Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-04-26 | During boot we have a protective and restrictive pf ruleset during the time | Peter Hessler | |
we are running netstart, and then load the pf.conf ruleset after all of the interfaces are loaded. Allow in and out IPv6 neighbor advertisement traffic without state during that time. suggestions/OK from saschan@ OK sthen@ kn@ florian@ deraadt@ | |||
2023-04-24 | add default tmux config; ok sthen | Klemens Nanni | |
2023-04-21 | Delete incomplete and unreferenced 'miniroot' entries from | Kenneth R Westerback | |
arm64 and macppc disktab. | |||
2023-04-19 | Remove obsolete/unused disktab entries for install media | Kenneth R Westerback | |
that are no longer built. ok miod@ | |||
2023-04-18 | changelist: remove dhclient(8) files | Sebastien Marie | |
as currently dhclient(8) is a (sort of) alias to "ifconfig inet autoconf", these files aren't used anymore. ok tb@ | |||
2023-04-18 | changelist: add unbound-control files | Sebastien Marie | |
ok tb@ | |||
2023-04-16 | Add /etc/mixerctl.conf to changelist(5). | Antoine Jacoutot | |
ok deraadt@ kn@ semarie@ | |||
2023-03-25 | things will be ready a bit earlier | Theo de Raadt | |
2023-03-25 | correct day of week | Theo de Raadt | |
2023-03-15 | slightly earlier, and tweak some dates | Theo de Raadt | |
2023-03-07 | Nuke pointless 'pb#N:ob#0:' lines from floppy | Kenneth R Westerback | |
types. ok miod@ | |||
2023-03-06 | Delete extraneous trailing blank line. | Kenneth R Westerback | |
2023-03-06 | Remove pointless ":ob#0:pb#0:[tb=swap:]" disktab lines. | Kenneth R Westerback | |
ok miod@ | |||
2023-03-06 | tweak examples/iked.conf bits a little further following comments by | Stuart Henderson | |
aisha@ and Crystal Kolipe, ok aisha@ tobhe@ | |||
2023-03-04 | move to 7.3-beta | Theo de Raadt | |
2023-03-03 | Process accounting and lastcomm(1) can detect execve(2) violations | Alexander Bluhm | |
of pinsyscall(2) policy. Report such findings in daily mail like other security violations. User has to turn on accounting=YES in rc.conf.local to utilize this feature. OK deraadt@ | |||
2023-03-01 | /etc/examples/iked.conf tweaks: | Stuart Henderson | |
- show a demo of a strong random string for psk, for some types of configuration psk makes sense. the previous example hinted at.not using it. - change the EAP MSCHAPv2 example so that more than one client can connect (previous used address config but with only a single address not a pool), and use the newer keywords to show how to route all traffic from dynamic-ip clients over the tunnel ok tobhe@ | |||
2023-02-28 | add 7.4 fw key | Stuart Henderson | |
2023-02-19 | add 7.4 syspatch public key | Robert Nagy | |
2023-02-19 | 7.4 packages key | Christian Weisgerber | |
2023-02-18 | 7.4 base key | Theo de Raadt | |
2023-01-28 | sync | Theo de Raadt | |
2023-01-28 | Update the number of default wskbd entries | Peter Hessler | |
OK deraadt@ | |||
2023-01-25 | Delete TAB only line. | ASOU Masato | |
2023-01-24 | sync | Jeremie Courreges-Anglas | |
2023-01-24 | Provide /dev/ujoy/[0-3] | Jeremie Courreges-Anglas | |
ok deraadt@ miod@ | |||
2023-01-18 | process the sshd random-relink kit if it is found. sshd's text segment | Theo de Raadt | |
is now garbled, and in the future xonly univirse you'll have poor success downloading it or libc to know where gadgets are. ok djm | |||
2023-01-14 | regen | Mark Kettenis | |
2023-01-14 | Create /dev/efi on amd64 and arm64. | Mark Kettenis | |
ok yasuoka@ | |||
2022-12-28 | Make wait_reorder_libs() honour library_aslr=NO | Klemens Nanni | |
Otherwise it will unconditionally print an empty line in case relinking is disabled. Reported by kettenis Feedback OK tb OK florian | |||
2022-12-26 | add newline missed in previous | Klemens Nanni | |
2022-12-26 | Re-order libraries in parallel to netstart. | Florian Obser | |
While netstart is busy setting up the network and waiting for a default route we can already start with reordering libraries since this does not depend on running network, speeding things up. Idea & input deraadt Input & OK kn | |||
2022-12-18 | Revert previous as it doesn't create additional lo(4) anymore | Klemens Nanni | |
Reported by Andreas Bartelt on bugs@ | |||
2022-12-18 | Do not try to create physical interfaces | Klemens Nanni | |
vifscreate() always creates all virtual interfaces up-front. To check whether a given interface exists, ifstart() uses ifcreate() which tries to create nonexistent ones. Virtual ones are guaranteed to be present and physical ones cannot be created, so replace the ifcreate() call with a simpler ifconfig test and clarify the comment. OK martijn afresh1 | |||
2022-12-16 | zap double space and needless line break | Klemens Nanni | |
2022-12-16 | Prioritize lladdr over name/unit in hostname.if processing | Andrew Fresh | |
When needed, lladdr is more precise and enduring. Suggested by deraadt@ Many improvments and OK kn@ | |||
2022-12-05 | Add support configuring hostname.if(5) by lladdr | Andrew Fresh | |
Original implementation by martijn@ Feedback and suggestions from kn@, sthen@, claudio@, florian@, and deraadt@. ok deraadt | |||
2022-11-30 | add configtest; OK martijn | Klemens Nanni | |
2022-11-28 | rc(8): reorder_libs: print names of relinked libraries | Scott Soule Cheloha | |
When booting from slow media, the boot can appear to stall at the "reordering libs" line for quite some time. For my example, my G4 PowerMac booting from USB 1.1 takes a full minute to reorder the libraries. Let's print the name of each library before it is relinked. This gives the operator a better sense of what the machine is doing. In particular, it signals to the operator that the machine did not hang. With input from kn@, deraadt@. Positive feedback from sthen@. Link: https://marc.info/?l=openbsd-tech&m=165914104421476&w=2 ok kn@ | |||
2022-11-10 | Regen | Kenneth R Westerback | |
2022-11-10 | Nuke Vax (ra,rx) and HP-300 (hd) devices. | Kenneth R Westerback | |
Noticed by kn@ ok millert@ | |||
2022-11-09 | Regen | Kenneth R Westerback | |
2022-11-09 | Remove xy/xd. SMD left with sparc. | Kenneth R Westerback | |
ok kn@ deraadt@ | |||
2022-11-09 | Remove xy/xd. SMD left with sparc. | Kenneth R Westerback | |
ok kn@ deraadt@ | |||
2022-11-07 | Import regenerated moduli. | Darren Tucker | |
2022-11-06 | regen after /dev/pf? cleanup (only /dev/pf exists) | Klemens Nanni | |
2022-11-06 | There is only one pf(4); OK sashan | Klemens Nanni | |
2022-11-05 | "need root privileges" is an error, print it on stderr" | Klemens Nanni | |
2022-11-05 | Print full path in usage; OK jmc | Klemens Nanni | |
2022-11-01 | Only load the SOII key if IPv6 is available | Klemens Nanni | |
Possible now that IP6KERNERL is hoisted. This also improves readability and zaps double negation logic. |