Re: iwm(4): make iwm_newstate() interrupt safe

2015-07-18 Thread Stefan Sperling
On Thu, Jun 18, 2015 at 04:23:43PM +0200, Stefan Sperling wrote: > The net80211 stack assumes drivers will switch IEEE80211_S_* states in > interrupt context. iwm(4) does not follow this rule. Since it insists on > responses from firmware commands to look for success or failure and it > uses tslee

usb hang related to xhci

2015-07-18 Thread David Hill
Hello - Whenever I plug a device into my USB ports, my machine locks hard. I have the Intel Series 7 / C216 chip, so xhci attempts to route the port from ehci to xhci. The following diff is from FreeBSD and makes my USB devices work again. https://github.com/freebsd/freebsd/blob/e79c62ff68fc74d

Re: [patch] cleaner checksum modification for pf

2015-07-18 Thread Richard Procter
Hi, On 16/06/2015, at 1:09 PM, Richard Procter wrote: >> - I was unable to test af-to, which does a lot of packet fiddling. > I've now tested this without obvious issue. I neglected checksum regeneration within icmp af-to, which masked a couple of icmp af-to errata in my last patch. I've re-i

tame(2) WIP

2015-07-18 Thread Theo de Raadt
I have been working for a while on a subsystem to restrict programs into a "reduced feature operating model". Other people have made such systems in the past, but I have never been happy with them. I don't think I am alone. Generally there are two models of operation. The first model requires a

Re: tcpdump: display 11n HT-operation element

2015-07-18 Thread Stefan Sperling
On Sat, Jul 18, 2015 at 12:39:01AM +0200, Stefan Sperling wrote: > Make tcpdump display the HT-operation element in 802.11n management frames. > > Sample output from hackroom: > > htop=<40MHz channels 40:39,protect non-HT,non-greenfield STA,non-HT STA> > > ok? > Updated diff which shows the

Re: httpd: hsts (rfc 6797)

2015-07-18 Thread Kevin Chadwick
On Sat, 18 Jul 2015 02:53:01 +0200 Reyk Floeter wrote: > HSTS is a good thing and widely pushed, eg. by Google, in an effort to > enforce HTTPS over HTTP. It is a useful security option I agree HSTS is useful but disagree with the rhetoric personally. It improves security for average website de

Re: Coherent route(8) -priority

2015-07-18 Thread Claudio Jeker
On Sat, Jul 18, 2015 at 07:14:27PM +0200, Martin Pieuchot wrote: > This applies phessler@'s logic to *all* the commands supporting the > "-priority" switch. Plus some KNF. > > ok? OK claudio@ > Index: route.c > === > RCS file: /cv

Coherent route(8) -priority

2015-07-18 Thread Martin Pieuchot
This applies phessler@'s logic to *all* the commands supporting the "-priority" switch. Plus some KNF. ok? Index: route.c === RCS file: /cvs/src/sbin/route/route.c,v retrieving revision 1.175 diff -u -p -r1.175 route.c --- route.c

Re: [PATCH] Fix ospfd/carp start-up issue

2015-07-18 Thread Martin Pieuchot
On 28/05/15(Thu) 11:40, Johan Ymerson wrote: > Hi, > > After the fix in carp to correctly initialize link state (ip_carp.c > r1.257), ospfd no longer detect all carp interfaces in "backup" mode > reliably on start-up. The problem is that carp interfaces in backup > state isn't handled the same wa