summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2007-02-19Document NULL encryption.Hans-Joerg Hoexer
2007-02-19isakmpd bits for ESP+NULL encryption. This is useful, when AH canHans-Joerg Hoexer
not be used (when being behind NAT). With Martin Hedenfalk <martin.hedenfalk at gmail.com>, thanks!
2007-02-19Bits for ESP+NULL encryption. This is useful, when AH can not beHans-Joerg Hoexer
used (when being behind NAT). With Martin Hedenfalk <martin.hedenfalk at gmail.com>, thanks! ok markus@
2007-02-19do not display empty authkey/enckey line when -k option is notHans-Joerg Hoexer
specified. ok markus@
2007-02-19undo previous commit and keep the original behaviour of the parser.Hans-Joerg Hoexer
asked for by deraadt@
2007-02-18Use sizeof(buf) instead of magic numbers.Ray Lai
From Charles Longeau <chl at tuxfamily dot org> to tech@ back in November, reminded by deraadt@. OK moritz@.
2007-02-18Pass correct buffer size. (sizeof(cfgPtr->spare_names[c]) != 256)Ray Lai
OK moritz@.
2007-02-18Don't ignore buffer size argument.Ray Lai
OK millert@.
2007-02-17silence fsck_{e2fs,ffs} when being put to work on non-existing filenamesAlexander von Gernler
idea from and ok pedro@
2007-02-16Address PR 5380: refer to DH MODP well-known group numbers.Chad Loder
Thanks to sthen <at> symphytum DOT spacehopper DOT org
2007-02-16Do not accept '\n' in quoted strings. Addresses issues noticed byHans-Joerg Hoexer
Prabhu Gurumurthy <pgurumu () gmail ! com> (http://marc.theaimsgroup.com/?l=openbsd-misc&m=116060233106902&w=2), thanks! ok markus@ cloder@ (uhm, quite some time ago)
2007-02-16Fix a row of bugs in the code that computes the alternate superblockOtto Moerbeek
locations based on the disklabel. - unit bug: disklabel size is in sectors, but superblock fs size is in fragments. - The disklabel contains the maximum superblock size, not the actual as used by newfs. - problem is that mkfs reduces track/sector and secors/track to make the cylindergroup fit in a fs block. In this case the values in the disklabel do not predict what's in the superblock. This fixes all these problems. It correctly predicts the location of all superblocks on all my filesystems I have online (sized between 100MB and 1000GB). Also tested with filesystems with different block and fragment sizes. Written this with a goto to make the diff easier to read. ok krw@ deraadt@
2007-02-15make read connection closed message a debug(); ok henning@Kevin Steves
2007-02-14spacing and a typo that fell out of the readTheo de Raadt
2007-02-14use errwarn functions vs. syslog(); ok henning@ krw@Kevin Steves
2007-02-13move includes only needed in dhclient.c; ok henning@Kevin Steves
2007-02-13"Fix" a horrible signal handler. ckfini() breaks all the rules forOtto Moerbeek
signal handlers, calling free() and not being reentrant. This commit fixes to most importamt problem (^C on the "MARK FILESYSTEM CLEAN?" question causes a double free), but actually SIGINT handling should be completely rewritten. ok millert@ deraadt@
2007-02-13Do some extra validation of the superblock, otherwise a corruptOtto Moerbeek
superblock might lead to crashes or other mishap. Now my fuzzed fs images no longer crash fsck_ffs. ok mickey@ pedro@ millert@
2007-02-13error check socket() return; ok henning@Kevin Steves
2007-02-12remsize must be signed to avoid wrapping around to some huge number.Otto Moerbeek
Solves a case were fsck_ffs was causing a segv. If it didn't do that it would have mangled the filesystem later, very probably. Diff from FreeBSD; ok millert@ pedro@
2007-02-12detect truncation of block number, which can happen which trashedOtto Moerbeek
inodes; ok pedro@ millert@
2007-02-12max partition letter is 'a' + MAXPARTITIONS - 1, not 'h'. ok (andOtto Moerbeek
help) miod@
2007-02-09fix a fd leak that happens whe checking multiple file systems and someOtto Moerbeek
of them are clean. ok pedro@ millert@
2007-02-09pfctl_clear_rule_counters() is not needed any moreHenning Brauer
2007-02-09use DIOCGETRULE ioctl & action set to PF_GET_CLR_CNTR to clear countersHenning Brauer
with -z instead of DIOCCLRRULECTRS. Unbreaks -z with anchors and makes the read & reset operation atomic. innstrument pfctl_show_rules() to clear counters while reading rules and add a new output format for it, showing nothing, if only resetting counters without actually displaying them is requested. minor cleanups on the way. ok dhartmei & agreement from theo and ryan
2007-02-08Plug some mem leaks that occur when checking multiple file systems in aOtto Moerbeek
row. ok beck@ pedro@ millert@
2007-02-08A corrrup inode might lead to preposterous dir sizes. So check theOtto Moerbeek
size to avoid a negative lastbn which might cause a segv or heap corruption. With help from mickey@; ok mickey@ pedro@ millert@
2007-02-06fix some dodgy displays;Jason McIntyre
2007-02-06remove -j from usage();Jason McIntyre
2007-02-03in decide_address_family(), only limit a rule to a specific address familyDaniel Hartmeier
when ALL entries have this specific AF (when even just one entry has no specific AF, use any). found by Maurice Janssen, ok henning@
2007-02-01Don't count ethernet as overhead for UDP packet constuction. GivesKenneth R Westerback
14 more bytes of option space! A change ISC made a long time ago. ok stevesk@ (DHCP) canacar@ (bpf)
2007-01-30document -sI -v;Jason McIntyre
from Janne Johansson, tweaked by myself; ok dhartmei
2007-01-29sort FILES;Jason McIntyre
2007-01-29sort FILES;Jason McIntyre
2007-01-29add /fastboot to FILES, since these pages discuss that file;Jason McIntyre
2007-01-29Don't malloc memory to store option data in leases, just appropriateKenneth R Westerback
the malloc'd memory from the parsed option buffer since it would be thrown away after the copy anyway. 'looks sane' millert@
2007-01-28Remove cross references between fstab(5) and umount(8).Alexander Bluhm
ok millert jmc
2007-01-28Remove #include <fstab.h> as there is no fstab in umount anymore.Alexander Bluhm
Always use defined type name. Comment clarification. No binary change. ok millert
2007-01-27We only poll on the bpf fd and the routing socket fd. No need forKenneth R Westerback
complex list code to keep track. So nuke it. Also eliminate unnecessary variable ('dead') that means 'rfdesc is closed'. Just set rfdesc to -1 when it is closed and use that. As suggested by millert@ and claudio@, don't bother setting revents members to zero since poll() does that. Np functional change, just less code. 'looks good' claudio@ 'I like where this is going' henning@
2007-01-25Cleanup some more code. Eliminate dhcp(), bootp(), parse_options() byKenneth R Westerback
moving the minimal code into do_packet(). Eliminate repeated code for checking the client hardware address and the reject list by putting those checks into do_packet as well. No functional change, just much easier to read. ok stevesk@
2007-01-24A reallocated root directory gets ownership of the fsck process.Alexander Bluhm
If lost+found is created, it gets ownership of the root directory. ok pedro
2007-01-19add an EXAMPLES section;Jason McIntyre
from mark lumsden via otto, tidied up somewhat by myself; ok otto claudio
2007-01-18implement -T expire.Henning Brauer
"pfctl -t tablename -T expire 3600" would expire all entries in the given table that are older than 3600 seconds. ok dhartmei, manpage help & ok jmc
2007-01-16More cleanup. Eliminate 'struct packet' by cleverly passing asKenneth R Westerback
parameters just those things actually needed and using existing structs and information. No functional change. ok stevesk@
2007-01-15reference ripd(8) vs. routed(8) and remove routed statement in BUGSKevin Steves
that no longer applies because it is not referenced. ok claudio@ jmc@
2007-01-14Don't treat any packet with an invalid option buffer or an invalidKenneth R Westerback
message type option of 0 as a BOOTP offer. Don't process any option buffer after one is found to be corrupt. Don't process overflow buffers in a BOOTP packet. At least try to accept DHCP offers even if a bad options buffer is encountered. Brings code more into line with current ISC dhclient. ok stevesk@
2007-01-12make the description match synopsis for -chs;Jason McIntyre
discussed with nick
2007-01-11avoid an ugly grammar construction;Jason McIntyre
2007-01-11make the description of -e point to the COMMAND MODE section;Jason McIntyre
2007-01-11Move options into DESCRIPTION section. This conforms with mostRay Lai
other man pages, where the options are near the top of the page for easy access. OK jmc@.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-09 22:33:12 +0000