| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
display the partition info by default as is done in the E(ditor). The
physical info is now only displayed if '-v' is specified.
ok deraadt@
|
|
when entering E(ditor) mode. Clean up 'u' code and make more effort
to keep label and mountpoint info in sync. Makes 'u' undo-able so
those with vi fingers can apply and revert changes (with perhaps a
'p' or two in between) to validate changes.
'U' suggested by deraadt@.
ok deraadt@
|
|
|
|
|
|
used instead, ok krw jmc
|
|
of concern so BUGS need not mention it. The other BUGS are also now
irrelevant or not bugs at all. So delete entire BUGS section. Also
tweak a bit of verbiage.
ok deraadt@
|
|
include /usr/src and /usr/obj plus some tweaks; ok deraadt@ krw@
|
|
ok otto@ beck@
|
|
feedback/ok krw
|
|
|
|
|
|
on disks without an existing label. The 'A' command allocates all space
on the disk into a reasonable partition scheme for a root disk.
Feedback from several, time to work on it in-tree.
Prodded (repeatedly) by and ok deraadt@
|
|
|
|
|
|
it is sufficient to zero the first megabyte of the disk, not the whole
disk.
ok marco@ mpf@ rainer@ jmc@
|
|
way it has already been done for ICMPv4.
ok mcbride@
|
|
ok miod@
|
|
Log the packets before checking the client state. Makes it easy to
find MACs for 'surprise' DHCP servers.
Positive comments from mbalmer@, jasper@.
|
|
|
|
looked at post-release -- out of time for these kinds of problems
david@ says: pfopt6 and f91.ok; pfopt6 change looks ok, but pf91 is
of concern.
|
|
diff from Mitja Mu?eni?
ok marco
|
|
|
|
first two terms so ifi is checked first.
|
|
|
|
Tested by many, thanks.
Put it in" deraadt@
|
|
by damien;
|
|
the mailing lists two weeks ago, and completely ignored I guess.
|
|
bsize fields for UNUSED partitions. '-R' already skipped processing
these fields for such partitions. Eliminates an XXX.
ok deraadt, "makes sense" miod@
|
|
networks in the wpapsk section of the page.
ok deraadt@ henning@
|
|
add "ifconfig if0 scan" to scan for access points or to list known
stations in Host AP mode.
remove the [-]wmm command while i'm here. QoS is mandatory with
802.11n so there's not much point into making it an option.
fix parsing of the "powersave" command too.
discussed with deraadt@
man page hints from jmc@
display hints from sobrado@
"i like it" cnst@, grange@
|
|
Some supplicants will autoselect 802.1X without giving users the
possibility to choose between PSK or 802.1X.
Similarly, no longer announce `PSK with SHA-256 based KDF' AKMP (defined
in Draft 802.11w) by default in the RSN IE of beacons and probe responses
as it confuses some broken supplicants. This kind of sacrifies security
for interoperability with shitty (but unfortunately widespread) clients
that do not follow the 802.11 standard properly.
This fixes associations from Intel PROSet on XP and also reportedly fixes
some Mac OS clients. I will likely make `psk-sha256' configurable through
ifconfig wpaakms after the 4.5 release.
|
|
|
|
|
|
the multi-line banner announcing that the MBR is being changed.
Also the listing of the partition table in 'fdisk -u'. Display a
consistant message when the MBR is written.
While here cleanup and shrink code without changing any semantics.
Started with a diff posted on tech@ by Tobias Ulmer.
"I like it" marco@ ok jsing@
|
|
updates to follow;
|
|
and fix typo while here.
ok canacar@
|
|
ok claudio@ laurent@
|
|
|
|
jmc@ has provided a complete list of manual pages to be fixed,
and suggested using uppercase (i.e., Point-to-Point) when discussing
the protocol, and lowercase (point-to-point) otherwise.
ok jmc@
|
|
"ike" rules in ipsec.conf, the default peer is used. In theory
ipsecctl -f ipsec.conf can configure the default peer for each "ike"
entry. As isakmpd only supports one default peer, the last "ike"
rule that uses a default peer wins. This configuration is then
significant for all "ike" rules that use the default peer.
Now a warning is printed if a later rule in ipsec.conf changes the
configuration of the original default peer. This should be an error
but that would break existing user configs. So only a warning is
printed.
ok hshoexer@, todd@
|
|
lines later. No functional change.
ok grunk@, hshoexer@
|
|
|
|
This is also consistent with mplslabel in ifconfig(8).
OK claudio@ laurent@
|
|
- in ipsec_delete_spi_list() a log_verbose is added, when a remote peer
sends us a delete message for an SA. However, to avoid spamming the log
when SAs are deleted during re-keying, I only log_verbose, when the soft
timeout of the SA is not expired yet. Thus only deletion of live SAs
gets logged.
- in ipsec_decode_ids() I remove the additonal printing of IP-Adresses in
hex as the addresses are already printed in CIDR.
- while there, apply some KNF
ok todd@, mpf@, bluhm@
|
|
|
|
keyword as argument for the peer parameter will do that. An ike
without peer creates the peer-default config. A flow without peer
acquires a host-to-host SA.
tested by grunk@, todd@, ok grunk@, hshoexer@, todd@
|
|
|
|
socket dhclient will get.
ja ja claudio@
|
