summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2016-04-25prefer setres{u,g}id() rather than manipulating both real and effectiveTheo de Raadt
ids, it clarifies these are full revocation situations. ok millert
2016-04-24explicit_bzero some keys after use.Sebastian Benoit
From fritjof () alokat ! org, thanks! ok semarie@
2016-04-10per rfc, ehlo responses contain hostname, then options. from dyn+bsdTed Unangst
2016-04-06compare pointer to NULL instead of 0Sebastien Marie
from fritjof ! alokat.org ok ratchov@ natano@
2016-04-02Use open(tty, O_WRONLY) + fdopen() instead of fopen(tty, "w") toTodd C. Miller
keep stdio from opening with O_CREAT which would require pledge cpath.
2016-03-31Don't use .Aq for syntax elements that require ASCII "<>".Ingo Schwarze
Bug reported by Christian Heckendorf <mbie at ulmus dot me>, patch by me. OK jmc@ bentley@
2016-03-30for some time now mandoc has not required MLINKS to functionJason McIntyre
correctly - logically complete that now by removing MLINKS from base; authors need only to ensure there is an entry in NAME for any function/ util being added. MLINKS will still work, and remain for perl to ease upgrades; ok nicm (curses) bcook (ssl) ok schwarze, who provided a lot of feedback and assistance ok tb natano jung
2016-03-25- Both checks for pw are not needed since it was already done at the start ofmestre
the program - Add error message to syslog if privdrop didn't succeed and then exit - Remove lint comments OK beck@ after his suggestion and also looks good to jca@
2016-03-24Unbreak arm and m88k: COPY relocations for weak symbols that are overloadedPhilip Guenther
with strong symbols in ld.so don't do what we need, so put definitions back in crt0 and make ld.so update __progname like it does environ. report and testing patrick@ jsg@
2016-03-21Rename the system call sendsyslog2 to sendsyslog. Keep the old oneAlexander Bluhm
as osendsyslog for a while. The three argument variant is the only one that will stay. input kettenis@; OK deraadt@
2016-03-21Provide _dlctl(), an alternate name for dlctl() that's in the reservedPhilip Guenther
namespace, for use by libpthread ok deraadt@
2016-03-21Switch ld.so's stack smash handler from sendsyslog to sendsyslog2Philip Guenther
and pass the LOG_CONS flag like libc's handler. ok deraadt@ bluhm@ (who had a similar diff)
2016-03-20Export environ and __progname, making the latter a copy of just the filenamePhilip Guenther
portion like crt0 does. This is prep for eliminating _dl_fixup_user_env() Mark almost everything in resolve.h as hidden, to improve code generation. ok kettenis@ mpi@ "good time" deraadt@
2016-03-16More "(<blah> *)0" -> NULL, avoiding any stdarg functions.Kenneth R Westerback
Feedback millert@ kettenis@
2016-03-16- Check if user running spamlogd(8) has root privileges and if not then stopmestre
program early - #define SPAMD_USER "_spamd" and use it on getpwnam(3) call - Set usage() as __dead void - Remove lint-style comments OK beck@
2016-03-10- add a define for "_spamd" user like others OpenBSD daemons;Gleydson Soares
- check for root privileges, otherwise exit early with an appropriate status code and a formatted string; - be more specific with chroot()/chdir() checks. OK beck@
2016-02-29Print ssize_t with %zd; ok deraadt@ mmcc@Jeremie Courreges-Anglas
2016-02-29Kill unused variable.Jeremie Courreges-Anglas
2016-02-05pledge(2) for talkd(8):mestre
rpath: fopen(3) _PATH_UTMP in read mode wpath/cpath: fopen(3) full_tty in write mode (w), which implies O_CREAT inet/dns: the intervening hosts in the conversation may be remote, or not, but since we will never know beforehand then it'll always need inet and dns to resolve the hostnames ok jca@ and also discussed with tb@
2016-02-01Remove unused headers and sort the remainingmestre
OK tb@
2016-01-24Delete remnants of grpsym cache setting during symbol search: it's done atPhilip Guenther
load time only nwo. Rename _dl_searchnum and lastlookup to _dl_grpsym_gen and grpsym_gen as they are generation numbers. Merge _dl_newsymsearch() into _dl_cache_grpsym_list_setup(). ok millert@
2016-01-24Lacking precise dependency-from-relocation tracking, a nodelete objectPhilip Guenther
needs to lock down the entire load group, not just the specific object. problem report and ok sthen@ been in snaps for a week
2016-01-08Zap extraneous SYNOPSIS sections.Vadim Zhukov
The gettytab(5) and termcap(5) get FILES, others don't need anything. With input from & okay schwarze@
2016-01-04pledge(2) spamd-setup(8)mestre
It needs these annotations, to at least run the operations next to them: stdio: malloc(3) rpath: open(2) inet: connect(2)/socket(2) proc: fork(2) exec: execvp(3) While here remove netinet/in.h since all we need is already in arpa/inet.h and sort the headers alphabetically OK beck@
2015-12-22assign pointers to NULL rather than 0mmcc
2015-12-22Remove a couple needless allocation casts. No binary change.mmcc
2015-12-17s/failes/failed/gmmcc
2015-12-12Remove NULL-checks before free(). ok tb@mmcc
2015-12-11pledge spamlogd - again from Ricardo Mestre <serial@helheim.mooo.com> - Thanks!Bob Beck
2015-12-10tighten the pledge for spamd, from Ricardo Mestre <serial@helheim.mooo.com>Bob Beck
this loads the tls certificate files pre-pledge then does the bulk of the tls setup goo pledged.
2015-12-08Initially pledge spamdBob Beck
All the work done by Ricardo Mestre <serial@helheim.mooo.com> - Thanks.
2015-12-06Simplify the relocation code for the ld.so bootstrap and static pie: trackPhilip Guenther
just the dynamic tags are needed instead of reusing the generic elf_object_t structure. testing and feedback from miod@ ok kettenis@
2015-12-05adjust to newer tls_read/_write semantics.Henning Brauer
quite involved, due to tls_read potentially needing to write and tls_write potentially needing to read (in the reneg case); that not fitting the spamd model too well - it needs to keep a little more state. help & ok bluhm & beck
2015-12-02in response to EHLO, don't offer STARTTLS if we already completed theHenning Brauer
STARTTLS dance. ok millert
2015-12-02I misread the standard when adding TLS; clients are supposed to start overHenning Brauer
and issue a new EHLO after STARTTLS. The misunderstaning seems to be common, so we'll still grok MAIL FROM right after the STARTTLS dance, as well as accepting a second EHLO. ok phessler beck millert
2015-12-02fix error messages to say tls_write after tls_write and not tls_read...Henning Brauer
with bluhm
2015-12-01knock out duplicate rcs id;Jason McIntyre
2015-12-01needs utf8.c from the ls tree alsoTheo de Raadt
2015-12-01rpc.rstatd(8) and rpc.rusersd(8) don't run as user nobody for quite some time.Tim van der Molen
2015-12-01Remove superfluous check; "Of course" deraadt@Tim van der Molen
2015-12-01Don't fall back to user nobody if _rusersd doesn't exist; "Of course!" deraadt@Tim van der Molen
2015-11-29Document that the pfdev check for 63 is /dev/fd/ only contains those nodesTheo de Raadt
2015-11-26passwd no longer has an -l flag; ok deraadtJason McIntyre
2015-11-26pledge in login_radius(8).YASUOKA Masahiko
ok deraadt
2015-11-26rpc.yppasswdd goes to the bitbucket.Theo de Raadt
(The story is that some people do use YP still as a libc -> non-file lookup mechanism; some of them with standard ypbind/ypserv, but more of them with ypbind/ypldap. That however does not justify these cruddy tools dealing with passwords, which are more likely to contain problems)
2015-11-26Delete YP password related code. As a result, these can also beTheo de Raadt
pledged. Keep an eye out for regressions, because they could be uncomfortable. ok beck semarie
2015-11-25rename internally to ntalkd, after the binary; this way bothJason McIntyre
"man talkd" and "man ntalkd" work; issue reported by sobrado; fix from schwarze
2015-11-24missing pledge "getpw"Theo de Raadt
2015-11-21zap the yppasswdd mlink, at ingo's behest (its original purpose being,Jason McIntyre
obviously, to provide a drunk spell test);
2015-11-21remove mlinks for aliases: ntalkd, mfs, updatedbJason McIntyre
ok schwarze
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-27 00:38:46 +0000