summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-07-12Automatically load the required pf rules into the kernel of theAlexander Bluhm
remote test machine.
2014-07-12reboot(9), panic(9): Call panic(9) for unrecoverable MD H/W errors (NMIs)Masao Uebayashi
Some architectures have ability to detect hardware sanity and notify system (NMI, firmware callback, etc.). Handle these hardware severe errors, same as software errors, with panic(9). According to miod@, SGI IP27 NMI is triggered by pushing some "hidden" button, which "usual" users/admins don't know. Pushing such a button is "RB_USERREQ" (human-triggered) in that the button is pushed by a human, but not "RB_USERREQ" in that no user intervention in system (== no command input) is done. miod@ agreed that changing these from RB_USERREQ to !RB_USERREQ (== panic(9)) is not a big problem. OK miod@ kettenis@
2014-07-12The correct name for EDH is DHE, likewise EECDH should be ECDHE.Joel Sing
Based on changes to OpenSSL trunk. ok beck@ miod@
2014-07-12some basic formatting fixes;Jason McIntyre
2014-07-12No need to include asn1_mac.h here.Miod Vallat
2014-07-12remove double brackets. fixes build with clang.Jonathan Gray
ok jsing@
2014-07-12don't check_security on newer *after* making sure the set doesn't haveMarc Espie
errors. Note that the errors are already signaling enough (conflicts, bad package etc)... And not having any errors mean we actually have proper plists. problem noticed by zhuk@
2014-07-12egsum -> examplessumAntoine Jacoutot
2014-07-12egsum -> examplessum to make it more obvious.Antoine Jacoutot
req. by deraadt@
2014-07-12Simplify checksum generation for sysmerge.Antoine Jacoutot
no objection from deraadt@
2014-07-12Add in missing brswphy(4) and the commented out USB entries.Brad Smith
ok pirofti@
2014-07-12uyap: your call has been disconnectedTed Unangst
2014-07-12"Dr. Jones. Again we see there is nothing you can possess which I cannotTed Unangst
take away." remove uyap. no effect except on hppa where it was strangely enabled.
2014-07-12move getchar() into libsa where applicableJasper Lievisse Adriaanse
ok miod@
2014-07-12Build kernels at -O2 instead of -Os, as done for userland and on all otherMiod Vallat
architectures. ok deraadt@
2014-07-12Fix the last commit by proper dereferencing the disklabel partition.Paul Irofti
Found by me, fixed by krw@. Thanks!
2014-07-12syncTheo de Raadt
2014-07-12Teach these pf regress tests to run with obj directory and to failAlexander Bluhm
softly if the setup is incomplete. Link them to the build.
2014-07-12Add devel/cmake bits (rotted in my tree for more than a year) and a shortVadim Zhukov
description of x11/kde4 variables. Everyone is welcome to extend&improve. okay espie@
2014-07-12Kill the last dumb DVACT_DEACTIVATE handlers.Martin Pieuchot
2014-07-12Refactor out dosigsuspend() functionMatthew Dempsky
Discussed with guenther and kettenis
2014-07-12Remove this sentence:Miod Vallat
``The probability that a randomly generated key is weak is -1/2^52, so it is not really worth checking for them.'' This kind of naively optimistic attitude is not compatible with security.
2014-07-12Fix USB connect freeze by clearing the host port interrupt.Paul Irofti
Connects and disconnects have no affect on the machine, just like before this driver came into existence. While at it check for a few more interrupt types.
2014-07-12Resize the pcb hashtable automatically. The table size will be doubledYASUOKA Masahiko
when the number of the hash entries reaches 75% of the table size. ok dlg henning, 'commit in' claudio
2014-07-12Log a warning whenever RTM_DESYNC is seen. Thus giving entrailKenneth R Westerback
investigators some clue why dhclient may have gotten confused when some RTM_ messages vanish. sthen@ thinks this is a good start.
2014-07-12revert a few stragglers hiding outTed Unangst
2014-07-12Use a saner and consistent address layout for my network tests thatAlexander Bluhm
run over 4 machines. Add a check-setup target to verify that interface addresses and routes are properly set up.
2014-07-12teduuuuuudfu(4) it has never been enabled in 5 years.Martin Pieuchot
ok tedu@, deraadt@
2014-07-12revert more free falloutTed Unangst
2014-07-12more MLINKSMiod Vallat
2014-07-12getentropy on Windows. It compiles but has not been thoroughly tested yet.wouter
OK: beck@
2014-07-12Remove signed/unsigned warning, statement before declaration andwouter
add a function to use function pointers that does not take sizeof(fptr). OK beck@
2014-07-12zap trailing whitespace;Jason McIntyre
2014-07-12Oops. Correct variable name more likely to compile.Kenneth R Westerback
2014-07-12We have EVP_CIPH_FLAG_DEFAULT_ASN1 in evp.h; no need to keep constructs toMiod Vallat
build on pre-EVP_CIPH_FLAG_DEFAULT_ASN1 codebases. ok jsing@
2014-07-12- replace main() with mips_init() so we can save the arguments from uboot toJasper Lievisse Adriaanse
pass it to the kernel later on. also use it to get the clock frequency. - implement getsecs() so the bootprompt timeout works input/ok miod@ pirofti@
2014-07-12Calculate i/o starts and sizes in 'proper' sectors rather assumingKenneth R Westerback
512-byte sectors. Unlikely to affect CF's in the near future. ok pirofti@
2014-07-12add guards to just make available to the bootblocks what they need.Jasper Lievisse Adriaanse
prompted by miod@
2014-07-12tedu another bunch of DVACT_DEACTIVATE handlers that do nothing but setMartin Pieuchot
the 'dying' flag.
2014-07-12reboot(9): Shutdown system by signaling init(8) from kernel where appropriateMasao Uebayashi
Some ports watch temperature in MD and try to shutdown system, when overheated, by calling directly (re)boot(9). Change this to signal init(8) from kernel, as acpi(4) and acpitz(4) do, which has been more tested. This also helps to clarify design that ``clean shutdown must be always started by init(8)''. Note that SIGUSR2 causes init(8) to call reboot(2) with RB_POWERDOWN, as acpi(4) etc. already does. It is reasonable, pointed out by kettenis@, considering system is overheated and immediate reboot may be dangerous. OK deraadt@ miod@
2014-07-12Close connections when msgbuf_write() returns 0.Kenneth R Westerback
ok claudio@
2014-07-12Protect the freelists of transfer descriptors with the appropriate splMartin Pieuchot
so that we do not end up allocating two times new descriptors. This happens if a thread finds an empty list, start allocating, got interrupted and the interrupt also finds an empty list. Fix an issue reported by Nils Frohberg. ok yuo@, pirofti@
2014-07-12Remove private_{Camellia,RC4}_set_key FIPS indirection tentacles, as has beenMiod Vallat
done for other symmetric algorithms recently.
2014-07-12Mark the interface down and cancel the watchdog timer in imxenet_stop().Brad Smith
ok matthieu@ rapha@
2014-07-12Fix a potential bug. privsep.c didn't check the interface nameYASUOKA Masahiko
correctly if it's pppx.
2014-07-12oh well, remove -Q entirely... I'm probably the only one who ever used that.Marc Espie
2014-07-12ewps, that giant table has -inet6 twice, for SMALL and !SMALLHenning Brauer
no breakage involved, but wasn't correct in the SMALL case either
2014-07-12WhitespacePaul Irofti
2014-07-12security check in quirksMarc Espie
2014-07-12undocument -QMarc Espie