summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-07-01Put SO_PEERCRED into the non-flag areaTheo de Raadt
suggested by guenther
2010-07-01support dumping the new SADB_X_EXT_TAP extension.Reyk Floeter
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
traffic for this SA will appear on the specified enc interface instead of enc0 and can be filtered and monitored separately. This will allow to group individual ipsec policies to virtual interfaces and simplifies monitoring and pf filtering with many ipsec policies a lot. This diff includes the following changes: - Store the enc interface unit (default 0) in the TDB of an SA and pass it to the enc_getif() lookup when running the bpf or pf_test() handlers. - Add the pfkey SADB_X_EXT_TAP extension to communicate the encX interface unit for a specified SA between userland and kernel. - Update enc(4) again to use an allocate array instead of the TAILQ to lookup the matching enc interface in enc_getif() quickly. Discussed with many, tested by a few, will need more testing & review. ok deraadt@
2010-07-01syncTheo de Raadt
2010-07-01compat_o43 and compat_23 are no longer optionsTheo de Raadt
2010-07-01We have to add enc0 to the "enc" interface group manually on boot.Reyk Floeter
Adopted from the loop lo0 code.
2010-07-01compat_o43 and compat_23 can dieTheo de Raadt
2010-07-01turn off COMPAT_O43Theo de Raadt
2010-07-01Simplified aml_parse_resource call, cleanup codeJordan Hargrave
ok marco
2010-07-01Fix subordinate bus # for multi-root PCI busesJordan Hargrave
ok marco, kettenis
2010-07-01Add a look-up table for machines that have special vga cards. This table willPaul Irofti
tell, based on vendor/product/subvendor/subproduct ids, how the video reposting should be done: via the emulator or the bios video call in locore. The default is to do none of those, which is how most machines work. Okay kettenis@, deraadt@.
2010-07-01if you want usenet archives from 1985, you'll have to look elsewhereTed Unangst
2010-07-01More accurate comment as to what happens with acpi_savecpuMike Larkin
ok deraadt@
2010-07-01Add checks that we're not adding immutable attributes, just as we'reMartin Hedenfal
disallowing modifying immutable attributes. Remove the check for modifying operational attributes, as there's nothing that disallows that (except that they're also often marked as immutable). While here, check the return value from ber_add_* and ldap_add_attribute.
2010-07-01remove crappy old README filesTed Unangst
2010-07-01any TODO containing the item "Use lock manager locks." is provably wrong.Ted Unangst
ok dlg
2010-07-01libkeynote development has been paused for a while. ok deraadtTed Unangst
2010-07-01Add things to enable aesni either ifdef'ed or commented out to easeThordur I. Bjornsson
testing. Note: aesni is not in a usable state yet! OK deraadt@
2010-07-01I'm not sure where this TODO comes from, but it contains such exciting liesTed Unangst
as "should run as a user process"
2010-07-01the only thing left on the raidframe TODO list is to go awayTed Unangst
2010-07-01another osf1 reference hiding outTed Unangst
2010-06-30allow uppercase A-F in the uid inputAlexander Hall
ok krw@ jsing@
2010-06-30we don't need to add a localhost route for our hostname address, our arpPeter Hessler
code is smarter these days. a side effect of this was noticed by reyk@ OK claudio@ henning@
2010-06-30Make 'fdisk -i' start the OpenBSD partition on a power of 2 512-byteKenneth R Westerback
block boundary. In most modern (i.e. 'faked' geometry) situations this will start it at (0-based) block[64] rather than block[63] as now. This should help performance on disks which really have 4K sectors but report 512-byte sectors. Power of 2 idea from deraadt@. ok toby@ deraadt@
2010-06-30Disable/partially backout the bufq quiesce changes as thisThordur I. Bjornsson
is causing havoc with vnds and release must be buildable.
2010-06-30This comment is unnecessarily confusing.Artur Grabowski
2010-06-30syncPeter Hessler
2010-06-30add Realtek RTL8171Peter Hessler
from Brad
2010-06-30Set a default btree cache size.Martin Hedenfal
2010-06-30Make it possible to store multiple LSP to a FEC. This is another step toClaudio Jeker
handle multipath routes in MPLS. Looks good to michele@
2010-06-30Silence the activation debug reporting. We are starting to get worriedTheo de Raadt
that there are interactions when we print in the various (saved, post-saved, pre-restored, and restored) vga states, especially with how intel drm is getting involved. If your machine has issues, you may want to activate these messages again to help debug things better. ok mlarkin
2010-06-30Merge from NetBSD: "Linux's getsid(2) does in fact return a pid,Philip Guenthe
not a pointer." So just use the native implementation. ok deraadt@
2010-06-30Don't prune page cache directly when adding to it. Fixes a crash with aMartin Hedenfal
zero cache-size. found by william@
2010-06-30Don't compact and reindex referral namespaces.Martin Hedenfal
2010-06-30Add a test for route labels, re PR6416. ok phessler@Stuart Henderson
2010-06-30make the disklabel editor not crash when pressing ^D in the uid promptAlexander Hall
ok krw@
2010-06-30style nitThordur I. Bjornsson
2010-06-30remove a compat_osf1 fileTed Unangst
2010-06-30delete compat_osf1Ted Unangst
2010-06-30remove compat_osf1. ok deraadt miodTed Unangst
2010-06-30delete osf1 compat filesTed Unangst
2010-06-30timeout_add -> timeout_add_msecBret Lambert
ok jakemsr@, who promises to deal with any fallout, because he's a stand-up guy
2010-06-30remove compat_osf1 support from the kernelTed Unangst
ok deraadt miod
2010-06-30This needs sys/sysctl.h to compile.Claudio Jeker
2010-06-30Change the example for the 'include' keyword as schema files are no longerMartin Hedenfal
included that way. pointed out by william@
2010-06-30Remove the ``never cache virtual addresses in the DVMA range'' inMiod Vallat
pv_changepte4m() since DVMA addresses are never loaded in the SRMMU; this chunk was forgotten in the previous `don't steal DVMA out of kernel_map on 4m' commit.
2010-06-30improve error reporting:Ingo Schwarze
* avoid error exit code after mere warnings * add ERROR: and FATAL: to messages when appropriate * sort the code in mmsg() to make it easier on the eye * make the mandocerrs[] list easier to maintain * update a few comments in mandoc.h ok kristaps@
2010-06-30revert last ^D behaviour changeAlexander Hall
requested and well explained by krw@
2010-06-30knf function decleration nit.Thordur I. Bjornsson
2010-06-30Add getsockopt SOL_SOCKET SO_PEERCRED support. This behaves similar toTheo de Raadt
getpeereid(2), but also supplies the remote pid. This is supplied in a 'struct sockpeercred' (unlike Linux -- they showed how little they know about real unix by calling theirs 'struct ucred'). ok guenther ajacoutot