summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-10-17PROTO_NORMAL for pledge(); ok guentherTheo de Raadt
2015-10-17login_token needs pledge "flock" now.Alexander Bluhm
OK millert@
2015-10-17makemap shout strip initial and trailing whitespaces using strip()Gilles Chehade
ok millert@, ok jung@
2015-10-17document handling of comments in makemapGilles Chehade
ok millert@, ok sunil@, ok jung@
2015-10-17Drop two useless defines.mmcc
ok nicm@
2015-10-17Add pledge "stdio unix sendfd proc exec tty" to tmux client process,Nicholas Marriott
"sendfd" is dropped after first message from the server.
2015-10-17Move a system header include from the global header (sh.h) into themmcc
files that need it. No binary change. "This looks fine" -nicm@
2015-10-17both of these are deprecatedGilles Chehade
2015-10-17Convert some fgetln to getline.Sunil Nimmagadda
tested and ok gilles@
2015-10-17Cleanup and simplify LMTP code.Sunil Nimmagadda
Ok millert@ gilles@
2015-10-17LMTP delivery requires "inet unix".Sunil Nimmagadda
Ok millert@ gilles@
2015-10-17make usage() less horribleFlorian Obser
2015-10-17Exit if a pledge call fails in non-interactive mode.Doug Hogan
ok semarie@
2015-10-17Pledge; OK millert@ tobias@Tim van der Molen
2015-10-17this file is deprecatedGilles Chehade
2015-10-17Change allocarray() to areallocarray(), a full reallocarray clone. Allmmcc
the logic is already in aresize(). "Sure" nicm@
2015-10-17remove unused variablesGilles Chehade
2015-10-17Copy alloc()'s overflow check to aresize().mmcc
Suggested by nicm@.
2015-10-17NUMBOOT is dead! Nuke the variables and abstractions that were usedKenneth R Westerback
to build boot blocks. ok miod@
2015-10-17Implement -w maxwait now that the -w flag is free in ping6. SameFlorian Obser
behaviour as ping(8).
2015-10-17Do no accept fds on the control socket; including the restricted socket.Reyk Floeter
OK gilles@ eric@
2015-10-17move -V option before -v and remove one spurious newline, now in syncFlorian Obser
with ping. No object change.
2015-10-17KNFGilles Chehade
2015-10-17our strip() function should use isspace()Gilles Chehade
ok jung@, ok millert@
2015-10-17Remove left over -N and -w. Adapt wording for the link local example.Florian Obser
Pointed out by, input & OK jmc
2015-10-17Tighten up snmpd's control socket: do not allow users to terminate theReyk Floeter
daemon by sending corrupted imsgs to snmpd. This is especially important for the optional world-writeable restricted socket that is used for AgentX. In particular, don't fatal() in the daemon when imsg size checks on control messages fail, do stricter validation of expected messages (even assert zero-length imsgs), don't continue and close the control socket on suspicious input, print a debug log message on error. OK gilles@ "the rationale behind it is quite clear"
2015-10-17Cleanup a bit.Robert Peichaer
OK krw@ halex@
2015-10-17add "tty" for several subcommands of opensslSebastien Marie
it is needed in order to let libssl UI_* function plays with echo on/off when asking for password on terminal. passwd subcommand needs additionnal "wpath cpath" in order to let it calls fopen("/dev/tty", "w") (O_WRONLY with O_CREAT | O_TRUNC). problem reported by several with and ok doug@
2015-10-17The file(1) magic-parsing process was using pledge "stdio getpw proc recvfd"Theo de Raadt
early on, then a set of getpwnam/setresuid/... before quickly dropping to "stdio recvfd". It receives fd's and runs the magic code on them in a chroot'd "stdio" jail. We can do better than that. Before the recent change, "proc" contained both the concepts of "forking" and "setuid". "id" is now split out as a seperate request, and it is exactly what this process needs momentarily. So this loses another window of opportunity, in case we have a major bug in .... hmm, it'd have to be in getpwnam.... ok tedu doug semarie gilles
2015-10-17smtpd starts rather robustly with a gigantic pledge request group (keepTheo de Raadt
in mind that a gigantic group is already < ~50% of POSIX). It then grinds these down bit by bit as it sets up privsep for the various processes. At startup, smtpd will need the new "id" request as well. ok gilles tedu
2015-10-17Add pledge "id" support. This request permits setuid/seteuid/setresuid,Theo de Raadt
setgid/setegid/setresgid, setgroups, setlogin, and setpriority. setrlimit and getpriority are also allowed (they are also in "proc") some of these were previously permitted in "proc" but have been removed. this seperation is intentional. "proc" is intended for reasoning about the relationship of a process "with other processes", whereas "id" deals the powerful/dangerous concept of unix ids. "id" will see some action very soon. ok gilles tedu semarie doug
2015-10-17route6d pledges to use only "stdio rpath wpath cpath inet route mcast"Jeremie Courreges-Anglas
ok deraadt@
2015-10-17Allow a few 'get' ioctls for pledge("route"). route6d will soon use this.Jeremie Courreges-Anglas
ok deraadt@
2015-10-17don't need fcntl for non blocking socket, just ask for it upfrontTed Unangst
2015-10-17Very tricky diff to fix macro interpretation and spacing around tabsIngo Schwarze
in .Bl -column; it took me more than a day to get this right. Triggered by a loosely related bug report from tim@. The lesson for you is: Use .Ta macros in .Bl -column, avoid tabs, or you are in for surprises: The last word before a tab is not interpreted as a macro (unless there is a blank in between), the first word after a tab isn't either (unless there is a blank in between), and a blank after a tab causes a leading blank in the respective output cell. Yes, "blank", "tab", "blank tab" and "tab blank" all have different semantics; if you write code relying on that, good luck maintaining it afterwards...
2015-10-16Change x_do_ins()'s arg type from int to size_t for correctness's sake,mmcc
and to silence a compiler warning. Also remove its prototype, which is directly above its definition. ok tedu@
2015-10-16Move the overflow check to alloc() so that the link struct overhead canmmcc
never bite us. Suggested by Theo Buehler, inspired by Bitrig's natano@. ok tedu@
2015-10-16use daemon(), jca had the same diff in his treeTheo de Raadt
2015-10-16Also allow 6 as a miblen for NET_RT_DUMP, not all users specify a rtable.Jeremie Courreges-Anglas
ok deraadt@
2015-10-16pledge "stdio rpath wpath cpath getpw fattr flock"Theo de Raadt
2015-10-16pledge "stdio rpath wpath cpath fattr proc exec"Theo de Raadt
2015-10-16pledge "stdio rpath wpath cpath proc exec".Theo de Raadt
2015-10-16Remove RFC 4620 support. The RFC is experimental and this code plainFlorian Obser
needs killing before the installed user base excedes 6. Minus 745 LOC. This is getting in the way of a merge since it has it's tentacles all over the place. OK jca@, deraadt@
2015-10-16increase the minimum modulus that we will send or accept inDamien Miller
diffie-hellman-group-exchange to 2048 bits; ok markus@
2015-10-16Hoist clearing of FIOASYNC to much earlier, then getty can useTheo de Raadt
pledge "stdio rpath fattr proc exec tty".
2015-10-16Once apropos(1) or man(1) are done with database access, or if theIngo Schwarze
program was called as mandoc(1) in the first place, remove "flock" from our pledge(2) before entering the parsers and formatters. OK millert@ deraadt@
2015-10-16Use SSL_get_version() not SSL_get_cipher_version(); the former gives the TLSStuart Henderson
version used for the connection, the latter gives "the SSL/TLS protocol version that first defined the cipher". Fixes "TLS version=TLSv1/SSLv3" in received/log lines. ok millert@ "I was going to commit this today, so yes definitely" ok gilles@
2015-10-16add flock to pledge request, needed by delivery_filenameGilles Chehade
ok millert@
2015-10-16Unbreak route6d.Jeremie Courreges-Anglas
Instead of breaking sendmsg(2) by adding unneeded space to its cmsg item, add space to the cmsg used by recvmsg(2), where it will be used to get the incoming packet hop limit. Reported by several over the last years, and more recently by 'bsdsx', who tested it against NetBSD route6d. Also works against Quagga ripng. ok deraadt@ sthen@
2015-10-16save some file descriptors. instead of a pipe, use kevent to watch parentTed Unangst
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-15 08:59:58 +0000