Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-01-27 | A warning text in ipsecctl was used twice. Make the messages unique | Alexander Bluhm | |
for easier debugging. ok grunk@, hshoexer@, todd@ | |||
2009-01-26 | Mark multipath routes with P in the show command flags. Bummer that both | Claudio Jeker | |
M and m were already taken. OK henning@ | |||
2009-01-24 | improve indentation without wasting space on the install media; | Igor Sobrado | |
make source code fit on 80-column displays; while here, remove superfluous comment sign. ok krw@ | |||
2009-01-24 | Improve comment about resolv.conf creation. Prodded by sobrado@. | Kenneth R Westerback | |
2009-01-20 | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a | Marco Pfatschbacher | |
different source network than we have negotiated with a peer. This enables us to do nat/binat on the enc(4) interface. Very useful to work around rfc 1918 collisions. Manpage and testing by Mitja Muzenic. Thanks! OK hshoexer@, markus@. "I like it" todd@ | |||
2009-01-17 | Use different variables for the dump offset in blocks and the dump offset | Miod Vallat | |
in bytes; this allows us to get rid of many off_t casts, and ensures proper operation on very large swap partitions on 32 bit machines. From Pierre Riteau. | |||
2009-01-11 | On *ppc disks shared with MacOS, walk the Apple partition map to find out | Miod Vallat | |
the bounds of the OpenBSD area. Should prevent users from shooting themselves in the feet. ok krw@ | |||
2009-01-10 | Use the kernel set ifam_hdrlen so that ABI changes won't cause older | Claudio Jeker | |
binaries to stop working. OK krw@, michele@, henning@, dlg@ | |||
2009-01-08 | Reflect MPLS kernel changes. | Michele Marchetto | |
ok claudio@ | |||
2009-01-06 | i saw the previous was wrong as soon as i committed it: put the | Jason McIntyre | |
built-in blurb in STANDARDS; we did once have a COMPATIBILITY section which we merged with STANDARDS, so i think this is appropriate. it certainly feels better than adding single sentences randomly to the end of text bodies. | |||
2009-01-06 | document, consistently, those apps which also exist as built-ins | Jason McIntyre | |
on certain shells; do not try to document changes between the implementations, but at least warn of their existence; diff from Ingo Schwarze | |||
2009-01-04 | replace hardcoded exit values with .Ex macros; | Igor Sobrado | |
ok jmc@ | |||
2009-01-02 | Handle kernel core files larger than 2GB; ok dlg@ | Miod Vallat | |
2008-12-29 | Give ifb its own display type (be sure to make includes before rebuilding | Miod Vallat | |
wsconsctl) | |||
2008-12-29 | Some forms of inode corruption can make remsize and thus isize go | Otto Moerbeek | |
negative and cause SEGVs. Handle this the same as an out of range blockno. ok jsg@ (also victim) pedro@ thib@ | |||
2008-12-24 | fox format string; ok tedu@ | Otto Moerbeek | |
2008-12-22 | Only warn about pfkey failures when errno is != EEXIST. | Hans-Joerg Hoexer | |
This avoids warnings about already existing manual flows when ipsec.conf is reloaded. From Mitja Muzenic <mitja at muzenic dot net>, thanks! | |||
2008-12-22 | mark log_fatal() and monitor_exit() as __dead, as they do not return. | Hans-Joerg Hoexer | |
2008-12-16 | Use macros from route.h when mapping route priorities to names; the | Stuart Henderson | |
hardcoded values used here before were incorrect. ok claudio@ | |||
2008-12-15 | Reflect kernel changes. Labels are no more per link unique | Michele Marchetto | |
and operations are now stored in rt_flags. This also simplify a lot the syntax. ok claudio@ laurent@ | |||
2008-12-15 | remove unused vars; damien@ ok. | Federico G. Schwindt | |
2008-12-12 | ifconfig(8) part to make it possible to set an interface priority. | Claudio Jeker | |
OK deraadt@ | |||
2008-12-12 | Use the hdrlen to skip over the header and to the sockaddrs instead of the | Claudio Jeker | |
implied sizeof(struct rt_msghdr). Makes code more robust when userland and kernel are out of sync. | |||
2008-12-07 | clean up find_bounds(), no binary change; 'dead initialisation' llvm/clang; ↵ | Constantine A. Murenin | |
ok krw millert | |||
2008-12-07 | fix an 11-year-old typo in an if statement; 'null dereference' llvm/clang; ↵ | Constantine A. Murenin | |
ok millert | |||
2008-12-01 | Back out previous; it broke specifying paritions sizes with decimals, | Ray Lai | |
e.g. "0.5g". | |||
2008-12-01 | Check for invalid integers passed getuint(); instead of getuint() | Ray Lai | |
returning an error, just reprompt. If there is an error reading from stdin, use the old (default) value. Shrinks fdisk a few bytes! OK deraadt. | |||
2008-11-29 | Explain how /32 changes the address type to IPV4_ADDR_SUBNET. From Mitja | Hans-Joerg Hoexer | |
Muzenic (mitja at muzenic dot net), many thanks! | |||
2008-11-28 | Make growfs refuse to run on a dirty filesystem, and set the filesystem to | Chris Kuethe | |
dirty on the way out so that users are forced to run fsck afterwards. The manpage politely suggested that the filesystem be checked after growing it; change it to say that fsck is required. | |||
2008-11-24 | remove trailing "\n" from errx() | Kevin Steves | |
2008-11-17 | Fix printing of partner link aggregation group ID. | Marco Pfatschbacher | |
OK brad@ | |||
2008-11-14 | When parsing v4 addresses mark them as network addresses | Hans-Joerg Hoexer | |
(IPV4_ADDR_SUBNET) when they contain a '/'. This allows to choose between IPV4_ADDR and IPV4_ADDR_SUBNET by adding "/32", ie. "a.b.c.d" vs. "a.b.c.d/32". This helps to interop with other IKE implementations. From Mitja Muzenic <mitja at muzenic dot net>, thanks! Idea supported by markus@ and jdixon@. | |||
2008-11-14 | when describing options that can be passed to mount: | Jason McIntyre | |
- keep the examples in this page and fstab(5) in sync - give an equivalent fstab(5) entry to show how options are specified these changes are necessary because of the differing ways we pass options to mount. while here, zap some .Tn ok otto | |||
2008-11-11 | Use rfc2409 conform notification message when client identities are | Hans-Joerg Hoexer | |
not valid during phase 2. From Dirk Mast <condor2k at googlemail dot com>, thanks! ok markus@ | |||
2008-11-09 | add missing header needed by getpagesize(). | Charles Longeau | |
ok millert@ | |||
2008-11-08 | Document the ddb.trigger sysctl. | Chris Kuethe | |
feedback and ok mpf@, deraadt@ | |||
2008-11-06 | Have called pass pagesize into FS_KERNMAXFILESIZE(), because there is no | Theo de Raadt | |
automatic symbol that has this information. PAGE_SIZE is simply not portable, or even fixed on some systems. ok otto | |||
2008-11-02 | check for the maximum file size to avoid some out-of-bounds accesses; | Otto Moerbeek | |
ok millert@ | |||
2008-10-22 | log pcap stats upon SIGUSR1; ok canacar | Henning Brauer | |
From: Dave Harrison <dave@nullcube.com> | |||
2008-10-21 | do not listen on tentative (during DAD), duplicated (after DAD) or | Markus Friedl | |
detached addresses. bind(2) will not allow this. ok hshoexer, fries | |||
2008-10-20 | add an example of how to scan for wireless networks, since it is not | Jason McIntyre | |
immediately obvious from reading the main text or the wireless pages; i killed the "ifconfig gif1 destroy" example to do this, since i want to keep EXAMPLES relatively short, and we already provide an example of how to create an interface; | |||
2008-10-17 | init bufdata to NULL for when compiled without KVM support | Theo de Raadt | |
2008-10-17 | findeol() fix from pfctl | Henning Brauer | |
2008-10-17 | in findeol(), do not skip the pushback buffer. fixes PR 5952 by sthen@ and | Henning Brauer | |
should make the pushback buffer really transparent. diagnosis by me, fix with mpf, some input deraadt, ok mpf | |||
2008-10-05 | - talk about the "client configuration script" consistenly | Jason McIntyre | |
- Xr dhclient-script on first mention, which is section 8 not 5 ok krw | |||
2008-10-05 | Oops. Missed one typo jmc@ spotted. | Kenneth R Westerback | |
2008-10-05 | Clarify discussion of option modifiers. They only affect values passed | Kenneth R Westerback | |
to dhclient-script. Our default script only uses a few options so others are unaffected by option modifiers. PR#5834 is thus rendered moot. Feedback & suggestions from jmc@, ok deraadt@. | |||
2008-10-02 | implement "set state-defaults X", where X is a list of state options as | Henning Brauer | |
permitted keep state(X). applies to all rules which do not have keep state explicitely. e. g. "set state-defaults pflow, no-sync" ok phessler deraadt | |||
2008-09-30 | compress powersleep commands into one; ok damien | Theo de Raadt | |
2008-09-24 | remove duplicate command; | Jason McIntyre | |
from Daniel Roethlisberge, documentation/5936; |