Feed openbsd-journal OpenBSD Journal

Favorite IconOpenBSD Journal

Link http://undeadly.org/
Feed http://undeadly.org/cgi?action=rss
Updated 2024-04-23 07:17
p2k18 Hackathon report: Marc Espie (espie@) on pkg_* and packages progress
Here is another report from the just concluded p2k18 hackathon, from Marc Espie (espie@), who writes:
p2k18 Hackathon report: Solene Rapenne (solene@) on joining the project, packages progress
Spectre Variant 2 mitigation for kernel committed to -current
Working at p2k18, Theo de Raadt (deraadt@) hascommittedSpectre Variant 2 mitigations:
SMTP client added to -current
Working at p2k18, Eric Faurot (eric@) hascommitteda simple SMTP client to -current:
OpenBSD Community Goes Gold for 2018!
Ken Westerback (krw@ when wearing his developer hat) writes:
Hardware accelerated AES/HMAC-SHA on octeons
In this commit, visa@ submitted code (disabled for now) to use built-in accelerationon octeon CPUs, much like AESNI for x86s.I decided to test tcpbench(1) and IPsec, before and after updating and enabling the octcrypto(4) driver.Read more…
MAP_STACK Stack Register Checking Committed to -current
The MAP_STACK anti-ROP mechanism described in a recentarticlehas beencommittedto-current.Thecommit messageincludes:
Transparent network audio with mpd & sndiod
Landry Breuil (landry@ when wearing his developer hat) wrotein…
OpenBSD 6.3 Released
April 2, 2018: The OpenBSDproject has announced the availability of the newest release,OpenBSD 6.3:
Stack-register Checking
Recently, Theo de Raadt (deraadt@)describeda new type of mitigation he has been working on together with Stefan Kempf (stefan@):
Mike Larkin at bhyvecon 2018: OpenBSD vmm(4) update
Mike Larkin (mlarkin@) has just given a presentation atbhyvecon Tokyo 2018.The slides are nowavailable (as PDF).In addition to the excellent summary of the state-of-play forvmmand friends, the presentation offers a tantalizing glimpse at possible futuredirections.Update: videois available
syspatches will be provided for both supported releases
Good news for people doing upgrades only once per year: syspatches will be provided for both supported releases. The commit from T.J. Townsend (tj@) speaks for itself:
a2k18 Hackathon Report: Ken Westerback on dhclient and more
Ken Westerback (krw@) has sent in the first report from the (recently concluded) a2k18 hackathon:
Meltdown-mitigation syspatch/errata now available
The recent changes in -current mitigating the Meltdown vulnerability have been backported to the6.1 and6.2(amd64) releases, and thesyspatch update (for 6.2) is now available.Happy syspatching, and don't forget to show your appreciation bydonating to the project.
Meltdown fix committed by guenther@
Meltdown mitigation is coming to OpenBSD. Philip Guenther (guenther@) has just committed a diff that implements a new mitigation technique to OpenBSD: Separation of page tables for kernel and userland. This fixes the Meltdown problems that affect most CPUs from Intel. Both Philip and Mike Larkin (mlarkin@) spent a lot of time implementing this solution, talking to various people from other projects on best approaches.In the commit message, Philip briefly describes the implementation:Read more…
a2k18 Hackathon preview: Syncookies coming to PF
As you may have heard, the a2k18 hackathon is in progress. As can be seen from the commit messages, several items of goodness are being worked on.One eagerly anticipated item is the arrival of TCP syncookies (read: another important tool in your anti-DDoS toolset) in PF. Henning Brauer (henning@) added the code in a series of commits on February 6th, 2018, with this one containing the explanation:Read more…
Remi Locherer's EuroBSDcon 2017 Talk
Remi Locherer wrote in:
The OpenBSD Foundation 2018 Fundraising Campaign
Details of the2018 campaign have been added to the Foundation's website. The goal for theyear is for $300,000. The total for "smaller" donations has alreadytaken the OpenBSD community to bronze level sponsorship!Please show your support by contributing.
CPU microcode update code for amd64
Patrick Wildt (patrick@) recently committed some code that will update the Intel microcode on many Intel CPUs, a diff initially written by Stefan Fritsch (sf@). The microcode of your CPU is basically the firmware that runs on your (Intel) processor, defining its instruction set in terms of so called "microinstructions". The new code depends, of course, on the corresponding firmware package, ported by Patrick which can be installed using a very recent fw_update(1). Of course, this all plays into the recently revealed problems in Intel (and other) CPUs, Meltdown and Spectre.Read more…
Handling of CPU bugs disclosure 'incredibly bad': OpenBSD's de Raadt
ITWirehas publishedan articleregarding Theo de Raadt's (deraadt@) reaction to theMeltdown/Spectre disclosures.One choice quote reads:
OpenBSD-current now has 'smtpctl spf walk'
If you run a mail service, you probably like to have greylisting in place, via spamd(8) or similar means. However, there are some sites that simply do not play well with greylisting, and for those it's useful to extract SPF information to identify their valid outgoing SMTP hosts. Now OpenBSD offers a straightforward mechanism to do that and fill your nospamd table, right from the smtpctl utility via the subcommand spf walk. Gilles Chehade (gilles@) describes how in a recent blog post titled spfwalk.This feature is still in need of testing, so please grab a snapshot and test!
Response to the "Meltdown" Vulnerability
Amessage to tech@from Philip Guenther (guenther@) provides the first publicinformation from developers regarding the OpenBSD response to the recentlyannouncedCPU vulnerabilities:
BSDCAN2017 Interview with Peter Hessler, Reyk Floeter, and Henning Brauer
In amessage to misc@,Tom Smyth wrote (in part):
pledge() work in progress
In amessage to tech@,Theo de Raadt (deraadt@) provided some insights into ongoingwork on pledge(2):
arm64 platform now officially supported [and has syspatch(8)]
arm64 is now anofficially supported platform for OpenBSD.As some readers will have noticed,there's nowsyspatch(8) support, too.Theo de Raadt (deraadt@) committed the following change:
s2k17 Hackathon Report: Stefan Sperling (stsp@) on wireless (iwm(4), athn(4) and more) progress
Reflections on Hackathons
Bob Beck (beck@) writes:
p2k17 Hackathon report: Antoine Jacoutot on ports+packages progress
Another p2k17 hackathon report is just in, from Antoine Jacoutot (ajacoutot@), who writes:
Official OpenBSD 6.2 CD set - the only one to be made!
Our dear friend Bob Beck (beck@) writes:
p2k17 Hackathon report: Florian Obser on network stack progress, kernel relinking and more
A new p2k17 hackathon report has arrived, this one from Florian Obser, who writes:
p2k17 Hackathon Report: Landry Breuil on Mozilla things and much more
Landry Breuil (landry@) sent in our next report from the recent ports hackathon:
p2k17 Hackathon Report: Anthony J. Bentley on firmware, games and securing pkg_add runs
The next p2k17 report comes from Anthony J. Bentley (bentley@):
p2k17 Hackathon report: Sebastian Reitenbach on Puppet progress
The next p2k17 report comes from Sebastian Reitenbach (sebastian@):
p2k17 Hackathon report: Christian Weisgerber on random devices, build failures and gettext
The latest hackathon report to come in today came from Christian Weisgerber (naddy@):
p2k17 Hackathon report: Jeremy Evans on ruby progress, postgresql and webdriver work
The p2k17 hackathon reports keep flowing in, here's one from Jeremy Evans (jeremy@):
Paul Irofti (pirofti@) on hotplugd(8), math ports, xhci(4) and other kernel advancements
Here is a new p2k17 hackathon report from Paul Irofti (pirofti@), who writes:
p2k17: Herzliche grusse vom Berlin (espie@ on mandoc, misc packages progress)
A new p2k17 hackathon report is in, from Marc Espie, who writes:
p2k17 Hackathon Report: Matthias Kilian on xpdf, haskell, and more
The p2k17 hackathon has concluded, and we have our first report.Matthias Kilian (kili@) wrote in:
syspatch(8) Binary Updates Now for the Latest Release Only
In amessage to tech@,Theo de Raadt (deraadt@) wrote:
OpenBSD 6.2 Released
A few days ahead of the date hinted at by the work-in-progress release page, OpenBSD 6.2 was released today, October 9th 2017.Notable changes in this release are as always numerous, and include:Read more…
autoconf/clang (No) Fun and Games
Robert Nagy (robert@) wrote in with a fascinating story of hunting down arecent problem with ports:
EuroBSDcon 2017 Presentations Available
TheEvents and Paperspage of theOpenBSD websitehas been updated to includelinksfor the recently-concludedEuroBSDcon 2017.Rather than reproduce the links here, we suggest readers head over tothe authoritative source.Video recordings of individual presentations are not available at the time of writing,but may be found when themulti-session room recordingsare up.Update:Events and Papersnow has links to individual videos, and aplaylistis available.(Thanks Mevene and espie!)
t2k17 Hackathon report: Ken Westerback on dhclient progress, developer herding
The next hackathon reports comes from Ken Westerback (krw@), who writes:
t2k17 Hackathon report: Jasper Lievisse Adriaanse on ports, ctf and vmm
After a few quiet days, here is a new t2k17 hackathon report, from Jasper Lievisse Adriaanse. Jasper writes,
OpenBSD Community Goes Platinum
Kenneth R Westerback (krw@ when wearing hisdeveloper hat) wrote in to let us know:
Ted Unangst on notable recent changes in OpenBSD
The flak reports by Ted Unangst (tedu@) continue withpart 627.Update: Part 628Update: Part 629
Faster forwarding
Hrvoje Popovski directed our attention to a new blog post from mpi@ discussing one improvements in the performance of the networking stack.
t2k17 Hackathon Report: My first time (Aaron Bieber)
The next t2k17 hackathon report comes from first time hackathon participant Aaron Bieber, who writes:
t2k17 Hackathon Report: Philip Guenther: locking and libc
Next up in our series of t2k17 hackathon reports is this one from Philip Guenther:
t2k17 Hackathon Report: Andrew Hewus Fresh on Perl and Coffee
Our next hackathon report comes from Andrew Hewus Fresh, who writes:
...6789101112131415...