Posts in category OpenBSD
In Other BSDs for 2018/06/16
Lots of different items, probably because of BSDCan.
EuroBSDCon 2018 is happening September 20-23 at University Politehnica of Bucharest, Romania – Call for papers ends tomorrow.
June HardenedBSD Foundation Update. (via)
FreeBSD 11.2-RC2 Available.
Valuable News – 2018/06/09.
Pledge and Unveil in OpenBSD [pdf]. Knew about pledg [...]
More Mitigations for (potential) CPU ...
There have been more developments in the continuing work mitigating
against (Intel®, and potentially other) CPU vulnerabilities…
Philip Guenther (guenther@)
committed the following:
Read more…
LDAP client added to -current
Reyk Floeter (reyk@) has
committed
a simple LDAP client to -current:
CVSROOT: /cvs
Module name: src
Changes by: reyk@cvs.openbsd.org 2018/06/13 09:45:58
Log message:
Import ldap(1), a simple ldap search client.
Read more…
Intel FPU Speculation Vulnerability C...
Earlier this month, Philip Guenther (guenther@)
committed
(to amd64 -current) a change from lazy to semi-eager FPU switching
to mitigate against rumored FPU state leakage
in Intel® CPUs.
Theo de Raadt (deraadt@) discussed this in his
BSDCan 2018
session.
Using information disclosed in Theo\'s talk,
Colin Percival
developed a pr [...]
CPU bug hardening added to DragonFly
Matthew Dillon’s added some patches to DragonFly related to securing floating point state, following similar work in OpenBSD. There isn’t a reported catchy-name issue to match it, like Spectre/Meltdown – yet.
(If anyone has a good link to the similar OpenBSD commits, please share; I did not find them on a cursory search.)
OpenBSD at BSDCan 2018
BSDCan 2018
has concluded, and materials for (some of) the OpenBSD-related tutorials and
talks can be found in
the usual place.
Highlights include
the unveiling of unveil(),
hinted at by Bob Beck (beck@) in his
p2k18 report,
and
"Speculating about Intel", by Theo de Raadt (deraadt@). [An unofficial video of the (Read mor [...]
In Other BSDs for 2018/06/09
BSDCan is running this weekend. There is, depending on what time you are reading this, a livestream.
Retguard: An improved stack protector for OpenBSD. (via)
Mailing lists vs Github. Relevant to most every BSD project. (via)
need help determining the best HA solution for 3 pfSense VM guests.
OpenBSD’s ksh(1) does not (Read more... [...]
BSDNow 249: Router On A Stick
BSDNow 249 is covering a really wide range of topics including an uncommon amount of NetBSD, so I’m going to do the easy thing and repeat the summary: “OpenZFS and DTrace updates in NetBSD, NetBSD network security stack audit, Performance of MySQL on ZFS, OpenSMTP results from p2k18, legacy Windows backup to FreeNAS, ZFS block siz [...]
RETGUARD for clang (amd64) added to -...
Todd Mortimer (mortimer@) has
committed
"RETGUARD" for clang (for amd64).
This is a new anti-ROP
security mechanism, which uses random per-function cookies
to protect return addresses on the stack.
Read more…
libcsi – Crypto Simplified Inte...
Joel Sing (jsing@) has
committed
Crypto Simplified Interface (CSI) to -current:
CVSROOT: /cvs
Module name: src
Changes by: jsing@cvs.openbsd.org 2018/06/02 11:40:33
Added files:
lib/libcsi : Makefile Symbols.list csi.c csi.h csi_dh.c
csi_dh_groups.c csi_internal.h csi_util.c
shlib_versi [...]
In Other BSDs for 2017/06/02
One of these links will be very useful to someone.
Join us, building a full OpenBSD mailserver. (via)
Valuable News 2018/05/25.
May 2018 Status Report: Cross-DSO CFI in HardenedBSD. (via)
BSDJobs.com. (via)
Research Positions – Aberdeen Scotland.
NetBSD: a new version of the CDDL dtrace and ZFS code. (Read more...)
In Other BSDs for 2018/05/26
I have the normal list of links, but here’s a feature. At first glance, this looks like Netgate, the commercial entity behind pfsense, is not using FreeBSD for their new product. However, Jim Thompson of Netgate steps up and give a full-on explanation, and points out there’s already code out there to do this – it needs (R [...]
New Grammar for smtpd.conf
Gilles Chehade (gilles@) has
committed
(to -current) the new
smtpd.conf
grammar discussed in
his p2k18 hackathon report.
Read more…
In Other BSDs for 2018/05/19
Note the eleventy-jillion hackathon reports.
OpenBSD 6.3 : why and how. (via)
Helpful OpenBSD Tutorials. A request for input, not a link to existing.
A pile of p2k18 hackathon reports. And more.
“We didn’t chase the fad of using every Intel cpu feature.” (via)
Getting CUPS working under NetBSD?
What I (Read more...)
p2k18 Hackathon Report: Antoine Jacou...
Next up in the stream of p2k18 reports is one from Antoine Jacoutot (ajacoutot@):
Because there was yet another national railroad strike, I decided not to take
any chance and arrived on the eve of the hackathon. I figured it would be a good
excuse for a pajama party at gilles@\'s. It turned out to be a great
(Read more...)
p2k18 Hackathon report: Paul Irofti (...
Next up in our series of p2k18 hackathon reports is from Paul Irofti (pirofti@), who writes:
I joined the hackathon with plenty on my todo list and to my surprise managed to
finish or at least narrow down a plan for most items.
Read more…
p2k18 Hackathon report: Peter Hessler...
Peter Hessler (phessler@) writes about his time in Nantes:
I had arrived at Nantes with two goals, first was to port an app to watch baseball via mlb.tv, and second to clean up my work on BFD and hopefully enable it.
I\'d sent out some ports for OKs, and was cleaning up some long-standing diffs for BFD when (Read more...)
In Other BSDs for 2018/05/12
This came together very nicely.
Addendum – MongoDB Cluster Replica Set on FreeBSD. (via)
OpenPGP Web Key Service and Web Key Directory Implemented on OpenBSD. (via)
mksh bugfix?—?thank you for the music.
Valuable News for 2018/04/30 and 2018/05/07. BSD links, which make me happy to see.
BSD routing table -> ASCIIgraph. (Read mo [...]
p2k18 Hackathon Report: Eric Faurot o...
Eric Faurot (eric@) is next with his report on what he did in Nantes:
Besides trying to reach Nantes (for some reason it has always been
more complicated than it seems, even if I live not too far away; I now
consider it as an achievement in itself), my goal for this hackathon
was mostly to work with (Read more...)
p2k18 Hackathon Report: Stefan Sperli...
Stefan Sperling (stsp@) kindly sent in a report on his activities around p2k18:
The first item I worked on in Nantes was an update of the Apache Subversion
port to the freshly released version 1.10.0. This in itself was a very small
amount of work to do. However, having implemented several new features in the
upstream code base (Read [...]
