summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2017-01-25Some simple cleanup:Theo Buehler
* check strdup for malloc failure * remove obvious /* NOTREACHED */ * return instead of exit from main * err(1, NULL) instead of err(1, "malloc") * mark usage as __dead ok deraadt
2017-01-24whitespaceTheo Buehler
2017-01-23Keep socket open from startup, and reuse for SIOCGIFFLAGS later on,Theo de Raadt
rather than opening a fresh socket on the fly. ok krw
2017-01-23Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP onlyTheo de Raadt
upon "inet". Adjust the 4 programs that care about this.
2017-01-23pflogd will need pledge(proc), still disabled because of bfdSebastian Benoit
ok deraadt@
2017-01-23Zap some bad whitespace.Kenneth R Westerback
2017-01-22tedu@ didn't take the getcode() prototype with the getcode() implementation.Kenneth R Westerback
Restore gcc's equanimity by tedu@'ing the prototype.
2017-01-21Nuke whitespace foolish enough to expose itself during the greatKenneth R Westerback
"warning:" rectification.
2017-01-20Add a warning when the address pool is exhaustedMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Constify the data argument for ibuf_newMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Reset various pointers in ikev2_msg_cleanupMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Make sure to free reference to the public key after decodingMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Closed SAs should never be treated as validMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Check bounds of the flows array when configuring traffic selectorsMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Verify the certificate imsg payload sizeMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Include only found SPIs into the PAYLOAD_DELETE messageMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Minor formatting fixMike Belopuhov
From and OK markus@, OK reyk
2017-01-20New RFC7383 defineMike Belopuhov
From and OK markus@, OK reyk
2017-01-19add hooks so we can query the current state of a BFD sessionPeter Hessler
bfd session details are visible with "route -n get 192.0.2.1 -bfd" OK mpi@ deraadt@ claudio@
2017-01-17Nuke some whitespace that keeps poking me in the eye as I try toKenneth R Westerback
steal code.
2017-01-17In monitor mode, also print the interface mtu of RTM_IFINFO messages.Jeremie Courreges-Anglas
ok deraadt@ millert@ mpi@
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
This replaces log_verbose() and "extern int verbose" with the two functions log_setverbose() and log_getverbose(). Pointed out by benno@ OK krw@ eric@ gilles@ (OK gilles@ for the snmpd bits as well)
2017-01-09Replace hand-rolled for(;;) traversal of ctl_conns TAILQ withKenneth R Westerback
TAILQ_FOREACH(). No intentional functional change. ok reyk@
2017-01-08Sync log.c with the latest version from vmd/log.c that preserves errnoReyk Floeter
so it is safe calling log_* after an error without loosing the it.
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
with more modern TAILQ_FOREACH(). This what symget() was already doing. Add paranoia '{}' around body of symget()'s TAILQ_FOREACH(). No intentional functional change. ok bluhm@ otto@
2017-01-04Remove modular exponential groups specified in RFC5114Mike Belopuhov
Brought up by doug@, ok reyk, djm, doug
2017-01-03Fix pledge of the ca process by calling the right function on startup.Reyk Floeter
As a related change, load the local.pub and local.key keys after privsep and reload them on SIGHUP/reload. OK mikeb@
2017-01-01Hyphenate compound adjectives 'up-to-date', 'out-of-date' and 'well-known'Theo Buehler
if they precede the noun and omit hyphens otherwise. ok tj
2016-12-27The "disk too large" and "only LBA values saved" messages are moreKenneth R Westerback
often confusing than useful these days. Stop emitting them. Prompted by bugs@ report of the 8TB disk travails of Jiri. ok deraadt@ tom@
2016-12-26Put some variable declarations under appropriate #if/#endif protectionKenneth R Westerback
so gcc doesn't complain about defining but not using them. typo correction & ok jca@
2016-12-25gcc says "if you define labels and don't use them, I will whine."Kenneth R Westerback
ok tom@
2016-12-22Remove PIM support from the multicast stack.Rafael Zalamena
ok mpi@
2016-12-20This commit removes bio_status() calls after a BIOCLOCATE since thePatrick Wildt
bio status will never be updated on a BIOCLOCATE. In addition with missed zeroing of the passed bio struct, this could lead to a print of uninitialized memory. While there, properly zero the bio struct before passing it to ioctl(). ok mikeb@
2016-12-20Document our new WPA default settings. Discourage use of TKIP.Stefan Sperling
2016-12-20Make 'ifconfig if0 wpa' and 'ifconfig if0 -wpa' reset WPA params (does notStefan Sperling
include the wpakey) to their defaults. And make 'ifconfig if0 wpaprotos' reset WPA crypto parameters to settings which are appropriate for the specified WPA protocol version.
2016-12-16Eliminate some gcc warnings about 'unused variables', mostly byKenneth R Westerback
adding appropriate #ifdef's around declarations. ok millert@ (with a tweak I will commit separately)
2016-12-13Print the correct netmask instead of /0 when flushing routes to networks.Martin Pieuchot
Issue reported by jsing@, ok stsp@
2016-12-13make setting and getting tunnel addresses wrt to ipv6 scope handling.David Gwynne
setting a tunnel addresses uses a sockaddr_in6 from getaddrinfo, which sets sin6_scope_id for scoped addresses. this is nice and portable. reading a tunnel address assumed the scope was embedded in link local addresses in sin6_addr, and unpacked the scope back into sin6_scope_id. this is inconsistent with the code that sets tunnel addresses. this fixes the read path so it assumes the kernel sets sin6_scope_id like it it assumes the kernel will read on the set side. noone likes the kame hack of embedding the scope id in the addreses. ok mpi@
2016-12-08move the text describing the % and & units to a better place;Jason McIntyre
diff from jerome frgacic, tweaked by myself ok krw millert
2016-12-03provide missing unit suffixes; from ross l richardsonJason McIntyre
2016-11-28ikelifetime time spec is the same the one for lifetimeMike Belopuhov
2016-11-28Rename "flowmax" to "maxflow" and give each switch(4) ioctl aReyk Floeter
dedicated number. Both changes for consistency. OK rzalamena@
2016-11-27Document bioctl -d as a "detach" rather than a "delete" operation.Stefan Sperling
ok tb@ danj@ deraadt@
2016-11-26Remove leftovers of line disciplines that are no more.Martin Pieuchot
ok mikeb@
2016-11-25Nuke the DHO_ROUTERS and DHO_STATIC_ROUTES options from the effectiveKenneth R Westerback
lease when DHO_CLASSLESS_[MS_]STATIC_ROUTES are present. RFC 3442 says the client must ignore the former if the latter is present. The information was already ignored but was still written to the 'effective' section of the pseudo-lease file created by the -L option. This incorrectly implied that these options were 'effective'. Problem noted by Ed Fochler. Thanks!
2016-11-23Explicitly forbid to combine af-to with route-to in pfctl. TheAlexander Bluhm
parser cannot handle that correctly and is is unclear wether the kernel code would work. Remove the feature until someone needs it and properly implements and tests it. OK mike@ sashan@ mpi@
2016-11-18Make the ifconfig switch0 output nicer using a single line and theReyk Floeter
same keys as the actual commands (datapath, maxgroup, flowmax). flowmax should eventually renamed to maxflow for consistency. OK rzalamena@
2016-11-10The simple UTF-16 decode routine stopped too early due to wrong calculationGerhard Roth
of the output buffer size. Thus elements like subscriber-id, ICC-id, IMEI were shown truncated. Some modules report a phone number that already has the '+' prefix. Don't add another one when printing it. Patch from Bryan Vyhmeister ok otto
2016-11-08- Declare usage() as __dead void (remaining prototypes are not declared asRicardo Mestre
static, so keep it that way for consistency) - s/usage(1)/usage() and inside call exit(1) explicitly since all usage() calls always use that value (also update comment to reflect this change) - Remove main() prototype - s/exit/return in main() to enable SSP Feedback from jca@ and tb@ and OK from both (with their remarks in)
2016-10-26in florian;s last commit i urged him to change "twenty-four" toJason McIntyre
"twenty four", arguing, i think, that the internet is wrong; well seemingly i'm wrong, and you should hyphenate numbers when spelled out - who'd have thought it. apologies to florian and the diff submitter (and the internet); still, what i should have advised, and what i've done here, is use "24", which is much simpler, fits the surrounding text, and agrees with oed style advice;
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 11:51:17 +0000