summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2012-09-17replace the erroneous DIAGNOSTICS section with a (hopefully) accurateJason McIntyre
EXIT STATUS one; ok guenther
2012-09-12Define empty CDIAGFLAGS for programs that use Werror.Christiano F. Haesbaert
Makes "make build" build with WARNINGS=Yes on amd64. ok espie
2012-09-11prevent detection of bogus librariesMarc Espie
problem initially noticed by deraadt@, exchanged various patches with kettenis@ decided to fix the bug now, even though ldconfig could probably use a larger rewrite. okay matthew@
2012-09-02Specify an include path for SYS.h via CPPFLAGS not AFLAGSJonathan Gray
so mkdep can find it. This was breaking builds after recent changes to mkdep to error out if the compiler does. ok deraadt@
2012-08-31Compile ld.so with debug info. This will not only help people hacking onMark Kettenis
ld.so itself, but also make it easier to debug code that uses dlopen(3). ok deraadt@, matthew@
2012-08-31Since _dl_debug_map is only initialized if we see a DT_DEBUG tag, make sureMark Kettenis
it isn't NULL before we dereference it. Fixes perl PIE on hppa. ok matthew@, deraadt@
2012-08-30remove libexec/tftp-proxy now we have usr.sbin/tftp-proxyDavid Gwynne
ok deraadt@
2012-08-28Add __guard_local as a hidden symbol to ld.so, kernel, and everyMatthew Dempsky
executable and DSO (via crtbegin.c/crtbeginS.c). Not used yet, but needed before GCC can start emitting -fstack-protector code that uses them instead of __guard.
2012-08-22Change ld.so and libc to use .openbsd.randomdata on ELF platforms forMatthew Dempsky
initializing their __guard values. For the time being, we're leaving libc's constructor method as a backup to make sure __guard actually gets initialized and to emit syslog warnings when it's not. Not really an ABI change, so no shlib bump... "hold on to your butts" ok deraadt, kettenis
2012-08-20Add support for .openbsd.randomdata sections and PT_OPENBSD_RANDOMIZEMatthew Dempsky
segments to the kernel, ld (2.15), and ld.so. Tested on alpha, amd64, i386, macppc, and sparc64 (thanks naddy, mpi, and okan!). Idea discussed for some time; committing now for further testing. ok deraadt
2012-08-17Fix mips64 and powerpc's ld.so syscall implementations by addingMatthew Dempsky
"memory" to the list of clobbered registers for all syscalls that accept a pointer. This prevents GCC from optimizing away memory loads and stores that otherwise appear unused in a function. Issue noted and identified by miod; fix by me. ok miod, mpi
2012-08-16send inetd tftpd to the attic.David Gwynne
2012-08-16switch off inetd tftp-proxy and enable the standalone one instead.David Gwynne
2012-08-07Factor out a _dl_randombuf() method from _dl_random().Matthew Dempsky
2012-08-04MDTM and SIZE have been in RFC 3659 for over five years. Also, mention bothPascal Stumpf
RFCs in "SEE ALSO". ok jmc@
2012-07-21Add a new mmap(2) flag __MAP_NOREMAP for use with MAP_FIXED toMatthew Dempsky
indicate that the kernel should fail with MAP_FAILED if the specified address is not currently available instead of unmapping it. Change ld.so on i386 to make use of __MAP_NOREMAP to improve reliability. __MAP_NOREMAP diff by guenther based on an earlier diff by Ariane; ld.so bits by guenther and me bulk build stress testing of earlier diffs by sthen ok deraadt; committing now for further testing
2012-07-08To detect changes of system files, use SHA-256 rather than MD5,Ingo Schwarze
taking advantage of naddy@'s recent mtree(8) modernization. While here, do not provide an example protecting a home directory from file changes; protect some system binaries instead. ok naddy@ jmc@
2012-07-08remove unused functions, ok phesslerStuart Henderson
2012-07-07rename prio in struct pf_rule and related structs to set_prio so it isHenning Brauer
utterly clear this is not a filter criteria but a packet modification thing. also preparation for upcoming changes, including one to unscrew this mess (I should not have to touch half the tree for this - ifixitlater) not user visible, ok gcc
2012-07-06Fix LD_DEBUG=1 regression introduced by previous commit.Matthew Dempsky
ok kurt
2012-06-20With MP rthread setups, we cannot remove the X permission from the GOTTheo de Raadt
entry momentarily, because another thread might attempt lazy resolve. ok matthew guenther
2012-06-19use warn() instead of perror(), like the rest of the code doesTheo de Raadt
from Liam J. Foy
2012-06-14Add support for DF_1_NOOPEN. Based on an origional diff from matthew@.Mark Kettenis
ok matthew@
2012-06-12Fix loaded object sod matching: when we load libfoo.so.X.Y intoMatthew Dempsky
memory, we should be able to match other requests for libfoo.so.X.Z against that same object. ok kurt, kettenis
2012-06-01add a krb5-noverify option for login.conf that disables verificationDavid Gwynne
of the server against a local host keytab file when you're authing users with login_krb5. useful for when you need to auth users but dealing with the domain admins is painful... ok sthen@ jj@ millert@
2012-05-17Also check permissions of .ssh/id_ecdsa.Pascal Stumpf
ok schwarze@
2012-05-08Refuse to load ELF objects that contain a PT_TLS program header.Joel Sing
Otherwise the binary assumes that the requested TLS storage has been allocated and will happily use it, resulting in unwanted memory corruption. ok guenther@
2012-04-19rate-limit accept(); small tweaks and such along the way from gilles,Theo de Raadt
millert, camield..
2012-04-18merge some whitespace changes before bigger changesTheo de Raadt
2012-04-13Don't assume that the new conffd is a unset in the fd_set, it could be aTheo de Raadt
recyle of a fd which is still set. ok claudio
2012-04-04Return an error much earlier if recvmsg failsTheo de Raadt
2012-03-21Switch ld.so's _dl_opendir functions to use a locally definedMatthew Dempsky
_dl_dirdesc struct (containing just the fields ld.so's implementation actually needs) instead of reusing libc's _dirdesc struct. Also, switch ldconfig to use futimens() instead of futimes(). ok deraadt@
2012-03-06Fill in default values for rtableid/onrdomain/prio when creating PF rules,Stuart Henderson
prompted by a mail from Gabriel Linder. OK henning@
2012-03-06clean up some newly created lies now that tftpd doesnt run out of inetd.David Gwynne
poke by deraadt@
2012-03-05swap out libexec/tftpd for usr.sbin/tftpdDavid Gwynne
ok henning@ sthen@ mikeb@ deraadt@ wants this
2012-03-04In preparation for getline and getdelim additions to libc, rename getline()Federico G. Schwindt
occurrences to get_line(). Based on a diff from Jan Klemkow <j-dot-klemkow-at-wemelug-dot-de> to tech.
2012-02-26Fix several manpage titles, from Lawrence Teo.Christiano F. Haesbaert
ok dcoppa@ jmc@ schwarze@.
2012-02-24login_yubikey(8) reads user's last-use counter from user.ctr, not user.cntIgor Sobrado
2012-02-01flags without arguments come first; use a standard wording on theIgor Sobrado
body of the manual page; add missing argument to -s; while here, remove a trailing whitespace found by jmc@ ok jmc@
2012-02-01improve synopsis markup of login_* utilities; use a more standardIgor Sobrado
phrasing when listing flags; add missing arguments to flags in the DESCRIPTION section of the manual page. use of .Li (literal text) macros and standard wording suggested by jmc@ ok jmc@
2012-02-01document login_yubikey optionsDavid Hill
ok jmc@
2012-01-31remove superfluous RCS identifiers; while here, indent identifierIgor Sobrado
on Makefile to match style used by other login_* utilities. ok dhill@
2012-01-31use the right capitalization for YubiKey.Igor Sobrado
ok dhill@, jmc@
2012-01-27fix pkg_delete for people who had mandocdb enabled:Marc Espie
if we don't find a whatis.db when deleting (which could happen if mandocdb was enabled while pkg_add was running), first create it, then update it. okay nigel@, schwarze@
2012-01-26hook login_yubikey to the buildDavid Hill
ok deraadt
2012-01-22Bring in corrections and improvements that were committed to the newIngo Schwarze
suite of tools now being disabled, as far as they apply to the current tools as well.
2012-01-20Do not log the password at LOG_INFO, but at LOG_DEBUG instead.David Hill
Change the successes from LOG_INFO to LOG_DEBUG as well.
2012-01-18tweak previous;Jason McIntyre
2012-01-18Welcome dhartmei@'s login_yubikey. To be worked on in-tree.David Hill
ok millert@ support from mcbride@ and others
2012-01-16Backout activation of the new apropos(1)/whatis(1)/makewhatis(8).Ingo Schwarze
In its current state, it causes too much slowdown, in particular during system builds, and there are other regressions. That cannot be fixed quickly while it's enabled. Problems pointed out by espie@, backout requested by deraadt@, diff "looks good" to espie@.