summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2011-06-23Use a common text explaining how the various configuration parsers usingStuart Henderson
the standard OpenBSD-style parse.y handle continuing lines with backslashes, paying particular attention to how comments are handled (which can cause nasty side-effects if you're not expecting it). Most wording from jmc@, with suggestions from fgsch@, marc@, Richard Toohey, patrick keshishian and Florian Obser, ok jmc@.
2011-06-21Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudioMike Belopuhov
2011-06-20MBR_read() can be reading from a file as well as a raw partition.Kenneth R Westerback
And files can be smaller (e.g. 512 bytes like /usr/mdec/mbr) than a disk sector (e.g. 4096 bytes on pirofti's external disk drive). So relax the length test on the read() result to < DEV_BSIZE (the amount of data we actually want) instead of < secsize (the minimum size that read() will accept). 'fdisk -e' and 'fdisk -i' now work on devices with sector sizes greater than DEV_BSIZE.
2011-06-15When BN_bn2bin converts a bignum to the binary representationMike Belopuhov
it skips leading zeroes if there are any. To accommodate the difference with the protocol we need to prepend those zeroes ourselves. Fixes PR 6601, tested by Pawel Wieleba, sthen, otto. Huge thanks to Pawel for spending nearly a week testing diffs. ok sthen
2011-06-09there is no need to close files when the titanic is going down.Theo de Raadt
2011-06-06some improvements for the text on packet capture; from Lawrence TeoJason McIntyre
ok sthen
2011-06-05mention that rc(8) creates /var/run/dmesg.boot;Ingo Schwarze
found in my tree, obviously forgotten to commit at some point...
2011-06-05fix format stringCharles Longeau
ok dcoppa@ otto@ also reviewed by Vadim Zhukov
2011-06-05Nuke uses of and references to DIOCWLABEL, and the related 'W' andKenneth R Westerback
'N' command line options. ok matthew@
2011-06-02Hack to ensure that the in-core labels contain the current boundsKenneth R Westerback
info from the physical disk after 'disklabel -e' writes the label to disk. Saves having to reboot or do other contortions to initialize these fields. Toss in same treatment for total sectors so all fields forcibly set by kernel have current values. 0'ing of the bounds noted by matthew@. 'lovely' deraadt@
2011-05-27spacingReyk Floeter
2011-05-26Don't provide an af hint to getaddrinfo in settunnel(), this functionStuart Henderson
already checks that families of source and destination addresses match and that's all we need. This allows "ifconfig foo tunnel 1::1 2::2" syntax rather than requiring "ifconfig foo inet6 tunnel 1::1 2::2", which in turn allows hostname.if files to create an IPv4-in-IPv6 tunnel without games with shell escapes. ok dcoppa@, seems ok todd@, "Yes, yes and yes" claudio@
2011-05-24Allow for more room for /usr/obj on static linking only archs; ok krw@ deraadt@Otto Moerbeek
2011-05-23Allow specifying k/m/g/... suffixes in newfs(8) -S and -s options.David Coppa
Useful for mount_mfs, now you can just say: # mount_mfs -s 50m swap /tmp And it will do what you want, taking into account sector size. Old behaviour of -s (specifying count of sectors) is, of course, preserved. All the work was done by Vadim Zhukov (persgray(at)gmail com). OK myself, otto@, thib@
2011-05-23sync auto-allocation tableOtto Moerbeek
2011-05-23Make /usr/obj a bit bigger, on small disks it ends up just a littleOtto Moerbeek
bit too small. ok krw@
2011-05-23mention ranges; prodding and feedback jmc@Damien Miller
2011-05-23allow ranges for entering net.inet.(tcp|udp).baddynamic lists, e.g.Damien Miller
sysctl net.inet.tcp.baddynamic=1-32768 sysctl net.inet.udp.baddynamic=+40000-65535 ok mk@
2011-05-22Apply proper rounding for the R command (changing of auto-allocatedOtto Moerbeek
partitions); ok krw@
2011-05-22sync auto-allocation table with codeOtto Moerbeek
2011-05-22zap unused varOtto Moerbeek
2011-05-22In addition to relative resizing, allow absolute resizing of partitionsOtto Moerbeek
in auto-allocated labels. ok krw@ sthen@
2011-05-13wrong id for UDP_ENCAP_TRANSPORT_DRAFT; ok mikeb@Markus Friedl
2011-05-11Make dhclient more friendly to sequential option processing byKenneth R Westerback
always starting DHCP packet options with DHO_DHCP_MESSAGE_TYPE. Now DHCP-specific options always come after the option identifying the packet as DHCP rather than BOOTP. Makes at least Nortel NetIP DHCP server happier. Clean up some code and parameter passing. Closes PR#6543, as confirmed by original submitter and patch tester Len Zaifman. Thanks! ok matthew@ (who hates the ISC-like code)
2011-05-10Some cleanup and simplifications:Ingo Schwarze
- Explain single user mode once, not three times. - Do not claim that the boot program talked to init; it cannot do so. - Mention that the OpenBSD kernel does not support init -f. - And some minor rewordings and reorderings. Feedback and ok jmc@.
2011-05-09bump copyrightReyk Floeter
2011-05-09rename functions in proc.c to proc_* and move some code from imsg_util.c toReyk Floeter
proc.c. this is the first sync to what i did for relayd but does not include the multi-instance handling - so no functional change.
2011-05-08Small memory optimization from NetBSD; ok krw@ millert@Otto Moerbeek
2011-05-06put the tcpdump-specific stuff in a sane place (that is, not EXAMPLES);Jason McIntyre
ok sthen henning
2011-05-05Use opendev() not opendisk() so we get duid support. OK oga@Todd C. Miller
2011-05-05Small tweak - add direct pointer to env instead of using an indirect one.Reyk Floeter
2011-05-05Move the proc.c-specific runtime state out of struct iked into a sub-struct.Reyk Floeter
This removes iked-specific stuff from proc.c.
2011-05-05rename iked_proc* to privsep_proc*. no functional change.Reyk Floeter
2011-05-04Switch atactl over to using opendev() instead of opendisk() so it canOwain Ainsworth
grok DUIDs now commands such as: # atactl b9b455bd99e393cd work as expected (while everything else that used to work still does). ok sthen@
2011-05-02Remove unused variableCharles Longeau
ok krw@ otto@
2011-05-02store the peer address as it was specified in the policy in theMike Belopuhov
tree that is used to figure out whether the policy is active or not. makes active sa lookup via policy work for nat traversal. problem was reported and fix was tested by sthen, ok sthen, reyk
2011-04-30change one of our current examples to use duids; ken suggested we useJason McIntyre
-E rather than -e as it's more likely; ok krw
2011-04-26setrlimit only if mfs; ok millert@Otto Moerbeek
2011-04-25do not use stdio in the (stupid) SIGSEGV handlerTheo de Raadt
2011-04-25allow commands like "route add 0.0.0.0/1 $SOMEHOST" to work correctly,Stuart Henderson
previously they operated on the default route. reported by weerd@, ok claudio@
2011-04-24remove support for (very) old ffs on-disk formats; ok krw@ and noOtto Moerbeek
objection form the usual suspects
2011-04-23improve line breaking in SYNOPSIS now that semantics of the .Bk macroIgor Sobrado
has changed to conform with modern groff releases. diff for route6d(8) written mostly by schwarze@, with lots of useful advice from jmc@. ok jmc@, schwarze@
2011-04-23Indicate which side of the connection responded during phase 1 while using -v.lum
ok sthen@ markus@
2011-04-22Move things around after recent rc(8) changes.Antoine Jacoutot
ok robert@ jmc@
2011-04-19make same changes regarding -f/-F argument (tempfile -> file) as was doneAlexander Hall
in disklabel(8) pointed out by jmc@
2011-04-19Rename the argument for -f and -F from 'tempfile' to 'file'Alexander Hall
ok krw@ and looks correct to jmc@
2011-04-18Deprecate vnds in favour of svnds.Thordur I. Bjornsson
In effect, this removes the "old" vndX nodes, and renames the svndX nodes to vndX. Old svndX nodes will still continue to work though, for now. Cleanup accordingly. ok deraadt@, todd@ comments and ok on the man page bits from jmc@
2011-04-18Improve the iked acquire mode peer <-> policy matching. This changeReyk Floeter
picks the peer from the acquire message and allows to match masked peers in the policies like "peer any" or "peer 10.0.0.0/8" instead of requiring exactly matching peer specifications. ok mikeb@
2011-04-18When the kernel wants to acquire an SA for an unknown flow, lookup aReyk Floeter
matching policy and init a new IKE SA. This adds support for "acquire mode" from static flows. ok mikeb@
2011-04-18Remove a header file that is only supposed to be used by the kernel.Theo de Raadt