summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2009-01-27A warning text in ipsecctl was used twice. Make the messages uniqueAlexander Bluhm
for easier debugging. ok grunk@, hshoexer@, todd@
2009-01-26Mark multipath routes with P in the show command flags. Bummer that bothClaudio Jeker
M and m were already taken. OK henning@
2009-01-24improve indentation without wasting space on the install media;Igor Sobrado
make source code fit on 80-column displays; while here, remove superfluous comment sign. ok krw@
2009-01-24Improve comment about resolv.conf creation. Prodded by sobrado@.Kenneth R Westerback
2009-01-20Add support to isakmpd(8) and ipsecctl(8) to install SA's with aMarco Pfatschbacher
different source network than we have negotiated with a peer. This enables us to do nat/binat on the enc(4) interface. Very useful to work around rfc 1918 collisions. Manpage and testing by Mitja Muzenic. Thanks! OK hshoexer@, markus@. "I like it" todd@
2009-01-17Use different variables for the dump offset in blocks and the dump offsetMiod Vallat
in bytes; this allows us to get rid of many off_t casts, and ensures proper operation on very large swap partitions on 32 bit machines. From Pierre Riteau.
2009-01-11On *ppc disks shared with MacOS, walk the Apple partition map to find outMiod Vallat
the bounds of the OpenBSD area. Should prevent users from shooting themselves in the feet. ok krw@
2009-01-10Use the kernel set ifam_hdrlen so that ABI changes won't cause olderClaudio Jeker
binaries to stop working. OK krw@, michele@, henning@, dlg@
2009-01-08Reflect MPLS kernel changes.Michele Marchetto
ok claudio@
2009-01-06i saw the previous was wrong as soon as i committed it: put theJason McIntyre
built-in blurb in STANDARDS; we did once have a COMPATIBILITY section which we merged with STANDARDS, so i think this is appropriate. it certainly feels better than adding single sentences randomly to the end of text bodies.
2009-01-06document, consistently, those apps which also exist as built-insJason McIntyre
on certain shells; do not try to document changes between the implementations, but at least warn of their existence; diff from Ingo Schwarze
2009-01-04replace hardcoded exit values with .Ex macros;Igor Sobrado
ok jmc@
2009-01-02Handle kernel core files larger than 2GB; ok dlg@Miod Vallat
2008-12-29Give ifb its own display type (be sure to make includes before rebuildingMiod Vallat
wsconsctl)
2008-12-29Some forms of inode corruption can make remsize and thus isize goOtto Moerbeek
negative and cause SEGVs. Handle this the same as an out of range blockno. ok jsg@ (also victim) pedro@ thib@
2008-12-24fox format string; ok tedu@Otto Moerbeek
2008-12-22Only warn about pfkey failures when errno is != EEXIST.Hans-Joerg Hoexer
This avoids warnings about already existing manual flows when ipsec.conf is reloaded. From Mitja Muzenic <mitja at muzenic dot net>, thanks!
2008-12-22mark log_fatal() and monitor_exit() as __dead, as they do not return.Hans-Joerg Hoexer
2008-12-16Use macros from route.h when mapping route priorities to names; theStuart Henderson
hardcoded values used here before were incorrect. ok claudio@
2008-12-15Reflect kernel changes. Labels are no more per link uniqueMichele Marchetto
and operations are now stored in rt_flags. This also simplify a lot the syntax. ok claudio@ laurent@
2008-12-15remove unused vars; damien@ ok.Federico G. Schwindt
2008-12-12ifconfig(8) part to make it possible to set an interface priority.Claudio Jeker
OK deraadt@
2008-12-12Use the hdrlen to skip over the header and to the sockaddrs instead of theClaudio Jeker
implied sizeof(struct rt_msghdr). Makes code more robust when userland and kernel are out of sync.
2008-12-07clean up find_bounds(), no binary change; 'dead initialisation' llvm/clang; ↵Constantine A. Murenin
ok krw millert
2008-12-07fix an 11-year-old typo in an if statement; 'null dereference' llvm/clang; ↵Constantine A. Murenin
ok millert
2008-12-01Back out previous; it broke specifying paritions sizes with decimals,Ray Lai
e.g. "0.5g".
2008-12-01Check for invalid integers passed getuint(); instead of getuint()Ray Lai
returning an error, just reprompt. If there is an error reading from stdin, use the old (default) value. Shrinks fdisk a few bytes! OK deraadt.
2008-11-29Explain how /32 changes the address type to IPV4_ADDR_SUBNET. From MitjaHans-Joerg Hoexer
Muzenic (mitja at muzenic dot net), many thanks!
2008-11-28Make growfs refuse to run on a dirty filesystem, and set the filesystem toChris Kuethe
dirty on the way out so that users are forced to run fsck afterwards. The manpage politely suggested that the filesystem be checked after growing it; change it to say that fsck is required.
2008-11-24remove trailing "\n" from errx()Kevin Steves
2008-11-17Fix printing of partner link aggregation group ID.Marco Pfatschbacher
OK brad@
2008-11-14When parsing v4 addresses mark them as network addressesHans-Joerg Hoexer
(IPV4_ADDR_SUBNET) when they contain a '/'. This allows to choose between IPV4_ADDR and IPV4_ADDR_SUBNET by adding "/32", ie. "a.b.c.d" vs. "a.b.c.d/32". This helps to interop with other IKE implementations. From Mitja Muzenic <mitja at muzenic dot net>, thanks! Idea supported by markus@ and jdixon@.
2008-11-14when describing options that can be passed to mount:Jason McIntyre
- keep the examples in this page and fstab(5) in sync - give an equivalent fstab(5) entry to show how options are specified these changes are necessary because of the differing ways we pass options to mount. while here, zap some .Tn ok otto
2008-11-11Use rfc2409 conform notification message when client identities areHans-Joerg Hoexer
not valid during phase 2. From Dirk Mast <condor2k at googlemail dot com>, thanks! ok markus@
2008-11-09add missing header needed by getpagesize().Charles Longeau
ok millert@
2008-11-08Document the ddb.trigger sysctl.Chris Kuethe
feedback and ok mpf@, deraadt@
2008-11-06Have called pass pagesize into FS_KERNMAXFILESIZE(), because there is noTheo de Raadt
automatic symbol that has this information. PAGE_SIZE is simply not portable, or even fixed on some systems. ok otto
2008-11-02check for the maximum file size to avoid some out-of-bounds accesses;Otto Moerbeek
ok millert@
2008-10-22log pcap stats upon SIGUSR1; ok canacarHenning Brauer
From: Dave Harrison <dave@nullcube.com>
2008-10-21do not listen on tentative (during DAD), duplicated (after DAD) orMarkus Friedl
detached addresses. bind(2) will not allow this. ok hshoexer, fries
2008-10-20add an example of how to scan for wireless networks, since it is notJason McIntyre
immediately obvious from reading the main text or the wireless pages; i killed the "ifconfig gif1 destroy" example to do this, since i want to keep EXAMPLES relatively short, and we already provide an example of how to create an interface;
2008-10-17init bufdata to NULL for when compiled without KVM supportTheo de Raadt
2008-10-17findeol() fix from pfctlHenning Brauer
2008-10-17in findeol(), do not skip the pushback buffer. fixes PR 5952 by sthen@ andHenning Brauer
should make the pushback buffer really transparent. diagnosis by me, fix with mpf, some input deraadt, ok mpf
2008-10-05- talk about the "client configuration script" consistenlyJason McIntyre
- Xr dhclient-script on first mention, which is section 8 not 5 ok krw
2008-10-05Oops. Missed one typo jmc@ spotted.Kenneth R Westerback
2008-10-05Clarify discussion of option modifiers. They only affect values passedKenneth R Westerback
to dhclient-script. Our default script only uses a few options so others are unaffected by option modifiers. PR#5834 is thus rendered moot. Feedback & suggestions from jmc@, ok deraadt@.
2008-10-02implement "set state-defaults X", where X is a list of state options asHenning Brauer
permitted keep state(X). applies to all rules which do not have keep state explicitely. e. g. "set state-defaults pflow, no-sync" ok phessler deraadt
2008-09-30compress powersleep commands into one; ok damienTheo de Raadt
2008-09-24remove duplicate command;Jason McIntyre
from Daniel Roethlisberge, documentation/5936;