show IPsec

Re: is this rge crash known?

2022-12-19 Thread Stuart Henderson
On 2022/12/18 20:53, Geoff Steckel wrote: > OpenBSD 7.2 (GENERIC.MP) #758: Tue Sep 27 11:57:54 MDT 2022 > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP It's a release kernel so kern.pool_debug is off by default. I don't know rge(4) but in the absence of other ideas I'd try

Re: acme-client: allow configuring key and cert owner

2022-12-18 Thread Stuart Henderson
On 2022/12/18 03:06, Lucas wrote: > The following patch expands acme-client config file `domain` blocks to > allow for a `owner user:group` directive, which allows to get rid of > customs scripts that "fix" permissions for issued certs, mostly needed > in ports land. I don't find it too invasive,

Re: hostname.if(5): lladdr tweaks

2022-12-15 Thread Stuart Henderson
On 2022/12/15 09:47, Theo de Raadt wrote: > Other than that, I still think MAC is the identifier we should give priority > to. > So I would like for this to be flipped, and then I think we can consider this > work done. Do we want to give users a clue that this works (for hostname.vlanX or

Re: hostname.if(5): lladdr tweaks

2022-12-15 Thread Stuart Henderson
On 2022/12/15 05:19, Klemens Nanni wrote: > Yes, I agree with Theo here that lladdr is more specific and should win > present. That depends on the hardware ;)

Re: games: add dots and boxes game

2022-12-13 Thread Stuart Henderson
On 2022/12/13 14:27, Stuart Henderson wrote: > On 2022/12/13 14:13, Janne Johansson wrote: > > Den tis 13 dec. 2022 kl 14:11 skrev Alireza Arzehgar > > : > > > I implemented an interesting game. I thought this game is cool and could > > > be > > > fun

Re: games: add dots and boxes game

2022-12-13 Thread Stuart Henderson
On 2022/12/13 14:13, Janne Johansson wrote: > Den tis 13 dec. 2022 kl 14:11 skrev Alireza Arzehgar > : > > I implemented an interesting game. I thought this game is cool and could be > > fun > > for OpenBSD users. I don't know what game will accept on OpenBSD. But I hope > > this patch is

Re: Configure interface by lladdr during install

2022-12-07 Thread Stuart Henderson
On 2022/12/06 19:57, Andrew Hewus Fresh wrote: > Which interface do you wish to configure? (name, lladdr, '?', or 'done') > [vio0] ? > Available network interfaces are: vio0 vlan0. > vio0: lladdr fe:e1:bb:d1:dd:97 > Which interface do you wish to configure? (name, lladdr, '?', or 'done') >

Re: OpenSSH and -current out-of-tree patched for ~C?

2022-11-30 Thread Stuart Henderson
On 2022/11/30 08:53, Andy Bradford wrote: > Thus said "Theo de Raadt" on Wed, 23 Nov 2022 18:56:21 -0700: > > > A new "enablecommandline" configuration option re-enables those > > particular features, and the diff later on will show why we feel these > > features should be optional. > >

Re: lladdr support for netstart/hostname.if

2022-11-24 Thread Stuart Henderson
On 2022/11/24 14:36, Vitaliy Makkoveev wrote: > On Wed, Nov 23, 2022 at 09:36:28PM -0700, Theo de Raadt wrote: > > Theo de Raadt wrote: > > > > > > The other, that if both exist, > > > > /etc/hostname.$if will override /etc/hostname.$lladdr. > > > > > > We do need to decide which one is

Re: lladdr support for netstart/hostname.if

2022-11-22 Thread Stuart Henderson
Need to query (and set $if, which might be used in route commands etc) I think. -- Sent from a phone, apologies for poor formatting. On 22 November 2022 08:37:05 Florian Obser wrote: On 2022-11-22 18:06 +10, David Gwynne wrote: There are a few things to keep in mind if we're going to use

Re: xenodm: save ~/.xesssion to ~/.xsession.old

2022-11-14 Thread Stuart Henderson
On 2022/11/14 16:50, Klemens Nanni wrote: > X segfaulted when I opened a window, Xorg.log.old only showed the > address without anything specific, no core dump was created and > xenodm automatically restarted. > > After I logged in I checked ~/.xsession for possible indications, but > that file

Re: mount_ntfs.8: Fix swapped -g user and -u group

2022-11-14 Thread Stuart Henderson
ha, good catch. committed, thanks.

route(8) example for "out of prefix" default gateway

2022-11-08 Thread Stuart Henderson
Seems some hosting providers have annoying "out of prefix" default gateways whuch are painful to configure (https://marc.info/?t=16678224225=1=2), should we give a pointer in route(8)? Index: route.8 === RCS file:

Re: rc(8): reorder_libs(): print names of relinked libraries

2022-11-08 Thread Stuart Henderson
On 2022/11/07 23:54, Theo de Raadt wrote: > Klemens Nanni wrote: > > > > I know this makes rc(8) a bit noisier but it really does improve my > > > (for want of a better term) "user experience" as I wait for my machine > > > to boot. > > > > I like this and it doesn't add more **lines** to the

Re: Questions about the code review process in OpenBSD

2022-11-07 Thread Stuart Henderson
On 2022/11/04 23:32, i...@tutanota.com wrote: > I am trying to understand how the code review process is conducted in > OpenBSD. I can see all the OK's in the commit log, but not every commit > has the OK. > > On FreeBSD there where a serious problem with a developer who was hired > to by Netgear

Re: ssh-keygen(1): by default generate ed25519 key (instead of rsa)

2022-11-07 Thread Stuart Henderson
On 2022/11/07 12:02, Solène Rapenne wrote: > Le Sun, 6 Nov 2022 18:41:50 +0400, > Loganaden Velvindron a écrit : > > > On Sun, 6 Nov 2022 at 18:31, Job Snijders wrote: > > > > > > Dear all, > > > > > > Support for using Ed25519 for server and user authentication was > > > introduced in 2014. I

Re: 7.2 miniroot pointed to /pub/OpenBSD/snapshots for sets

2022-10-20 Thread Stuart Henderson
On 2022/10/20 09:44, Heppler, J. Scott wrote: > I was testing the full setup for a lightweight desktop I posted on > https://daemonforums.org/showpost.php?p=67677=1 > > My downloaded miniroot: > -rw-r--r--1 jsh jsh 5832704 Oct 20 08:51 miniroot72.img > > The system had previously been

Re: 7.2 miniroot pointed to /pub/OpenBSD/snapshots for sets

2022-10-20 Thread Stuart Henderson
On 2022/10/20 09:05, Heppler, J. Scott wrote: > Using the miniroot img from https://cdn.openbsd.org/pub/OpenBSD/7.2, the > set retrival still points to snapshots. You (or someone else using the same IP) must have done an install from a full URL previously rather than picking a mirror from the

Re: em(4) IPv4, TCP, UDP checksum offloading

2022-10-11 Thread Stuart Henderson
On 2022/10/11 15:03, Moritz Buhl wrote: > Here is a new diff for checksum offloading (ipv4, udp, tcp) for em(4). > > The previous diff didn't implement hardware vlan tagging for >em82578 > which should result in variable ethernet header lengths and thus > wrong checksums inserted at wrong places.

Re: sysupgrade: exit 1 instead of exit 0 when ending early

2022-10-11 Thread Stuart Henderson
On 2022/10/11 03:44, Mikolaj Kucharski wrote: > On Mon, Oct 10, 2022 at 11:17:32AM -0600, Theo de Raadt wrote: > > > Any non-zero value indicates an error, that would include 2. You are > > marking this as an error, when it isn't. > > > > You think this will help your scripting. Do you not

Re: snmp: Add support for PF_LIMIT_ANCHORS

2022-10-06 Thread Stuart Henderson
On 2022/10/06 18:20, Martijn van Duren wrote: > Just before lock mbuhl pointed out a new limit placed in pf, not > exported yet over snmp. Here's a diff to add support for > PF_LIMIT_ANCHORS. > > the OPENBSD-PF-MIB.txt DESCRIPTION is adapted from pfLimitMaxTables. > The snmp{,d} parts are there

Re: tftpd: add -R for read-only mode/reduced pledges

2022-10-04 Thread Stuart Henderson
On 2022/10/04 10:36, David Gwynne wrote: > On Sun, Oct 02, 2022 at 06:32:04PM +, Klemens Nanni wrote: > > diskless(8) just needs tftpd(8) to deliver files, none of the possibly > > untrusted clients are supposed to ever write anything. > > > > Either way, even when run without -c, a single

Re: Remove some unnecessary setproctitle(3) format strings

2022-09-27 Thread Stuart Henderson
These programs seem OK as-is, they are following the advice in https://man.openbsd.org/setproctitle.3#CAVEATS On 2022/09/26 18:06, Josiah Frentsos wrote: > Index: sbin/dhcpleased/engine.c > === > RCS file:

unbound 1.16.3

2022-09-21 Thread Stuart Henderson
Released today so I haven't been able to give it much testing yet... Index: doc/Changelog === RCS file: /cvs/src/usr.sbin/unbound/doc/Changelog,v retrieving revision 1.45 diff -u -p -r1.45 Changelog --- doc/Changelog 29 Aug

Re: iked problems with Apple clients in 7.1

2022-09-21 Thread Stuart Henderson
On 2022/05/21 17:04, Tobias Heider wrote: > On Sat, May 21, 2022 at 12:51:19PM +0100, Stuart Henderson wrote: > > On 2022/05/21 13:44, Tobias Heider wrote: > > > On Fri, May 20, 2022 at 03:41:12PM +0100, Stuart Henderson wrote: > > > > I ran into problems with Ap

  1   2   3   4   5   6   7   8   9   10   >