summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2015-10-22iked hereby pledges that it will run with restricted systemReyk Floeter
2015-10-22Stop linking iked -static: It was inherited from isakmpd that isReyk Floeter
2015-10-22halex removed the -p restriction, so do not document it;Jason McIntyre
2015-10-20Fix ocsp by adding a missing TAILQ_INIT().Reyk Floeter
2015-10-19break long lines in examples; ok jmc@Christian Weisgerber
2015-10-19Fix control_imsg_forward() by changing imsg_compose() toReyk Floeter
2015-10-19Remove the ikev1 stub - Since I started iked, it has an empty privsepReyk Floeter
2015-10-18after kmem is open and setup, pledge "stdio rpath wpath cpath"Theo de Raadt
2015-10-18Collapse some strange programmer style with too much abstraction.Theo de Raadt
2015-10-18Use explicit_bzero() when the memory is freed directly afterward.mmcc
2015-10-17make usage() less horribleFlorian Obser
2015-10-17NUMBOOT is dead! Nuke the variables and abstractions that were usedKenneth R Westerback
2015-10-17Implement -w maxwait now that the -w flag is free in ping6. SameFlorian Obser
2015-10-17move -V option before -v and remove one spurious newline, now in syncFlorian Obser
2015-10-17Remove left over -N and -w. Adapt wording for the link local example.Florian Obser
2015-10-16Remove RFC 4620 support. The RFC is experimental and this code plainFlorian Obser
2015-10-16No longer talk about -b flag, it's gone.Florian Obser
2015-10-16Move -t and -w functionality to -a. Both flags are in the way for aFlorian Obser
2015-10-16Remove -B from EXAMPLES; reminded by jmc@Miod Vallat
2015-10-15Remove disklabel -B (NUMBOOT) support. All the platforms which used to needMiod Vallat
2015-10-15Remove some unnecessary NULL-checks before free(). Change two bzero()mmcc
2015-10-15corrects pledge code for fsck_ffs and fsck_ext2fsSebastien Marie
2015-10-15A classic case for bzero() -> explicit_bzero()mmcc
2015-10-15fsck_ffs has a ^T signal handler which opens /dev/tty late. Hoist thatTheo de Raadt
2015-10-14To specify a source address ping uses -I while ping6 uses -S. SwitchFlorian Obser
2015-10-14Since the fsck_* programs now only handle one filesystem, this createsTheo de Raadt
2015-10-14unfortunately rewritelabel() just before termination does a non-permittedTheo de Raadt
2015-10-14Only accept one filesystem/device as argument for checking. Few peopleTheo de Raadt
2015-10-13Remove -b flag and let ping6 set the socket buffer size automaticallyFlorian Obser
2015-10-13can pledge "stdio" after opening device.Theo de Raadt
2015-10-13Pledge "stdio rpath" requests for nologin.Doug Hogan
2015-10-12deprecate & remove -W option; ok florianTheo de Raadt
2015-10-12Annotate an pretty obvious signal race... no time to fix it now.Theo de Raadt
2015-10-12tunefs can pledge to only use "stdio", after it has opened the device.Theo de Raadt
2015-10-12pledge "stdio" right after opening the device. The remainder isTheo de Raadt
2015-10-11Pledge that ncheck_ffs only uses "stdio" after opening the device.Doug Hogan
2015-10-11After the filesystem is opened, pledge "stdio"Theo de Raadt
2015-10-11If only displaying the disklabel (the normal thing to do against potentiallyTheo de Raadt
2015-10-11After the disk is opened, this can pledge "stdio".Theo de Raadt
2015-10-11Prefer dprintf() over snprintf()+write()Philip Guenther
2015-10-10pflogd contained the same "privsep error" as tcpdump -- assuming thatTheo de Raadt
2015-10-09Change all tame callers to namechange to pledge(2).Theo de Raadt
2015-10-07Note permissions for the crc32() code adapted from Hacker's Delight.Kenneth R Westerback
2015-10-06fix flowsrc spec, ok florian, thx ingo!Sebastian Benoit
2015-10-05Remove 'landisk' from the comment about NUMBOOT archs. Only oneKenneth R Westerback
2015-10-05Remove disklabel -B support on landisk - superseded by MI installboot.Miod Vallat
2015-10-05Oops. Missed file in fdisk commit.Kenneth R Westerback
2015-10-05Tweak man page to describe newly enhanced '-g' operation.Kenneth R Westerback
2015-10-05Enhance '-g' to create a default GPT label in addition to the protectiveKenneth R Westerback
2015-10-04dmesg has two modes. The normal sysctl mode, and the -M/-N kvm searcher.Theo de Raadt