| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | Cedric Berger | |
| This brings us close to 100% atomicity for a "pfctl -f pf.conf" command. (some splxxx work remain in the kernel). Basically, improvements are: - Anchors/Rulesets cannot disappear unexpectedly anymore. - No more leftover in the kernel if "pfctl -f" fail. - Commit is now done in a single atomic IOCTL. WARNING: The kernel code is fully backward compatible, but the new pfctl/authpf userland utilities will only run on a new kernel. The following ioctls are deprecated (i.e. will be deleted sooner or later, depending on how many 3rd party utilities use them and how soon they can be upgraded): - DIOCBEGINRULES - DIOCCOMMITRULES - DIOCBEGINALTQS - DIOCCOMMITALTQS - DIOCRINABEGIN - DIOCRINADEFINE They are replaced by the following ioctls (yes, PF(4) will follow) which operate on a vector of rulesets: - DIOCXBEGIN - DIOCXCOMMIT - DIOCXROLLBACK Ok dhartmei@ mcbride@ | |||
| 2003-09-26 | Walking up to a firewall box which had the console logged in, to see | Theo de Raadt | |
| the entire screen full of "Reopened logfile" is CLEAR and OBVIOUS reason that that message is UTTERLY USELESS and is wiping important stuff off the screen. | |||
| 2003-09-26 | check strdup failure; ok anil millert | Theo de Raadt | |
| 2003-09-26 | Fix off-by-ones in format string for 's' specifier; millert@, deraadt@ ok | Aaron Campbell | |
| 2003-09-26 | don't listen to INADDR_ANY if Listen-on is specified. | Cedric Berger | |
| patch from markus@, ok ho@ | |||
| 2003-09-26 | .Xr mount_ntfs; | Jason McIntyre | |
| 2003-09-26 | realloc properly; ok jason | Theo de Raadt | |
| 2003-09-25 | Fix off-by-one out-of-bounds write; millert@ ok | Aaron Campbell | |
| 2003-09-25 | Fix one case of set length before realloc. Fix another case of | Chad Loder | |
| foo = realloc(foo...) and avoid possible memory leaks. Avoid leaving things pointing to freed memory on failure. | |||
| 2003-09-25 | realloc fixes; 3rd rev to make markus happier | Theo de Raadt | |
| 2003-09-25 | do not crank size first, do not do p = realloc(p, ... | Theo de Raadt | |
| 2003-09-25 | whack commons as wanted by ho | Theo de Raadt | |
| 2003-09-25 | do not crank size before erealloc | Theo de Raadt | |
| 2003-09-25 | p = realloc(p is not allowed | Theo de Raadt | |
| 2003-09-24 | realloc fix | Theo de Raadt | |
| 2003-09-24 | realloc fixes; ok ho | Theo de Raadt | |
| 2003-09-24 | re-add AES, but without using EVP; | Markus Friedl | |
| patch from Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@ (interops with isakmpd+AES in OpenBSD 3.4) | |||
| 2003-09-24 | back out EVP change; causes fd leaks; ok cedric@ | Markus Friedl | |
| 2003-09-24 | Fix realloc usage and make sure we don't increase buffer size on failure. | Cedric Berger | |
| ok henning@ mcbride@ | |||
| 2003-09-23 | use getaddrinfo for name-to-address resolution. mcbride@ ok | Jun-ichiro itojun Hagino | |
| 2003-09-23 | fix a few strlcpy | Theo de Raadt | |
| 2003-09-19 | an atexit handler to close a file descriptor? who wrote this crap..; millert ok | Theo de Raadt | |
| 2003-09-18 | Not all address types have a mask. | Cedric Berger | |
| ok henning@ | |||
| 2003-09-18 | fix early free (subtle); marius@monkey.org | Theo de Raadt | |
| 2003-09-18 | add .Bk/.Ek to SYNOPSIS; | Jason McIntyre | |
| 2003-09-18 | add some space before lists; | Jason McIntyre | |
| 2003-09-18 | replace NetBSD info with OBSD relevant stuff; | Jason McIntyre | |
| from brad@ | |||
| 2003-09-09 | slight cleanup of man page and sync usage(); | Jason McIntyre | |
| 2003-09-05 | socket leak on error paths. from Patrick Latifi. ok deraadt@ ho@ | Ted Unangst | |
| 2003-09-02 | Xref boot_mvme88k | Miod Vallat | |
| 2003-09-02 | escape punctuation; | Jason McIntyre | |
| ok deraadt@ | |||
| 2003-09-02 | A couple of nits. deraadt@ ok. | Hakan Olsson | |
| 2003-09-02 | Require ISAKMP_FLAGS_ENC on phase 2 messages. ok markus@, deraadt@. | Hakan Olsson | |
| 2003-09-02 | For easier compilation on linux systems. Requested by Thomas Walpuski. | Hakan Olsson | |
| 2003-09-01 | KNF | Henning Brauer | |
| 2003-08-31 | add references to /etc/mygate in FILES and SEE ALSO; | Jason McIntyre | |
| from Han Boetes. | |||
| 2003-08-29 | Document interactions between tables and anchors. | Cedric Berger | |
| Add a warning on global/anchor name clashes to help prevent mistakes from our users during the 3.3 -> 3.4 switch. ok henning@ | |||
| 2003-08-29 | exclude __sparc64__ since it can handle 16k blocks. from jason@ | Ted Unangst | |
| 2003-08-28 | sparcs cannot handle booting from > 8k block partitions, so set the root | Ted Unangst | |
| partition block size back down. | |||
| 2003-08-28 | This change is busted. what's worse, REGRESSION TESTS WOULD HAVE CAUGHT IT! | Kjell Wooding | |
| You MUST test nework stack changes on BOTH BYTE-ORDERS. Someone can fix this later, but right now I need to get the damn firewall up. Grr. | |||
| 2003-08-28 | support AES in phase 1, too. switch to OpenSSL EVP interface; | Markus Friedl | |
| with Hans-Joerg.Hoexer at yerbouti.franken.de; ok ho@ | |||
| 2003-08-28 | tweak; | Jason McIntyre | |
| ok frantzen@ | |||
| 2003-08-27 | kill dangling 'else'. fixes modulus in W and M TCP options | Mike Frantzen | |
| 2003-08-27 | typos from deraadt@; | Jason McIntyre | |
| 2003-08-26 | catch port/user/group a <>/>< b with a >= b, from mpech@ | Daniel Hartmeier | |
| 2003-08-26 | mark cloned route with RTF_CLONED. remove RTF_CLONED route when clone parent | Jun-ichiro itojun Hagino | |
| disappers. deraadt ok | |||
| 2003-08-25 | rename struct dinode to ufs1_dinode. clears the namespace and makes | Ted Unangst | |
| way for some future work. no function changes yet. help testing otto@ and markus@ | |||
| 2003-08-25 | catch return-rst ttl values > 255, from aaron@ | Daniel Hartmeier | |
| 2003-08-24 | Tweaks: | Cedric Berger | |
| - Make sure we allow only tables in round-robin pools for routing options, same as what we do for translation rules. - Don't reject rules like: "nat on sis0 -> <foo>" because "no address family is given". This is perfectly valid. ok henning@ | |||
| 2003-08-24 | don't print info about duplicate emuls. gives the illusion there is only | Ted Unangst | |
| one linux emul and one freebsd emul. ok deraadt@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |