summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-10-20allow SO_ERROR all the timeTheo de Raadt
2015-10-20syncTheo de Raadt
2015-10-20Replace a function-local allocation with stack memory.mmcc
ok djm@
2015-10-20In order to become able to generate syntax tree nodes on the roff(7)Ingo Schwarze
level, validation must be separated from parsing and rewinding. This first big step moves calling of the mdoc(7) post_*() functions out of the parser loop into their own mdoc_validate() pass, while using a new mdoc_state() module to make syntax tree state handling available to both the parser loop and the validation pass.
2015-10-20Always allow the setsockopt & getsockopt system calls... however, in theTheo de Raadt
default case only allows SOL_SOCKET SO_RCVBUF which is very common in network-facing daemons. Many of them manage this on a socket after dropping abilities which can get them _new_ sockets.. syslogd, bgpd, relayd, etc etc. Other sockopts still require specific pledges. Tested by bluhm.
2015-10-19Remove old tame() stubTheo de Raadt
2015-10-19Add pledge(2) for radiusctl(8) and radiusd(8).YASUOKA Masahiko
- radiusd: "stdio inet" - radiusd_radius: "stdio inet" - radiusd_bsdauth: - "stdio proc" for the non-priviledged process - "stdio getpw rpath proc exec" for the priviledged process - radiusctl: "stdio dns inet" "go ahead" deraadt
2015-10-19break long lines in examples; ok jmc@Christian Weisgerber
2015-10-19Test syslogd logging to a tty which belongs to a user. This isAlexander Bluhm
done with a utmp entry for a pty fake login. All messages are read from the pty and written into a log file.
2015-10-19style cleanup, no functional changeIngo Schwarze
2015-10-19Enable some code that does power management magic.Mark Kettenis
2015-10-19Simplify, no functional change:Ingo Schwarze
Delete the outmdoc, outman, and outfree function pointers.
2015-10-19Properly restore the prefetchable memory window upon resume.Mark Kettenis
ok deraadt@
2015-10-19Add parenthesis gcc wants and remove defined but unused label gccKenneth R Westerback
complains about. ok deraadt@ on parethesis
2015-10-19Delete the empty example file "ftpchroot"; no example is needed.Ingo Schwarze
Move the one useful bit of information contained in the file ("one user name per line") to the ftpd(8) manual page where it belongs. OK deraadt@ sthen@
2015-10-19LABELSECTOR is a DEV_BSIZE quantity. So multiply by DEV_BSIZE and notKenneth R Westerback
d_secsize when calculating disklabel location. ok jsing@
2015-10-19Nuke unused variable.Kenneth R Westerback
2015-10-19including <ohash.h> requires including <stdint.h> beforehand;Ingo Schwarze
noticed by Svyatoslav Mishyn <juef at openmailbox dot org>
2015-10-19pledge "stdio exec proc" early on, setpriority, then pledge "stdio exec"Theo de Raadt
from Theo Buehler
2015-10-19free rbio before wbioBob Beck
ok jsing@
2015-10-19missing deref on char check. from David BindermanTed Unangst
2015-10-19Remove the define NOT, replace it with '!'. No binary change.mmcc
"The ^ is used in regular expressions and many versions of fnmatch(3) accept both ! and ^. However, we are never going to accept ^ instead of ! so I think this makes sense" -millert@ "go for it" -nicm@
2015-10-19A little style(9) for sh.h includesmmcc
ok nicm@
2014-08-20Run syslogd regressions tests. As only one syslogd can run perAlexander Bluhm
machine, each test kills any syslogd first. At the end the system's syslogd gets restarted. The test framework runs a client, and a server, and a syslogd. The messages are passed via the log socket or via UDP from the client to syslogd. From there UDP transport is used to reach the server. All processes write log files where the message has to show up. The test arguments are kept in the args-*.pl files. The content of a log file, the data sent to a pipe process and what the server received are checked. The invocation of the sendsyslog(2) syscall is checked with ktrace, the open file descriptors of syslogd are checked with fstat.
2015-10-19Stop supporing "legcay" time formats that OpenSSL supports. Rewrite theBob Beck
utctime and gentime wrappers accordingly. Along with some other cleanup. this also removes the need for timegm. ok bcook@ sthen@ jsing@
2015-10-19Change regress to not believe legacy times are validBob Beck
2015-10-19Allow setpriority in "proc" as well, since a few shells have "nice"Theo de Raadt
builtin. make a note that setpriority() should be weakened, unless "id" is also present. pointed out by Theo Buehler
2015-10-19Move stddef.h include from sh.h to the file that uses it.mmcc
ok nicm@
2015-10-19Move string.h include from sh.h to the files that use it.mmcc
ok nicm@
2015-10-19fix memory leaks in error pathsJonathan Gray
ok renato@
2015-10-19Revert transfer submission to r1.85. Seems to make okan@'s scannerMartin Pieuchot
work properly.
2015-10-19Move limits.h include from sh.h to the files that actually need it. Nommcc
binary change. ok nicm@
2015-10-19More removal of EXTERN.mmcc
ok nicm@
2015-10-19Print vnode type for sendfd/recvfd not file type, ok semarieNicholas Marriott
2015-10-19Stop checking for RTF_UP directly, call rtisvalid(9) instead.Martin Pieuchot
While here add two missing ``rtableid'' checks in in6_selectsrc(). ok bluhm@
2015-10-19Stop checking for RTF_UP directly, call rtisvalid(9) instead.Martin Pieuchot
While here add a missing ``rtableid'' check in in_selectsrc(). ok bluhm@
2015-10-19Sync rtisvalid(9) check for local route entries with r1.257 ofMartin Pieuchot
net/ip_input.c
2015-10-19Remove superfluous NULL checks.Martin Pieuchot
ifa are refcounted to ensure that rt_ifa is always valid.
2015-10-19optarg and optind are declared by unistd.hJeremie Courreges-Anglas
2015-10-19Add err.h, missing after pledge() introduction.Jeremie Courreges-Anglas
2015-10-19Fix control_imsg_forward() by changing imsg_compose() toReyk Floeter
imsg_compose_event(). This was done by pyr@ in relayd/control.c -r1.32 (2009/06/05, ok eric@) but somehow didn't slip into other daemons that imported control.c.
2015-10-19Remove the ikev1 stub - Since I started iked, it has an empty privsepReyk Floeter
process for ISAKMP+IKEv1. I kept it to let somebody either contribute the old protocol one day, I never intended to implement IKEv1 myself, or to add a new kind of pipe to isakmpd to hand off IKEv1 messages. As IKEv2 is widely supported by all major OS and networking vendors now, I'm happy to scrap the idea of supporting ISAKMP+IKEv1. It is still possible to use isakmpd for legacy VPNs. OK mikeb@
2015-10-19Remove a duplicated '#include <stdio.h>' line.YASUOKA Masahiko
2015-10-19Fix control_imsg_forward() by changing imsg_compose() toReyk Floeter
imsg_compose_event(). This was done by pyr@'s in relayd/control.c -r1.32 (2009/06/05, ok eric@) but somehow didn't slip into other daemons that imported control.c.
2015-10-19Print control socket client fd in debug message to differentiate betweenReyk Floeter
control connections. Helps to debug problems.
2015-10-19Kill whitespace at eol.Sunil Nimmagadda
Ok gilles@
2015-10-19deduplicate in[6]_pcbbind() port scan loop.Vincent Gross
ok mpi@
2015-10-19Avoid a NULL dereference when getgrnam_r() returns NULL for `result'.YASUOKA Masahiko
2015-10-19Update etc/mtree/BSD.x11.dist (freetype-2.6.1)David Coppa
2015-10-19Call tzset() before dropping the priviledge to use correct timezone.YASUOKA Masahiko