Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-12-03 | Remove the /usr/share/nls/ exception from pledge(2). The libc | Alexander Bluhm | |
native language support was deleted a month ago at u2k15. OK semarie@ deraadt@ | |||
2015-12-01 | use strlcat instead of strlcpy with modified arguments. ok deraadt@ | Can Erkin Acar | |
2015-12-01 | Document that "tty" provides read-write access to /dev/tty too. | Todd C. Miller | |
OK deraadt@ | |||
2015-12-01 | modify getpw*(), getgr*(), and getgrouplist() functions to access the | Theo de Raadt | |
YP lock file unconditionally. This hints to the kernel that a "getpw" operation is happening, even in the non-YP case. This looks like a gruesome hack, but helps refine the ways these functions are called and mandates the right pledge requests. Once the tree is fully annotated we will know better how to improve the backing store management. ok semarie espie beck | |||
2015-12-01 | Send Aviion to same place as Nova II | Theo de Raadt | |
discussed with jsg | |||
2015-12-01 | Mention ksh along with csh when job control is discussed. ok deraadt@ | mmcc | |
2015-12-01 | Phrase allocation failure more clearly. ok deraadt@ | mmcc | |
2015-11-30 | change Xrs from now-defunct db(3) to dbopen(3); this wasn;t a | Jason McIntyre | |
straight replace: thanks both to schwarze and maja for feedback on how to rewrite parts; i've snuck in an rcs id->openbsd id change in dev_mkdb too; | |||
2015-11-29 | Add pledge "pf" which allows ioctls on pf(4). This will be used by | Sebastian Benoit | |
relayd and other programs manipulating the packet filter. ok deraadt@ | |||
2015-11-26 | remove the "YP server for domain %s not responding, still trying" code. | Theo de Raadt | |
For years, it talked to stderr. That was wrong. Then it was converted to opening /dev/tty, which is also wrong (pledge says so). Upon reconsideration people in these more modern times have adapted to all sorts of services not being available, so axe the alert and retry silently. ok beck | |||
2015-11-25 | group_from_gid: use _GR_BUF_LEN instead of _PW_BUF_LEN | Joshua Stein | |
2015-11-25 | Wrap <icdb.h> so that calls go direct and the symbols are all weak | Philip Guenther | |
ok tedu@ | |||
2015-11-25 | Make using a deprecated function an error instead of just a warning | Philip Guenther | |
ok millert@ kettenis@ | |||
2015-11-25 | syslog() here is pointless; ok millert | Theo de Raadt | |
2015-11-25 | Rather than using syslog(3) (which pulls in snprintf), creating the report | Theo de Raadt | |
string using simpler strings functions and use sendsyslog2() directly. Also, use the LOG_CONS flag so that single-user reports are more clear. Use a buffer size of 1024 (from bluhm) discussed with guenther and matthew ok millert | |||
2015-11-25 | Add a syscall stub for sendsyslog2(2), and use it in syslog_r(3), passing | Theo de Raadt | |
LOG_CONS to the kernel. As a result, the /dev/console opening code can be removed. ok kettenis millert beck | |||
2015-11-24 | Use reentrant versions of getpw{nam,uid} and getgr{nam,gid} within | Todd C. Miller | |
libc to avoid reusing the static buffers returned by the non-reentrant versions. Since this is inside libc we can use constants for the buffer sizes instead of having to call sysconf(). OK guenther@ deraadt@ | |||
2015-11-24 | fix an error in NAME; ok schwarze | Jason McIntyre | |
2015-11-24 | Document that these functions are now in strings.h. | Daniel Dickman | |
ok millert@ | |||
2015-11-24 | Don't fake a bulleted list by prefixing items with 'o'. | Anthony J. Bentley | |
ok jmc@ | |||
2015-11-23 | Remove support for "lookup yp" in /etc/resolv.conf. This historical | Theo de Raadt | |
wart is incompatible with pledge, because suddenly a "dns" operation needs "getpw" access to ypbind/ypserv, etc. file + dns access is enough for everyone, sorry if you were using that old SunOS 4.x style mechanism, but it is now gone. ok semarie millert florian | |||
2015-11-23 | point to mount_mfs(8), not mfs(8); | Jason McIntyre | |
2015-11-21 | point to netintro(4) rather than (now removed) networking(4); | Jason McIntyre | |
2015-11-20 | Document that the status argument may be NULL; OK millert@ | Tim van der Molen | |
2015-11-20 | typo tcgetpgrp -> tcsetpgrp | tb | |
ok mmcc@, yes... deraadt@ | |||
2015-11-18 | mlinks for _shadow | Ted Unangst | |
2015-11-18 | document the _shadow functions | Ted Unangst | |
2015-11-18 | add a version field to prevent mayhem if different data gets stored | Ted Unangst | |
2015-11-18 | update for new symbols and code | Ted Unangst | |
2015-11-18 | Add icdb, the internal c database. A simpler replacement for the old | Ted Unangst | |
Berzerkeley DB code. | |||
2015-11-18 | Add _shadow variants to the two popular getpw functions (uid and nam). | Ted Unangst | |
This version of the function will always open the secure/shadow/master password files. Soon, the regular variants of these functions will not. (Intermixing shadow and regular gets a little weird; don't do that.) Not using struct spwd and getspwnam functions to reduce churn in callers. Should just be a one line diff in most places. ok deraadt | |||
2015-11-18 | rob pierce spotted a mistake left by jmc | Theo de Raadt | |
2015-11-17 | change passwd caches to be 4-way "associative". still primitive, but a | Ted Unangst | |
little better than winner take all caching. | |||
2015-11-16 | minor tweaks; | Jason McIntyre | |
2015-11-16 | Permit revoke(2) for a pledge "rpath tty" | Theo de Raadt | |
ok millert semarie tedu guenther | |||
2015-11-16 | Only perform revoke(2) on tty cdevs. Others paths return ENOTTY. | Theo de Raadt | |
ok millert semarie tedu guenther | |||
2015-11-15 | Tweak previous: rename it to fpround() to match FreeBSD | Philip Guenther | |
requested by kettenis@ | |||
2015-11-15 | _towctrans_ext and _wctrans_init are now hidden; so drop them from the list | Philip Guenther | |
2015-11-15 | I got a round tuit to rename round() to roundit() to avoid gcc warning. | Philip Guenther | |
ok deraadt@ | |||
2015-11-14 | Split the non-syscall ASM bits from SYS.h into DEFS.h and use that in the | Philip Guenther | |
non-syscall .S source ok millert@ miod@ | |||
2015-11-14 | Give clear directions on how to declare, PROTO_*() and DEF_*() new symbols | Philip Guenther | |
prodded by deraadt@ | |||
2015-11-10 | update NAME section to include all documented functions, | Jason McIntyre | |
or otherwise change Dt to reflect the name of an existing function; feedback/ok schwarze | |||
2015-11-10 | Document tzsetwall(). OK schwarze@ jmc@ | Todd C. Miller | |
2015-11-10 | Split the intra-thread functionality from kill(2) into its own syscall | Philip Guenther | |
thrkill(2), rolling the kill(2) syscall number with the ABI change to avoid breaking binaries during during the transition. thrkill(2) includes a 'tcb' argument that eliminates the need for locking in pthread_kill() and simplifies pthread_cancel(). Switch __stack_smash_handler() to use thrkill(2) and explicitly unblock SIGABRT. Minor bump to both libc and libpthread: make sure you install a new kernel! ok semarie@ | |||
2015-11-10 | libc.so can't be unloaded, so move the hidden atexit() and pthread_atfork() | Philip Guenther | |
stubs for the executable from crtbegin.o into libc, which lets them be excluded from static links that don't use them. For this, drop the normal crt{begin,end}S.o from libc.so: the .init and .fini sections for libc aren't called at the right times anyway, so it's good that they're unused. libc.so just needs __guard_local and the .note.openbsd.ident section, so add them to stack_protector.c for now (this will be improved) "good time" deraadt@ | |||
2015-11-08 | inet(4), not inet(3); | Jason McIntyre | |
2015-11-07 | add missing NAME entries; | Jason McIntyre | |
2015-11-06 | Remove needless comma. | mmcc | |
2015-11-05 | Set the name server counter in __res_state correctly if a nameserver | Alexander Bluhm | |
from asr_ctx was skiped. Missed in previous commit. OK deraadt@ | |||
2015-11-05 | After removing National Language Support (NLS) from base, stop | Alexander Bluhm | |
creating the directory /usr/share/nls. Having a non-existing default path in catopen(3) does not make sense, so remove it. If the user does not specify a NLS path, better fail early than fail because of an empty directory. Remove path form hier(7). OK stsp@ schwarze@ jmc@ |