fstat: remove setpassent leftovers

2021-07-16 Thread Klemens Nanni
Should've gone with revision 1.95 date: 2018/09/16 02:44:06; author: millert; state: Exp; lines: +10 -5; Use uid_from_user(3) and gid_from_group(3) in utilities that do repeated lookups. OK tb@ OK? Index: fstat.c =

Re: vmd(8): simplify vcpu logic, removing uart & net reads

2021-07-16 Thread Dave Voutila
Mike Larkin writes: > On Sun, Jul 11, 2021 at 08:10:42AM -0400, Dave Voutila wrote: >> >> Ping...looking for OK. Would like to get this committed this week. >> > > Sorry this took so long. ok mlarkin. > > Thanks to the numerous testers who ran with this for the past few > weeks. > Committed. Th

Re: forwarding in parallel with ipsec panic

2021-07-16 Thread Alexander Bluhm
On Fri, Jul 09, 2021 at 02:58:50PM +0200, Alexander Bluhm wrote: > 1. With non parallel forwarding the IPsec traffic stalls after a while. > esp_input_cb: authentication failed for packet in SA 10.3.45.35/83089fff Together with tobhe@ we found the issue. The authentication before decryption uses

Re: /etc/ssl/cert.pem doesn't need to be unveiled on ntpd(8)

2021-07-16 Thread Klemens Nanni
On Thu, Jul 08, 2021 at 02:12:37PM +0100, Ricardo Mestre wrote: > my eyes may be tricking me, but it looks like the main proc doesn't speak with > sockets during the main loop and setpriority plus privdrop at this point are > all > set and done so pledge("inet id") are not required. > > I have it

Re: /etc/ssl/cert.pem doesn't need to be unveiled on ntpd(8)

2021-07-16 Thread Ricardo Mestre
any comments on the pledge(2) side of things? On 14:12 Thu 08 Jul , Ricardo Mestre wrote: > my eyes may be tricking me, but it looks like the main proc doesn't speak with > sockets during the main loop and setpriority plus privdrop at this point are > all > set and done so pledge("inet id") a