Alexandr Nedvedicky (sashan@)
wrote to tech@
regarding a recent significant
change:
Hello,
commit from today [1] makes IP stack more paranoid. Up to now OpenBSD
implemented so called ‘weak host model’ [2]. The today’s commit alters
that for…
Fresh from the just concluded e2k19 hackathon, Claudio Jeker (claudio@) writes in:
After 2 years it was once again time to pack skis and snowshoes,
put a satellite dish onto a sledge and hike through the snowy rockies
to the Elk Lakes hut.
…
Theo de Raadt (deraadt@) has
committed
code for a new exploit-prevention mechanism:
[…]
Repurpose the "syscalls must be on a writeable page" mechanism to
enforce a new policy: system calls must be in pre-registered regions.
We…
Florian Obser (florian@) has
committed
code to give
unwind(8)
a flexible approach to resolving strategies:
Modified files:
sbin/unwind : resolver.c resolver.h
usr.sbin/unwindctl: unwindctl.c
Log message:
Instead of only considering…
Next up in our hackathon series from p2k19 is one from Stefan Sperling (stsp@),
who writes:
My main goal for the p2k19 hackathon was 9260 device support in iwm(4).
Firmware updates for previous device generation were an important
prerequisite st…
Next up in the series of p2k19 reports is Ken Westerback (krw@), who writes:
tl;dr – Great City, Great Coffee, Great Hacking. I already miss Bucharest.
Read more…
Our next p2k19 report comes from Jeremy Evans (jeremy@):
While I had originally planned to attend the entire hackathon,
circumstances changed and I was only able to make it there for a few
days. Still, I was able to get some work done.
Read …
Fresh from the just concluded p2k19 hackathon comes this report from Landry breuil (landry@), who writes:
This year having been a bit hectic with work and house renovation, i was
really planning to enjoy bucarest as the first real break of the y…
Fresh from the just concluded p2k19 hackathon comes this report from Landry breuil (landry@), who writes:
This year having been a bit hectic with work and house renovation, i was
really planning to enjoy bucarest as the first real break of the y…
Fresh from Bucharest is this story from Martin Pieuchot (mpi@) with his experience from p2k19:
Since I attend OpenBSD hackathons, I hear stories about how crazy are
the ports hackathons. So I try my best to look like a porter in order
to experie…
Damien Miller (djm@)
posted to tech@:
Hi,
I just committed all the dependencies for OpenSSH security key (U2F)
support to base and tweaked OpenSSH to use them directly. This means
there will be no additional configuration hoops to jump throug…
The first p2k19 hackathon report comes from Marc Espie (espie@), who writes:
I already came to Bucharest a year ago for EuroBSDcon, but I welcomed the
chance at spending more time here, especially at a hackathon organized
by Paul, who is such a g…
Theo de Raadt (deraadt@)
posted
to tech@:
The ntpd options -s and -S are going to be removed soon and at startup
with print:
-s option no longer works and will be removed soon.
Please reconfigure to use constraints or trusted servers…
DNSSEC validation has been enabled in the default
unbound.conf(5)
in -current.
The relevant commits were
from
Job Snijders (job@)
CVSROOT: /cvs
Module name: src
Changes by: job@cvs.openbsd.org 2019/11/07 05:49:45
Modified files:
etc …
In a
message
to the openssh-unix-dev mailing list,
Damien Miller (djm@) wrote:
[…]
As of this morning, OpenSSH now has experimental U2F/FIDO support, with
U2F being added as a new key type "sk-ecdsa-sha2-nistp256@openssh.com"
…
The EuroBSDCon channel at YouTube now has the EuroBSDCon 2019 videos online.
One excellent way to start is with Patricia Aas’ excellent keynote Embedded Ethics and just go on, but you could also go directly to the OpenBSD related talks:
Marc…
A new OpenBSD store has been started, for those looking for OpenBSD swag now that the project no longer produces CDs. If you like the artwork that comes with the releases, this is a great way to support it. Quoting the about page:
We believe art he…
In a
message
to relevant mailing lists,
Theo de Raadt (deraadt@) announced that the
OpenBSD project’s 47th release,
OpenBSD 6.6,
is now available from
mirror sites
worldwide.
Rather than reproducing here the full list of new features,
we re…
Theo de Raadt (deraadt@)
posted to tech@:
Sometime in the last week OpenBSD crossed 400,000 commits (*) upon all
our repositories since starting at 1995/10/18 08:37:01 Canada/Mountain.
That’s a lot of commits by a lot of amazing people.
(*) b…
In a move bound to be greeted with great enthusiasm, the newly-released
Patch 012
for OpenBSD 6.5 adds
sysupgrade(8)
to the system.
Readers are encouraged to show their appreciation by
donating!