Re: Thanks for ksh

2014-09-25 Thread ian kremlin
On Thu, Sep 25, 2014 at 8:50 PM, Andrew Lester wrote: > Would the /bin/sh shell in OpenBSD, which is a "reimplementation of bash" be > affected by either of these exploits? So happy to learn no action is needed > on my part for my OpenBSD sever :) /bin/sh is an implementation of *the bourne she

Re: Thanks for ksh

2014-09-25 Thread Andrew Lester
Would the /bin/sh shell in OpenBSD, which is a "reimplementation of bash" be affected by either of these exploits? So happy to learn no action is needed on my part for my OpenBSD sever :) Sent from my iPhone > On Sep 25, 2014, at 9:10 AM, sven falempin wrote: > > On Thu, Sep 25, 2014 at 8:11

Re: Atheros AR9380 Panic

2014-09-25 Thread Stefan Sperling
On Thu, Sep 25, 2014 at 02:28:47PM -0500, Marc Suttle wrote: > I understand we can always use alternatives to this setup. In an > enterprise env. you would probably never use one of these anyway. It just > seems that there is quite a bit of development on the FreeBSD side and > why duplicate effo

Re: Atheros AR9380 Panic

2014-09-25 Thread Marc Suttle
Mark, What card do you plan on using? Also here is some more information from an interview with Adrian Chadd on WLAN networking and BSD. Would there need to be any NDA signed if we just ported over the FreeBSD Atheros stack? Interview - http://www.bsdnow.tv/episodes/2014_09_17-the_promised_wlan

X dies after suspend to ram

2014-09-25 Thread Ted W.
I have really enjoyed the last few weeks of running OpenBSD on my Thinkpad. Almost everything I need works and or worked right out of the box. The only real issue I've noticed is that when the system returns from suspend and press ctrl-alt-del to restart X either X or SLiM (not sure which) will

Re: Thanks for ksh

2014-09-25 Thread sven falempin
On Thu, Sep 25, 2014 at 8:11 AM, Christian Weisgerber wrote: > On 2014-09-25, Craig R. Skinner wrote: > >> All the highly skilled work invested in the project, keeping ordinary >> users secure, is appreciated. > > If this is a reference to the "ShellShock" bash bugs (CVE-2014-6271 > CVE-2014-7169

Re: bioctl weirdness

2014-09-25 Thread Dan Becker
On Thu, Sep 25, 2014 at 2:37 AM, Joel Sing wrote: > On Wed, 24 Sep 2014, Dan Becker wrote: > > forgot to add this relevant part > > > > # bioctl -R /dev/wd0a sd1 > > softraid0: wd0a partition too small, at least 536871980544 bytes required > > # > > Again, note the "bytes" vs "blocks". That has m

Re: thinkpad wifi/dhclient issue

2014-09-25 Thread frantisek holop
for everybody out there who likes a good mystery, the "900 ping" issue has happened mid-day as well for the first time. it is the equivalent of yanking the ethernet cable. so it is not an exclusively resume connected, but resume (and startup) is a way to reproduce instantly. this time however wh

Re: Thanks for ksh

2014-09-25 Thread Christian Weisgerber
On 2014-09-25, Craig R. Skinner wrote: > All the highly skilled work invested in the project, keeping ordinary > users secure, is appreciated. If this is a reference to the "ShellShock" bash bugs (CVE-2014-6271 CVE-2014-7169), I'd like to point out that, like many "bash features", exported funct

Re: Thanks for ksh

2014-09-25 Thread Maurice McCarthy
On Thu, Sep 25, 2014 at 02:38:32PM +0200 or thereabouts, Benjamin Baier wrote: > Is this because of the newest "bash-shellshock" (CVE-2014-6271)? > > Nevertheless. Thanks for doing things right. > > On 09/25/2014 01:48 PM, Craig R. Skinner wrote: > >All the highly skilled work invested in the pro

Re: Thanks for ksh

2014-09-25 Thread Benjamin Baier
Is this because of the newest "bash-shellshock" (CVE-2014-6271)? Nevertheless. Thanks for doing things right. On 09/25/2014 01:48 PM, Craig R. Skinner wrote: All the highly skilled work invested in the project, keeping ordinary users secure, is appreciated.

Thanks for ksh

2014-09-25 Thread Craig R. Skinner
All the highly skilled work invested in the project, keeping ordinary users secure, is appreciated.

Re: Safe C

2014-09-25 Thread Daniel Cegiełka
http://cyclone.thelanguage.org/ http://en.wikipedia.org/wiki/Cyclone_(programming_language) http://trevorjim.com/papers/usenix2002.pdf http://homes.cs.washington.edu/~djg/papers/cyclone-cuj.pdf Best regards, Daniel

Safe C

2014-09-25 Thread Matti Karnaattu
I ask here because I don't want to pollute tech@, you told about those dangerous idioms, is that all knowledge collected anywhere? Even I know a lot of secure coding practices, I that would be interesting to read. And question comes to my mind.. Is there attempts to use this knowledge in tooling?

Re: amd64 snapshot from Sep 17 - isakmpd drops fifo

2014-09-25 Thread mxb
Looks like an old OpenBSD 5.0 install caused this problem. isakmpd is stable as soon as 5.0 -> 5.6 . //mxb > On 22 sep 2014, at 23:23, mxb wrote: > > Hey, > isakmpd seems to lose its FIFO-file in the snapshot from Sep17 > > [fw1]-[23:16:35]# ipsecctl -f /etc/ipsec.conf > ipsecctl: ike_ipsec_es

Re: bioctl weirdness

2014-09-25 Thread Joel Sing
On Wed, 24 Sep 2014, Dan Becker wrote: > forgot to add this relevant part > > # bioctl -R /dev/wd0a sd1 > softraid0: wd0a partition too small, at least 536871980544 bytes required > # Again, note the "bytes" vs "blocks". That has most likely been fixed already, however without a dmesg I have no i

Re: bioctl weirdness

2014-09-25 Thread Joel Sing
On Wed, 24 Sep 2014, Dan Becker wrote: > two identical drives... shutdown system remove one turn the system back on > > bioctl shows the partitions as 536871980544 which is 137. something times > bigger than the drive > > oddly enough it is 512 times the size of the partition > > 536871980544/10485

Re: thinkpad temperature climbs after resume

2014-09-25 Thread frantisek holop
frantisek holop, 25 Sep 2014 11:18: > David Hoskin, 24 Sep 2014 12:18: > > On 9/24/14, frantisek holop wrote: > > > there seems to be a problem with my thinkpad X60s > > > after resume: the cpu temperature keeps going up > > > gradually, no matter that the machine is idle. > > > > I've experience

Re: quotas grace period "none" right away

2014-09-25 Thread Craig R. Skinner
On 2014-09-24 Wed 09:22 AM |, Boris Goldberg wrote: > > Does this mean you tried and found out (or knew) that disk quotas where > not going to work for you? > At the moment Boris, I'm not using quotas - but did a few years ago. I don't remember having any problems then. I guessed Dovecot woul

Re: thinkpad temperature climbs after resume

2014-09-25 Thread frantisek holop
David Hoskin, 24 Sep 2014 12:18: > On 9/24/14, frantisek holop wrote: > > there seems to be a problem with my thinkpad X60s > > after resume: the cpu temperature keeps going up > > gradually, no matter that the machine is idle. > > I've experienced this sometimes for the past couple of months on

Re: Dansguardian not working after updating OBSD Current

2014-09-25 Thread Stuart Henderson
On 2014-09-17, Kaya Saman wrote: > Ok, so this is just a quick follow up. > > Squid started dying too, checking the logs showed "not enough file > descriptors". > > After looking at both /etc/login.conf "openfiles-cur" and the sysctl > kern.maxfiles limits which were set extremely high to begin

Re: How does pkg_add know I'm tracking -stable?

2014-09-25 Thread Stuart Henderson
On 2014-09-23, Henning Brauer wrote: > pkg_add doesn't know or care about release/stable/current/frankenstein. > The packages itself are built against a certain set of libraries and > thus care (and pkg_add checks that). libraries don't change versions > in -stable, pretty much by definition. > to

Re: low power device

2014-09-25 Thread Stuart Henderson
On 2014-09-23, Adam Thompson wrote: > On 14-09-22 05:03 PM, Stuart Henderson wrote: >> The Atom C2xxx boards run OpenBSD fine. Only glitch I've noticed is >> the screen background goes red if you VT switch twice (ctrl+alt+f2 >> ctrl+alt+f1). > > That "bug" has been around since the 3.x days; th

Re: how to debug iked failures?

2014-09-25 Thread Artem Falcon
Markus Wernig : > ... > But the client is unable to connect to the VPN GW, and I just can't find > out what's going wrong. Unfortunately there are two ways it is failing: > > 1) Client sends IKEv2 msg IKE_SA_INIT on Port 500, VPN GW replies with > IKE_SA_INIT and CertReq, *then client sends IKE_A

Re: Why are there no PKG_PATH defaults?

2014-09-25 Thread Ville Valkonen
On 25 September 2014 01:30, Dmitrij D. Czarkoff wrote: > openda...@hushmail.com said: >> Then, in the event that someone installed via an ISO or some >> pre-defined VM (ie. a DigitalOcean droplets) -- how about a one-time >> script upon first root login to ask for such info? >> >> You do not hav