Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-12-20 | add an additional rule to the filter anchor that allows traffic out from | Joel Knight | |
the server to the client. this is necessary in case the server is not otherwise allowed to talk to the client. ok jcs@ | |||
2006-12-20 | More strlen("") fixes. | Ray Lai | |
OK otto@, ``If it makes you feel better'' millert@. | |||
2006-12-15 | reduce RFC2292/3542 #ifdef. | Jun-ichiro itojun Hagino | |
2006-12-09 | IPV6_RECVDSTADDR is not standard. use more standard IPV6_PKTINFO. | Jun-ichiro itojun Hagino | |
also prepare for RFC2292->RFC3542 switch (IPV6_RECVPKTINFO). glocker ok (he tested), deraadt also looked at | |||
2006-12-07 | check exit status of the pfctl command executed. ok beck@ | Otto Moerbeek | |
2006-11-27 | Make spamd error out for a greylisted session only after the DATA | Bob Beck | |
command not after the RCPT command, as this helps people out when they are faced with retarded sender verification schemes - tested out by a number of people on tech@, and running at u of a for a while. Supposedly this makes verizon sender verification happy. Suggested as a stable candidate by people on tech@, I'm ok with that. | |||
2006-11-26 | repair missing DPADD requests | Theo de Raadt | |
2006-11-21 | Fill in load/end address for binary. | Dale Rahn | |
2006-11-15 | failed to purge doubled up environment variables; found by Mark Dowd | Theo de Raadt | |
ok miod | |||
2006-11-14 | stack corruption was fixed a while ago. | Dale Rahn | |
2006-11-14 | improve previous; | Jason McIntyre | |
2006-11-14 | clarify "maxcon" somewhat, particularly its upper limit; | Jason McIntyre | |
from jared rr spiegel (pr #5292), tweaked somewhat; | |||
2006-11-14 | cleanup pointed out by miod@ | Dale Rahn | |
2006-11-13 | Let this build on landisk. | Dale Rahn | |
2006-11-11 | when calculating envp, skip over the NULL between argv and envp. | Dale Rahn | |
2006-11-11 | remove '#if 0' block. | Dale Rahn | |
2006-11-11 | Working? | Dale Rahn | |
2006-11-10 | dont want to know where this stack corruption is coming from. | Dale Rahn | |
2006-11-10 | better... | Dale Rahn | |
2006-11-10 | Getting much closer. | Dale Rahn | |
2006-11-10 | `elminate' etc. is not really the right way to spell `eliminate'. | Michael Knudsen | |
ok brad | |||
2006-11-10 | Not quite working ld.so support for sh | Dale Rahn | |
2006-11-04 | remove misplaced -l stuff; henning needs more caffeine... | Jason McIntyre | |
2006-11-03 | donot for tcpdump, use libpcap directly. | Henning Brauer | |
joint work with Berk D. Demir, ok beck deraadt | |||
2006-10-29 | use setresuid/gid and check for failure, ok bob | Henning Brauer | |
2006-10-28 | Only mprotect pages during relocation if the library is marked TEXTREL | Dale Rahn | |
mips64 version still needs testing. | |||
2006-10-26 | - sort options | Jason McIntyre | |
- sync usage() | |||
2006-10-25 | allow spamlogd to use an alternate pflog interface | Henning Brauer | |
spamlogd was the #1 reason for me to implement the multiple pflog thing, so now you can finally have a nice seperation between logging and spamlogd tracking smtp connections joint work with djm, ok djm bob and kinda "Berk D. Demir" <bdd@mindcast.org> | |||
2006-10-23 | no need to use "keep state" and "flags S/SA" in pf rules, | Jason McIntyre | |
now that it is the default; ok henning mcbride camield (ftp-proxy bits) deraadt | |||
2006-10-19 | no need to escape "'"; | Jason McIntyre | |
2006-10-18 | Avoid double fclose() of a file if we exceed retries. Coverity ID 2669. | Todd C. Miller | |
OK cloder@ | |||
2006-10-18 | you do not call fclose() on a file descriptor; ok cloder | Theo de Raadt | |
2006-10-18 | do not name FILE * variables "fd" since it is confusing | Theo de Raadt | |
2006-10-17 | Make this easier for people who aren't aware of what shell they are running. | Bob Beck | |
ok deraadt@ | |||
2006-09-29 | typo; from sthen | Jason McIntyre | |
2006-09-26 | switch alpha to gcc3; joint work with drahn@ and brad@ | Martin Reindl | |
ok drahn@ brad@ mickey@ deraadt@ | |||
2006-09-24 | Fill in the list of loaded segments for the main executable such that we can | Mark Kettenis | |
unprotect them if necessary for binaries that have TEXTREL set. ok drahn@, martin@ | |||
2006-09-22 | Remove lfs_cleanerd and mount_lfs | Pedro Martelletto | |
2006-09-20 | Recommit non-static array fix. | Ray Lai | |
2006-08-23 | Support arm libraries with DT_TEXTREL, has no affect for other libraries. | Dale Rahn | |
ok kettenis, 'in then' deraadt@ | |||
2006-08-19 | Don't shadow err(3). | Ray Lai | |
Store strlen() results in a size_t. Add __dead to both usage() and logerr(). Get rid of /* NOTREACHED */. Get rid of extraneous _exit(). Calls err(3) on getpeername failure. ``reads well to me!'' avsm@ | |||
2006-08-17 | Instead of doing all this pointer and buffer arithmetic, generate string | Ray Lai | |
using asprintf and strlcat it. Declare usage __dead instead of void in the prototype but static void in the definition. OK millert@ | |||
2006-08-17 | recv(2) returns a ssize_t, so match cc with it. | Ray Lai | |
st.st_mtime is a time_t, so match utmpmtime with it. Check for -1 instead of <0 for some system calls. Remove pointless casts. OK dhill@ and millert@ | |||
2006-08-15 | -r only applies to blacklists. ok beck@ | Kjell Wooding | |
2006-08-14 | Document debug mode. OK jmc@ | Todd C. Miller | |
2006-08-14 | Fix typo introduced in rev 1.16; fixes "login" authentication style. | Todd C. Miller | |
2006-08-12 | spelling: elminate | Kevin Steves | |
2006-08-06 | Do not take shortcuts when the PLT size is 0; makes emacs work again on alpha. | Mark Kettenis | |
ok drahn@ | |||
2006-08-06 | Work around an issue found when working with gcc3 on alpha, | Dale Rahn | |
gcc2 nomally calls functions thru the gp (basically a function pointer), but gcc3 frequently calls directly to the plt. gcc2 does occasionally directly call to the plt. Currently how the plt/pltgot is fixed up on lazy binding, this will cause the dl_bind code to be called on each plt call causing a symbol resolution and plt fixup. This diff works around the problem partially by recognizing that a pltgot entry is already fixed and skips the symbol resolution. Since the pltgot is what is modified do not add PROT_EXEC permission to the mapping. While this is not an ideal fix, kettenis and I think it is better than before. | |||
2006-07-28 | Only stop processing prebind deletion if an actual error occurs. | Dale Rahn | |