summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-12-16in pledged process, setuid/setgid/sticky bits should be ignored.Sebastien Marie
enforce it for open(2) when used with O_CREAT and mode. ok deraadt@
2015-12-16Don't attempt to get the ThinkLight state if neither the KLCG nor the MLCGMark Kettenis
methods are present. Should fix the panic that occurs on older ThinkPads (such as the x201) when you press the ThinkLight key.
2015-12-16Refactor umass_detach() in order to pass a size to free(9).Martin Pieuchot
Based on a diff from Mathieu <naabed AT poolp DOT org>.
2015-12-16clean up some unused variables, and add the printing of the certificate validityBob Beck
to the verbose output when using tls - from rob@2keys.ca ok mmcc@ jsing@ deraadt@
2015-12-16Avoid grabbing the kernel lock in uvm_unmap() if we have an interrupt-safeMark Kettenis
map. This removes the (hopefully) last case in which pool_put() might try to grab the kernel lock for interrupt-safe pools. Note that pools that are created with the PR_WAITOK flag will still grab the kernel lock. ok mpi@, tedu@
2015-12-16Use __progname instead of hand-rolled parsing of argv[0].tb
Inspired by similar diffs by tobias@ and millert@. "I like the concept" pjanzen@ ok tedu@
2015-12-16Add pexp match otherwise rcctl stop vmd doesn't work. OK deraadt@James Turner
2015-12-16Use __progname instead of hand-rolled parsing of argv[0].tb
Inspired by similar diffs by tobias@ and millert@. "I like the concept" pjanzen@ ok tedu@
2015-12-16Adding mark messages to log files was broken since OpenBSD 5.7.Alexander Bluhm
The mark timeout event is not persistent, add the timer intervall everytime it fires. Bug report, analysis and fix from Einfach Jemand rru.142 at gmail.com
2015-12-16Merge rtable_mpath_select() into rtable_match().Martin Pieuchot
This allow us to get rid of one more "rt_node" usage with ART. ok jmatthew@
2015-12-16Don't forget about monitor mode while building the ifmedia listStefan Sperling
for 802.11n capable wireless drivers. ok mpi@
2015-12-16in pledged process, setuid/setgid/sticky bits should be ignored.Sebastien Marie
enforce it for mkfifo(2) and mknod(2) (with "dpath" promise). ok deraadt@
2015-12-16Replace "tame" by "pledge" in a comment.tb
2015-12-15less macro and linesJoerg Jung
ok millert
2015-12-15ignore unlikely temperature values like -127 degCJoerg Jung
2015-12-15add 2 more temperature keys found in macbook pro (10,2)Joerg Jung
found via key dump diff, run by Bryan Vyhmeister also remove 3 temperature keys which likely do not return useful values verified with help from macbook pro output of tb (4,1 and 5,5), kettenis (12,1), and Cristoph R. Murauer (9,1) via misc@
2015-12-15add commented-out unbound.conf entries for dns64 (sitting in my tree and ok'dStuart Henderson
some time ago by phessler and IIRC also mikeb), and for qname-minimisation
2015-12-15Remove "C=US, O=VeriSign, Inc., OU=Class 3 Public Primary CertificationStuart Henderson
Authority" (serial 3c:91:31:cb:1f:f6:d0:1b:0e:9a:b8:d0:44:bf:12:be) root certificate from cert.pem. ok rpe@ Symantec/VeriSign say "Browsers/root store operators are encouraged to remove/untrust this root from their root stores" and "hasn't been used to generate new certificates in several years, and will now be repurposed to provide transition support for some of our enterprise customers' legacy, non-public applications" (https://www.symantec.com/page.jsp?id=roots, http://www.scmagazine.com/google-will-remove-trust-of-symantecs-pca3-g1-certificate/article/459688/). Also see https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=ALERT1941 https://googleonlinesecurity.blogspot.co.uk/2015/12/proactive-measures-in-digital.html
2015-12-15add more temperature keys found in newer macbook airs (6,1 and 7,2)Joerg Jung
encountered via key dump diff, run by Bryan Vyhmeister
2015-12-15update to Unbound 1.5.7, looks fine to deraadt@.Stuart Henderson
Notable addition: implements optional support for qname minimisation (a privacy improvement; see draft-ietf-dnsop-qname-minimisation-07)
2015-12-15make sure the read fan description is always nul terminatedJoerg Jung
hint from kettenis
2015-12-15Cleanup: pwd.h is no longer needed.tb
2015-12-15Replace 'arc4random() % range' by 'arc4random_uniform(range)'.tb
Do this by introducing atcrandom_uniform(range) which returns deterministic randomness or good randomness depending on whether a seed was specified with the -r option. Diff by Matthew Martin, reviewed by deraadt@ and me. ok deraadt@
2015-12-15Include RFC number in reference. While here, improve formatting of anotherTim van der Molen
reference.
2015-12-15Document /var/db/mountdtabTim van der Molen
2015-12-15When (re)reading /etc/exports, handle the case where the mount point of anTim van der Molen
export is not also the mount point of a local filesystem. In this case, the local filesystem would not be removed from the "unexport list", causing the export to be "unexported" again. This fix then also allows us to actually delete an export that has been removed from /etc/exports, by passing the MNT_DELEXPORT export flag to mount(2). Makes sense to millert@.
2015-12-15missing space in previous;Jason McIntyre
2015-12-15pledge(2) style:Ingo Schwarze
Make sure to always use the idiom 'if (pledge("' such that it can easily be searched for. No functional change. Requested by deraadt@ some time ago.
2012-08-23update to unbound 1.4.18Stuart Henderson
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2015-12-15Revert the previous commit; the licencing needs to be checked very carefully.Ingo Feinerer
2015-12-15automatic HOSTALIASES setup is a bad ideaTheo de Raadt
2015-12-15UTF-8 support; does not yet handle the -c option.Ingo Schwarze
No longer expand tabs up front in get_line(), their width depends on the width of characters earlier on the line. Always NUL-terminate the input buffer for easier and safer handling. Get rid of the hand-rolled output buffer, just let stdio do its work. OK tedu@
2015-12-15Sync V4L2 header files with recent Linux kernel.Ingo Feinerer
This introduces the two header files v4l2-common.h and v4l2-controls.h which were split off from videodev2.h (which corresponds to our videoio.h). There will be a second commit just addressing whitespace and formatting. The current version has only real changes whereas the second commit will bring videoio.h in line with videodev2.h formatting so that potential syncs in the future are easier to implement. Bulk build by ajacoutot@; ok robert@, ajacoutot@
2015-12-15Copy state directly rather than dereferencing wl (which could be NULL).Nicholas Marriott
2015-12-15Some hooks API changes to fire a hook while waiting another cmdq andNicholas Marriott
infrastructure that will be needed soon.
2015-12-15Do not panic when trying to delete an non-existing route with ART.Martin Pieuchot
Reported by bluhm@, ok jmatthew@
2015-12-15PATCH is like PUT, data is expected.Reyk Floeter
From mxb at alumni chalmers se
2015-12-15test some valid UTF-8, but in the C localeIngo Schwarze
2015-12-15test encoding of a few invalid UTF-8 sequencesIngo Schwarze
2015-12-15Sync the DB file once when done with fsync(), not on each write with O_SYNC.Philip Guenther
The DB file being written is a temp file, so O_EXLOCK is unnecesary. ok sunil@ gilles@
2015-12-15test vis(3)ingIngo Schwarze
2015-12-15tests for the following keywords: cwd login group rgroup ruser userIngo Schwarze
2015-12-15remove some not interesting debug printfsMike Larkin
2015-12-15regression suite for the "command" keywordIngo Schwarze
2015-12-15if a vcpu run thread in vmd exits unexpectedly, teardown the VM's kernelMike Larkin
components as well. ok deraadt@
2015-12-15support reset vcpu by triple fault (kernel part, userland fix will comeMike Larkin
later). discussed with deraadt@ and reyk@ at length.
2015-12-15Allow list-keys and list-commands to be run without a running server.Nicholas Marriott
2015-12-15We changed somewhat recently to us the pty when tmux was run insideNicholas Marriott
itself to work out the current pane. This is confusing in many cases (particularly notable is that "tmux neww\; splitw" would not split the new window), and the few advantages do not make up for the confusion. So drop this behaviour and return to using the current window and pane; keep the pty check but only use it to limit the list of possible current sessions.
2015-12-15Don't copy marked pane when can just point to it.Nicholas Marriott
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 10:31:59 +0000