Re: [PATCH] SSH tunnels without root permissions

2015-10-06 Thread Damien Miller
On Tue, 6 Oct 2015, Ossi Herrala wrote: > ping? > > On Fri, Sep 18, 2015 at 06:46:20PM +0300, Ossi Herrala wrote: > > Hi everyone, > > > > The following patch makes it possible to build SSH layer 2 (and layer > > 3) tunnels without using root permissions when connecting. > > > > This is achieve

Re: catopen/catgets: out of boundary access

2015-10-06 Thread Tobias Stoeckmann
By the way, this is the second version with miod's feedback. Time to send it to tech@ now, too. Fixed one issue due to missing braces and less ntohl() calls, which makes the code easier to read. Index: catopen.c === RCS file: /cvs/sr

mg(1) keep 'D' marked files across dired refreshes

2015-10-06 Thread Mark Lumsden
Hi, Currently, in mg dired mode, if you mark a file as deleted, if the dired buffer is refreshed (using 'dired-revert' for example) the marking of files is lost. This diff fixes that by saving the marked files before they are lost, then remarking them once the buffer is refreshed. Comments/oks? -

pciide(4): cannot boot -current on 86duino EduCake

2015-10-06 Thread SASANO Takayoshi
Hello, I am trying to boot -current on 86duino EduCake and I found it crashes when wdcintr() (sys/dev/ic/wdc.c) is called. Here is the log. >> OpenBSD/i386 BOOT 3.27 boot> boot -c \|/-\|/booting hd0a:/bsd: -\|/-7692020\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\|/-\

Re: [PATCH] SSH tunnels without root permissions

2015-10-06 Thread Ossi Herrala
ping? On Fri, Sep 18, 2015 at 06:46:20PM +0300, Ossi Herrala wrote: > Hi everyone, > > The following patch makes it possible to build SSH layer 2 (and layer > 3) tunnels without using root permissions when connecting. > > This is achieved by root setting up everything beforehand so sshd > doesn'

Re: syslogd TLS accept

2015-10-06 Thread Alexander Bluhm
On Fri, Sep 25, 2015 at 11:27:49PM +0200, Alexander Bluhm wrote: > If syslogd is started with -S, it accepts TLS connections to receive > encrypted traffic. The server certificates are taken from /etc/ssl > like relayd does. Anyone? bluhm Index: usr.sbin/syslogd/evbuffer_tls.c =

Re: a few style examples don't comply

2015-10-06 Thread Todd C. Miller
On Mon, 05 Oct 2015 23:36:11 +0200, Benny Lofgren wrote: > This reminds me of something I've always wondered, but never gotten > around to ask about... > > Why is the return value in return statements almost always enclosed in > parantheses in the codebase? > > It's not explained in style(9) as

Support for ActivCard, CRYPTOCard and SNK-004 authentication tokens

2015-10-06 Thread Mike Belopuhov
Hello, We're currently evaluating if we should keep providing support for ActivCard, CRYPTOCard and SNK-004 authentication tokens via login_token(8). If you're a user of "activ", "crypto", "snk" or "token" authentication methods (check your /etc/login.conf), please speak up so that we could estim

Re: Possible em(4) fix

2015-10-06 Thread Mike Belopuhov
On 6 October 2015 at 14:34, Mark Kettenis wrote: >> From: Mike Belopuhov >> Date: Tue, 6 Oct 2015 14:18:39 +0200 >> >> On 5 October 2015 at 22:45, Mark Kettenis wrote: >> > Several people seem to complain on misc@ that they're seeing watchdog >> > timeouts on em(4). But none of them bother to s

Re: Possible em(4) fix

2015-10-06 Thread Mark Kettenis
> From: Mike Belopuhov > Date: Tue, 6 Oct 2015 14:18:39 +0200 > > On 5 October 2015 at 22:45, Mark Kettenis wrote: > > Several people seem to complain on misc@ that they're seeing watchdog > > timeouts on em(4). But none of them bother to submit a proper bug > > report to bugs@. Anyway, here i

Re: Possible em(4) fix

2015-10-06 Thread Mike Belopuhov
On 5 October 2015 at 22:45, Mark Kettenis wrote: > Several people seem to complain on misc@ that they're seeing watchdog > timeouts on em(4). But none of them bother to submit a proper bug > report to bugs@. Anyway, here is a diff that might fix the issue. > Please test, even if you're not exper

Re: bgpd data export via snmp

2015-10-06 Thread Stuart Henderson
... since this has low impact unless it's enabled in config, I think most things relating to this could be worked on in-tree. The main change for people not using snmp would be in session_dispatch_imsg() relating to config reload, but it seems sane to me and doesn't cause any problems here.

Re: tame() error handling diff

2015-10-06 Thread Nicholas Marriott
this is ok with me On Tue, Oct 06, 2015 at 12:25:57PM +0200, Benny Lofgren wrote: > Hi Nicholas, > > On 2015-10-06 09:56, Nicholas Marriott wrote: > > I am not convinced, changing errno like this is gratuitous. We actually > > do do it elsewhere, but IMO that is unnecessary too. > > That's fair

Re: bgpd data export via snmp

2015-10-06 Thread Stuart Henderson
The OID in snmp.c doesn't match the RFC, it should be like this: #define OIDIDX_bgp4 7 static struct snmp_oid bgpd4oid = { { 1, 3, 6, 1, 2, 1, 15 }, 7 }; With that fixed, I can fetch single values, but walking fails: $ snmpget -On -m+BGP4-MIB -v2c -c public 127.0.0.

Re: tame() error handling diff

2015-10-06 Thread Benny Lofgren
Hi Nicholas, On 2015-10-06 09:56, Nicholas Marriott wrote: > I am not convinced, changing errno like this is gratuitous. We actually > do do it elsewhere, but IMO that is unnecessary too. That's fair enough. One can argue whether a certain error code is better suited than another until the cows c

Re: catopen/catgets: out of boundary access

2015-10-06 Thread Tobias Stöckmann
> On October 6, 2015 at 11:40 AM Stefan Sperling wrote: > What do you think about a similar treatment for locale/rune.c? I think you refer to _Read_RuneMagi function, which lacks the same input validation. Before supplying a patch for that one, I wanted to get some feedback for catopen/catgets.

Re: bgpd dying repeatedly on latest snapshot

2015-10-06 Thread Stuart Henderson
On 2015/10/06 08:48, Eric Ripa wrote: > Hi, > > I upgraded my private mail host today to the latest 5.8-current snapshot (5th > of october). Now bgpd keeps crashing. The previous snapshot (from around 14th > of september) was working fine. > > I have a quite simple setup with only the reference

HOWTO debug/report tame(2) problem / Re: bgpd dying repeatedly on latest snapshot

2015-10-06 Thread Sebastien Marie
On Tue, Oct 06, 2015 at 08:48:07AM +0200, Eric Ripa wrote: > Hi, > > I upgraded my private mail host today to the latest 5.8-current snapshot (5th > of october). Now bgpd keeps crashing. The previous snapshot (from around 14th > of september) was working fine. > > I have a quite simple setup wi

Re: catopen/catgets: out of boundary access

2015-10-06 Thread Stefan Sperling
On Thu, Sep 03, 2015 at 11:01:59PM +0200, Tobias Stoeckmann wrote: > Hi, > > our catopen implementation does not check the parsed message catalog, > making it vulnerable to all sorts of out of boundary accesses. This is interesting stuff, but I haven't found time to read through it yet. What do

bgpd data export via snmp

2015-10-06 Thread Bret Lambert
Since it was brought up on misc, there's been some off-list interest in work I did during c2k15 that's timed out with off-list testers. The following diff implements a subset of RFC 4273, with no export of individual route entries, which would be sheer madness over snmp, and for which better tools

Re: iwm(4) scanning cleanup

2015-10-06 Thread Stefan Sperling
On Tue, Oct 06, 2015 at 10:09:00AM +0200, Martin Pieuchot wrote: > On 05/10/15(Mon) 23:03, Stefan Sperling wrote: > > I find this approach easier to follow and it doesn't mess with > > ic->ic_scan_lock which is supposed to be managed by the net80211 layer. > > > > Seems to work just as well as the

Re: tame userland diff

2015-10-06 Thread Remco
> > Be patient. I am not adding all the planned layers to this subsystem > in one go. There is something being designed for exec, and it will > show up when the time is right. Theo and Sebastien, Thanks for your explanations, My main concern was "What about programs that actually need exec ?"

Re: iwm(4) lladdr tweak

2015-10-06 Thread Stefan Sperling
On Tue, Oct 06, 2015 at 11:58:12AM +0300, Vadim Zhukov wrote: > Looks like a logical things for me. > > -- > Vadim Zhukov Thanks. I had just committed it before opening your mail :)

Re: iwm(4) lladdr tweak

2015-10-06 Thread Vadim Zhukov
06 окт. 2015 г. 0:00 пользователь "Stefan Sperling" написал: > > This matches what all other wifi drivers seem to be doing. > ifconfig iwm0 lladdr random still works. > > ok? > > Index: if_iwm.c > === > RCS file: /cvs/src/sys/dev/pci/

Re: iwm(4) scanning cleanup

2015-10-06 Thread Martin Pieuchot
On 05/10/15(Mon) 23:03, Stefan Sperling wrote: > I find this approach easier to follow and it doesn't mess with > ic->ic_scan_lock which is supposed to be managed by the net80211 layer. > > Seems to work just as well as the old code. > > OK? Mostly. I'd argue that iwm_stop() should still reset

Re: iwm(4) lladdr tweak

2015-10-06 Thread Martin Pieuchot
On 05/10/15(Mon) 22:58, Stefan Sperling wrote: > This matches what all other wifi drivers seem to be doing. > ifconfig iwm0 lladdr random still works. > > ok? Yes please. > Index: if_iwm.c > === > RCS file: /cvs/src/sys/dev/pci/if_i

Re: tame() error handling diff

2015-10-06 Thread Nicholas Marriott
I am not convinced, changing errno like this is gratuitous. We actually do do it elsewhere, but IMO that is unnecessary too. On Tue, Oct 06, 2015 at 08:39:02AM +0200, Benny Lofgren wrote: > Hi Nicholas, > > Thanks for taking the time to review this. I'll try to elaborate on my > reasoning below.