summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2016-08-16Track SSID in leases file and only consider leases from the current SSID whenKenneth R Westerback
starting up dhclient on wifi interfaces. In theory will preserve leases from other SSID's and speed up obtaining a lease by not wasting time attempting to re-acquire a lease from a different SSID. Experimental feature from n2k16 needing some real world testing before g2k16.
2016-08-15When running 'ifconfig scan' in hostap mode display the current Tx rate ourStefan Sperling
AP is using to send frames to an associated node. This used to always display the node's highest supported Rx rate, which isn't all that interesting. ok mpi@
2016-08-14Use int64_t and %ll for CTLTYPE_QUAD nodes.Philip Guenther
Use memcpy() instead of up-casting from char* to long long* ok krw@
2016-08-14Convert %q to %ll. Cast off_t to long long for printf-style args.Philip Guenther
Eliminate pointless casts to void* or off_t ok krw@
2016-08-10armish handled some early-gen arm machines, which required tons ofTheo de Raadt
workarounds. Some of them will soon stand in the way of armv7. Off to the attic you go.
2016-08-06Unbreak PSK authentication, broken by previous.Pascal Stumpf
ok reyk@ florian@
2016-08-03Fix typo, spotted by Holger Mikolon <holger@mikolon.com>Vincent Gross
2016-08-03A couple of "a->blah == a->blah" -> "a->blah == b->blah".Kenneth R Westerback
Spotted by the Echelon team with AppChecker static analyzer. ok sashan@
2016-08-02capitalize a question like all the othersJoshua Stein
ok krw
2016-07-31Ask for DHO_BOOTFILE_NAME and DHO_TFTP_SERVER by default. May proveKenneth R Westerback
useful to autoinstall in the future and in the meantime can provide information on what the dhcp server has done with the desired server name and file name info. Original diff from Patrik Lundin via tech@
2016-07-28after getenv, check for empty string too. ok millertTed Unangst
2016-07-27correct syntax for baddynamic example. from Holger MikolonTed Unangst
2016-07-27increase the size of forkstat fields to accomodate large valuesTed Unangst
2016-07-25Revert change to density calculation. David Vasek points out thisKenneth R Westerback
is a more complicated problem than it appears. ok deraadt@
2016-07-23Back out the dhclient BPF change. There are DHCP servers out there whichStefan Sperling
send frames to the ethernet broadcast address, so this will need some more thought and it's too late for 6.0. Problem reported by Holger Mikolon. ok mpi@
2016-07-23At n2k16 David Vasek pointed out that FFS partitions on 4K disks areKenneth R Westerback
created with far fewer inodes than DEV_BSIZE devices. Scale the default 'density' value by (sector size)/DEV_BSIZE to create the same number of inodes. Obviously a NO-OP on DEV_BSIZE devices. Thanks David! ok deraadt@
2016-07-22Actually DECLINE and delete unused offers. Don't just say so in a comment.Kenneth R Westerback
In situations where >1 offer is received this will eliminate unbounded memory growth and make us a more polite netizen. In some corner cases it might prevent reuse of inappropriate older offers. ok millert@
2016-07-21Use explicit idiom when testing the result of strcmp() and strncmp().Kenneth R Westerback
i.e. == 0 and != 0 as appropriate. No intentional functional change. Suggested by & ok tom@
2016-07-20Shrink priv_write_file() API so that it does less, and the callers askTheo de Raadt
it to do less. Discussion with guenther. ok krw
2016-07-20As a general rule, fchown before fchmod is a safer order (because manyTheo de Raadt
systems throw away bits upon chown). Not in this case, but code gets copied.. ok krw
2016-07-20When parsing the configuration. initialize the auth structureReyk Floeter
correctly, as parse.y's $$ is not zero-initialized. Found by Rene Ammerlaan OK markus@ florian@
2016-07-20Make the size for the syn cache hash array tunable. As we areAlexander Bluhm
swapping between two syn caches for random reseeding anyway, this feature can be added easily. When the cache is empty, there is an opportunity to change the hash size. This allows an admin under SYN flood attack to defend his machine. Suggested by claudio@; OK jung@ claudio@ jmc@
2016-07-19Narrow the BPF read filter rules so only packets sent to theKenneth R Westerback
interface's LLADDR pass. Rely on dhclient's existing ability to detect and react to LLADDR changes. This limits the number of packets that get dropped as a result of dhclient setting BIOCSFILDROP on the bpf descriptor. Problem with bridges and multiple dhclients noted by stsp@. ok mpi@ stsp@ deraadt@ henning@
2016-07-18no more cbq_opts - CBQ is gone, ok mpi phessler bennoHenning Brauer
2016-07-18g/c unused (global!) var: oqueues isn't used any more. ALTQ leftover; notHenning Brauer
noticed since struct node_queue stayed. ok claudio benno gcc
2016-07-14kern.usermount is currently a no-op;Jason McIntyre
ok deraadt
2016-07-13Introduce RTF_MULTICAST and flag corresponding IPv6 routes as suchMartin Pieuchot
instead of abusing RTF_CLONING. Fix a leak reporeted by Aaron Riekenberg on misc@, ok sthen@
2016-07-09only print one error, not multiple misleading messagesTed Unangst
2016-07-05Remove kern.random remnants; OK deraadt@Tim van der Molen
2016-07-04Drop support for the undocumented second argument (same as -N option)Philip Guenther
ok deraadt@
2016-06-30ntpys sysctl was removedTed Unangst
2016-06-29Document arptimeout, arpdown. Prodded by and ok jmc@Chris Cappuccio
2016-06-26somebody forgot to look at format string warningsTed Unangst
2016-06-25Move pledge after opendev and DIOCGPDINFO. Fixes e.g. fdisk /dev/tty.Theo Buehler
This diff by deraadt was overlooked far too many times, mostly by me. It's the original fix of the pledge disklabel breakage found by espie. diff by deraadt; ok semarie, tb.
2016-06-22Add curly braces that were missed in rev 1.651. Add parenthesis to make theMark Kettenis
condition in the if statement more readable while I'm there. ok phessler@, benno@, florian@
2016-06-21do not allow whitespace in macro names, i.e. "this is" = "a variable".Sebastian Benoit
change this in all config parsers in our tree that support macros. problem reported by sven falempin. feedback from henning@, stsp@, deraadt@ ok florian@ mikeb@
2016-06-21the manpage documents that af-to does not work on pass out rules, butSebastian Benoit
the pf.conf parser allows it, which leads a non working configuration being loaded. this changes the parser to make pass out .. af-to an error. ok henning@ mikeb@
2016-06-20Add a bit more verbosity to tmpfs mount(8) output.Antoine Jacoutot
ok millert@ feedback/ok natano@
2016-06-19a little nicer formatting; from miodJason McIntyre
2016-06-19Split readlabel() into two functions, readlabel() and parselabel(), andTheo Buehler
pledge in-between the two funtion calls. The new readlabel() only does a DIOC*DINFO ioctl, making sure the fd points to a disk, while parselabel() does the scary string manipulations. In the makelabel() code path do an early DIOCGDINFO before pledge. This fixes yet another pledge problem (disklabel -w /dev/tty floppy576). Some of this was discussed with beck. ok semarie, earlier version ok deraadt
2016-06-18Add net.inet.{tcp,udp}.rootonly sysctl, to mark which portsVincent Gross
cannot be bound to by non-root users. Ok millert@ bluhm@
2016-06-16allow include in inline anchorsHenning Brauer
with this, anchor foo { include "/path/to/rules" } works and "load anchor" is obsolete, to be removed somewhen later after release. co-production with reky at bsdcan, ok reyk mikeb benno sasha
2016-06-15Add umb(4) - a driver for the Mobile Broadband Interface Model (MBIM)Gerhard Roth
The umb(4) driver provides support for USB MBIM devices. Those devices establish connections via celluar networks such as GPRS, UMTS, and LTE. ok mpi@ sthen@ additional feedback from deraadt@ jmc@ stsp@ kettenis@
2016-06-14llprio now affects pppoe(4) control frames as well as arp(4) and bpf(4) writes.Stuart Henderson
2016-06-13correct pledge for disklabel -R -[fF]Jonathan Gray
ok tb@
2016-06-10Add the "llprio" field to struct ifnet, and the corresponding keywordVincent Gross
to ifconfig. "llprio" allows one to set the priority of packets that do not go through pf(4), as the case is for arp(4) or bpf(4). ok sthen@ mikeb@
2016-06-07Document the net.inet.tcp.synuselimit sysctl; OK bluhm@ jmc@Tim van der Molen
2016-06-07per trending style, add continue to emtpy loop bodies.Ted Unangst
ok mglocker
2016-06-06restore my ability to do full bulks.Marc Espie
okay deraadt@
2016-06-03update default value for rebootTed Unangst