Questions tagged [openbsd]
OpenBSD is a BSD variant with a strong security and code correctness focus.
9
votes
2answers
182 views
Behaviour of “eval” under “set -e” in conditional expression
Consider the commands
eval false || echo ok
echo also ok
Ordinarily, we'd expect this to execute the false utility and, since the exit status is non-zero, to then execute echo ok and echo also ok.
...
1
vote
1answer
36 views
Run command on SSH server whenever a user connects, even if just for tunneling
I'd like to, as the administrator of an OpenBSD ssh jumphost used by multiple people, run a specific command any time any user connects via SSH, even if just for tunneling.
Is this possible?
I've ...
0
votes
0answers
29 views
How does route-to work in the BSD pf firewall?
I've recently learned about the route-to functionality in the pf firewall, and I wonder how it works. Is it similar to the "policy-based routing" system in linux? How does route-to allow the ...
3
votes
1answer
58 views
OpenBSD Supported Hardware
I've recently installed OpenBSD on my Lenovo Ideapad 510s-14ISK. Unfortunately, it seems that my current network card (Qualcomm Atheros NFA435 QCA9377-5 / NFA 344 QCA6174 WiFi 802.11ac 1x1 + BT) is ...
0
votes
1answer
37 views
Creating intermediate object files to another directory with Makefile
Due to an error made when partitioning the system disk of my OpenBSD box, I'm running out of space on /usr now.
openbsd$ df
Filesystem 512-blocks Used Avail Capacity Mounted on
/dev/sd0a ...
1
vote
2answers
81 views
How can I install a package on OpenBSD?
I installed OpenBSD and then proceeded to download firefox using the PKG_PATH environment.
It worked and seemed to run reasonably well but then, wanting to try another browser, I deleted firefox ...
0
votes
1answer
88 views
How to add CA cert to OpenBSD (6.4)
I'm trying to add a CA certificate to OpenBSD.
I have copied the conmpany.crt to /etc/ssl/private
I have created the .0 file from the certificate (using openssl x509 -hash -noout -in company.crt)
I ...
0
votes
1answer
48 views
DNS + DHCP in home lab [closed]
Setting up a home lab.
I was originally planning on using static ips for everything and then powerdns + poweradmin for DNS.
Recently though it dawned on me that it would be a lot simpler to just use ...
0
votes
1answer
34 views
PS2 keyboard in OpenBSD 6.4
On OpenBSD 6.4 , my usb keyboard is dead so i get a old ps2 keyboard.
The problem now is that it is configured as qwerty keyboard and it is a azerty keyboard.
I can set it in xfce with :
Keyboard ...
2
votes
1answer
67 views
How to see what is using sndiod / audio devices
When running mpc play, after it previously running fine and then opening some browsers, which likely try to play sounds, I receive the following error:
Failed to open "sndio output" [sndio]; Failed ...
1
vote
1answer
40 views
Verification of packages in a local mirror
Packages for several BSD and Linux operating systems / distributions are downloaded over a potentially insecure connecting or are later on replaced with a malicious version on the local disk.
The ...
1
vote
1answer
40 views
Wrong charset when mounting NFS share on OpenBSD
I have a NFS server running on a Fedora 29 machine and other machines on my network (an Ubuntu box and a Debian VM) mount it properly.
But when I mount it on an OpenBSD VM, the charset is wrong, for ...
5
votes
3answers
1k views
Equivalent to “source” in OpenBSD?
Trying to open a python3 virtual environment I have created with
python3 -m venv myVenv
by doing
source myVenv/bin/activate
as I do in Linux, but I get
ksh: source: not found
which mean it is ...
0
votes
2answers
81 views
Cannot compile git on OpenBSD
I'm trying to install git on a college server, just for my user, but for some reason I can't compile it. I tried the latest version on github, as well as a couple random older versions from both ...
1
vote
1answer
75 views
OpenBSD: Check what files under /etc has changed in comparison to pristine base system
I'm planning on setting up a new personal OpenBSD-current system by means of installing the latest OpenBSD snapshot, and I would want it to look more or less similar to my existing OpenBSD-current ...
0
votes
1answer
245 views
Script or makefile to automate new user creation?
I'd like to have either a shell script or makefile to automate new user creation. I can't decide which of approach is better - a script or makefile?
I have two types or users - both are SFTP chrooted,...
1
vote
2answers
106 views
Different order for getsockopt SO_PEERCRED in Linux and OpenBSD
I'm trying to get the Unix socket peer credentials in python.
I am using this piece of code for that:
peercred = conn.getsockopt(socket.SOL_SOCKET, socket.SO_PEERCRED, struct.calcsize("3i"))
pid, ...
0
votes
1answer
228 views
pf not stopping bruteforce attempts
I am setting up an SFTP server for me and my friends and I am trying to stop brute force attempts.
I have read many articles on how to get pf to stop brute force attacks and am not having any luck.
...
1
vote
1answer
116 views
Dvorak Programmer Layout with OpenBSD
I've recently installed OpenBSD. When installing the OS I selected the normal Dvorak layout as the Dvorak Programmer wasn't present on the list.
After the install I wanted to change the layout with ...
0
votes
2answers
366 views
How to find why php72_fpm is failing to start on OpenBSD?
My httpd logs show errors that look like php-fpm issues and sure enough, when I try
rcctl start php72_fpm
I get
php72_fpm(failed)
In line with other OpenBSD configuration so far, I'd expect to ...
1
vote
1answer
73 views
debugging a statement in a Makefile on OpenBSD
It is not clear to me, where the error comes from, the Makefile code follows:
platform_id = $$( uname -s )
platform = $$( \
case $(platform_id) in \
Linux | FreeBSD | OpenBSD | NetBSD ) ...
1
vote
0answers
95 views
OpenBSD threads priorities
Can anybody explain how to work with thread priorities in OpenBSD?
Information about this question in MAN pages is poor, it does not give clear understanding. In particular:
sched_get_priority_min/...
2
votes
1answer
390 views
OpenBSD - How does one set an alias?
I am running the latest OpenBSD and I cannot figure out how to set a simple alias, something along the lines of cls=clear.
I've tried putting it in ~/.cshrc and in ~/.profile.
I've tried:
alias cls ...
1
vote
0answers
341 views
Connect external DAC / sound card in OpenBSD
I am trying to connect a Focusrite Scarlett 2i4 USB DAC to my OpenBSD system to use as an external sound card. From what I have figured out so far, it seems that I need to tell some program or other ...
1
vote
1answer
276 views
OpenBSD redirect HTTPS by doman with relayd or pf
I have one machine with multiple domains and I'm trying to run multiple HTTPS web servers on it. All web servers have https support so I just need to redirect incoming packets to appropriate port (...
2
votes
1answer
175 views
OpenBSD relay, https proxy for multiple domains
I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
0
votes
0answers
147 views
install vips library in openbsd
On OpenBSD, I need to install sharp, which require the vips library.
When I use a prebaked vips tarball,
<stephane@bandersnatch.22decembre.eu:/usr/local/src/libvips/vips-8.7.0> ./configure ...
1
vote
2answers
145 views
Why is DHCPD offering wrong lease times?
I have DHCPD on OpenBSD 5.8 running and experiencing a weird issue.
I set the lease time as follows in /etc/dhcpd.conf:
max-lease-time 7200;
default-lease-time 7200;
This should be 2 hours.
When I ...
0
votes
1answer
110 views
XMonad error: xmonad-x86_64-openbsd: executeFile: Permission Denied
I'm running openbsd-6.3 with xmonad-0.13, I've tried using chmod -R +x on the .xmonad directory but when I use startx I get the error in the title. The xmonad.hs file also compiles with no warnings, ...
2
votes
1answer
273 views
How to change TCP congestion control algorithm on OpenBSD?
On FreeBSD, I can change the TCP congestion control algorithm via net.inet.tcp.cc.algorithm.
On OpenBSD, there is no net.inet.tcp.cc.algorithm parameter.
So, here is the question：
How to change TCP ...
1
vote
0answers
54 views
Why does ^C on netcat client close the server whereas ^C on server doesn't close the client?
I tested on Ubuntu 18.04 LTS the venerable netcat. The netcat comes from OpenBSD:
$ dpkg -l|grep netcat
ii netcat-openbsd 1.187-1
amd64 ...
1
vote
0answers
168 views
OpenBSD not replying to ARP requests
I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured:
Upstream(em0):
inet 10.0.2.20 255.255.255.0 NONE description upstream
...
3
votes
4answers
424 views
Delay termination of script
I have a script like this (written for /bin/sh on OpenBSD) which first updates a local copy of some CVS repositories using rsync, and then updates the checked-out version of these on my machine. The ...
0
votes
0answers
129 views
OpenBSD not accessible through SSH without GPU
I'm new to BSD and installed OpenBSD 6.3 to a test server for education purposes. It's going to be a dedicated firewall eventually.
During installation I used a graphics card to connect my monitor.
...
-1
votes
1answer
128 views
Can't Get Necromancer (OpenBSD VM) to connect to the network [closed]
I started playing Necromancer from Vulnhub (CTF). It was working just fine. I set the network adapter to bridged mode and I was able to capture every flag up to the point where I had to exploit SNMP. ...
1
vote
0answers
111 views
How do I connect to the internet with 3g usb modem (mobile broadband connection) in OpenBSD?
In order to install the GUI in OpenBSD! I know how to connect to wifi but now I have only 3g-usb-modem Huawei E171 and I don`t know how to connect to the internet via 3g-usb-modem in OpenBSD ! How can ...
0
votes
1answer
195 views
Dual boot OpenBSD with Mint
I want to dual boot mint with OpenBSD. I tried using the instructions here https://www.openbsd.org/faq/faq4.html but it doesn't seem to be working when using a live USB (using the amd64 download ...
2
votes
3answers
238 views
Why isn't there a /usr/include/GL directory on OpenBSD?
I have just recently made the switched for Linux to OpenBSD. So far, I am really liking the philosophy of including the bare minimum needed to run the system, and the emphasis for clean and simple ...
2
votes
1answer
188 views
How to install Xfce from tarball (source code) in OpenBSD without internet access?
I downloaded the Xfce tar.bz2 tarball file and I want to install Xfce. I can't install from the internet because of problems with my connection to the Internet. Who can help me to install Xfce from ...
0
votes
1answer
623 views
After OpenBSD login, mouse and keyboard do not work
I just installed OpenBSD 6.3 on a Dell Optiplex G620 with 4 gigs of RAM, a USB keyboard and a USB mouse. The keyboard and mouse work until I log in. When the X Windows screen comes up, I get a ...
0
votes
1answer
124 views
How to complie OpenBSD in src?
Running on OpenBSD, I issue a:
git clone https://github.com/openbsd/src.git
then how can I compile all the OpenBSD binaries? Is there a "master" make file? I only need the binaries inside the src ...
1
vote
2answers
343 views
Convert a date to UNIX timestamp on OpenBSD
On OpenBSD 6.3 I can see:
foo# date
Sun Apr 1 17:00:45 CEST 2018
foo#
foo# date -d "Sun Apr 1 17:00:45 CEST 2018" +%s
1522594858
foo# date
Sun Apr 1 17:00:59 CEST 2018
foo#
that "date" doesn't ...
-2
votes
2answers
514 views
How install packages in OpenBSD snapshot?
If I install the ISO from: https://cloudflare.cdn.openbsd.org/pub/OpenBSD/snapshots/amd64/
Then how can I install packages? Or there is no pkg_add method in snapshots?
What do I need to do for ...
1
vote
2answers
688 views
Mounting Encrypted Softraid on OpenBSD
The Setup
I have a machine that is running OpenBSD, it has two SSDs in it: sd0 and sd1.
I've setup each SSD with two partitions a and d.
From there I've built two mirrors using bioctl:
The first ...
0
votes
2answers
233 views
Stack-register checking
https://marc.info/?l=openbsd-tech&m=152035796722258&w=2
OpenBSD introduced stack-register checking
"It is opportunistically enforced by the kernel." -> this means it is optional?
"When a ...
0
votes
1answer
207 views
OpenBSD LDAP authentication - ypldap high CPU usage
I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google.
http://obfuscurity.com/2009/08/OpenBSD-as-an-...
0
votes
1answer
79 views
OpenBSD - run several X servers at a time
I if install an OpenBSD 6.2, how can I run several X servers at a time?
Purpose: have 2 "X servers" running
Why?: one "X" would be used for general purposes, the other "X" would be used only for ...
2
votes
1answer
415 views
OpenBSD Memory protection mechanisms that are not enabled by default?
Besides the "S" option for malloc.conf and increasing kern.stackgap_random and removing the wxallowed mount option, what else memory-related hardening mechanism are in OpenBSD that can be turned on ...
1
vote
1answer
287 views
Why does Google Chrome need wxallowed option?
OpenBSD has great security mitigations too, ex.: W^X: https://en.wikipedia.org/wiki/W%5EX
But, the /usr/local FS needs to have "wxallowed" mount option because of Google Chrome, because it won't ...
2
votes
1answer
161 views
Reverting OpenBSD Install In-Place
What I'm trying to do is revert my VPS running OpenBSD-current (following via binary updates, using snapshots and booting to ramdisk) to OpenBSD-6.2-release.
It's not an important system, so if it ...
