Podcast Episode Details
Back to Podcast Episodes
104: Beverly Hills 25519
Coming up this week on the show, we'll be talking with Damien Miller of the OpenSSH team. Their 7.0 release has some major changes, including phasing out older crypto and changing one of the defaults that might surprise you.
This episode was brought to you by
Headlines
EdgeRouter Lite, meet OpenBSD
- The ERL, much like the Raspberry Pi and a bunch of other cheap boards, is getting more and more popular as more things get ported to run on it
- We've covered installing NetBSD and FreeBSD on them before, but OpenBSD has gotten a lot better support for them as well now (including the onboard storage in 5.8)
- Ted Unangst got a hold of one recently and kindly wrote up some notes about installing and using OpenBSD on it
- He covers doing a network install, getting the (slightly strange) bootloader working with u-boot and some final notes about the hardware
- More discussion can be found on Hacker News and various other places
- One thing to note about these devices: because of their MIPS64 processor, they'll have weaker ASLR than X86 CPUs (and no WX at all) ***
Design and Implementation of the FreeBSD Operating System interview
- For those who don't know, the "Design and Implementation of the FreeBSD Operating System" is a semi-recently-revived technical reference book for FreeBSD development
- InfoQ has a review of the book up for anyone who might be interested, but they also have an interview the authors
- "The book takes an approach to FreeBSD from inside out, starting with kernel services, then moving to process and memory management, I/O and devices, filesystems, IPC and network protocols, and finally system startup and shutdown. The book provides dense, technical information in a clear way, with lots of pseudo-code, diagrams, and tables to illustrate the main points."
- Aside from detailing a few of the chapters, the interview covers who the book's target audience is, some history of the project, long-term support, some of the newer features and some general OS development topics ***
Path list parameter in OpenBSD tame
- We've mentioned OpenBSD's relatively new "tame" subsystem a couple times before: it's an easy-to-implement "self-containment" framework, allowing programs to have a reduced feature set mode with even less privileges
- One of the early concerns from users of other process containment tools was that tame was too broad in the way it separated disk access - you could either read/write files or not, nothing in between
- Now there's the option to create a whitelist of specific files and directories that your binary is allowed to access, giving a muc
Published on 10 years, 4 months ago