Age | Commit message (Expand) | Author |
2015-10-02 | Curve25519 is now specified in draft-ietf-ipsecme-safecurves-00 (along | Reyk Floeter |
2015-10-02 | make a && && & block more readable. no binary change. | Theo de Raadt |
2015-10-02 | I see no evidence that lstat() is being done for /etc/resolv.conf, nor | Theo de Raadt |
2015-10-02 | kern_tame.c | Theo de Raadt |
2015-10-02 | update the -t args list; ok guenther | Jason McIntyre |
2015-10-02 | use limits.h instead of sys/param.h to get PATH_MAX | Theo de Raadt |
2015-10-02 | avoid sys/param.h, by using PATH_MAX | Theo de Raadt |
2015-10-02 | regen | Mark Kettenis |
2015-10-02 | RFC7634 specifies ChaCha20-Poly1305 for IKEv2 and IPsec and IANA | Reyk Floeter |
2015-10-02 | Revert previous commit; something is not quite right yet in the bowels of uvm | Mark Kettenis |
2015-10-02 | Remove MD5 from the default proposals. At least SHA1 seems to be the | Reyk Floeter |
2015-10-02 | If the policy certreqtype is 0, use the global one instead. | Reyk Floeter |
2015-10-02 | fix email | Theo de Raadt |
2015-10-02 | missing ) in COMPAT_LINUX block | Theo de Raadt |
2015-10-02 | Add another invalid time, which is currently accepted. | Joel Sing |
2015-10-02 | Make 'pfctl -s all' show queues. pfctl(8) says it does, and 5.4 | Kenneth R Westerback |
2015-10-02 | replace vxlan port number by its official service name; while here, | Igor Sobrado |
2015-10-02 | Flense the greasy black guts of unreadble string parsing code out of three areas | Bob Beck |
2015-10-02 | s/ssl3_client_kex/ssl3_send_client_kex/ for consistency with the caller. | Joel Sing |
2015-10-02 | Talk about 'RADIUS server' in most cases, rather than referring specifically | Stuart Henderson |
2015-10-02 | Adopt smtpd's imsg_read_nofd() to mitigate the risk of user-injected | Reyk Floeter |
2015-10-02 | Replace %s in the format string, with its value (macro). | Alexandre Ratchov |
2015-10-02 | use macros for cookie path and temp file template instead | Alexandre Ratchov |
2015-10-02 | add a comment above the rfc1948 code that mentions the rfc so it's easy to find | Ted Unangst |
2015-10-02 | Validate that midi and audio device numbers are integers. | Alexandre Ratchov |
2015-10-02 | As device path is known, use its size instead of PATH_MAX | Alexandre Ratchov |
2015-10-02 | Use macros for audio and midi device paths rather than hardcoded | Alexandre Ratchov |
2015-10-02 | As the socket path is known, use its size rather that PATH_MAX. | Alexandre Ratchov |
2015-10-02 | fix typo in debug message | Alexandre Ratchov |
2015-10-02 | fix typo. | Igor Sobrado |
2015-10-02 | typos. | Igor Sobrado |
2015-10-02 | fix typo. | Igor Sobrado |
2015-10-02 | use macros instead of hard-coded strings for unix sockets paths | Alexandre Ratchov |
2015-10-02 | fix spacing | Alexandre Ratchov |
2015-10-02 | remove unused DEFAULT_OPT macro | Alexandre Ratchov |
2015-10-02 | add missing El; | Jason McIntyre |
2015-10-02 | zap an unneccessary Ev; from michael reed | Jason McIntyre |
2015-10-02 | Actually, open of /etc/spwd.db must be handled by returning EPERM, not | Theo de Raadt |
2015-10-02 | Add ktracing of argv and envp to execve(2), with envp not traced by default | Philip Guenther |
2015-10-02 | Controller for the recently imported eigrpd(8) daemon. | Renato Westphal |
2015-10-02 | Welcome eigrpd | Renato Westphal |
2015-10-02 | mention these pathname calls are checked in namei | Theo de Raadt |
2015-10-02 | remove some debug printf no longer needed | Theo de Raadt |
2015-10-02 | changed my mind; block spwd.db, force drop-through to pwd.db for processes un... | Theo de Raadt |
2015-10-02 | a sandbox using tame | Theo de Raadt |
2015-10-02 | re-order system calls in order of risk, ok i'll be honest, ordered this | Theo de Raadt |
2015-10-02 | oh no, a KERBEROS lefover; from Ilya Kaliman | Theo de Raadt |
2015-10-02 | detect that a certificate chain will not fit in imsg calls before passing | Gilles Chehade |
2015-10-02 | in secure_file(), make uid checking on .forward files more strict to avoid | Gilles Chehade |
2015-10-02 | prevent users from playing hardlink/symlink/mkfifo games with their offline | Gilles Chehade |