summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2017-03-02Now that the kernel provides information about IPsec SA bundles,Alexander Bluhm
print them by default. OK hshoexer@
2017-03-02Implement a new routing message RTM_PROPOSAL that communicatesKenneth R Westerback
information that can be used to configure an interface and related network components. ok bluhm@, ok for various older versions mpi@ florian@ claudio@
2017-03-02Add a new sysctl machdep.lidaction. The sysctl works as follows:Martin Natano
machdep.lidaction=0 # do nothing machdep.lidaction=1 # suspend machdep.lidaction=2 # hibernate lidsuspend is just an alias for lidaction, so if you change one, the other one will have the same value. The plan is to remove machdep.lidsuspend eventually when people have upgraded their /ets/sysctl.conf. discussed with deraadt, who came up with the new MIB name no objections mlarkin ok stsp halex jcs
2017-02-28Depending on the addresses, ipsecctl(8) automatically groups saAlexander Bluhm
bundles together. Extend the kernel interface to export the bundle information to userland. Then ipsecctl -ss -v can show the internal relations. Unfortunately the header SADB_X_EXT_PROTOCOL was reused by SADB_X_GRPSPIS, so it cannot be used to transfer the second sa type with sysctl. Introduce a new SADB_X_EXT_SATYPE2 and use it consistently. OK hshoexer@ markus@
2017-02-24In a scenario where a config reload happens during an IKE_AUTH exchange,Patrick Wildt
and we move an SA from one to another policy, we need to make sure to do refcounting if the policies involved are already in the garbage collect phase. ok markus@ mikeb@
2017-02-22Unbreak "ping6 -L"Renato Westphal
$ ping6 -L ff02::1%em1 ping6: setsockopt IP6_MULTICAST_LOOP: Invalid argument Unfortunately we have this inconsistency in the sockets API where we need to pass an unsigned char for IP_MULTICAST_LOOP but we need an unsigned int for IPV6_MULTICAST_LOOP. While here, fix a typo in the error message. OK millert@ florian@
2017-02-15Use new log.[ch] functions in parse_warn().Kenneth R Westerback
Simplify the "^" placing logic and make it apply to log entries as well as terminal output. Since dhclient(8) can be re-exec'd for various reasons after going daemon, make sure we don't try to log to stderr if it isn't a TTY.
2017-02-15Adopt the common verbiage other log.[ch] daemons use to describe '-d'.Kenneth R Westerback
Point out that dhcpd(8) -f is an alias for -d.
2017-02-14fatalx() prepends 'fatal in _progname:'. So eliminate redundantKenneth R Westerback
'; exiting' suffix used by old style logging. Eliminate an extra log message before fatal()'ing out with a summary message.
2017-02-12Eliminate most strerror() invocations by using log_warn() and fatal()Kenneth R Westerback
instead of log_warnx() and fatalx(). A few log_info() to log_warn() for the same reason. Suggested by millert@.
2017-02-12Adjust lines that are too long.Kenneth R Westerback
2017-02-12Remove now unused file.Kenneth R Westerback
2017-02-12Switch from 'legacy' errwarn.c to standard daemon logging functions.Kenneth R Westerback
No objections heard. Feedback from millert@ guenther@
2017-02-11Move parse_warning() into parse.c to prepare to replace errwarn.cKenneth R Westerback
with standard daemon log.[ch]. ok mpi@
2017-02-06Postpone pledge call until after the getopt switch and hoist the call toTheo Buehler
readlabelfs over it. This avoids a pledge abort due to the fact that the ioctl DIOCGDINFO may not be allowed on the given file: mount /dev/tty /tmp. ok benno
2017-02-03Stop assuming that in_{addr,port}_t are typedefed in <sys/types.h> andPhilip Guenther
instead pull in <netinet/in.h> or <arpa/inet.h> when those are needed. ok florian@ beck@ millert@
2017-02-02grammar fix; from tinkerJason McIntyre
2017-01-26one more fix i requested for previous;Jason McIntyre
2017-01-26Select the routing domain to be used for kill states by host or bySebastian Benoit
label, by adding a -V <rdomain> option. written by Bertrand Provost, provost DOT bertrand AT gmail DOT com, thanks. ok florian@, with feedback from florian and jmc.
2017-01-25Some simple cleanup:Theo Buehler
* check strdup for malloc failure * remove obvious /* NOTREACHED */ * return instead of exit from main * err(1, NULL) instead of err(1, "malloc") * mark usage as __dead ok deraadt
2017-01-24whitespaceTheo Buehler
2017-01-23Keep socket open from startup, and reuse for SIOCGIFFLAGS later on,Theo de Raadt
rather than opening a fresh socket on the fly. ok krw
2017-01-23Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP onlyTheo de Raadt
upon "inet". Adjust the 4 programs that care about this.
2017-01-23pflogd will need pledge(proc), still disabled because of bfdSebastian Benoit
ok deraadt@
2017-01-23Zap some bad whitespace.Kenneth R Westerback
2017-01-22tedu@ didn't take the getcode() prototype with the getcode() implementation.Kenneth R Westerback
Restore gcc's equanimity by tedu@'ing the prototype.
2017-01-21Nuke whitespace foolish enough to expose itself during the greatKenneth R Westerback
"warning:" rectification.
2017-01-20Add a warning when the address pool is exhaustedMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Constify the data argument for ibuf_newMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Reset various pointers in ikev2_msg_cleanupMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Make sure to free reference to the public key after decodingMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Closed SAs should never be treated as validMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Check bounds of the flows array when configuring traffic selectorsMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Verify the certificate imsg payload sizeMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Include only found SPIs into the PAYLOAD_DELETE messageMike Belopuhov
From and OK markus@, OK reyk
2017-01-20Minor formatting fixMike Belopuhov
From and OK markus@, OK reyk
2017-01-20New RFC7383 defineMike Belopuhov
From and OK markus@, OK reyk
2017-01-19add hooks so we can query the current state of a BFD sessionPeter Hessler
bfd session details are visible with "route -n get 192.0.2.1 -bfd" OK mpi@ deraadt@ claudio@
2017-01-17Nuke some whitespace that keeps poking me in the eye as I try toKenneth R Westerback
steal code.
2017-01-17In monitor mode, also print the interface mtu of RTM_IFINFO messages.Jeremie Courreges-Anglas
ok deraadt@ millert@ mpi@
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
This replaces log_verbose() and "extern int verbose" with the two functions log_setverbose() and log_getverbose(). Pointed out by benno@ OK krw@ eric@ gilles@ (OK gilles@ for the snmpd bits as well)
2017-01-09Replace hand-rolled for(;;) traversal of ctl_conns TAILQ withKenneth R Westerback
TAILQ_FOREACH(). No intentional functional change. ok reyk@
2017-01-08Sync log.c with the latest version from vmd/log.c that preserves errnoReyk Floeter
so it is safe calling log_* after an error without loosing the it.
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
with more modern TAILQ_FOREACH(). This what symget() was already doing. Add paranoia '{}' around body of symget()'s TAILQ_FOREACH(). No intentional functional change. ok bluhm@ otto@
2017-01-04Remove modular exponential groups specified in RFC5114Mike Belopuhov
Brought up by doug@, ok reyk, djm, doug
2017-01-03Fix pledge of the ca process by calling the right function on startup.Reyk Floeter
As a related change, load the local.pub and local.key keys after privsep and reload them on SIGHUP/reload. OK mikeb@
2017-01-01Hyphenate compound adjectives 'up-to-date', 'out-of-date' and 'well-known'Theo Buehler
if they precede the noun and omit hyphens otherwise. ok tj
2016-12-27The "disk too large" and "only LBA values saved" messages are moreKenneth R Westerback
often confusing than useful these days. Stop emitting them. Prompted by bugs@ report of the 8TB disk travails of Jiri. ok deraadt@ tom@
2016-12-26Put some variable declarations under appropriate #if/#endif protectionKenneth R Westerback
so gcc doesn't complain about defining but not using them. typo correction & ok jca@
2016-12-25gcc says "if you define labels and don't use them, I will whine."Kenneth R Westerback
ok tom@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 02:38:49 +0000