OpenBSD is a BSD variant with a strong security and code correctness focus.

learn more… | top users | synonyms

11
votes
4answers
6k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...
10
votes
3answers
328 views

Unix on a DEC VAX?

I just picked up a DEC VaxStation 4000 model 90 with a built in CDROM and an auxiliary SCSI storage module with tape archive drive. I believe it is functional although I cannot test it yet since I ...
8
votes
2answers
424 views

USB audio only outputs white noise

I am running OpenBSD/i386 5.1 on a 5 year old laptop. The speakers and headphone port work, but the headphone port is a little loose so I am trying to install an external USB sound card (Fiio E17 USB ...
7
votes
2answers
4k views

Why is sudo telling me my password is wrong?

I recently installed OpenBSD 4.9 in my computer, so I could learn a little bit about Unix-like operating systems. I added a new user to the system called bruno. Ok. When I use the 'sudo' command, it ...
7
votes
1answer
203 views

How can I send power on/off signals to a VGA monitor?

I've used some old spare parts to make a sort-of kiosk for my kitchen. It's running OpenBSD and has a simple text based UI (no X Server). I plan to add an Arduino with a motion sensor that ...
7
votes
6answers
614 views

Can I use Unix to load-balance two Linux servers?

I'm trying to work out a solution in my head where two backend linux-servers run HTTP, SMTP, XMPP mirrored and should load balance connections between them. My current solution is an OpenBSD box ...
7
votes
1answer
3k views

Dropbox on OpenBSD

Has anyone had any success getting dropbox installed with dropboxd running properly on OpenBSD (FreeBSD would work for me too..)? I have built from source and everything installs just fine but when I ...
7
votes
1answer
160 views

How to use /etc/fbtab in OpenBSD to secure X11?

OpenBSD's man page afterboot(8) suggests: "You might wish to tighten up security more by editing /etc/fbtab as when installing X." How might one do this? What lines when added to /etc/fbtab would ...
6
votes
1answer
2k views

Google Chrome on OpenBSD

How can I install Google Chrome on OpenBSD?
6
votes
3answers
5k views

Prevent a USB external hard drive from sleeping

Does anyone know if there is an elegant way to tell an external usb drive not to spin down after a period of inactivity? I've seen cron based solutions that write a file every minute, but nothing ...
5
votes
5answers
1k views

Free/Open Source secure Skype alternative on Fedora & OpenBSD?

Criteria: Audio/video calls Encrypt the whole traffic [with a good encryption] ported to windows 7 too runs on Fedora, OpenBSD Does anybody know a good alternative?
5
votes
2answers
1k views

OpenBSD: 32 bit or 64 bit

I would like to use the 64 bit version of OpenBSD, but I'm not really sure how good it works. Are there any known problems? Is the 32 bit version more recommended for productive environment?
5
votes
2answers
143 views

Emacs on OpenBSD for DEC VAX?

I have managed to install OpenBSD 5.2 on my DEC VaxStation 4000 Model 90 but to my surprise have not found a binary for Emacs (any version) for the VAX architecture. As best as I can tell I do not see ...
5
votes
2answers
1k views

Adding Ctrl-L as “clear” hotkey in OpenBSD's ksh

I've been looking for a way to use Ctrl-L to clear the monitor instead of typing clear in each time. I found nothing except a patch which didn't work for me. How do I add hotkeys/shortcuts to my ...
5
votes
1answer
678 views

How to edit a .gpg file with vi?

So I created a gpg encrypted file with password: gpg -c passwords.txt.gpg how can I open it with vi, edit it, then close it? (So that no passwords.txt file will be created, the decrypted ...
5
votes
3answers
584 views

Why does time/ident/daytime/comsat run after an OpenBSD 5.2 install?

I installed an OpenBSD 5.2 using "-* & +etc* & +base* & +bsd". After finished with the install, I rebooted, then netstat -at | grep LISTEN, this is what I get for output: Why does so ...
5
votes
1answer
138 views

OpenBSD and limiting login to local only like in FreeBSD's login.access(5)

I am using OpenBSD as my desktop. I don't want to login to my machine remotely, and I don't want anyone else to login remotely. In FreeBSD there is a file called login.access(5) that can be used to ...
5
votes
1answer
257 views

Realtek audio issues on OpenBSD 5.2

I am running OpenBSD/amd64 5.2 stable on a new machine, using a gigabyte motherboard with a realtek alc898 audio chipset. When I try to play any audio (sources include mpd, aucat, and cat > ...
4
votes
2answers
272 views

What does “Do you expect to run the X Windows System?” do when installing OpenBSD?

When installing OpenBSD 5.1, I got the question: Do you expect to run the X Windows System? What change does the installer make to my system if I say "yes"? I know what X Windows is, but I don't ...
4
votes
2answers
3k views

How to permanently connect to WPA2AES wifi with OpenBSD (through cli)

I have an OpenBSD 5.1 i386 installed. I have no GUI/X. I googled for the answer but I can't find authentic one. How can I connect to a WPA2 PSK/AES wifi network using only the terminal? (so I don't ...
4
votes
3answers
940 views

How can I secure an OpenBSD-based Apache webserver?

I have an OpenBSD server that has a running webserver (the built-in apache web srv). How can I harden this setup? I want to only server static html files, no php, no sql.
4
votes
1answer
236 views

General questions about OpenBSD source code and release dates

Looking into doing analysis of the lifespan of a line of code, and via another question on stackexchange I was pointed to a research paper on OpenBSD that I've got a few questions about. That being: ...
4
votes
2answers
558 views

OpenBSD on a SDHC or an microSDHC card - tips

Any ideas for making an OpenBSD usable (how to turn off logs, "put os into memory"?) on a SDHC or an microSDHC card? Since full-disk encryption is not really a solution under OpenBSD so I though I ...
4
votes
2answers
212 views

Does OpenBSD have a limit to the number of file descriptors?

What's the maximum number of file descriptors that a process can get on OpenBSD successfully? For example, there is an openfiles limit in login.conf(5) in OpenBSD. If I want to have as many file ...
4
votes
2answers
242 views

Decrypting a file encrypted on a different system

My home server runs OpenBSD 5.3 with Samba serving files to several Windows machines. I wrote a script to backup video files by encrypting each file with openssl enc -aes-256-cbc and uploading it to ...
4
votes
2answers
1k views

OpenBSD performance tuning (desktop)

What are your ways of tuning a freshly installed OpenBSD operating system specifically for a desktop environment (faster UI interaction etc.)? What are the most important factors here to consider?
4
votes
2answers
740 views

Getting better resolution using X on OpenBSD w/VMWare Fusion

Just setup an OpenBSD 4.8 VM for VMWare Fusion. Can't seem to force X to any decent resolution. I attempted to try and use the VMWare tools for FreeBSD, but no dice. Any suggestions to try and get ...
4
votes
3answers
2k views

How do I send a shutdown event to a QEMU guest (OpenBSD)?

I'm using virtualisation solely to install OpenBSD onto the bare hardware, and during the installation, the redirection to the serial port didn't get configured, so, I ended up with the system ...
4
votes
2answers
379 views

How to mount an IronKey in OpenBSD?

Being that it's proprietary, maybe this isn't possible but I was wondering if anybody was successful at mounting one of these in OpenBSD. I mounted the two partitions the USB drive creates which are ...
4
votes
1answer
57 views

putting extra hops into traceroute6 on OpenBSD

I'm running OpenBSD, or maybe FreeBSD. I don't have lots of IPv4 addresses to waste, but who doesn't have a few billion of IPv6 ones? How do I add some extra IPv6 hops to a traceroute6, around pf(4) ...
4
votes
2answers
309 views

Does sysctl kern.bufcachepercent not work in OpenBSD 5.2 above 1.7GB?

I run OpenBSD/amd64 5.2 on a system with 12GB of RAM, and I want to use about 6GB to 8GB for filesystem caching. By default, 5.2 amd64 comes with sysctl kern.bufcachepercent set to 20 (20%); I've ...
4
votes
2answers
621 views

NAT and source IP filtering in PF, using OpenBSD >= 4.7

I just read a book about PF (The Book Of PF, No Starch), but there's one question not answered by it. If I have a gateway machine using two interfaces, $int_if and $ext_if, and I NAT the packages ...
3
votes
2answers
928 views

OpenBSD SMP support

The OpenBSD 4.9 release announcement says "SMP kernels can now boot on machines with up to 64 cores;" So OpenBSD does support several CPU's/cores? If i have a Core2Duo cpu in my laptop (t7100) ...
3
votes
2answers
2k views

Are there any virtualization solutions for OpenBSD that aren't from ports?

I'm searching for a virtualization solutions for an OpenBSD host and a CentOS guest. What are my options? I'm searching for one that doesn't use packages from ports. Are there any?
3
votes
3answers
536 views

Is this enough for a working mail server?

I have an internet connection with a public, static IPv4 address (the IP address has a PTR record for foo.org domain, and I own foo.org domain, and have nameservers for it elsewhere, mx record is set ...
3
votes
1answer
75 views

How can I capture an OpenBSD install console?

So.. How can I save the text that is based on Q/A's when installing an OpenBSD 5.3? Or I only have the choice to manually type the texts down? or an OCR software using printscreens?
3
votes
2answers
209 views

How to mount an OpenBSD hard disk image on Linux?

First, I'll start by explaining how I got my problem, this will help me get across what I need. A few months ago, my laptop hard disk broke. I had no quick replacement, but I needed that laptop the ...
3
votes
1answer
451 views

How to check downloaded package on OpenBSD 5.1?

Under linux there is a package called "ubuntu-keyring" - it's for checking that the downloaded packages (from the offical repositories) are the ones that are on the server. How can I do this under ...
3
votes
1answer
208 views

sandbox tcpdump under OpenBSD?

From FreeBSD 9.0 tcpdump is sandboxed with Capsicum. Are there any solutions for sandboxing tcpdump under OpenBSD? Just want to secure a running: tcpdump -w output.pcap because it can be only used ...
3
votes
1answer
271 views

Setting up the firewall for amule on OpenBSD 4.7 gateway

I'm trying to properly setup the firewall on my gateway (OpenBSD 4.7) using pf to allow amule (on 10.0.0.104) to operate properly as discussed here: Now I know pf has changed a bit from OpenBSD 4.7 ...
3
votes
1answer
2k views

How to change the USB keyboard layout in an OpenBSD console?

I may be abusing the word console but I mean the mode without X i.e. pressing ^+Alt F1 and then log as other user where I want to use my chosen layout with USB keyboard. X works, it configures the ...
3
votes
1answer
231 views

How to install OpenBSD/vax 4.7 on multiple disks?

I've got an old VAXstation 3100 Model 76, and I'd like to install OpenBSD/vax 4.7 on it. I've got two drives in it, an RZ23 (104MB) and a another 1.09GB. Now, since the 1.09GB is too large for an ...
3
votes
1answer
121 views

How to create a user with minimalistic permissions on OpenBSD?

I want to run the webbrowser (xxxterm) with a different user (XY) on an OpenBSD Desktop (different user from the one I use daily). I will reach the Browser with ssh -X in the local machine (or are ...
3
votes
1answer
280 views

Converting a line from a firewall on OpenBSD 4.9 to OpenBSD 4.7

What is the OpenBSD 4.7 equivalent of this line from OpenBSD 4.9 for use with pf? no nat on egress proto udp from 192.168.1.10 port 4672 to any
3
votes
1answer
165 views

How can I peek at the output of a running crontab task on OpenBSD?

I have an hourly hour-long crontab task running with some mtr (traceroute) output every 10 minutes (that is going to go for over an hour prior to it being emailed back to me), and I want to see the ...
2
votes
3answers
496 views

Why does a default Linux installation run more processes than a default OpenBSD installation?

If I ps -aux on Ubuntu (or any GNU/Linux distribution) without GUI I see ~100 processes running. If I ps -aux on OpenBSD without GUI, then I get ~10 processes. What is the explanation/reason for ...
2
votes
2answers
757 views

Virtualization solutions under OpenBSD

I use "OpenBSD as my Desktop OS". What are my choices to run a Linux Distribution, or a Windows (XP/7) in a Virtual Machine? I know that the following apps are not available for OBSD: VirtualBox ...
2
votes
4answers
636 views

How to guarantee the integrity of an OS?

In information security, integrity means that data cannot be modified undetectably. This answer raised my interest, of course, I want to guarantee the integrity of my OS, outlined here. ...
2
votes
5answers
980 views

Starting A Bind/DHCP server

I am looking for some reading material on starting my own BIND/DHCP server. I mainly want the bind server to just be a caching server and for my home computers but it may also need to be authoritative ...
2
votes
3answers
88 views

tcpdump syntax error when specifying portrange as documented

I am using tcpdump on OpenBSD and trying to learn it from a primer on it. I want to capture a range of ports, but it seems how this is done has changed. I can't even find portrange as a keyword in ...