Posts in category OpenBSD

doas environmental security

Jun 21, 2019 ~ Written by openbsd journal
Ted Unangst (tedu@) posted to the tech@ mailing list regarding recent changes to environment handling in doas (in -current): [...] After some reflection, I\'ve been convinced that it\'s unlikely everybody reads the manuals, or that the manuals are even correct or complete. So the new doas behavior moving forward is to reset most [...]
~ read more ~

SSH gets protection against side chan...

Jun 21, 2019 ~ Written by openbsd journal
Damien Miller (djm@) has just committed a new feature for SSH that should help protect against all the various memory side channel attacks that have surfaced recently. Add protection for private keys at rest in RAM against speculation and memory sidechannel attacks like Spectre, Meltdown, Rowhammer and Rambleed. This change encrypts p [...]
~ read more ~

ntpd auto time setting

Jun 20, 2019 ~ Written by openbsd journal
Otto Moerbeek (otto@) has written an update on his recent ntpd(8) work to the tech@ mailinglist: Hi, I have been working on a nice feature that improves startup behaviour of ntpd. Summary: make sure you have at least one constraint source configured and use no options. ntpd will set the clock if needed, even if you machines h [...]
~ read more ~

rpki-client(8) imported into the tree

Jun 18, 2019 ~ Written by openbsd journal
Job Snijders (job@) has imported Kristaps Dzonsons\' rpki-client (discussed previously) into the tree: And here is the commit message: Import Kristaps Dzonsons\' RPKI validator into the tree rpki-client(1) is an implementation of the Resource Public Key Infrastructure (RPKI), specified by RFC 6480. The client is responsible f [...]
~ read more ~

BSDCan 2019 videos available

Jun 18, 2019 ~ Written by openbsd journal
Videos of presentations at BSDCan 2019 are now (becoming) available from the YouTube channel. Links to the videos can now also be found in the usual place.
~ read more ~

In Other BSDs for 2019/06/15

Jun 15, 2019 ~ Written by justin sherrill
I linked to some other BSD link roundups, so the joy of clicking can continue. SNI support added to relayd(8) in -current. Call for testing of ntpd(8) automatic mode. RabbitMQ Cluster on FreeBSD Containers. FreeBSD+ZFS Without Drives.  Crazy, DWIMmy.  (via) blacklistd(8) with NPF on NetBSD.  UnitedBSD is a new forum, at least to (Read more. [...]
~ read more ~

g2k19 Hackathon Report: Stefan Sperli...

Jun 11, 2019 ~ Written by openbsd journal
Our next hackathon report comes from Stefan Sperling (stsp@): My goal for g2k19 was to work on Tx aggregation support in the wifi stack. But of course I didn\'t even get to start working on that before I was back home. Read more…
~ read more ~

In Other BSDs for 2019/06/08

Jun 08, 2019 ~ Written by justin sherrill
I was a bit low on BSD links last week; not so this week. NetBSD 8.1 is out. The January-March 2019 FreeBSD status report is out. OpenBSD’s pledge but on Linux.  (via) FreeBSD 11.3b3 available. FixedMisc [MirOS] 20190604 released! [ports] MariaDB upgrade. XSAVE and compat32 kernel work for LLDB. Validation and improvements of (Read [...]
~ read more ~

acme-client(1) moves to Let’s E...

Jun 07, 2019 ~ Written by openbsd journal
Florian Obser (florian@) has committed the changes required to move acme-client(1) in -current to the RFC 8555 protocol used by the Let\'s Encrypt v02 API: CVSROOT: /cvs Module name: src Changes by: florian@cvs.openbsd.org 2019/06/07 02:07:52 Modified files: usr.sbin/acme-client: acctproc.c acme-client.1 certproc.c [...]
~ read more ~

Recent Security Innovations

Jun 05, 2019 ~ Written by openbsd journal
Introduction There have been some recent security innovations previously unreported here: New flag "MAP_CONCEAL" for mmap(2) allocations No syscalls from pages where PROT_WRITE is still enabled Read more…
~ read more ~

Smartisan becomes Iridium Donor for 2...

Jun 03, 2019 ~ Written by openbsd journal
Ken Westerback of The OpenBSD Foundation wrote in with some excellent news on the 2019 fundraising campaign: The OpenBSD Foundation is excited to announce that it has received its largest ever donation. Smartisan has topped its own previous record donation with a 2019 donation of CDN$380,000.00. This makes Smartisan the first Iridium [...]
~ read more ~

g2k19 Hackathon Report: Andrew Fresh ...

Jun 03, 2019 ~ Written by openbsd journal
Next up with a report from g2k19 is Andrew Hewus Fresh (afresh1@): This year I had been thinking of ideas for things to work on in the weeks before the hackathon and the top thing on my list was to improve portgen(1) so that I could switch from tools I wrote to something everyone was more likely to (Read more...)
~ read more ~

g2k19 Hackathon Report: back to dee t...

Jun 03, 2019 ~ Written by openbsd journal
Martin Pieuchot (mpi@) wrote in with a report from g2k19: I was particularly excited to attend this year\'s general hackathon. I arrived without expectation. My goal was to have a fresh look at the kernel and discuss pending issues in a new way. Since I haven\'t really hacked on OpenBSD during the last year, I wasn\'t sure what (Re [...]
~ read more ~

Call for testing of ntpd(8) automatic...

Jun 03, 2019 ~ Written by openbsd journal
Otto Moerbeek (otto@) has been working on improving the behaviour of ntpd(8) during system boot, especially for machines whose time is way off (e.g. for machines without a battery-backed clock (RTC)). One recently committed improvement dealt with the problem of bad time in a DNSSEC environment, but Otto is working on more changes in this ( [...]
~ read more ~

SNI support added to relayd(8) in -cu...

Jun 03, 2019 ~ Written by openbsd journal
With this commit, Reyk Floeter (reyk@) completed the addition of Server Name Indication (SNI) to relayd(8): CVSROOT: /cvs Module name: src Changes by: reyk@cvs.openbsd.org 2019/05/31 09:25:57 Modified files: usr.sbin/relayd: config.c parse.y relayd.c relayd.conf.5 relayd.h Log message: Add support for [...]
~ read more ~

In Other BSDs for 2019/06/01

Jun 01, 2019 ~ Written by justin sherrill
I have an inexplicably short BSD section this week.  Post-BSDCan fatigue?  I don’t know, but I have lots on the docket for tomorrow, I promise. ZFS on APU2; follow the thread for details. What are the differences between OpenBSD and Linux?  (via) Something that Linux distributions should not do when packaging things.  Linked because I& [...]
~ read more ~

In Other BSDs for 2019/05/25

May 25, 2019 ~ Written by justin sherrill
Watch for post-BSDCan slides and material and ideas to show up in the next few weeks. NetBSD 8.1-RC1 is out. BSDCan 2019 papers are showing up, plus this iXsystems recap. pfSense 2.4.4-RELEASE-p3 now available. WANT TO PLAY A GAME?  Ooh, look at the simulated phosphor!  (via) Valuable News – 2019/05/20. How does (Read more...)
~ read more ~

g2k19 hackathon report from Claudio J...

May 22, 2019 ~ Written by openbsd journal
With the latest hackathon finished, the subsequent BSDCan completed and its attendees having returned home, Claudio Jeker (claudio@) writes in with the first report from g2k19: Travelling to the hackathon was a bit of an adventure this year. The software troubles with the 737 MAX caused frequent scheduling changes. At Montreal airport [...]
~ read more ~

In Other BSDs for 2019/05/18

May 18, 2019 ~ Written by justin sherrill
I have more links than I expected. Brief netbsd.org outages tomorrow. SEMIBUG vmm hypervisor demo on the 21st. WireGuard on OpenBSD.  (via) No itch to scratch. Simple shared folder with Samba on OpenBSD 6.5. Confusion with used/free disk space in ZFS. Valuable News – 2019/05/09. BSDCan 2019 Auction Items, and next (Read more...)
~ read more ~

In Other BSDs for 2019/05/11

May 11, 2019 ~ Written by justin sherrill
The last weather station link is a real gem. BSDCan 2019 details. The Open Source Financial Developers Association could use some BSD testing. iXsystems Takes the Plunge with Liquid Immersion Servers. Announcing Google Summer of Code 2019 projects.  (NetBSD) Improvements in forking, threading, and signal code.  (NetBSD) Valuable News – 2019/ [...]
~ read more ~