summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2015-10-25route flush cannot pledge before sysctl for NET_RT_DUMP; defer the act.Theo de Raadt
2015-10-24Inline trivial myechoreply function in the one place it's used; likeFlorian Obser
2015-10-24nonce is unused.Florian Obser
2015-10-24Sync ping6 output to ping. ping has been around for longer and soFlorian Obser
2015-10-24various clean up;Jason McIntyre
2015-10-24Removing xresolve from generating script has been forgotten.Alexander Bluhm
2015-10-24Add pair(4), a vether-based virtual Ethernet driver to interconnectReyk Floeter
2015-10-24Add pair(4), a vether-based virtual Ethernet driver to interconnectReyk Floeter
2015-10-24normalise TUNNEL synopsis; ok dlgJason McIntyre
2015-10-23route has 3 code paths: monitor (listening on route socket); showTheo de Raadt
2015-10-23push LDSTATIC line down so it's not overridden by makefile.inc. ok reykTed Unangst
2015-10-23tweak the vnetid so it can be optional and therefore cleared/deleted.David Gwynne
2015-10-22iked hereby pledges that it will run with restricted systemReyk Floeter
2015-10-22Stop linking iked -static: It was inherited from isakmpd that isReyk Floeter
2015-10-22halex removed the -p restriction, so do not document it;Jason McIntyre
2015-10-20Fix ocsp by adding a missing TAILQ_INIT().Reyk Floeter
2015-10-19break long lines in examples; ok jmc@Christian Weisgerber
2015-10-19Fix control_imsg_forward() by changing imsg_compose() toReyk Floeter
2015-10-19Remove the ikev1 stub - Since I started iked, it has an empty privsepReyk Floeter
2015-10-18after kmem is open and setup, pledge "stdio rpath wpath cpath"Theo de Raadt
2015-10-18Collapse some strange programmer style with too much abstraction.Theo de Raadt
2015-10-18Use explicit_bzero() when the memory is freed directly afterward.mmcc
2015-10-17make usage() less horribleFlorian Obser
2015-10-17NUMBOOT is dead! Nuke the variables and abstractions that were usedKenneth R Westerback
2015-10-17Implement -w maxwait now that the -w flag is free in ping6. SameFlorian Obser
2015-10-17move -V option before -v and remove one spurious newline, now in syncFlorian Obser
2015-10-17Remove left over -N and -w. Adapt wording for the link local example.Florian Obser
2015-10-16Remove RFC 4620 support. The RFC is experimental and this code plainFlorian Obser
2015-10-16No longer talk about -b flag, it's gone.Florian Obser
2015-10-16Move -t and -w functionality to -a. Both flags are in the way for aFlorian Obser
2015-10-16Remove -B from EXAMPLES; reminded by jmc@Miod Vallat
2015-10-15Remove disklabel -B (NUMBOOT) support. All the platforms which used to needMiod Vallat
2015-10-15Remove some unnecessary NULL-checks before free(). Change two bzero()mmcc
2015-10-15corrects pledge code for fsck_ffs and fsck_ext2fsSebastien Marie
2015-10-15A classic case for bzero() -> explicit_bzero()mmcc
2015-10-15fsck_ffs has a ^T signal handler which opens /dev/tty late. Hoist thatTheo de Raadt
2015-10-14To specify a source address ping uses -I while ping6 uses -S. SwitchFlorian Obser
2015-10-14Since the fsck_* programs now only handle one filesystem, this createsTheo de Raadt
2015-10-14unfortunately rewritelabel() just before termination does a non-permittedTheo de Raadt
2015-10-14Only accept one filesystem/device as argument for checking. Few peopleTheo de Raadt
2015-10-13Remove -b flag and let ping6 set the socket buffer size automaticallyFlorian Obser
2015-10-13can pledge "stdio" after opening device.Theo de Raadt
2015-10-13Pledge "stdio rpath" requests for nologin.Doug Hogan
2015-10-12deprecate & remove -W option; ok florianTheo de Raadt
2015-10-12Annotate an pretty obvious signal race... no time to fix it now.Theo de Raadt
2015-10-12tunefs can pledge to only use "stdio", after it has opened the device.Theo de Raadt
2015-10-12pledge "stdio" right after opening the device. The remainder isTheo de Raadt
2015-10-11Pledge that ncheck_ffs only uses "stdio" after opening the device.Doug Hogan
2015-10-11After the filesystem is opened, pledge "stdio"Theo de Raadt
2015-10-11If only displaying the disklabel (the normal thing to do against potentiallyTheo de Raadt