summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2015-07-14Use volatile sig_atomic_t for requested_transition since it isTodd C. Miller
modified inside signal handlers. Instead of returning a function pointer, the state functions now return an enum for the next state. This is used as an index into an array of function pointers to do the actual state change in transition(). OK deraadt@
2015-07-14clarification from trondd;Jason McIntyre
ok mikeb
2015-07-09Nuke unused variable.Kenneth R Westerback
2015-07-08Do not attempt to read a disk sector worth of data from the fileKenneth R Westerback
containing the MBR template. Most especially don't get upset when the 512-byte file does not contain a full 4096 byte disk sector. Allows 4096-byte disks to be fdisk'ed once more. Problem reported and fix tested by Gerald Hanuer via bugs@. ok deraadt@
2015-07-07repair policy-ikesa-linking by replacing the broken RB_TREE w/TAILQMarkus Friedl
(e.g. the policy might be used-after-free on 'ikectl reconfig') ok mikeb@
2015-07-03Terminate 'config' keyword array with a NULL element.Mike Belopuhov
Reported by trondd at kagu-tsuchi ! com, thanks!
2015-06-15document pfctl -ss -R <rule>, ok mikeb@Stuart Henderson
2015-06-12Allow rule ID filter to be specified for show states outputMike Belopuhov
Tweak pfctl to respect the rule ID parameter (-R) specified along with the show states (-s states) option to filter out states that are not associated with a given rule from the output. ok sthen, benno
2015-06-11Use "compliant" header guards by avoiding the reserved '_' namespace.Reyk Floeter
Pointed out by Markus Elfring OK mikeb@ millert@
2015-06-05Fix coupling and decoupling operations.vgross
With help and ok from mikeb@
2015-06-03Do not assume that asprintf() clears the pointer on failure, whichTodd C. Miller
is non-portable. Also add missing asprintf() return value checks. OK deraadt@ guenther@ doug@
2015-05-30fix usage();Jason McIntyre
2015-05-29do not need non-NULL-check before free(p), other minor refactoringTheo de Raadt
from Benjamin Baier
2015-05-29remove duplicate assignments; from Benjamin BaierTheo de Raadt
2015-05-29Initial addition of ``Patrol Read'' support in bio(4), biocto(8), andMasao Uebayashi
mfi(4). Based on FreeBSD, but done without mfiutil(8). OK deraadt@
2015-05-26build wsconsctl and wsconscfg on armv7Jonathan Gray
2015-05-25bump up the default Diffie-Hellman group to modp3072; ok mikeb@ djm@Christian Weisgerber
2015-05-23Canonicalize all devices to DUIDs in order to make -w and -W output consistent.Philip Guenther
Based on diff from Manuel Giraud (manuel (at) ledu-giraud.fr) Thanks!
2015-05-19improve spacing in disklabel template.Igor Sobrado
2015-05-18Tweak parsing so that hostnames starting with 0-9 are accepted.Kenneth R Westerback
Reported long ago by matthieu@. Also Jacob Berkman via the lists. Tests and suggestions from Jacob and Matthieu.
2015-05-18Stop rejecting leases with a subnet that overlaps a subnet alreadyKenneth R Westerback
present. The latest routing stack code can now handle these situations. Much requested by beck@ and others. Detailed discussion at s2k15 identified required routing changes. ok claudio@
2015-05-17nope, ioctl has not been used for a whileTheo de Raadt
2015-05-11explicit_bzero(3) on private data, in case of core dumps (and being a good ↵Martin Pelikan
example) ok florian jsing
2015-05-08Add a new `don't read back' flag for variables, to prevent reading their valueMiod Vallat
after modifying them. Give this flag to `display.focus', since screen switching is asynchronous, and reading back will return the screen we are switching from if the switch has not completed yet. Also, disallow -= and += syntax for display.focus, as it doesn't make any sense.
2015-05-08Separately track the number of items in alloc_table in a variable. WithStuart Henderson
the changes for handling template files in r1.293, alloc_table became a pointer to an array of structs (rather than the array itself), so nitems(alloc_table) no longer returns the number of elements. As found by sebastia@, autosize would only try the first allocation scheme, so installation would fail on small disks. ok henning@
2015-05-06Document that priority 1 is reserved for kernel use.Martin Pieuchot
2015-05-03Eliminate the -U flag and make usage of DUID in /etc/dumpdates the default.Philip Guenther
Correct old style entries so nothing has to be done for the admin. diff from Manuel Giraud (manuel (at) ledu-giraud.fr) Thanks!
2015-05-02de-castify strtonum to make it consistent again.Florian Obser
Pointed out by bluhm@; no object change. OK bluhm@, krw@
2015-05-02Use IPV6_MAXHLIM instead of 255; pointed out by bluhm@Florian Obser
No object change.
2015-05-02A ttl of 0 is valid. While here use MAXTTL instead of 255.Florian Obser
Input bluhm@, OK krw@
2015-05-02Hoist common assignments out of a series of if/if-else statementsKenneth R Westerback
in get_token(). Simplifies code and shrinks future diff. No intentional functional change.
2015-05-02Correct switch between current and previous line buffers whenKenneth R Westerback
encountering a carriage return in the input. Found by jsg@ a long time ago in a respository far, far away.
2015-05-02Use strtonum() when parsing argument list, as ping(8) does. GiveKenneth R Westerback
or take a cast. Tweak error messages to also be consistant with ping(8). Change lower bound of '-h' to 0 from -1 at the request of florian@. Tweaks and suggestions from, ok florian@
2015-04-29some fine-tuning in SYNOPSIS, usage, and order of options, with jmcHenning Brauer
2015-04-29g/c unneeded second char * var, ok bennoHenning Brauer
2015-04-29support passing a template file for the auto-allocation to disklabel.Henning Brauer
template gives mountpoints, min-max size ranges and percentage of disk foremost intended for autoinstalls, installer bits to follow soon. with input from many, ok theo
2015-04-28Someone went to the trouble of vertically aligning a set of parameters butMike Larkin
missed one. This diff is only a spacing change.
2015-04-27route show does not need to filter unwanted af itself, the sysctl doesSebastian Benoit
that for us. approach seems sound deraadt@ ok claudio@ mpi@ henning@ phessler@
2015-04-26Fix glitches in previous commit: strip the \n and only complain on failurePhilip Guenther
ok deraadt@
2015-04-23error in strtonum() conversion; found by Nathanael RensenTheo de Raadt
2015-04-21Improve divert-to specification parsing w.r.t. rule address family.Mike Belopuhov
ok henning
2015-04-21No need to do "size = (size_t)sb.st_size" both before and afterJonathan Gray
a fstat() call. ok mikeb@ markus@
2015-04-20Log if we refuse to continue the exchange when another one that correspondsMike Belopuhov
to the same policy is already active. OK markus, hshoexer
2015-04-20port src/sbin/ping/ping.c r1.119 and r1.121 to ping6:David Gwynne
> add a mac to the timestamp payload and calculate it with siphash. > > this lets us have some confidence that the timestamp hasnt been > damaged or tampered with in transit. > > discussed with jp aumasson > ok florian@
2015-04-20fold the icmp seq number into the mac.David Gwynne
i dont know why i missed this before.
2015-04-19by default fill the ping payload with a chacha stream instead ofDavid Gwynne
an unvarying payload. each ping process generates a random key, and each packet then uses the timestamps mac as the IV for the stream. this allows us to have a different payload per packet that we can recalculate and compare in the same was as the static payload was checked before. by aggressively varying the payload we hope to generate more opportunities for dodgy network equipment to show errors. note that we do siphash before chacha because we want to be strict about the timestamp payload, but we want to be able to recognise errors in the rest of the payload and where those errors were. doing chacha before siphash would have us than fail the whole packet if a checksum doesnt match. discussed with jp aumasson ok florian@
2015-04-19add a mac to the timestamp payload and calculate it with siphash.David Gwynne
this lets us have some confidence that the timestamp hasnt been damaged or tampered with in transit. discussed with jp aumasson ok florian@
2015-04-18Convert many atoi() calls to strtonum(), adding range checks and failureTheo de Raadt
handling along the way. Reviews by Brendan MacDonell, Jeremy Devenport, florian, doug, millert
2015-04-17Remove unsupported SADB_X_IDENTTYPE_CONNECTION; OK markus, hshoexerMike Belopuhov
2015-04-16Tweak error output.Gleydson Soares
ok krw@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 03:59:35 +0000