summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2006-03-21Correctly check for the end of the cmds table. There is no need to check forClaudio Jeker
c_func2. Until now ifconfig accepted something like ifconfig tun0 1.2.3.4 1.2.3.5 foobar without error. Additionally change the error message to a more comprehensible message. OK markus@, henning@
2006-03-21instead of sizeof(array) / sizeof(element) computation, use the existingDaniel Hartmeier
end-of-array NULL marker, shuts up source analysis tool, from deraadt@
2006-03-20NetBSD Coverity CID 2298: Fix memory leak.David Hill
NetBSD Coverity CID 2299: Fix memory leak. NetBSD Coverity CID 2301: Fix memory leak. ok ray@
2006-03-20Don't increment a pointer *before* testing it for NULLDavid Hill
ok deraadt@
2006-03-20NetBSD Coverity CID 2302: Free fat if fatal error to avoid leak.David Hill
ok otto@ deraadt@
2006-03-20NetBSD Coverity CID 774: Don't increment a pointer *before* testing it for NULL!David Hill
ok otto@
2006-03-20NetBSD Coverity CID 2074: Fix memory leak.David Hill
ok deraadt@
2006-03-20NetBSD Coverity CID 1745: Fix memory leak.David Hill
yes otto@
2006-03-20NetBSD Coverity CID 2305: Fix memory leak.David Hill
ok deraadt@
2006-03-20When being verbose while deleting ike rules (-dv), print deletions instead ofHans-Joerg Hoexer
additions. Suggested by david@
2006-03-20When adding a connection, do not explicitly start that connectionHans-Joerg Hoexer
using "t" and "c" fifo commands. This is prone to a race when adding several tunnels between the same peers. Just let isakmpd start that connection on its own (using the connection checker).
2006-03-20make sure the command fifo is ready before isakmpd returns. ThisHans-Joerg Hoexer
resolves a startup race when interacting with ipsecctl. Suggested by and discussed with moritz@ ok moritz@
2006-03-19Fix mem leaks in error path. From NetBSD's coverity analysis. ok pat@Otto Moerbeek
deraadt@
2006-03-17Off-by-one; from NetBSD's coverity analysis; ok millert@Otto Moerbeek
2006-03-16typo.Alexandre Anriot
ok otto@
2006-03-14implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4)Damien Miller
which optionally verifies that a packet is received on the interface that holds the route back to the packet's source address. This makes it an automatic ingress filter, but only when routing is fully symmetric. bugfix feedback claudio@; ok claudio@ and dhartmei@
2006-03-13Cleanup and plug a fe memleaks and; from Davif Hill with a twist fromOtto Moerbeek
myself.
2006-03-12Add the -s flag, meaning: skip mount if the file system isOtto Moerbeek
already mounted. This flag is very handy when mounting mfs partitions. The -s flag will be used in an upcoming etc/rc diff. ok henning@ deraadt@
2006-03-12use asprintf instead of a static buffer; dhill, tested by pedroTheo de Raadt
2006-03-09Remove -n from synopsis tooPedro Martelletto
2006-03-09Remove option -n from newfs as well as all references to fs_postbl()Pedro Martelletto
Various testing for a while, okay krw@
2006-03-07add support for special "bypass" and "deny" flows.Reyk Floeter
ok hshoexer@, thanks jmc@
2006-03-07add an ike option for road warrior setups (hosts with dynamic ipReyk Floeter
addresses). "ike dynamic esp" will use the system's hostname as the fqdn source id (instead of the ip address) by default and enable dpd (dead peer detection) to allow smooth reconnects after an ip address change (i.e. forced reconnect with consumer adsl lines). ok hshoexer@, looks fine markus@, jmc@
2006-03-06convert permanent privilege revocation to use setresuid/setresgid;Damien Miller
ok henning@
2006-02-21improvements from claudio:Jason McIntyre
- note that "-alias" is a synonym for "delete", and encourage the latter - make the description of "delete" clearer ok claudio
2006-02-21The new default encryption algorithm for main mode is AES instead of 3DES.Hans-Joerg Hoexer
Noticed as not being documented by otto@. ok otto@
2006-02-20bit more consistent...Jason McIntyre
2006-02-20- note that "deletetunnel" is for gif(4) and gre(4) devices onlyJason McIntyre
- remove some redundant text from "deletetunnel" description help/ok claudio
2006-02-14Define a wsdisplay type for the Sun ZX/Leo frame buffer.Miod Vallat
2006-02-06typo from alexey dobriyan;Jason McIntyre
2006-02-03override authentication tag as well; ok hshoexer@Christian Weisgerber
2006-02-02Two fixes: generate default main mode config when using PSK, added missingHans-Joerg Hoexer
force (with naddy@) ok reyk@ naddy@
2006-02-02Small cleanup to avoid gotos, from Andrey Matveev.Hans-Joerg Hoexer
ok moritz@
2006-02-01double semicolon; from Daniel Matic in PR 4929Otto Moerbeek
2006-02-01noted by lint: include <string.h> instead of <strings.h>, add tow ARGSUSED1Hans-Joerg Hoexer
2006-02-01NTP is described by RFC 1305, not 1035;Jason McIntyre
from michal f. hanula (freebsd docs/92629)
2006-01-28zap unused functionHenning Brauer
From: Andrey Matveev <evol@online.ptt.ru>
2006-01-25spell fall through as FALLTHROUGHTed Unangst
2006-01-20initialize authtype->string in case of RSA to avoid bad free()Christian Weisgerber
ok reyk@ hshoexer@
2006-01-17wrap long lines (no binary change)Reyk Floeter
2006-01-17spacingTheo de Raadt
2006-01-17no , after last element in enumTheo de Raadt
2006-01-16add support for pre-shared keys with "ike esp" using the new keywordReyk Floeter
"psk". rsa-sig is recommended and will still be used by default. ok hshoexer@, manpage ok jmc@
2006-01-15If the log file is invalid/incompatible, try to rename the bad log fileCan Erkin Acar
and continue with a new name instead of suspending. ok mcbride@
2006-01-14Add a -q flag to reduce output a la newfs, and print the raw device we areMiod Vallat
operating on instead of ``growfs'' (a la newfs as well). ok millert@ pedro@
2006-01-09some minor types house cleaning, ok ottoTheo de Raadt
2006-01-09Introduce a wsdisplay type for mac68k frame buffers; we might need to becomeMiod Vallat
less generic in the future, though.
2006-01-09Remove references to an/awi/ancontrol that should not have beenJonathan Gray
here in the first place.
2006-01-09Don't enter ancontrol. Reminded by deraadt@Jonathan Gray
2006-01-09Move ancontrol to the attic, no longer needed.Jonathan Gray