The pkgsrc tools have had, for a long time, the ability to validate the installed packages against a database of known vulnerabilities. We have encouraged administrators to add the proper commands to their crontabs to refresh the database and to run the package auditing command. But... the package tools are shipped with the system, and we ship a crontab for

(Read more...)

As of past night, the macppc and shark ports have support for the new-style kernel modules. I've added support for these through a workaround in the build system, which makes the compiler generate long jumps for all calls in the code, avoiding unsupported ELF relocation types. This allows us to use the modules even if the kernel-level loader is not

(Read more...)

As of past night, the macppc and shark ports have support for the new-style kernel modules. I've added support for these through a workaround in the build system, which makes the compiler generate long jumps for all calls in the code, avoiding unsupported ELF relocation types. This allows us to use the modules even if the kernel-level loader is not

(Read more...)

Two new security advisories were published:

• NetBSD-SA2010-001 File system module autoloading Denial of Service attack
• NetBSD-SA2010-002 OpenSSL TLS renegotiation man in the middle vulnerability

You can find more information about them on the Security and NetBSD page.

Two new security advisories were published:

• NetBSD-SA2010-001 File system module autoloading Denial of Service attack
• NetBSD-SA2010-002 OpenSSL TLS renegotiation man in the middle vulnerability

You can find more information about them on the Security and NetBSD page.

NetBSD LVM support

NetBSD LVM support was committed in -current for a long time now but it was disabled by default. Today I have set MKLVM variable to yes by default which means that LVM will by included in all builds from now. I have also updated in tree LVM tools to their latest version 2.02.56.

With much appreciated help

(Read more...)

NetBSD LVM support

NetBSD LVM support was committed in -current for a long time now but it was disabled by default. Today I have set MKLVM variable to yes by default which means that LVM will by included in all builds from now. I have also updated in tree LVM tools to their latest version 2.02.56.

With much appreciated help

(Read more...)

Hardware accelerated X for Rev. 4 Sharks using the xf86-video-chips driver has been around for a while but Rev. 5 Sharks were stuck with a dumb framebuffer driver. This has changed, a few days ago I committed an Xorg driver for the IGS CyberPro 2010 graphics controller found in Rev. 5 Sharks.
The xf86-video-igs driver supports basic hardware acceleration using

(Read more...)

Hardware accelerated X for Rev. 4 Sharks using the xf86-video-chips driver has been around for a while but Rev. 5 Sharks were stuck with a dumb framebuffer driver. This has changed, a few days ago I committed an Xorg driver for the IGS CyberPro 2010 graphics controller found in Rev. 5 Sharks.
The xf86-video-igs driver supports basic hardware acceleration using

(Read more...)

In September this year, Guillaume Lasmayous spent 5 weeks in the US where he took the opportunity to meet with some developers from the NetBSD project. On a Saturday afternoon Guillaume met Christos Zoulas to answer a few questions about NetBSD.

NetBSDfr: For those of our readers who don't know you, 
could you tell us a little bit about yourself?

 (Read more...)

openresolv has been imported into NetBSD, which allows more than one daemon to update /etc/resolv.conf sanely and configure local nameservers for enhanced DNS, especially if running on a VPN. dhcpcd already uses resolvconf when available and dhclient in NetBSD has been patched to use it.

This is important for NetBSD, as many packages support resolvconf, but only when /sbin/resolvconf exists.

(Read more...)

The opengrok code search and cross reference service has been set up and is available at:

http://opengrok.netbsd.org

It contains the NetBSD sources which are updated every three hours.
This service is running on NetBSD-5 using opengrok with openjdk from pkgsrc.

Happy Grokking :)

Overview

This summer I worked on a port of ZFS file system to NetBSD and was mentored by Andrew Doran. This entry details the results of my Summer of Code project and future plans.

Goals

During this year summer of code I have worked on a port of a ZFS file system to the NetBSD. Before midterm we wanted to

(Read more...)

In BSD Magazine issue 4/2009 I write about out-of-the-box support for sshfs on NetBSD 5.0. The article goes over the basic principles, use, tuning, and features in store beyond NetBSD 5.0. See the magazine website for purchase/subscription instructions.

Overview

I mentored NetBSD developer Mike Volokhov for this year's successful Google Summer of Code project titled "GPT-aware boot loader support."

Goals and Results

GPT is an acronym for GUID Partition Table (and GUID is an acronym for Globally-Unique IDentifier). This type of partition table was introduced as part of the Extensible Firmware Interface (EFI) standard proposed by Intel and

(Read more...)

Overview

I mentored Christopher Berardi for one of NetBSD's projects in this year's Google Summer of Code. His project was titled "Improve and Extend resize_ffs".

Goals

The original project abstract said:

This project will seek to thoroughly test and improve the resize_ffs utility as well as to potentially extend it to support features such as live resizing. The primary goal

(Read more...)

Jonathan Perkin has posted an interesting blog entry entitled "apt-get" and 5,000 packages for Solaris10/x86 about using pkgsrc and the binary package manager pkgin on Solaris 10/x86. In pkgsrc, we can get conditioned to the fact that package management, in a coherent, well-controlled way; it's nice to see this gaining further traction in Solaris circles too.

Oh, and on a

(Read more...)