summaryrefslogtreecommitdiff
path: root/distrib
AgeCommit message (Collapse)Author
2018-07-07Trim function description by leaving out parts that are alreadyRobert Peichaer
explained for _ask(). Give a hint why _ask() is called from within a while-loop.
2018-07-07Be more precise explaining that _ask() captures user responsesRobert Peichaer
interactively and also from the response file.
2018-07-07Tweak commentsRobert Peichaer
2018-07-06Improve the description of another rather esoteric piece of shell script code.Robert Peichaer
2018-07-06Tweak comments and explain, why HTTP_SETDIR is made known to the webserverRobert Peichaer
where the response file is downloaded from.
2018-07-06Tweak comments and spacing.Robert Peichaer
2018-07-06Tweak commentRobert Peichaer
2018-07-06syncTheo de Raadt
2018-07-05syncTheo de Raadt
2018-07-02syncTheo de Raadt
2018-07-02Be more precise in the function description and rename _iflist toRobert Peichaer
_if_list to be consistent with other similar cases.
2018-07-02more descriptive commentRobert Peichaer
2018-07-02Be more precise about the expected input.Robert Peichaer
2018-07-02Quote first parameter of isin().Robert Peichaer
2018-07-01CommentsRobert Peichaer
2018-07-01Explain and demystify some darker corners of the installer script.Robert Peichaer
2018-06-30syncTheo de Raadt
2018-06-26syncTheo de Raadt
2018-06-25white spacesTheo de Raadt
2018-06-25syncTheo de Raadt
2018-06-20syncTheo de Raadt
2018-06-19syncTheo de Raadt
2018-06-16syncTheo de Raadt
2018-06-16Allow to enter a DUID as answer to the "Which disk is the root disk?"Robert Peichaer
question during upgrade. suggested by abieber positive feedback deraadt krw ok tb abieber
2018-06-16Zap whitespacesRobert Peichaer
found by deraadt
2018-06-15Remove BACKWARDS flag here as well.Martijn van Duren
Reminded by tb@
2018-06-06syncTheo de Raadt
2018-06-06Add RETGUARD to clang for amd64. This security mechanism uses per-functionmortimer
random cookies to protect access to function return instructions, with the effect that the integrity of the return address is protected, and function return instructions are harder to use in ROP gadgets. On function entry the return address is combined with a per-function random cookie and stored in the stack frame. The integrity of this value is verified before function return, and if this check fails, the program aborts. In this way RETGUARD is an improved stack protector, since the cookies are per-function. The verification routine is constructed such that the binary space immediately before each ret instruction is padded with int03 instructions, which makes these return instructions difficult to use in ROP gadgets. In the kernel, this has the effect of removing approximately 50% of total ROP gadgets, and 15% of unique ROP gadgets compared to the 6.3 release kernel. Function epilogues are essentially gadget free, leaving only the polymorphic gadgets that result from jumping into the instruction stream partway through other instructions. Work to remove these gadgets will continue through other mechanisms. Remaining work includes adding this mechanism to assembly routines, which must be done by hand. Many thanks to all those who helped test and provide feedback, especially deaadt, tb, espie and naddy. ok deraadt@
2018-06-03On amd64, arm64, armv7, i386 and sparc64 /usr/bin/{cc,c++,clang++,clang-cpp}Robert Peichaer
and /usr/libexec/cpp are supposed to be hardlinks of /usr/bin/clang. The move of /usr/bin/cc to the base set to allow kernel relinking resulted in it being a copy and not a hardlink. Move the other files to the base set too to ensure all are hardlinks. Noticed by Anthony Coulter OK deraadt
2018-06-02syncTheo de Raadt
2018-06-01Quiet clang warningsmortimer
ok deraadt@ millert@
2018-05-29Make md_consoleinfo() set the appropriate variables that make install.subMark Kettenis
adjust the speed of the 'console' ttys entry to reflect the speed of the console being used to install. Makes for a smoother install on Rockchip devices for which the SoC vendor had the not so brilliant idea that 1500000 is a suitable default speed. ok benno@, tb@
2018-05-29When adjusting the speed of a 'console' tty entry, also change entriesMark Kettenis
with a default speed of 115200 since that is what we have on armv7 and arm64. ok benno@, tb@
2018-05-29syncTheo de Raadt
2018-05-25syncTheo Buehler
2018-05-24syncGilles Chehade
ok tb@
2018-05-21syncTheo Buehler
2018-05-17syncTheo Buehler
2018-05-07Fix http install with proxy, which was broken since URL redirection wasTheo Buehler
made sticky. Found and fix suggested by joshua megerman () iwco com, thanks! Tested & ok rpe
2018-05-02syncTheo de Raadt
2018-04-29syncTheo Buehler
2018-04-26Use <fcntl.h> instead of <sys/file.h> for open() and friends.Philip Guenther
Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup. ok deraadt@ krw@
2018-04-24oops, copy-and-pasto in previous sync. fixStuart Henderson
2018-04-24syncStuart Henderson
2018-04-22syncTheo de Raadt
2018-04-20syncTheo de Raadt
2018-04-18syncTheo de Raadt
2018-04-15syncTheo de Raadt
2018-04-15syncTheo de Raadt
2018-04-11syncTheo de Raadt