summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-09-23Document bufferevent_setwatermark(). Initial diff from Geoff Hill on tech@ withanton
some tweaks. With feedback and ok jmc@
2018-09-23add 6.5 syspatch public keyRobert Nagy
2018-09-22Remap the UEFI buffer early such that we can use a write combining mappingMark Kettenis
which speeds things up considerably compared to an uncached mapping. ok deraadt@
2018-09-22Only clear the character backing store when the RI_CLEAR flag is set.Mark Kettenis
ok deraadt@
2018-09-22Remove unused Table_size define and digits() function.Todd C. Miller
2018-09-22Use user_from_uid() and uid_from_user() directly. The wrappersTodd C. Miller
in username.c are now so simple there is no longer a good reason to use them. OK deraadt@
2018-09-22Add a comment on the acceptable RSASSA cases.Theo Buehler
2018-09-22gather statistics in checkAead{Open,Seal}() as well.Theo Buehler
2018-09-22Back out the following if_iwm.c revisions:Stefan Sperling
r1.232 Fix length checks in the receive path of iwm(4) r1.230 Add monitor mode support to iwm(4) r1.229 Implement Rx of multiple frames per interrupt in the iwm(4) driver There is an apparent block-ack problem (base.tgz takes 8 hours to download) which goes away when these changes are reverted. To be revisited after release. ok deraadt@
2018-09-22remove some unneeded checksTheo Buehler
2018-09-22gather and print some statistics on the acceptable cases we need toTheo Buehler
look into
2018-09-22Enable USB bwfm(4) on macppc RAMDISK as well, matching GENERIC.Stefan Sperling
Passes 'make release' build.
2018-09-22Harmonize spacing after ellipses in displayed messages.Frederic Cambus
We were using spacing after ellipses in an inconsistent way in the installer. Standardize on using "... " everywhere and take into account the cursor position while we are waiting for the task to complete: the cursor is now always positioned after the last dot, and the space is added when displaying completion confirmation. While there, also take cursor position into account in vfs_shutdown(), and remove the extra leading space before ticks in dhclient. OK deraadt@
2018-09-22more flags printingTheo Buehler
2018-09-22Correct the uid_from_user() and gid_from_group() comments.Todd C. Miller
2018-09-22Revert previous. It broke /etc/rc.Visa Hankala
Prompted by kn@
2018-09-22fix uid -> username lookupRichard Procter
ok deraadt@
2018-09-22improve logic involving acceptableAuditTheo Buehler
2018-09-22Swap order of "action" and "wt.Flags" in a few fmt.Printfs.Theo Buehler
2018-09-22Introduce a couple of convenience targets to help with auditing theTheo Buehler
acceptable cases.
2018-09-21Print the flags field in INFO: and FAIL: messages. It's helpful inTheo Buehler
identifying the important failures while auditing.
2018-09-21sync host*() changes from pfctlkn
This simplifies host() and merges host_v{4,6}() into host_ip() as recently done for pfctl and ntpd. Tested and OK denis, OK deraadt, "go ahead" benno
2018-09-21Use password/group cache functions and avoid stashing a pointer toTodd C. Miller
the return value of getgrgid(3) or getgrnam(3) which relies on undefined behavior. The rdist server will now use getgroups(2) to determine group membership of the invoking user. In addition, there is now one implementation of tilde expansion instead of two. OK tb@ tim@
2018-09-21Use password/group cache functions and avoid stashing a pointer toTodd C. Miller
the return value of getgrgid(3) or getgrnam(3) which relies on undefined behavior. The rdist server will now use getgroups(2) to determine group membership of the invoking user. In addition, there is now one implementation of tilde expansion instead of two. OK tb@ tim@
2018-09-21Stop displaying vfsconf reference counts so that the vfc_refcount fieldVisa Hankala
can be removed from struct mount. As a result of this diff, arrays vfsname[] and vfsvars[] are indexed by filesystem typenum. This makes the vfs_typenums[] array redundant. OK bluhm@ mpi@
2018-09-21Increase /usr/local max size to 20 GB in default templatesolene
ok krw@ deraadt@ jca@
2018-09-21Add explanations about vmctl send commandsolene
ok jmc@ jca@ mlarkin@ mdoc tip from bentley@
2018-09-21Allow ssh_config ForwardX11Timeout=0 to disable the timeout and allowDamien Miller
X11 connections in untrusted mode indefinitely. ok dtucker@
2018-09-21Enable bwfm(4) in GENERIC on macppc.Stefan Sperling
Tested by Christian Hammerschmidt.
2018-09-21when compiled with GSSAPI support, cache supported method OIDs byDamien Miller
calling ssh_gssapi_prepare_supported_oids() regardless of whether GSSAPI authentication is enabled in the main config. This avoids sandbox violations for configurations that enable GSSAPI auth later, e.g. Match user djm GSSAPIAuthentication yes bz#2107; ok dtucker@
2018-09-21In sshkey_in_file(), ignore keys that are considered for being tooDamien Miller
short (i.e. SSH_ERR_KEY_LENGTH). These keys will not be considered to be "in the file". This allows key revocation lists to contain short keys without the entire revocation list being considered invalid. bz#2897; ok dtucker
2018-09-21Both AS 23456 and AS 0 are reserved and can nor be used. Extend check forClaudio Jeker
AS 0 and adjust yyerror message to print the right number. With input and OK denis@
2018-09-216.5 firmware keyStuart Henderson
2018-09-21better yyerror messages. "syntax error" is generally not very helpful.Claudio Jeker
OK denis@
2018-09-21update rtwn;Jason McIntyre
2018-09-21Basic testing of roa-sets.Claudio Jeker
2018-09-21Move setting of the PREFIXSET_FLAG_OPS higher up since prefixset_item ruleClaudio Jeker
is now also used by roa-set. Also set the prefix operation for roa-set items to OP_NONE since that what it actually needs to be.
2018-09-21Add some more prefix-set test cases. Mainly to test edge cases in the RBClaudio Jeker
tree implementation now used.
2018-09-21Implement code to parse, print and reload roa-set tables.Claudio Jeker
This is sharing a lot of code with prefixset which makes all a bit easier. A roa-set is defined like this: roa-set "test2" { 1.2.3.0/24 source-as 1, 1.2.8.0/22 maxlen 24 source-as 3 } No support for acting on this data yet. Put it in deraadt@, OK benno@, input and OK denis@
2018-09-21Treat connections with ProxyJump specified the same as ones with aDamien Miller
ProxyCommand set with regards to hostname canonicalisation (i.e. don't try to canonicalise the hostname unless CanonicalizeHostname is set to 'always'). Patch from Sven Wegener via bz#2896
2018-09-21U-Boot 2018.05 and later will attempt to load a dtb for PocketBeagle ifJonathan Gray
the hardware is detected. Add this to the miniroot/ramdisk. requires dtb 4.18 U-Boot 2018.09 and later will load a dtb for 'SanCloud BeagleBone Enhanced' if required which will be in dtb 4.19 after linux 4.19 is released and can be added then.
2018-09-21mention RTL8188EE supportJonathan Matthew
2018-09-21Add support for RTL8188EE.Jonathan Matthew
This needs a new firmware image, which should be added to the rtwn firmware package shortly. testing and lots of help from kevlo@ ok kevlo@ stsp@
2018-09-21add missing braces implied by indentationJonathan Gray
ok millert@ claudio@
2018-09-20actually make CASignatureAlgorithms available as a config optionDamien Miller
2018-09-20merge unbound 1.8.0Stuart Henderson
2018-09-20import unbound 1.8.0, tested by myself and benno@Stuart Henderson
2018-09-20As a step towards per inpcb or socket locks, remove the net lockAlexander Bluhm
for netstat -a. Introduce a global mutex that protects the tables and hashes for the internet PCBs. To detect detached PCB, set its inp_socket field to NULL. This has to be protected by a per PCB mutex. The protocol pointer has to be protected by the mutex as netstat uses it. Always take the kernel lock in in_pcbnotifyall() and in6_pcbnotify() before the table mutex to avoid lock ordering problems in the notify functions. OK visa@
2018-09-20missing space after commaTheo Buehler
2018-09-20grow alpha and hppa media to accomodate some recent growthTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-17 15:00:46 +0000