Home Wallpaper
Showing posts with label Wallpaper. Show all posts
Showing posts with label Wallpaper. Show all posts

BSD News 27/11/2017

Add Comment

Last week in BSD

Releases: OPNsense, pfSense
News: BSDSec, DragonFly BSD, BSDnow, OpenBSD, Lumina Desktop, BSD Router, p2k17, Wallpaper

BSDSec

FreeBSD Security Advisory FreeBSD-SA-17:08.ptrace [REVISED]
FreeBSD Security Advisory FreeBSD-SA-17:10.kldstat [REVISED]
[Security-announce] pfSense-SA-17_09.webgui
[Security-announce] pfSense-SA-17_08.webgui
[Security-announce] [UPDATED] pfSense-SA-17_07.packages

Releases

OPNsense 17.7.8 released

A shiny new update is available, addressing the recent security advisories from FreeBSD, OpenSSL, Sudo and a number of minor bugs.
To all our 18.1-BETA testers we say this: thank you! The results have been thoroughly positive. If you would like to participate as well, please take a closer look:
https://forum.opnsense.org/index.php?topic=6257.0

pfSense 2.4.2-RELEASE now available

pfSense software version 2.4.2 is a maintenance release bringing security patches and stability fixes for issues present in previous pfSense 2.4.x branch releases.

News

Remember: don’t kldload i915 too soon

I just wasted an hour trying to figure out why xorg had strange output but no errors on this laptop, and it’s because I had i915_load=”YES” in /boot/loader.conf instead of i915_load=”YES” in /etc/rc.conf.  I’m almost nearly sure I’ve mentioned that before, but if not: here you go.
(though if you never plan to run X, you can put it in loader.conf and everything will just work.)

BSD in Taiwan | BSD Now 221


Allan reports on his trip to BSD Taiwan, new versions of Lumina and GhostBSD are here, a bunch of OpenBSD p2k17 hackathon reports & more!

Pre-DragonFly 4.4 users, take note

If you happen to be running an old version of DragonFly, you may need to do an intermediate upgrade to move to releases after 5.0.  This is in part because of commits to support C++14.  This only applies to version of DragonFly before 4.4.

Code stuff

The strongest KASLR, ever? (latest developments in the Kernel ASLR district)
Lumina Version 1.4.0 Released
Areca update: arcmsr(4)
In Other BSDs for 2017/11/25

Interesting articles

DragonFly: Locking microtests
How to build a BSDRP router lab - [Virtualbox]
Digging into /usr/share/examples

p2k17 Hackathon

OpenBSD is holding hackathons as an attempt to get new changes into the source tree quickly. Here are some reports from the latest:
Reflections on Hackathons
p2k17 Hackathon report: Antoine Jacoutot on ports+packages progress

Wallpaper of the week



Read More»

BSD News 15/08/2016

BSD News 15/08/2016
Add Comment

Last week in BSD

Releases: GhostBSD
Other news: OPNsense, HardenedBSD, OpenBSD, Linux, BSDnow, n2k16, Wallpaper, DragonFlyBSD

BSDSec



Releases

GhostBSD 10.3 RC1 is ready for testing

This first RC release is ready for testing new feature in GhostBSD 10.3, MATE and XFCE is available on SourceForge for the i386, amd64, and amd64-uefi architectures.
Language Undefined

News

New Core Team Member

The OPNsense project is growing rapidly and it’s with great pleasure that the OPNsense core team may announce that our team will be strengthened with Shawn Webb. Shawn has already  been doing lots of great work and his formal membership is seen as a logical step forward by all of us.
Shawn Webb Over the past year, I have had the wonderful experience of working with the OPNsense core team in porting over HardenedBSD’s robust ASLR
implementation. It is with pleasure and humility that I have accepted their invitation to join the core team. My overarching goal will be to port the main features of HardenedBSD to OPNsense.
Address Space Layout Randomization, or ASLR for short, is an exploit mitigation technology that aims to make certain kinds of vulnerabilities
harder to successfully exploit. In order to fully apply ASLR, applications must be compiled as a Position-Independent Executable (PIE). In the short term, my next goal is to enable PIE fully across OPNsense’s ports tree. I’m using HardenedBSD’s ports tree and package building infrastructure as a test bed prior to importing into OPNsense.
OPNsense is investigating migrating to 11.0-RELEASE for its 17.1 release. The Virtual Memory (VM) subsystem has changed drastically between FreeBSD 10 and FreeBSD 11. Since ASLR deals with the VM subsystem, extreme care must be taken in the update of the codebase from FreeBSD 10.3 to 11.0. I will assist in those efforts by freshly porting over the ASLR implementation from HardenedBSD 11.0 to OPNsense’s FreeBSD 11.0 codebase.
I look forward to being a part of the OPNsense core team. The coordination between HardenedBSD and OPNsense will bring a more solid
foundation on which home users and enterprises alike can build secure and scalable networks.

OpenBSD tmpfs on its last legs

As a result of apparent lack of maintenance, Theo de Raadt has disabled tmpfs.

CVSROOT: /cvs
Module name: src
Changes by: deraadt@cvs.openbsd.org 2016/07/25 13:52:56

Modified files:
 sys/conf       : GENERIC 

Log message:
disable tmpfs because it receives zero maintainance.

You probably didn’t use this anyway

The last bits of Linux emulation have been removed from DragonFly.  It’s 32-bit, so it’s been unsupported since DragonFly went to 64-bit only with the 4.0 release.  Also, some other 32-bit only items are gone, including the cs, ep, ex, fe, and vx network drivers.  It’s almost impossible that anyone was using it, but it’s notable because that’s some… 15-20k lines of code gone?  Removal of unused code is also positive.

Myths, Pi's & Features, oh my! | BSD Now 154

This week on BSDNow, we are taking a look at a few different tutorials, including running your very own RPi web-server. (Come-on, you know you’ve thought of it). Plus we have a GhostBSD tutorial, a look at a GitHub project to run Steam Linux on FreeBSD 11 & more!
You’ll want to stick-around for your place to B...SD!
View attached file (321 MB, video/mp4)


Code stuff


Interesting articles


Read More»

BSD News 18/04/2016

Add Comment

Last week in BSD

Releases: pfSense, OPNsense
Other news: BSDSec, HardenedBSD, freeNAS, xhyve, FreeBSD


BSDSec

 

Releases

pfSense 2.3-RELEASE

The most significant changes in this release are a rewrite of the webGUI utilizing Bootstrap, and the underlying system, including the base system and kernel, being converted entirely to FreeBSD pkg. The pkg conversion enables us to update pieces of the system individually going forward, rather than the monolithic updates of the past.  The webGUI rewrite brings a new responsive look and feel to pfSense requiring a minimum of resizing or scrolling on  a wide range of devices from desktop to mobile phones.
For the highlights, check out the Features and Highlights video. Past blog posts have covered some of the changes, such as the performance improvements from tryforward, and the webGUI update.
The full list of changes is on the 2.3 New Features and Changes page.
To get to a release, we’ve closed 760 total tickets.  While the majority of these were related to the Bootstrap conversion, 137 are fixed bugs impacting 2.2.6 and earlier releases.
Downloads for New Installs
Downloads to Upgrade Existing Systems – note it’s usually easier to just use the auto-update functionality, in which case you don’t need to download anything from here. Check the Firmware Updates page for details.

OPNsense 16.1.9 released

There is tremendous progress in the translations. It just so happens that we now have a comprehensive Russian translation as well which is going to be completed in the upcoming weeks. Many thanks to Smart-Soft Ltd. for making this happen. The contender is Japanese through the work of Chie Taguchi, who did most of the translation that we have had for a year. It is going to be a close race to the finish line for both languages. Then again, the whole translation team is doing an amazing job.
As polarising as it may be, we have added HTTPS support in the proxy server. Another noteworthy item is StrongSwan 5.4.0, which helps to address IPSec status page hangs that some have observed with complex setups. We are looking for feedback for these items, please do write in.

OPNsense 16.1.10 released

It has been a quite uneventful week. Suricata and Squid have been
upgraded to their latest versions and you can find their individual
change logs below. The next part of the Russian translation brings
it to number one with a dreamy 83% completed. Otherwise only small
fixes and improvements have been made and those will not even require
a reboot.

OPNsense 16.1.11 released

We are skipping a bit ahead with 16.1.11 to address a CSRF vulnerability, which shows us the good path we have been on since we started[1] and we will surely continue this security-aware trend.
In other news, this update includes native GeoIP alias support, captive portal voucher customisations requested by many and the last batch of Russian, effectively bringing it to 100% completed.


News

Introducing Full PIE Support

We at HardenedBSD have added support in 11-CURRENT for compiling nearly all of base as Position-Independent Executables (PIEs, for short). This work bumps hardening.version to 45. We've enabled PIE base for amd64 and i386 and hope to enable it for arm64 before or during BSDCan 2016. Compiling an application as a PIE enables it to take full advantage of ASLR. Without PIE support, the application itself is loaded at a fixed address, determined at compile time. As of this writing, only nine applications are not compiled as PIEs. At least two of them must stay that way (/sbin/init and /sbin/init.bak), so that leaves the outstanding list at seven. This is a huge leap forward for HardenedBSD. We have tested PIE base on several amd64 systems, both virtualized and bare metal. We have done multiple amd64 package builds with success. We would like to thank Bryan Drewery for his help.
An hbsd-update(8) update archive has been published for 11-CURRENT/amd64 with the "PIEified" base. Update at your leisure.
PIE base is enabled by default for amd64 and i386. We hope to enable it for ARM64 before or during BSDCan. Speaking of ARM64, we will be bringing ten Raspberry Pi 3 devices (which are ARM64) with us to BSDCan, eight of which will be given out to lucky individuals. We want the BSD community to hack on them and get ARM64/Aarch64 fully functional on them.

FreeNAS Mini XL | BSD Now 137

This week on BSD Now, I’m out of town for the week, but we have a special unboxing video to share with you that you won’t want to miss. That, plus the latest BSD news, is coming your way right now!
View attached file (257 MB, video/mp4)


Code stuff


Interesting articles


Wallpaper of the week 


 from http://freebsdwallpapers.blogspot.cz/
Read More»

BSD News 11/04/2016

BSD News 11/04/2016
Add Comment

Last week in BSD

Releases: FuguIta, SoloBSD, HardenedBSD,
Other news:BSDnow, Hammer, FreeBSD, Wallpaper,DragonFly BSD,

BSDSec

seems to be none warnings

Releases 

FuguIta LiveCD/5.9 

FuguIta-5.9-201604012simple
Based on OpenBSD 5.9
Just only OpenBSD installed.
FuguIta-5.9-20104041shrinked
Removed stuffs which are not necessary for LiveCD.

HardenedBSD-stable 11-CURRENT v44

HardenedBSD-11-CURRENT-v44 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
 

HardenedBSD-stable 10-STABLE v44.1

HardenedBSD-10-STABLE-v44.1 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

SoloBSD 10.3-STABLE-v44.1

There is a new build of SoloBSD 10.3-STABLE based on the latest HardenedBSD stable branch version 44.1
You can grab it from Here. (45.8 Mb)
root password: solobsd 
 

News

Call For Papers for EuroBSDCon 2016 in Belgrade, Serbia is out! 

On behalf of the EuroBSDCon 2016 Program Committee, here is the Call for Papersfor the EuroBSDCon 2016 conference which will take place in Bergrade, Serbiabetween 22-25 September 2016.
https://2016.eurobsdcon.org/call-for-papers/  closing date for the CfP is May, 8th. 

This is GNN | BSD Now 136

This week on the show, we will be interviewing GNN of the FreeBSD project to talk about the new TeachBSD initiative. That plus the latest BSD headlines, all coming your way right now!
View attached file (618 MB, video/mp4)

Code stuff

Hammer and FreeBSD

Tomohiro Kusumi would like to port Hammer (1) to FreeBSD, as noted in this bug discussion.  It’s not even begun to happen, but if you can contribute, please do.


Read More»

BSD News 07/03/2016

BSD News 07/03/2016
Add Comment

Last week in BSD

Releases:SoloBSD, OPNsense, HardenedBSD
Other news:FreeBSD, LibreSSL, OpenBSD, pkgsrc, NetBSD, BSDnow, MirOS, Wallpaper


BSDSec

none warnings


Releases

RELEASE: SoloBSD 10.3-BETA3-v41

RELEASE: SoloBSD 10.3-BETA3-v41.1

There is a new build of SoloBSD 10.3-BETA3 based on the latest HardenedBSD stable branch version 41.1
You can grab it from Here. (42.2 Mb)
root password: solobsd


New stable version: HardenedBSD-stable HardenedBSD-10-STABLE-v41.1

New stable release: HardenedBSD-stable 11-CURRENT v42

HardenedBSD-11-CURRENT-v42 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...

OPNsense 16.1.5 released

full patch notes:
  • ports: squid 3.5.15[1], unbound 1.5.7 hotfix[2], pkg 1.6.4 hotfix[3], openssl 1.0.2g[4]
  • services: infrastructure rework for plugin additions
  • openvpn: added copy/move to client-specific overrides
  • openvpn: allow binding client-specific overrides to specific server(s)
  • openvpn: service on/off toggle via overview pages
  • openvpn: fix problem with service status display
  • openvpn: when services are disabled, make sure a reconfigure will always stop the associated process
  • vpn: transform PPTP, L2TP and PPPoE servers to plugin addition to be removed from base install for 16.7
  • vpn: add proper service probing for PPTP, L2TP and PPPoE servers
  • interfaces: added RFC 4638 support (MTU > 1492 in PPPoE)
  • ntp: disable when no servers are set
  • language: updates for Chinese, French and German
—
[1] http://ftp.meisei-u.ac.jp/mirror/squid/squid-3.5.15-RELEASENOTES.html
[2] https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=729
[3] https://github.com/freebsd/pkg/issues/1394
[4] https://www.openssl.org/news/secadv/20160301.txt

News

FreeBSD Project to participate in Google Summer of Code 2016

The FreeBSD Project is pleased to announce its participation in Google's 2016 Summer of Code program, which funds summer students to participate in open source projects. This will be the FreeBSD Project's twelfth year in the program, having mentored over 180 successful students through summer-long coding projects between 2005 and 2015.

Past successful projects have included improvements to Linux ABI emulation, NFSv4 ACLs, TCP regression testing, FUSE file system support, and countless other projects. Many students go on to become FreeBSD developers, as well as participating in FreeBSD developer events around the world through continuing support from the FreeBSD Foundation.

Prospective participants are invited to apply; more information is available, including proposal and deadline information, on the FreeBSD Summer Projects page.


LibreSSL not affected by DROWN attack

As noted by Bernard Spil, the OpenSSL bugs disclosed on 2016-03-01 have very little impact on LibreSSL, especially on OpenBSD. However, we will briefly mention the two high-profile issues:



  • LibreSSL (on any platform) is not affected by DROWN. Support for SSLv2 was flensed out quite a while ago.
  • Cachebleed is local-only, and requires a lot effort to get. This is thought to be very difficult to exploit on OpenBSD due to many of the normal mitigations on an OpenBSD system. Other systems without such mitigations may not be so lucky. Edit: Update from Bob Beck (beck@):

    •  

    OpenBSD 5.9 network improvements

    There are no doubt many eyes on OpenBSD's continuing network SMP renovation. Hrvoje Popovski writes in to tell us about some performance testing he's been doing:
    My name is Hrvoje Popovski, I'm a husband, a father of 3 little kids and network engineer at University of Zagreb University Computing Centre – SRCE. Somewhere around the beginning of 2015, I got one server to play with that luckily had four em(4) (Intel I350) and two ix(4) (Intel 82599) onboard NICs. Around that time, developers started to throw out some interesting MP diffs, and I couldn't resist trying them. So I started to beg my boss and people around me to buy or lend me some PCs or servers to generate traffic with the MP diffs. I don't know how, but two Dell servers came to my lab...
    Read more...

    Stable pkgsrc-2015Q4 branch released

    The pkgsrc developers are proud to announce the pkgsrc-2015Q3 branch. There are 16846 possible packages in pkgsrc-2015Q4, up from 16764 last quarter. Notable new packages this quarter include kodi (home media center software previously known as xbmc), php-baikal (a CardDAV/CalDAV server), freecol (a Colonization clone), unicorn (a CPU emulator framework), and clang-static-analyzer.

    BSD Behind The Chalkboard | BSD Now 131

    This week on the show, we have an interview with Jamie McParland of the Newburg public school district in Oregon. We are going to get an inside look at how they use BSD in various aspects operations across their network, as well as bringing you the latest news and questions. Keep it tuned to BSDNow, the place to B...SD!
    View attached file (652 MB, video/mp4)

    Pre-orders for 5.9 are up!

    OpenBSD 5.9 is shaping up to be quite a big release, and pre-orders for the CD sets have just been activated. Read more...


    Code stuff



    Interesting articles

    LibreSSL in HardenedBSD base Part I
    LibreSSL in HardenedBSD base Part II

    Wallpaper of the week 


    https://hdwallpapers.press/openbsd_technology_unix_hd-wallpaper-8277/
    Read More»

    BSD News 08/02/2016

    BSD News 08/02/2016
    Add Comment

    Last week in BSD

    Releases:AsiaBSDCon, FreeBSD, BSDnow, OPNsense, DragonFly BSD, LibertyBSD, Wallpaper
    Other news: HardenedBSD, OPNsense


    BSDSec


    Releases 

    New stable release: HardenedBSD-stable 10-STABLE v40.2

    HardenedBSD-10-STABLE-v40.2 - https://github.com/HardenedBSD/hardenedBSD-stable/releases/tag/HardenedB...
    ----------------------------------------
    [freebsd] 10.3-BETA1
    [freebsd] The zfsboot (zfs auto mode) part of bsdinstall now supports UEFI
    [freebsd] bhyve windows support

    OPNsense 16.1.1 released

    OPNsense 16.1.2 released

    Without fuzz, here are the full patch notes:
    o ports: libressl 2.2.6[1], openssl 1.0.2f[2]
    o intrusion prevention: add SSL fingerprint blacklist and other abuse lists (courtesy of abuse.ch[3])
    o captive portal: limit the max vouchers per call
    o captive portal: change voucher download filename to match group name
    o captive portal: strip bad characters from group name
    o captive portal: fix multiple voucher generation
    o firewall: add rule categorisation tag field
    o search: tweak padding to align with right visual boarder
    o console: fix halt script to show product name again
    o firmware: revoked the old 15.7 update fingerprint
    o interfaces: fix VLAN edit page to show the correct page name
    o squid: fix authentication script permission regression
    o dashboard: remove non-authoriative hardware crypto probing
    o system: do not accept an authentication server with an empty name
    o system: added hint that device polling setting needs reboot (contributed by Olivier Paroz)
    o system: assorted translation fixes (contributed by Fabian Franz)
    o logging: unhide IGMP packets from firewall log view (contributed by Isaac Levy)

    [1] http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.6-relnotes.txt
    [2] https://www.openssl.org/news/secadv/20160128.txt
    [3] https://www.abuse.ch/

    o src: OpenSSL SSLv2 ciphersuite downgrade vulnerability[1]
    o src: Fix packet forwarding in Hyper-V netvsc driver[2]
    o src: Honour disabled pf(4) log flag on dropped packets with IP options[3]
    o ports: curl 7.47.0[4], nettle 3.2[5]
    o wizard: fix certificate generation for OpenVPN
    o firewall: fix interface selection on post issues in floating rules
    o firewall: make category filter multi-select for maximum convenience
    o firewall: do not hide gateways from the gateway selection
    o firewall: added null routes to the gateway selection
    o firewall: rather than hiding associated nat rules, remove their edit and clone buttons so they can still be deleted manually
    o dns resolver: fix $numprocs setting in config according to manual
    o dns resolver: do not render illegal output for empty IPv6 addresses
    o dhcp: applying static mappings with DNS resolver enabled no longer seems stuck in apply step
    o search: resize box on focus and also propagate proxy server tabs
    o system: fix inversion bug of the default pass logging setting
    o captive portal: properly log messages to associated log file
    o intrusion detection: can now add user rules based on SSL fingerprints and IP geolocation
    [1] https://www.freebsd.org/security/advisories/FreeBSD-SA-16:11.openssl.asc
    [2] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203630
    [3] https://reviews.freebsd.org/D3222
    [4] https://curl.haxx.se/changes.html
    [5] https://fossies.org/diffs/nettle/3.1.1_vs_3.2/ChangeLog-diff.html

    News

    AsiaBSDCon 2016 registration open

    AsiaBSDCon 2016 is happening in Tokyo, March 10-13.  Registration for it opens today.  The registration page isn’t up as I post this, but I assume very soon.  (via)

    Initial FreeBSD RISC-V Architecture Port Committed

    Ruslan Bukin, a research engineer at the University of Cambridge Computer Laboratory has committed kernel support for the FreeBSD RISC-V port to the  FreeBSD source tree. This is the latest in a series of commits including user space support, making his work at the University of Cambridge more accessible to the broader open-source hardware and software communities. RISC-V is an exciting new open-source Instruction-Set Architecture (ISA) developed at the University of California at Berkeley, which is seeing increasing interest in the embedded systems and hardware-software research communities. Ruslan’s work at Cambridge allows FreeBSD to boot on Berkeley’s Spike simulator, and makes the FreeBSD Project the first operating-system vendor to include formal, in-tree support the RISC-V architecture. Ruslan has recently given a talk on the FreeBSD port at the RISC-V workshop in the San Francisco Bay Area, and his work was highlighted in EE Times in January 2016.

    The current FreeBSD RISC-V port is able to boot to multi-user mode on Spike, and allows a range of userspace commands and services such as SSH, mail delivery, and a user shell to run reliably. His next steps are to add multicore support to the port, and bring up FreeBSD on early hardware platforms becoming available for RISC-V, such as as FPGA simulations of the Cambridge’s open-source LowRISC System-on-Chip. FreeBSD ports and packages will appear over coming days allowing others in the community to reproduce the work, and making it easy for developers interested in contributing to the project to join the effort.

    Ruslan’s work has been supported by the UK Higher Education Innovation Fund (HEIF5) and DARPA CTSRD project at the University of Cambridge, with participation in the RISC-V workshop supported by the FreeBSD Foundation. Other contributors to the FreeBSD RISC-V porting effort include Ed Maste (FreeBSD Foundation), Arun Thomas (BAE Systems), Andrew Turner (ABT Systems Ltd.), and Robert Watson (University of Cambridge). 
     

    DNS, Black Holes & Willem | BSD Now 127

    Today on the show, we welcome Allan back from FOSSDEM & enjoy an interview with Willem about DNS and MTU Black Holes. That plus all the weeks news, keep it turned here to BSD Now, the place to B...SD!
    View attached file (835 MB, video/mp4)
     

    LibertyBSD

    A "deblobbed" version of OpenBSD. So that you can get all of the benefits of OpenBSD, while being sure that there are no non-free blobs lurking in the depths of your system.

    Slim for BSD

    A modified version of SLiM for BSD systems.
     

    Code stuff


    Interesting articles



    Wallpaper of the week 


    Read More»

    BSD News 18/01/2016

    BSD News 18/01/2016
    Add Comment

    Last week in BSD

    Releases:OPNsense, MidnightBSD
    Other news: OPNsense, FreeBSD, DragonFly BSD, DiscoverBSD, Talks, BSDSec, BSDNow, Wallpaper

    BSDSec

     

    Releases 


    OPNsense 15.7.24 Released

    Most notably, the firewall pages received a lot of subtle tweaks to improve user experience. Secondly, the firmware pages gained the plugins management feature. And last but not least, the kernel and base upgrade gained better signature support[1] that ties right into FreeBSD’s pkg verification mechanism, how cool is that!


    News 


    [OS X] Unleash your inner console cowboy

    2 weeks has passed since the first video on DiscoverBSD talks, so it's about time for the new one.

    Last time we were watching Early days of Unix and design of sh presented by Stephen R. Bourne at BSDCan 2015 so when I found presentation called Unleash your inner console cowboy, I was quite happy that we can continue in similar topic.

    So second video of 2016 is:
    Unleash your inner console cowboy presented by Kenneth Geisshirt at Øredev 2015
    This talk will go through how to use the command-line/terminal/shell efficiently (key bindings, pipes, redirection, etc.), and general patterns and pitfall in shell scripting will be discussed (checking if a file exists, looping, etc.). To feel the real power of OS X, knowing how to write shell scripts is essential.
    I hope that you will join me in discussion.


    Get your engine(x) started! | BSD Now 124

    This week on the show, we have a very full news roster to rundown, plus an oldie, but goodie with Igor of the nginx project. That plus all your questions and feedback, keep it tuned to BSDNow, the place to B...SD.
    View attached file (486 MB, video/mp4)
     

    OpenSSH: client bugs CVE-2016-0777 and CVE-2016-0778

    This is the most serious bug you'll hear about this week: the issues identified and fixed in OpenSSH are dubbed CVE-2016-0777 and CVE-2016-0778. An early heads up came from Theo de Raadt in this mailing list posting.
    Until you are able to patch affected systems, the recommended workaround is to use 
    # echo -e 'Host *\nUseRoaming no' >> /etc/ssh/ssh_config
    That is, add the option UseRoaming no to your /etc/ssh/ssh_config (or your user's ~/.ssh/config) file, or start your ssh client with -oUseRoaming=no included on the commandline.
    We will be updating this article with more information as it becomes available. Read more...


    Code stuff 


    Xen Support Enabled in OpenBSD -current

    Interesting articles


    Wallpaper of the week 

     
    from http://technology.desktopnexus.com/wallpaper/8275/
    Read More»

    BSD News 05/01/2016

    Add Comment

    Last week in BSD

    Releases: none
    Other news:FreshPorts, FreeBSD, DragonFly BSD, BSDnow, NetBSD, POSIX, MirOS, Wallpaper, DiscoverBSD


    News 

     

    Not all ports have packages

    Sir l33tname asked: @DLangille is it possible to show on freshports when there is no package for a port? — Sir l33tname (@l33tname) December 29, 2015 That’s a good question. It took some more questions on IRC for me to figure it out. Here is what I know. The port in question is net-p2p/btsync and [...]
     

    The BSD Black Box | BSD Now 122

    This week on the show, we will be interviewing Alex Rosenberg to discuss his work on LLVM/Clang & his work with BSD at a large console gaming company. (Hint, it wasn’t Microsoft). All this, and the latest BSD news coming your way right now!
    View attached file (926 MB, video/mp4)
     

    Introducing HardenedBSD's New Binary Updater

    One feature our users have been asking us ever since we officially launched over a year ago was to provide binary updates for base and kernel. We are excited to announce that we are launching the framework for binary updates today! We still need to tie in the update build script to our continuous integration infrastructure. For now, updates for the hardened/current/master branch of the HardenedBSD repo will be done manually. When we create the next installers/distsets for the HardenedBSD-stable repo, we'll also support updates there. You will notice two new programs, /usr/sbin/hbsd-update and /usr/sbin/hbsd-update-build, which apply and build update packages, respectively. This work was sponsored by G2, Inc, who has an immediate need for binary updates.
    Please note that this feature is still experimental.
    Here's the design of the update mechanisms:
    Goals
    1. Provide binary updates for base and kernel
    2. Cryptographically sign binary updates
    3. Support mirrors and a massively scalable design
    4. Easy maintenance
    5. Supports jails
    6. Support ZFS BEs
     
      

    Stable pkgsrc-2015Q4 branch released

    The pkgsrc developers are proud to announce the pkgsrc-2015Q3 branch. There are 16846 possible packages in pkgsrc-2015Q4, up from 16764 last quarter. Notable new packages this quarter include kodi (home media center software previously known as xbmc), php-baikal (a CardDAV/CalDAV server), freecol (a Colonization clone), unicorn (a CPU emulator framework), and clang-static-analyzer.
    See the release announcement for more information.

    NetBSD New Developers

    The NetBSD project is pleased to welcome the following new developers:

    • Ritesh Agrawal (login: ragrawal), who will be working on networking.
    • Guilherme Salazar (login: salazar), who will be working on kernel.
     

    POSIX locales; POSIX shell and `…` command substitutions

    izabera did make a good point in IRC the other day for why we will need to have two locales at the very least in MirBSD – C and C.UTF-8 (the latter being widespread enough by now, thanks to me, interestingly enough. He uses code which leads to unexpected results…
     $ generate() { tr -dc "[:alnum:]" < /dev/urandom | dd bs="$len" count=1; }
 $ len=10; echo $(generate 2>/dev/null)
 Ut流54Ȫf
    … because tr(1) was the first utility I converted to Unicode, to explore possibilities and craft the OPTU encoding and, thus, “流” is, indeed, an alphanumeric character.
    This implies two things: we need to change MirBSD libc locale functions back to support two charsets (and make setlocale(3) match), and mksh(1) should implement locale tracking (to change set ±U whenever one of the relevant parameters (${LC_ALL:-${LC_CTYPE:-${LANG:-C}}}) changes in the session; users could still set utf8-mode manually though). For this to not break anything, we’ll have to audit scripts in MirBSD though (usually adding export LC_ALL=C at their begin is enough, and we need this for portable scripts anyway) and remove all occurrences of #ifndef __MirBSD__ before setlocale(3) calls in applications. This will take a while.
    Secondly, I opened an issue with POSIX about handling of the (deprecated, and for good reason) `-style command substitutions. The GNU autoconf texinfo manual gives good advice for portable shell scripts, and we all knew that foo="bar `echo \"baz\"`" wasn’t portable due to use of more than one set of double quotes, but my (and the yash authors’) reading of the standard (and mksh R52’s POSIX mode) make it set $foo to bar "baz" instead of the historic bar baz now, and I wish to get this clarified (and, possibly, the standard changed to match historic practice, as this breaks at least the Acrobat Reader 5 start script). Nothing has been decided yet (due to the holidays, I’m sure), but we got input from some other people involved in shell.
    So, if any #!/bin/sh scripts break or behave weirdly with R52, you now know why. I’m waiting for an official statement.
     
     

    Early days of Unix and design of sh

    Abstract for talk:
    • my history and background
    • how and why we had to re write the shell
    • why I wrote my own memory management
    • key language design decisions
    • where those ideas came from
    • what was hard to get right
    • system changes we made to accommodate sh
    • what the rules were in UNIX group
    • what would I do differently today

     

    Code stuff 


    Interesting articles

    The Most Popular BSD Stories Of 2015

    Wallpaper of the week 

     
     from http://hdw.eweb4.com/out/318823.html
    Read More»

    BSD News 16/11/2015

    BSD News 16/11/2015
    Add Comment

    Last week in BSD

    Releases: OPNsense
    Other news: u2k15, BSDSec, OpenBSD, DragonFly BSD, clang, freeNAS, BSDnow, OPNsense,


    BSDSec


    Release

    OPNsense new images based on 15.7.18

    We’re releasing new images! It’s nothing special as we recommend the weekly online updates, but in case you don’t want to go through the trouble of installing something older than it should be, the new 15.7.18 images are for you.
    People sometimes wonder why we don’t provide images all the time. The answer is it’s time consuming to test images and roll a release out amounting to about a full day of work given that everything works out and we don’t have to go through another rebuild cycle. We simply can’t do this for every week’s update without full test coverage. Then again, this idiosyncrasy directly translates to more code fixes, faster releases and quicker response time, something that we can all agree on, right?
    You can find the latest release announcement here:
    https://forum.opnsense.org/index.php?topic=1600.0
    The checksums are attached below and you can obtain the images from any of our mirrors listed here:
    https://opnsense.org/download/

    News

    Running with clang

    If you are using clang with DragonFly, and you want to always run the newest version, you can set options in compilers.conf, and use ‘clangnext‘.

    Controlling the Transmissions | BSD Now 115

    Allan is back from the latest FreeBSD Dev Summit & we’ll get to hear his recap of the event. We also have an interview with Hiren, who will be telling us about the ongoing work of improving the TCP stack in FreeBSD.
    View attached file (613 MB, video/mp4)


    Code stuff 



    Interesting articles


    Wallpaper of the week 

     
    rather small pic from http://www.nixp.ru/uploads/news/fullsize_image/e8f89019cdec08acabea619326761a759f11da8c.png
     
    Read More»

    BSD News 31/08/2015

    BSD News 31/08/2015
    Add Comment

    Last week in BSD

    Releases: OPNsense
    Other news:  OPNsense, LibreSSL, pfSense, OpenBSD, BSDnow, NextBSD, Wallpaper, NetBSD, DragonFly BSD


    BSDSec


    Releases

    OPNsense 15.7.10 Released

    Here are the full patch notes:
    • src: Multiple integer overflows in expat (libbsdxml) XML parser [1]
    • src: bumped tzdata to 2015f [2]
    • ports: curl 7.44.0 [3], ca_root_nss 3.20, openssh-portable 7.1p1_1 [4], sqlite3 3.8.11.1 [5], phalcon 2.0.7 [6], pcre 8.37_4 [7]
    • crash reporter: create custom reports on demand
    • certificates: ca generation issues with recent LibreSSL
    • dns resolver: switched to ports-based Unbound (1.5.4) as per FreeBSD handbook
    • menu: moved the crash reporter to system category for visibility
    • menu: added hot-plugging support for upcoming plugins
    • acl: added hot-plugging support for upcoming plugins
    • ipsec: fix faulty behaviour on configuration changes
    • console: switched halt and reboot numbering
    • languages: bring German to 51% completed
    • graphs: remove obsolete CPU graph pages 

    OPNsense 15.7.11 Released

    Here are the full patch notes:
    • dns resolver: switch unbound to use libevent to address “too many fds” log message
    • firmware: os-update package was renamed to opnsense-update so “os-“ can be our plugin prefix
    • firewall: fix alias page not being available due to a dirty config.xml sample entry
    • ipsec: fix pages throwing warnings due to a dirty config.xml sample entry
    • ipsec: fix hash algorithm and protocol settings behaviour
    • openvpn: honour TLS authentication disable
    • themes: fix theme selection fallback not working in new components
    • diagnostics: unhide routing table header

    News

    pfsense-tools is gone again, this time forever

    As some have noticed, we’ve changed the build system for pfSense such that the very need for the pfsense-tools repo has been removed.
    While the pfsense-tools repo still exists, it’s not used for pfSense version 2.3 and later.
    The former structure, where a set of discrete patches were kept against a given version of the FreeBSD source and ports trees, has now been replaced by a system where those patches are kept on a vendor branch of these trees.  This improves both the process of bringing new versions of FreeBSD and ports to pfSense and the process of upstreaming changes we make to these.  By upstreaming, we make both FreeBSD and pfSense better.
    These changes have been a long-time coming.  There has been sustained effort toward this type of setup since September 2012.
    There are still many parts of the build scripts that need to change, and we will continue to improve these, along with the rest of pfSense software.  As one example of where we’re headed, after base-as-pkg is done in FreeBSD 11, with only a few more changes on our tree, we should be able to build pfSense using only the build tools from FreeBSD.

    OpenBSD 5.8, Another Song

    The second of an anticipated four songs for the OpenBSD 5.8 release has ben published, this one written and performed by Alexandre Ratchov (ratchov@). In the announcement he says:
    For the 20th anniversary release of OpenBSD, I have contributed this
    short sound track:

    http://www.openbsd.org/lyrics.html#58b
    Read more...

    Beverly Hills 25519 | BSD Now 104

    Coming up this week on the show, we'll be talking with Damien Miller of the OpenSSH team. We will be discussing some of the changes in their latest 7.0 release, including phasing out older crypto and changing one of the defaults that might surprise you.
    View attached file (520 MB, video/mp4)
     

    Call for Testing: Using tame() in userland

    Theo de Raadt (deraadt@) has just released a call for testing of an initial conversions of programs in OpenBSD base to use the tame(2) API: 
    This is for those of you interested in tame, and skilled enough to
play along.
    Read more... 
     

    Clarifying NextBSD's Near Term Expectations

    A dissatisfied discussion of the NextBSD talk being "just marketing" was brought to my attention recently. The gist of it is that the premature publicity resulting from Jordan's recent BAFUG talk has inadverently created expectations that we're not delivering on.
    What works (and does not) now:
    • The basic ecosystem of launchd, notifyd, asld, and libdispatch work.
    • These can be installed by cloning the NextBSD repo from github, building GENERIC or MACHTEST kernels, installing a new world on an existing 10.x or CURRENT system, and then following the instructions in the README.
    • Launchd will start the initial jobs that are part of the repo now.
    • At this moment the release ISO installer does not work due to an interaction between launchd and the environment created by make release for the installer.
    What will work in the very near future:
    • Somewhere between this weekend and mid-September we will have the installer working. This means that an existing FreeBSD install won't be necessary to try out NextBSD. This is obviously pretty rudimentary and even before the unanticipated wave of interest a source of displeasure for me. Under 'Milestones' I refer to this as Milestone 0.
    • The remaining issues currently fall in to Milestone 1 and I expect to have them addressed by the end of September. At that time the system should, in some sense, be complete with future work being to convert rc and to tie notifyd in to potential consumers.

    Code stuff



    Wallpaper of the week

    from http://wallpapers.mi9.com/wallpaper/openbsd-picture_36248/

    Read More»

    BSD News 24/08/2015

    Add Comment

    Last week in BSD

    Releases: SmallWall, NetBSD, OPNsense, PC-BSD
    Other news: BSDSec,RaspBSD, OpenBSD, BSDnow, HardenedBSD, Wallpaper

    BSDSec

     

    Releases

    SmallWall 1.8.4b9 beta release

    Just released a new beta with a MUCH newer version of SNMP. Now supports v2 and 64bit counters for network monitoring. Also may have fixed some memory and CPU monitoring bugs from a long way back. 

    NetBSD 7.0_RC3

    The full list of changes can be found near the bottom of http://ftp.NetBSD.org/pub/NetBSD/NetBSD-7.0_RC3/CHANGES-7.0
    Binaries of NetBSD 7.0_RC3 are available for download at:
    http://ftp.NetBSD.org/pub/NetBSD/NetBSD-7.0_RC3/
    Those who prefer to build from source can either use the netbsd-7-0-RC3 tag or follow the netbsd-7 branch.

    OPNsense 15.7.9 Released

    These are the full patch notes:
    • firmware: functional rework of update fetch and install, show reboot needed in alert box
    • interfaces: fixed spurious truncated interface names from showing up in the assignments
    • intrusion detection: improved rule select/deselect behaviour and alert querying
    • firewall/rules: fix missing apply button when another language is being used
    • crash reporter: multiple fixes, layout and submission improvements
    • firewall/logs: can now filter using IP version
    • firewall/nat: add anti-lockout rule for redirection
    • certificates: fix generation for LibreSSL flavour
    • openvpn: allow advanced settings for all server types
    • openvpn: reworked all configuration pages (especially client export)
    • ipsec: reworked all configuration pages

    PC-BSD 10.2-RELEASE Now Available

    • FreeBSD 10.2-RELEASE base system
    • Many bugfixes and enhancements to installer to dual-boot setups
    • New CD-sized network installation media, with Wifi Configuration via GUI
    • Switched to “iocage” for jail management backend
    • Disk Manager GUI now available via installer GUI
    • Bug-fixes and improvements to Life-Preserver replications
    • Improved localization options for login manager
    • Options to Enable / Disable SSHD or IPv6 at installation
    • New “Plugins” system for AppCafe, allowing download of pre-built jail environments
    • Improvements to look-n-feel of AppCafe for package management
    • Improved fonts and better support for 4K monitor setups
    • Enterprise package repo, which only has security updates, allowing users to run a server / desktop or jail with fairly consistent package versions.
    • Firefox 40.0_1,1
    • Chromium 44.0.2403.130
    • Thunderbird 38.1.0
    • Lumina 0.8.6
    • GNOME 3.16.2

    Other news

    Raspberry Pi gains new FreeBSD distribution

    Raspberry Pi owners can dig out their SD-card formatting tools of choice again, because a new version of FreeBSD has emerged for the machines,
    RaspBSD will work on the Pi models B and B+ and promises to run on more “soon”. The “more” looks like including the BeagleBone Black and the Banana Pi.
    FreeBSD has been available on the Pi for some time, as recorded in this post by the Pi foundation. This cut of the OS is the work of FreeBSD contributor and forum administrator Brad Davis, who says “The Goal of this project is to build images easily useable by anyone. Sometimes that means images preloaded with different packages to help new users get started.”
    “Initially they will start off pretty basic, but will expand in different directions to support different goals. Initial goals include Education and Entertainment. All of our images are built using publicly available tools and any enhancements will be pushed upstream.”
    If that sounds like you, raspbsd.org offers you the chance to download and play with the new OS.

    OpenBSD 5.8 Preorders Enabled, Release Song Published

    Two important events of the OpenBSD 5.8 release cycle happened today:
    • On the Orders page, pre-orders for the new release have been enabled
    • On the Lyrics page, the OpenBSD 5.8 release song has been published, with links to OGG and MP3 formats available.
    The release date is October 18th, to mark the 20th anniversary of creation the OpenBSD CVS tree, as Theo de Raadt (deraadt@) noted in the announcement:
    Read more...

    Ubuntu Slaughters Kittens | BSD Now 103

    Allan's away at BSDCam this week, but we've still got an exciting episode for you. We sat down with Bryan Cantrill, CTO of Joyent, to talk about a wide variety of topics: dtrace, ZFS, pkgsrc, containers & much more. This is easily our longest interview to date!
    View attached file (776 MB, video/mp4)
     

    Code stuff


    Interesting articles


    Wallpaper of the week


    Read More»

    BSD News 20/07/2015

    BSD News 20/07/2015
    Add Comment

    Last week in BSD

    Releases: DragonFly BSD, OPNsense, FreeBSD
    Other news: BSDnow, DragonFly BSD, Lumina Desktop, OpenBSD

    Releases

    DragonFly 4.2.3 released

    There was a newer release of OpenSSL (1.0.1p) last week, so there’s a new revision of the DragonFly release – 4.2.3.  There’s little major change other than the security fix for OpenSSL.
    Those readers who can count past 2 may notice that there wasn’t a 4.2.2.  We went straight from 4.2.1 to 4.2.3.   That’s my fault.  I screwed up tagging and Git doesn’t like repeated, deleted tags.

    OPNsense 15.7.3 Released

    The full list of changes are as follows:
    • php56 5.6.11 [1], pkg 1.5.5 [2], ca_root_nss 3.19.2, phalcon 2.0.5 [3], isc-dhcp42-server 4.2.8_1 [4]
    • backup: fix infinite reboot loop on interface mismatch
    • firmware: show locally installed packages
    • firmware: reboot dialog now responsively redirects when the system is back up
    • dashboard: upgrade link now directly launches into the firmware upgrade
    • dashboard: added a system log widget (contributed by Sascha Linke)
    • languages: merged German translation progress (contributed by Fabian Franz)
    • xmlrpc: fix sync of static routes
    • bogons: fix overwrite-on-upgrade bug

    FreeBSD 10.2-BETA2 Now Available

    The second BETA build of the 10.2-RELEASE cycle is now available.
    Installation images are available for the amd64, i386, ia64, powerpc, powerpc64, and sparc64 architectures.
    FreeBSD/arm SD card images are available for the BEAGLEBONE, CUBOX-HUMMINGBOARD, GUMSTIX, RPI-B, PANDABOARD, and WANDBOARD kernels.
    FreeBSD 10.2-BETA2 is also available on several third-party hosting providers.
    See the PGP-signed announcement email for installation image checksums and more information. 


    Other news

    Our Code is Your Code | BSD Now 98

    Coming up this time on the show, we’ll be talking with the CTO of Xinuos, David Meyer, about their adoption of FreeBSD. We also discuss the BSD license model for businesses & the benefits of contributing changes back. Watch it here.

    Code stuff



    Interesting articles



    Wallpaper of the week

    from http://www.pcbsd.org/en/artwork.html


    Read More»
    Subscribe to: Posts ( Atom )