Re: pppd-invoked scripts to run as root or not?

2013-03-23 Thread patrick keshishian
On Sat, Mar 23, 2013 at 5:15 PM, Creamy wrote: > From the pppd man page: > > 1163:.Sh SCRIPTS > 1164-.Nm > 1165-invokes scripts at various stages in its processing which can be > 1166-used to perform site-specific ancillary processing. > 1167-These scripts are usually shell scripts, but could be e

Re: [patch] change identd options to match advice elsewhere

2013-03-23 Thread Theo de Raadt
identd startup is not the same as rc.conf startup. It might be nice if they are consistant. At the moment -- until further consideration -- this is a documentation error... > In /etc/rc.conf, we recommand to use the -elo flags, but in fact, when > we start identd from inetd, we only use -el. >

Re: better kmem pointer hiding

2013-03-23 Thread Theo de Raadt
> > this hides more kernel pointers in the kinfo proc struct and > > introduces a backdoor for the kmem group. also hoist the permission > > test up out of the loops. > > Why should we have a backdoor for the group kmem? There are several > programs installed setgid kmem and this could expose tho

pppd-invoked scripts to run as root or not?

2013-03-23 Thread Creamy
>From the pppd man page: 1163:.Sh SCRIPTS 1164-.Nm 1165-invokes scripts at various stages in its processing which can be 1166-used to perform site-specific ancillary processing. 1167-These scripts are usually shell scripts, but could be executable code files 1168-instead. 1169-.Nm 1170-does not wa

Re: [patch] tic man page file path error

2013-03-23 Thread Andres Perera
i see now that src/lib/libcurses has other defines for tic, i apologize to both

Sendmail port (was: Re: [PATCH] make Sendmail documentation easier to build)

2013-03-23 Thread Jérémie Courrèges-Anglas
Stuart Henderson writes: > On 2013/03/14 15:37, Jérémie Courrèges-Anglas wrote: >> PS: are there people already working on a sendmail port? > > Not that I know of, but I think it is wanted. Having it in ports will > actually make it easier for certain uses (e.g. people using it with SASL > and/or

Re: [patch] tic man page file path error

2013-03-23 Thread Nicholas Marriott
read_bsd_terminfo.c is only for OpenBSD's cap_mkdb terminfo.db file. ncurses will still search TERMINFO_DIRS as well. Looks like I changed tic.1 by mistake. On Sat, Mar 23, 2013 at 10:30:38PM +, Creamy wrote: > On Sat, Mar 23, 2013 at 05:31:15PM -0430, Andres Perera wrote: > > $ ident src/li

Re: [patch] tic man page file path error

2013-03-23 Thread Creamy
On Sat, Mar 23, 2013 at 05:31:15PM -0430, Andres Perera wrote: > $ ident src/lib/libcurses/tinfo/read_bsd_terminfo.c > src/lib/libcurses/tinfo/read_bsd_terminfo.c: > $OpenBSD: read_bsd_terminfo.c,v 1.18 2010/01/12 23:22:06 nicm Exp $ > $ grep -B2 -nw _PATH_TERMINFO src/lib/libcurses/tinfo/read

Re: [patch] change identd options to match advice elsewhere

2013-03-23 Thread Creamy
On Sat, Mar 23, 2013 at 05:13:14PM -0430, Andres Perera wrote: > the current version of src/etc/inetd.conf is 1.61. yours is an old one Sorry, missed that. However, although it's now disabled by default, we still have conflicting advice in the two places about the suggested options to use. Which

Re: [patch] tic man page file path error

2013-03-23 Thread Andres Perera
$ ident src/lib/libcurses/tinfo/read_bsd_terminfo.c src/lib/libcurses/tinfo/read_bsd_terminfo.c: $OpenBSD: read_bsd_terminfo.c,v 1.18 2010/01/12 23:22:06 nicm Exp $ $ grep -B2 -nw _PATH_TERMINFO src/lib/libcurses/tinfo/read_bsd_terminfo.c 22-#include 23- 24:#define _PATH_TERMINFO "/usr/

Re: [patch] change identd options to match advice elsewhere

2013-03-23 Thread Andres Perera
the current version of src/etc/inetd.conf is 1.61. yours is an old one

[patch] change identd options to match advice elsewhere

2013-03-23 Thread Creamy
In /etc/rc.conf, we recommand to use the -elo flags, but in fact, when we start identd from inetd, we only use -el. This patch adds the -o flag to /etc/inetd.conf to match. --- /usr/src/etc/inetd.conf.origSat Mar 23 20:17:30 2013 +++ /usr/src/etc/inetd.conf Sat Mar 23 20:17:42 2013 @

[patch] tic man page file path error

2013-03-23 Thread Creamy
Hello Creamy fans! Here's a patch to change the tic man page to actually state the correct terminfo directory... --- /usr/src/usr.bin/tic/tic.1.orig Sat Mar 23 20:01:18 2013 +++ /usr/src/usr.bin/tic/tic.1 Sat Mar 23 20:02:11 2013 @@ -31,7 +31,7 @@ .\" $Id: tic.1,v 1.15 2010/09/02 09:00:01 s

Re: better kmem pointer hiding

2013-03-23 Thread Ted Unangst
On Sat, Mar 23, 2013 at 14:19, Todd C. Miller wrote: > On Sat, 23 Mar 2013 06:55:40 -0400, Ted Unangst wrote: > >> this hides more kernel pointers in the kinfo proc struct and >> introduces a backdoor for the kmem group. also hoist the permission >> test up out of the loops. > > Why should we hav

Re: wmesg in ps

2013-03-23 Thread Todd C. Miller
On Sat, 23 Mar 2013 06:37:10 -0400, Ted Unangst wrote: > same as in top. OK millert@ - todd

Re: better kmem pointer hiding

2013-03-23 Thread Todd C. Miller
On Sat, 23 Mar 2013 06:55:40 -0400, Ted Unangst wrote: > this hides more kernel pointers in the kinfo proc struct and > introduces a backdoor for the kmem group. also hoist the permission > test up out of the loops. Why should we have a backdoor for the group kmem? There are several programs ins

Re: /usr.bin/colldef and collation tables

2013-03-23 Thread Stefan Sperling
On Sat, Mar 23, 2013 at 09:27:50AM -0500, Vladimir Támara Patiño wrote: > >Please change this to look like > >in other parse.y files in the OpenBSD src tree (e.g. look at bgpd). > > Could you change? No, sorry. I don't have time for doing that. Please cross-check the parse.y files yourself and ma

fix occlusion queries on r300 radeon

2013-03-23 Thread Jonathan Gray
Add the missing parts from the following Linux commit to fix occlusion queries on r300 radeon. commit af7ae351ad63a137ece86740dbe3f181d09d810f Author: Maciej Cencora Date: Tue Mar 24 01:48:50 2009 +0100 drm/radeon: add regs required for occlusion queries support [airlied: cleaned

better kmem pointer hiding

2013-03-23 Thread Ted Unangst
this hides more kernel pointers in the kinfo proc struct and introduces a backdoor for the kmem group. also hoist the permission test up out of the loops. Index: sys/sysctl.h === RCS file: /cvs/src/sys/sys/sysctl.h,v retrieving revisi

wmesg in ps

2013-03-23 Thread Ted Unangst
same as in top. Index: print.c === RCS file: /cvs/src/bin/ps/print.c,v retrieving revision 1.53 diff -u -p -r1.53 print.c --- print.c 10 Jul 2012 17:24:45 - 1.53 +++ print.c 23 Mar 2013 10:36:01 - @@ -447,7 +447,7

fix top wchan

2013-03-23 Thread Ted Unangst
top tests to see if wchan is set before printing wmesg, but this doesn't work anymore, since regular users can't see wchan. this fixes it. note that some of the removed code was already busted since wmesg is an array, not a pointer. Index: machine.c