openbsd-misc mailing list

FromSubjectsort iconDate
Stuart Henderson
Re: remove x* and games from my system

$DEITY no, look at the file list of xbase, for example.

May 27, 5:52 pm 2008
Bryan Irvine
Re: remove x* and games from my system

On Tue, May 27, 2008 at 2:52 PM, Stuart Henderson <stu@spacehopper.org>
sure maybe something like:

*untested*
cd / ; for i in $(tar tzf /path/to/game43.tgz) ; do test -f $i && rm $i ;
done

but that's a little heavy and the xargs command should be plenty safe. :-)

-Bryan

May 27, 7:27 pm 2008
Travers Buda
Re: remove x* and games from my system

Err yeah, you're right--very bad idea.

./etc
./etc/X11
./etc/X11/app-defaults
./etc/X11/fs
*snip*.
/usr
./usr/X11R6
./usr/X11R6/README
./usr/X11R6/bin

The tarballs and the lists are this way. How about just a plain
rm to get the files, then a few passes with rmdir.

--
Travers Buda

May 27, 6:50 pm 2008
Josh Grosse
Re: remove x* and games from my system

My recommendation was plain rm, without -rf. Viz:

# cd /
# tar tzf /path/to/xbase43.tgz | xargs rm

I believe it to be safe. It will leave some directories in place, but won't
remove anything it's not supposed to.

In any case, for a test system as the OP has, reinstalling is probably faster
and easier.

May 27, 7:06 pm 2008
Stuart Henderson
Re: remove x* and games from my system

If you leave the old X libs and includes on the system, make sure they
get upgraded with the rest of the OS, it is likely to bite you sometime
in the future otherwise.

May 27, 5:50 pm 2008
Kirill S. Bychkov
Re: iwi(4) not working on 4.3

Hi. I've tried your solution. I've created new kernel with acpi disabled (my
keyboard is not functional in kernel configure mode) with 'config -e -o'.
After booting that kernel, I saw HWaddr and IRQ of my wireless card, but when
I try to do some configure with 'ifconfig iwi0', my TPC freezes. Only
unconfiguring the card is helpful. No kernel warnings are shown. Is there any
other possibilities to fix this?
Anyway thanks for help.
--
() ascii ribbon campaign - against html e-mail
/\ [ message continues ]

" title="www.asciir...">www.asciir...

May 27, 4:07 pm 2008
macintoshzoom
pf.conf by PID ?

I want to allow out network connections only from a specific local proxy server (tor).

How do I set up my pf.conf for this?
How can I syntax pf.conf by pid?

Thanks.
macintoshzoom

May 27, 1:46 pm 2008
Jason Crawford
Re: pf.conf by PID ?

On Tue, May 27, 2008 at 1:46 PM, macintoshzoom

The easiest method for this, I think, would be the 'user' parameter,
since the tor package for OpenBSD has the server run as the _tor user.

May 27, 1:58 pm 2008
macintoshzoom
Re: pf.conf by PID ? SOLVED

I will try the user pf parameter "user { -tor }". as yes, the tor server is running as _tor.
......
Last news: It works!
......

Thank you "Jason Crawford" , "Chris Kuethe", "Matthew Dempsky" for your tips!

---------------
On Tue, 27 May 2008 13:58:27 -0400

May 27, 3:11 pm 2008
Matthew Dempsky
Re: pf.conf by PID ?

On Tue, May 27, 2008 at 10:46 AM, macintoshzoom

Can you run the proxy as a dedicated user and then use the 'user' filter option?

May 27, 2:20 pm 2008
Chris Kuethe
Re: pf.conf by PID ?

On Tue, May 27, 2008 at 10:46 AM, macintoshzoom

with the exception of kernel threads and init, PIDs are random, so
filtering by PID would be meaningless.

If tor is running with a unique userid you can filter on that. This is
documented in the pf.conf manpage.

--
GDB has a 'break' feature; why doesn't it have 'fix' too?

May 27, 2:03 pm 2008
Dan Liu
remove x* and games from my system

At first I install all the packages from the install43.iso except bsd.mp.
Because I run openbsd on my virtualbox,I can not start X.
I just test openbsd to use as a postfix server,so I want to remove all
the x* and games.
I use the port(src,port).
Could some one help me.I am a green hand here.

May 27, 12:42 pm 2008
Travers Buda
Re: remove x* and games from my system

rm -rf `cat /usr/src/distrib/sets/lists/game/mi`
rm -rf `cat /usr/src/distrib/sets/lists/game/md.YOURMACHINE`
for i in xbase xetc xfond xserv xshare; do rm -rf `cat /usr/xenocara/distrib/sets/lists/$i/mi`; done
for i in xbase xetc xfond xserv xshare; do rm -rf `cat /usr/xenocara/distrib/sets/lists/$i/md.YOURMACHINE`; done

Replace "YOURMACHINE" with your arch... i386.. amd64 whatev. Those are ticks, ``, below the ~ on us layouts. cd into / first.

Otherwise you could do this like... cat /usr/src/di...

May 27, 1:05 pm 2008
Ingo Schwarze
Re: remove x* and games from my system

Caution, bad advice ahead...

Why, which problem are you trying to solve?
Simply leave them, in particular when you are just testing.
Some unused files cause no harm; some of them might even come
in handy where you least expect they could.
When you try to remove base components without knowing

Travers, did you test that on your own machine before posting?
I'm quite fond of your spelling "xfond".

Unless i'm quite mistaken, that's exceptionally terrible advice:

$ cd /usr/xenocara/distri...

May 27, 4:03 pm 2008
Travers Buda
Re: remove x* and games from my system

Clever. =) Plus its missing a "done" in there. I _always_ test
crazy rm -rf's.

Using xargs and tar -t (as someone posted) is probably the best
method, short of just re-installing.

*snip

--
Travers Buda

May 27, 4:24 pm 2008
Aaron Stellman
Re: remove x* and games from my system

You can either go the hard way of looking up where {x*,games} sets
extract their corresponding files (tar tzvf games43.tgz) for example, or you can
simply make a clean install, shouldn't be a problem since you're running
it in virtual environment.

May 27, 1:01 pm 2008
Josh Grosse
Re: remove x* and games from my system

This may be done manually.

For each fileset, obtain a list of files and remove them: e.g.:

# cd /
# tar tzf /path/to/game43.tgz | xargs rm
# tar tzf /path/to/xbase43.tgz | xargs rm

and so on.

May 27, 12:58 pm 2008
HSL - Lukas Ratajski
Total freeze with Intel Pro/100 dual Ethernet network card

More precisely: We use a small thin client as a firewall, which boots off the network. Originally, I planned a three-legged firewall with a DMZ, but since the system has only one PCI connector, I was forced to try a dual-port network card.

Now, OpenBSD recognizes both network interfaces fine - fxp0 and fxp1. But as soon as I try to bring one interface up (no matter if link is present or not), the system completely freezes after about one second. No panic, no debugger prompt. It turns into a brick. I have...

May 27, 12:17 pm 2008
Dan Liu
qemu can not boot openbsd

All the command before qemu booted.

qemu-img create hd_img.img 8000M
modprobe tun
chmod 666 /dev/net/tun
modprobe kqemu
chmod 666 /dev/kqemu
tunctl -d tap0
tunctl -u joe -t tap0

/etc/qemu-ifup tap0
#!/bin/sh
sudo -p "Password for $0:" /sbin/ifconfig $1 172.20.0.1

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o eth0 -s 172.20.0.0/24 -j MASQUERADE

The boot command:

qemu -m 300 -net nic,vlan=0 -net tap,vlan=0,ifname=tap0 -hda
hd_img.img -cdrom install43.is...

May 27, 10:32 am 2008
viq
Re: qemu can not boot openbsd

Try disabling kqemu (-no-kqemu), I've had some problems when I tried to
use it. Though the problems AFAIR were earlier than that, so wait a
while and see whether it wakes up.

--
viq

May 27, 10:56 am 2008
Hannah Schroeter
Re: qemu can not boot openbsd

Hi!

I had problems (panic, init died or something like that, qemu itself
died eventually, too, so I couldn't study the console messages) with
OpenBSD unter qemu/kqemu, too. So there's definitely a behaviour
difference between kqemu enabled or disabled.

(This is on i386/SMP, and yes, it's with the new enough port with the mp
enabled kernel module).

Kind regards,

Hannah.

May 27, 11:59 am 2008
Gregory Edigarov
How to re-build openssl with SHA1 support?

Hello Everybody,

$Subject

--
With best regards,
Gregory Edigarov

May 27, 10:26 am 2008
Philip Guenther
Re: How to re-build openssl with SHA1 support?

On Tue, May 27, 2008 at 8:26 AM, Gregory Edigarov
("How to re-build openssl with SHA1 support?")

Umm, the OpenSSL included with OpenBSD _does_ include SHA1 support.
This can be seen in the output of "openssl ciphers -v" and "openssl
list-message-digest-commands". What made you think it didn't have
SHA1 support compiled in?

(So, the pedantic answer to your question is "cd /usr/src/lib/libssl && make")

Philip Guenther

May 27, 11:00 am 2008
Gregory Edigarov
Re: How to re-build openssl with SHA1 support?

While trying to configure for ctorrent this is what I have from configure:

checking dependency style of gcc... gcc3
checking for SHA1_Init in -lssl... no
checking for SHA1_Init in -lcrypt... no
checking for SHA1_Init in -lmd... no
configure: error: error, Please install OpenSSL first!

--
With best regards,
Gregory Edigarov

May 27, 11:14 am 2008
Jason Beaudoin
Re: How to re-build openssl with SHA1 support?

On Tue, May 27, 2008 at 11:14 AM, Gregory Edigarov

check where the configure script is looking for those libs, you might
need to specify otherwise..

~J

May 27, 11:20 am 2008
Die Gestalt
Re: How to re-build openssl with SHA1 support?

You indeed need to specify the openssl directory which is different on
OpenBSD. A ./configure --help might give you the needed information.

May 27, 11:33 am 2008
Gilles Chehade
Re: How to re-build openssl with SHA1 support?

I mistakenly deleted the original mail, SHA1_Init is in libcrypto, not libssl.

poolp:gilles {292} nm /usr/lib/libcrypto.so.13.0 | grep SHA1_Init
0009ed2c T SHA1_Init
poolp:gilles {293}

Gilles

--
Gilles Chehade
http://www.poolp.org/

May 27, 11:32 am 2008
Gregory Edigarov
Re: How to re-build openssl with SHA1 support?

What I've done was just: export LDFLAGS=-lcrypto
that did the magic.

--

With best regards,
Gregory Edigarov

May 27, 11:29 am 2008
Jonathan Thornburg
strlcat/strlcpy vs overlapping arguments

In message <http://marc.info/?l=openbsd-tech&m=121183803128128&w=1>,
"Ted Unangst" <ted.unangst () gmail ! com> pointed out that
# strlcpy is wrong with overlapping arguments.

Should this be mentioned in the strlcpy/strlcat man page?
(It isn't as of 4.3-release.) Here's a suggested patch:

Index: strlcpy.3
===================================================================
RCS file: /cvs/src/lib/libc/string/strlcpy.3,v
retrieving revision 1.19
diff -u -r1.19 strlcpy.3
--- s...

May 27, 6:53 am 2008
Ted Unangst
Re: strlcat/strlcpy vs overlapping arguments

Maybe. I think it logically follows that the same rules would apply
as they do for strcpy and strcat, without mentioning them all.

May 27, 12:41 pm 2008
Theo de Raadt
Re: strlcat/strlcpy vs overlapping arguments

I agree with Ted. I think it is obvious, and does not need to be
stated. The manual pages describe the algorithm in sufficient detail.

If you can't program, then please -- don't program.

May 27, 12:52 pm 2008
Craig Findlay
Re: strlcat/strlcpy vs overlapping arguments

Hmmm, not sure if I agree with that, I no one ever tried to do things
that they can't do, the world would be a sorry place.

Craig

May 27, 7:09 pm 2008
Pollywog
Re: strlcat/strlcpy vs overlapping arguments

I think the advice should have been not to program *professionally* until one
knows what he or she is doing. Nobody is born a programmer.

May 27, 7:55 pm 2008
Tony Abernethy
Re: strlcat/strlcpy vs overlapping arguments

A monkey MIGHT sit down to a typewriter and write a novel.
However, that is not the way to bet.

Overlapping parameters on a memory to memory copy:
That turf belongs to non-portable code and bare assembly
where it is the programmer's whim that dictates storage order.

Any "high-level" code that depends on that kind of behavior
has gotta be suicidal.

May 27, 7:43 pm 2008
Theo de Raadt
Re: strlcat/strlcpy vs overlapping arguments

So you'll go write the next great buffer overflowing program and
punish all the people who use it?

If you can't use strcpy and strlcpy correctly, then you should not
be a programmer.

May 27, 7:16 pm 2008
Taleon May 27, 7:30 am 2008
Michelle Walter
Journal des cadeaux d'entreprise : Editorial Juin 2008

[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

Retrouvez toutes nos nouveautis :

Laissez-vous guider par notre silection de mai et n'hisitez pas ` faire
appel ` un professionnel du cadeau d'affaire pour vous conseiller.
Bonne lecture ` vous !

Bureautique de pointe... Cli USB personnalisie

Avec son design aux lignes souples, cette cli USB signe son originaliti
par l'association de deux fonctions : une cli USB et un dictaphone....

Duo Concept... T-shirt publicitaire

Avec un style urb...

May 27, 4:25 am 2008
Jason McIntyre
Re: hostname.pppoe0 with AT&T/SBC debug?

observing the last point in pppoe(4), have you removed any pre-existing
/etc/mygate file?

jmc

May 27, 2:50 am 2008
Sean Hafeez May 27, 3:27 am 2008
Sean Hafeez
SOLVED - hostname.pppoe0 with AT&T/SBC debug?

So this was an error on my part - sorta.

The CPE has 3 modes.

1. PPPoE on the CPE
2. PPPoE on the client
3. BRIDGE mode - no PPPoE

So after reading the docs, testing with other PPPoE clients and
connecting with the ppp dial I assumed it was #2 that was the right
settings (seems quite logical and the fact that it worked....) Turns
out that despite the description of item #2 being PPPoE ON CLIENT they
really do not mean it for the OpenBSD kernel driver. I, for no reason
at all, and ...

May 27, 4:05 am 2008
Sean Hafeez
Re: hostname.pppoe0 with AT&T/SBC debug?

In my googling I found I am not the only one with the issue. Have a
look at this - http://www.freebsdforums.org/forums/showthread.php?t=56167

Its seems to be a bug. Anyone from dev want to comment?

Thanks!

May 27, 3:33 am 2008
Sean Hafeez
Re: hostname.pppoe0 with AT&T/SBC debug?

So a bit more, here is a tcpdump of my external rl0 interface that I
is connected to the DSL cpe..

16:22:26.350554 PPPoE-Discovery
code Initiation, version 1, type 1, id 0x0000, length 12
tag Service-Name, length 0
tag Host-Uniq, length 4 qq[=
16:22:26.362176 PPPoE-Discovery
code Offer, version 1, type 1, id 0x0000, length 65
tag AC-Name, length 13 bras36.pltnca
tag Host-Uniq, length 4 qq[=
tag Relay-Session, length 12 ik\035\000?\...

May 26, 8:15 pm 2008
Jesus Sanchez
Re: rtorrent ram issue

Solved, turned to ctorrent (enchanced) which is just I was
searching for.

$ screen ctorrent file.torrent

works really fine.

Thanks Zoran.

May 27, 9:47 am 2008
Aaron Martinez
Re: rdr to squid proxy with authentication

But if you really want to do this, I would suggest using authpf. You
can set up squid to do the proxying without authentication, set up pf
to deny all traffic to the squid instance and set up authpf rules to
allow all authenticated users passage to squid.
http://www.openbsd.org/faq/pf/authpf.html

Hope this helps.

Aaron

May 27, 8:10 am 2008
Tomas Bodzar
Re: Third Global Congress of Women in Politics and Governanc...

WTH is with Spam filter?

-----Original Message-----
From: owner-misc@openbsd.org [mailto:owner-misc@openbsd.org] On Behalf Of
Third Global Congress for Women in Politics and Governance
Sent: Tuesday, May 27, 2008 10:32 AM
To: misc@openbsd.org
Subject: Third Global Congress of Women in Politics and Governance, 19-22
October 2008 - Dusit Hotel, Makati, Philippines

Dear Colleagues and Friends,

The Center for Asia-Pacific Women in Politics (CAPWIP) and the United Nations
International Strategy f...

May 27, 4:42 am 2008
previous daytodaynext day
NoneMay 27, 2008None