Re: OpenBSD 7.2 on Oracle Cloud

2023-04-23 Thread Aaron Mason
On Fri, Apr 21, 2023 at 2:50 PM Aaron Mason wrote: > > On Fri, Apr 21, 2023 at 1:39 PM Aaron Mason wrote: > > > > On Fri, Apr 7, 2023 at 3:25 AM Antun Matanović > > wrote: > > > > > > On Thu, 6 Apr 2023 at 12:55, Fabio Martins wrote: > > > > > > > > Try to add an entry in grub like in this arti

Re: in_ioctl*: hoist identical privilege checks

2023-04-23 Thread Klemens Nanni
On Tue, Apr 18, 2023 at 10:44:36PM +, Klemens Nanni wrote: > On Sat, Apr 15, 2023 at 01:48:02PM +, Klemens Nanni wrote: > > On Fri, Apr 14, 2023 at 11:33:18PM +, Klemens Nanni wrote: > > > All cases do the same check up first, so merge it before the switch. > > Committed. > > > > It c

installer: disk crypto: crank KDF rounds to hardware based default

2023-04-23 Thread Klemens Nanni
For new installs, it seems adequate to base the number on the actual hardware, assuming the CRYPTO volume will stay in that hardware for a while. The current default of 16 is from old PKCS5 PBKDF2 times and changing it in bioctl(8) is a more invasive change (for later, perhaps). Thoughts? Feedba

mg: rework adjustname() and drop expandtilde()

2023-04-23 Thread Omar Polo
adjustname() should canonicalize the given path, but it does not do it always, resulting in some bizzare situations. it calls realpath(3) but when it fails the given path is returned as-is. This in practice can happen quite often since it's not usual for an editor to visit new files. A quick way

bgpctl fixup show flowspec with address family

2023-04-23 Thread Claudio Jeker
In `bgpctl show flowspec inet` adjust the sent aid to a flowspec version. The parser returns AID_INET, AID_INET6 (or the currently unsuported AID_VPNv4/6) but bgpd wants AID_FLOWSPECv4 and AID_FLOWSPECv6. Fix this up before sending the command. -- :wq Claudio Index: bgpctl.c

bgpd, aid filter in prefix_flowspec_dump()

2023-04-23 Thread Claudio Jeker
This adds the required AID filter in prefix_flowspec_dump(). -- :wq Claudio Index: rde_rib.c === RCS file: /cvs/src/usr.sbin/bgpd/rde_rib.c,v retrieving revision 1.259 diff -u -p -r1.259 rde_rib.c --- rde_rib.c 19 Apr 2023 13:23:3

Re: [patch] Avoid change of permissions in /etc/resolv.conf

2023-04-23 Thread Theo de Raadt
I am still not seeing any reason to change how OpenBSD works, since noone else has ever been affected by this behaviour. Juan Picca wrote: > Hi Stuart > > > I'd suggest targetting the umask setting, either by giving all users > > class 'staff' or adding a new one which inherits from default. >