summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2018-08-08mestre and I can find no reason why the pledge has "unix". DisableTheo de Raadt
2018-08-08ntpd unveils the cert.pem "r" file (which is passed-over-socket to theTheo de Raadt
2018-08-08pledge with "unveil" at the top, so that the various modes can unveilTheo de Raadt
2018-08-08Use unveil(2) in the helper process to disallow access to other filesAlexandre Ratchov
2018-08-08Support DMA coherent devices that attach to mainbus(4) as well.Mark Kettenis
2018-08-08Fix the ITLinesNumber mask and bump the number of supprted redistributorsMark Kettenis
2018-08-08add unveil(2) to ctfconv(1)Ricardo Mestre
2018-08-08add unveil(2) to mixerctl(1)Ricardo Mestre
2018-08-08Some unsigned long to unsigned int cleanup from recent ber (type) changes.rob
2018-08-08Unveil the special files needed for reading AML tables, and theTheo de Raadt
2018-08-08After authentication is complete, unveil login.conf "r" (to discoverTheo de Raadt
2018-08-08typo: macro-generates wrappers -> macro-generated wrappersTheo Buehler
2018-08-08An early pledge takes away many risk factors during spool opening/parsing.Theo de Raadt
2018-08-08In netproc process, unveil to only expose the CA file.Theo de Raadt
2018-08-08ifconfig cannot be pledged because of its overwhelming amount ofFlorian Obser
2018-08-08tabs are ok at start of line, but internally space seperation is the normTheo de Raadt
2018-08-08unveil dev.db "r" for devname(), /dev "r", and in the non-sysctl caseTheo de Raadt
2018-08-08In the early pledge, add "unveil" to permit changes a little later on.Theo de Raadt
2018-08-08Even though we strongly discourage escaping hyphens in manual pagesIngo Schwarze
2018-08-08Move struct wire_largecommunity to rde_attr.c since it is only used internallyClaudio Jeker
2018-08-08Fix possible division by zero caused by bogus usb descriptors. FromAlexandre Ratchov
2018-08-08Reorder the text in the "Dashes and Hyphens" subsection to keep theIngo Schwarze
2018-08-08Clarify the confusing "(text)" annotation in the character lists.Ingo Schwarze
2018-08-08After years of deliberation, finally provide a clear recommendationIngo Schwarze
2018-08-08Merge getcommunity() and getlargecommunity() into one function thatClaudio Jeker
2018-08-08Make the (non-)transitive handling of ext communities a bit more obvious.Claudio Jeker
2018-08-08syncTheo de Raadt
2018-08-08One ; too muchClaudio Jeker
2018-08-08Update the RIB after a config reload in the background. This moves theClaudio Jeker
2018-08-08Implement IRQ masking and unmasking in imxgpio(4).Patrick Wildt
2018-08-08Extend the FDT interrupt API to support masking and unmasking IRQs.Patrick Wildt
2018-08-08regenKevin Lo
2018-08-08Fix Realtek product name from RT8188 to RTL8188CEKevin Lo
2018-08-08r1.19 removed a bunch of code, but not enough, and left dead code around.kn
2018-08-08hide rib[] internals in new rib_valid() functionSebastian Benoit
2018-08-08Recognise 'Speculative Store Bypass Disable' support cpuid bit.Jonathan Gray
2018-08-08Use new private key format by default. This format is suported byDamien Miller
2018-08-07Unveil is used at tail of initialization to allow "r" of /tftpbootTheo de Raadt
2018-08-07Unveil fits nicely into the syslogd privsep model. Unveiled filesTheo de Raadt
2018-08-07unveil can be used to restrict access to utmp and /devTheo de Raadt
2018-08-07Ignore basic MCS set information found in association responses.Stefan Sperling
2018-08-07UNVEIL_* flags defined elsewhere in a .h fileTheo de Raadt
2018-08-07Post-g2k18 fix: unbreak the optional vmd-internal vmboot loader.Reyk Floeter
2018-08-07Fix dangling knote references.Visa Hankala
2018-08-07Fix paste error in "no read access to" debug message, tweak messages.Reyk Floeter
2018-08-07Similar to the ldpd.conf change don't use a macro of the secret.Claudio Jeker
2018-08-06Make it possible to build a MULTIPROCESSOR kernel on armv7. While thisMark Kettenis
2018-08-06space required between macro args and punctuation;Jason McIntyre
2018-08-06Reflect reality.Marc Espie
2018-08-06replace the current log optionsSebastian Benoit