| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2018-12-20 | 6.2 keys no longer required | Theo de Raadt | |
| 2018-12-16 | Remove control-use-cert. It is ignored for local sockets (since unbound 1.7.3). | Tim van der Molen | |
| OK florian@ sthen@ | |||
| 2018-12-12 | add commented-out "val-log-level: 2" next to the uncommentable line to | Stuart Henderson | |
| enable dnssec validation, it's really useful for debug | |||
| 2018-12-11 | the world is not ready for dnssec enabled by default | Florian Obser | |
| 2018-12-10 | remove qname-minimisation from sample config, this was turned on by | Stuart Henderson | |
| default upstream in 1.7.2 (picked up by us with the update to 1.7.3). ok florian@ | |||
| 2018-12-07 | Remove public resolver IP addresses, just provide a neutral "documentation | Stuart Henderson | |
| prefix" address instead - there are so many available with varying policies that this isn't a good place to list them (and might imply some kind of recommendation which is not intended). Particularly prompted by several on the previous list (he.net and opendns) strip RRSIG from results which cause DNSSEC failures now that validation is enabled in the example config as noticed by solene@. While there, shrink qname-minimisation comment to match other nearby comments, and drop dns64 example which is quite a specialist use case and not really needed in this basic example. | |||
| 2018-12-07 | Enable DNSSEC validation. | Florian Obser | |
| Requested by & OK claudio Input & OK sthen OK job, solene Various commenting that they run with validation since a long time without issues. | |||
| 2018-11-17 | add the missing space. in the future, should mail -f the file to ensure it ↵ | Theo de Raadt | |
| is correct format | |||
| 2018-11-17 | make the bogon set competely or-longer, rather than having to manage it | Theo de Raadt | |
| or-longer at useage time. ok job benno | |||
| 2018-11-13 | Grow sgi iso to make room for clang. | Visa Hankala | |
| Cluebat and OK deraadt@ | |||
| 2018-10-31 | Import new moduli. | Darren Tucker | |
| 2018-10-29 | Revert previous (for now). | Antoine Jacoutot | |
| semarie found a few regressions with daemon that will fail if cwd is not accessible. | |||
| 2018-10-16 | Change the way we call su(1) in rcexec: | Antoine Jacoutot | |
| - drop `-'l' to prevent simulating a full login and running /root/.profile (prodded by a mail from J Greely) - use `-m' to preserve the environment because we now set HOME to "/" like /etc/rc does; note that we now also clear the environment using `env -i' before running su(1) which leaves us with only HOME, PATH and SHELL Committing early to catch regressions fast, if any. ok halex@ | |||
| 2018-09-27 | Add vmctl stop -a [-fw] option to stop or terminate all running VMs. | Reyk Floeter | |
| This is also be used to simplify the vmd rc stop script. OK mlarkin@ ccardenas@ | |||
| 2018-09-23 | add 6.5 syspatch public key | Robert Nagy | |
| 2018-09-21 | 6.5 firmware key | Stuart Henderson | |
| 2018-09-20 | grow alpha and hppa media to accomodate some recent growth | Theo de Raadt | |
| 2018-09-20 | Import updated moduli. | Darren Tucker | |
| 2018-09-18 | 6.5 packages key | Christian Weisgerber | |
| 2018-09-18 | 6.5 base key | Theo de Raadt | |
| 2018-09-18 | grow arm64 ramdisk | Theo de Raadt | |
| 2018-09-10 | Adjust the config to -current bgpd which makes it a lot more readable. | Claudio Jeker | |
| OK phessler@ | |||
| 2018-09-09 | update example bgpd.conf to use new config language features: | Sebastian Benoit | |
| network prefix-set ... and filters with prefix-set ... or-longer. ok claudio@ | |||
| 2018-09-08 | Remove optional commas from example config. In the future these optional | Claudio Jeker | |
| commas may become a syntax error. | |||
| 2018-08-31 | sync | Joshua Stein | |
| 2018-08-31 | Add more uhid devices, 8 total | Joshua Stein | |
| ok deraadt | |||
| 2018-08-29 | Historically /etc/netstart (and the equivalent code in the install | Kenneth R Westerback | |
| script) did 'ifconfig <if> down' before starting dhclient(8). This was a way of ensuring old running copies of dhclient were killed before a new one started. Current dhclient does not need this assist, so change "ifconfig <if> down" to "ifconfig <if> up" pending further script optimizations. Similar to a 2014 attempt by halex@. Prompted by a misc@ report from Kristjan Komlosi reporting hanging diskless setups. ok halex@ kn@ | |||
| 2018-08-28 | Unclutter bgpd.conf example config file | job | |
| We're aiming to work towards an examples/bgpd.conf file that is a good starting point for real world deployments rather than a showcase of all capabilities bgpd(8) has. OK deraadt@ claudio@ | |||
| 2018-08-20 | sync | Mark Kettenis | |
| 2018-08-20 | Add /dev/drm[0-3]. | Mark Kettenis | |
| ok deraadt@, jsg@, mpi@ | |||
| 2018-08-19 | sync | anton | |
| 2018-08-19 | Add kcov(4), a kernel code coverage tracing driver. It's used in conjunction | anton | |
| with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and fixed. This effort will continue. kcov is limited to architectures using Clang as their default compiler and is not enabled by default. With help from mpi@, thanks! ok kettenis@ mpi@ visa@ | |||
| 2018-08-16 | Switch nsd control socket from localhost to a unix domain socket. | Florian Obser | |
| OK sthen | |||
| 2018-08-16 | The zoneinfo directories can be mode 755 just like everything else. | Todd C. Miller | |
| OK deraadt@ | |||
| 2018-08-11 | don't need 61 keys anymore | Theo de Raadt | |
| 2018-08-10 | crank to 6.4-beta | Theo de Raadt | |
| 2018-08-07 | Similar to the ldpd.conf change don't use a macro of the secret. | Claudio Jeker | |
| Macros get sometimes logged so we should not encurage to use them for sensitive data. | |||
| 2018-08-06 | Correct example file since reserved words cannot be used as macros. Not only | Ricardo Mestre | |
| that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@ | |||
| 2018-07-28 | sync | Alexandre Ratchov | |
| 2018-07-28 | Remove unused /dev/audio and /dev/audioctl symlinks. | Alexandre Ratchov | |
| ok deraadt | |||
| 2018-07-25 | s/resolver/nameserver/ to match parse.y -r1.4 | Jasper Lievisse Adriaanse | |
| 2018-07-24 | add rad.conf example | Jasper Lievisse Adriaanse | |
| ok florian@ | |||
| 2018-07-23 | add _rad user | Florian Obser | |
| OK tb, claudio | |||
| 2018-07-23 | Remove rtadvd(8) rc script. | Florian Obser | |
| 2018-07-23 | Remove rtadvd(8) leftovers in etc. | Florian Obser | |
| OK deraadt, phessler | |||
| 2018-07-23 | It's time to switch to rad(8); tested by many. | Florian Obser | |
| Unhook rtadvd from build. OK deraadt, phessler | |||
| 2018-07-23 | It's time to switch to rad(8); tested by many. | Florian Obser | |
| Remove rtadvd(8) from rc(8). OK deraadt, phessler | |||
| 2018-07-22 | document method=https, and use it in the example config; | Jason McIntyre | |
| from lauri tirkkonen; ok sthen beck | |||
| 2018-07-13 | add rad.conf; from semarie; tweak & OK tb | Florian Obser | |
| 2018-07-12 | rc(8) infrastructure for rad | Florian Obser | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |