summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2001-08-13grammar fix from Joshua Stein <jcs@rt.fm>Peter Valchev
2001-08-13use getifaddrs(3) rather than SIOCGIFCONF. in fact, if_map() does not doJun-ichiro itojun Hagino
the right thing on certain set of interface addresses. SIOCGIFCONF is the worst possible ioctl API...
2001-08-13need to use IPV6_IPSEC_POLICY for IPv6 bypass policy setting. from theJun-ichiro itojun Hagino
country of humppa.
2001-08-12Don't coredump if the kernel doesn't support IPv6.Angelos D. Keromytis
2001-08-12#(endif|else) foo is incorrect, make it #endif /* foo */Heikki Korpela
deraadt@ ok
2001-08-11Add support for ICMP errors referring to ICMP queries/replies. FixesDaniel Hartmeier
'ICMP error message for bad proto' messages. Reported by Mark Grimes and Steve Rumble. Add debugging level with ioctl interface and pfctl switch. Default is 'None'.
2001-08-11Check socket >= 0. We should also be going through the list of clonedAngelos D. Keromytis
transports and invalidating (somehow) those whose socket should not be used.
2001-08-11When a message is received on the wildcard (default) transport,Angelos D. Keromytis
re-examine the interface list; new addresses are bound to, and sockets to deleted addresses are closed. This only occurs if the Listen-to directive in isakmpd.conf is *not* used.
2001-08-11\+\n support, and spit out cc-style error messages. the parser's lineTheo de Raadt
counting is lex dependent, and will need to be tweaked
2001-08-11Add TRANSPORT_MARK, for mark-and-sweep garbage collection of transportAngelos D. Keromytis
instances.
2001-08-11Fix keynote credential case again.Angelos D. Keromytis
2001-08-11Allocate slightly larger buffer for cert.Angelos D. Keromytis
2001-08-08Typo: remove space before period. Spotted by Brian J. Kifiak <bk@rt.fm>.Heikki Korpela
millert@ ok
2001-08-07No need to remove /etc/nologin after killing shutdown; signalHeikki Korpela
handler will take care of this. Pointed out by bk@rt.fm; millert@ ok. (Although it was millert@ who asked for it in the first place, bad me for not checking the source. :-)
2001-08-07Document how to cancel a scheduled shutdown with kill(1).Heikki Korpela
Also mention that /etc/nologin should be deleted after this if needed. ok millert@
2001-08-07o Fix a typo (heko@iki.fi)Todd C. Miller
o Add text about default labels
2001-08-06Update to reality based on sys/disklabel.hTodd C. Miller
2001-08-05re-order headers as they should beTheo de Raadt
2001-08-03o) We always closes .Bl and .Bd tags;Mike Pechkin
millert@ ok
2001-08-02pet peeve, insure vs ensureHugh Graham
insure is to indemnify against some contingency ensure is to make sure
2001-08-02o) .Sh AUTHOR -> .Sh AUTHORS;Mike Pechkin
o) .Sh EXAMPLE -> .Sh EXAMPLES; o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION; millert@ ok
2001-08-02nkmempages.Artur Grabowski
2001-08-02Let the example config use suites that actually work together.Hakan Olsson
2001-08-01Correct diagnostic string per PR 1981 by Kaspar Toomik.Hugh Graham
2001-07-31allow to test that flags are unset, ok dhartmei@, mickey@Peter Stromberg
2001-07-29-Wunused for KAME caseJun-ichiro itojun Hagino
2001-07-28start sentence on new line, from mpech@Daniel Hartmeier
2001-07-26edlabel no moreMiod Vallat
2001-07-26Remove edlabel. It was only compiled on sparc and sun3, and is completelyMiod Vallat
superceded by disklabel -E. millert@ agrees.
2001-07-26Remove BUGS section, swapoff now works. ok art@Peter Valchev
2001-07-26sort SEE ALSO section correctly, from mpech@.Daniel Hartmeier
2001-07-26usage() with __progname according to style(9), typo in man page. both from ↵Daniel Hartmeier
mpech@.
2001-07-25do not write into s6_addr[16] (out of bounds).Jun-ichiro itojun Hagino
2001-07-25pf_key_v2_flow: sync success and failure messages; ok niklas@Markus Friedl
2001-07-25CFG mode changes: send attributes of size 0 if attribute is not availableMarkus Friedl
fix several if statements, ok ho@
2001-07-25do not setup identity extensions for KAME; ok angelos@Markus Friedl
2001-07-25We have to undo the changes to the 3rd party code, because it makesMike Pechkin
upgrading those components hell. Tip of the day: Don't commit without confirmation.
2001-07-20we don't like:Mike Pechkin
o) .Pp before/after .Sh; o) .Pp before/after .Rs/.Re; o) .Nm without argument in SYNOPSIS;
2001-07-19#include <termios.h>Todd C. Miller
2001-07-19Fix/complete the handling of the binary ops >< and <> to behaveKenneth R Westerback
like the ipf operators. The 'n >< m' construct (Include Range = PF_OP_IRG) should match ports greater than n and less than m, not greater than or equal to n and less than or equal to m. The 'n <> m' construct (Exclude Range = PF_OP_XRG) should match all ports less than n OR greater than m, not be treated as an alias for ><. Thus PF_OP_GL, which was used for both <> and >< is replaced with PF_OP_IRG and PF_OP_XRG with the 'correct' semantics. OK dhartmei@
2001-07-18try to clarify a double negative. ok jason@Kjell Wooding
2001-07-18protect #define MAX(); ok ho@Markus Friedl
2001-07-18minor updates.Markus Friedl
2001-07-18use correct length for SADB_X_EXT_POLICY message on KAMEMarkus Friedl
tested on bsd/os; ok ho@
2001-07-18new ERROR token, errx() -> warnx() + ERROR; ok deraadt@Markus Friedl
2001-07-18KNF for returnMarkus Friedl
2001-07-18check number range to fit in 32 bitsMichael Shalayeff
2001-07-18put range checks on NUMBER, pointed out by deraadtMichael Shalayeff
2001-07-17spaces, parens, err instead of errx+strerrorMichael Shalayeff
2001-07-17warnx()/YYERROR instead of errx(); suggested by mickey@Markus Friedl