Bump!

andyprough wrote:

Do we have anything like pledge in Linux-land? Looks like a security must-have.

We do now:

Porting OpenBSD pledge() to Linux

Nice.

Wow, who better than a world famous internet troll to create a perfect security tool for Linux? Way to go Justine! She's the kind of highly productive troll I want to be when I grow up.

We do now:

Porting OpenBSD pledge() to Linux

Nice.

my 2 cents

--
https://i.imgur.com/kvN9DNF.png

Do we have anything like pledge in Linux-land?

It can almost be mimicked by using capabilities(7) but the implementation wouldn't be as straightforward. The init-system-that-shall-not-be-named (or spelled correctly) offers capability-based restrictions for unit files: https://manpages.debian.org/bullseye/sy … PABILITIES

EDIT: and suckless have already incorporated pledge(2) into the source code, which is nice.

https://git.suckless.org/dwm/file/dwm.c.html#l2146

Wow! Do we have anything like pledge in Linux-land? Looks like a security must-have.

that is what i do, just git clone that way i can update it via git if there is a version change, update, etc.

openbsd needs no extra packages to make dwm, you just need to uncomment a few lines in the config.mk file that openbsd needs to run and the config.mk file tells you what to do via comments.

I comment out the Xinerama fields in the config.mk as i dont use more than one screen so not needed in my case.

Nice, I'm going to have to try it soon. Very much appreciated.

hevidevi wrote:

I play around with a few linux but my main machine runs encrypted openbsd and dwm / suckless setup. I think in future i will base most of my computer needs around if it will work properly on openbsd first. I like where Devuan is heading being init free but that is just the tip of the iceberg when it comes to the future of computing.

Regarding DWM, I'm assuming you can just 'git clone' and 'make install' like on Devuan? Does openbsd have all the libxft-dev libx11-dev and libxinerama-dev dependencies?

that is what i do, just git clone that way i can update it via git if there is a version change, update, etc.

openbsd needs no extra packages to make dwm, you just need to uncomment a few lines in the config.mk file that openbsd needs to run and the config.mk file tells you what to do via comments.

I comment out the Xinerama fields in the config.mk as i dont use more than one screen so not needed in my case.

      1 # dwm version
      2 VERSION = 6.3
      3 
      4 # Customize below to fit your system
      5 
      6 # paths
      7 PREFIX = /usr/local
      8 MANPREFIX = ${PREFIX}/share/man
      9 
     10 X11INC = /usr/X11R6/include
     11 X11LIB = /usr/X11R6/lib
     12 
     13 # Xinerama, comment if you don't want it
     14 XINERAMALIBS  = -lXinerama
     15 XINERAMAFLAGS = -DXINERAMA
     16 
     17 # freetype
     18 FREETYPELIBS = -lfontconfig -lXft
     19 FREETYPEINC = /usr/include/freetype2
     20 # OpenBSD (uncomment)
     21 #FREETYPEINC = ${X11INC}/freetype2
     22 
     23 # includes and libs
     24 INCS = -I${X11INC} -I${FREETYPEINC}
     25 LIBS = -L${X11LIB} -lX11 ${XINERAMALIBS} ${FREETYPELIBS}
     26 
     27 # flags
     28 CPPFLAGS = -D_DEFAULT_SOURCE -D_BSD_SOURCE -D_POSIX_C_SOURCE=200809L -DVERSION=\"${VERSION}\" ${XINERAMAFLAGS}
     29 #CFLAGS   = -g -std=c99 -pedantic -Wall -O0 ${INCS} ${CPPFLAGS}
     30 CFLAGS   = -std=c99 -pedantic -Wall -Wno-deprecated-declarations -Os ${INCS} ${CPPFLAGS}
     31 LDFLAGS  = ${LIBS}
     32 
     33 # Solaris
     34 #CFLAGS = -fast ${INCS} -DVERSION=\"${VERSION}\"
     35 #LDFLAGS = ${LIBS}
     36 
     37 # compiler and linker
     38 CC = cc

The comp & xbase file sets are needed to make the port but they're part of the base system. There is a vanilla example available as well: https://github.com/openbsd/ports/tree/master/x11/dwm

EDIT: and suckless have already incorporated pledge(2) into the source code, which is nice.

https://git.suckless.org/dwm/file/dwm.c.html#l2146

I play around with a few linux but my main machine runs encrypted openbsd and dwm / suckless setup. I think in future i will base most of my computer needs around if it will work properly on openbsd first. I like where Devuan is heading being init free but that is just the tip of the iceberg when it comes to the future of computing.

Regarding DWM, I'm assuming you can just 'git clone' and 'make install' like on Devuan? Does openbsd have all the libxft-dev libx11-dev and libxinerama-dev dependencies?

andyprough wrote:

You mis-spelled...

So did you.

https://en.wiktionary.org/wiki/misspell

'Misspell' is most commonly mis-spelled as "mispell", whereas 'misspelled' is most commonly mis-spelled as "misspelt". Misspell is one of the 100 most commonly mis-spelled words in English, but not in its alternate form 'mis-spell'.

You mis-spelled...

So did you.

jacksprat wrote:

systemD

What is that? Do you in fact mean "systemd"? FFS...

The OP was probably referring to IBM's system-D and just missed the hyphen. No need to get angry over a simple missed key press.

You mis-spelled https://github.com/void-linux/xbps. See? Keyboard errors can happen to anyone.