friendlier doas persist

2019-01-22 Thread Ted Unangst
The persist feature in doas (actually the kernel side implementation) has some additional checks. The idea was to prevent accidental usage, but in practice it seems this is making life more difficult than necessary. It's cost without benefit. This diff relaxes the session checks so it should be pos

Re: Down bridge(4) & span ports

2019-01-22 Thread Klemens Nanni
On Tue, Jan 22, 2019 at 11:09:10PM +0100, Claudio Jeker wrote: > On Tue, Jan 22, 2019 at 12:57:34PM -0200, Martin Pieuchot wrote: > > If a bridge(4) is down packets don't flow through it, so be coherent and > > do not copy them for span ports. I hesitated to OK this since possible implications were

Re: Down bridge(4) & span ports

2019-01-22 Thread Claudio Jeker
On Tue, Jan 22, 2019 at 12:57:34PM -0200, Martin Pieuchot wrote: > If a bridge(4) is down packets don't flow through it, so be coherent and > do not copy them for span ports. > > ok? This makes span ports consistent with the bpf listener so this is indeed the right way for span ports to work on b

Re: bridge_ourether() tweak

2019-01-22 Thread Claudio Jeker
On Tue, Jan 22, 2019 at 12:58:56PM -0200, Martin Pieuchot wrote: > Directly pass a pointer, which implies we have a valid reference for > the given interface. This will matters when we'll start using ifp > indexes. > > ok? OK claudio@ > Index: net/if_bridge.c >

Re: acme-client: renewal fails

2019-01-22 Thread Sebastian Benoit
Lindner, Thomas 1. (Nokia - DE/Nuremberg)(thomas.1.lind...@nokia.com) on 2019.01.22 18:56:06 +: > Hello, > > I run OpenBSD 6.4 and recently noted that renewals with acme-client fail: > # acme-client -vv lists.dl6tom.de = >

Simple test case for performance oriented changes

2019-01-22 Thread Juan Francisco Cantero Hurtado
Just a little note for people working on performance. Recently, the go devs found that their CI jobs on OpenBSD were running twice as slow as other OS. It launches a lot of threads and processes, and some parts are really hard with the system. I think that this could be useful for people looking fo

acme-client: renewal fails

2019-01-22 Thread Lindner, Thomas 1. (Nokia - DE/Nuremberg)
Hello, I run OpenBSD 6.4 and recently noted that renewals with acme-client fail: # acme-client -vv lists.dl6tom.de = =

Re: net80211: 11n rate sets and MiRA SGI support

2019-01-22 Thread Stefan Sperling
On Tue, Jan 22, 2019 at 04:28:03PM +0100, Stefan Sperling wrote: > Move 11n rateset definitions out of MiRA and make them available to > net80211 and drivers in general. At the same time, I'm adding support > for 'short guard interval' (SGI) mode to MiRA. SGI is currently only > used by iwm(4), and

net80211: 11n rate sets and MiRA SGI support

2019-01-22 Thread Stefan Sperling
Move 11n rateset definitions out of MiRA and make them available to net80211 and drivers in general. At the same time, I'm adding support for 'short guard interval' (SGI) mode to MiRA. SGI is currently only used by iwm(4), and of course internally by bwfm(4) firmware. We will need additional defin

Re: bridge_ourether() tweak

2019-01-22 Thread Klemens Nanni
On Tue, Jan 22, 2019 at 12:58:56PM -0200, Martin Pieuchot wrote: > Directly pass a pointer, which implies we have a valid reference for > the given interface. This will matters when we'll start using ifp > indexes. Yes, OK kn.

bridge_ourether() tweak

2019-01-22 Thread Martin Pieuchot
Directly pass a pointer, which implies we have a valid reference for the given interface. This will matters when we'll start using ifp indexes. ok? Index: net/if_bridge.c === RCS file: /cvs/src/sys/net/if_bridge.c,v retrieving revis

Down bridge(4) & span ports

2019-01-22 Thread Martin Pieuchot
If a bridge(4) is down packets don't flow through it, so be coherent and do not copy them for span ports. ok? Index: net/if_bridge.c === RCS file: /cvs/src/sys/net/if_bridge.c,v retrieving revision 1.316 diff -u -p -r1.316 if_bridge.

vmd: change virtio network interface numbering

2019-01-22 Thread Mike Larkin
I just committed a change to move the virtio network interfaces before disks in the PCI device ordering in vmd(8). This is to fix some strangeness in how Linux assigns device numbers (based on the PCI slot number). On some Linux guests, you'll get a virtio network interface named enp0s3 (for examp

Re: sensors hiding with pledge

2019-01-22 Thread Stuart Henderson
On 2019/01/21 22:34, Theo de Raadt wrote: > This approach seems backwards. > > It is hiding sensors from programs which are pledged (ie. we put effort into > security, therefore a fig leaf for privacy) > > But.. in programs we cannot pledge, we continue exporting. > > Yes chrome is pledged so pe