Re: tell pfctl(8) route-to and reply-to accept next-hop only

2021-01-21 Thread David Gwynne
I tried this diff, and it broke the ability to use dynamic addresses. ie, the following rules should work: pass in on gre52 inet proto icmp route-to (gre49:peer) pass in on vmx0 inet proto icmp route-to (gre:peer) however, other forms of dynamic interface addresses should fail. or do we want to s

Re: [PATCH v2] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-21 Thread William Ahern
On Fri, Jan 22, 2021 at 12:12:58AM +0100, Alejandro Colomar wrote: > This is useful for using tee to just write to a file, > at the end of a pipeline, > without having to redirect to /dev/null. > @@ -93,6 +98,7 @@ Copy standard input to each FILE, and also to standard > output.\n\ > "), stdout);

[PATCH v2] tee: Add -q, --quiet, --silent option to not write to stdout

2021-01-21 Thread Alejandro Colomar
This is useful for using tee to just write to a file, at the end of a pipeline, without having to redirect to /dev/null. Example: echo 'foo' | sudo tee -q /etc/foo; is equivalent to the old (and ugly) echo 'foo' | sudo tee /etc/foo >/dev/null; Tools with a similar interface: grep

Re: [PATCH] tee: Add -q, --quiet option to not write to stdout

2021-01-21 Thread Alejandro Colomar (man-pages)
[CC += mtk, linux-api, freebsd, openbsd] On 1/21/21 10:26 PM, Alejandro Colomar (man-pages) wrote: > Hi Berny, > > On 1/21/21 10:01 PM, Bernhard Voelker wrote: >> On 1/21/21 7:39 PM, Alex Henrie wrote: >>> That said, I would love to see `tee -q` added to a future revision of >>> POSIX and adopted

Re: libcurses: don't return ERR if resize didn't change size

2021-01-21 Thread Todd C . Miller
On Thu, 21 Jan 2021 19:53:48 +0100, Hiltjo Posthuma wrote: > Yes please!, I've also run into this issue on OpenBSD with the "catpoint" > presentation program. I've been meaning to send the exact same backport patch > . > > The upstream snapshot version of ncurses compiles fine on OpenBSD and I've

Re: games/canfield bug

2021-01-21 Thread Theo Buehler
> We should just ignore any of the special curses keys returned by > getch() since canfield is not prepared to deal with them. ok tb

Re: libcurses: don't return ERR if resize didn't change size

2021-01-21 Thread Hiltjo Posthuma
On Thu, Jan 21, 2021 at 11:06:05AM -0700, Todd C. Miller wrote: > This is a backport of the ncurses 5.9 20120707 patch. > https://github.com/mirror/ncurses/commit/471bc007361fd4bc8d2fae060c7d5b09828ed541 > > Previously, getch() would return ERR if SIGWINCH was received but > the window didn't actu

libcurses: don't return ERR if resize didn't change size

2021-01-21 Thread Todd C . Miller
This is a backport of the ncurses 5.9 20120707 patch. https://github.com/mirror/ncurses/commit/471bc007361fd4bc8d2fae060c7d5b09828ed541 Previously, getch() would return ERR if SIGWINCH was received but the window didn't actually change size. This can happen, for example, when the xterm font is ch

games/canfield bug

2021-01-21 Thread Todd C . Miller
Paul Janzen reported that if you try to resize an xterm while canfield is running, canfield suspends itself. This is due to the curses getch() function returning KEY_RESIZE. However, canfield only expects to read 7-bit ascii characters and so uses a mask of 0x7f. Since KEY_RESIZE & 0x7f == 0x1a (

unwind(8): Implement DNS64 synthesis.

2021-01-21 Thread Florian Obser
When unwind(8) learns new autoconf resolvers (from dhcp or router advertisements) it checks if a DNS64 is present in this network location and tries to recover the IPv6 prefix used according to RFC7050. The learned autoconf resolvers are then prevented from upgrading to the validating state since

unwind(8): refactor resolv_conf creation for asr

2021-01-21 Thread Florian Obser
Move resolv_conf string generation for ASR to function; makes upcomming DNS64 diff simpler. OK? diff --git resolver.c resolver.c index d42d19c1087..2634b95c01f 100644 --- resolver.c +++ resolver.c @@ -195,6 +195,7 @@ int running_query_cnt(void); int*resolvers

unwind(8): SECURE answer & upgrade to validating answer

2021-01-21 Thread Florian Obser
Don't just blindly upgrade to VALIDATING if we see a SECURE answer. This can happen if things improve after we check a strategy, for example ntpd corrected the time. Let's go through the check_resolver() / new_resolver() code path which will also hook up the resovler to the shared cache. diff --g

Re: explicit_bzero csalt

2021-01-21 Thread Theo de Raadt
I guess so, though I cannot imagine a program-context where bcrypt_newhash stack's can be leaked in a dangerous way. Programs that create these hashes end up knowing more, or having more power. Peter J. Philipp wrote: > Hi, > > On IRC, someone and I were arbitrarily going through bcrypt.c and

Re: vacation.1: correct .forward file example

2021-01-21 Thread gilles
January 21, 2021 11:45 AM, gil...@poolp.org wrote: > January 21, 2021 11:25 AM, "Claus Assmann" wrote: > >> On Thu, Jan 21, 2021, Martin Vahlensieck wrote: >> >>> I think the backslash at the beginning of the line is an error. >> >> Why? Does it fail when used as described? >> >>> -\eeric, "|

Re: vacation.1: correct .forward file example

2021-01-21 Thread gilles
January 21, 2021 11:25 AM, "Claus Assmann" wrote: > On Thu, Jan 21, 2021, Martin Vahlensieck wrote: > >> I think the backslash at the beginning of the line is an error. > > Why? Does it fail when used as described? > >> -\eeric, "|/usr/bin/vacation -a allman eric" > > Originally this was to a

explicit_bzero csalt

2021-01-21 Thread Peter J. Philipp
Hi, On IRC, someone and I were arbitrarily going through bcrypt.c and I noticed the following resulting from bcrypt_newhash(): int bcrypt_newhash(const char *pass, int log_rounds, char *hash, size_t hashlen) { char salt[BCRYPT_SALTSPACE]; if (bcrypt_initsalt(log_rounds, salt, siz

Re: vacation.1: correct .forward file example

2021-01-21 Thread Mark Kettenis
> Date: Thu, 21 Jan 2021 12:49:57 + > From: Jason McIntyre > > On Thu, Jan 21, 2021 at 12:47:15PM +, Stuart Henderson wrote: > > On 2021/01/21 12:43, Jason McIntyre wrote: > > > On Thu, Jan 21, 2021 at 11:15:48AM +0100, Martin Vahlensieck wrote: > > > > Hi > > > > > > > > I think the bac

Re: vacation.1: correct .forward file example

2021-01-21 Thread Theo de Raadt
Jason McIntyre wrote: > On Thu, Jan 21, 2021 at 12:47:15PM +, Stuart Henderson wrote: > > On 2021/01/21 12:43, Jason McIntyre wrote: > > > On Thu, Jan 21, 2021 at 11:15:48AM +0100, Martin Vahlensieck wrote: > > > > Hi > > > > > > > > I think the backslash at the beginning of the line is an e

Re: vacation.1: correct .forward file example

2021-01-21 Thread Jason McIntyre
On Thu, Jan 21, 2021 at 12:47:15PM +, Stuart Henderson wrote: > On 2021/01/21 12:43, Jason McIntyre wrote: > > On Thu, Jan 21, 2021 at 11:15:48AM +0100, Martin Vahlensieck wrote: > > > Hi > > > > > > I think the backslash at the beginning of the line is an error. > > > > > > Best, > > > > >

Re: vacation.1: correct .forward file example

2021-01-21 Thread Stuart Henderson
On 2021/01/21 12:43, Jason McIntyre wrote: > On Thu, Jan 21, 2021 at 11:15:48AM +0100, Martin Vahlensieck wrote: > > Hi > > > > I think the backslash at the beginning of the line is an error. > > > > Best, > > > > Martin > > > > Index: vacation.1 > >

Re: vacation.1: correct .forward file example

2021-01-21 Thread Jason McIntyre
On Thu, Jan 21, 2021 at 11:15:48AM +0100, Martin Vahlensieck wrote: > Hi > > I think the backslash at the beginning of the line is an error. > > Best, > > Martin > > Index: vacation.1 > === > RCS file: /home/reposync/cvs//src/usr.b

Re: vacation.1: correct .forward file example

2021-01-21 Thread Claus Assmann
On Thu, Jan 21, 2021, Martin Vahlensieck wrote: > I think the backslash at the beginning of the line is an error. Why? Does it fail when used as described? > -\eeric, "|/usr/bin/vacation -a allman eric" Originally this was to avoid recursion, i.e., \eric will not be expanded again. Maybe that

vacation.1: correct .forward file example

2021-01-21 Thread Martin Vahlensieck
Hi I think the backslash at the beginning of the line is an error. Best, Martin Index: vacation.1 === RCS file: /home/reposync/cvs//src/usr.bin/vacation/vacation.1,v retrieving revision 1.23 diff -u -p -r1.23 vacation.1 --- vacatio

Re: ims: claim to be a touchpad

2021-01-21 Thread Marcus Glocker
On Wed, 20 Jan 2021 21:42:21 -0600 joshua stein wrote: > There are no i2c-connected mice and ims(4) will always be a > touchpad/touchscreen/stylus that just doesn't meet the requirements > of imt(4). > > Presenting it as WSMOUSE_TYPE_TOUCHPAD makes the X server set it up > as a separate point