Re: autopledge

2023-06-02 Thread gwes
Theo de Raadt wrote: After pledge, 80% of the base programs were converted to pledge-assisted priv-drop, because it was really obvious that "initialization code" could and should be moved earlier in the program, so that pledge (or multiple pledge calls dropping pe

Re: IPv6 hop-by-hop check in parallel

2022-08-14 Thread gwes
On 8/13/22 15:08, Alexander Bluhm wrote: Hi, While running forwarding in parallel, I have introduced a hard barrier for parallel local protocol processing. The packets are requeued from shared to exclusive netlock. Unless we unlock all protocol input routines at once, we need some mechanism

Re: remove twm(1) from xenocara ?

2022-07-18 Thread gwes
I use it, have used it, and will continue to use it full time. It is simple, low resource use and works on any system I have. I don't need any more functionality in a window manager. Anything else can be added on. The argument presented is something like "why would anyone want to do that". geoff

Re: tee(1): increase read buffer to MAXBSIZE bytes

2021-11-21 Thread gwes
On 11/21/21 10:36 PM, Theo de Raadt wrote: Scott Cheloha wrote: The point of diminishing returns on my machine is 128K. ... So, is 128K ok? Any objections? Many of us have forgotten that our testing machines are at the fast end of the curve. I recommend 64K. I suspect that is still the

Re: head(1): fully support the legacy -count syntax

2021-10-10 Thread gwes
On 10/10/21 5:03 PM, Scott Cheloha wrote: On Sun, Oct 10, 2021 at 02:36:32PM -0600, Theo de Raadt wrote: Stuart Henderson wrote: x1> On 2021/10/10 14:26, Scott Cheloha wrote: On Sun, Oct 10, 2021 at 12:31:22PM -0600, Theo de Raadt wrote: Bryan Steele wrote: On Sun, Oct 10, 2021 at 12:18:5

Re: panic(9): set panicstr atomically

2021-05-25 Thread gwes
On 5/25/21 10:26 AM, Theo de Raadt wrote: Alexander Bluhm wrote: On Tue, May 25, 2021 at 04:15:26PM +0200, Mark Kettenis wrote: Wouldn't be too hard. But unless you're on a serial console, that will probably be more than a screenful of information, so not terribly useful. The most important

Re: Mention /etc/examples/ in those config files manpages + FILES short description

2020-05-02 Thread gwes
On 5/1/20 9:13 AM, Theo de Raadt wrote: I think there's a bit of drama going on here. Once a person uses one example in the examples directory, they will become aware of the directory and see it has other files. And possibly use them in the future. It is not clear to me that example discover

newlines and #comments in httpd parse.y

2020-03-04 Thread gwes
An accidentally unterminated string in httpd.conf results in the famed yacc "syntax error" message. For instance: root "/ } } # "hi" <- line xx: syntax error The loop starting at line 1515 in httpd parse.y } switch (c) { case '\'': case '"':

scan_ffs minimal ufs2

2019-02-17 Thread gwes
Fixed 2 bugs: size output was in bytes not DEV_BSIZE blocks would not find fs with fs_frag == 4096 Added: recognize UFS2 Index: scan_ffs.c === RCS file: /cvs/src/sbin/scan_ffs/scan_ffs.c,v retrieving revision 1.21 diff -u -

scan_ffs, take 2

2019-02-16 Thread gwes
This is an update to scan_ffs to (a) identify UFS2 superblocks and (b) output a great deal of information about what it finds. It distinguishes primary superblocks from alternate ones. It does its best to give enough information to untangle good partitions from remnants of obsolete partitions. It

scan_ffs w/UFS2

2019-02-13 Thread gwes
This is a patch for scan_ffs to make it find UFS2 partitions. The following test data represents a sample of the various disks available to me at this time. All of the tests are on 6.3 amd64. I haven't updated to 6.4 or snapshots on this machine. By design, scan_ffs can only find intact first supe

Re: scan_ffs(8) and FFS2 filesystems

2019-02-08 Thread gwes
On 02/08/19 15:35, Jeremie Courreges-Anglas wrote: I think it's fair to give the user a chance to understand why scan_ffs(8) won't help in this case. ok? --- scan_ffs.8.~1.16.~ Mon Mar 24 00:28:46 2008 +++ scan_ffs.8 Fri Feb 8 21:31:10 2019 @@ -136,6 +136,7 @@ you out of a jam when they

kernel crash operating USB device programmer

2017-03-10 Thread gwes
I'm trying to operate an Atmel AVRISP mkII device programmer using the "avrdude" program. The kernel crashes identically running either 6.0 release or 6.1 snapshot. Is this a known problem? Here is the ddb output and the dmesg. I will try to produce any other useful data or to use ddb to examine

Re: reloading pf through ansible easy hook

2016-11-22 Thread gwes
On 11/22/16 15:36, John Boeske wrote: On Tue, Nov 22, 2016 at 10:46 AM, John Boeske wrote I don't understand this philosophical point - why wouldn't you want the rc.d framework to manage pf, quota, etc. whenever it's natural. With pf, for example, it surely is. One of the reasons I loved AIX'

Re: Scheduler hack for multi-threaded processes

2016-03-23 Thread gwes
On 03/23/2016 18:58, Alexandre Ratchov wrote: On Wed, Mar 23, 2016 at 09:35:50PM +0100, Mark Kettenis wrote: This doesn't only change the sched_yield() behaviour, but also modifies how in-kernel yield() calls behave for threaded processes. That is probably not right. So here is a diff that ke

Thanks for pair(4)

2015-11-10 Thread gwes
Thanks very much to reyk@ and everyone else who helped create pair(4). It makes my configuration much simpler and (more) maintainable. Geoff Steckel

Re: restricting DNS to port 53

2015-11-04 Thread gwes
Apologies... I found a set of how-tos on the web. They suggest the "use a separate address for the internal nsd". I will change my setup accordingly. On 11/04/15 09:31, gwes wrote: Will unbound and nsd be restricted to port 53 only? Restricting unbound and nsd to port 53 would be

restricting DNS to port 53

2015-11-04 Thread gwes
Will unbound and nsd be restricted to port 53 only? Restricting unbound and nsd to port 53 would be a flag day for me. I am simulating bind's views for my split horizon by using two copies of nsd, one of which serves external queries and one which unbound queries for internal zones. They share s

Re: pair(4) (was: connect routing domains on layer 2)

2015-10-26 Thread gwes
On 10/24/15 06:46, Reyk Floeter wrote: vether doesn't help as it is not transmitting any traffic. in other words, "vether is a bridge endpoint" "pair is a bridge link" This may be a dead topic, but doesn't bridge_output() transmit for vether(4)? Or am I missing the point entirely? pair(4) do

proposed speedup for diff -q

2014-05-15 Thread gwes
not invoked with -w, -i, or -b The changes pass the regression tests and all the tests I've tried. I believe the changes are not machine dependent. I invite criticism and counterexamples. Example: $ ls -l trash.120403 trash.120711 -rw--- 1 gwes users 249686538 Apr 3 2012 trash.120403

thanks for vether

2010-06-13 Thread gwes
zon assigned me xxx.178 through 181 routing through .1 - there is no "transit" subnet between the firewall and the remote router, so the firewall IP must be visible both on the WAN and LAN. This is one more step which makes OpenBSD cleaner & easier to use as a network gateway. geoff

bug in locate

2010-05-21 Thread gwes
In the 4.7 release of locate there's a bug where locate -i 'old' matches Old OLD olD etc but locate -i '*old*' only matches old There is a missing conditional in fastfind.c: BEGIN diff -u HERE - fastfind.c 1.10 --- fastfind.c.old Mon Jun 8 16:18:57 2009 +++ fastfind.c Fri May 21 22:17