summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-08-06replace the current log optionsSebastian Benoit
log updates|all with log state changes log host checks log connection [errors] The first two control the logging of host check results: either changes in host state only or all checks. The third option controls logging of connections in relay mode: Either log all connections, or only errors. Additionaly, errors will be logged with LOG_WARN and good connections will be logged with LOG_INFO, so they can be differentiated in syslog. ok and feedback from claudio@
2018-08-06Correct example file since reserved words cannot be used as macros. Not onlyRicardo Mestre
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@
2018-08-06Change manpage example for reserved words since the macro used is to replaceRicardo Mestre
a password and that way it would log it when the daemon is ran in verbose mode. Hint and OK claudio@
2018-08-06Validate the prefix sent in a network delete call before trying to deleteClaudio Jeker
it. We should not trust this input too much as found by Pierre Emeriaud. OK benno@
2018-08-06Fix debug message in ieee80211_auth_open(): s/reason/status/Stefan Sperling
Status codes and reason codes are separate things listed in distinct tables. This debug message made me look at the wrong table and scratch my head.
2018-08-06make ifconfig <if> join display the list of networks configured forSebastian Benoit
auto-join with feedback from florian and stsp ok florian@ phessler@ (on previous versions of the diff) stsp@
2018-08-06Refactor ieee80211_add_ess():Stefan Sperling
Drop ieee80211_add_ess's nwid parameter. Read nwid and length directly from the ic to make it more obvious where this function is reading from. nwids are binary data with an explicit length, so treat them as such instead of treating them like strings. ok florian phessler
2018-08-06Give the FDT interrupt API a more generic naming by replacing thePatrick Wildt
arm_intr_* prefix with fdt_intr_*. ok kettenis@
2018-08-06Do not set nwid over and over again. We just found the ess by comparingFlorian Obser
the nwid. It will not have changed in the meantime. OK stsp
2018-08-06Pass the stale timestamp to path_remove_stale() removes a asp->peer dereferenceClaudio Jeker
2018-08-06Replace two asp->peer with prefix_peer(p) which is the same.Claudio Jeker
2018-08-06Assign peer1 and peer2 early on and use them everywhere instead of aspX->peer.Claudio Jeker
2018-08-06Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. OK kn@
2018-08-06Drop "rpath" from pledge(2) after ncurses initialization.Ricardo Mestre
Discussed with and OK tb@ OK cheloha@ on previous version
2018-08-05ifconfig ioctl's that bring interfaces up the first time may issueTheo de Raadt
firmware loads. The namei operations are being performed are on behalf of the kernel not process, so use BYPASSUNVEIL. spotted by sthen, ok beck
2018-08-05Fix typo that caused us to misassign parents.Mark Kettenis
ok patrick@
2018-08-05use .Fl macro for command line optionsIngo Schwarze
2018-08-05wrong macroIngo Schwarze
2018-08-05Decouple unveil from the pledge flags, by adding dedicated unveil flagsBob Beck
to the namei args. This fixes a bug where chmod would be allowed when with only READ. This also allows some further cleanup of some awkward things like PLEDGE_STAT that will follow Lots of assistence from semarie@ - thanks! ok semarie@
2018-08-05Remove unnecessary NULL check from get_cert_by_subject sinceBrent Cook
sk_BY_DIR_HASH_find already does it, removing ambiguity later in the function. ok tb@
2018-08-05Prevent a panic when reboot -q is used by making unveil_removevnodeBob Beck
sane. ok kettenis@
2018-08-05Fix a memory leak in i2d_RSA_NET on failure of ASN1_STRING_set.Brent Cook
Found by Coverity. Feedback and ok tb@
2018-08-05remove duplicate installation of the SIGINT handler;Ingo Schwarze
from Martin Kopta <martin at kopta dot eu>
2018-08-05In RSA_padding_add_PKCS1_OAEP, dbmask needs to be freed on failure.Brent Cook
ok tb@
2018-08-05enable virtio pci attachment on armv7Jonathan Gray
2018-08-05Mention ioctls that don't work for the control device.Alexandre Ratchov
ok jmc
2018-08-05Use english words instead of file names.Alexandre Ratchov
ok jmc
2018-08-05Fix memory leak in i2b_PVK in error handling.Brent Cook
Simplify parameter checks since this is only called from one place. Found by Coverity, CID 183502. ok beck@
2018-08-05Remove obvious or repeating sentinces.Alexandre Ratchov
ok jmc
2018-08-05Since -s argument is no longer checked, during reexec, the argv size then mustRicardo Mestre
be shortened by 1. OK florian@
2018-08-05Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. While here also scramble pledge promises to their canonical form. OK florian@
2018-08-05calloc the mode data instead of malloc and initialize everything.Nicholas Marriott
2018-08-05enable bio and softraid on arm64 ramdiskJonathan Gray
2018-08-05enable bio and softraid on armv7 ramdiskJonathan Gray
2018-08-05Remove now unused header which I forgot to commit on previous.Ricardo Mestre
2018-08-05Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. OK florian@
2018-08-05Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. OK akoshibe@ florian@
2018-08-05Revert back previous and remove cpath pledge(2) promise entirely. We decidedRicardo Mestre
that not deleting the unix control sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. tweak and OK florian@
2018-08-05document some more escapes which are hit by restricted mode,Jason McIntyre
and move the documentation of which are relevant to the restricted mode (-r) description; from kris katterjohn while here, replace some Gt/Lt escapes;
2018-08-04Implement a few missing RK3288 clocks and implement resets.Mark Kettenis
2018-08-04fix a glitch in rev. 1.24: getline(3) returns ssize_t, not size_t;Ingo Schwarze
pointed out by Andre Stoebe <as at nul not space>
2018-08-04obvious KNF: avoid '!' for tests of non-boolean variables,Ingo Schwarze
__dead void usage, return from main and return is not a function, err(1, NULL) after malloc failure, and garbage collect (void) casts on functions that usually do not need return value checks
2018-08-04avoid using a value uninitialisedJonathan Gray
ok kevlo@
2018-08-04Add regress test to ensure that chmod fails when unveiled with "r"Bob Beck
(problem noticed by semarie@ - fix forthcoming)
2018-08-04Use POSIX getline(3) rather than the non-standard and error-prone fgetln(3).Ingo Schwarze
In part based on a diff from Lauri Tirkkonen <lotheac at iki dot fi>. While here, significantly simplify sequential(). No objection when shown on tech@.
2018-08-04Oops. Missing chunk from previous 'secs' -> 'ui'.Kenneth R Westerback
2018-08-04Rename local variable 'secs' to 'ui' to be consistant with all otherKenneth R Westerback
uses of getuint64(). No change to executable.
2018-08-04The operating-points-v2 binding allows opp-microvolt to be a single cellMark Kettenis
or three cells. Handle both cases, but ignore the minimum and maximum values if they are provided in the case where we have three cells. ok patrick@
2018-08-04Revert back previous commit, we have decided that socket files don't cause anyRicardo Mestre
harm if not deleted after the daemon is shutdown and at the same time we also tackle another attack surface by not allowing the program to create/delete any more files (by removing "cpath" promise from pledge(2)). Discussion initiated by a question from deraadt@ OK florian@
2018-08-04Leave the control socket behind on shutdown. It doesn't hurt anyone.Florian Obser
On the other hand it is much more powerful to get rid of cpath; rad is no longer allowed to change anything on the filesystem. Triggered by mestre@'s work to fix unlinking in other daemons and a question from deraadt@ OK mestre
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-04 06:02:47 +0000