summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-08-23Assign the filter name to the proc name in the case of proc_exec.Martijn van Duren
This gives a more intuitive log-entry for filter stderr output and gets rid of the last_dynproc_id. "nice" gilles@
2019-08-23syncTheo de Raadt
2019-08-23Honour -n when setting entrieskn
Just like avoiding reverse lookups when printing entries or not resolving hostnames when deleting entries, make -n effect setting entries as well; just like pfctl(8)'s -N from which the manual wording was copied verbatim. OK deraadt
2019-08-23only process records of the expected type.Eric Faurot
fix an issue where CNAME records generate bogus results. ok gilles@
2019-08-23document RSAPrivateKey_dup(3) and RSAPublicKey_dup(3)Ingo Schwarze
2019-08-23explain in a simpler way when the default is -r and when it is -s;Ingo Schwarze
triggered by a very different patch from Rashad Kanavath; OK florian@
2019-08-23Use -delete in EXAMPLESkn
-delete is part of POSIX since 2001 and tedu added support for it in 2012, -print0 however never made it into any standard, so replace this less portable idiom with its more concise built-in counterpart. Both -print0 as well as xargs(1) -0 explain and reference each other and CAVEATS goes into detail with problematic file names, so no information is lost by replacing this particular example. While here, make the -exec example rm(1) multiple files at once. Feedback from claudio tb Input and OK millert
2019-08-23document X509_get1_email(3), X509_get1_ocsp(3), X509_email_free(3)Ingo Schwarze
2019-08-23martijn@ found a regression so revert to the old behavior for nowEric Faurot
2019-08-23Default layout for disklabel(8) has changed, /usr became larger.Alexander Bluhm
Adjust expected values in test. reminded by Moritz Buhl
2019-08-23document X509_dup(3)Ingo Schwarze
2019-08-23vmctl(8): fix wrong output when using 'vmctl stop'Mike Larkin
Fix a wrong output when using 'vmctl stop' without any further arguments. Patch from Caspar Schutijser, thanks! ok deraadt
2019-08-23res_hnok() is too lenient wrt to acceptable domain name in mail addresses.Eric Faurot
replace it with a valid_domainname() check that implements something closer to RFC 5321, but still usable in real-life. ok gilles@ millert@
2019-08-23syncanton
2019-08-23update tradcpp to 0.5.3Jonathan Gray
2019-08-23regenJonathan Gray
2019-08-23add Intel 100 Series LP eMMC/SDXC from fkrJonathan Gray
add Intel WHL-U Host ids
2019-08-22T10/BSR INCITS 503 (SPC-5) is apparently a thing. UpdateKenneth R Westerback
version_to_spc() to map the formerly reserved value 0x07 in the INQUIRY version field to 5 (a.k.a. SPC-5), instead of 0 (a.k.a. device does not claim support for any SPC version). Tweak comment for 0x03 mapping to note it means compliance to SPC, not SPC-3. Tweak comment for 0x06 mappoing to specify the ANSI INCITS 513-2005 that documents SPC-4.
2019-08-22Test did not compile due to missing symbols. Add source sshbuf-misc.cAlexander Bluhm
to regress as it was done in ssh make file. from Moritz Buhl
2019-08-22Define the new verbose variable also in the regression sources soAlexander Bluhm
that the test programs link with the rpki-client object files again. from Moritz Buhl
2019-08-22GC some old stuffMarc Espie
okay millert@
2019-08-22Replace hand-rolled errors with warn(3)kn
"Looks good" deraadt millert
2019-08-22Don't check _TTP for io windows.Mark Kettenis
ok patrick@, jsg@
2019-08-22spelling fix and zap a stray line while here;Jason McIntyre
2019-08-22document X509_check_purpose(3)Ingo Schwarze
2019-08-22do pci_intr_disestablish() and bus_space_unmap() calls if ↵miko
auich_alloc_cdata() fails; ok ratchov@
2019-08-22unused variable, after previous commitTheo de Raadt
2019-08-21syncTheo de Raadt
2019-08-21sysctl(2): add kern.utc_offset: successor to the DST/TIMEZONE options(4)cheloha
The DST and TIMEZONE options(4) are incompatible with KARL, so we need some other way to compensate for an RTC running with a known offset. Enter kern.utc_offset, an offset in minutes East of UTC. TIMEZONE has always been minutes West, but this is inconsistent with how everyone else talks about timezones, hence the flip. TIMEZONE has the advantage of being compiled into the binary. Our new sysctl(2) has no such luck, so it needs to be set as early as possible in boot, from sysctl.conf(5), so we can correct the kernel clock from the RTC's local time to UTC before daemons like ntpd(8) and cron(8) start. To encourage this, kern.utc_offset is made immutable after the securelevel(7) is raised to 1. Prompted by yasuoka@. Discussed with deraadt@, kettenis@, yasuoka@. Additional testing by yasuoka@. ok deraadt@, yasuoka@
2019-08-21Remove cdrom mentionDaniel Jakots
ok espie@
2019-08-21Lower syspugrade timeout to 30 minuteskn
The previous mechanism used a single timeout for the entire upgrade which was kept when introducing the per-set watchdog. Half an hour now seems more sensible to safely catch the biggest sets on slow hardware, so avoid needlessly stalling (failed) upgrades for too long. OK sthen deraadt
2019-08-21Fix a race in invalidation of remote TLB entries.Visa Hankala
If a CPU updates a pmap concurrently with the activation of that pmap on another CPU, invalidation of TLB entries might be incomplete. It is also possible that a CPU altogether stops updating its TLB. Prevent the race by synchronizing pmap activations and logic that determines where to send TLB invalidation IPIs. To avoid mutex wait without ability to process IPIs, the context switch code is adjusted to call pmap_activate() with interrupts enabled. In practice, interrupts up to IPL_SCHED are still disabled on context switch.
2019-08-21 Remove support for semantically opace interface identifiers (RFC 7217)Florian Obser
for IPv6 link local addresses. Some hosting and VM providers route customer IPv6 prefixes to link local addresses derived from ethernet MAC addresses (RFC 2464). This leads to hard to debug IPv6 connectivity problems and is probably not worth the effort. RFC 7721 lists 4 weaknesses: 3.1. Correlation of Activities over Time & 3.2. Location Tracking These are still possible with RFC 7217 addresses for an adversary connected to the same layer 2 network (think conference wifi). Since the link local prefix stays the same (fe80::/64) the link local addresses do not change between different networks. An adversary on the same layer 2 network can probably track ethernet MAC addresses via different means, too. 3.3. Address Scanning & 3.4. Device-Specific Vulnerability Exploitation These now become possible, however, as noted above a layer 2 adversary was probably able to do this via different means. People concerned with these weaknesses are advised to use ifconfig lladdr random. OK benno input & OK kn
2019-08-21Bump /usr on big auto-allocation table; ok krw@ sthen@ phessler@Otto Moerbeek
2019-08-21Add simple amdgpu pci id devlist for the ramdisk to determine ifJonathan Gray
aperture is needed. Skip SI/CIK ids as we don't build amdgpu with SI/CIK support (radeondrm covers these) and skip VEGA20 ids we don't match on as they are flagged AMD_EXP_HW_SUPPORT.
2019-08-20Trailing whitespace.Kenneth R Westerback
2019-08-20Network-based device paths use Messaging and not Media types. ThusPatrick Wildt
in reality the depth was always -1 which made the compare function a No-Op. Properly check the device path depth value and look for the Messaging type instead to find the correct NIC. This check never worked before and was uncovered by the last change. Regression noticed by bluhm@
2019-08-20Use the defines DETACH_FORCE and DETACH_QUIET when constructing a valueKenneth R Westerback
that will end up in config_detach() flags via scsi_detach_target(). ok jmatthew@ dlg@
2019-08-20Enable ipmi(4).Mark Kettenis
ok deraadt@
2019-08-20Adjust manpage. Document -t tal and the new output argument. Also removeClaudio Jeker
some of the comments for sections that will never ever be used here.
2019-08-20Change the arguments to rpki-client a bit. Instead of listing all TAL filesClaudio Jeker
as arguments rpki-client will now load the TAL installed in /etc/rpki by default. For debug reasons an option -t tal is added to pass in TAL files by hand. The argument is now instead the filename of the output file. Now `rpki-client roa.conf` will do what you need which is a lot nicer. Agreed by deraadt@ job@ to be a step in the right direction.
2019-08-20scsi_probe_bus() always returns 0. Nobody but scsi_probe() evenKenneth R Westerback
pretended to care. So just make in a void, and explicitly return 0 in the appropriate case in scsi_probe().
2019-08-20New manual page X509_cmp(3) documenting the same public functionsIngo Schwarze
as in OpenSSL 1.1.1. I rewrote most of the text for clarity, precision, and conciseness and added some additional information. A few sentences from Paul Yang remain.
2019-08-20Add static_ASN1_* macroKinichiro Inoguchi
- Add static_ASN1_* macro. Patch was provided by steils AT gentoo.org
2019-08-20- more no longer accepts random less commandsJason McIntyre
- history trim - sundry diff from evan silberman; tweaked/ok by schwarze and deraadt
2019-08-20fix error reporting, specifically having two repos on the same site mayMarc Espie
lead to one repo closing handles from the other to avoid DoS, as exemplified by stable-packages. okay sthen@
2019-08-20shrink using new mechanismsMarc Espie
2019-08-20two simple scripts to shrink package generationMarc Espie
2019-08-20use wrapper module instead of rolling our ownMarc Espie
2019-08-20remove old cdrom=... propertyMarc Espie
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 15:29:14 +0000