summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-04-19Include USB vendor and product ids when manufacturing a unique disk idMatthew Dempsky
from a USB serial number, as recommended by the umass spec. ok dlg@
2011-04-19don't hold a pointer to "listen" structure. Instead, when it mustAlexandre Ratchov
be free()ed, iterate over the file_list, and find the structure to free. This is safer and simpler. No behaviour change
2011-04-18reorder macros, no object changeAlexandre Ratchov
2011-04-18Adjust after removal of /etc/security to /usr/libexec.Ingo Schwarze
More HISTORY. Using feedback from jmc@. "I think that is correct. If it isn't, someone out there will eventually moan :)" deraadt@
2011-04-18slightly cleanup by separating socket-specific code fromAlexandre Ratchov
protocol specific code. No behaviour change
2011-04-18read(2) returns ssize_t. So use a ssize_t to store and test theKenneth R Westerback
return value, not a size_t which does not grok -1. ok matthew@
2011-04-18Revert the sigacts diff: NFS can apparently retain pointers to processesPhilip Guenthe
until they're zombies and then send them signals (for intr mounts). Until that is untangled, the sigacts change is unsafe. sthen@ was the victim for this one
2011-04-18Perl security fix for CVE-2011-1487:Alexander Bluhm
ucfirst(), uc() and lc() forget to set the tainted flag if input was marked as tainted. http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 http://perl5.git.perl.org/perl.git/commitdiff/539689e74a3bcb04d29e4cd9396de91a81045b99 ok millert@
2011-04-18As deraadt@ points out, the history section is not quite right.Thordur I. Bjornsson
Rather then rewriting history, I've chosen to erase it; as it contains only pointless trivia... ok deraadt@
2011-04-18The mouse should only work in copy mode if mode-mouse is set, not justNicholas Marriott
mouse-select-pane.
2011-04-18sort SEE ALSO;Jason McIntyre
2011-04-18people (should) bump REVISION nowadays.Jasper Lievisse Adriaanse
ok espie@
2011-04-18Add an option (mouse-select-window) which allows the mouse to be used byNicholas Marriott
clicking on the status line, written by hsim at gmx dot li.
2011-04-18Put back the change of pool and malloc into the new km_alloc(9) api.Artur Grabowski
The problems during the hackathon were not caused by this (most likely). prodded by deraadt@ and beck@
2011-04-18yeouchMarc Espie
2011-04-18do not print 'starting local daemons' if rc_scripts is emptyRobert Nagy
asked by/ok deraadt@, ajacoutot@
2011-04-18Update Test::Simple to 0.98Jasper Lievisse Adriaanse
ok millert@
2011-04-18Deprecate vnds in favour of svnds.Thordur I. Bjornsson
In effect, this removes the "old" vndX nodes, and renames the svndX nodes to vndX. Old svndX nodes will still continue to work though, for now. Cleanup accordingly. ok deraadt@, todd@ comments and ok on the man page bits from jmc@
2011-04-18remove the old style by-pass-the-buffer-cache vnd code.Thordur I. Bjornsson
this will treat vndX the same as svndX. ok and gcc2 fixes from deraadt@
2011-04-18Print size_t with %zu and ssize_t with %zd in error/debug output.Kenneth R Westerback
Not %d or %u. May help some of the issues reported by Richard Toohey. Tested by Steven R. Gerber.
2011-04-18Improve the iked acquire mode peer <-> policy matching. This changeReyk Floeter
picks the peer from the acquire message and allows to match masked peers in the policies like "peer any" or "peer 10.0.0.0/8" instead of requiring exactly matching peer specifications. ok mikeb@
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
matching policy and init a new IKE SA. This adds support for "acquire mode" from static flows. ok mikeb@
2011-04-18- update List::Util to 1.23, as needed by newer p5-POEJasper Lievisse Adriaanse
tested in bulk build. ok millert@
2011-04-18Fix a bug where OBSOLETE_FILES would contain only the last appendedAntoine Jacoutot
occurence. with a small tweak from an ok sthen@
2011-04-18ido not disable interrupts in the isr and then enable them againDavid Gwynne
when leaving. when you're handling an interrupt it is masked. whacking the chip is work for no gain. modify the interrupt handler so it only processes the rings once rather than looping over them until it runs out of work to do looping in the isr is bad for several reasons: firstly, the chip does interrupt mitigation so you have a decent/predictable amount of work to do in the isr. your first loop will do that chunk of work (ie, it pulls off 50ish packets), and then the successive looping aggressively pull one or two packets off the rx ring. these extra loops work against the benefit that interrupt mitigation provides. bus space reads are slow. we should avoid doing them where possible (but we should always do them when necessary). doing the loop 5 times per isr works against the mclgeti semantics. it knows a nic is busy and therefore needs more rx descriptors by watching to see when the nic uses all of its descriptors between interrupts. if we're aggressively pulling packets off by looping in the isr then we're skewing this check. ok deraadt@
2011-04-18since the pciide driver's interrupt handler can return -1 during hotplugTheo de Raadt
eject events, then the ppb's interrupt handler can be run at IPL_BIO. This makes a huge difference on modern server with mpi/bge/bnx. In snapshots for about 2 weeks now...
2011-04-18keep an eye out for wdc registers returning 0xff. if they return 0xff,Theo de Raadt
this probably means the controller is dead -- as in, a hot plug eject event. in that case, mark the driver dead and try harder to return -1 in the interrupt handler. tested by many ok dlg, miod did not object
2011-04-18Remove a header file that is only supposed to be used by the kernel.Theo de Raadt
2011-04-18certificate options are supposed to be packed in lexical order of optionDamien Miller
name (though we don't actually enforce this at present). Move one up that was out of sequence
2011-04-18Change all aml_xfoo to aml_foo names now that parser is stableJordan Hargrave
2011-04-18tweak previous;Jason McIntyre
2011-04-17syncTheo de Raadt
2011-04-17if mpath is disabled in config or ukc, then prevent path drivers fromDavid Gwynne
attaching since theyre useless without mpath. the path drivers ask mpath if its ok to use the device before doing their own matches (this is so mpath can prevent paths attaching to itself), so im just adding this check there. this uses code from miod to walk cfdata for the mpath entry and then checks its state. this is ok because mpath is only attached in one place, so there arent multiple cfdata entries for it. ok krw@ deraadt@ miod@ matthew@
2011-04-17allow graceful shutdown of multiplexing: request that a mux server removesDamien Miller
its listener socket and refuse future multiplexing requests; ok markus@
2011-04-17Replaced by src/libexec/security a few minutes ago;Ingo Schwarze
deraadt@ suggests to remove the old file right away.
2011-04-17syncTheo de Raadt
2011-04-17Switch from the old shell script /etc/securityIngo Schwarze
to the new Perl script /usr/libexec/security. The new script was tested by sthen@ and ajacoutot@. Committing now due to repeated prodding from deraadt@. In case problems show up, they will be fixed in tree.
2011-04-17a little more tweaking; ok krwJason McIntyre
2011-04-17Make DUID fstab the default so we can see how people like it. RequestedKenneth R Westerback
by deraadt@.
2011-04-17First crack at enabling the installation of a DUID version ofKenneth R Westerback
/etc/fstab, after asking user. Current default is existing behaviour. Feedback & suggestions deraadt@, halex@, jsing@, todd@. ok deraadt@
2011-04-17Add wol support to xl(4). Not really tested, but hopefully someone willStefan Sperling
test it now that it's in-tree. ok deraadt ("It causes no harm")
2011-04-17in_ifinit() is not prepared to be called from interrupt context so addStefan Sperling
addresses from process context by scheduling a work queue. Fixes an assertwaitok panic. ok henning
2011-04-17new sentence, new line;Jason McIntyre
2011-04-17Don't increase if_oerrors for every multicast frame leaving the interface.Stefan Sperling
ok deraadt
2011-04-17bigmem works well enough on amd64; we do not need the knob to turn itTheo de Raadt
off anymore. ok miod
2011-04-17improve line breaking in the SYNOPSIS section.Igor Sobrado
as noted by schwarze@, the semantics of the .Bk macro is slightly different now to conform with modern groff releases; using a command-line option (.Op) macro, instead of its multiline version, while preserving the .Bk/.Ek block makes our manual pages compatible with mandoc, new groff and even groff-1.15. ok jmc@, schwarze@
2011-04-17Tweak verbiage, bring examples up to date.Kenneth R Westerback
Suggestions from deraadt@ and jmc@. ok jmc@
2011-04-17by default we ignore unknown dhcp server options, so don't botherPeter Hessler
warning unless we ask dhclient to reject leases with unknown options OK krw@ (this was lost in my tree for even longer)
2011-04-17fix a possible division by zero if a server sends us a broken optionPeter Hessler
hints for the proper fix, and OK claudio@ (this was lost in my tree for far too long)
2011-04-17the pstat(8) sample line will now contain a real device nameTheo de Raadt