Synthetic Memory Protections.

Theo de Raadt (derradt@) was scheduled to present at CanSecWest. That's now happened, and slides of Theo's presentation, Synthetic Memory Protections, can be found in the usual place. Video is available on the bird site.

#security #video

OpenBSD 7.3 released.

https://www.openbsd.org/73.html

#release #system

#art (c)

AWS Gazo bot.

Scripts to create, customize and upload AWS images to the cloud. This is a work in progress, I'm trying to create OpenBSD images from Linux, specially using arm64 and riscv64 for AWS since OpenBSD has no vmm support for arm64 nor riscv64 yet...

https://github.com/csaltos/aws-gazo-bot

Based on the scripts created by Antoine Jacoutot at https://github.com/ajacoutot/aws-openbsd

#aws #cloud #install

viogpu(4), a VirtIO GPU driver, added to -current.

Joshua Stein (jcs@) has committed viogpu(4), which provides support for the virtio(4) GPU interface (provided by QEMU and other virtual machines) to create a wscons(4) console...

https://www.undeadly.org/cgi?action=article;sid=20230421124221

#viogpu #virtio

cron(8) now supports random ranges with steps.

Thanks to the following commit by Todd Miller, cron now supports random values in a range with a step value (i.e. "<lo>~<hi>/<step>" in crontab entries)...

https://undeadly.org/cgi?action=article;sid=20230507122935

#cron

dhcpd.leases dashboard

A simple dashboard for the dhcpd.leases file of the OpenBSD dhcpd server that is very easy to deploy and use...

https://github.com/facelessfish/dhcpd-leasesd

#dhcp #dhcpd #network

#art (c)

sec(4) for Route Based IPSec VPNs

A new tool for creating flexible, route based site to site virtual private networks (site-to-site VPNs) is entering its call for testing phase on OpenBSD-current...

https://undeadly.org/cgi?action=article;sid=20230704094238

#network #vpn #sec

🐡 OpenBSD 7.4 released! #release

OpenBSD Webzine issues 14, 15, 16.

- https://webzine.puffy.cafe/issue-14.html
- https://webzine.puffy.cafe/issue-15.html
- https://webzine.puffy.cafe/issue-16-special-octopenbsd-2023.html

#webzine #news

Install OpenBSD 7.3 on Proxmox (BIOS/UEFI and Cloud-init).

I thought it was an opportunity to take stock of the different methods of installing OpenBSD on our favorite hypervisor. We will consider different scenarios depending on the types of BIOS available under Proxmox (OVMF, SEABIOS); different OpenBSD installation images; and, finally, we'll talk about the thorny subject of OpenBSD's compatibility with Cloud-init...

https://forum.proxmox.com/threads/install-openbsd-7-3-on-proxmox-bios-uefi-and-cloud-init.133063/

#virtualization #proxmox #install

Collection of videos recorded at EuroBSDcon 2023 in Coimbra Portugal.

- How OpenBSD’s malloc helps the developer
- Practical Use of OpenBSD Routing Domains with Redundant Firewalls
- OpenBSD Ports and Packages: making things faster and easier
- A Haskell Binding for OpenBSD Pledge
- Using OpenBSD relayd(8) as an Application Layer Gateway
- OpenBSD Attack Mitigations
- The OpenBSD Installer

EuroBSDcon playlist - https://www.youtube.com/playlist?list=PLskKNopggjc7s6nAMxKF0tAO77ZIowZdx

#video #eurobsdcon

Creating an OpenBSD Wireguard VPN Gateway.

A couple of years ago I published a blog post about creating an OpenBSD VPN gateway using OpenVPN. I've recently switched from an OpenVPN-based VPN provider to one that uses Wireguard. As a result I've had to redo my VPN gateway...

https://blog.lambda.cx/posts/openbsd-wireguard-vpn-gateway/

#wireguard #network #vpn

OpenBSD workstation hardening.

I wanted to share a list of hardening you can do on your OpenBSD workstation, and explaining the threat model of each change...

https://dataswamp.org/~solene/2023-12-31-hardened-openbsd-workstation.html

#security #system

OpenBSD KDE Plasma Desktop.

The KDE Plasma 5.27 is available on OpenBSD -current and will be part of the next release 7.5...

https://rsadowski.de/posts/2024-01-09-openbsd-kde/

#kde #desktop

Use OpenBSD in web browser.

I have created a service that allows you to use OpenBSD (and other operating systems) in a web browser. The URL to the service is instantworkstation.com. Hope it may be useful to you...

https://www.reddit.com/r/openbsd/comments/1ad1puz/use_openbsd_in_web_browser/

#browser #system

OpenBSD system-call pinning

... In December, De Raadt sent a patch to the OpenBSD mailing list expanding OpenBSD's restrictions on the locations from which a process can make system calls...

https://lwn.net/SubscriberLink/959562/0578b8e463f790c1/

#pinsyscalls #syscall