Posts in category OpenBSD Journal
Package updates for -stable branch no...
In a very welcome development, Solene Rapenne (solene@) announced that binary package updates for the most popular platforms will be available for the latest OpenBSD release.
The announcement reads:
The OpenBSD base system has received binary updates for security and
some other important problems in the base OS through syspatch(8) f [...]
6.6-beta has been tagged
Theo de Raadt (deraadt@)
has just
tagged
6.6-beta:
CVSROOT: /cvs
Module name: src
Changes by: deraadt@cvs.openbsd.org 2019/08/09 21:56:02
Modified files:
etc/root : root.mail
share/mk : sys.mk
sys/arch/macppc/stand/tbxidata: bsd.tbxi
sys/conf : newvers.sh
sys/sys : param.h
usr.bin/signify: [...]
Game of Trees
Stefan Sperling (stsp@) is developing a version control system,
"Game of Trees".
From <https://gameoftrees.org/>:
Game of Trees (Got) is a version control system which prioritizes ease of use and simplicity over flexibility.
Got is still under development; it is being developed exclusively on OpenBSD and its target audi [...]
snmp(1) added to -current
Martijn van Duren (martijn@) has
committed
a new
Simple Network Management Protocol
(SNMP) client,
snmp(1):
CVSROOT: /cvs
Module name: src
Changes by: martijn@cvs.openbsd.org 2019/08/09 00:17:59
Added files:
usr.bin/snmp : Makefile mib.c mib.h smi.c smi.h snmp.1 snmp.c
snmp.h snmpc.c
Log message:
Imp [...]
tpmr(4) driver added to -current
David Gwynne (dlg@) has committed to -current another new network driver -
an 802.1Q Two-Port MAC Relay driver,
tpmr(4).
The
main commit message
explains the raison d\'être:
CVSROOT: /cvs
Module name: src
Changes by: dlg@cvs.openbsd.org 2019/07/31 21:05:46
Added files:
sys/net : if_tpmr.c
Log message:
add tpmr(4), [...]
Touchpad, Interrupted
On his
blog,
Joshua Stein (jcs@) has written an
[another!]
excellent article on an involved investigation into a complex issue:
the non-arrival of interrupts for certain touchpad devices.
OpenBGPD 6.5p1 released.
Claudio Jeker (claudio@) has
announced
the release of a new version of
OpenBGPD:
We have released OpenBGPD 6.5p1, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon. This is
the first stable update for the 6.5 version.
Read more…
OpenBSD::Unveil(3p) added to -current
Andrew Fresh (afresh1@)
has
committed
OpenBSD::Unveil(3p),
a Perl interface to
unveil(2):
CVSROOT: /cvs
Module name: src
Changes by: afresh1@cvs.openbsd.org 2019/07/09 14:41:54
Added files:
gnu/usr.bin/perl/cpan/OpenBSD-Unveil: Unveil.xs
gnu/usr.bin/perl/cpan/OpenBSD-Unveil/lib/OpenBSD: Unveil.pm
gnu/usr.bin/perl/cpan/Op [...]
aggr(4) driver added to -current
David Gwynne (dlg@) has
committed to -current
a dedicated
Link Aggregation (EEE 802.1AX)
driver,
aggr(4).
The
main commit message
explains the raison d\'être:
CVSROOT: /cvs
Module name: src
Changes by: dlg@cvs.openbsd.org 2019/07/04 19:35:58
Added files:
sys/net : if_aggr.c
Log message:
add aggr(4), a dedi [...]
OpenBSD Community goes Platinum for 2...
Ken Westerback wrote in with some good news:
The OpenBSD Foundation
is happy to announce that individual
contributions from the OpenBSD community have again exceeded
CDN$50,000, making the community the 1st
Platinum level donor for 2019!
These smaller regular contributions are the backbone of longer
term spending planning. The Found [...]
doas environmental security
Ted Unangst (tedu@)
posted
to the tech@
mailing list regarding
recent changes to environment handling in
doas
(in -current):
[...]
After some reflection, I\'ve been convinced that it\'s unlikely everybody reads
the manuals, or that the manuals are even correct or complete. So the new doas
behavior moving forward is to reset most [...]
SSH gets protection against side chan...
Damien Miller (djm@) has just committed a new feature for SSH that should help protect against all the various memory side channel attacks that have surfaced recently.
Add protection for private keys at rest in RAM against speculation
and memory sidechannel attacks like Spectre, Meltdown, Rowhammer and
Rambleed. This change encrypts p [...]
ntpd auto time setting
Otto Moerbeek (otto@) has written
an update
on his recent ntpd(8) work to the tech@ mailinglist:
Hi,
I have been working on a nice feature that improves startup behaviour of
ntpd.
Summary: make sure you have at least one constraint source configured
and use no options. ntpd will set the clock if needed, even if you
machines h [...]
rpki-client(8) imported into the tree
Job Snijders (job@) has
imported
Kristaps Dzonsons\'
rpki-client
(discussed previously)
into the tree:
And here is the commit message:
Import Kristaps Dzonsons\' RPKI validator into the tree
rpki-client(1) is an implementation of the Resource Public Key
Infrastructure (RPKI), specified by RFC 6480. The client is responsible
f [...]
BSDCan 2019 videos available
Videos of presentations at
BSDCan 2019
are now (becoming) available from the
YouTube channel.
Links to the videos can now also be found in the usual place.
g2k19 Hackathon Report: Stefan Sperli...
Our next hackathon report comes from Stefan Sperling (stsp@):
My goal for g2k19 was to work on Tx aggregation support in the wifi stack.
But of course I didn\'t even get to start working on that before I was back home.
Read more…
acme-client(1) moves to Let’s E...
Florian Obser (florian@) has
committed
the changes required to move
acme-client(1)
in -current to the
RFC 8555
protocol used by the
Let\'s Encrypt v02 API:
CVSROOT: /cvs
Module name: src
Changes by: florian@cvs.openbsd.org 2019/06/07 02:07:52
Modified files:
usr.sbin/acme-client: acctproc.c acme-client.1 certproc.c
[...]
Recent Security Innovations
Introduction
There have been some recent security
innovations
previously unreported here:
New flag "MAP_CONCEAL" for mmap(2) allocations
No syscalls from pages where PROT_WRITE is still enabled
Read more…
Smartisan becomes Iridium Donor for 2...
Ken Westerback of The OpenBSD Foundation wrote in with some excellent news on the 2019 fundraising campaign:
The OpenBSD Foundation is excited to announce that it has received its
largest ever donation. Smartisan has topped
its own previous record donation with a 2019 donation of CDN$380,000.00.
This makes Smartisan the first Iridium [...]
g2k19 Hackathon Report: Andrew Fresh ...
Next up with a report from g2k19 is Andrew Hewus Fresh
(afresh1@):
This year I had been thinking of ideas for things to work on in the
weeks before the hackathon and the top thing on my list was to improve
portgen(1)
so that I could switch from tools I wrote to something
everyone was more likely to (Read more...)
