summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-06-10fix fatal() when performing address matching and connection isDamien Miller
not on socket; spotted by & ok dtucker@
2008-06-10We have a cvs_buf_puts implementation now, also use cvs_buf_putc insteadTobias Stoeckmann
of cvs_buf_append where appropiate. ok joris
2008-06-10Add extended test mode (-T) and connection parameters for test mode (-C).Darren Tucker
-T causes sshd to write its effective configuration to stdout and exit. -C causes any relevant Match rules to be applied before output. The combination allows tesing of the parser and config files. ok deraadt djm
2008-06-10add the -O option to run an external script when the "otherReyk Floeter
configuration" flag is found in the RA message. it basically means "here is your IPv6 address, but run something like DHCPv6 to get more information". so the main purpose is to run a dhcpv6 client to get DNS etc. Merged from KAME ok rainer@
2008-06-10When copying stuff from code that runs with interrupts enabled to codeKenneth R Westerback
that may run without interrupts, don't forget to add scsi_autoconf to the flags and POLL for the result rather than wait for an interrupt that will never come. Fixes Dale's Iomega Jazz drive on the ahc here, and no doubt many other device combinations.
2008-06-10If we encounter an error during expanding line of a trigger file, print anTobias Stoeckmann
actually useful error message. ok joris
2008-06-10theo and ryan and I like to scare peopleHenning Brauer
2008-06-10Rename access macros so that they match the driver name.Joel Sing
ok dlg@
2008-06-10in verbose mode indicate which states are sloppy, ryan reyk theoHenning Brauer
2008-06-10new state option "sloppy" to use the sloppy tcp state tracker insteadHenning Brauer
of the good one. ok theo ryan reyk
2008-06-10in pf_test_state_icmp when trying tomatch icmp errors to tcp sessionsHenning Brauer
do not verify the sequence number against the state if the state is sloppy and thus doesn't have that information. independently pointed out by frantzen and ryan, ok ryan
2008-06-10implement a sloppy tcpstate tracker which does not look at sequenceHenning Brauer
numbers at all. scary consequences; only tobe used in very specific situations where you don't see all packets of a connection, e. g. asymmetric routing. ok ryan reyk theo
2008-06-10better reference for pattern-listDamien Miller
2008-06-10append "- Imported sources" for imports.Joris Vink
2008-06-10support CIDR address matching in sshd_config "Match address" blocks, withDamien Miller
full support for negation and fall-back to classic wildcard matching. For example: Match address 192.0.2.0/24,3ffe:ffff::/32,!10.* PasswordAuthentication yes addrmatch.c code mostly lifted from flowd's addr.c feedback and ok dtucker@
2008-06-10newly added directories need "- New directory" to be passed to theJoris Vink
loginfo script. ok tobias@
2008-06-10For IPv6 addresses, return the first 32 bits of the MD5 hash of theChristian Weisgerber
address as ref ID (RFC4330). ok henning@
2008-06-10According to the latest SNTPv4 spec in RFC4330, secondary serversChristian Weisgerber
return the address of the synchronization source as reference identification. Remove the obsolete special casing specified in RFC2030. ok henning@
2008-06-10pass the basename(3) for file_path to the script, so we do not getJoris Vink
weird double modules names in the logs;
2008-06-10add missing arg to .FnOtto Moerbeek
2008-06-10newly added files should pass "NONE" for their initial revision, unbreaksJoris Vink
more scripts that depend on this.
2008-06-10reorder functions and variables in rnd.c so they are more logicallyDamien Miller
arranged. They are now layed out in four sections: 1. Master entropy pool maintenance (add_entropy_words & extract entropy) 2. Entropy crediting (add_*_randomness backend) 3. Exported kernel API: arc4random() and friends 4. /dev/*random char devices
2008-06-10syncTheo de Raadt
2008-06-10All your memory belong to us. This has been in snaps for a while,Tobias Weingartner
and seems to work. If it breaks, people had plenty of chances to complain. ok deraadt@
2008-06-10Fix obvious off-by-one in macro loop. From Marc Butler via debianKjell Wooding
2008-06-10loginfo allows 't' as well - unbreaks certain loginfo scripts.Joris Vink
2008-06-10Don't spawn editor for log message on server-side if no log message hasTobias Stoeckmann
been supplied as argument by client. ok joris
2008-06-10missing headerJoris Vink
2008-06-10styleJoris Vink
2008-06-10New trigger framework that allows us to run the required scriptsJoris Vink
defined in CVSROOT/commitinfo and CVSROOT/loginfo and so on. This enables the use of log_accum2 and all that other nice stuff we like. This was mostly written by Jonathan Armani with help from tobias@ and myself. ok tobias@
2008-06-10Additionnal checks on the file names supplied for -s and -x.Pierre-Yves Ritschard
Based on a diff by ajacoutot@, ok jdixon@ and sthen@ on a previous diff, ok ajacoutot@.
2008-06-10correctly setup the tty line for NMEA devices, especially turn off echoMarc Balmer
to the device. found by ckuethe, fixed and tested with ckuethe
2008-06-10Remove copyright notices and put these files back into the public domain.Kjell Wooding
ok art
2008-06-10Add cmp(4), a dummy driver to make attaching CMT cpus easier.Mark Kettenis
2008-06-09- add a sanity check on tarballs name to ensure we're not feedingAntoine Jacoutot
sysmerge with unrelated sets ok sthen@ pyr@ jdixon@
2008-06-09unused varJoris Vink
2008-06-09Update access(2) to have modern semantics with respect to X_OK andTodd C. Miller
the superuser. access(2) will now only indicate success for X_OK on non-directories if there is at least one execute bit set on the file. OK deraadt@ thib@ otto@
2008-06-09log already gets it FILE_UNKNOWN warning spewed out from cvs_file_classify,Joris Vink
so do not mention it again in cvs_log_local();
2008-06-09Don't play games with the PCD interrupt. It delays the detection ofMark Kettenis
connect/disconnect events. From NetBSD. ok deraadt@
2008-06-09syncTheo de Raadt
2008-06-09Don't reverence slattach(8) or nmeaattach(8) in a comment.Marc Balmer
2008-06-09Remove an arch-specific API that wasn't available in the first place, andPeter Hessler
will be converted to a more generic one soon. ok deraadt, oga
2008-06-09- encourage people to use the same source as was used to upgrade systemAntoine Jacoutot
binaries so that some etc files don't get forgotten in the process discussed with kurt@ tweaks and ok jmc@
2008-06-09Make gcc on alpha use -mieee by default. This fixes many FPE problemsMichael Erdely
with several ports on alpha and does not produce a significant slowdown. Suggestion to patch gcc directly from millert@ Diff and ok from miod@ ok pvalchev@, martin@, deraadt@
2008-06-09simplify math for arc4random_uniform() suggested byDamien Miller
Jinmei_Tatuya AT isc.org via jakob@ empirically verified for entire domain of upper_bound
2008-06-09simplify math for arc4random_uniform() suggested byDamien Miller
Jinmei_Tatuya AT isc.org via jakob@ empirically verified for entire domain of upper_bound
2008-06-09- move the "this app is deprecated" blurb to the start, where it's moreJason McIntyre
likely to be read - sort SEE ALSO
2008-06-09zap trailing whitespace;Jason McIntyre
2008-06-09warn once not 3 times in case of a non existent file, discussed with deraadtTodd T. Fries
originally pointed out by Johan Torin
2008-06-09drop root privileges in rtadvd to _rtadvdRainer Giedat
ok deraadt@, reyk@, pyr@