Re: ypldap client cert authentication

2022-10-05 Thread Theo Buehler
On Mon, Sep 19, 2022 at 09:54:56PM +1000, Jonathan Matthew wrote: > This adds client certificate authentication to ypldap(8). libtls makes the > actual certificate part of this straightforward (I would still like it > reviewed, though), but there are some LDAP complications. > > Depending on your

Re: installboot: merge duplicate code into sr_open_chunk()

2022-10-05 Thread Klemens Nanni
On Sat, Sep 10, 2022 at 02:10:22AM +, Klemens Nanni wrote: > It does not have the prettiest signature, but nicely folds identical > copies into MI softraid.c, which then allows us to > - avoid further diverging MD code > - implement the keydisk fix on tech@ once instead of thrice > - reuse

acme-client: allow newlines in alternative names

2022-10-05 Thread Omar Polo
just a small scratch to itch; i'd prefer if i could split the alternative names in multiple lines without using \ so, now one should be able to write domain example.com { alternative names { some-subdomain.example.com another-subdomain.example.com

Re: acme-client: allow newlines in alternative names

2022-10-05 Thread Florian Obser
Makes sense to me, OK florian Please wait a day or two in case there are objections. On 2022-10-05 09:28 +02, Omar Polo wrote: > just a small scratch to itch; i'd prefer if i could split the > alternative names in multiple lines without using \ > > so, now one should be able to write > > domain

Re: malloc: prep for immutable pages

2022-10-05 Thread Marc Espie
On Tue, Oct 04, 2022 at 10:15:51AM -0600, Theo de Raadt wrote: > A note on why this chance is coming. > > malloc.c (as it is today), does mprotects back and forth between RW and > R, to protect an internal object. This object is in bss, it is not > allocated with mmap. With the upcoming

Re: malloc: prep for immutable pages

2022-10-05 Thread Otto Moerbeek
On Wed, Oct 05, 2022 at 02:47:19PM +0200, Marc Espie wrote: > On Tue, Oct 04, 2022 at 10:15:51AM -0600, Theo de Raadt wrote: > > A note on why this chance is coming. > > > > malloc.c (as it is today), does mprotects back and forth between RW and > > R, to protect an internal object. This object

Re: malloc: prep for immutable pages

2022-10-05 Thread Theo de Raadt
Marc Espie wrote: > On Tue, Oct 04, 2022 at 10:15:51AM -0600, Theo de Raadt wrote: > > A note on why this chance is coming. > > > > malloc.c (as it is today), does mprotects back and forth between RW and > > R, to protect an internal object. This object is in bss, it is not > > allocated with

Re: vmd: remove the user quota tracking

2022-10-05 Thread Matthew Martin
On Wed, Oct 05, 2022 at 05:03:16PM -0400, Dave Voutila wrote: > Matthew Martin recently presented a patch on tech@ [1] fixing some missed > scaling from when I converted vmd(8) to use bytes instead of megabytes > everywhere. I finally found time to wade through the code it touches and > am

Re: vmd: remove the user quota tracking

2022-10-05 Thread Mike Larkin
On Wed, Oct 05, 2022 at 05:03:16PM -0400, Dave Voutila wrote: > Matthew Martin recently presented a patch on tech@ [1] fixing some missed > scaling from when I converted vmd(8) to use bytes instead of megabytes > everywhere. I finally found time to wade through the code it touches and > am

vmd: remove the user quota tracking

2022-10-05 Thread Dave Voutila
Matthew Martin recently presented a patch on tech@ [1] fixing some missed scaling from when I converted vmd(8) to use bytes instead of megabytes everywhere. I finally found time to wade through the code it touches and am proposing we simply "tedu" the incomplete feature. Does anyone use this?

Re: rc: do not clear mfs /tmp

2022-10-05 Thread Alexander Hall
On October 5, 2022 12:57:44 AM GMT+02:00, Klemens Nanni wrote: >There is no problem to fix, but every boot I read "/clearing /tmp" and >know it is a useless step since my /tmp live on volatile RAM anyway. > >Other steps in rc(8) also check and print/log conditionally, so this >can do as well,

Re: install.sub: Get rid of useless/confusing subshell

2022-10-05 Thread Alexander Hall
On October 4, 2022 10:11:46 PM GMT+02:00, Klemens Nanni wrote: >This function's style is a bit off: it wraps the body in a subshell to >discard all stdout/err at once, but a still uses return inside it. > >1. A command list (using {}) would be enough here as it groups like a > subshell but