summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-11-05Reorder #includes to reduce diff between ping and ping6.Florian Obser
2015-11-05Mention ROTL() is always invoked with a proper shift value, due to the way theMiod Vallat
CAST_KEY is constructed. This is expected to reduce blood pressure in auditors.
2015-11-05Cleanup includes.Florian Obser
guenther@ and kettenis@ confirmed that while not strictly necessary on OpenBSD we should include both time.h and sys/time.h.
2015-11-05mergeStuart Henderson
2015-11-05update to unbound 1.5.6, ok millert@ florian@Stuart Henderson
2015-11-05mergeStuart Henderson
2015-11-05update to NSD 4.1.6, ok millert@ florian@Stuart Henderson
2015-11-05newfs the ext2fs partition containing the boot blocks with -O 1 when runningMiod Vallat
on the eBenton EBT700, for the PMON flavour found on these systems won't recognize the filesystem correctly otherwise; researched and reported by Ban Keong Yee.
2015-11-05Use include files "header.html" and "footer.html" rather than aIngo Schwarze
compiled-in string. This is not a security risk, we read the file manpath.conf from the same directory, anyway. No error handling is needed; even if the files are absent, that's not an error. This is more flexible without causing complication of the code or the user interface. It helps the upcoming revamp of the online manual pages on man.NetBSD.org. Based on an idea by Jean-Yves Migeon <jeanyves dot migeon at free dot fr>, but implemented in a much simpler way.
2015-11-05Make our initial pledge stricter once we figured out in which mode weFlorian Obser
are running. In batch mode we are only reading from stdin and writing to stdout. If no file is specified we are reading from stdin, writing to stdout and need to control the tty for readpassphrase. OK deraadt@ on an earlier version some time ago.
2015-11-05explicitly say that we use uio for our crypto operations; ok mikeb@Christian Weisgerber
2015-11-05Fix build with DEBUG_INTC defined; from Daniel Bolgheroni on tech@Miod Vallat
2015-11-05pledge(2) for slowcgi.Florian Obser
After initialization slowcgi accepts from a AF_UNIX socket, forks and execs. After fork we only need to close(2), chdir(2) and exec. OK benno@
2015-11-05re-shuffle slowcgi_listen to run less code as root.Florian Obser
OK benno@
2015-11-05Add blank lines around pledge call.mmcc
2015-11-05Capitalize entire macro name.mmcc
ok nicm@
2015-11-05Clean up an Xstring macro. Submitted by Theo Buehler.mmcc
ok and suggestions from nicm@
2015-11-05pledge(2) for httpd.Florian Obser
1) The main process listens on sockets and accepts connections. It creates and opens log files, creates and kills child processes. On start up and on receiving a HUP signal it parses the configuration. It passes on file descriptors for logging or requests to it's children. 2) The logger process writes log messages to a file descriptor passed in from the main process. 3) The server process reads the request from a file descriptor passed in from the main process. It reads a file or creates a directory index to send a response. Additionally this process handles fastcgi requests. It connects to AF_UNIX, AF_INET or AF_INET6 sockets. A re-factoring might make it possible to drop the additional fastcgi privileges when only static files are served. with deraadt@ some time ago prodding & OK deraadt@ tweaks and OK reyk@
2015-11-05Account for the header size when dealing with null link layer ifaces.Jeremie Courreges-Anglas
From Kevin Reay, ok sthen@
2015-07-16update to Unbound 1.5.4, ok florian@, looks sane deraadt@Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2011-09-16Import of Less 444Alexandr Shadchin
ok nicm@
2010-01-15NSD v3.2.4Jakob Schlyter
2003-04-13Stock less-390 with some unneeded DOS/Windoze files removedTodd C. Miller
1996-09-21Import of unmolested less-290.etheisen
2015-11-05simplify: use one stylesheet rather than two; from bentley@Ingo Schwarze
2015-11-05List the Huawei Mobile K4511; OK mpi@Tim van der Molen
2015-11-05allow "kill" from top, by using proc instead of idMarc Espie
(event though the documentation does not yet state that proc allows setpriority for renice) Problem found by me, tweak suggested by theo buehler Committed prompted by deraadt@
2015-11-05Update the internal wcwidth(3) table of tmux(1) to match the dataIngo Schwarze
in /usr/src/share/locale/ctype/en_US.UTF-8.src, with one single exception: Keep U+00AD SOFT HYPHEN at width 1 rather than moving it to width 0, a tradition already observed in the old https://www.cl.cam.ac.uk/~mgk25/ucs/wcwidth.c . While here, manually rebalance the btree for optimal lookup speed. OK nicm@
2015-11-05Fix the example "ls . |more"; from Frederic Nowak <fnwk at mailbox dot org>.Ingo Schwarze
While here, make it clear that `-' and `|' are only special in local, not in remote filenames. Probably, `|' support should be removed from ftp(1), but let's fix one thing at a time. OK jmc@
2015-11-05there is a retry path in here which contains rename() and fchown().Theo de Raadt
Use a slightly larger pledge, earlier on. from gregor best
2015-11-05for mice with wheels, check for W direction at AC Pan input used inJoshua Stein
some newer mice ok miod
2015-11-05revert sys/kern/kern_pledge.c 1.103 and reenable pledge in pwd_mkdbSebastien Marie
ok deraadt@
2015-11-05quick fix for a regression introduced by sys/kern/kern_pledge.c 1.103Sebastien Marie
ok benno phessler
2015-11-05tweak dependencies handling, might fix some infrequent bugs including theMarc Espie
infamous cups bug. - look for candidates in the whole new set first. Yep, that includes kept packages (should make things slightly faster, I expect) - correctly remove caching of list of installed packages outsides of old packages from the current set each time we revisit the set (looking at the old behavior this actually sounds very likely).
2015-11-05palmpilot should have gone when palm was added, it is redundant.Nicholas Marriott
2015-11-05Replace a sudo with ${SUDO}.Alexander Bluhm
2015-11-05Link arp regress into build.Alexander Bluhm
2015-11-05document the net.inet6.ip6.ifq variables in sysctl(3) as well, referring backStuart Henderson
to the 'struct ifqueue' description for net.inet.ip.ifq to reduce chance of them getting out of sync. ok logan, ok/tweak mikeb
2015-11-05document the other two net.inet6.ip6.ifq variables, ok logan mikebStuart Henderson
2015-11-05In in_arpinput() replace the loops over the interface addressesAlexander Bluhm
with route lookups. Check wether ARP sender or target protocol address is a local IP address. Remove the loop that checks wether any IPv4 address is configured on the receiving interface. input, test, OK mpi@
2015-11-05replace u_char and u_int* with standard stdint.h types to ease portable versionJoerg Jung
also remove trailing whitespaces while here no binary change ok sunil millert gilles
2015-11-05Correct my mistake in the previous patch:Loganaden Velvindron
net.inet6.ip6.ifq -> net.inet6.ip6.ifq.len Pointed out by Mike Belopuhov
2015-11-05Print unsigned integers as unsigned integers, kill inconsistent casts.Jeremie Courreges-Anglas
Initial diff by Kevin Reay.
2015-11-05Cap the GRE packet len to tcpdump's snap len, fixes a segfault.Jeremie Courreges-Anglas
From Kevin Reay, ok sthen@
2015-11-05When fetching the GRE version, use GRE_VERS and not a naked "7" as mask.Jeremie Courreges-Anglas
From Kevin Reay
2015-11-05Add an entry for net.inet6.ip6.ifq that dlg@ committed a while ago.Loganaden Velvindron
OK dlg@
2015-11-05Pass through right click if mouse is on, from Patrick Palka.Nicholas Marriott
2015-11-05apply some knf.David Gwynne
ok many no objections from anyone
2015-11-05spelling; from tjJason McIntyre
while here, knock out a double rcs id