summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-12-17Add display brightness support. This is available on the last few generationsMark Kettenis
of Thinkpads (x220 and later) and using means the brightness level is coordinated properly with the firmware. This gets rid of the surprising brightness changes that would sometimes happen if you used the brightness keys or if the firmware decided to reset the brightness level for some other reason. ok tedu@, jung@, naddy@
2015-12-17Implement a memory barrier for mips. Basically this makes __sync_synchronize()Mark Kettenis
emit a "sync" instruction. ok visa@
2015-12-17Missing include, spotted by benoit@Martin Pieuchot
2015-12-17Move vcpu register state init to vmd. Allows vmd bootloader to make theMike Larkin
decision as to how the vcpu should be set up for initial start and reset. Also removes some hardcoded register constants from vmm(4). ok jsing@, mpi@
2015-12-17Use config_mountroot(9) instead of startuphook_establish(9).Martin Pieuchot
Fix a regression reported by Ian Mcwilliam on tech@
2015-12-17Replace 'arc4random() % (2^k - 1)' by 'arc4random() & (2^k - 1)' totb
avoid modulo bias. Part of a diff by Matthew Martin, reviewed by deraadt@ and me. ok deraadt@
2015-12-17Add missing $OpenBSD$ tags.tb
2015-12-17Replace arc4random() % i by arc4random_uniform(i) to avoid modulo bias.tb
Part of a diff by Matthew Martin, reviewed by deraadt@ and me. ok deraadt@
2015-12-16send-keys -R should reset the input parser to ground state (so it can beNicholas Marriott
used to escape from, for example, printf '\033]2;').
2009-10-15import of gcc-4.2.1, the last gcc release under GPLv2Robert Nagy
2015-12-16Add infrastructure to work out the best target given a pane or windowNicholas Marriott
alone and use it to add pane_died and pane_exited hooks.
2015-12-16showenv and setenv need to be CANFAIL.Nicholas Marriott
2015-12-16change the kqueue backend to call kevent() as events are added insteadTed Unangst
of deferring until the dispatch loop. kqueue support for various types of files and filesystems has been historically incomplete, and kevent handles this condition by returning an error. the libevent dispatch loop has no way to recover from this error and fails catastrophically, bringing down the entire process because one file went bad. now, instead of all that happending, event_add will return an error. the application can choose to handle or ignore this error, but at least the band will play on. ok nicm
2015-12-16Remove modulo bias in random number generator.tb
Diff from Matthew Martin, rewieved by deraadt@ and me. ok deraadt@, millert@
2015-12-16Remove the solbourne entries now that all its code is gone.mmcc
ok deraadt@
2015-12-16Add _sndiop user and group for (future) privileged sndiod process.Alexandre Ratchov
ok deraadt
2015-12-16tweak previous;Jason McIntyre
2015-12-16documents pledge(2) "dpath" promiseSebastien Marie
with inputs from jmc@ ok jmc@ deraadt@
2015-12-16Remove support for HOSTALIASES from the resolver. This "open and parseTheo de Raadt
any file indicated by an environment variable" feature inside the resolver is incompatible with what pledge "dns" is trying to be. It is a misguided "feature" added way back in history which almost noone uses, but everyone has to assume the risk from. ok eric florian kettenis
2015-12-16in pledged process, setuid/setgid/sticky bits should be ignored.Sebastien Marie
enforce it for open(2) when used with O_CREAT and mode. ok deraadt@
2015-12-16Don't attempt to get the ThinkLight state if neither the KLCG nor the MLCGMark Kettenis
methods are present. Should fix the panic that occurs on older ThinkPads (such as the x201) when you press the ThinkLight key.
2015-12-16Refactor umass_detach() in order to pass a size to free(9).Martin Pieuchot
Based on a diff from Mathieu <naabed AT poolp DOT org>.
2015-12-16clean up some unused variables, and add the printing of the certificate validityBob Beck
to the verbose output when using tls - from rob@2keys.ca ok mmcc@ jsing@ deraadt@
2015-12-16Avoid grabbing the kernel lock in uvm_unmap() if we have an interrupt-safeMark Kettenis
map. This removes the (hopefully) last case in which pool_put() might try to grab the kernel lock for interrupt-safe pools. Note that pools that are created with the PR_WAITOK flag will still grab the kernel lock. ok mpi@, tedu@
2015-12-16Use __progname instead of hand-rolled parsing of argv[0].tb
Inspired by similar diffs by tobias@ and millert@. "I like the concept" pjanzen@ ok tedu@
2015-12-16Add pexp match otherwise rcctl stop vmd doesn't work. OK deraadt@James Turner
2015-12-16Use __progname instead of hand-rolled parsing of argv[0].tb
Inspired by similar diffs by tobias@ and millert@. "I like the concept" pjanzen@ ok tedu@
2015-12-16Adding mark messages to log files was broken since OpenBSD 5.7.Alexander Bluhm
The mark timeout event is not persistent, add the timer intervall everytime it fires. Bug report, analysis and fix from Einfach Jemand rru.142 at gmail.com
2015-12-16Merge rtable_mpath_select() into rtable_match().Martin Pieuchot
This allow us to get rid of one more "rt_node" usage with ART. ok jmatthew@
2015-12-16Don't forget about monitor mode while building the ifmedia listStefan Sperling
for 802.11n capable wireless drivers. ok mpi@
2015-12-16in pledged process, setuid/setgid/sticky bits should be ignored.Sebastien Marie
enforce it for mkfifo(2) and mknod(2) (with "dpath" promise). ok deraadt@
2015-12-16Replace "tame" by "pledge" in a comment.tb
2015-12-15less macro and linesJoerg Jung
ok millert
2015-12-15ignore unlikely temperature values like -127 degCJoerg Jung
2015-12-15add 2 more temperature keys found in macbook pro (10,2)Joerg Jung
found via key dump diff, run by Bryan Vyhmeister also remove 3 temperature keys which likely do not return useful values verified with help from macbook pro output of tb (4,1 and 5,5), kettenis (12,1), and Cristoph R. Murauer (9,1) via misc@
2015-12-15add commented-out unbound.conf entries for dns64 (sitting in my tree and ok'dStuart Henderson
some time ago by phessler and IIRC also mikeb), and for qname-minimisation
2015-12-15Remove "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary CertificationStuart Henderson
Authority" (serial 3c:91:31:cb:1f:f6:d0:1b:0e:9a:b8:d0:44:bf:12:be) root certificate from cert.pem. ok rpe@ Symantec/VeriSign say "Browsers/root store operators are encouraged to remove/untrust this root from their root stores" and "hasn't been used to generate new certificates in several years, and will now be repurposed to provide transition support for some of our enterprise customers' legacy, non-public applications" (https://www.symantec.com/page.jsp?id=roots, http://www.scmagazine.com/google-will-remove-trust-of-symantecs-pca3-g1-certificate/article/459688/). Also see https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=ALERT1941 https://googleonlinesecurity.blogspot.co.uk/2015/12/proactive-measures-in-digital.html
2015-12-15add more temperature keys found in newer macbook airs (6,1 and 7,2)Joerg Jung
encountered via key dump diff, run by Bryan Vyhmeister
2015-12-15update to Unbound 1.5.7, looks fine to deraadt@.Stuart Henderson
Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
2015-12-15make sure the read fan description is always nul terminatedJoerg Jung
hint from kettenis
2015-12-15Cleanup: pwd.h is no longer needed.tb
2015-12-15Replace 'arc4random() % range' by 'arc4random_uniform(range)'.tb
Do this by introducing atcrandom_uniform(range) which returns deterministic randomness or good randomness depending on whether a seed was specified with the -r option. Diff by Matthew Martin, reviewed by deraadt@ and me. ok deraadt@
2015-12-15Include RFC number in reference. While here, improve formatting of anotherTim van der Molen
reference.
2015-12-15Document /var/db/mountdtabTim van der Molen
2015-12-15When (re)reading /etc/exports, handle the case where the mount point of anTim van der Molen
export is not also the mount point of a local filesystem. In this case, the local filesystem would not be removed from the "unexport list", causing the export to be "unexported" again. This fix then also allows us to actually delete an export that has been removed from /etc/exports, by passing the MNT_DELEXPORT export flag to mount(2). Makes sense to millert@.
2015-12-15missing space in previous;Jason McIntyre
2015-12-15pledge(2) style:Ingo Schwarze
Make sure to always use the idiom 'if (pledge("' such that it can easily be searched for. No functional change. Requested by deraadt@ some time ago.
2012-08-23update to unbound 1.4.18Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-12-15Revert the previous commit; the licencing needs to be checked very carefully.Ingo Feinerer
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-01 10:40:52 +0000