summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-11-10Add a Content-Security-Policy HTTP header that allows only CSS.Anthony J. Bentley
This ensures that in a modern browser that understands the header, mandoc rendering bugs cannot possibly be interpreted as JavaScript. ok schwarze@
2019-11-10Opportunisticly run fw_update before rebooting to run the upgrade.Bob Beck
Warn if it fails, but allow the upgrade to continue for now. discussed with many, refinements by naddy@ sthen@ "commit something" deraadt@
2019-11-10Consistently use _rcctl enable foo_ in examples, it's simpler and lessLandry Breuil
error prone than manually editing rc.conf.local, and also works to enable ipsec and accounting. tweak from schwarze@ to use the \(dq\(dq syntax for quotes in '.Dl foo_flags="" lines' instead of \&"\&". while at it, fix a reference to a bogus /dev/dhclient.conf file that recently snuck in. ok jmc@ deraadt@ schwarze@
2019-11-10document server/servers "trusted" sub-option. Indicates a particularTheo de Raadt
server is wired up such that non MITM attacks are possible, and NTP packets can be trusted. Therefore constraint validity is not required, and during boot ntpd can spin-up correct time faster. with otto, ok jmc schwarze
2019-11-10Introduce a "trusted" modifier, for peers that should be on a local netOtto Moerbeek
used in situations where https constraints cannot be used and we still want auto settime. Result of discussion with and ok deraadt@
2019-11-10alphatically order sub-options for sensors, and make the explanationsTheo de Raadt
more similar ok jmc schwarze
2019-11-10Tedu scsi_scanner.h as krw@ intended to doPatrick Wildt
2019-11-10It has been called to my attention that the cookie monster ascii artBob Beck
in this test which I had obtained from a site purporting it to be free for use with artist attribtion might not be. After looking at at some other muppett ascii art for inspiration I am replacing this with my own ascii art muppet to replace the previously used cookie monster. The copyright for the art is the same as my code.
2019-11-10scsi_scanner.h join its friends after a lonely 9 years.Kenneth R Westerback
ok jsg@ deraadt@
2019-11-10typoTheo de Raadt
2019-11-10Cope with missing PT_* operations on some architecturesTheo de Raadt
with mortimer
2019-11-10tweaks to the file hierarchy to annotate anything with debuginfo, soMarc Espie
existing @bin @lib and new @static-lib @so as discussed with p2k19 people
2019-11-10use $(<file) instead of $(cat file) since this script uses ksh; ok ajacoutot@Christian Weisgerber
2019-11-10typoMarc Espie
2019-11-10Drop non existent vars.Antoine Jacoutot
2019-11-10for the net80211 drivers supporting WPA, update to a new unified text showingStuart Henderson
that WPA1 is disabled by default, and provide a couple of extra pointers about configuration. direction of change proposed by stsp, ok jmc stsp
2019-11-10whitespace fixes, no functional changeDavid Gwynne
2019-11-10sync to sys/route.h; pointed out by bennoFlorian Obser
2019-11-10TRUE/FALSE conversions missed in previous.Martin Pieuchot
2019-11-10whitespace tweaks, no functional change.David Gwynne
2019-11-10minor style nitanton
2019-11-10Update wifi-related documentation in ifconfig man page.Stefan Sperling
ok jmc deraadt
2019-11-10Stop connecting to available open wifi networks when the interface is put up.Stefan Sperling
From now on, this behaviour must be explicitly enabled with ifconfig join "". ok sthen jcs deraadt
2019-11-10Invert a conditional in pipe_write() for reduced indent and inanton
preparation for further refactoring. ok cheloha@ mpi@ visa@
2019-11-10- validate sensor values against constraintsOtto Moerbeek
- do not restart settime timeout interval if something happens in the main event loop - apply a tight loop protection; it can be painfull on a single core machine since the process runs at maximum priority. Should only happen when a bug is introduced while developing, but prevents having to machine taken over by ntpd.
2019-11-10Change the EINVAL return code to a KASSERT if the namei structure isBob Beck
initialized incorrectly for vn_open ok visa@ anton@
2019-11-09Make sure that SDEV_NOSYNC abd SDEV_NOWIDE quirks are notKenneth R Westerback
inadvertantly set on devices for which they are irrelevant or incorrect. Lets these device operate at full speed. ok sthen@ deraadt@
2019-11-09+pipeanton
2019-11-09add pipe regress test suiteanton
2019-11-09Add support for active scan to bwfm(4). So far we only have donePatrick Wildt
passive scans, which works well enough as long as you don't use hidden networks. Even without hidden networks, using an active scan seems to be quicker and feels like it works better. ok stsp@
2019-11-09Move the hashed __retguard_* symbols into individual sections and markPhilip Guenther
them as COMDATs so that the linker can individually discard them, instead of just ignoring duplicate symbols but keep the (duplicate) space. On amd64, this reduces the size of the kernel OPENBSD_RANDOM segment by 82% and the libc OPENBSD_RANDOM segment by 15%. A port that tb@ is working on experienced a 97.3% reduction...which let it actually run. ok mortimer@ deraadt@
2019-11-09Retguard will start using sections named ".openbsd.randomdata.retguard.*"Philip Guenther
and not just ".openbsd.randomdata.retguard". Accept both in the kernel ldscripts so that they're placed together between the __retguard_{start,end} symbols. Similarly, match not just ".openbsd.randomdata" but also ".openbsd.randomdata.*" to pick up other random (pun intended) items. While here, stub in those retguard bits into all the ldscripts. ok deraadt@
2019-11-09Let mcount.o compile by ignoring a warning about the profile.h ASMPhilip Guenther
ok patrick@
2019-11-09Replace the hand-rolled pipe lock with a rwlock. A necessary first stepanton
towards unlocking pipes. ok cheloha@ mpi@ visa@
2019-11-09move NT eflag clearing after register saving, otherwise %eax isTheo de Raadt
corrupted with the eflags value. Found by julius zint. ok guenther
2019-11-09Forgot comment requested by deraadt in previous.Florian Obser
2019-11-09Add RTP_PROPOSAL_SOLICIT to allow unwind(8) to solicit DNS proposalsFlorian Obser
from slaacd and dhclient when it starts. Discussed with deraadt who notes that it's a bit odd to have this as a route priority. One idea is to have this as a dedicated route message and not a priority. But we want to move this forward and learn how it can be used so we are going with this for now. OK deraadt
2019-11-09Add lldb support for debugging running binaries on amd64.mortimer
Follows a similar model as NetBSD. Much help from patrick, kettenis and guenther. lldb and lldb-server remain not installed by default. ok patrick@
2019-11-09Mechanically change the forwarder SIMPLEQ to a TAILQ. Needed forFlorian Obser
future work to be able to easily delete elements while iterating. OK kn
2019-11-09Fix function name in error message.denis
input & OK claudio@
2019-11-09Add test for req -addext in appstest.shKinichiro Inoguchi
2019-11-09In the past, generating comment nodes stopped at the .TH or .DdIngo Schwarze
macro, which is usually close to the beginning of the file, right after the Copyright header comments. But espie@ found horrible input files in the textproc/fstrcmp port that generate lots of parse nodes before even getting to the header macro. In some formatters, comment nodes after some kinds of real content triggered assertions. So make sure generation of comment nodes stops once real content is encountered.
2019-11-09Shuffle sd_get_parms() logic to ensure we only update sc->params withKenneth R Westerback
a complete set of validated (possibly fictitious) data. Add SCSIDEBUG output showing mismatch between disksize and cyls * heads * sectors.
2019-11-09Give access points which fail to AUTH or ASSOC less priority duringStefan Sperling
the next selection of networks from the join list. Prevents endless attempts to connect to an AP which is out of reach but still somehow manages to get a beacon or two across to us during scan. Tested with wifi networks at the University of Bucharest. Makes switching wifi networks possible after walking to a different room without having to down/up the interface or suspend/resume. ok phessler@
2019-11-09Fix SCSIDEBUG display of VPD inquiry data.Kenneth R Westerback
Remove extraneous whitespace in SCSIDEBUG read capacity display.
2019-11-09Fix SCSIDEBUG display of VPD inquiry data.Kenneth R Westerback
Remove extraneous whitespace in SCSIDEBUG read capacity display.
2019-11-09Trigger a background scan when root runs the 'ifconfig scan' command.Stefan Sperling
This will update the list of cached APs for future invocations of the 'scan' command, and will force a search for a better AP to roam to. ok sthen@ phessler@
2018-04-06Import LLVM 6.0.1 release including clang, lld and lldb.Patrick Wildt
"where is the kaboom?" deraadt@
2017-10-04Import LLVM 5.0.0 release including clang, lld and lldb.Patrick Wildt
2019-11-09whitespace fixes, no functional change.David Gwynne
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-23 14:37:22 +0000