summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2013-08-25the comment that comma characters cannot be used in transformMike Belopuhov
names in ike_section_p2 applies to phase-1 transforms as well.
2013-08-22this full stop has lost its way...Jason McIntyre
2013-08-19Add missing util.hDavid Coppa
ok otto@ mpi@ mikeb@
2013-08-18Fix calls to printf-like functions which passed a non-fixed stringPhilip Guenther
as the format and no variable args. Replace "%#0.*X" with "%#.*X": the zero-fill flag is ignored/implied on numeric conversions when a precision is specified. ok jung@ millert@ krw@
2013-08-17Do not create a route to the bound address via 127.0.0.1. Our stackKenneth R Westerback
should be able to correctly short-circuit packet routing to local addresses without this. Requested by many over the years, most recently chrisz@. Get it in early to see if anything does break. ok claudio@ henning@
2013-08-16Replace the misleading SIOC{G,S}IFGENERIC ioctls by SIOCG{G,S}PPPPARAMS.Martin Pieuchot
This is another ABI break but no port rely on them as verified by naddy@. ok claudio@, mikeb@, henning@
2013-08-14Only skip address deleting/adding and route deleting/adding onFlorian Obser
identical lease when we are in state S_RENEWING. Otherwise we can end up without an IP address on the interface because dhclient thinks it's still there and doesn't add it. Found the hard way during suspend/resume. OK krw@
2013-08-14one more Mt; from jan staryJason McIntyre
2013-08-14some Bx/Ox conversion;Jason McIntyre
From: Jan Stary
2013-08-14no longer any need to quote macro lines with >9 args;Jason McIntyre
From: Jan Stary
2013-08-12Remove duplicate and incorrect recursive anchor printing codeMike Belopuhov
and instead rely on the one provided by the same function just a few lines below. ok lteo henning
2013-08-12Add missing \n after a warning.Raphael Graf
ok miod@
2013-08-11capitalize RAID in one spot.Brad Smith
2013-08-02Remove an incorrect call to pfctl_print_rule_counters when trying toMike Belopuhov
print out anchor rules recursively; unbreaks pf1.loaded regress test. ok lteo, henning
2013-08-01Provide local implementations of if_nametoindex(3) and if_indextoname(3)Mike Belopuhov
that make use of the cache of addresses populated by the ifa_load on startup to save the trouble of calling expensive getaddrinfo(3) up to four times per rule. Performance wise this change provides a speed up factor of 20 with a 11k line ruleset on a machine with 150 VLANs and 250 IP addresses (20 seconds down to 1 in this case). "wow!" henning, ok benno, florian
2013-07-21In getmntname(), iterate through the list of mount points fromTodd C. Miller
end to beginning instead of from beginning to end. This matches the behavior of umountall() and fixes "umount -a" in cases where there are multiple file systems on the same mount point. Based on a diff from naddy@. OK naddy@ guenther@
2013-07-21zap one redundant line, replacing it with a note that althoughJason McIntyre
SYNOPSIS suggests no options are neccessary, in fact a minimum of one is required; ok henning
2013-07-21tidy up DESCRIPTION somewhat, and format nicer;Jason McIntyre
ok henning
2013-07-21re-zap the previous paragraph, but this time in its place documentJason McIntyre
what happens when a broken pf config is encountered, both generally and at system startup; ok henning
2013-07-20reverting previous until i can work out what henning is telling me...Jason McIntyre
2013-07-19Prep for WARNINGS=yes: add the prototypes that were missing, silencePhilip Guenther
a "signed vs unsigned in conditional" warning, and eliminate what looks like an unintentional variable shadowing. ok bluhm@
2013-07-19Compile /sbin/route with -Wall enabled.Alexander Bluhm
OK deraadt@
2013-07-19remove redundant paragraph; from Pieter VerberneJason McIntyre
2013-07-18Revert 1.191 and 1.193 and fix the original problem (access to the lastPhilip Guenther
filesystem, currently ext2fs) by increasing maxtypenum sufficiently. suggested by Rafael Neves (rafaelneves (at) gmail.com)
2013-07-18Correct off-by-one in naming of nodes below vfs.mounts.Philip Guenther
problem noted by Rafael Neves (rafaelneves (at) gmail.com) ok jca@
2013-07-16Add missing .Mt macros for AUTHORS email addresses.Ingo Schwarze
From Jan Stary <hans at stare dot cz>. ok jmc@
2013-07-16Make sure the ioctl(2) has been processed by sppp(4) before printingMartin Pieuchot
any phase error. This prevents ifconfig(8) from priting 'sppp: phase...' messages for vlan(4) interfaces attached to interfaces with a long name. A better fix should be cooked because various pseudo-interfaces still use the same set of ioctl(2)s for different purposes. Issue reported by jca@, ok claudio@, jca@
2013-07-15If a DHCPREQUEST returns a lease identical to the one currently bound toKenneth R Westerback
the interface, skip the address deleting/adding and route deleting/adding and simply update the timestamps. Suggested by sthen@. Tweaks from millert@. ok sthen@ millert@
2013-07-14merge the relevant bits of dhcp(8) into dhclient(8) and dhcpd(8),Jason McIntyre
removing traces of dhcp(8)... i'm about to remove that file, since it's essentially useless. holding off for a little, in case my commit is greeted with howls. help/ok krw
2013-07-14"r" logs to syslog; From: Anders BerggrenJason McIntyre
ok millert sthen
2013-07-11update (or add) STANDARDS;Jason McIntyre
help/ok krw
2013-07-11Put more debug verbiage under DEBUG. Add a few more debug messages.Kenneth R Westerback
Make packet discarding decisions before parsing the packet's possible options. No intended functional change.
2013-07-10Change the structure used in the SPPPIOSDEFS and SPPPIOGDEFS ioctlsMartin Pieuchot
to only include what is really needed. In particular stop including a "struct ifnet" and move kernel-only definition into the proper #if dance. While here remove the unused spppinfo() from ifconfig. ok guenther@, sthen@, mikeb@
2013-07-07Remove erroneous warnings -- we do not reject offers just because theKenneth R Westerback
option buffer(s) end badly.
2013-07-06Tone down verbosity by putting the "Unexpected <blah>" messages underKenneth R Westerback
#ifdef DEBUG. They were mostly for, well, debugging.
2013-07-06Fix a lie in one comment and zap a pointless sentence in another.Kenneth R Westerback
2013-07-06Zap leading whitespace.Kenneth R Westerback
2013-07-05Zap trailing whitespace.Kenneth R Westerback
2013-07-05More a.out files leave the party.Miod Vallat
2013-07-05ELF_TOOLCHAIN bye bye.Miod Vallat
2013-07-05Collect and display 'match' counters for pf tables.Bret Lambert
While here, fix pf table displays to fit within 80 chars. Manpage input jmc@ ok henning@ reyk@
2013-07-02Long passwords could not be replaced completely with shorterAlexander Bluhm
passwords. ioctl(SIOCGVH) fills the carpr_key with the old value. strlcpy() overwrites only the beginning of the key. Add a bzero() to clear the rest. Testing Jan Klemkow; OK florian@ mpf@
2013-06-29do not use Sx for sections outwith the page;Jason McIntyre
man4 still to go...
2013-06-19Do not install pcap-int.h to /usr/include as it is an internal libraryLawrence Teo
header (pointed out by matthew@). Let only pflogd and tcpdump include pcap-int.h directly since they need it for privilege separation. "looks good" sthen feedback/ok deraadt matthew millert
2013-06-18Initialize duid memory before shifting stuff into elements of it.Kenneth R Westerback
No doubt quiets one or more of the fringe compilers out there. Use variable 'part' rather than recalculating same value in the subsequent printf(). From dhill. ok otto@
2013-06-18Don't use inet_ntoa() twice in one parameter list. You'll just printKenneth R Westerback
one of the strings twice. Spotted by mpi@, who also tweaked the diff by pointing out INET_ADDRSTRLEN. Should fix mysterious messages like "1.2.3.4, not 1.2.3.4, deleted from ...".
2013-06-18Split RTM_NEWADDR and RTM_DELADDR handling into separate casesKenneth R Westerback
rather than 1 case with a check to see which messages it was. More code duplication, easier to read. No functional change.
2013-06-17Check calloc() return value. Plug leak of resulting memory.Kenneth R Westerback
Latter from dhill.
2013-06-13Add support for protected-subnet config types.Reyk Floeter
From Ryan Slack
2013-06-11final removal of daddr64_t. daddr_t has been 64 bit for a long enoughTheo de Raadt
test period; i think 3 years ago the last bugs fell out. ok otto beck others
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-11 07:04:12 +0000