Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-12-03 | Disallow the _pbuild user from making TCP/UDP connections in the default | Stuart Henderson | |
PF ruleset. This is not a complete block on _pbuild being able to communicate (e.g. non-TCP/UDP protocols don't have a PCB with userid, so PF can't restrict in those cases) but avoids some cases, and in particular makes it more obvious when a port does things like download extra distfiles or dependencies as part of the build process. Slight tweak from a diff by espie@. | |||
2017-11-29 | Import updated moduli. | Darren Tucker | |
2017-11-29 | Document NAT and DNS forwarding rules for vmd(8) | Mike Larkin | |
discussed at length with benno, beck, deraadt, and florian | |||
2017-11-27 | Remove deprecated agreement url. | Florian Obser | |
"nice" deraadt@ OK benno | |||
2017-11-15 | Update agreement URL; pointed out by sthen. | Florian Obser | |
OK benno, sthen | |||
2017-11-14 | sync | Christian Weisgerber | |
2017-11-14 | Remove /dev/arandom symlink. Nothing in base, xenocara, or ports uses | Christian Weisgerber | |
/dev/arandom any longer. ok deraadt@ | |||
2017-11-12 | Remove HN_DIR variable and expand it in the only place it was used. It | Theo Buehler | |
currently serves no purpose. ok rpe, agreement from deraadt and halex | |||
2017-11-11 | update switch handling in vmd(8). vmd now gets switch information (rdomain, | Mike Larkin | |
etc) from underlying switch interface instead of handling this on its own. Diff from carlos cardenas, Thanks! ok reyk@ | |||
2017-11-09 | kill trailing whitespace introduced in previous commit | Theo Buehler | |
2017-11-06 | Use a variable for /usr/share/relink | Robert Peichaer | |
OK tb@ | |||
2017-11-05 | Remove the ':' at the beginning of ksh.kshrc. | Robert Peichaer | |
prodded by Raf Czlonka OK tb@ | |||
2017-11-05 | Consolidate lib.so.*.a, ld.so.a and the kernel relink kit into | Robert Peichaer | |
one location under /usr/share/relink. Be more specific in src/etc/rc reorder_libs() what filesystems need r/w remount and ensure that their mount state is restored. Idea and positive feedback from deraadt@ OK aja@ tb@ | |||
2017-11-02 | sync | Martin Pieuchot | |
2017-11-02 | Switch DEC 3000 (TURBOchannel) alpha serial code to MI z8530 code. | Martin Pieuchot | |
ttyB* minor numbers change; be sure to rerun MAKEDEV if you do not upgrade with bsd.rd Adapted from NetBSD by miod@ | |||
2017-11-02 | Replace ps | grep with pgrep and use && instead of if-then-fi. | Theo Buehler | |
From Raf Czlonka. ok halex | |||
2017-10-25 | Partially revert rev 1.457 of /etc/rc. The pipe introduced in | Alexander Bluhm | |
sysctl_conf() spawns a subshell. This prevents that the new process limits affect the daemons started during boot. OK rpe@ halex@ | |||
2017-10-16 | Remove stray, pointless and potentially confusing line. | Kenneth R Westerback | |
2017-10-16 | sync | Christian Weisgerber | |
2017-10-16 | Make it explicit that there is only one type of random device: | Christian Weisgerber | |
Create only /dev/urandom as device. Create /dev/random and /dev/arandom as symlinks. Drop /dev/srandom, which has been unused for a long time. /dev/arandom will go away at a later point. Discussed with guenther@, ok deraadt@ | |||
2017-10-12 | The testprogram for ld.so reordering is executed in tmpdir. | Robert Peichaer | |
Move tmpdir for reordering library from /tmp to /usr/lib. This allows to have /tmp mounted noexec. prompted by reports on misc@ OK deraadt@ tj@ tb@ | |||
2017-10-10 | Move comment line and spacing. | Robert Peichaer | |
2017-10-08 | Make cacheflush(3) and get_fpc_csr(3) manual pages available on octeon. | Visa Hankala | |
OK deraadt@ | |||
2017-09-29 | SPI values 0-255 are reserved, so change the example to use a valid one. | Peter Hessler | |
fixes parsing of the example configuration OK benno@ | |||
2017-09-22 | fix the example neighbor configurations | Peter Hessler | |
noticed by Alex Holst OK henning@ | |||
2017-09-01 | Remove the miniroot for the OMAP3 BeagleBoards. Ethernet is on USB and | Jonathan Gray | |
USB isn't supported. The installer turns out to have been broken on BeagleBoard for over a year and no one noticed. The existing support for OMAP3 in the kernel remains though it isn't clear if anyone has tried it after the fdt changes went in. ok patrick@ tom@ kettenis@ matthieu@ | |||
2017-08-29 | Based on previous work from deraadt, add relinking of ld.so to | Robert Peichaer | |
reorder_libs() resulting in a unique ld.so on every system start. Idea from and OK deraadt@ OK tb@ | |||
2017-08-28 | Display that we are running the upgrade scripts when they exist. On slowish | Antoine Jacoutot | |
machines, running sysmerge(8) can take a little while so don't let people wonder about why the output seems stuck. ok sthen@ tb@ rpe@ | |||
2017-08-25 | Sync emacs package version | Jeremie Courreges-Anglas | |
(again...) | |||
2017-08-25 | add new firmware key | Stuart Henderson | |
2017-08-22 | add 6.3 packages key | Christian Weisgerber | |
2017-08-21 | Move the kernel relinking code from /etc/rc into a seperate script | Robert Peichaer | |
/usr/libexec/reorder_kernel. Requested by ajacoutot@ to be able to relink the kernel from within syspatch(8). OK deraadt@ tb@ | |||
2017-08-21 | add basedir of the kernel link-kit | Robert Peichaer | |
requested by ajacoutot@ OK tb@ | |||
2017-08-21 | 5.9 pubkeys no longer needed | Theo de Raadt | |
2017-08-21 | add 6.3 base key | Theo de Raadt | |
2017-08-20 | Simplify the code for stopping daemons listed in pkg_scripts in | Robert Peichaer | |
reverse order on shutdown. OK aja@ tb@ | |||
2017-08-20 | crank to 6.2-beta | Theo de Raadt | |
2017-08-16 | crank memory limits | Theo de Raadt | |
2017-08-12 | Add manpage update for new grouping feature '{from,to} {i,e}bgp' | job | |
OK phessler@ | |||
2017-08-05 | add /usr/X11R6/share/libdrm for recent libdrm versions | Jonathan Gray | |
2017-07-25 | Finally remove backwards compat code to support the 'rtsol' keyword | Robert Peichaer | |
in hostname.if(5) OK mpi@ deraadt@ florian@ OK jmc@ from doc perspective | |||
2017-07-21 | Align ifstart() in netstart and install.sub. | Robert Peichaer | |
- in netstart, rename _file to _hn referencing hostname.if files - in install.sub switch ifstart() to be used with _if instead of _hn as parameter ok krw@ tb@ | |||
2017-07-21 | sync | Mike Belopuhov | |
2017-07-21 | Multiple virtualization layers may be available at the same time | Mike Belopuhov | |
reachable through different pvbus device nodes. Suggestion and OK deraadt, OK reyk | |||
2017-07-18 | Use a bit better idiom to get most recent version of the library | Vadim Zhukov | |
being reordered. okay tb@ deraadt@ | |||
2017-07-18 | Use numerical sysctl output to check for nfs mounts. | Robert Peichaer | |
OK tb@ | |||
2017-07-17 | Tweak previous. | Robert Peichaer | |
2017-07-17 | Use a more compact way to compose the initial pf ruleset. | Robert Peichaer | |
Diff from Klemens Nanni OK tb@ zhuk@ | |||
2017-07-17 | Now that choosing the library versions is much faster, we can do | Theo Buehler | |
it after remounting the filesystem containing /usr/lib as rw: the former is pointless if the latter should happen to fail. From Klemens Nanni ok rpe | |||
2017-07-17 | Optimize and simplify the selection of the latest library version in | Theo Buehler | |
reorder_libs(). From Klemens Nanni with input from rpe. ok rpe, zhuk |