Home BSDTalk
Showing posts with label BSDTalk. Show all posts
Showing posts with label BSDTalk. Show all posts

BSD News 02/05/2016

BSD News 02/05/2016
Add Comment

Last week in BSD

Releases: FreeBSD, BSDSec, OpenBSD, BSDnow, CheriBSD, BSDTalk, NFS, p2k16
Other news: SoloBSD, GhostBSD, OPNsense, pfSense, HardenedBSD


BSDSec


Releases

New stable release: HardenedBSD-stable 10-STABLE v44.3

New stable release: HardenedBSD-stable 10-STABLE v44.4

New stable version: HardenedBSD-stable HardenedBSD-11-CURRENT v46

HardenedBSD-11-CURRENT-v46 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
 

pfSense 2.3 Update 1 Available

Since the new pkg system enables us to update pieces of the system individually, rather than the monolithic updates of the past, we have released a patch that fixes the NTP CVEs covered by FreeBSD SA 16:16.ntp. Updating ntpd from 4.2.8p6 to 4.2.8p7 is the only change.
This update appears as 2.3_1, for update 1. This should not be confused with 2.3.1, which is a full maintenance release coming soon. 2.3_1 is only available for those already running 2.3 release.
Note for this update, your version number will remain the same afterwards, still showing as 2.3-RELEASE.
This update does not trigger a reboot. The NTP service needs to be manually restarted under Status>Services afterwards.

OPNsense 16.1.12 released

The progress for our upcoming version 16.7 now accumulates to 3 full months. To that end we are making the transition from ALPHA to BETA on the 16.7 development series. And since we have been asked to incorporate development change logs as well, look no further (well, look below).
Anyway, 16.1.12 brings a handful of anticipated additions like FreeBSD’s package manager version 1.7.2 and the ability to use CoDel / FQ-Codel in the traffic shaper. We have also started to move services to the plugin framework instead of having them in the base installation. And, maybe as a last point, initial work for fixing the trusty apinger utility for gateway monitoring has surfaced.
Het bericht OPNsense 16.1.12 released verscheen eerst op OPNsense.

GhostBSD 10.3 ALPHA1 is now ready for Testing

Yes we skip 10.2 for 10.3 since was FreeBSD 10.3 was coming we thought we should wait for 10.3. This is the first ALPHA development release for testing and debugging for GhostBSD 10.3, only as MATE been released yet which is available on SourceForge and for the amd64 and i386 architectures.

SoloBSD 10.3-STABLE-v44.3

SoloBSD 10.3-STABLE-v44.4

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.4
You can grab it from Here. (45.8 Mb)
root password: solobsd

News

Cheri-picking BSD | BSD Now 139

This week, Allan is out of town, but since when has that ever stopped us from bringing you a new episode of BSDNow? We have news, feedback & an excellent interview with Brooks Davis telling us about CheriBSD that you won’t want to miss.
View attached file (449 MB, video/mp4)

bsdtalk264 - Down the Gopher Hole

Playing around with the gopher protocol.   Description of gopher from the 1995 book "Student's Guide to the Internet" by David Clark. Also, at the end of the episode is audio from an interview with Mark McCahilll and Farhad Anklesaria that can be found at https://www.youtube.com/watch?v=oR76UI7aTvs
Check out http://gopher.floodgap.com/gopher/
File Info: 27 Min, 13 MB.
Ogg Link:https://archive.org/download/bsdtalk264/bsdtalk264.ogg

Code stuff 


Interesting articles



Read More»

BSDNews 28/03/2016

Add Comment

Last week in BSD

Releases: HardenedBSD, FreeNAS, OPNsense
Other news: BSDSec, HardenedBSD, LibreSSL, MidnightBSD, BSDnow, BSDTalk, DragonFly BSD


BSDSec


Releases

New stable release: HardenedBSD-stable 10-STABLE v44

HardenedBSD-10-STABLE-v44 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
 

FreeNAS 9.10

Jordan Hubbard has announced the release of a new version of FreeNAS, a network attached storage project that is based on FreeBSD. The new version, FreeNAS 9.10, features the same user interface as the earlier 9.3 series, but with an updated FreeBSD core. "This is an interim release between the 9.3 series and 10 (which is still a few months away), using the same UI and middleware that everyone is used to from 9.3 but with new OS underpinnings, specifically FreeBSD 10.3-RC3. Coincident with this release of 9.10, we are also placing 9.3 into maintenance mode and will only be pushing further updates to the 9.3-STABLE train in response to the most critical security advisories or product flaws. We therefore strongly suggest that all current users of 9.3 upgrade to 9.10 in order to continue to benefit from the ongoing maintenance and bug fix work we will be doing on the 9.10-STABLE train. Most, if not all, bug fixes will be made exclusively to the 9.10-STABLE train in reaction to tickets filed on http://bugs.freenas.org. Again: Users who choose to stay on the 9.3-STABLE train will see only the most critical bug fixes and no new features or non-essential enhancements." This release also supports USB 3.0 devices and USB network adapters. Further information is available in the release announcement and release notes. Download: FreeNAS-9.10-RELEASE.iso (405MB, SHA256).

OPNsense 16.1.8 released

This quick 16.1.8 release is not a big update, but it means a lot. We have finished our full sweep of the GUI to update the look and feel of all pages and made the code ready for what is to come now: new features that are on our roadmap for 16.7. The first one will be the HTTPS proxy, but there is also NetFlow and improved statistics / reporting on the shortlist.
A day after 16.1.7 was out last week, FreeBSD 10.2-RELEASE-p14 was announced. Of the four patches enclosed, the two Hyper-V patches we have already brought to OPNsense over a month ago, the OpenSSH patch does not apply since we only use the port and already had it up-to-date. That leaves us with only one patch that we are shipping now to complete the experience.
Attention to everyone using OpenVPN + cryptodev acceleration: the cryptodev module along with older crypto drivers has been removed from the kernel itself, which means that if you need to keep using it, go to System: Settings: Misc and reconfigure your crypto hardware including an enable of cryptodev usage.
New images based on 16.1.8 will be out early next week.
Here are the full patch notes:
  • src: updated tzdata to version 2016b[1]
  • src: fix incorrect argument validation in sysarch[2]
  • src: fix pfi_table_update: cannot set new addresses
  • src: added APU2 temperature sensor support
  • ports: unbound 1.5.8[3], sudo 1.8.16[4], pcre 8.38[5]
  • proxy: better matching for overlapping URLs
  • universal plug and play: refactored pages for improved look and feel
  • vpn: refactored L2TP and PPTP pages for improved look and feel
  • openvpn: fix missed configure stage for Peer to Peer (TLS/SSL) mode
  • system: reworked the behaviour of thermal and crypto modules
  • firewall: tweaked a few rule indicator icons to improve clarity
  • firewall: improved alias validation on edit
  • interfaces: also add previous DHCP override fixes for IPv6
  • language: updated French and German
—
[1] http://mm.icann.org/pipermail/tz-announce/2016-March/000036.html
[2] https://www.freebsd.org/security/advisories/FreeBSD-SA-16:15.sysarch.asc
[3] http://www.unbound.net/download.html
[4] https://www.sudo.ws/stable.html#1.8.16
[5] http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup
Het bericht OPNsense 16.1.8 released verscheen eerst op OPNsense.


News

MidnightBSD with Lucas Holt

MidnightBSD is around for more than 10 years, but still, the most of BSD users are not familiar with it. That's why we decided to have a quick chat with Lucas Holt, MidnightBSD's founder and lead developer. We will talk about how he got started and what he is working on right now. 

 
Lucas Holt is currently a Senior Application/Programmer Analyst - Team Lead at the University of Michigan. In his own words, MidnightBSD is a heavily modified version of FreeBSD 9.1 with a custom package manager, the sensors framework, ZFS, utilities from NetBSD, OpenBSD, DragonFly and MirBSD, and a good start on a desktop system.

 

Marking up the Ports tree | BSD Now 134

This week on the show, Allan & Kris have gotten a bit more sleep since AsiaBSDCon, which is excellent since there is a LOT of news to cover. That plus our interview with Ports SecTeam member Mark Felder. So keep it tuned to BSDNow, the place to B...SD!
View attached file (808 MB, video/mp4)


bsdtalk263 - joshua stein and Brandon Mercer

This episode is brought to you by ftp, the Internet file transfer program, which first appeared in 4.2BSD.
An interview with the hosts of the Garbage Podcast, joshua stein and Brandon Mercer. You can find their podcast at http://garbage.fm/
File Info: 17Min, 8MB.
Ogg Link: https://archive.org/download/bsdtalk263/bsdtalk263.ogg

clang in DragonFly, soon

John Marino has added the starting framework to use clang as the alternate base compiler in DragonFly.  Note that it’s not hooked into the build yet.  This is the first non-GCC compiler added into DragonFly, so there’s some work yet before you can have an all-clang system.  This should replace GCC 4.7, which is the current alternate compiler.  GCC 5.0 is the default, if you didn’t know.
Note that clang is present in dports, so it’s already been available for general use, for some time.  This framework is for building DragonFly itself.

Code stuff 

Read More»

BSD News 22/02/2016

BSD News 22/02/2016
Add Comment

Last week in BSD

Releases: OPNsense, DragonFly BSD, FreeBSD
Other news:DragonFly BSD, FreeBSD, OPNsense, BSDTalk, BSDnow,


BSDSec

none warnings


Releases

OPNsense 16.1.3 released

 The full patch notes:
  • src: hyperv/kvp: wake up the daemon if it is sleeping due to poll()[1]
  • src: Use correct src/dst ports when removing states in pf[2]
  • src: finish the boot loader branding by adding a shiny logo
  • ports: unbound 1.5.7[3], openldap 2.4.44[4], ca_root_nss 3.22, php 5.7.18[5], phalcon 2.0.10[6], pkg 1.6.4[7][8]
  • interfaces: collapsible overview for each interface
  • shaper: fix issue with model when not able to save an old config
  • health: added pages to ACL for configurable user access
  • health: record system CPU temperature in additional graph
  • firmware: add UK-based mirror (contributed by Will Jones)
  • access: force a visible and non-critical page on non-access redirect
  • access: make sure “/” is handled like “/index.php”
  • configuration: add a number of previously missing config sections for selection on restore/backup
  • firewall: bring back alias nesting
  • dhcp: add missing DNS resolver awareness
  • dhcp: fix multiple minor crash reports
  • radvd: add missing DNS resolver awareness
  • captive portal: ensure MAC address is saved in lowercase and improve validation
  • captive portal: fix unicode issue in template generation
  • captive portal: correct syslog redirection regression
  • crash reporter: limit log size upload to 1MB
  • cron: fix validation of hour value
  • intrusion detection: show origin link of rule sets in details
  • services: add background daemon to known services for easy reload
  • services: add captive portal to known services for easy reload
  • services: improve redirect on service reload in diagnostics page

DragonFly 4.4.2 released

DragonFly 4.4.2, a bugfix release to 4.4.1, is out.  This was mostly prompted by the recent OpenSSL update, but other little fixes have made it in, too.  It’s available for download and is probably available at your nearest mirror by now, if you want an image.  The release page is updated, and there’s always the Git tag summary for 4.4.2 for the most exact details.

FreeBSD 10.3-BETA2 Available

The second BETA build for the FreeBSD 10.3 release cycle is now available. ISO images for the amd64, armv6, i386, ia64, powerpc, powerpc64 and sparc64 architectures are available on most of our FreeBSD mirror sites.

News

CheriBSD - A research fork of FreeBSD

CheriBSD is a fork of FreeBSD to support the CHERI research CPU. We have extended the kernel to provide support for CHERI memory capabilities as well as modifying applications and libraries including tcpdump, libmagic, and libz to take advantage of these capabilities for improved memory safety and compartmentalization. We have also developed custom demo applications and deployment infrastructure for our table demo platform. In this talk I will discuss the challenges facing a long running, public fork of FreeBSD.


bsdtalk262 - LightZone with Tex Andrews

An interview with Tex Andrews from Lightzoneproject.org.  LightZone is open source digital darkroom software.

File Info: 23Min, 11MB.

Ogg Link: https://archive.org/download/bsdtalk262/bsdtalk262.ogg

Synthesize all the Things! | BSD Now 129

Coming up this week, we will be talking to John Marino about his work on the ports-mgmt utility “Synth” and the cross-pollination between DragonFly and FreeBSD. That plus the latest news and your email here on BSD Now, the place to B… SD!
View attached file (666 MB, video/mp4)


Code stuff

MidnightBSD package manager GUI

Interesting articles




Wallpaper of the week 


 from http://www.midnightbsd.org/art/dtps/mnbsd_bg_blue.png
Read More»

BSD News 01/02/2016

BSD News 01/02/2016
Add Comment

Last week in BSD

Releases: OPNsesne, HardenedBSD
Other news:Talks, HardenedBSD, NetBSD, Minix, FreeBSD, DragonFly BSD, ZFS, HardenedBSD, PC-BSD, OPNsense, LibreSSL, BSDSec, BSDTalk

BSDSec


Releases 

OPNsense 16.1 Released

It has been more than a year since OPNsense first came out. Back then it was FreeBSD 10.0. Not even two months after, 10.1 was introduced along with the opnsense-update utility. Today is the day for FreeBSD 10.2, the latest and greatest release currently available for broader driver support and stability improvements. 16.1 is nick-named “Crafty Coyote” in honour of our beloved childhood TV sessions. It is the accumulation of 6 months of work, having had our focus on reengineering the captive portal, native intrusion prevention, plugin support, and transforming the reporting frontend into something more modern and flexible just to name a few[1]. Apart from the recently published security advisories (see patch notes below), we have included a quick navigation feature which can be activated by pressing (TAB) followed by search keywords and hitting (ENTER) to go to the desired page. Last but not least, a larger batch of improvements and fixes went into assorted sections of the GUI that certainly help to get your work done without ending up dazed and confused.
 

HardenedBSD New development versions.

New stable versions: HardenedBSD-stable 10-STABLE and 11-CURRENT v40

New stable versions: HardenedBSD-stable 10-STABLE and 11-CURRENT v40.1

HardenedBSD-10-STABLE-v40.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
---------------------------------------
[hardenedbsd] HBSD: Don't check for ZFS KLD when non-root.
[hardenedbsd] HBSD: Harden KLD-related syscalls
[hardenedbsd] HBSD: Add /proc to the hbsd-update's skipped files list.
[hardenedbsd/freebsd] HBSD: ktrace: tidy up ktrstruct
[freebsd] Merge OpenSSL 1.0.1r.
[freebsd] Add EFI ZFS boot support
[freebsd] e1000 driver update
HardenedBSD-11-CURRENT-v40.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
------------------------------------------
[hardenedbsd] HBSD: Don't check for ZFS KLD when non-root.
[freebsd] Merge OpenSSL 1.0.2f. (SA candidate)
[hardenedbsd] HBSD: Add /proc to the installer's skipped files list.

News

A Reimplementation of NetBSD Using a Microkernel

This talk covers some of the history of Minix 3, what it is and why Andrew started the project, and how after years of fighting it why he realized that Minix 3 should be more like BSD than being its own thing.
Join the discussion  on site. 

New Member - CTurt

We've added a new member to the HardenedBSD team! CTurt will be working with us to research, exploit, and produce patches for kernel-level vulnerabilities. We'll be working on getting these kernel security enhancements upstreamed to FreeBSD after the fixes have been deemed stable in HardenedBSD first.

License corrections for DragonFly

This has no effect on the actual operation of DragonFly, but it makes me feel better that it’s done: Rimvydas Jasinskas has gone through DragonFly source and removed the unnecessary 3rd BSD license clause, which is no longer needed.

illuminating the future on PC-BSD | BSD Now 126

This week on BSDNow, we are going to be talking to Ken Moore about the Lumina desktop environment, where it stands now and looking ahead. Then Allan turns the tables and interviews both myself and Ken about new ongoings in PC-BSD land. Stay tuned, lots of exciting show is coming your way right now on BSDNow, the place to B...SD!
View attached file (699 MB, video/mp4)
 

bsdtalk261 - Jails and System Management with Kris Moore

An interview with Kris Moore about the Warden jail management system, iocage, and progress on a new system management API.

File Info: 30Min, 14MB.

Ogg Link: https://archive.org/download/BSDTalk261/BSDTalk261.ogg 

Code stuff 


Interesting articles

Wallpaper of the week 

 from http://hdw.eweb4.com/out/637260.html
Read More»

BSD News 21/12/2015

Add Comment

Last week in BSD

Releases: none
Other news: n2k15, BSDSec, FreeBSD, OpenBSD, DragonFly BSD, BSDnow, BSDTalk,


BSDSec


Releases

seems to be none

News 

I’m talking about the man in the middle | BSD Now 120

This week on BSDNow, we are going to be talking to Pawel about how his company uses BSD in their security appliances, including some trickery with SSL certificates. You won’t want to mess this, plus the latest news & headlines, coming your way right now.
View attached file (751 MB, video/mp4)
 

bsdtalk260 - TeachBSD.org with Robert N. M. Watson and George V. Neville-Neil

Can you believe that it has been a decade of BSDTalk?  The first episode aired on Dec 20, 2005.
An interview with Robert N. M. Watson and George V. Neville-Neil about teaching operating systems with tracing and teachbsd.org.
File Info: 36Min, 18Mb.
Ogg Link: https://archive.org/download/bsdtalk260/bsdtalk260.ogg

Wallpaper of the week 

from https://www.flickr.com/photos/63771152@N07/6028296041/
Read More»

BSD News 07/12/2015

BSD News 07/12/2015
Add Comment

Last week in BSD

Releases: seems to be none
Other news: BSDSec, FreeBSD, BSDTalk, OpenBSD, BSDnow, PC-BSD, DragonFly BSD, 


BSDSec



Releases

seems to be none

News 


BSD is go for Launch | BSD Now 118
We know init systems have been all the rage recently, from systemd to openrc, launchd & even nosh, a lot of work is being done in this arena. Today we will be interviewing Mark Heily to discuss his efforts on relaunchd & how it differs from the rest!
View attached file (598 MB, video/mp4)


Preparing multitouch support - request for tests

Ulf Brosziewski (bru@) writes to tech@:
The diffs below contain a complete and extensive rewrite of the input-processing parts of wsmouse and the interface it provides to the hardware drivers. It prepares the support for various kinds of multitouch input, as well as an extended support for touchpads by wsmouse.
Read more...


bsdtalk259 - Supporting a BSD Project

A recording from vBSDCon 2015 of the talk titled "Supporting a BSD Project" with Ed Maste and George Neville-Neil.
File Info: 65Min, 31MB.
Ogg Link: https://archive.org/download/bsdtalk259/bsdtalk259.ogg
 

Show Your Support for FreeBSD

Dear FreeBSD Community Member:
Did you know your contribution to the FreeBSD Foundation makes a direct impact on the FreeBSD Project?
 Your donations:
  • Fund work to improve FreeBSD such as improving UEFI booting and the vt(4) system console and porting FreeBSD to the new AArch64 64-bit ARM architecture.
  • Send people to conferences to meet and work with other developers.
  • Buy hardware needed to improve the Project’s infrastructure.
  • Advocate for FreeBSD to recruit new people to the Project, and educate people on FreeBSD.
That’s just the beginning. In honor of #GivingTuesday, help the Foundation by sending in your donation today. It's only with your help that we can continue and increase our support to make FreeBSD the high-performance, secure, and reliable OS you know and love.
Thank you for your support. We can't do this without you!
Deb Goodkin
 

Update for recent DragonFly-master systems

If you are running DragonFly-master (i.e. 4.5), and you have a system between these two updates (roughly between November 27th and now), please rebuild your kernel to avoid a TCP bug.

Code stuff 


Interesting articles


Wallpaper of the week 

 

from http://hqwall.net/eng/wallpaper/freebsd%20180016-112444.html
 
Read More»

BSD News 02/11/2015

BSD News 02/11/2015
Add Comment

Last week in BSD

Releases:none
Other news:DragonFly BSD, NetBSD, pfSense, BSDnow, NextBSD, OpenBSD, BSDTalk, u2k15, BSDSec


BSDSec


Releases

seems to be none

News 

 

bsdtalk258 - Chris Henschen from fP Technologies

Oct 2015 is the 20th anniversary of the OpenBSD source tree!
This episode is brought to you by the id utility, which returns the user identity.  id appeared in 4.4 BSD.
An interview from vBSDCon 2015 with Chris Henschen from fP Technologies.  They recently ported their filePro Plus product to FreeBSD.
File Info: 6Min, 3MB
Ogg Link: https://archive.org/download/bsdtalk258/bsdtalk258.ogg

Developer interview roundup

Polish BSD news site beastie.pl has been conducting interviews with various OpenBSD developers for the 20th anniversary. Each one covers some background info on the interviewee, how and why they got into OpenBSD and what they're looking forward to. The series has just concluded, and you can find the complete list here: Read more...

What’s Next for BSD? | BSD Now 113

Coming up on this week’s episode, we have an interview Jordan Hubbard about the new NextBSD project & the future of BSD. Also Allan's re-cap of the OpenZFS conference & of course your latest news!
View attached file (898 MB, video/mp4)
 

End of life for NetBSD 5.x on November 9

In keeping with NetBSD's policy of supporting only the current (7.x) and next most recent (6.x) release majors, the release of NetBSD 7.0 marks the end of life for the 5.x branches. As in the past, a month of overlapping support is being provided in order to ease the migration to newer releases.
On November 9, the following branches will no longer be maintained:
  • netbsd-5-2
  • netbsd-5-1
  • netbsd-5
Furthermore:
  • There will be no more pullups to the branches (even for security issues)
  • There will be no security advisories made for any of the 5.x releases
  • The existing 5.x releases on ftp.NetBSD.org will be moved into /pub/NetBSD-archive/
We hope 7.0 serves you well!

Code stuff 


Interesting articles


Wallpaper of the week 


from https://nullify.files.wordpress.com/2007/07/wall12-1-1920x1200.png
Read More»

BSD News 28/09/2015

BSD News 28/09/2015
Add Comment

Last week in BSD

Releases: OPNsense
Other news: DragonFly BSD, l2k15, BSDSec, LibreSSL, OpenBSD, OPNsense, BSDTalk, BSDnow,

BSDSec


Releases

From the third-party and/or security side not much has happened recently. We’re shipping the latest Bind and Squid, for details see the provided links. Here are the full patch notes:
  • config: don’t set login auto-complete on factory reset
  • config: fix faulty timezone on factory reset
  • config: improve config migration path for legacy config imports
  • config: new home in system section for the config history and backups
  • config: improved the config history differential view
  • notable port upgrades: bind 9.10.3 [1], squid 3.5.9 [2]
  • firmware: added Supranet Communications mirror (Middleton, US)
  • firewall: reworked rules, schedules, virtual ip, nat and aliases pages
  • users: removed special handling of the `all’ group
  • crash reporter: fixed 9 minor problem reports
  • wireless: only advertise supported modes of operation
  • system: fix theme selection for user-added themes
  • menu: fix expand on all interface edit pages
  • ntp: improve service status probing
  • diagnostics: fix authentication tester to work in conjunction with translations
  • languages: added French translation (33% complete)
  • languages: updated German translation (57% complete)
    •  

News 

bsdtalk257 - NetBSD Developer Christos Zoulas

An interview with NetBSD developer Christos Zoulas at vBSDCon 2015.
File Info: 15Min, 7MB.
Ogg Link: https://archive.org/download/bsdtalk257/bsdtalk257.ogg

OpenBSD 5.8 CD sets and swag shipping soon

The OpenBSD 5.8 pre-orders are about to ship. The OpenBSD Store twitter account tweeted with a picture of soon-to-be-shipped CD sets on Saturday, September 26th:
OpenBSD 5.8 stock has arrived. Shipping isn't too far off. Get your orders in! :-) pic.twitter.com/S4wUAO7yrE
— OpenBSD Store (@openbsdeurope) September 26, 2015
Get your orders in! There are T-shirts and various other swag to be had, too.

DragonFly 4.0 users should upgrade

If you happen to still be running DragonFly 4.0 – that’s two releases ago and not supported – you may be noticing less ports are building.  There’s been enough significant changes in DragonFly since that release that it’s reducing the number of buildable ports.
DragonFly 4.0 to 4.2 is not a difficult jump, so jump when you can.  The converse of this, of course, is that there’s even more building on 4.2 and DragonFly-current.

ServeUp BSD | BSD Now 108

This week on the show, Allan is heading to Sweden, but we have a great interview with Andrew Pantyukhin to bring you. We will be discussing everything from contributions to FreeBSD, which technologies worked best in the datacenter, config management & more!
View attached file (502 MB, video/mp4)
 

XDC2015: DragonFly and graphics

There’s been a lot of improvements to DragonFly and graphics support recently, and Francois Tigeot gave a talk at the 2015 X.Org Developer’s Conference outlining just how much has changed.  He’s posted the slides.

Code stuff



Wallpaper of the week 

from https://hdwallpapers.cat/bsd_freebsd_technology_unix_hd-wallpaper-8281/

Read More»

BSD News 21/09/2015

BSD News 21/09/2015
Add Comment

Last week in BSD

Releases: OPNsense, MidnightBSD
Other news: OPNsense, DragonFly BSD, FreeBSD Foundation, FreeBSD Journal, BSDSec, i2k15, BSDCan, BSDnow, OpenBSD, BSDTalk, MidnightBSD


BSDSec

 

Releases

OPNsense 15.7.12 Released

Here is the full list of changes:
  • src: local privilege escalation in IRET handler [1]
  • src: disable ixgbe(4) flow-director support [2]
  • src: insufficient check of unsupported pkg(7) signature methods [3]
  • ports: libressl 2.2.3 [4], bind 9.10.2P4 [5], openldap24-client 2.4.42 [6]
  • ports: radvd 1.15 [7], lighttpd 1.4.37 [8], squid 3.5.8 [9]
  • ports: php 5.6.13[10], php-suhosin 0.9.38 [11]
  • dhcp: use reverse mask instead of reverse address in config
  • dns resolver: honour log verbosity toggle
  • ssh: remove ssh1 key from generating, it is no longer supported in openssh
  • filter: remove the unused snort2c table from generated rules
  • xmlrpc: properly regenerate /etc/hosts on sync
  • openvpn: fix TLS authentication option reset
  • ipsec: proper redirect after apply in mobile tab
  • ipsec: fix behaviour of enable rekey and enable reauth
  • ipsec: only suffix connection number with sequence with multiple entries
  • ipsec: fix diagnostics to be able to connect multi phase2 IKEv1 entries
  • ipsec: fix Call to undefined function filter_configure()
  • dashboard: traffic graph highlights are now branded in orange
  • theme: render dropdown boxes a bit better
  • theme: partial fix for wrapped tab display
  • crash reporter: fix spurious crash report after actual submission
  • crash reporter: assorted fixes for warnings and errors in the code
  • crash reporter: improve submit/dismiss button layout

OPNsense 15.7.13 Released

Here are the full patch notes:
  • diagnostics: added real backend code leading to upcoming privilege separation for pfInfo, pfTop, States and Tables pages
  • dynamic dns: introduce constant naming away from “DynDNS” or “DDNS”
  • gui: fix numerous typos spotted by our relentless translators
  • gui: fixed validation errors in new components
  • gui: removed partial shadow from active tab
  • ipsec: fixed missing redirect after apply

[Midnightbsd-security] MidnightBSD 0.7 RELEASE

This release is primarily for stabilization, ZFS and mport package tool enhancements.
Upgrading from source: When upgrading from 0.6, you will need to install src/kerberos5/lib/libroken before building world.

News 

The FreeBSD Journal Reaches New Milestone

The FreeBSD Foundation is pleased to announce that the FreeBSD Journal has over 10,000 subscribers! Thank you to everyone who helped us reach this 2015 goal ahead of schedule. We'd also like to thank the dedicated team of editorial board members and authors for tirelessly volunteering their time to create must-read content for every issue. Finally, thank you to the advertisers and staff, without whom, publication would not be possible.  To celebrate our latest milestone, the Foundation will be raffling off cell phone power bricks to 10 lucky subscribers. We hope this helps keep the Journal always at your fingertips.
 

bsdtalk256 - Allan Jude

An interview with Allan Jude at vBSDCon in Reston, Virginia.  We talk about the book FreeBSD Mastery: ZFS that Michael W. Lucas and he co-authored.  You can find more information about the book at www.zfsbook.com

File Info: 16Min, 8MB.

Ogg Link: https://archive.org/download/bsdtalk256/bsdtalk256.ogg


In Their Midst | BSD Now 107

This week, we are going to be talking with Aaron Poffenberger, who has much to share about his first-hand experience in infiltrating Linux conferences with BSD-goodness!
View attached file (556 MB, video/mp4)

 

Code stuff


Interesting articles


Wallpaper of the week 

 from http://wallpaper222.com/explore/free-bsd-wallpaper/
 
Read More»

BSD News 06/07/2015

Add Comment

Last week in BSD

Releases: DragonFly BSD, OPNsense
News:  OctoPkg, FreeBSD, Raspberry Pi, BSDTalk, HardenedBSD, DragonFly BSD, OpenBSD, OPNsense, BSDnow


BSDSec


Releases

DragonFly 4.2.0 released

DragonFly 4.2 is officially released!  You can go to the 4.2 release page for details, go to the mirrors page to download, or read my users@ post for upgrade steps.
Update: news stories and commentary seen on lobste.rs, Hacker News, and linux.fr.
There’s a minor update for DragonFly 4.2 – this covers a problem with i915 support, so it’s worth upgrading if you have an Intel video chipset. 

OPNsense version 15.7 Released

While the summer is hot, we push forward to what now is 15.7 — nicknamed ‘Brave Badger’ — right in front of you. A lot of effort went into this project during the past 6 months, and we dare say it has been worth all of it. We would like to thank our followers and friends and feedback givers and forum lurkers and contributors and doubters and supporters that helped to make 15.7 what it is. We wouldn’t be here without any of you. Thank you.
In itself, 15.7 is a simple upgrade from 15.1.12 which we recommend to everyone. What changes is that development will move to a different branch so that from now on regressions are less likely and therefore stability will increase further. The provided images may also be the only ones for the next 6 months as we are confident in their longevity and the online upgrade path. We have also bumped the LibreSSL flavour to a production-ready state and encourage everyone to try it out. The installer’s import configuration tool coupled with a quick and easy installation can help you move from OpenSSL to LibreSSL and back seamlessly.
The biggest addition is the intrusion detection integration (suricata) as well as new local and remote blacklists options for the proxy server (squid).
Security-wise, it has been rather quiet with only a few CVEs in third-party tools. Please see the full patch notes for details and references:
  • kernel: borrowed a dummynet / ipnat patch from m0n0wall to enable symmetric traffic shaping when NAT is involved
  • kernel: fix recurse lock panic for tmpfs in conjunction with unionfs
  • kernel: applied two stable patches that prevent squid from crashing [1]
  • kernel: retired ALTQ support
  • base: sendmail TLS/DH Interoperability Improvement [2]
  • base: improved iconv(3) UTF-7 support [3]
  • base: inconsistency between locale and rune locale states [4]
  • notable ports updates: phalcon 2.0.3 [5], curl 7.43.0_2 [6], openssh 6.8p1_8, python 2.7.10 [7], perl 5.20.2_5 [8], ntp 4.2.8p3 [9], libxml2 [10] 2.9.2_3, openldap24-server 2.4.41 [11]
  • opnsense-update: will no longer try to reinstall the installed version after a fresh installation
  • bsdinstaller: bring back cpdup to error out on low memory installation (you need 1 GB of RAM, or work around installation using the nano image)
  • traffic shaper: removed legacy queues support in favour of the new traffic shaper functionality
  • traffic shaper: allow direct enable/disable toggle
  • proxy: fix the initial daemon start on bootup
  • proxy: added LAN as the default interface configuration
  • proxy: local and remote blacklists with regex support
  • intrusion detection: initial release of our IDS GUI based on suricata
  • gateways: monitoring mode gained IPv6 support
  • captive portal: fix idle timeout bug
  • captive portal: d
  • not delete the wrong zone when having multiple configurations
  • captive portal: removed include files from exposed web directory
  • backend: always regenerate users and groups to avoid corruption after an unclean shutdown
  • backend: wait for configd socket to come up to address a startup race issue
  • backend: clean up configd socket on exit
  • backend: fixed regression that prevented user scripts from being started via /etc/rc.conf
  • gateways: only show apinger in services when monitoring is enabled for a gateway
  • languages: brought Simplified Chinese to 49% completed, German to 30% completed
  • universal plug and play: make page invoke static to remove exploitability of the legacy packages framework
  • crash reporter: finally enabled the send button and provides human-readable feedback whether the submission was complete
  • console: added non-interactive interface assignment for headless deployments
  • ssh: disable password authentication on factory reset to align with the standard configuration
  • diagnostics: avoid duplicated calls of gethostbyaddr() in NDP table view
  • users: prompt for old password on password change to prevent account hijacking
  • users: stripped the impossible scponly user privileges since said utility has never been part of our ecosystem
Images can be found on any of our mirrors, but they may take a few hours to sync.
https://opnsense.org/download/

Other news

Lost Technology | BSD Now 96

 Coming up this week, we'll be talking with Jun Ebihara about some lesser-known CPU architectures in NetBSD. He'll tell us what makes these old (and often forgotten) machines so interesting. As usual, we've also got answers to your emails and all this week's news on BSD Now - the place to B.. SD. 

bsdtalk254 - PFsense and FreeNAS with Ken Worster

An interview with Ken Worster who is presenting on topics which include PFSense and FreeNAS in schools at the Technology Teacher ME conference in Bethel Maine.
Ogg Link: https://archive.org/download/bsdtalk254/bsdtalk254.ogg

PC-BSD 10.2-PRE-RELEASE and 11.0-CURRENT Images Available for Testing

The PC-BSD project is pleased to announce the availability of two new testing images: 10.2-PRERELEASE and 11.0-CURRENTJULY2015.
WARNING: These images are considered “bleeding-edge” and should be treated as such.
The DVD/USB ISO files can now be downloaded from the following URLs:
http://download.pcbsd.org/iso/10.2-RELEASE/edge/amd64/
http://download.pcbsd.org/iso/11.0-CURRENTJULY2015/amd64/
This is a great way to test features and report bugs well before the release cycle begins for the next major releases.
To report bugs in PC-BSD, use https://bugs.pcbsd.org.
To report FreeBSD / Port / Kernel / World bugs, use https://bugs.freebsd.org/bugzilla/enter_bug.cgi.
To update from 10.1-RELEASE:
# pc-updatemanager chbranch 10.2-RELEASE
or
# pc-updatemanager chbranch 11.0-CURRENTJULY2015
This process will take a while, downloading new packages / world / kernel for the system. When done you can reboot, and the updater will finish up the update process.

Intel® System Studio 2016 for FreeBSD* Beta

Intel has released the beta version of their C++ compiler for FreeBSD. Thanks to Kittur Ganesh (Intel) for informing us about this software. Intel® System Studio (ISS) 2016 for FreeBSD* Beta provides a comprehensive embedded tool suite solution for developing, optimizing, tuning and deploying 64-bit system and application C, C++ code running natively on FreeBSD*

HardenedBSD Introducing True Stack Randomization

When we first implemented ASLR for FreeBSD, we implemented the stack randomization portion as a random gap. This means that the base address for the stack remained constant, but where applications started utilizing the stack would change randomly. We have now implemented true stack randomization. The base address for the stack is now randomized. We still utilize a random stack gap on top of true stack randomization to provide further entropy and security. This means that we can effectively achieve 42 bits of entropy for the stack. This change breaks KBI and we have bumped the HardenedBSD version up to 26 with this change. We will be doing a new package build to ensure packages are up-to-date with this change.
You can find the git commit here. For more details about how the PaX Team recommends doing stack randomization, take a look here.

Code stuff


Interesting Articles


Wallpaper of the week

from http://www.wallpaperdisk.com/download-free%20bsd%20devil-1463-wallpaper.html
Read More»

BSD News 18/05/15

Add Comment

Last week in BSD

Releases: PC-BSD, OPNsense
News: BSDnow, BSDTalk, OpenBSD, freeNAS, HardenedBSD

BSDSec

[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-15:04.freebsd-update 
[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-15:05.ufs 

Releases

PC-BSD 10.1.2 Released   


  •  New PersonaCrypt Utility
    • Allows moving all of users $HOME directory to an encrypted USB Drive. This drive can be connected at login, and used across different systems
    • Stealth Mode — Allows login to a blank $HOME directory, which is encrypted with a one-time GELI key. This $HOME directory is then discarded at logout, or rendered unreadable after a reboot
  • Tor mode — Switch firewall to running transparent proxy, blocking all traffic except what is routed through Tor.
  • Migrated to IPFW firewall for enabling VIMAGE in 10.2
  • Added sound configuration via the first boot utility
  • Support for encrypted iSCSI backups via Life-Preserver, including support for bare-metal restores via installer media
  • New HTML handbook, updated via normal package updates
  • Media Center support allowing direct login to Kodi and PlexHomeTheater for the 10ft user experience
  • Switch to new AppCafe interface, with remote support via web-browser
  • Improvements to Online Updater, along with GRUB nested menus for Boot-Environments
  • Migrate all ports to using LibreSSL instead of OpenSSL
  • Switch from NTPD to OpenNTPD
  • Lumina desktop 0.8.4
  • Chromium 42.0.2311.135
  • Firefox 38.0
  • NVIDIA Driver 346.47
  • Pkg 1.5.2

OPNsense version 15.1.10.2 Released 


Here is the full list of changes:
  • proxy: basic proxy features on top of our new and shiny MVC framework under “Services: Proxy Server”
  • proxy: smart tokens for item lists (copy/paste CSV list into them and watch the magic happen)
  • proxy: help on/off per item or full page
  • proxy: hide advanced options and include sane defaults
  • proxy: FTP proxy included with same ACL controls as HTTP
  • proxy: simple authentication using built-in user database
  • openvpn: added Tunnelblick’s version of the OpenVPN XOR feature for protocol obfuscation[3]
  • core: fixed config.xml section import regression
  • core: stripped numerous dynamic strings from gettext() invokes
  • ports: added FreeBSD’s 10.1 ifinfo tool to probe for interface statistics to replace legacy PHP module code
  • ports: bsdinstaller 2.3 no longer uses cpdup utility, plus log collection and SONAME fixes
  • ports: updated to pkg 1.5.2, phalcon 2.0.0, dnsmasq 2.72_1[4]
  • ports: perl5 is now installed by default (5.18)
  • development: OpenSSL and LibreSSL branches have been merged for a simpler build experience and smaller release times
  • development: the package sets are now always kept as a single archive that can be reused and recompiled (even selectively)
  • development: stable translation template file is available now[5]
  • development: kickstarted Japanese and Chinese translations
  • development: language translation files are now automatically compiled into the core package
  • development: added a persistent build config file for setting the version, crypto flavour and release version tag (if applicable)
The update is available via the firmware upgrade feature only.


PC-BSD 11.0-CURRENTMAY2015 images now available


The PC-BSD project is pleased to announce the availability of our 11.0-CURRENTMAY2015 images.
WARNING: These images are considered “bleeding-edge” and should be treated as such.
The DVD/USB ISO files can now be downloaded from this URL.


Other new

Exclusive Disjunction | BSD Now 89 
This week on the show, we'll be talking to Mike Larkin about various memory protections in OpenBSD. We'll cover recent W^X improvements, SSP, ASLR, PIE and all kinds of acronyms! We've also got a bunch of news and answers to your questions, coming up on BSD Now - the place to B.. SD. 

bsdtalk253 - George Neville-Neil 

An interview with George Neville-Neil about the recently published 2nd edition of The Design and Implementation of the FreeBSD Operating System.
File Info: 30Min, 15MB
Ogg Link: https://archive.org/download/bsdtalk253/bsdtalk253.ogg

OpenBSD 5.7 CD 2 Incorrectly Pressed 


OpenBSD project leader Theo de Raadt (deraadt@) outlined some issues with the CD plant, which led to an incorrectly-finished CD 2, some of which were, unfortunately, shipped prior to the issue being found.
Sadly, CD2 of the OpenBSD 5.7 shipped in a broken fashion due to errors at the manufacturing plant. Two mistakes were made. In the rush after the first error, this error was not caught in time. Many people have received (or will soon receive) their package with this broken disc. Orders which have not yet shipped are being held back... because...
A repaired disc is on the way from the plant.
This will be shipped out to everyone, and will be inserted into the orders not yet shipped

Code stuff

secadm 0.2.1 Released
Shut up ARP 
In Other BSDs for 2015/05/16 

Interesting articles

Yes, You Can Virtualize FreeNAS 
Minnowboard and DragonFly
The importance of strong and fast cryptography

Wallpaper of the week

as fount at https://betobsd.wordpress.com/category/bsd-wallpaper/

Read More»

BSD News 02/03/2015

Add Comment
Last week in BSD
Releases: OPNsense
Other news: DragonFly BSD, BSDSec, SCALE, pfSense, OpenBSD, ZFS, m0n0wall, BSDTalk

BSDSec
FreeBSD Security Advisory FreeBSD-SA-15:05.bind
FreeBSD Security Advisory FreeBSD-SA-15:04.igmp 

Releases

OPNsense version 15.1.6.1 Released 
OPNsense version 15.1.7 Released 

Change Log 15.1.6.1:
  • Don’t clobber user and group settings when running opnsense-update. Caused e.g. dhcpd to refuse operation.
  • Fix a regression that would prevent e.g. sshd from starting.
  • Install opnsense-update by default.

This is the official change log for 15.1.7:
  • Merged the latest FreeBSD 10.1-p6 patches:
      • —Fix integer overflow in IGMP protocol. (SA-15:04)
      —Fix vt(4) crash with improper ioctl parameters. (EN-15:01)
      —Updated base system OpenSSL to 1.0.1l. (EN-15:02)
      —Fix freebsd-update libraries update ordering issue. (EN-15:03)
  • Disabled OpenSSH’s High Performance SSH/SCP and None-Cipher extensions to follow up on several security-related discussions.
  • Switched from a heavy Bind installation to a lightweight one to reduce attack surface.
  • Removed and replaced the legacy `check_reload_status’ daemon with a Python-based rewrite.
  • Fixed the auto-login console lockout regression introduced in 15.1.6.1.
  • Fixed a problem associated with OpenVPN not being able to read passwords from files.
  • Notable ports upgrades: bind-tools 9.10.2, strongswan 5.2.2_1, curl 7.41 plus our LibreSSL fixes for mpd4/mpd5/libpdel.
  • Removed PHP-FPM remnants from IPv6 and OpenVPN scripts.
  • Fixed several OpenSSL invokes to use the latest port version as opposed to the base version.
  • Improved memory/disc/swap usage on the dashboard.
  • Properly set DNS Resolver Advanced defaults.
  • Fixed append of custom Unbound scrips.
  • Modified the root menu shell to pass through to a real shell when arguments are given.
  • Zapped the spurious “Array” prefix in user-defined aliases.
  • Moved the bogons files fetch location to a local mirror.
  • The core.git development boot hook has been improved to properly include /usr/local/etc/rc changes.
  • All of our packages are now annotated as coming from our mirror as well as additional safeguards potentially allowing you to use additional FreeBSD packages on top of OPNsense.




Other news 

Final message - mailing list and forum frozen

As announced earlier, the m0n0wall mailing list and forum are now frozen. This is the final message, and I would like to take the opportunity to thank all those who have sent me emails with kind words and expressions of gratitude. They were too numerous for me to reply to individually, but they were all very much appreciated!
There have been some questions on what the way forward is for current m0n0wall users. If you are happy with the current feature set of m0n0wall and just need a security patch, bug fix, hardware compatibility update or minor improvement now and then, there are two nascent projects started by former m0n0wall developers/users that may have something for you: SmallWall and t1n1wall.
For a more feature-rich alternative that is still based on FreeBSD and has the same roots, both pfSense and OPNsense (which is a fork of the former) are excellent choices. They have higher hardware requirements than m0n0wall, but on the other hand, a lot of new embedded hardware has recently become available, with 2 GB or more of memory and 1 GHz or faster CPUs, at a similar price as earlier platforms. It makes sense (pun intended) to use these additional resources - something that m0n0wall hasn't been particularly good at in recent times. Just keep that in mind for your next hardware upgrade.
 

DragonFly GUI resurrected 

Michael Neumann has switched out pkgsrc packages for dpkg packages for building DragonFly with a GUI.  There’s no built image to download right now, but I’m optimistic the next release will have it.  You can build it now on a DragonFly system using src/nrelease.  With all this video work going in lately, it will give us something to show.

OpenBSD Foundation 2014/2015 News & Fundraising

Ken Westerback (krw@) wrote in on behalf of the OpenBSD Foundation to let us know what happened last year, and what's in store for us now:
2014 was the most successful year to date for the OpenBSD Foundation. Both in the amount of money we raised and in the support we provided for the OpenBSD and related projects. We are extremely grateful for the support shown by our contributers large and small.
A detailed summary of the Foundation's activities in 2014 can be seen at
http://www.openbsdfoundation.org/activities.html
But here are some highpoints.
Read more...

From the Foundation (Part 2) | BSD Now 78 

This week we continue our two-part series on the activities of various BSD foundations. Ken Westerback joins us today to talk all about the OpenBSD foundation and what it is they do. We've also got answers to your emails and all the latest news, on BSD Now - the place to B.. SD.


bsdtalk251 - Verisign and FreeBSD: Internet Scale Services at 10 Gigabits per Server presented by Mike Bentkofsky, Marc de la Gueronniere, Julien Charbon 

 A talk from vBSDCon in 2013 titled Verisign and FreeBSD: Internet Scale Services at 10 Gigabits per Server presented by Mike Bentkofsky, Marc de la Gueronniere, Julien Charbon

File info: 47Min, 22MB

Ogg link: https://archive.org/download/bsdtalk251/bsdtalk251.ogg


Code stuff
Radeon updates, too 
Did you upgrade DragonFly on the 25th? 
 In Other BSDs for 2015/02/28 

Interesting articles
SCALE 13x Trip Report: Michael Dexter 
SCALE 2015 Recap 
Further (a roadmap for pfSense)   
FreeBSD From the Trenches: ZFS, and How to Make a Foot Cannon 

Wallpaper of the week

as fount at http://technology.desktopnexus.com/wallpaper/845709/


Read More»
Subscribe to: Posts ( Atom )