summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-05-20add code to read from OTPROM (1000 and 6000 series only).Damien Bergamini
2009-05-20Delay enabling of EV_READ until S_INIT (smtps) or S_TLS (starttls).Jacek Masiulaniec
ok gilles@
2009-05-20Whitespaces cleanup.Michele Marchetto
2009-05-20previous commit to add reload support was missing some code, this diffsGilles Chehade
contains the missing parts + a memleak plug
2009-05-20fix looking at the mode bits so that we do not reply to broadcast and otherHenning Brauer
junk. from thorsten glaser.
2009-05-20replace a TAILQ_FOREACH loop with a TAILQ_FIRST loop when releasing entriesGilles Chehade
of the tailq, this is how it must be done.
2009-05-20first step towards configuration reload in smtpd, smtpctl reload will parseGilles Chehade
the configuration file again and replace current configuration with new one in all processes. what we don't support yet is graceful restart, clients in sessions at the moment of the reload will have a temp failure thrown at 'em which is ok RFC-wise but which we will try to improve anyway. tested with various setups, "diff reads good" jacekm@
2009-05-20fix a pasto causing "smtpctl resume mta" to try to resume mdaGilles Chehade
spotted and diff by giovanni <qgiovanni@gmail.com>
2009-05-20"bgpctl ?" is invalid syntax; replace with "bgpctl help".Stuart Henderson
from Aivar Jaakson.
2009-05-19ever since we switched from delivering to mboxes ourselves to using theGilles Chehade
mail.local(8) utility, parent_mailbox_init() has become useless, do not call it from parent_mailbox_open() anymore, and kill it. this fixes a bug which we were many to spot and which would cause smtpd to create a file /var/mail/%u upon first delivery to a mbox, then leave it there forever untouched.
2009-05-19remove useless check on NULL ssl cert and key, the check cannot be reachedGilles Chehade
as we would exit earlier if either one is NULL. diff by giovanni <qgiovanni@gmail.com>, had been sitting in my mbox for a while, okayed by jacek and I
2009-05-19document MODTCL_{TCLSH,WISH}_ADJ, MOD{TCL,TK}_LIB and note thatStuart Henderson
MOD{TCL,TK}_VERSION may be overridden.
2009-05-19reword FLAVORS/FLAVOR slightly to make it less confusing.Marc Espie
2009-05-19Processing AST can trigger more AST. Loop on astpending instead of checkingMiod Vallat
only once.
2009-05-19prevent injection of raw 802.11 control frames through bpf on driversDamien Bergamini
that do not explicitly state this capability (using flag IEEE80211_C_RAWCTL). also, perform all the sanity checks on injected raw 802.11 frames earlier (in ieee80211_output instead of ieee80211_encap). prevent kernel panics with many drivers when running aircrack-ng. when/if all drivers are capable, we can remove this C_RAWCTL flag.
2009-05-19Hercules HWNU-300 is a run(4).Damien Bergamini
2009-05-19Hercules HWNU-300 is a run(4).Damien Bergamini
2009-05-19Accept STARTTLS only after EHLO; ok gilles@Jacek Masiulaniec
2009-05-19- Don't advertise nor accept STARTTLS command when session is secure.Jacek Masiulaniec
- Make the condition when STARTTLS and AUTH are advertised & accepted more readable. ok gilles@
2009-05-19Do not ever run /usr/sbin/sendmail, it could link to sendmailJacek Masiulaniec
interface for a different MTA. Use the binary in /usr/libexec directly instead. Based on remark claudio@ made in passing. ok gilles@
2009-05-19Verify the amount of IMSG payload is exactly as expected; ok gilles@Jacek Masiulaniec
2009-05-19add placeholder for www/drupal6Stuart Henderson
2009-05-19refine login name and full user name sanity checkAlexander Hall
spotted by miod@ feedback and ok deraadt@, krw@
2009-05-19shorten ftp server install prompt; ok krwTheo de Raadt
2009-05-19Seperate out BSDI and SYSV syscall gate setup, so if we don'tTobias Weingartner
have one or the other option, we won't get said kernel entry point. Ok oga@
2009-05-18Oops, want sysctl -n for proper operation.Miod Vallat
2009-05-18The routing table index rtableid has type unsigned int in the routingAlexander Bluhm
code. In pf rtableid == -1 means don't change the rtableid because of this rule. So it has to be signed int there. Before the value is passed from pf to route it is always checked to be >= 0. Change the type to int in pf and to u_int in netinet and netinet6 to make the checks work. Otherwise -1 may be used as an array index and the kernel crashes. ok henning@
2009-05-18Add buffer mechanism internal ld.so printing code. makes ktrace more readable.Dale Rahn
nudge nudge deraadt@
2009-05-18Complete rework of bufferevent event masking allowing for moreJacek Masiulaniec
strictness: - Drop clients attempting command pipelining; protects the daemon from all kinds of abuse. - Replace F_EVLOCKED flag with F_WRITEONLY which has cleaner sematics: when up, session must not be destroyed nor read from, but may be written to. - Write callback becomes a central place for enabling EV_READ. - Delay bufferevent creation until after ssl handshake is completed. A bunch of session error stats were added to smtpctl's "show stats". These could help spotting event masking errors in the future. ok gilles@
2009-05-18regenMarcus Glocker
2009-05-18Add support for the DisplayLink USB<->DVI Adapter.Marcus Glocker
2009-05-18make _dl_wrstderr() not call write per-character; ok drahnTheo de Raadt
2009-05-18the block size must be multiple of the pci burst size (overwiseAlexandre Ratchov
dma pointers can overrun)
2009-05-18move text on weight to where it is first referred to;Kevin Steves
"fine by me. it's maybe not ideal, but it's better" jmc@
2009-05-18handle PATH in the same way as in monthly(8) and weekly(8),Ingo Schwarze
i.e. rely on the PATH set up in the root crontab(5) in case /usr/local/bin is needed, daily.local is a logical place to append it suggested by ajacoutot@; "i like this" okan@; feedback jmc@ deraadt@; "i don't strongly object" sthen@
2009-05-18/usr/libexec should not be put into the PATHIngo Schwarze
rely on the PATH set up in the root crontab(5), just like in monthly(8) suggested by ajacoutot@; "i like this" okan@; feedback jmc@ sthen@; "absolutely" deraadt@
2009-05-18support shell globs on ^+ lines in changelist(5)Ingo Schwarze
based on a patch from John Wong, johnw at wonghome dot net, tweaked by me while here, document globbing for normal lines, too "i like that" okan@; feedback and ok jmc@
2009-05-18fix reading from e-fuse rom (>= RT3070 only).Damien Bergamini
tested by robert@
2009-05-18INTMAX_TYPE / UINTMAX_TYPE are always in terms of long long.Martynas Venckus
reported by sturm@. fixes libarchive on sparc64 for naddy@, sturm@. mips is missing them too; but it has not been tested. ok millert@, miod@.
2009-05-18Add missing breaks so we don't fallthrough intoJonathan Gray
unwanted matching logic. ok oga@ deraadt@ miod@
2009-05-18new firmware package containing image for Intel Wifi Link 5150.Damien Bergamini
images for 4965, 5000, 5100 and 5350 are not modified.
2009-05-18more precise comment for sensor *; ok henning@ jmc@Kevin Steves
2009-05-18sync with netbsd; no change for openbsd usersJason McIntyre
from wiz
2009-05-18Cleanup the ioctl and receive filter code for mec(4). This alsoJoel Sing
significantly reduces the number of times the chip gets wacked at boot. From brad, tested by me.
2009-05-18tweak previous;Jason McIntyre
2009-05-18syncTheo de Raadt
2009-05-18typoTheo de Raadt
2009-05-17change comment for pool.ntp.org: not fixed to 8 servers and not justKevin Steves
stratum 2. ok henning@
2009-05-17Manpages r usMiod Vallat
2009-05-17security now uses the new infrastructure from dailyIngo Schwarze
reminded by and ok okan@, and using feedback from jmc@