Age | Commit message (Collapse) | Author |
|
|
|
Remove intermediate GoDaddy certificate, this file should just contain roots.
ok beck@ phessler@
|
|
OK mikeb@ camield@ reyk@ sobrado@ henning@ krw@
|
|
- rtsx.4: lowercase Nd
|
|
ok guenther, krw
|
|
not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).
|
|
Pointed out by naddy some time ago.
Our definition of the Hebrew range is incomplete wrt current Unicode
editions. The proper fix would be to generate this entire file based
on current Unicode data but nobody is currently working on that.
I'm committing this intermediate fix partly to draw attention to
that problem :-)
|
|
|
|
From ray@, adapted from a diff by jakemsr@, commit req'd by Alexey Suslikov
|
|
Add support for the VIRTIO_NET_F_MRG_RXBUF feature, i.e. allow to
chain several rx buffers when receiving large packets.
This requires to put the rx meta data headers at the beginning of
the mbuf cluster instead of dedicated buffers.
ok mikeb@
|
|
ok stsp@
|
|
|
|
|
|
This card reader does not comply to the standard SDHC interface
supported by sdhc(4) and hence requires a custom driver.
With help from uwe and mikeb. Useful hints were also provided by the
author of the corresponding Linux driver (wwang at realsil com cn),
thanks a lot! Tested by myself and weerd on i386 and amd64.
|
|
no binary changes on i386.
|
|
Pointed out by Jung Lee.
|
|
- sync RES_DEBUG with resolv.conf.5
- document RES_PRIMARY, but mark it unsupported (like we already do
for RES_AAAONLY)
- use the exact same text (about being enabled by default) for
RES_RECURSE as for the other two defaults
- document RES_INSECURE{1,2} - description lifted from resolv.conf.5
- document RES_NOALIASES
- mostly sync the RES_USE_EDNS0 text with resolv.conf.5
- RES_USE_DNSSEC not documented for now. something to come...
ok sthen
|
|
|
|
necessarily correct, there might not even be a link when attaching.
ok mikeb@ reyk@
|
|
See http://tools.ietf.org/html/draft-gont-opsec-vpn-leakages.
We forcibly block IPv6 traffic by loading a "flow esp out from ::/0 to
::/0 type deny" unless the protocol is used in any of the flows. Note
that this will block any IPv6 traffic, superseding routes and pf, on
the host by default when iked is running with IPv4 flows only. This
auto-blocking feature can be disabled by specifying the "-6" command
line flag to iked.
Thanks to Fernando Gont.
ok mikeb@
|
|
(struct imsgev *)->data for the argument of imsgev handlers.
ok reyk
|
|
ok miod@, pointed Stefan Koerner <stefan dot koerner at pilum-tech dot de>
|
|
void and not int/pid_t.
|
|
mxb at alumni ! chalmers ! se. thanks!
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
adding the thread ID, and switching the timestamp to a struct timespec.
Correct the description of the EINVAL error.
|
|
int (*)(struct dirent *)
to
int (*)(const struct dirent *)
to match POSIX.
ok millert@, ports check by naddy@
|
|
|
|
|
|
|
|
|
|
delete the factory-default configuration.
|
|
Delete Makefile.inc and define BINDIR at npppd/Makefile directly.
|
|
|
|
- Use IF_Mbps() instead of multiplying the link speed by a bare value
- Remove a useless comment as baudrate is already handled properly
- Remove some commented out bits of code
- Use IF_Mbps() instead of the bare value
ok sthen@
|
|
consistently in relayd regression test.
|
|
|
|
|
|
cursor), requested by I forget who ages ago.
|
|
feedback from florian@ lum@
ok florian@
|
|
|
|
Allow 'request ;', 'require ;' and 'ignore ;' as requests to create
empty lists of options. Thus enabling the removal of built-in lists
or the removal of global lists inside an 'interface' declaration.
|
|
|
|
These functions represent the basic blocks for using the ACPI global
lock that provides mutual exclusion between the OSPM and the BIOS.
No functional change. Okay kettenis@, deraadt@.
|