Re: No WAF detected

2019-12-05 Thread Stuart Henderson
On 2019/12/05 00:17, Kihaguru Gathura wrote: > > > > On Wed, Dec 4, 2019 at 11:58 PM Kihaguru Gathura wrote: > > > > >> Which is a better way to implement a WAF on OpenBSD using the base > utilities? > > > > relayd configured in certain ways might be considered as a

Re: issues configuring vlan on top of aggr device

2019-12-05 Thread David Gwynne
On Tue, Dec 03, 2019 at 02:11:16PM +, Pedro Caetano wrote: > Hi again, > > I'm sorry, but since the boxes do not (yet) have working networking it is > not easy for me to get the text output. > I'm attaching a few pictures with the requested output. > > https://picpaste.me/images/2019/12/03/ca

Re: Using unveil(2) to block the entire file system

2019-12-05 Thread Ingo Schwarze
Hi, i like the tweak; OK to commit? While it is reasonable to expect this behaviour without the "zero or more", i see how the misunderstanding "one or more" can arise: In many situations, to grant no permissions on a given path, it is sufficient to not mention it in unveil(2) at all, so it may no

Re: Using unveil(2) to block the entire file system

2019-12-05 Thread Ingo Schwarze
Hi Chris, i just committed the patch shown below; thanks for bringing up the point. Yours, Ingo CVSROOT:/cvs Module name:src Changes by: schwa...@cvs.openbsd.org2019/12/05 17:14:08 Modified files: lib/libc/sys : unveil.2 Log message: Explicitly say that *

Known info

2019-12-05 Thread Manuel Solis
Dear devs, You are awesome! >From @qualys twitter: Qualys researchers discovered an authentication-bypass vulnerability (CVE-2019-19521) in OpenBSD's authentication system. Special thanks to Theo de Raadt and the OpenBSD developers for a very quick response: they published patches in <40 hours