summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-07-06delint: offset arg to mmap is off_t and remove dead codeOtto Moerbeek
ok millert@
2004-07-05when running as supplier and asked about a defualt route but we have no,Henning Brauer
do not try to fake one when the query comes from a non-local network, i. e. ifp is NULL, which caused a segfault. PR3841, William J Hulley <jonny@abduction.org>
2004-07-05userquota and groupquota _optionally_ have a value.Otto Moerbeek
ok pedro@ millert@
2004-07-05%lu and cast to unsigned long to print a size_t; ok hoPeter Valchev
2004-07-05remove useless (always false) check; ok millert henningPeter Valchev
2004-07-05fix warning: extra tokens at end of #undef; ok henningPeter Valchev
2004-07-04properly bitch when we cannot open the config file, basically resemblingHenning Brauer
a diff from Damir Horvat <damir@x-si.org> which didn't apply cleanly
2004-07-03zap INET_ONLY, compress usage(); jaredTheo de Raadt
2004-07-03ansi; jaredTheo de Raadt
2004-07-02Take TMPDIR into account when creating a temp mountpoint for populating.Otto Moerbeek
ok avsm@ millert@; man page ok jmc@
2004-07-02Use "time_second" instead of "time" now that time handling in the kernelThorsten Lockert
has changed. ok art@ millert@ marc@
2004-06-30Compile cleanly with gcc3.3.2.Hans-Joerg Hoexer
ok ho@
2004-06-29remove cedric's bogus interface name verification code.Henning Brauer
this was meant to verify that ne3 is a valid interface that could show up, but bogus0 is not. while this might sound like a good idea it is completely broken and causes a shitload of problems. just allow for anything as interface name, the kernel abstracts that nice enough. if no interface by that name exists (or shows up) the rule never matches; that matches pf semantics used everywhere else. this also fixes the "pfctl always has to run as root" issue that cedric did not fix over the last 6 months despite being bugged to regularily. help & ok mcbride@
2004-06-29convert a few memcpy()s to strlcpy() so we don't copy uninitialized junk intoMike Frantzen
a interface name's slack space past the \0. will be needed for the optimizer. ok henning@
2004-06-28- repair examples which i damaged in previous commitJason McIntyre
- tidy up DIAGNOSTICS, and use -diag - wording from jared yanovich;
2004-06-26For all the mfs lovers:Otto Moerbeek
- Make the root of an mfs file system inherit the permission and owner/group of the mountpoint. Work by david@. - Add the ability to populate an mfs file system with the contents of a directory or a file system immediately after creation, controlled by the new -P mount option. Discussed with and tested by many, ok djm@ david@
2004-06-26cleanup ioctl for ifgroups; ok pb@Markus Friedl
2004-06-26grammar, formatting, consistency, spelling, etc. from jared yanovich;Jason McIntyre
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26grammar;Jason McIntyre
2004-06-26add back PF_INOUT, fixes reassemble tcpDavid Krause
ok canacar@ mcbride@
2004-06-26Add option that allows to change timeslot range forn network card.Alex Feldman
ok mcbride@
2004-06-26Narrow down privsep interface. Move pf_key_v2_open() to monitor.Hans-Joerg Hoexer
Work in progress. ok ho@
2004-06-26ignore IFGROUP errs in ifconfig -a for "too old" kernels right nowPhilipp Buehler
2004-06-26Remove -DHAVE_GETNAMEINFO frome makefiles.Ryan Thomas McBride
Pointed out by ho@
2004-06-26Remove scsi(3) from SEE ALSO. ok deraadt@Robert Nagy
2004-06-26more netiso leftoversPhilipp Buehler
by pointer from yared janovich henning@ ok
2004-06-26groups in usage() - from jared yanovichPhilipp Buehler
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-25Remove HAVE_GETNAMEINFO alternate code. Compiled binary is unchanged.Ryan Thomas McBride
ok msf@ hshoexer@ itojun@ ho@
2004-06-25interface groupsPhilipp Buehler
mcbride@ ok
2004-06-25introduce "interface groups"Philipp Buehler
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok.
2004-06-25repair tree nanobreak by the nanobumTheo de Raadt
2004-06-25remove two ununsed includesHenning Brauer
2004-06-25remove netiso and netns codeHenning Brauer
2004-06-25Narrow down privsep interface. Remove ui_init to monitor. So we can get rid ofHans-Joerg Hoexer
monitor_mkfifo. Work in progress. ok ho@
2004-06-24iso is goneHenning Brauer
2004-06-24remove netiso stuffHenning Brauer
2004-06-24Remove some unused code.Hans-Joerg Hoexer
Fix handling of sigchild. Now it's possible to sigstop/sigcont isakmpd correclty. ok ho@
2004-06-24Also handle keys from x509-certificates embedded in keynote credentials.Hans-Joerg Hoexer
with msf@ ok ho@
2004-06-23Print corrent prefix. Found and tested by alex at vbone.net.Hakan Olsson
2004-06-23make -w optional; ok miod@David Krause
2004-06-23better dead detect window code; still crapTheo de Raadt
2004-06-23Avoid stat before open. Do open and fstat instead.Hans-Joerg Hoexer
Remove check_file_secrecy() as it is obsoleted be check_file_secrecy_fd(). ok ho@
2004-06-23Make compiling with Boehm's gc possible again.Hakan Olsson
2004-06-23Support IPV{4,6}_ADDR_SUBNET IDs in Phase 1, just like the man pageHakan Olsson
says we do. Noted and tested by alex at vbone.net. Also avoid a potential SEGV here. hshoexer@ok
2004-06-23Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to notHans-Joerg Hoexer
touch flows. initial work by markus ok markus@ ho@ henning@
2004-06-22horrid horrid horrid. we have a race window where we, ourselves, do anTheo de Raadt
address deletion. yesterday we stopped ignoring deletions. but now dhclient does not see itself coming up, and voila, we get more and processes. so now make a 5-second window where we ignore delete messages, but terminate if we get them at any other time. a very relucant ok from henning who is actively searching for a final solution to this problem.
2004-06-22Make the interactive "update" command match the command-line "-u"Tom Cosgrove
option by updatng/setting the 0xAA55 signature at the end of the sector. ok nick@ weingart@