Re: [patch] openrsync blk_flush() fd leak in blk_match()

2019-02-11 Thread Sebastian Benoit
commited, thanks! Hiltjo Posthuma(hil...@codemadness.org) on 2019.02.11 20:55:09 +0100: > Hi, > > I think the fd can leak when blk_flush() fails in blocks.c blk_match(), > because > ERR and ERRX1 does not to terminate. Am I correct? > > I also (hopefully) simplified the logic a bit (set nfd = -

[patch] openrsync blk_flush() fd leak in blk_match()

2019-02-11 Thread Hiltjo Posthuma
Hi, I think the fd can leak when blk_flush() fails in blocks.c blk_match(), because ERR and ERRX1 does not to terminate. Am I correct? I also (hopefully) simplified the logic a bit (set nfd = -1 and goto out). Thanks for working on (open)rsync! Patch below: diff --git a/usr.bin/rsync/blocks.c

Re: install(1) broken

2019-02-11 Thread Marc Espie
On Sun, Feb 10, 2019 at 03:55:41PM +0100, Marc Espie wrote: > Something similar to this perhaps ? > Not fully tested yet, but it should avoid the race of trying to > unlink tempfile several times, and also fix the file name in error messages. That's now been tested (gone thru a build + xbuild an

Re: CRYPTO CONTAINER

2019-02-11 Thread Solene Rapenne
On Mon, Feb 11, 2019 at 12:39:52PM +0100, Oleg Pahl wrote: > Hi All, > > Linux has one tool CRYPTSETUP. > > With this tool I can prepare one container, then open it put > some private data and close. > > I know that our OpenBSD is also Crypto Paranoid OS. > > Any idea how can I do the same proc

Re: CRYPTO CONTAINER

2019-02-11 Thread Janne Johansson
"man vnconfig" ? Den mån 11 feb. 2019 kl 12:40 skrev Oleg Pahl : > Hi All, > > Linux has one tool CRYPTSETUP. > > With this tool I can prepare one container, then open it put some > private data and close. > > I know that our OpenBSD is also Crypto Paranoid OS. > > Any idea how can I do the same

CRYPTO CONTAINER

2019-02-11 Thread Oleg Pahl
Hi All, Linux has one tool CRYPTSETUP. With this tool I can prepare one container, then open it put some private data and close. I know that our OpenBSD is also Crypto Paranoid OS. Any idea how can I do the same procedure using OBSD default tools? What is recommended work flow for it (to se

Re: bgpd L3VPN rework

2019-02-11 Thread Denis Fondras
On Thu, Feb 07, 2019 at 11:41:39AM +0100, Claudio Jeker wrote: > At a2k19 David (dlg@) and I sat down and looked at BGP L3 MPLS VPN > support. Now David wants to use this in production and realized that > in his case it would be great to have more than one mpe(4) interface per > rdomain. This way i