OpenBSD Journal

Tartalom átvétel OpenBSD Journal
The OpenBSD Community.
Frissült: 1 óra 6 perc

Understanding the modernization of the OpenBSD network stack, part 2: A story of if_get(9)

p, 2017-01-13 16:50
Martin Pieuchot has written another article chronicling the modernization of the network stack. Martin writes,

I wrote a second article about the network MP thingy.

The article talks about a new API built on top of a generic solution for a MP problem.

The article, A story of if_get(9), is a followup to the part one article we featured earlier as Understanding the modernization of the OpenBSD network stack, part 1: ART single thread performances.

Read both for a deep dive in the ongoing and exciting work going on right now in the OpenBSD network stack.

Needless to say, editors@ really look forward to seeing more articles in this series.

Kategóriák: *BSD

Errata SECURITY FIX: January 5, 2017

sze, 2017-01-11 11:41
Avoid possible side-channel leak of ECDSA private keys when signing.

A source code patch exists which remedies this problem:

for 6.0.

for 5.9

This is related to CVE-2016-7056 "ECDSA P-256 timing attack key recovery (OpenSSL, LibreSSL, BoringSSL)" Additional details can be read here: http://seclists.org/oss-sec/2017/q1/52

Thanks to M:Tier https://stable.mtier.org for raising awareness on this patch.

Kategóriák: *BSD

WiFi: 11n hostap mode added to athn(4) driver, testers wanted

h, 2017-01-09 14:33
OpenBSD as WiFi access points look set to be making a comeback in the near future.

With this diff https://marc.info/?l=openbsd-tech&m=148396652007923&w=2, Stefan Sperling added 802.11n hostap mode, with full support initially for the Atheros chips supported by the athn(4) driver.

This diff adds 11n support to the athn(4) driver.
Requires -current net80211 code from today.

Tested in hostap mode and client mode with:

athn0 at pci1 dev 0 function 0 "Atheros AR9281" rev 0x01: apic 2 int 16 athn0: AR9280 rev 2 (2T2R), ROM rev 22, adddress xx:xx:xx:xx:xx:xx Read more...

Kategóriák: *BSD

Get your name in the relayd book

v, 2017-01-08 05:02

Michael W Lucas is offering the chance to get your name in his forthcoming book on relayd and httpd:

There’s a long tradition amongst science fiction writers of selling bit parts in books in exchange for charity donations. It’s called tuckerization.

I see no reason why science fiction writers should have all the fun.

I need a sample user for the forthcoming book on OpenBSD’s httpd and relayd. This user gets referred to in the user authentication sections as well as on having users manage web sites. They will also get randomly called out whenever it makes sense to me.

That sample user could be you.

All it would cost is a donation to the OpenBSD Foundation.

See Michael's blog for details, and donate your way to fame(?) if you can!

Kategóriák: *BSD

Ted Unangst on (more) notable recent changes in OpenBSD

sze, 2017-01-04 00:02

Ted Unangst (tedu@) continues his flak series with part 5.

Kategóriák: *BSD

Peter Hansteen on OpenBSD and you

k, 2016-12-27 16:42

Undeadly editor Peter Hansteen (pitrh) recently spoke to the Bergen (BSD and) Linux User Group (BLUG) on the subject "OpenBSD and you", and has shared the slides from the talk.

These make a great resource for preaching to the as-yet-unconverted.

Kategóriák: *BSD

OpenSSH 7.4 released!

cs, 2016-12-22 22:52
A new version of OpenSSH has been announced. Continue reading for the changelog of OpenSSH 7.4 below:

Read more...

Kategóriák: *BSD

LibreSSL documentation status report

cs, 2016-12-15 05:51

Ingo Schwarze (schwarze@) writes in:

You may have noticed that i have been working on LibreSSL documentation for a bit more than a month now. Actually, there already is an undeadly report about the first week of that work:
http://undeadly.org/cgi?action=article&sid=20161114174451

Read more...
Kategóriák: *BSD

Ted Unangst on notable recent changes in OpenBSD

sze, 2016-12-14 23:23

Ted Unangst (tedu@) has written a flak entry entitled "openbsd changes of note".

It gives an overview (with relevant links) of recent significant changes in -current.

Update: there is now a second part.

Update: there is now a third part.

Kategóriák: *BSD

Kristaps Dzonsons on pledge(2)

szo, 2016-11-26 04:28

Kristaps Dzonsons, of mandoc and acme-client (and more) fame, has written a detailed article entitled "why pledge(2) …or, how I learned to love web application sandboxing".

The tl;dr section starts:

For practical web applications, pledge(2) presents the best compromise of development simplicity and security coverage. This alone gives BCHS applications even more of a boost beyond the many other advantages of programming on OpenBSD.

The article discusses the advantages of pledge(2) over other sandboxing systems.

Kategóriák: *BSD

OpenBSD Foundation Welcomes First Iridium Donor: Smartisan

sze, 2016-11-23 20:18
Today's big news comes from the OpenBSD Foundation, via director Ken Westerback. The official word from the foundation is:

The OpenBSD Foundation is excited to announce that it has received its largest ever donation. Smartisan (http://www.smartisan.com) has become our first Iridium level donor with a donation of CDN$280,000.00.

Smartisan has donated tickets sales from its new product launch events to the open source community since 2014. In 2016 alone, over 10,000 developers and tech-enthusiasts attended its events. This year Smartisan chose to donate the proceeds to the OpenBSD Foundation.

We thank Smartisan for its very generous support! This donation will no doubt fund many exciting projects in the next few years.

Here at Undeadly we join the Foundation in thanking the good people at Smartisan for their generous contribution.

And if you, dear reader want to make a similar contribution (all sizes acceptable), please head on over to the Foundation's Donations page.

Kategóriák: *BSD

l2k16 hackathon report: LibreSSL manuals now in mdoc(7)

h, 2016-11-14 18:26
The first report out of the just completed l2k16 (LibreSSL focused) hackathon comes from Ingo Schwarze, who writes:

Hackathons are great for starting or finishing tasks. This time, for me, finishing it was. Read more...

Kategóriák: *BSD

b2k16 hackathon report: Daniel Jakots on forward strides in python ports

szo, 2016-11-12 15:49
The next b2k16 hackathon report comes from Daniel Jakots, who writes:

This was my second hackathon (after p2k16). I was looking forward to it as I had a really great time in Nantes. Read more...

Kategóriák: *BSD

OpenBSD funding request from interesting requester - InfoWorld Magazine

szo, 2016-11-12 12:17
New contributor doctrit writes,

An interesting news article title caught my attention and I was pleasantly surprised to find OpenBSD having a prominent place within the article's content. 8^)

- 4 open source initiatives that need your help

We (editors@) of course agree with the article author that our favorite operating system is worth supporting for all the goodness the project consistently produces.

Kategóriák: *BSD

b2k16 hackathon report: Antoine Jacoutot on GNOME's path forward, various ports progress

sze, 2016-11-09 00:32
The first report from the b2k16 hackathon comes from Antoine Jacoutot, who writes:

I was so happy to go back to Budapest for a hackathon. I've been there more times than I can count and it's an awesome city made even more awesome thanks to our host robert@ !

I arrived late the eve of the event along with other flying frogs (espie@, landry@, danj@). We were immediately brought to a Pub to drink an unreasonnable amount of Dreher... fuel up for next day! Read more...

Kategóriák: *BSD

b2k16 hackathon report: Jeremy Evans on ports cleaning, progress on postgres, nginx, ruby and more

sze, 2016-11-09 00:27
Your next b2k16 report comes form Jeremy Evans, who writes:

I started off b2k16 by channeling tedu@, and removing a lot of ports, including lang/ruby/2.0, lang/io, convertors/ruby-json, databases/dbic++, databases/ruby-swift, databases/ruby-jdbc-*, x11/ruby-profiligacy, and mail/ruby-mailfactory. Read more...

Kategóriák: *BSD

b2k16 hackathon report: Landry Breuil on various ports progress

k, 2016-11-08 22:07
Our next b2k16 report comes from Landry Breuil, who writes:

6 years after my last visit to Budapest.. it's been a while, but the basics of a port hackathon there didn't change:

Kategóriák: *BSD

OpenBSD 6.0 Limited Edition CD set (signed by developers)

h, 2016-10-17 21:08
Five OpenBSD 6.0 CD-ROM copies were signed by 40 developers during the g2k16 Hackathon in Cambridge, UK. These copies are being auctioned sequentially on ebay.

  • CD set #1 (Sep 29th + 5 days) sold for $4200
  • CD set #2 (Oct 4th + 3 days) sold for $3000
  • CD set #3 (Oct 8th + 3 days) sold for $817
  • CD set #4 (Oct 11th + 3 days) sold for $635
  • CD set #5 (Oct 14th + 3 days) sold for $1024

    All proceeds will be donated to the OpenBSD Foundation to support and further the development of free software based on the OpenBSD operating system. Read more...

  • Kategóriák: *BSD

    vmm enabled

    sze, 2016-10-12 09:57
    With a small commit, OpenBSD now has a hypervisor and virtualization in-tree. This has been a lot of hard work by Mike Larkin, Reyk Flöter, and many others.

    VMM requires certain hardware features (Intel Nehalem or later, and virtualization enabled in the BIOS) in order to provide VM services, and currently only supports OpenBSD guests.

    CVSROOT: /cvs Module name: src Changes by: mlarkin@cvs.openbsd.org 2016/10/12 02:30:26 Modified files: sys/arch/amd64/conf: GENERIC Log message: enable vmm

    This has been enabled in snapshots for a week, so your favourite mirror is already ready for you to upgrade. Of course, please report any bugs you run into.

    This work was partially sponsored by The OpenBSD Foundation, and if you like it, please donate or bid on the signed cd set.

    Kategóriák: *BSD