Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-10-25 | route flush cannot pledge before sysctl for NET_RT_DUMP; defer the act. | Theo de Raadt | |
issue spotted by matthieu | |||
2015-10-25 | just dump the help on stdout with messing about with a pager. | Ted Unangst | |
makes pledge much simpler. from jan stary | |||
2015-10-25 | Pass output from jobs through format_expand() so they are expanded again | Nicholas Marriott | |
(this was the previous behaviour). | |||
2015-10-25 | No need to declare pwd_gensalt; it's unused and gone. | Antoine Jacoutot | |
ok tedu@ | |||
2015-10-25 | pledge the main usage patterns similar to arp(8). Some akkorokamui | Theo de Raadt | |
prevent doing this better, someone should try to refactor this more like arp... also figure out what dawn-of-ipv6 options can be removed. ok benno | |||
2015-10-25 | Let's see if anyone screams about not being able to specify $TMPDIR | Theo de Raadt | |
for their tmux sockets. (Over the years, I have seen $TMPDIR set up worse than /tmp many times, and don't know how this practice infected other parts of the system. Nothing uses tmpdir(3), nor a huge-temporary-file program like sort.) ok nicm | |||
2015-10-25 | pledge bind(1), dig(1), and nslookup(1). This modifies the underlying | Theo de Raadt | |
ISC library to use socket(2) with the SOCK_DNS flag. As a result, the port commands are disabled (such practice is rare in the wild these days, and pretty incompatible with the DNS vs regular socket concept in pledge..) ok bluhm phessler reyk, etc | |||
2003-01-20 | ISC BIND version 9.2.2rc1 | Jakob Schlyter | |
2015-10-25 | Use sigaction() instead of signal() to avoid pulling in unnecessary | Philip Guenther | |
wrappers. To keep uses from crawling back in, mark signal() as deprecated inside libc. ok deraadt@ | |||
2015-10-25 | Use dprintf() instead of fprintf() in the signal handler | Philip Guenther | |
2015-10-25 | POSIX says that you can't capture the return value of sigsetjmp(). | Philip Guenther | |
Fortunately, we don't need it as we only pass siglongjmp() a single value. ok deraadt@ | |||
2015-10-25 | For SYS_open let the /dev/null special case match if any TMN_RPATH, | Todd C. Miller | |
TMN_WPATH or both are set in p_pledgenote. Matches the style used for /dev/tty special cases (among others). From deraadt@ | |||
2015-10-25 | Fix some bugs in the detection of when an interface can be enabled. | Renato Westphal | |
2015-10-25 | When converting the real bandwidth to the composite bandwidth, truncate | Renato Westphal | |
before applying the scaling factor. When converting the composite bandwidth to the real bandwidth, apply the scaling factor before the division and only then truncate. This is to keep consistent with what Cisco does, the draft is unclear on this point. | |||
2015-10-25 | Add a few more overflow protections in the DUAL state | Renato Westphal | |
machine. | |||
2015-10-25 | Allow getsockopt(IP_OPTIONS) (with inet), needed by portmap (for RPC). | Nicholas Marriott | |
ok deraadt | |||
2015-10-24 | typo | mmcc | |
2015-10-24 | fix keyscan output for multiple hosts/addrs on one line when | Damien Miller | |
host hashing or a non standard port is in use; bz#2479 ok dtucker@ | |||
2015-10-24 | skip "Could not chdir to home directory" message when chrooted | Damien Miller | |
patch from Christian Hesse in bz#2485 ok dtucker@ | |||
2015-10-24 | chlim has been removed from the nd_ifinfo structure. | Matthieu Herrb | |
ok kettenis@ | |||
2015-10-24 | Move removal of "getpw" pledge after all setusercontext() calls, for yp sake. | Miod Vallat | |
Noticed by matthieu@ | |||
2015-10-24 | setusercontext() may still need "getpw" pledge rights; unbreaks doas on yp | Miod Vallat | |
accounts after 1.43; found the hard way by matthieu@ | |||
2015-10-24 | Cast toupper()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Move #includes from private.h to the .c files that need them, getting rid of | Philip Guenther | |
several. Switch from FILENAME_MAX to PATH_MAX (it's for open(), not fopen()). ok deraadt@ tedu@ krw@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isdigit()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isdigit()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast islower()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isprint()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast toupper()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast ctype functions' arguments to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isdigit()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isalpha()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isblank()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isdigit()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast isblank()'s argument to unsigned char. | mmcc | |
ok guenther@ | |||
2015-10-24 | Cast toupper()'s argument to unsigned char. | mmcc | |
ok guenther@ |