Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-07-07 | Trim function description by leaving out parts that are already | Robert Peichaer | |
explained for _ask(). Give a hint why _ask() is called from within a while-loop. | |||
2018-07-07 | Be more precise explaining that _ask() captures user responses | Robert Peichaer | |
interactively and also from the response file. | |||
2018-07-07 | Tweak comments | Robert Peichaer | |
2018-07-06 | Improve the description of another rather esoteric piece of shell script code. | Robert Peichaer | |
2018-07-06 | Tweak comments and explain, why HTTP_SETDIR is made known to the webserver | Robert Peichaer | |
where the response file is downloaded from. | |||
2018-07-06 | Tweak comments and spacing. | Robert Peichaer | |
2018-07-06 | Tweak comment | Robert Peichaer | |
2018-07-06 | sync | Theo de Raadt | |
2018-07-05 | sync | Theo de Raadt | |
2018-07-02 | sync | Theo de Raadt | |
2018-07-02 | Be more precise in the function description and rename _iflist to | Robert Peichaer | |
_if_list to be consistent with other similar cases. | |||
2018-07-02 | more descriptive comment | Robert Peichaer | |
2018-07-02 | Be more precise about the expected input. | Robert Peichaer | |
2018-07-02 | Quote first parameter of isin(). | Robert Peichaer | |
2018-07-01 | Comments | Robert Peichaer | |
2018-07-01 | Explain and demystify some darker corners of the installer script. | Robert Peichaer | |
2018-06-30 | sync | Theo de Raadt | |
2018-06-26 | sync | Theo de Raadt | |
2018-06-25 | white spaces | Theo de Raadt | |
2018-06-25 | sync | Theo de Raadt | |
2018-06-20 | sync | Theo de Raadt | |
2018-06-19 | sync | Theo de Raadt | |
2018-06-16 | sync | Theo de Raadt | |
2018-06-16 | Allow to enter a DUID as answer to the "Which disk is the root disk?" | Robert Peichaer | |
question during upgrade. suggested by abieber positive feedback deraadt krw ok tb abieber | |||
2018-06-16 | Zap whitespaces | Robert Peichaer | |
found by deraadt | |||
2018-06-15 | Remove BACKWARDS flag here as well. | Martijn van Duren | |
Reminded by tb@ | |||
2018-06-06 | sync | Theo de Raadt | |
2018-06-06 | Add RETGUARD to clang for amd64. This security mechanism uses per-function | mortimer | |
random cookies to protect access to function return instructions, with the effect that the integrity of the return address is protected, and function return instructions are harder to use in ROP gadgets. On function entry the return address is combined with a per-function random cookie and stored in the stack frame. The integrity of this value is verified before function return, and if this check fails, the program aborts. In this way RETGUARD is an improved stack protector, since the cookies are per-function. The verification routine is constructed such that the binary space immediately before each ret instruction is padded with int03 instructions, which makes these return instructions difficult to use in ROP gadgets. In the kernel, this has the effect of removing approximately 50% of total ROP gadgets, and 15% of unique ROP gadgets compared to the 6.3 release kernel. Function epilogues are essentially gadget free, leaving only the polymorphic gadgets that result from jumping into the instruction stream partway through other instructions. Work to remove these gadgets will continue through other mechanisms. Remaining work includes adding this mechanism to assembly routines, which must be done by hand. Many thanks to all those who helped test and provide feedback, especially deaadt, tb, espie and naddy. ok deraadt@ | |||
2018-06-03 | On amd64, arm64, armv7, i386 and sparc64 /usr/bin/{cc,c++,clang++,clang-cpp} | Robert Peichaer | |
and /usr/libexec/cpp are supposed to be hardlinks of /usr/bin/clang. The move of /usr/bin/cc to the base set to allow kernel relinking resulted in it being a copy and not a hardlink. Move the other files to the base set too to ensure all are hardlinks. Noticed by Anthony Coulter OK deraadt | |||
2018-06-02 | sync | Theo de Raadt | |
2018-06-01 | Quiet clang warnings | mortimer | |
ok deraadt@ millert@ | |||
2018-05-29 | Make md_consoleinfo() set the appropriate variables that make install.sub | Mark Kettenis | |
adjust the speed of the 'console' ttys entry to reflect the speed of the console being used to install. Makes for a smoother install on Rockchip devices for which the SoC vendor had the not so brilliant idea that 1500000 is a suitable default speed. ok benno@, tb@ | |||
2018-05-29 | When adjusting the speed of a 'console' tty entry, also change entries | Mark Kettenis | |
with a default speed of 115200 since that is what we have on armv7 and arm64. ok benno@, tb@ | |||
2018-05-29 | sync | Theo de Raadt | |
2018-05-25 | sync | Theo Buehler | |
2018-05-24 | sync | Gilles Chehade | |
ok tb@ | |||
2018-05-21 | sync | Theo Buehler | |
2018-05-17 | sync | Theo Buehler | |
2018-05-07 | Fix http install with proxy, which was broken since URL redirection was | Theo Buehler | |
made sticky. Found and fix suggested by joshua megerman () iwco com, thanks! Tested & ok rpe | |||
2018-05-02 | sync | Theo de Raadt | |
2018-04-29 | sync | Theo Buehler | |
2018-04-26 | Use <fcntl.h> instead of <sys/file.h> for open() and friends. | Philip Guenther | |
Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup. ok deraadt@ krw@ | |||
2018-04-24 | oops, copy-and-pasto in previous sync. fix | Stuart Henderson | |
2018-04-24 | sync | Stuart Henderson | |
2018-04-22 | sync | Theo de Raadt | |
2018-04-20 | sync | Theo de Raadt | |
2018-04-18 | sync | Theo de Raadt | |
2018-04-15 | sync | Theo de Raadt | |
2018-04-15 | sync | Theo de Raadt | |
2018-04-11 | sync | Theo de Raadt | |