summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-07-13- differentiate between join and nwidJason McIntyre
- remove some duplication between them - document -join - sort ok phessler
2018-07-13make this use ssh_proxy rather than starting/stopping a daemon forDamien Miller
each testcase
2018-07-13fix leaks in unit test; with this, all unit tests are leak freeDamien Miller
(as far as valgrind can spot anyway)
2018-07-12we will be toggling witness on/off a few times. when it is on, it raisesTheo de Raadt
awareness of problems. when it is off, development cycles are faster. let's do the faster cycle for a little while. discussion with naddy
2018-07-12syncTheo de Raadt
2018-07-12store and print the rdomain of the interfaces we see.Sebastian Benoit
ok phessler@ henning@
2018-07-12if we couldn't update the clock for ~1h due to lack of data from peers andHenning Brauer
sensors, mark us unsynced again. ok reyk krw, pt out / discussion / help naddy
2018-07-12missing .Ek;Jason McIntyre
2018-07-12Cleanup and clarify getuint64() by using theKenneth R Westerback
same functions as auto-allocation. parse_sizespec() and apply_unit(). No intentional functional change. Looked good to tb@
2018-07-12Cleanup and clarify the has_overlap() logic so it can be read byKenneth R Westerback
normal people and is more efficient to boot. The only intentional functional change was to use mergesort() instead of heapsort() so that partitions with the same offset retain their order in the emitted verbiage. Looked good to tb@, ok kn@
2018-07-12RTM_CHGADDRATTR for route monitorFlorian Obser
OK phessler, benno, claudio
2018-07-12Introduce RTM_CHGADDRATTR to inform userland on the route socket whenFlorian Obser
an attribute of an address is changed. For now it's used when IPv6 duplicate address detection finishes. With this slaacd(8) can find out if a configured address is not duplicated without the need to poll. OK phessler, benno, claudio
2018-07-12Introduce ipsec_output_cb() to merge duplicate code and account forMartin Pieuchot
dropped packets in the output path. While here fix a memory leak when compression is not needed w/ IPcomp. ok markus@
2018-07-12unbreak i386 build, thanks to pd@ for noticing. Same diff as I committedMike Larkin
earlier for amd64
2018-07-12zap an extra newlineMike Larkin
2018-07-12The vmctl start -I option was changed to -t.Reyk Floeter
I committed the manpage but accidentally forgot the main.c part. OK ccardenas@
2018-07-12Add a function to delete all nodes with a specific name.Mark Kettenis
Add a function to determine the size of a machine description.
2018-07-12trade few 'goto unlock: for 'break' in pf_test()Alexandr Nedvedicky
OK mpi@, OK henning@, OK jca@
2018-07-12Unbreak the nmi handler (again): I placed INTR_CLEAR_GPRS in the wrongPhilip Guenther
place and GS.base was horked on return. Also, the frame passed to ddb didn't have the %rbp<-->tf_err swap, which would have confused backtraces. Now if we can just come up with a way to automate testing the NMI handler with qemu...
2018-07-12- introducing _Q_INVALID to sys/queue.hAlexandr Nedvedicky
OK @bluhm, OK @otto, OK @guenther
2018-07-12Reorganize the Meltdown entry and exit trampolines for syscall andPhilip Guenther
traps so that the "mov %rax,%cr3" is followed by an infinite loop which is avoided because the mapping of the code being executed is changed. This means the sysretq/iretq isn't even present in that flow of instructions in the kernel mapping, so userspace code can't be speculatively reached on the kernel mapping and totally eliminates the conditional jump over the the %cr3 change that supported CPUs without the Meltdown vulnerability. The return paths were probably vulnerable to Spectre v1 (and v1.1/1.2) style attacks, speculatively executing user code post-system-call with the kernel mappings, thus creating cache/TLB/etc side-effects. Would like to apply this technique to the interrupt stubs too, but I'm hitting a bug in clang's assembler which misaligns the code and symbols. While here, when on a CPU not vulnerable to Meltdown, codepatch out the unnecessary bits in cpu_switchto(). Inspiration from sf@, refined over dinner with theo ok mlarkin@ deraadt@
2018-07-12fix Test 7.1 after main.c rev. 1.37;Ingo Schwarze
breaking the output lines earlier with the 'l' command is intentional
2018-07-12Add support for rdomains.remi
small quirk from tb@ ok phessler@
2018-07-12Remove cases for 1-bit and 4-bit color depths in efifb_ioctl(), as weFrederic Cambus
basically can't run in those modes. OK kettenis@
2018-07-12Stop building rasops4 on amd64.Frederic Cambus
It was pulled in for efifb, but it is extremely unlikely an EFI system supporting only 4-bit color depth (16 colors) exists. Even if it existed though, on SMALL_KERNEL rasops4_putchar() simply returns EAGAIN so it would not be possible to install the system. For the record, we do not build rasops4 on i386 or on any of our other platforms either. OK kettenis@, mpi@
2018-07-12Use (mostly) the same capitalisation in the replacement string as inFlorian Obser
the replaced string: replacing foo with bar turns foo Foo FOO into bar Bar BAR OK phessler, benno
2018-07-12symlinks make my cry.. thanks robert.. don't you care about my feelings?Bob Beck
2018-07-12With the "depend on" option routes are sent out with a metric of 65535 ifremi
the referenced interface is down or in state backup. This is especially useful on a carp cluster to ensure all traffic goes to the carp master. ok friehm@ jca@
2018-07-12Allow to use configured/running VMs as templates for other VM instances.Reyk Floeter
This introduces new grammar and the -t optional in vmctl start. (For now, only root can create VM instances; but it is planned to allow users to create their own VMs based on permissions and quota.) OK ccardenas@ mlarkin@ jmc@
2018-07-12Add regress test for realpath and modify behavior appropriatelyBob Beck
2018-07-12zap a blank lineMike Larkin
2018-07-12vmm(8)/vmm(4): send a copy of the guest register state to vmd on exit,Mike Larkin
avoiding multiple readregs ioctls back to vmm in case register content is needed subsequently. ok phessler
2018-07-12rc(8) infrastructure for radFlorian Obser
2018-07-12hook up rad(8) and ractl(8) to the buildFlorian Obser
2018-07-12use _rad userFlorian Obser
2018-07-12Add _rad user and group for rad(8).Florian Obser
This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom.
2018-07-12Instead of having a button for printing the driver(s) attached to a USBMartin Pieuchot
device, do it when invoked with '-v'. While here recycle '-d' to specify a specific device node, like pcidump(8) does. ok jca@, sthen@
2018-07-12synch documentation with reality, noticed by landry@Marc Espie
2018-07-12syncookies never is the default; from paul de weerdJason McIntyre
ok henning
2018-07-12remove prototype to long-gone functionDamien Miller
2018-07-12Add hw.ncpuonline to count the number of online CPUs.cheloha
The introduction of hw.smt means that logical CPUs can be disabled after boot and prior to suspend/resume. If hw.smt=0 (the default), there needs to be a way to count the number of hardware threads available on the system at any given time. So, import HW_NCPUONLINE/hw.ncpuonline from NetBSD and document it. hw.ncpu becomes equal to the number of CPUs given to sched_init_cpu() during boot, while hw.ncpuonline is equal to the number of CPUs available to the scheduler in the cpuset "sched_all_cpus". Set_SC_NPROCESSORS_ONLN equal to this new sysctl and keep _SC_NPROCESSORS_CONF equal to hw.ncpu. This is preferable to adding a new sysctl to count the number of configured CPUs and keeping hw.ncpu equal to the number of online CPUs because such a change would break software in the ecosystem that relies on HW_NCPU/hw.ncpu to measure CPU usage and the like. Such software in base includes top(1), systat(1), and snmpd(8), and perhaps others. We don't need additional locking to count the cardinality of a cpuset in this case because the only interfaces that can modify said cardinality are sysctl(2) and ioctl(2), both of which are under the KERNEL_LOCK. Software using HW_NCPU/hw.ncpu to determine optimal parallism will need to be updated to use HW_NCPUONLINE/hw.ncpuonline. Until then, such software may perform suboptimally. However, most changes will be similar to the change included here for libcxx's std::thread:hardware_concurrency(): using HW_NCPUONLINE in lieu of HW_NCPU should be sufficient for determining optimal parallelism for most software if the change to _SC_NPROCESSORS_ONLN is insufficient. Prompted by deraadt. Discussed at length with kettenis, deraadt, and sthen. Lots of patch tweaks from kettenis. ok kettenis, "proceed" deraadt
2018-07-11Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commandsStuart Henderson
to running VMs (at least for OpenBSD ones), but the stop routine for system daemons is not usually called at shutdown. Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped it with a "stopping VMs" message (it can take some time, especially when you have multiple VMs, so better to have some clear feedback).
2018-07-11check string lengths in vm_startReyk Floeter
2018-07-11Disambiguate the source of panics in sys/net* by adding __func__Nayden Markatchev
magic constant to panic() calls. ok benno@ henning@ tb@
2018-07-11The routing table bgpd runs in needs to be a routing domain.Sebastian Benoit
ok claudio henning
2016-09-03Import libc++ 3.9.0Patrick Wildt
2018-07-11Remove RTM_LOSING from the file, it is no longer used by OpenBSD andClaudio Jeker
route6d is not realy using it anyway. OK henning@
2018-07-11some regression tests for lam(1) including width measurements;Ingo Schwarze
will be fixed soon and then linked to the build
2018-07-11Introduce 'auto-join' to the wifi 802.11 stack.Peter Hessler
This allows a system to remember which ESSIDs it wants to connect to, any relevant security configuration, and switch to it when the network we are currently connected to is no longer available. Works when connecting and switching between WPA2/WPA1/WEP/clear encryptions. example hostname.if: join home wpakey password join work wpakey mekmitasdigoat join open-lounge join cafe wpakey cafe2018 join "wepnetwork" nwkey "12345" dhcp inet6 autoconf up OK stsp@ reyk@ and enthusiasm from every hackroom I've been in for the last 3 years
2018-07-11Declare cpu_meltdown in <machine/cpu.h>Philip Guenther