Re: Add 'video' pledge

2018-07-25 Thread Theo de Raadt
Landry Breuil wrote: > > As I said before, I am uncomfortable pushing this policy mechanism into > > the kernel to be used by *only one program*. > > I never said it was *only* for firefox. You are right. It is I that said it is only for firefox. Because that is the only diff on the table. Th

Re: tracking down sources of spin cpu%

2018-07-25 Thread Bryan Steele
On Wed, Jul 25, 2018 at 10:33:48PM +0100, Stuart Henderson wrote: > On 2018/07/25 22:57, Alexandre Ratchov wrote: > > On Wed, Jul 25, 2018 at 05:10:05PM +0100, Stuart Henderson wrote: > > > On 2018/07/25 15:26, Alexandre Ratchov wrote: > > > > On Wed, Jul 25, 2018 at 11:56:04AM +0100, Stuart Hender

httpd server configuration evaluation bug

2018-07-25 Thread Base Pr1me
Hi, I discovered that the wrong server configuration is evaluated in the server_read_http function. Only the first server in httpd.conf is checked. For example, I have five servers setup in httpd.conf and the third server is the only one with connection { max request body } set, because I des

Re: tracking down sources of spin cpu%

2018-07-25 Thread Stuart Henderson
On 2018/07/25 22:57, Alexandre Ratchov wrote: > On Wed, Jul 25, 2018 at 05:10:05PM +0100, Stuart Henderson wrote: > > On 2018/07/25 15:26, Alexandre Ratchov wrote: > > > On Wed, Jul 25, 2018 at 11:56:04AM +0100, Stuart Henderson wrote: > > > > On 2018/07/25 12:00, Antoine Jacoutot wrote: > > > > >

Re: tracking down sources of spin cpu%

2018-07-25 Thread Alexandre Ratchov
On Wed, Jul 25, 2018 at 05:10:05PM +0100, Stuart Henderson wrote: > On 2018/07/25 15:26, Alexandre Ratchov wrote: > > On Wed, Jul 25, 2018 at 11:56:04AM +0100, Stuart Henderson wrote: > > > On 2018/07/25 12:00, Antoine Jacoutot wrote: > > > > > I see the exact same issue as you do. > > > > > I'll t

Re: Add 'video' pledge

2018-07-25 Thread Landry Breuil
On Wed, Jul 25, 2018 at 12:29:10PM -0600, Theo de Raadt wrote: > >I went over this for a while and i don't see how firefox could be adapted to > >avoid this new pledge class. The other option is to move lots of code around > >so > >that the video device is opened/configured inconditionally by the

mention some missing macros in libevent man pages

2018-07-25 Thread Rob Pierce
Add a few macros in use but currently missing from the man page. ok? Index: event.3 === RCS file: /cvs/src/lib/libevent/event.3,v retrieving revision 1.53 diff -u -p -r1.53 event.3 --- event.3 29 Jun 2017 01:25:59 - 1.53

Re: Add 'video' pledge

2018-07-25 Thread Theo de Raadt
>I went over this for a while and i don't see how firefox could be adapted to >avoid this new pledge class. The other option is to move lots of code around so >that the video device is opened/configured inconditionally by the main process >before pledging (but then you'd still need the various ioct

Re: Add 'video' pledge

2018-07-25 Thread Landry Breuil
On Thu, May 24, 2018 at 07:15:05PM +0200, Landry Breuil wrote: > Hi, > > here's two simple diffs (one for the kernel, one for the pledge.2 > manpage) that allow me to use my webcam again within firefox when > pledged,, adding 'video' to the main process pledges. > > The kernel changes are similar

Re: tracking down sources of spin cpu%

2018-07-25 Thread Stuart Henderson
On 2018/07/25 15:26, Alexandre Ratchov wrote: > On Wed, Jul 25, 2018 at 11:56:04AM +0100, Stuart Henderson wrote: > > On 2018/07/25 12:00, Antoine Jacoutot wrote: > > > > I see the exact same issue as you do. > > > > I'll try with s/modesetting/intel and see if it improves things. > > > > > > OK I

Re: inteldrm: always use probed screen size for fb

2018-07-25 Thread Bryan Vyhmeister
On Wed, Jul 25, 2018 at 02:30:19PM +0100, Stuart Henderson wrote: > The problem is that if the clock is wrong, the server's certificate > and/or OCSP stapling can't be validated (it either appears to have > expired, or not be valid yet), so ntpd is unable to connect using https > to check the time.

Re: inteldrm: always use probed screen size for fb

2018-07-25 Thread Bryan Vyhmeister
On Wed, Jul 25, 2018 at 08:51:53AM +0100, Stuart Henderson wrote: > On 2018/07/24 13:25, Bryan Vyhmeister wrote: > > (Obviously clock was wrong and I did not realize it. Looks like ntpd is > > not setting the clock with -s for some reason so rdate did the trick.) > > If the clock is already more t

Re: inteldrm: always use probed screen size for fb

2018-07-25 Thread Stuart Henderson
On 2018/07/25 06:10, Bryan Vyhmeister wrote: > On Wed, Jul 25, 2018 at 08:51:53AM +0100, Stuart Henderson wrote: > > On 2018/07/24 13:25, Bryan Vyhmeister wrote: > > > (Obviously clock was wrong and I did not realize it. Looks like ntpd is > > > not setting the clock with -s for some reason so rdat

Re: tracking down sources of spin cpu%

2018-07-25 Thread Alexandre Ratchov
On Wed, Jul 25, 2018 at 11:56:04AM +0100, Stuart Henderson wrote: > On 2018/07/25 12:00, Antoine Jacoutot wrote: > > > I see the exact same issue as you do. > > > I'll try with s/modesetting/intel and see if it improves things. > > > > OK I can already confirm this "fixes" the issue for me. > > I

Re: xidle: launching program on timeout without active-area

2018-07-25 Thread Sebastien Marie
On Wed, Jul 25, 2018 at 12:55:48PM +0200, Claudio Jeker wrote: > On Wed, Jul 25, 2018 at 12:27:29PM +0200, Sebastien Marie wrote: > > On Mon, Jul 16, 2018 at 11:37:41AM +0200, Sebastien Marie wrote: > > > > > xidle(1) seems great for such purpose. But I didn't found a way to just > > > use timeout

[diff] usr.bin/ssh/session.c: indentation

2018-07-25 Thread Clemens Goessnitzer
small indentation fix, no functional change Index: session.c === RCS file: /cvs/src/usr.bin/ssh/session.c,v retrieving revision 1.304 diff -u -p -r1.304 session.c --- session.c 11 Jul 2018 18:53:29 - 1.304 +++ session.c 25 Jul 201

Re: bgpd, move nexthop pointer to struct prefix

2018-07-25 Thread Claudio Jeker
On Tue, Jul 24, 2018 at 01:00:03PM +0200, Claudio Jeker wrote: > After a lot of preparation diffs this does the actuall change of moving > the nexthop form struct rde_aspath to struct prefix. Also the nexthop > flags are moved into their own flag variable (reducing the flag masking > that happened

Re: ospfd: document in which cases the route prio filter is not used

2018-07-25 Thread Claudio Jeker
On Tue, Jul 24, 2018 at 05:46:15PM +0100, Jason McIntyre wrote: > On Tue, Jul 24, 2018 at 04:18:38PM +0200, Sebastian Benoit wrote: > > phessler@ noticed that we dont document which redistribute settings > > cause the priority filter to be enabled/disabled. > > > > Add this text: > > > >

Re: tracking down sources of spin cpu%

2018-07-25 Thread Stuart Henderson
On 2018/07/25 12:00, Antoine Jacoutot wrote: > > I see the exact same issue as you do. > > I'll try with s/modesetting/intel and see if it improves things. > > OK I can already confirm this "fixes" the issue for me. It's been up for long enough now that I agree. For anyone else running into this

Re: xidle: launching program on timeout without active-area

2018-07-25 Thread Claudio Jeker
On Wed, Jul 25, 2018 at 12:27:29PM +0200, Sebastien Marie wrote: > On Mon, Jul 16, 2018 at 11:37:41AM +0200, Sebastien Marie wrote: > > Hi, > > > > I am looking at a way to auto-logout some workstation on inactivity. > > ping. > > no problem if there is no interest for such thing in xidle, I wil

Re: xidle: launching program on timeout without active-area

2018-07-25 Thread Sebastien Marie
On Mon, Jul 16, 2018 at 11:37:41AM +0200, Sebastien Marie wrote: > Hi, > > I am looking at a way to auto-logout some workstation on inactivity. ping. no problem if there is no interest for such thing in xidle, I will write a dedicated app for that. > xidle(1) seems great for such purpose. But I

Re: tracking down sources of spin cpu%

2018-07-25 Thread Antoine Jacoutot
> I see the exact same issue as you do. > I'll try with s/modesetting/intel and see if it improves things. OK I can already confirm this "fixes" the issue for me. -- Antoine

Re: tracking down sources of spin cpu%

2018-07-25 Thread Antoine Jacoutot
On Wed, Jul 25, 2018 at 10:22:15AM +0100, Stuart Henderson wrote: > On 2018/07/24 23:07, Stuart Henderson wrote: > > My workstation is freezing up a lot again (usually in 30-60ish second > > bursts with no or very slow response to mouse or keyboard or screen > > updates). > > > > I have a status b

Re: tracking down sources of spin cpu%

2018-07-25 Thread Stuart Henderson
On 2018/07/24 23:07, Stuart Henderson wrote: > My workstation is freezing up a lot again (usually in 30-60ish second > bursts with no or very slow response to mouse or keyboard or screen > updates). > > I have a status bar (xstatbar) that displays a graph of the last minute > or so's cpu% split of

Re: inteldrm: always use probed screen size for fb

2018-07-25 Thread Stuart Henderson
On 2018/07/24 13:25, Bryan Vyhmeister wrote: > (Obviously clock was wrong and I did not realize it. Looks like ntpd is > not setting the clock with -s for some reason so rdate did the trick.) If the clock is already more than a little bit wrong and you have "constraints" in ntpd.conf, ntpd (even w