summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2008-04-28Teach sysctl about mpls.Esben Norby
Claudio did all the code, I'm just comitting it... ok claudio@ laurent@ dlg@
2008-04-28It is now possible to enter static MPLS routes into the kernel.Esben Norby
It is still not possible to set the desired opration for an entry. ok claudio@ laurent@ dlg@
2008-04-21optnl is a crutch for those who do not understand yacc. itTheo de Raadt
leads to a variety of errors; ok mcbride
2008-04-18remove wparekey from the list of 802.11 ifconfig options.Damien Bergamini
pointed out by drahn@
2008-04-17remove a word i misinterpreted;Jason McIntyre
2008-04-16mkfifo makes fifos, not directories; from Ben CalvertJason McIntyre
while here, make the description of -m more consistent for mkdir, mkfifo, and mknod. add a touch of .Ex for mkdir too.
2008-04-16- wpa-psk is section 8, not 1Jason McIntyre
- one more passphrase tweak
2008-04-16Kernel implementation of the 4-way handshake and group-keyDamien Bergamini
handshake protocols (both supplicant and authenticator state machines) as defined in the IEEE 802.11i standard. Software implementation of the TKIP (Temporal Key Integrity Protocol) and CCMP (CTR with CBC-MAC Protocol) protocols. This diff doesn't implement any of the 802.1X authentication protocols and thus only PSK authentication (using pre-shared keys) is currently supported. In concrete terms, this adds support for WPA-PSK and WPA2-PSK protocols, both in station and hostap modes. The following drivers are marked as WPA-capable and should work: bwi(4), malo(4), ral(4), iwn(4), wpi(4), ural(4), rum(4), upgt(4), and zyd(4) The following options have been added to ifconfig(8): wpa, wpapsk, wpaprotos, wpaakms, wpaciphers, wpagroupcipher wpa-psk(8) can be used to generate keys from passphrases. tested by many@ ok deraadt@
2008-04-16pass-phrase -> passphrase, in keeping with the rest of the docs;Jason McIntyre
2008-04-15link wpa-psk(8) to the buildDamien Bergamini
2008-04-15welcome wpa-psk(8).Damien Bergamini
ok deraadt@
2008-04-13Redo the '?' output in (E)ditor mode so it uses two columns and onceKenneth R Westerback
again fits on one page. Suggested by, tweaked and ok deraadt@.
2008-04-13Use arc4random_buf() when requesting more than a single word of outputDamien Miller
Use arc4random_uniform() when the desired random number upper bound is not a power of two ok deraadt@ millert@
2008-04-11add support for the "include" directive using code from pfctl/parse.y.Reyk Floeter
pointed out by Prabhu Gurumurthy ok deraadt@
2008-04-07Since Alpha is NUMBOOT=0, no need for #ifdef __alpha__ code inside aKenneth R Westerback
#if NUMBOOT > 0 section.
2008-04-07Restore boot block (-B) support that was incorrectly deleted duringKenneth R Westerback
the -r removal. Found by drahn@ when attempting a landisk install. ok deraadt@ drahn@
2008-04-06nwflag is never set now that '-r' is no more, so remove it and the warningKenneth R Westerback
that was contingent on it being set.
2008-04-06Remove stray '-r' reference that survived the nuke of -r.Kenneth R Westerback
2008-04-06Fix logic botch I introduced with r1.123 which effectively disabledKenneth R Westerback
the '-c' and '-d` commands. With the removal of 'rflag' (logically making it always false), (a || (rflag && cflag + dflag) || b) should be (a || b), not (a || (cflag + dflag) || b). This fixes 'disklabel -w -d <disk>' as used in the install scripts. Reported by Peter Kun on misc@. Thanks!
2008-03-29fix a free(NULL) in setcarp_nodes().Damien Bergamini
ok mpf@, chl@ "i agree with the diagnosis" oga@
2008-03-26zap undocumented 'F' flag; prompted by J.Thornburg. ok millert@Otto Moerbeek
2008-03-24msg_controllen has to be CMSG_SPACE so that the kernel can account forTheo de Raadt
each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis
2008-03-23Remove two stray references to the departed -r argument to disklabel.Kenneth R Westerback
Pointed out by jmc@
2008-03-23Nuke disklabel -r. All labels come from the kernel via ioctl.Kenneth R Westerback
"make sense" miod@ ok deraadt@
2008-03-19document "netboot" interface group;Jason McIntyre
based on a diff originally from bsd openbsd rutgers edu
2008-03-15Repair the simple cases for msg_controllen where it should just beTheo de Raadt
CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer
2008-03-15Fix several CMSG-related bugs. Chaining CMSG's is tricky since you need toMark Kettenis
use CMSG_SPACE for all except the last one, which should be CMSG_LEN. This makes calculate .msg_controllen tricky. Also make sure that we can receive multiple CMSG's again. ok deraadt@, hshoexer@
2008-03-14"-Aa" are not required flags; sort synopses; improve description of "-a"Igor Sobrado
written with invaluable advice from jmc@ ok jmc@
2008-03-13make sure we start 4 servers on udp if called withThordur I. Bjornsson
no arguments, like the man page promises. ok deraadt@, blambert@ From tcuji@pwns.ms
2008-03-13Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due toTheo de Raadt
an extensive discussion with otto, kettenis, millert, and hshoexer
2008-03-12Code was not passing script exit status; fix with macro.Hugh Graham
deraadt@ OK
2008-03-02Use a union to ensure alignment of the cmsg.Hans-Joerg Hoexer
ok deraadt
2008-02-28Log an error if a device can not be opened, only log line discipline attachmentMarc Balmer
when the line discipline has really been attached. And a few manual tweaks.
2008-02-22Support for specifying aes-{128,192,256}. Originial idea by PrabhuHans-Joerg Hoexer
Gurumurthy, tweaks and commit-ready diff by Mitja Muzenic! Thanks guys! ok todd@
2008-02-18adjust width of S column to improve printing of the MBR partition tableIgor Sobrado
on modern disk geometries; while here, better alignment of column labels ok jmc@, jsing@, krw@, and otto@
2008-02-17Define default configurations for AES-192 and AES-256. From Mitja MuzenicHans-Joerg Hoexer
<mitja at muzenic dot net>, diff provided already quite some time ago, many many thanks. This should have gone in months ago but I was slacking, sorry for that.
2008-02-13Use HW_PHYSMEM64.Mark Kettenis
ok henning@
2008-02-12document modifier types; requested by AurelienJason McIntyre
text from ipsecadm(8), hshoexer, and myself
2008-02-11bump Mdocdate for pages committed in "febuary", necessary becauseJason McIntyre
of a typo in rcs.c;
2008-02-09Adjust type of hw.physmem and hw.usermem; they are 64-bit values now.Mark Kettenis
2008-02-09Introduce HW_PHYSMEM64 and HW_USERMEM64 sysctls, which don't overflow onMark Kettenis
machines with more than 4GB of memory. Make sysctl(8) print values obtained using these sysctls for hw.physmem and hw.usermem. ok krw@, miod@
2008-02-07Check reads and lseek correctly for unsigned return; ok krw@Ian Darwin
2008-02-06Fix possible memory leaks when sending phase 1 IDs.Moritz Jodeit
From Igor Zinovik <zinovik@cs.karelia.ru> ok hshoexer@
2008-02-05Move carp load balancing (ARP/IP) to a simpler configuration scheme.Marco Pfatschbacher
Instead of using the same IP on multiple interfaces, carp has to be configured with the new "carpnodes" and "balancing" options. # ifconfig carp0 carpnodes 1:0,2:100,3:100 balancing ip carpdev sis0 192.168.5.50 Please note, that this is a flag day for anyone using carp balancing. You'll need to adjust your configuration accordingly. Addititionally this diff adds IPv6 NDP balancing support. Tested and OK mcbride@, reyk@. Manpage help by jmc@.
2008-02-01Enable the rest of the filter_opts to be used on anchors. These were acceptedRyan Thomas McBride
by the parser but not passed to the kernel. This allows filtering based on uid, gid, icmp options, tcp flags, os fingerprint, tos, tags, and probability; It also allows the label to be set. State options and tagging are not permitted. ok henning mpf
2008-01-29More read/write result checking fixes to avoid unsigned comparisons vsKenneth R Westerback
-1. ok henning@ beck@ ray@
2008-01-29fix race in makefileMarc Espie
2008-01-26the kids want I/O;Jason McIntyre
2008-01-26getuint() doesn't use its partno argument. So eliminate it. NoKenneth R Westerback
functional change. Noticed by lint.
2008-01-26Create the automatic tables at the base of the anchor stack rather thanRyan Thomas McBride
in the inline anchor. Fixes optimizer bug where automatic table creation in inline anchors fails because rules are now loaded after optimization and no transaction has been opened for the anchor. bug reported by Henrik Johansen ok henning dhartmei