Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-07-06 | delint: offset arg to mmap is off_t and remove dead code | Otto Moerbeek | |
ok millert@ | |||
2004-07-05 | when running as supplier and asked about a defualt route but we have no, | Henning Brauer | |
do not try to fake one when the query comes from a non-local network, i. e. ifp is NULL, which caused a segfault. PR3841, William J Hulley <jonny@abduction.org> | |||
2004-07-05 | userquota and groupquota _optionally_ have a value. | Otto Moerbeek | |
ok pedro@ millert@ | |||
2004-07-05 | %lu and cast to unsigned long to print a size_t; ok ho | Peter Valchev | |
2004-07-05 | remove useless (always false) check; ok millert henning | Peter Valchev | |
2004-07-05 | fix warning: extra tokens at end of #undef; ok henning | Peter Valchev | |
2004-07-04 | properly bitch when we cannot open the config file, basically resembling | Henning Brauer | |
a diff from Damir Horvat <damir@x-si.org> which didn't apply cleanly | |||
2004-07-03 | zap INET_ONLY, compress usage(); jared | Theo de Raadt | |
2004-07-03 | ansi; jared | Theo de Raadt | |
2004-07-02 | Take TMPDIR into account when creating a temp mountpoint for populating. | Otto Moerbeek | |
ok avsm@ millert@; man page ok jmc@ | |||
2004-07-02 | Use "time_second" instead of "time" now that time handling in the kernel | Thorsten Lockert | |
has changed. ok art@ millert@ marc@ | |||
2004-06-30 | Compile cleanly with gcc3.3.2. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-29 | remove cedric's bogus interface name verification code. | Henning Brauer | |
this was meant to verify that ne3 is a valid interface that could show up, but bogus0 is not. while this might sound like a good idea it is completely broken and causes a shitload of problems. just allow for anything as interface name, the kernel abstracts that nice enough. if no interface by that name exists (or shows up) the rule never matches; that matches pf semantics used everywhere else. this also fixes the "pfctl always has to run as root" issue that cedric did not fix over the last 6 months despite being bugged to regularily. help & ok mcbride@ | |||
2004-06-29 | convert a few memcpy()s to strlcpy() so we don't copy uninitialized junk into | Mike Frantzen | |
a interface name's slack space past the \0. will be needed for the optimizer. ok henning@ | |||
2004-06-28 | - repair examples which i damaged in previous commit | Jason McIntyre | |
- tidy up DIAGNOSTICS, and use -diag - wording from jared yanovich; | |||
2004-06-26 | For all the mfs lovers: | Otto Moerbeek | |
- Make the root of an mfs file system inherit the permission and owner/group of the mountpoint. Work by david@. - Add the ability to populate an mfs file system with the contents of a directory or a file system immediately after creation, controlled by the new -P mount option. Discussed with and tested by many, ok djm@ david@ | |||
2004-06-26 | cleanup ioctl for ifgroups; ok pb@ | Markus Friedl | |
2004-06-26 | grammar, formatting, consistency, spelling, etc. from jared yanovich; | Jason McIntyre | |
2004-06-26 | new sentence, new line; | Jason McIntyre | |
2004-06-26 | new sentence, new line; | Jason McIntyre | |
2004-06-26 | grammar; | Jason McIntyre | |
2004-06-26 | add back PF_INOUT, fixes reassemble tcp | David Krause | |
ok canacar@ mcbride@ | |||
2004-06-26 | Add option that allows to change timeslot range forn network card. | Alex Feldman | |
ok mcbride@ | |||
2004-06-26 | Narrow down privsep interface. Move pf_key_v2_open() to monitor. | Hans-Joerg Hoexer | |
Work in progress. ok ho@ | |||
2004-06-26 | ignore IFGROUP errs in ifconfig -a for "too old" kernels right now | Philipp Buehler | |
2004-06-26 | Remove -DHAVE_GETNAMEINFO frome makefiles. | Ryan Thomas McBride | |
Pointed out by ho@ | |||
2004-06-26 | Remove scsi(3) from SEE ALSO. ok deraadt@ | Robert Nagy | |
2004-06-26 | more netiso leftovers | Philipp Buehler | |
by pointer from yared janovich henning@ ok | |||
2004-06-26 | groups in usage() - from jared yanovich | Philipp Buehler | |
2004-06-25 | Keynote policy checking can now be disabled by "-K" switch and config tag | Hans-Joerg Hoexer | |
"Use-Keynote". Default is to use keynote. ok henning@ ho@ | |||
2004-06-25 | Remove HAVE_GETNAMEINFO alternate code. Compiled binary is unchanged. | Ryan Thomas McBride | |
ok msf@ hshoexer@ itojun@ ho@ | |||
2004-06-25 | interface groups | Philipp Buehler | |
mcbride@ ok | |||
2004-06-25 | introduce "interface groups" | Philipp Buehler | |
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok. | |||
2004-06-25 | repair tree nanobreak by the nanobum | Theo de Raadt | |
2004-06-25 | remove two ununsed includes | Henning Brauer | |
2004-06-25 | remove netiso and netns code | Henning Brauer | |
2004-06-25 | Narrow down privsep interface. Remove ui_init to monitor. So we can get rid of | Hans-Joerg Hoexer | |
monitor_mkfifo. Work in progress. ok ho@ | |||
2004-06-24 | iso is gone | Henning Brauer | |
2004-06-24 | remove netiso stuff | Henning Brauer | |
2004-06-24 | Remove some unused code. | Hans-Joerg Hoexer | |
Fix handling of sigchild. Now it's possible to sigstop/sigcont isakmpd correclty. ok ho@ | |||
2004-06-24 | Also handle keys from x509-certificates embedded in keynote credentials. | Hans-Joerg Hoexer | |
with msf@ ok ho@ | |||
2004-06-23 | Print corrent prefix. Found and tested by alex at vbone.net. | Hakan Olsson | |
2004-06-23 | make -w optional; ok miod@ | David Krause | |
2004-06-23 | better dead detect window code; still crap | Theo de Raadt | |
2004-06-23 | Avoid stat before open. Do open and fstat instead. | Hans-Joerg Hoexer | |
Remove check_file_secrecy() as it is obsoleted be check_file_secrecy_fd(). ok ho@ | |||
2004-06-23 | Make compiling with Boehm's gc possible again. | Hakan Olsson | |
2004-06-23 | Support IPV{4,6}_ADDR_SUBNET IDs in Phase 1, just like the man page | Hakan Olsson | |
says we do. Noted and tested by alex at vbone.net. Also avoid a potential SEGV here. hshoexer@ok | |||
2004-06-23 | Add commandline switch -a / config tag "Acquire-Only" to tell isakmpd to not | Hans-Joerg Hoexer | |
touch flows. initial work by markus ok markus@ ho@ henning@ | |||
2004-06-22 | horrid horrid horrid. we have a race window where we, ourselves, do an | Theo de Raadt | |
address deletion. yesterday we stopped ignoring deletions. but now dhclient does not see itself coming up, and voila, we get more and processes. so now make a 5-second window where we ignore delete messages, but terminate if we get them at any other time. a very relucant ok from henning who is actively searching for a final solution to this problem. | |||
2004-06-22 | Make the interactive "update" command match the command-line "-u" | Tom Cosgrove | |
option by updatng/setting the 0xAA55 signature at the end of the sector. ok nick@ weingart@ |