summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-05-31No dm -> no need to revoke setegid.Paul Janzen
2002-05-31do not try to update rmx_mtu if rmx_mtu == 0 (obey ifmtu)Jun-ichiro itojun Hagino
2002-05-31Per-socket policies and authentication. Finally.Angelos D. Keromytis
2002-05-31Socket-related IPsec sockoptions --- cleanups etc.Angelos D. Keromytis
2002-05-31Move some common code to separate routines; also, fix the problem ofAngelos D. Keromytis
using the same SA for different traffic classes. Now, different SAs will be renegotiated as needed. XXX It's a sub-optimal (but correct) solution, as it looks for an exact match -- it should be checking for subset/subnet. One of these days...
2002-05-31New fields in policy and TDB.Angelos D. Keromytis
2002-05-31Keep an policy attached to each socket (that needs it), and cleanup asAngelos D. Keromytis
needed on socket tear-down.
2002-05-31Fix a DoS attack whereby an attacker could cause the replay counter toAngelos D. Keromytis
advance with unauthenticated packets, thereby causing valid packets to be discarded as replays. This has been sitting in my tree for a while, and I've forgotten who it was that pointed out the problem.
2002-05-31Look for the authentication info from the kernel in the correct message.Angelos D. Keromytis
2002-05-31Pass authentication information (if available) in ACQUIRE message.Angelos D. Keromytis
2002-05-31Add support for passphrase authentication, all sorts of new attributesAngelos D. Keromytis
to check for. Verified that it works well with mod_dav (not in the tree).
2002-05-31import_flow() prototypeAngelos D. Keromytis
2002-05-31Move code out of pfkeyv2.c into import_flow()Angelos D. Keromytis
2002-05-31Allow auth payloads in ACQUIRE messages. Part of a larger commit to come.Angelos D. Keromytis
2002-05-31clarify comment when nreceived > ntransmitted. from deraadtJun-ichiro itojun Hagino
2002-05-31undo until i find my #line bugTheo de Raadt
2002-05-30Add a german keymap for iBook. Based on "Key Caps" on Mac OS X 10.1.4.Mats O Jansson
Created by me and tested by Peter Janze <janze@digitalblue.de>. -moj
2002-05-30missing "%s". from netbsdJun-ichiro itojun Hagino
2002-05-30__attribute__((sentinel))Marc Espie
for now, just check that a function with an ellipsis is always called with the last parameter a null pointer (sentinel may take parameters in the future, if I figure out how to check a specific value and its type). okay millert@
2002-05-30move build/host/target fragment to a separate file.Marc Espie
Idea taken from recent gcc's. - unobfuscate the code, since config.gcc does not go through m4. - no synch problems, since config.gcc is the file that changes the most, and configure no longer needs to be re-gen'ed. ok millert@
2002-05-30separate main.c into a separate libfrtbegin.a.Marc Espie
Handle that in g77spec. Taken from gcc 3.1 (apart from the Makefile.bsd-wrapper changes). This allows one to link fortran code with other languages on ELF platforms: putting main.c in libg2c.so would make libg2c insist it got a MAIN__ symbol. Okay fgs@, pval@.
2002-05-30a grammar knit; from Aidan Kehoe <kehoea@parhasard.net>Michael Shalayeff
2002-05-30fallout from the radio attachment fixMichael Shalayeff
2002-05-30First pass of get/setprogname() cleanup. Much more to come later.Hans Insulander
ok deraadt@, pval@
2002-05-30minor KNFTheo de Raadt
2002-05-30minor tweaksTheo de Raadt
2002-05-30various repairs; jason@ackley.netTheo de Raadt
2002-05-30missing refs to sfr0 and other man fixes; from jumbo@Michael Shalayeff
2002-05-30typoTheo de Raadt
2002-05-30remove silly ifdef's; mickey@ jason@ ok.Federico G. Schwindt
2002-05-30typoTheo de Raadt
2002-05-30fix segfault when using just-one-space on an empty line; fromVincent Labrecque
dkm_holdings@hotmail.com ok art@
2002-05-30power management and microwave over robustness are booleansTodd C. Miller
2002-05-30iff pcibios is enabled, record _every_ established pci interruptMichael Shalayeff
for it will not get reprogrammed for isa later. should help lost and hanging pci interrupts. testing by fries@, krw@, mordin@, philipp@ and others
2002-05-30vt8233 is supportedMichael Shalayeff
2002-05-30make radio attach, not steal other audio attachmentsMichael Shalayeff
2002-05-30add WSKBD_TYPE_SUN5 here, tooJason Wright
2002-05-30proper support for vt8233; from freebsd; tested by Jolan Luff ↵Michael Shalayeff
<jolan@encryptedemail.net>
2002-05-30protect biodone with splbio.Artur Grabowski
miod@ ok.
2002-05-30use strlcpy and snprintfTheo de Raadt
2002-05-30Avoid spinning poll, and while we're at it more closely reproduce theHugh Graham
original netcat's timeout behaviour. Theo says go.
2002-05-30Do not allow user to run authpf if user's shell is not /usr/sbin/authpf toOleg Safiullin
prevent users from playing with $SSH_CLIENT.
2002-05-30use rijndael/aes from libcrypto (openssl >= 0.9.7) instead ofMarkus Friedl
our own implementation. allow use of AES hardware via libcrypto, ok deraadt@
2002-05-30snprintf in .y filesTheo de Raadt
2002-05-30spacesTheo de Raadt
2002-05-30-4 and -6 options; kanai@big.or.jp; itojun okTheo de Raadt
2002-05-30space nitsTheo de Raadt
2002-05-30space nitsTheo de Raadt
2002-05-30spelling errors; moritz@jodeit.orgTheo de Raadt
2002-05-30typo; moritz@jodeit.orgTheo de Raadt