In case you like to do DNS lookups using #Go on #OpenBSD with pledge you have to set GODEBUG=netdns=cgo or compile using go build -tags netcgo ...

I.e. to make my honk resolve hostnames again without recompiling I have set the following:

$ cat /etc/login.conf.d/honk
honk:\
	:setenv=GODEBUG=netdns=cgo:\
	:tc=daemon:

🐡 Running your own mail server with OpenBSD and OpenSMTPD https://bsd-audit.com/self-hosting/running-your-own-mailserver/

#openbsd #OpenSMTPD #selfhosting

A wild #blog post appears!

I discuss a new #research publication: an empirical evaluation of the #OpenBSD -fret-clean flag. We examine the history of the mitigation, measure its costs, and deliberate whether or not it is worth keeping.

Worth the read if you like security and/or compilers.

https://briancallahan.net/blog/20260811.html

#freebsd #netbsd #dragonflybsd #bsd #linux #unix #solaris #illumos #compiler #compilers #llvm #gcc #rop #cybersecurity #cybersec #cyber #security #infosec #informationsecurity

I've been playing around with the m4 macro expander on #OpenBSD to make my web server config shorter.

It's a remarkably tricky tool compared to how simple it looks, but the end result more than paid for itself in my opinion.

https://nemin.hu/httpd-macros

#bsd #guide #httpd #macro