Feed openbsd-journal OpenBSD Journal

Favorite IconOpenBSD Journal

Link http://undeadly.org/
Feed http://undeadly.org/cgi?action=rss
Updated 2025-09-15 14:32
Video of Interactive OpenBSD Porting Workshop
[Dr.] Brian Callahan (bcallah@) recently live-streamed(at twitch.tv/NewAstroCity)an interactive OpenBSD Porting Workshop.A recording of the workshop isnow available.
arm64 gains RETGUARD
In aseriesofcommits,Todd Mortimer (mortimer@) has added RETGUARDfor the arm64 platform.We previously reported theaddition of RETGUARD for amd64.Read more…
Happy Bob's Libtls tutorial
Bob Beck (beck@ when wearing OpenBSD-only hat)has writtena tutorialon using libtls:
mandoc-1.14.4 released
Ingo Schwarze (schwarze@ when wearing OpenBSD-only hat)wrote in to let us know about the new release:
X11 on really small devices
Patrick Wildt (patrick@) has been experimenting with small I2C and SPI-connected displays, and withthis commit, it was enabled for armv7 and arm64 platforms as ssdfb(4) in -current.Read more…
g2k18 hackathon report: Ingo Schwarze on sed(1) bugfixing with Martijn van Duren, and about other small userland stuff
For the g2k18 Ljubljana hackathon, i decided to try and get ridof as many small userland tasks as possible.Lots of them have been piling up over time.Read more…
Theo de Raadt on "unveil(2) usage in base"
In amessageto tech@, Theo de Raadt (deraadt@) discusses the state of development ofunveil(2)support in userland (and for a certain port):Read more…
g2k18 hackathon report: Kenneth Westerback on dhcpd(8) fixes, disklabel(8) refactoring and more
A new g2k18 hackathon report has arrived, this time from Kenneth Westerback (krw@), who writes:
More mitigations against speculative execution vulnerabilities
Philip Guenther (guenther@)and Bryan Steele (brynet@)have added more mitigations against speculative executionCPU vulnerabilitieson the amd64 platform.Read more…
rtadvd(8) has been replaced by rad(8)
rad(8) [as described in the g2k18 hackathonreport byFlorian Obser (florian@)]is now the only IPv6router advertisement daemon in -current, following the removal ofrtadvd(8).Advice on making the transition has beenadded to current.html
g2k18 hackathon report: Claudio Jeker on OpenBGPD developments
Claudio Jeker (claudio@) is next up with his report from Ljubljana:
g2k18 hackathon report: Carlos Cardenas on vmm/vmd progress, LACP
Another g2k18 hackathon report has arrived, this one fromCarlos Cardenas (ccardenas@), who writes:
g2k18 Hackathon Report: Klemens Nanni on improvements to route(8), pfctl(8), and mount(2)
The next g2k18 report comes from Klemens Nanni (kn@), who writes:
g2k18 hackathon report: Florian Obser on rtadvd(8) -> rad(8) progress (actually, rewrite)
Fresh from the just concluded hackathon in Ljubjlana comes our next report from Florian Obser(florian@) who writes:
g2k18 hackathon report: Matthieu Herrb on font caches and xenodm
Next in from Ljubljana is Matthieu Herrb (matthieu@):
g2k18 hackathon report: Antoine Jacoutot on porting
Before winning the football world cup, the french were writing their hackathon reports. Here's the one from Antoine Jacoutot (ajacoutot@):
g2k18 Hackathon Report: Marc Espie on ports and packages progress
Theg2k18hackathon has just concluded, and already we have our first report.Marc Espie (espie@) wrote in:
OpenBSD gains Wi-Fi "auto-join"
In a change which is bound to be welcomed widely, -current has gained"auto-join" for Wi-Fi networks.Peter Hessler (phessler@) has been working on this for quite some time and he wrote about it in his p2k18 hackathon report. He has committedthe work from the g2k18 hackathon in Ljubljana:
Fixing bufferbloat with PF and OpenBSD
In this post, Paul Smith shows how to reduce buffer bloat and improve interactive traffic latencies.
httpd(8) Gains Simple Request Rewrites
Reyk Floeter (reyk@) hascommittedsupport for simple request rewrites tohttpd(8)/httpd.conf(5) [in -current]:
SMT Disabled by Default in -current
As part of ongoing mitigations against CPU vulnerabilities,-current has gained a new sysctl, "hw.smt",to control Simultaneous Multi Threading (SMT).This is disabled by default (only on Intel® CPUs, for now).Read more…
More Mitigations for (potential) CPU Vulnerabilities
There have been more developments in the continuing work mitigatingagainst (Intel®, and potentially other) CPU vulnerabilities…Philip Guenther (guenther@)committed the following:Read more…
LDAP client added to -current
Reyk Floeter (reyk@) hascommitteda simple LDAP client to -current:
Intel® FPU Speculation Vulnerability Confirmed
Earlier this month, Philip Guenther (guenther@)committed(to amd64 -current) a change from lazy to semi-eager FPU switchingto mitigate against rumored FPU state leakagein Intel® CPUs.Theo de Raadt (deraadt@) discussed this in hisBSDCan 2018session.Using information disclosed in Theo's talk,Colin Percivaldeveloped a proof-of-concept exploit in around 5 hours.This seems to have prompted an early end to an embargo(in which OpenBSD was not involved), and theofficial announcementof the vulnerability.
OpenBSD at BSDCan 2018
BSDCan 2018has concluded, and materials for (some of) the OpenBSD-related tutorials andtalks can be found inthe usual place.Highlights includethe unveiling of unveil(),hinted at by Bob Beck (beck@) in hisp2k18 report,and"Speculating about Intel", by Theo de Raadt (deraadt@). [An unofficial video of the latter presentation isavailable.]At the time of writing,officialvideo recordings are not yet available.
RETGUARD for clang (amd64) added to -current
Todd Mortimer (mortimer@) hascommitted"RETGUARD" for clang (for amd64).This is a new anti-ROPsecurity mechanism, which uses random per-function cookiesto protect return addresses on the stack.Read more…
libcsi - Crypto Simplified Interface
Joel Sing (jsing@) hascommittedCrypto Simplified Interface (CSI) to -current:
New Grammar for smtpd.conf
Gilles Chehade (gilles@) hascommitted(to -current) the newsmtpd.confgrammar discussed inhis p2k18 hackathon report.Read more…
p2k18 Hackathon Report: Antoine Jacoutot on GNOME and portroach
Next up in the stream of p2k18 reports is one from Antoine Jacoutot (ajacoutot@):
p2k18 Hackathon report: Paul Irofti (pirofti@) on semaphores development, wifi stack progress and ports work
Next up in our series of p2k18 hackathon reports is from Paul Irofti (pirofti@), who writes:
p2k18 Hackathon report: Peter Hessler on wifi nwid switching
Peter Hessler (phessler@) writes about his time in Nantes:
p2k18 Hackathon Report: Eric Faurot on e-mail and printing
Eric Faurot (eric@) is next with his report on what he did in Nantes:
p2k18 Hackathon Report: Stefan Sperling on ports and wireless improvements
Stefan Sperling (stsp@) kindly sent in a report on his activities around p2k18:
p2k18 Hackathon report: Christian Weisgerber (naddy@) On clang 6 fallout, doing the right thing, and fixes for aarch64
Our next p2k18 report comes from Christian "naddy" Weisgerber, who writes:
p2k18 Hackathon Report: Landry Breuil on USB, pledging firefox, and much more
Landry Breuil (landry@) has an extensive report for our readers:
p2k18 Hackathon report: Jasper Lievisse Adriaanse (jasper@) on Gnome 3.28, gobject-introspection and crpes
Next up with a p2k18 report is Jasper Lievisse Adriaanse (jasper@):
p2k18 Hackathon report: Bob Beck on pledge, non-pledge and soon to be revealed goodies
Next up with a p2k18 report is Bob Beck (beck@):
p2k18 Hackathon Report: Ken Westerback on dhclient and disklabel
Next up is the report from Ken Westerback (krw@):
p2k18 Hackathon report: Gilles Chehade on organizing a hackathon and OpenSMTPD
The latest p2k18 hackathon report comes from Gilles Chehade (gilles@),who writes:
p2k18 Hackathon report: Philip Guenther on low level amd64 development and more
As more and more developers arrive back home from France, more reports arrive to you to keep you informed of what happened in Nantes. This time, it's Philip Guenther (guenther@) who writes in with his report:
p2k18 Hackathon Report: Klemens Nanni on ports and pledges
Next up in our series of p2k18 reports is that from Klemens Nanni (kn@):
p2k18 Hackathon report: Marc Espie (espie@) on pkg_* and packages progress
Here is another report from the just concluded p2k18 hackathon, from Marc Espie (espie@), who writes:
p2k18 Hackathon report: Solene Rapenne (solene@) on joining the project, packages progress
Spectre Variant 2 mitigation for kernel committed to -current
Working at p2k18, Theo de Raadt (deraadt@) hascommittedSpectre Variant 2 mitigations:
SMTP client added to -current
Working at p2k18, Eric Faurot (eric@) hascommitteda simple SMTP client to -current:
OpenBSD Community Goes Gold for 2018!
Ken Westerback (krw@ when wearing his developer hat) writes:
Hardware accelerated AES/HMAC-SHA on octeons
In this commit, visa@ submitted code (disabled for now) to use built-in accelerationon octeon CPUs, much like AESNI for x86s.I decided to test tcpbench(1) and IPsec, before and after updating and enabling the octcrypto(4) driver.Read more…
MAP_STACK Stack Register Checking Committed to -current
The MAP_STACK anti-ROP mechanism described in a recentarticlehas beencommittedto-current.Thecommit messageincludes:
Transparent network audio with mpd & sndiod
Landry Breuil (landry@ when wearing his developer hat) wrotein…
OpenBSD 6.3 Released
April 2, 2018: The OpenBSDproject has announced the availability of the newest release,OpenBSD 6.3:
...891011121314151617...