Document missing pledge promises

2021-06-11 Thread Josh Rickmar
Here's my take at documenting the missing pledge promises in pledge.2 and placing them in a reasonable order with the others. Each of these just enabled various ioctl or sysctl interfaces. I'm unhappy with the explanation for drm, but don't know how to explain the purpose of these ioctls, and cou

Re: Match ps pledge name order with pledge(2)

2021-06-09 Thread Josh Rickmar
On Wed, Jun 09, 2021 at 06:01:59PM +, Klemens Nanni wrote: > > There were three promises which are not documented in pledge(2): > > disklabel, drm, and vmm. I've just left these at the end. > Sounds good. Are the undocumented promises intentional, or bugs in pledge(2)? > Either way, a small

Match ps pledge name order with pledge(2)

2021-06-09 Thread Josh Rickmar
I was surprised to find that ps -O pledge did not list the pledge promise names in the same order as the pledge(2) manpage. Besides lacking consistency, this was also making it difficult to quickly find which promises are not granted to a process which requires most of them (e.g. chrome). I figur

Re: vmd(8) support for gzipped kernels

2021-04-05 Thread Josh Rickmar
On Fri, Mar 26, 2021 at 12:22:49PM +0100, Klemens Nanni wrote: > On Fri, Mar 26, 2021 at 07:17:26AM -0400, Dave Voutila wrote: > > There was a follow-up diff changing some includes, but I'd like to keep > > that cleanup separate. As i mentioned in the other reply, this change > > works for me and I

Re: monotonic time going back by wrong skews

2021-04-01 Thread Josh Rickmar
On Thu, Apr 01, 2021 at 06:43:30PM -0500, Scott Cheloha wrote: > On Thu, Apr 01, 2021 at 03:41:24PM -0400, Josh Rickmar wrote: > > On Thu, Apr 01, 2021 at 03:22:00PM -0400, Josh Rickmar wrote: > > > On Thu, Apr 01, 2021 at 02:15:48PM -0500, Scott Cheloha wrote: > > > &

Re: monotonic time going back by wrong skews

2021-04-01 Thread Josh Rickmar
On Thu, Apr 01, 2021 at 03:22:00PM -0400, Josh Rickmar wrote: > On Thu, Apr 01, 2021 at 02:15:48PM -0500, Scott Cheloha wrote: > > On Sat, Mar 27, 2021 at 02:20:21AM +, Stefmorino wrote: > > > > Feel free to share your raw data. > > > > > > Also incl

Re: monotonic time going back by wrong skews

2021-04-01 Thread Josh Rickmar
# dmesg | egrep -i 'tsc|clocksource' > > 2. Second, is there a more recent BIOS revision for this machine? >Perhaps (assuming this is in fact a BIOS problem) Lenovo is aware > of it and has fixed it. This is unlikely but worth a look. > > Long versio

Re: monotonic time going back by wrong skews

2021-03-25 Thread Josh Rickmar
On Thu, Mar 25, 2021 at 05:28:54PM -0500, Scott Cheloha wrote: > Feel free to share your raw data. Attached. e485skews.tgz Description: application/tar-gz

Re: Permit reading kern.somaxconn with unix pledge

2021-03-25 Thread Josh Rickmar
On Mon, Feb 01, 2021 at 08:18:53PM +, Josh Rickmar wrote: > The kern.somaxconn sysctl was previously permitted under the inet > pledge, which allowed pledged Go applications to listen on AF_INET and > AF_INET6 domains. > > https://marc.info/?l=openbsd-tech&m=15806959

Re: monotonic time going back by wrong skews

2021-03-25 Thread Josh Rickmar
On Thu, Mar 25, 2021 at 01:18:04PM -0500, Scott Cheloha wrote: > > On Mar 24, 2021, at 8:29 AM, Josh Rickmar wrote: > > > > On Wed, Mar 24, 2021 at 05:40:21PM +0900, YASUOKA Masahiko wrote: > >> Hi, > >> > >> I hit a problem which is caused by goin

Re: monotonic time going back by wrong skews

2021-03-24 Thread Josh Rickmar
On Wed, Mar 24, 2021 at 05:40:21PM +0900, YASUOKA Masahiko wrote: > Hi, > > I hit a problem which is caused by going back of monotonic time. It > happens on hosts on VMware ESXi. > > I wrote the program which repeats the problem. > > % cc -o monotime monotime.c -lpthread > % ./monotime > 194

Re: Mention vmd FFS boot support removal in current.html

2021-03-19 Thread Josh Rickmar
On Fri, Mar 19, 2021 at 03:26:46PM -0400, Josh Rickmar wrote: > I got some emails off list asking about the removal and if it affected > them. Worth adding to current.html? sorry for the noise, missed a diff 0d7807046bcfacd3249f4c62031ac970d9b42ace /home/jrick/ww

Mention vmd FFS boot support removal in current.html

2021-03-19 Thread Josh Rickmar
I got some emails off list asking about the removal and if it affected them. Worth adding to current.html? diff 0d7807046bcfacd3249f4c62031ac970d9b42ace /home/jrick/www blob - 9452b3672627fb39fa0c7ec17a17e08f57406afa file + faq/current.html --- faq/current.html +++ faq/current.html @@ -274,6 +274

Re: vmd(8) support for gzipped kernels

2021-03-19 Thread Josh Rickmar
On Fri, Mar 19, 2021 at 10:29:10AM -0400, Josh Rickmar wrote: > Here's an updated version of the patch I had originally posted to > bugs@ adding support for reading gzipped kernels (needed to boot amd64 > bsd.rd without manually decompressing first), now that the support for >

vmd(8) support for gzipped kernels

2021-03-19 Thread Josh Rickmar
Here's an updated version of the patch I had originally posted to bugs@ adding support for reading gzipped kernels (needed to boot amd64 bsd.rd without manually decompressing first), now that the support for booting a kernel discovered on a ffs filesystem in the image file is removed. I've kept th

Remove extra pointer to gzFile in grep(1)

2021-03-10 Thread Josh Rickmar
The compress(3) family of utility functions return and operate on gzFile, a typedef for void*. The extra pointer to this gzFile in grep(1) can be removed. Other uses of these compress(3) functions in tree (spamd, mandoc, smtpd) do not use the extra pointer. diff 5fb603068396a80293d0f411297e6119a

Re: veb(4) support for vmd(8)?

2021-02-26 Thread Josh Rickmar
David Gwynne wrote: > I'd vote that way, but I am biased. > > Some test reports that it's working well for people would be nice too.= This is working well in my testing as a replacement for bridge/vether usage as told in the virtualization FAQ, but I was unaware that the vport interface needed to

Permit reading kern.somaxconn with unix pledge

2021-02-01 Thread Josh Rickmar
The kern.somaxconn sysctl was previously permitted under the inet pledge, which allowed pledged Go applications to listen on AF_INET and AF_INET6 domains. https://marc.info/?l=openbsd-tech&m=158069595809463&w=2 https://marc.info/?l=openbsd-cvs&m=158081099810301&w=2 But Go will also read this sysc

Re: nosuid more partitions that no longer have suid executables

2020-12-16 Thread Josh Rickmar
On Wed, Dec 16, 2020 at 03:40:41PM -0700, Theo de Raadt wrote: > the term "suid" includes setgid executables... so your conclusions > are way wrong. > > Heck, you should give it a try. Good luck logging in afterwards. Indeed, please disregard.

nosuid more partitions that no longer have suid executables

2020-12-16 Thread Josh Rickmar
Playing around with find ${dir} -type f -perm -04000, I see that there are no longer any more suid executables placed in /usr/libexec or /usr/X11R6, so I believe these can be removed from install.sub. Based on the comments, this hasn't been touched in a long while. diff bfe4739adb21458b6ca3fc690d

smtp(1) fix for usernames containing '@' symbols

2020-09-14 Thread Josh Rickmar
Some email accounts use account names that include the @host portion, and this broke the server and credentials parsing in smtp(1). Sometimes I see these @ characters encoded as %40, but smtp(1) was not decoding these url escape sequences before base64 encoding and talking with the server. Search