summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-08-29Test the exit status of the compiler by pulling it out the pipeline, soPhilip Guenthe
that mkdep can fail if the compiler does. Patch from Gerhard Roth (Gerhard_Roth at genua.de) ok halex@
2012-08-29obvious, but document that change of any encryption parameter *requires*Gilles Chehade
queue to be emptied first.
2012-08-29Introduce the crypto_backend API and provide support for... encrypted queueGilles Chehade
using the new API. By default, OpenSMTPD does not provide queue encryption, but it can be enabled with "queue encryption [args]" and will transparently encrypt/decrypt envelopes/messages as they hit the queue. By default, it will use Blowfish in CBC mode with a different random IV for each envelope and message. User provided key is expanded using sha256 but a different cipher and digest may be specified in smtpd.conf Queue encryption is compatible with compression and if both options are set it will do them in correct order and transparently. tested by chl@, a few users and myself ok chl@ and I
2012-08-29Using the currently chosen (and in my opinion insane) abstraction, passTheo de Raadt
-nopie to the linker if needed; ok pascal
2012-08-29Implement pci_min_powerstate().Mark Kettenis
2012-08-29Implement pci_min_powerstate().Mark Kettenis
2012-08-29Our _mcount doesn't use profile counters. Partially fixes profiling on hppaMark Kettenis
(things link now).
2012-08-29regen moduli file (<=4kbit). ok deraadt djmDarren Tucker
2012-08-29Make the update-moduli rule append the 6kbit and 8kbit params so that weDarren Tucker
can trivially regen the <=4k bit ones. ok djm@
2012-08-28Add -nopie to LINKFLAGS on ELF architectures. Note that this needs anPascal Stumpf
updated gcc and ld to understand the new -nopie flag. ok deraadt@
2012-08-28Do not add SLAAC or privacy addresses when a static address in the same prefixsperreault
already exists. 5.1 and older did the right thing. 5.2 did not (mea culpa). Now we're back to doing the right thing. spotted by naddy. ok stsp.
2012-08-28Implement pci_min_powerstate().Mark Kettenis
2012-08-28Implement pci_min_powerstate().Mark Kettenis
2012-08-28Add support for PIE-by-default in both ld and gcc. This is a completelyPascal Stumpf
different approach than the one taken in kurt@'s original diff, but deemed better after discussion and diff exchange with kettenis@ and matthew@. Lots of feedback by kettenis@ and matthew@, prodding and encouragement by deraadt@. ok kettenis@ matthew@
2012-08-28Work around -Wbounded warning by using sizeof(x_fname), not FILNMLEN. ThePascal Stumpf
latter gets defined incorrectly (too small) because of include ordering issues. Same fix as for binutils-2.17. Noticed by deraadt@. ok matthew@
2012-08-28oops. a bit of debugging code has sneaked inMike Belopuhov
2012-08-28We can't add -nopie to LDFLAGS yet, since cc doesn't understand it. UsePascal Stumpf
NOPIE_LDFLAGS instead. Noticed by matthew@ and deraadt@. Sorry for the breakage ...
2012-08-28Add __guard_local as a hidden symbol to ld.so, kernel, and everyMatthew Dempsky
executable and DSO (via crtbegin.c/crtbeginS.c). Not used yet, but needed before GCC can start emitting -fstack-protector code that uses them instead of __guard.
2012-08-28remove unused fileStuart Henderson
2012-08-28resolve conflictsStuart Henderson
2012-08-28update to NSD 3.2.13Stuart Henderson
- fix crash in nsd-patch if a zone has been removed from nsd.conf. (difffile.c) - CVE-2012-2979 DOS fix, this is in optional code which is *not* used with a standard OpenBSD build. (query.c, server.c)
2012-08-28Get rid of several ill-defined concepts and use more informationMike Belopuhov
provided by the IOC. Cleanup scatter-gather code and add more comments. Tested by a "make build" and bonnie++ torturing on a SAS2004 with an IR firmware.
2012-08-28syncTheo de Raadt
2012-08-28Don't enable "sendfile" which does not work on OpenBSD according to robert@Antoine Jacoutot
ok robert@
2012-08-28LDFLAGS will be -nopie for the NOPIE case, change GCC_PIE_DEFAULT -> PIE_DEFAULTPascal Stumpf
since it will affect binutils too. ok deraadt@
2012-08-28remove encrypt.c prototypes leftoversCharles Longeau
ok gilles@
2012-08-28Make mg behave more like emacs with regards to opening a new buffer:lum
1. If parent directory is read-only, make buffer read-only. 2. If parent doesn't exist; give user a message and create buffer as readable. Reviewed by Sunil Nimmagadda. ok jasper@
2012-08-28-fPIC and -fpic for m68kJonathan Gray
ok miod@ deraadt@
2012-08-28Expose _EVENT_VERSION in event.h. This is expected by net/tor, which will spewPascal Stumpf
out scary warnings if it's not there. Bump minor accordingly. Requested by and ok dcoppa@, ok nicm@
2012-08-28This file isn't and won't be used --> delete it.Charles Longeau
ok gilles@
2012-08-28Don't order file and dir creation, no measurable effect, ffsOtto Moerbeek
allocation strategy has changed since a long time and added to that cp(1) should not try to be smart and guess things it shouldn't know. ok guenther@ krw@
2012-08-28Always compare master.passwd(5) and group(5) regardless of their sums:Antoine Jacoutot
this is a sanity check to ensure no system user(s)/group(s) are missing. ok sthen@
2012-08-27Change a log to fprintf that was missed last time around, from Tiago Cunha.Nicholas Marriott
2012-08-27Instead of requiring a prompt to enter all numbers >10, go back toNicholas Marriott
0-9a-z and add A-Z and enter the prompt when M-0 to M-9 are pressed (like in copy mode). Prompted by request from mcbride@, help from Thomas Adam.
2012-08-27Remove landisk gcc 3 compiler workaround. Reminded by martynas@ and bradMiod Vallat
2012-08-27fix sundry macro abuses;Jason McIntyre
2012-08-27correct the description of VLAN_MTU; from brad smithJason McIntyre
ok sthen haesbaert while here, knock out a useless .Pp, and provide a section number for an Xr;
2012-08-27don't call ckdir() on each mktmpfile() call.Charles Longeau
ok gilles@
2012-08-27let regen_headers also take care of sqlite3.pc.in => sqlite3.pcMarc Espie
"moui" landry@
2012-08-27a few libtool users are bogus, they confuse --export-symbols with theMarc Espie
real option -export-symbols. Instead of blindly passing that one to the linker, error out beforehand, so that people know the problem IS libtool usage and not our program. (as exemplified by Todd Fries on ldns).
2012-08-27vax does not get -rpath-link, but it also does not really need it.Marc Espie
as found out by sebastia@ and used during 5.2 vax package build... no ill side-effects so far, so do this as a stopgap measure (matthieu@ reports that our libtool is not yet very good for static-only arches).
2012-08-26Junk global cur_time, and use time(NULL) or local variables whereKenneth R Westerback
time is checked multiple times. Add a set_timeout_interval() function to allow setting a timeout based on an interval from current time. Fixes issues with initial startup where the global cur_time was always old and caused initial DHCPDISCOVER or DHCPREQUEST packets to be sent multiple times. And probably other timeout related oddities. Tested by naddy@
2012-08-26oops, i added a stray character. spotted by jmcTed Unangst
2012-08-26Hook up nginx to rc(8).Antoine Jacoutot
ok deraadt@ robert@
2012-08-26missing DPADD ... sorryGilles Chehade
2012-08-26sane rewrite of the disk-queue traversal code, and log bogus files foundEric Faurot
in there. fixes issues reported by many. ok gilles@
2012-08-26correctly check compress_backend_lookup() to avoid a NULL derefGilles Chehade
2012-08-26- document queue compressionGilles Chehade
2012-08-26- use the same compression algorithm, gzip, for message file and envelopesGilles Chehade
- rename compress_zlib.c to compress_gzip.c with this commit it is possible to inspect a compressed queue with gzcat :)
2012-08-26- define ZLIB_BUFFER_SIZE instead of hardcoding 8192Gilles Chehade
- check gzdopen() failure - call gzclose() whenever a failure occurs after gzdopen() - simplify slightly some checks in compress/uncompress - create PATH_TEMPORARY in /var/spool/smtpd, chmod 700, owned by _smtpd - compress_zlib should use PATH_TEMPORARY instread of /tmp as we're chrooted and this will otherwise lead to a fatal() ok chl@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-10 05:12:28 +0000