Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-06-10 | fix fatal() when performing address matching and connection is | Damien Miller | |
not on socket; spotted by & ok dtucker@ | |||
2008-06-10 | We have a cvs_buf_puts implementation now, also use cvs_buf_putc instead | Tobias Stoeckmann | |
of cvs_buf_append where appropiate. ok joris | |||
2008-06-10 | Add extended test mode (-T) and connection parameters for test mode (-C). | Darren Tucker | |
-T causes sshd to write its effective configuration to stdout and exit. -C causes any relevant Match rules to be applied before output. The combination allows tesing of the parser and config files. ok deraadt djm | |||
2008-06-10 | add the -O option to run an external script when the "other | Reyk Floeter | |
configuration" flag is found in the RA message. it basically means "here is your IPv6 address, but run something like DHCPv6 to get more information". so the main purpose is to run a dhcpv6 client to get DNS etc. Merged from KAME ok rainer@ | |||
2008-06-10 | When copying stuff from code that runs with interrupts enabled to code | Kenneth R Westerback | |
that may run without interrupts, don't forget to add scsi_autoconf to the flags and POLL for the result rather than wait for an interrupt that will never come. Fixes Dale's Iomega Jazz drive on the ahc here, and no doubt many other device combinations. | |||
2008-06-10 | If we encounter an error during expanding line of a trigger file, print an | Tobias Stoeckmann | |
actually useful error message. ok joris | |||
2008-06-10 | theo and ryan and I like to scare people | Henning Brauer | |
2008-06-10 | Rename access macros so that they match the driver name. | Joel Sing | |
ok dlg@ | |||
2008-06-10 | in verbose mode indicate which states are sloppy, ryan reyk theo | Henning Brauer | |
2008-06-10 | new state option "sloppy" to use the sloppy tcp state tracker instead | Henning Brauer | |
of the good one. ok theo ryan reyk | |||
2008-06-10 | in pf_test_state_icmp when trying tomatch icmp errors to tcp sessions | Henning Brauer | |
do not verify the sequence number against the state if the state is sloppy and thus doesn't have that information. independently pointed out by frantzen and ryan, ok ryan | |||
2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer | |
numbers at all. scary consequences; only tobe used in very specific situations where you don't see all packets of a connection, e. g. asymmetric routing. ok ryan reyk theo | |||
2008-06-10 | better reference for pattern-list | Damien Miller | |
2008-06-10 | append "- Imported sources" for imports. | Joris Vink | |
2008-06-10 | support CIDR address matching in sshd_config "Match address" blocks, with | Damien Miller | |
full support for negation and fall-back to classic wildcard matching. For example: Match address 192.0.2.0/24,3ffe:ffff::/32,!10.* PasswordAuthentication yes addrmatch.c code mostly lifted from flowd's addr.c feedback and ok dtucker@ | |||
2008-06-10 | newly added directories need "- New directory" to be passed to the | Joris Vink | |
loginfo script. ok tobias@ | |||
2008-06-10 | For IPv6 addresses, return the first 32 bits of the MD5 hash of the | Christian Weisgerber | |
address as ref ID (RFC4330). ok henning@ | |||
2008-06-10 | According to the latest SNTPv4 spec in RFC4330, secondary servers | Christian Weisgerber | |
return the address of the synchronization source as reference identification. Remove the obsolete special casing specified in RFC2030. ok henning@ | |||
2008-06-10 | pass the basename(3) for file_path to the script, so we do not get | Joris Vink | |
weird double modules names in the logs; | |||
2008-06-10 | add missing arg to .Fn | Otto Moerbeek | |
2008-06-10 | newly added files should pass "NONE" for their initial revision, unbreaks | Joris Vink | |
more scripts that depend on this. | |||
2008-06-10 | reorder functions and variables in rnd.c so they are more logically | Damien Miller | |
arranged. They are now layed out in four sections: 1. Master entropy pool maintenance (add_entropy_words & extract entropy) 2. Entropy crediting (add_*_randomness backend) 3. Exported kernel API: arc4random() and friends 4. /dev/*random char devices | |||
2008-06-10 | sync | Theo de Raadt | |
2008-06-10 | All your memory belong to us. This has been in snaps for a while, | Tobias Weingartner | |
and seems to work. If it breaks, people had plenty of chances to complain. ok deraadt@ | |||
2008-06-10 | Fix obvious off-by-one in macro loop. From Marc Butler via debian | Kjell Wooding | |
2008-06-10 | loginfo allows 't' as well - unbreaks certain loginfo scripts. | Joris Vink | |
2008-06-10 | Don't spawn editor for log message on server-side if no log message has | Tobias Stoeckmann | |
been supplied as argument by client. ok joris | |||
2008-06-10 | missing header | Joris Vink | |
2008-06-10 | style | Joris Vink | |
2008-06-10 | New trigger framework that allows us to run the required scripts | Joris Vink | |
defined in CVSROOT/commitinfo and CVSROOT/loginfo and so on. This enables the use of log_accum2 and all that other nice stuff we like. This was mostly written by Jonathan Armani with help from tobias@ and myself. ok tobias@ | |||
2008-06-10 | Additionnal checks on the file names supplied for -s and -x. | Pierre-Yves Ritschard | |
Based on a diff by ajacoutot@, ok jdixon@ and sthen@ on a previous diff, ok ajacoutot@. | |||
2008-06-10 | correctly setup the tty line for NMEA devices, especially turn off echo | Marc Balmer | |
to the device. found by ckuethe, fixed and tested with ckuethe | |||
2008-06-10 | Remove copyright notices and put these files back into the public domain. | Kjell Wooding | |
ok art | |||
2008-06-10 | Add cmp(4), a dummy driver to make attaching CMT cpus easier. | Mark Kettenis | |
2008-06-09 | - add a sanity check on tarballs name to ensure we're not feeding | Antoine Jacoutot | |
sysmerge with unrelated sets ok sthen@ pyr@ jdixon@ | |||
2008-06-09 | unused var | Joris Vink | |
2008-06-09 | Update access(2) to have modern semantics with respect to X_OK and | Todd C. Miller | |
the superuser. access(2) will now only indicate success for X_OK on non-directories if there is at least one execute bit set on the file. OK deraadt@ thib@ otto@ | |||
2008-06-09 | log already gets it FILE_UNKNOWN warning spewed out from cvs_file_classify, | Joris Vink | |
so do not mention it again in cvs_log_local(); | |||
2008-06-09 | Don't play games with the PCD interrupt. It delays the detection of | Mark Kettenis | |
connect/disconnect events. From NetBSD. ok deraadt@ | |||
2008-06-09 | sync | Theo de Raadt | |
2008-06-09 | Don't reverence slattach(8) or nmeaattach(8) in a comment. | Marc Balmer | |
2008-06-09 | Remove an arch-specific API that wasn't available in the first place, and | Peter Hessler | |
will be converted to a more generic one soon. ok deraadt, oga | |||
2008-06-09 | - encourage people to use the same source as was used to upgrade system | Antoine Jacoutot | |
binaries so that some etc files don't get forgotten in the process discussed with kurt@ tweaks and ok jmc@ | |||
2008-06-09 | Make gcc on alpha use -mieee by default. This fixes many FPE problems | Michael Erdely | |
with several ports on alpha and does not produce a significant slowdown. Suggestion to patch gcc directly from millert@ Diff and ok from miod@ ok pvalchev@, martin@, deraadt@ | |||
2008-06-09 | simplify math for arc4random_uniform() suggested by | Damien Miller | |
Jinmei_Tatuya AT isc.org via jakob@ empirically verified for entire domain of upper_bound | |||
2008-06-09 | simplify math for arc4random_uniform() suggested by | Damien Miller | |
Jinmei_Tatuya AT isc.org via jakob@ empirically verified for entire domain of upper_bound | |||
2008-06-09 | - move the "this app is deprecated" blurb to the start, where it's more | Jason McIntyre | |
likely to be read - sort SEE ALSO | |||
2008-06-09 | zap trailing whitespace; | Jason McIntyre | |
2008-06-09 | warn once not 3 times in case of a non existent file, discussed with deraadt | Todd T. Fries | |
originally pointed out by Johan Torin | |||
2008-06-09 | drop root privileges in rtadvd to _rtadvd | Rainer Giedat | |
ok deraadt@, reyk@, pyr@ |