Re: attention please: host's IP stack behavior got changed slightly

2019-12-14 Thread Daniel Jakots
Hello sashan, On Sun, 8 Dec 2019 12:42:13 +0100, Alexandr Nedvedicky wrote: > It is understood the behavior, which has been settled in IP stack > since 80's, got changed. tech@openbsd.org (or b...@openbsd.org) wants > to hear back from you, if this change breaks your existing set up. My sshd do

ospf6d: makes area part of struct iface

2019-12-14 Thread Denis Fondras
As the subject says. By request of remi@ (https://marc.info/?l=openbsd-tech&m=157635822315646&w=2) Index: database.c === RCS file: /cvs/src/usr.sbin/ospf6d/database.c,v retrieving revision 1.17 diff -u -p -r1.17 database.c --- databas

Re: ospf6d: rework redist_list and area

2019-12-14 Thread Denis Fondras
On Sat, Dec 14, 2019 at 10:15:36PM +0100, Remi Locherer wrote: > On Sat, Dec 14, 2019 at 12:05:57PM +0100, Denis Fondras wrote: > > Still working towards bringing ospf6d and ospfd closer. > > > > area is now part of struct iface. > > Makes sense to me. > > > redist_list is part of struct area. >

Re: ospf6d: rework redist_list and area

2019-12-14 Thread Remi Locherer
On Sat, Dec 14, 2019 at 12:05:57PM +0100, Denis Fondras wrote: > Still working towards bringing ospf6d and ospfd closer. > > area is now part of struct iface. Makes sense to me. > redist_list is part of struct area. In ospfd the redist_list per area is only used to redistribute a default route

Re: syspatch -c as non-root

2019-12-14 Thread Theo de Raadt
Vadim Zhukov wrote: > But anyway, root-only requirement for listing available syspatches > seems a bit silly. as Antoine has replied, this is so the file retrieval occurs as a privsep user, so that a bug in that tooling is very much more difficult to exploit. Undoing that privsep feels unhealth

Re: bgpd rde refactor

2019-12-14 Thread Denis Fondras
On Fri, Dec 13, 2019 at 05:18:17PM +0100, Claudio Jeker wrote: > This diff changes the way session or peer related imsgs are handled. > Instead of passing the imsg.hdr.peerid down and doing the lookup for the > peer in each function move that code up into the imsg handler. > The plan is to add an i

Re: syspatch -c as non-root

2019-12-14 Thread Vadim Zhukov
сб, 14 дек. 2019 г. в 14:35, Antoine Jacoutot : > > On Sat, Dec 14, 2019 at 10:12:36AM +0300, Vadim Zhukov wrote: > > Hello all (long time no see!) > > > > TL;DR: Allow syspatch -c run under non-priviledged user. > > > > Reasoning: instead of putting syspatch -c in crontab, I've implemented > > a Z

Re: login_passwd: reject challenge service

2019-12-14 Thread Todd C . Miller
On Wed, 11 Dec 2019 21:17:38 +0100, "Thomas L." wrote: > I've now been able to test the patch and login/su/doas/ssh still work > as expected. All the other login_* styles in base are well behaved. Is > there a reason that this should not be done? Your diff is correct. The original version of log

Re: vmctl: print root user in status owner field

2019-12-14 Thread Jasper Lievisse Adriaanse
> On 14 Dec 2019, at 02:16, Klemens Nanni wrote: > > With "owner root:wheel" (any group) the `vmctl status' output > will omit the "root" part in the OWNER column: > > vm "generic" { > owner "root:vms" > ... > } > > $ vmctl status > ID

Re: /usr/bin/ftp: 308 Permanent Redirect

2019-12-14 Thread Klemens Nanni
On Sat, Dec 14, 2019 at 12:11:41PM +0100, Christopher Zimmermann wrote: > to me it seems that since our ftp does only support GET requests anyway, a > 308 Redirect response can be handled identical to a 301 Redirect. OK? OK kn with one thing: > Index: fetch.c >

Re: /usr/bin/ftp: 308 Permanent Redirect

2019-12-14 Thread Jeremie Courreges-Anglas
On Sat, Dec 14 2019, Christopher Zimmermann wrote: > Hi, Hi, > to me it seems that since our ftp does only support GET requests anyway, > a 308 Redirect response can be handled identical to a 301 Redirect. OK? ok jca@ Do you need this for particular websites / implementations? > Christopher >

Re: syspatch -c as non-root

2019-12-14 Thread Antoine Jacoutot
On Sat, Dec 14, 2019 at 10:12:36AM +0300, Vadim Zhukov wrote: > Hello all (long time no see!) > > TL;DR: Allow syspatch -c run under non-priviledged user. > > Reasoning: instead of putting syspatch -c in crontab, I've implemented > a Zabbix trigger. Since the Zabbix agent runs as unpriviledged us

/usr/bin/ftp: 308 Permanent Redirect

2019-12-14 Thread Christopher Zimmermann
Hi, to me it seems that since our ftp does only support GET requests anyway, a 308 Redirect response can be handled identical to a 301 Redirect. OK? Christopher Index: fetch.c === RCS file: /cvs/src/usr.bin/ftp/fetch.c,v retriev

ospf6d: rework redist_list and area

2019-12-14 Thread Denis Fondras
Still working towards bringing ospf6d and ospfd closer. area is now part of struct iface. redist_list is part of struct area. Some changes, related to reloading, are not in use now but it feels like the right time to get it in. Denis Index: area.c ===

Re: ublink(4), led(4) and ledctl(1)

2019-12-14 Thread Mark Kettenis
> Date: Sat, 14 Dec 2019 10:20:52 +1100 > From: Jonathan Gray > > On Fri, Dec 13, 2019 at 10:34:59PM +0100, Patrick Wildt wrote: > > Hi, > > > > I have a ThingM blink(1) USB RGB device that shows up as uhid(4). > > The tooling is "interesting", especially with all those libusb and > > HID librar

Re: ublink(4), led(4) and ledctl(1)

2019-12-14 Thread Jan Klemkow
On Fri, Dec 13, 2019 at 10:34:59PM +0100, Patrick Wildt wrote: Nice project. If this makes it into the tree then I could rewrite [1]. [1]: https://github.com/younix/g403led > And I don't often do userland tools, so feel free to > let me know how to improve it. > ... > +int > +main(int argc, char