summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-06-26For all the mfs lovers:Otto Moerbeek
- Make the root of an mfs file system inherit the permission and owner/group of the mountpoint. Work by david@. - Add the ability to populate an mfs file system with the contents of a directory or a file system immediately after creation, controlled by the new -P mount option. Discussed with and tested by many, ok djm@ david@
2004-06-26cleanup ioctl for ifgroups; ok pb@Markus Friedl
2004-06-26grammar, formatting, consistency, spelling, etc. from jared yanovich;Jason McIntyre
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26grammar;Jason McIntyre
2004-06-26add back PF_INOUT, fixes reassemble tcpDavid Krause
ok canacar@ mcbride@
2004-06-26Add option that allows to change timeslot range forn network card.Alex Feldman
ok mcbride@
2004-06-26Narrow down privsep interface. Move pf_key_v2_open() to monitor.Hans-Joerg Hoexer
Work in progress. ok ho@
2004-06-26ignore IFGROUP errs in ifconfig -a for "too old" kernels right nowPhilipp Buehler
2004-06-26Remove -DHAVE_GETNAMEINFO frome makefiles.Ryan Thomas McBride
Pointed out by ho@
2004-06-26Remove scsi(3) from SEE ALSO. ok deraadt@Robert Nagy
2004-06-26more netiso leftoversPhilipp Buehler
by pointer from yared janovich henning@ ok
2004-06-26groups in usage() - from jared yanovichPhilipp Buehler
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-25Remove HAVE_GETNAMEINFO alternate code. Compiled binary is unchanged.Ryan Thomas McBride
ok msf@ hshoexer@ itojun@ ho@
2004-06-25interface groupsPhilipp Buehler
mcbride@ ok
2004-06-25introduce "interface groups"Philipp Buehler
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok.
2004-06-25repair tree nanobreak by the nanobumTheo de Raadt
2004-06-25remove two ununsed includesHenning Brauer
2004-06-25remove netiso and netns codeHenning Brauer
2004-06-25Narrow down privsep interface. Remove ui_init to monitor. So we can get rid ofHans-Joerg Hoexer
monitor_mkfifo. Work in progress. ok ho@
2004-06-24iso is goneHenning Brauer
2004-06-24remove netiso stuffHenning Brauer
2004-06-24Remove some unused code.Hans-Joerg Hoexer
Fix handling of sigchild. Now it's possible to sigstop/sigcont isakmpd correclty. ok ho@
2004-06-24Also handle keys from x509-certificates embedded in keynote credentials.Hans-Joerg Hoexer
with msf@ ok ho@
2004-06-23Print corrent prefix. Found and tested by alex at vbone.net.Hakan Olsson
2004-06-23make -w optional; ok miod@David Krause
2004-06-23better dead detect window code; still crapTheo de Raadt
2004-06-23Avoid stat before open. Do open and fstat instead.Hans-Joerg Hoexer
Remove check_file_secrecy() as it is obsoleted be check_file_secrecy_fd(). ok ho@
2004-06-23Make compiling with Boehm's gc possible again.Hakan Olsson
2004-06-23Support IPV{4,6}_ADDR_SUBNET IDs in Phase 1, just like the man pageHakan Olsson
says we do. Noted and tested by alex at vbone.net. Also avoid a potential SEGV here. hshoexer@ok
2004-06-23Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to notHans-Joerg Hoexer
touch flows. initial work by markus ok markus@ ho@ henning@
2004-06-22horrid horrid horrid. we have a race window where we, ourselves, do anTheo de Raadt
address deletion. yesterday we stopped ignoring deletions. but now dhclient does not see itself coming up, and voila, we get more and processes. so now make a 5-second window where we ignore delete messages, but terminate if we get them at any other time. a very relucant ok from henning who is actively searching for a final solution to this problem.
2004-06-22Make the interactive "update" command match the command-line "-u"Tom Cosgrove
option by updatng/setting the 0xAA55 signature at the end of the sector. ok nick@ weingart@
2004-06-22Rewrite of getmntopts(), making it more robust and getting rid ofOtto Moerbeek
the mount_nfs alternative implementation of the same function. Joint work with millert@. Fixes PR 3642. ok pedro@ millert@
2004-06-22Remove the CNF_ from WI_RID_CNF_ENH_SECURITY and WI_RID_CNF_DBM_ADJUSTTodd C. Miller
to match changes in wi(4). Also, don't exit wicontrol if SIOCGWAVELAN fails; just keep going and get the values we can. OK deraadt@
2004-06-22kn_get_string() may return NULL on failure. Handle this corrctly.Hans-Joerg Hoexer
with msf@, ok ho@ markus@
2004-06-22The NAT-T drafts suggest we should drop incoming messages arriving onHakan Olsson
the old port (500) after we've switched to the new one.
2004-06-22acg.cg_nextfreeoff is already relative to &acg so don't subtractTodd C. Miller
&acg.cg_firstfield. Fixes a bogus "panic: cylinder group too big" I see sometimes when using mmap malloc. OK tholo@
2004-06-22do not exit on RTM_DELADDR, dhclient can cause this itself under some rareHenning Brauer
circumstances. instead, exit on RTM_NEWADDR if, and only if, the new IP address is not a lease we got. theo ok
2004-06-22handle interface removals in the poll loop. ok henning@Can Erkin Acar
2004-06-21Describe the [Default]:NAT-T-Keepalive configuration parameter.Hakan Olsson
2004-06-21Make printing of 802.11 fields consistent with the rest by printingTodd C. Miller
a colon (':') after the field name. Noticed by markus@, OK deraadt@
2004-06-21Enable NAT-T support.Hakan Olsson
2004-06-21Implement NAT-T keepalive messages.Hakan Olsson
2004-06-21Update manpage to reflect changes in anchor namingMathieu Sauve-Frankel
ok beck@ claudio@
2004-06-21udpencap_port should be taken from dst transportHakan Olsson
2004-06-21When switching from main to encap transport, copy dst port ifHakan Olsson
translated (NAT).
2004-06-21Strip away umask bits in monitor_fopen(). hshoexer@ ok.Hakan Olsson