summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2006-12-20add an additional rule to the filter anchor that allows traffic out fromJoel Knight
the server to the client. this is necessary in case the server is not otherwise allowed to talk to the client. ok jcs@
2006-12-20More strlen("") fixes.Ray Lai
OK otto@, ``If it makes you feel better'' millert@.
2006-12-15reduce RFC2292/3542 #ifdef.Jun-ichiro itojun Hagino
2006-12-09IPV6_RECVDSTADDR is not standard. use more standard IPV6_PKTINFO.Jun-ichiro itojun Hagino
also prepare for RFC2292->RFC3542 switch (IPV6_RECVPKTINFO). glocker ok (he tested), deraadt also looked at
2006-12-07check exit status of the pfctl command executed. ok beck@Otto Moerbeek
2006-11-27Make spamd error out for a greylisted session only after the DATABob Beck
command not after the RCPT command, as this helps people out when they are faced with retarded sender verification schemes - tested out by a number of people on tech@, and running at u of a for a while. Supposedly this makes verizon sender verification happy. Suggested as a stable candidate by people on tech@, I'm ok with that.
2006-11-26repair missing DPADD requestsTheo de Raadt
2006-11-21Fill in load/end address for binary.Dale Rahn
2006-11-15failed to purge doubled up environment variables; found by Mark DowdTheo de Raadt
ok miod
2006-11-14stack corruption was fixed a while ago.Dale Rahn
2006-11-14improve previous;Jason McIntyre
2006-11-14clarify "maxcon" somewhat, particularly its upper limit;Jason McIntyre
from jared rr spiegel (pr #5292), tweaked somewhat;
2006-11-14cleanup pointed out by miod@Dale Rahn
2006-11-13Let this build on landisk.Dale Rahn
2006-11-11when calculating envp, skip over the NULL between argv and envp.Dale Rahn
2006-11-11remove '#if 0' block.Dale Rahn
2006-11-11Working?Dale Rahn
2006-11-10dont want to know where this stack corruption is coming from.Dale Rahn
2006-11-10better...Dale Rahn
2006-11-10Getting much closer.Dale Rahn
2006-11-10`elminate' etc. is not really the right way to spell `eliminate'.Michael Knudsen
ok brad
2006-11-10Not quite working ld.so support for shDale Rahn
2006-11-04remove misplaced -l stuff; henning needs more caffeine...Jason McIntyre
2006-11-03donot for tcpdump, use libpcap directly.Henning Brauer
joint work with Berk D. Demir, ok beck deraadt
2006-10-29use setresuid/gid and check for failure, ok bobHenning Brauer
2006-10-28Only mprotect pages during relocation if the library is marked TEXTRELDale Rahn
mips64 version still needs testing.
2006-10-26- sort optionsJason McIntyre
- sync usage()
2006-10-25allow spamlogd to use an alternate pflog interfaceHenning Brauer
spamlogd was the #1 reason for me to implement the multiple pflog thing, so now you can finally have a nice seperation between logging and spamlogd tracking smtp connections joint work with djm, ok djm bob and kinda "Berk D. Demir" <bdd@mindcast.org>
2006-10-23no need to use "keep state" and "flags S/SA" in pf rules,Jason McIntyre
now that it is the default; ok henning mcbride camield (ftp-proxy bits) deraadt
2006-10-19no need to escape "'";Jason McIntyre
2006-10-18Avoid double fclose() of a file if we exceed retries. Coverity ID 2669.Todd C. Miller
OK cloder@
2006-10-18you do not call fclose() on a file descriptor; ok cloderTheo de Raadt
2006-10-18do not name FILE * variables "fd" since it is confusingTheo de Raadt
2006-10-17Make this easier for people who aren't aware of what shell they are running.Bob Beck
ok deraadt@
2006-09-29typo; from sthenJason McIntyre
2006-09-26switch alpha to gcc3; joint work with drahn@ and brad@Martin Reindl
ok drahn@ brad@ mickey@ deraadt@
2006-09-24Fill in the list of loaded segments for the main executable such that we canMark Kettenis
unprotect them if necessary for binaries that have TEXTREL set. ok drahn@, martin@
2006-09-22Remove lfs_cleanerd and mount_lfsPedro Martelletto
2006-09-20Recommit non-static array fix.Ray Lai
2006-08-23Support arm libraries with DT_TEXTREL, has no affect for other libraries.Dale Rahn
ok kettenis, 'in then' deraadt@
2006-08-19Don't shadow err(3).Ray Lai
Store strlen() results in a size_t. Add __dead to both usage() and logerr(). Get rid of /* NOTREACHED */. Get rid of extraneous _exit(). Calls err(3) on getpeername failure. ``reads well to me!'' avsm@
2006-08-17Instead of doing all this pointer and buffer arithmetic, generate stringRay Lai
using asprintf and strlcat it. Declare usage __dead instead of void in the prototype but static void in the definition. OK millert@
2006-08-17recv(2) returns a ssize_t, so match cc with it.Ray Lai
st.st_mtime is a time_t, so match utmpmtime with it. Check for -1 instead of <0 for some system calls. Remove pointless casts. OK dhill@ and millert@
2006-08-15-r only applies to blacklists. ok beck@Kjell Wooding
2006-08-14Document debug mode. OK jmc@Todd C. Miller
2006-08-14Fix typo introduced in rev 1.16; fixes "login" authentication style.Todd C. Miller
2006-08-12spelling: elminateKevin Steves
2006-08-06Do not take shortcuts when the PLT size is 0; makes emacs work again on alpha.Mark Kettenis
ok drahn@
2006-08-06Work around an issue found when working with gcc3 on alpha,Dale Rahn
gcc2 nomally calls functions thru the gp (basically a function pointer), but gcc3 frequently calls directly to the plt. gcc2 does occasionally directly call to the plt. Currently how the plt/pltgot is fixed up on lazy binding, this will cause the dl_bind code to be called on each plt call causing a symbol resolution and plt fixup. This diff works around the problem partially by recognizing that a pltgot entry is already fixed and skips the symbol resolution. Since the pltgot is what is modified do not add PROT_EXEC permission to the mapping. While this is not an ideal fix, kettenis and I think it is better than before.
2006-07-28Only stop processing prebind deletion if an actual error occurs.Dale Rahn