Questions tagged [openbsd]

OpenBSD is a BSD variant with a strong security and code correctness focus.

9
votes
2answers
182 views

Behaviour of “eval” under “set -e” in conditional expression

Consider the commands eval false || echo ok echo also ok Ordinarily, we'd expect this to execute the false utility and, since the exit status is non-zero, to then execute echo ok and echo also ok. ...
1
vote
1answer
36 views

Run command on SSH server whenever a user connects, even if just for tunneling

I'd like to, as the administrator of an OpenBSD ssh jumphost used by multiple people, run a specific command any time any user connects via SSH, even if just for tunneling. Is this possible? I've ...
0
votes
0answers
29 views

How does route-to work in the BSD pf firewall?

I've recently learned about the route-to functionality in the pf firewall, and I wonder how it works. Is it similar to the "policy-based routing" system in linux? How does route-to allow the ...
3
votes
1answer
58 views

OpenBSD Supported Hardware

I've recently installed OpenBSD on my Lenovo Ideapad 510s-14ISK. Unfortunately, it seems that my current network card (Qualcomm Atheros NFA435 QCA9377-5 / NFA 344 QCA6174 WiFi 802.11ac 1x1 + BT) is ...
0
votes
1answer
37 views

Creating intermediate object files to another directory with Makefile

Due to an error made when partitioning the system disk of my OpenBSD box, I'm running out of space on /usr now. openbsd$ df Filesystem 512-blocks Used Avail Capacity Mounted on /dev/sd0a ...
1
vote
2answers
81 views

How can I install a package on OpenBSD?

I installed OpenBSD and then proceeded to download firefox using the PKG_PATH environment. It worked and seemed to run reasonably well but then, wanting to try another browser, I deleted firefox ...
0
votes
1answer
88 views

How to add CA cert to OpenBSD (6.4)

I'm trying to add a CA certificate to OpenBSD. I have copied the conmpany.crt to /etc/ssl/private I have created the .0 file from the certificate (using openssl x509 -hash -noout -in company.crt) I ...
0
votes
1answer
48 views

DNS + DHCP in home lab [closed]

Setting up a home lab. I was originally planning on using static ips for everything and then powerdns + poweradmin for DNS. Recently though it dawned on me that it would be a lot simpler to just use ...
0
votes
1answer
34 views

PS2 keyboard in OpenBSD 6.4

On OpenBSD 6.4 , my usb keyboard is dead so i get a old ps2 keyboard. The problem now is that it is configured as qwerty keyboard and it is a azerty keyboard. I can set it in xfce with : Keyboard ...
2
votes
1answer
67 views

How to see what is using sndiod / audio devices

When running mpc play, after it previously running fine and then opening some browsers, which likely try to play sounds, I receive the following error: Failed to open "sndio output" [sndio]; Failed ...
1
vote
1answer
40 views

Verification of packages in a local mirror

Packages for several BSD and Linux operating systems / distributions are downloaded over a potentially insecure connecting or are later on replaced with a malicious version on the local disk. The ...
1
vote
1answer
40 views

Wrong charset when mounting NFS share on OpenBSD

I have a NFS server running on a Fedora 29 machine and other machines on my network (an Ubuntu box and a Debian VM) mount it properly. But when I mount it on an OpenBSD VM, the charset is wrong, for ...
5
votes
3answers
1k views

Equivalent to “source” in OpenBSD?

Trying to open a python3 virtual environment I have created with python3 -m venv myVenv by doing source myVenv/bin/activate as I do in Linux, but I get ksh: source: not found which mean it is ...
0
votes
2answers
81 views

Cannot compile git on OpenBSD

I'm trying to install git on a college server, just for my user, but for some reason I can't compile it. I tried the latest version on github, as well as a couple random older versions from both ...
1
vote
1answer
75 views

OpenBSD: Check what files under /etc has changed in comparison to pristine base system

I'm planning on setting up a new personal OpenBSD-current system by means of installing the latest OpenBSD snapshot, and I would want it to look more or less similar to my existing OpenBSD-current ...
0
votes
1answer
245 views

Script or makefile to automate new user creation?

I'd like to have either a shell script or makefile to automate new user creation. I can't decide which of approach is better - a script or makefile? I have two types or users - both are SFTP chrooted,...
1
vote
2answers
106 views

Different order for getsockopt SO_PEERCRED in Linux and OpenBSD

I'm trying to get the Unix socket peer credentials in python. I am using this piece of code for that: peercred = conn.getsockopt(socket.SOL_SOCKET, socket.SO_PEERCRED, struct.calcsize("3i")) pid, ...
0
votes
1answer
228 views

pf not stopping bruteforce attempts

I am setting up an SFTP server for me and my friends and I am trying to stop brute force attempts. I have read many articles on how to get pf to stop brute force attacks and am not having any luck. ...
1
vote
1answer
116 views

Dvorak Programmer Layout with OpenBSD

I've recently installed OpenBSD. When installing the OS I selected the normal Dvorak layout as the Dvorak Programmer wasn't present on the list. After the install I wanted to change the layout with ...
0
votes
2answers
366 views

How to find why php72_fpm is failing to start on OpenBSD?

My httpd logs show errors that look like php-fpm issues and sure enough, when I try rcctl start php72_fpm I get php72_fpm(failed) In line with other OpenBSD configuration so far, I'd expect to ...
1
vote
1answer
73 views

debugging a statement in a Makefile on OpenBSD

It is not clear to me, where the error comes from, the Makefile code follows: platform_id = $$( uname -s ) platform = $$( \ case $(platform_id) in \ Linux | FreeBSD | OpenBSD | NetBSD ) ...
1
vote
0answers
95 views

OpenBSD threads priorities

Can anybody explain how to work with thread priorities in OpenBSD? Information about this question in MAN pages is poor, it does not give clear understanding. In particular: sched_get_priority_min/...
2
votes
1answer
390 views

OpenBSD - How does one set an alias?

I am running the latest OpenBSD and I cannot figure out how to set a simple alias, something along the lines of cls=clear. I've tried putting it in ~/.cshrc and in ~/.profile. I've tried: alias cls ...
1
vote
0answers
341 views

Connect external DAC / sound card in OpenBSD

I am trying to connect a Focusrite Scarlett 2i4 USB DAC to my OpenBSD system to use as an external sound card. From what I have figured out so far, it seems that I need to tell some program or other ...
1
vote
1answer
276 views

OpenBSD redirect HTTPS by doman with relayd or pf

I have one machine with multiple domains and I'm trying to run multiple HTTPS web servers on it. All web servers have https support so I just need to redirect incoming packets to appropriate port (...
2
votes
1answer
175 views

OpenBSD relay, https proxy for multiple domains

I'm trying to make a proxy for 3 web servers (running on the same machine as the proxy). A have successfully configured relayd to redirect a request to correct port by their host header, but I cannot ...
0
votes
0answers
147 views

install vips library in openbsd

On OpenBSD, I need to install sharp, which require the vips library. When I use a prebaked vips tarball, <stephane@bandersnatch.22decembre.eu:/usr/local/src/libvips/vips-8.7.0> ./configure ...
1
vote
2answers
145 views

Why is DHCPD offering wrong lease times?

I have DHCPD on OpenBSD 5.8 running and experiencing a weird issue. I set the lease time as follows in /etc/dhcpd.conf: max-lease-time 7200; default-lease-time 7200; This should be 2 hours. When I ...
0
votes
1answer
110 views

XMonad error: xmonad-x86_64-openbsd: executeFile: Permission Denied

I'm running openbsd-6.3 with xmonad-0.13, I've tried using chmod -R +x on the .xmonad directory but when I use startx I get the error in the title. The xmonad.hs file also compiles with no warnings, ...
2
votes
1answer
273 views

How to change TCP congestion control algorithm on OpenBSD?

On FreeBSD, I can change the TCP congestion control algorithm via net.inet.tcp.cc.algorithm. On OpenBSD, there is no net.inet.tcp.cc.algorithm parameter. So, here is the question: How to change TCP ...
1
vote
0answers
54 views

Why does ^C on netcat client close the server whereas ^C on server doesn't close the client?

I tested on Ubuntu 18.04 LTS the venerable netcat. The netcat comes from OpenBSD: $ dpkg -l|grep netcat ii netcat-openbsd 1.187-1 amd64 ...
1
vote
0answers
168 views

OpenBSD not replying to ARP requests

I am setting up an OpenBSD system as a router, I have one interface as the upstream, then another with a vlan configured: Upstream(em0): inet 10.0.2.20 255.255.255.0 NONE description upstream ...
3
votes
4answers
424 views

Delay termination of script

I have a script like this (written for /bin/sh on OpenBSD) which first updates a local copy of some CVS repositories using rsync, and then updates the checked-out version of these on my machine. The ...
0
votes
0answers
129 views

OpenBSD not accessible through SSH without GPU

I'm new to BSD and installed OpenBSD 6.3 to a test server for education purposes. It's going to be a dedicated firewall eventually. During installation I used a graphics card to connect my monitor. ...
-1
votes
1answer
128 views

Can't Get Necromancer (OpenBSD VM) to connect to the network [closed]

I started playing Necromancer from Vulnhub (CTF). It was working just fine. I set the network adapter to bridged mode and I was able to capture every flag up to the point where I had to exploit SNMP. ...
1
vote
0answers
111 views

How do I connect to the internet with 3g usb modem (mobile broadband connection) in OpenBSD?

In order to install the GUI in OpenBSD! I know how to connect to wifi but now I have only 3g-usb-modem Huawei E171 and I don`t know how to connect to the internet via 3g-usb-modem in OpenBSD ! How can ...
0
votes
1answer
195 views

Dual boot OpenBSD with Mint

I want to dual boot mint with OpenBSD. I tried using the instructions here https://www.openbsd.org/faq/faq4.html but it doesn't seem to be working when using a live USB (using the amd64 download ...
2
votes
3answers
238 views

Why isn't there a /usr/include/GL directory on OpenBSD?

I have just recently made the switched for Linux to OpenBSD. So far, I am really liking the philosophy of including the bare minimum needed to run the system, and the emphasis for clean and simple ...
2
votes
1answer
188 views

How to install Xfce from tarball (source code) in OpenBSD without internet access?

I downloaded the Xfce tar.bz2 tarball file and I want to install Xfce. I can't install from the internet because of problems with my connection to the Internet. Who can help me to install Xfce from ...
0
votes
1answer
623 views

After OpenBSD login, mouse and keyboard do not work

I just installed OpenBSD 6.3 on a Dell Optiplex G620 with 4 gigs of RAM, a USB keyboard and a USB mouse. The keyboard and mouse work until I log in. When the X Windows screen comes up, I get a ...
0
votes
1answer
124 views

How to complie OpenBSD in src?

Running on OpenBSD, I issue a: git clone https://github.com/openbsd/src.git then how can I compile all the OpenBSD binaries? Is there a "master" make file? I only need the binaries inside the src ...
1
vote
2answers
343 views

Convert a date to UNIX timestamp on OpenBSD

On OpenBSD 6.3 I can see: foo# date Sun Apr 1 17:00:45 CEST 2018 foo# foo# date -d "Sun Apr 1 17:00:45 CEST 2018" +%s 1522594858 foo# date Sun Apr 1 17:00:59 CEST 2018 foo# that "date" doesn't ...
-2
votes
2answers
514 views

How install packages in OpenBSD snapshot?

If I install the ISO from: https://cloudflare.cdn.openbsd.org/pub/OpenBSD/snapshots/amd64/ Then how can I install packages? Or there is no pkg_add method in snapshots? What do I need to do for ...
1
vote
2answers
688 views

Mounting Encrypted Softraid on OpenBSD

The Setup I have a machine that is running OpenBSD, it has two SSDs in it: sd0 and sd1. I've setup each SSD with two partitions a and d. From there I've built two mirrors using bioctl: The first ...
0
votes
2answers
233 views

Stack-register checking

https://marc.info/?l=openbsd-tech&m=152035796722258&w=2 OpenBSD introduced stack-register checking "It is opportunistically enforced by the kernel." -> this means it is optional? "When a ...
0
votes
1answer
207 views

OpenBSD LDAP authentication - ypldap high CPU usage

I have an OpenBSD server with login_ldap, ypldap, ypbind and portmapper is configured according to these guides that I managed to find courtesy of Google. http://obfuscurity.com/2009/08/OpenBSD-as-an-...
0
votes
1answer
79 views

OpenBSD - run several X servers at a time

I if install an OpenBSD 6.2, how can I run several X servers at a time? Purpose: have 2 "X servers" running Why?: one "X" would be used for general purposes, the other "X" would be used only for ...
2
votes
1answer
415 views

OpenBSD Memory protection mechanisms that are not enabled by default?

Besides the "S" option for malloc.conf and increasing kern.stackgap_random and removing the wxallowed mount option, what else memory-related hardening mechanism are in OpenBSD that can be turned on ...
1
vote
1answer
287 views

Why does Google Chrome need wxallowed option?

OpenBSD has great security mitigations too, ex.: W^X: https://en.wikipedia.org/wiki/W%5EX But, the /usr/local FS needs to have "wxallowed" mount option because of Google Chrome, because it won't ...
2
votes
1answer
161 views

Reverting OpenBSD Install In-Place

What I'm trying to do is revert my VPS running OpenBSD-current (following via binary updates, using snapshots and booting to ramdisk) to OpenBSD-6.2-release. It's not an important system, so if it ...