summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2010-09-28document disklabel uids and move a little text to improve readability; theJason McIntyre
duid text was supplied by krw ...after much discussion with jsing and krw ok krw
2010-09-24Make it possible to use "dhclient egress" to refetch a lease withoutClaudio Jeker
rememberingwhich interface dhclient was actually active on. Requested by deraadt, OK deraadt@, krw@
2010-09-24remove the check that enforced rdr-to only inbound and nat-to only outbound.Henning Brauer
both now can be used in both directions. the kernel allowed that ever since we did the great NAT rewrite. still enforce that a direction is given, a rule with rdr-to and/or nat-to and no direction is pretty certainly an error (which it would work, technically) ok ryan claudio dlg
2010-09-24Now that HW_DISKNAMES returns xx0: or xx0:uid entries, we must truncateTheo de Raadt
the : and uid components out -- otherwise these two programs will work poorly.
2010-09-23tweak the disklabel uid stuff; ok jsingJason McIntyre
2010-09-23Correctly identify mount points when they are specified in /etc/fstab usingJoel Sing
a disklabel UID. Based on a diff from josh@elsasser.org. Resolves PR6471. ok krw@
2010-09-23Print disklabel UIDs using printf/fprintf instead of using the hand rolledJoel Sing
uid_print() function. ok krw@
2010-09-23change description for AES-GMAC a bit.Mike Belopuhov
prompted by reyk
2010-09-23support for aes-gcmMike Belopuhov
OK reyk
2010-09-22Support AES-GCM-16 (as aes-gcm) and ENCR_NULL_AUTH_AES_GMACMike Belopuhov
(as aes-gmac) encryption transformations in the ipsec.conf(5). Available "enc" arguments denoting use of 1) AES-GCM-16: aes-128-gcm for 160 bit key (128+nonce) aes-192-gcm for 224 bit key (192+nonce) aes-256-gcm for 288 bit key (256+nonce) 2) ENCR_NULL_AUTH_AES_GMAC: aes-128-gmac for 160 bit key (128+nonce) aes-192-gmac for 224 bit key (192+nonce) aes-256-gmac for 288 bit key (256+nonce) Please note that aes-gmac family performs no encryption and provides no confidentiality and is intended for cases in which confidentiality is not desired (it can be thought of as AH with NAT-T support). Also, although this implementation supports manual keying, it's use is strictly discouraged as AES-GCM security depends on frequent re-keying. So it can be thought of as a debug facility only. Example configuration: ike esp from 172.23.61.36 to 172.23.61.156 \ quick enc aes-256-gcm \ psk humppa Thoroughly tested by me and naddy. Works fine with Linux. Requires updated pfkeyv2.h include file. OK naddy
2010-09-22Support for use of AES-GCM-16 (as AESGCM) and ENCR_NULL_AUTH_AES_GMACMike Belopuhov
(as AESGMAC) ciphers in the ISAKMP Phase 2 (aka Quick Mode). Thoroughly tested by me and naddy. Works fine with Linux. Requires updated pfkeyv2.h include file. ok naddy
2010-09-22support INVALID_KE_PAYLOAD notification sent by the responder in caseMike Belopuhov
the initiator chose wrong D-H group. in this case we throw away our SA and start over with a proper group. makes iked work as an initiator with strongswan/charon without any specific "ikesa" (phase 1) configuration. ok reyk
2010-09-22new log opt "matches"Henning Brauer
awesome for debugging, a rule like match log(matches) from $testbox will show you exactly which subsequent rules match on that packet real ok theo assumed oks ryan & dlg bikeshedding many implementation time ~1 min bikeshedding about the keyword longish. i voted for "matches" since i like to play with matches idea was theo's, actually
2010-09-2115 months later, there is still no mpls(4) man page: .Xr mpls 4 -> MPLSJason McIntyre
2010-09-21Add '-label' to specify that you only want to see routes having theKenneth R Westerback
given label. No change to existing functionality. ok henning@ claudio@
2010-09-21bump default snaplen so that pfloghdr + ip hdr + prot hdr usually fitHenning Brauer
2010-09-20tweak previous; ok schwarzeJason McIntyre
2010-09-20fixup length of an eap identity message payload.Mike Belopuhov
ok reyk
2010-09-19Do not break .Op scope by .Oc.Ingo Schwarze
While here, remove .Xo macros that were ugly workarounds to deal with groff-1.15 bugs, but are required neither by modern groff nor by mandoc nor by any documentation we are aware of. Problem originally noticed by jmc@ running mandoc -Tlint; patch ok by jmc@.
2010-09-19more wacky macro fixing;Jason McIntyre
2010-09-17back out the -Fr hunk from previous: deraadt points out it is incorrectlyJason McIntyre
worded. i think what is there now is clear enough.
2010-09-16- note that -Fr puts the filer in a "pass all" stateJason McIntyre
- note that -f replaces the current ruleset based on a diff from Anders Langworthy, but altered by mcbride and henning; ok henning
2010-09-16pass proper argument to the proc_sig_handler and check env forMike Belopuhov
NULL before dereferencing. fixes an annoying crash. ok reyk
2010-09-13various tweaks, based on a diff from Chris Palmer;Jason McIntyre
ok marco
2010-09-12spacing fix;Jason McIntyre
2010-09-09- allow esp proposals without integrity and ah proposals withoutMike Belopuhov
encryption; - add additional nonce length field, use that for the ciphers that require additional keying material; - setup right flow direction depending on the mode: fixes up iked working as an initiator against charon. tested by me and jsg. ok reyk
2010-09-04Tried to get too fancy with the Makefile in a way that doesn't buildBret Lambert
correctly; changing keywords.sh still requires manual intervention. pointed out by sthen@
2010-09-04sort generated keywords in order to replace linear probe with bsearch(3)Bret Lambert
(more people should know about how to properly use libc-provided tools) make keywords.h depend upon keywords.sh, so that it gets automatically rebuilt when keywords.sh is edited ok claudio@
2010-09-03add an EXIT STATUS section for /sbin;Jason McIntyre
2010-09-02remove trailing spaces and tabs from source code; no binary changesIgor Sobrado
(verified by both sthen@ and me). ok sthen@; "just commit it" claudio@
2010-09-02remove trailing spaces and tabs; no binary change.Igor Sobrado
written with help from henning@, who suggested ensuring that there are no changes in the digests for object files, thanks! ok henning@
2010-08-27put .Os in the correct place;Jason McIntyre
2010-08-26document kern.consdev;Jason McIntyre
2010-08-26- fdisk(8), not fdisk(1)Jason McIntyre
- zap trailing whitespace
2010-08-24- plugs two fd leaksJasper Lievisse Adriaanse
ok millert@
2010-08-21Use .Dq for double quotes and properly .Xr fdisk(1).Ray Lai
OK jmc
2010-08-20Don't silently ignore errors if we cannot open the device. While I'm hereFederico G. Schwindt
simplify the code and apply some style(9). Discussed with and ok miod@
2010-08-19Introduce an MI kern.consdev sysctl that will replace the MDMark Kettenis
machdep.console_device that's only implemented on a few architectures. ok deraadt@, miod@
2010-08-12fix a few warnings. ok jsingTed Unangst
2010-08-12Print the real device name followed by the disklabel UID in parenthesisJoel Sing
when fsck is run against a disklabel UID. This allows a user to determine which device is really being scanned. ok krw@
2010-08-12correct a format string. not sure who thought size_t would be a good matchTed Unangst
for ccd size, though.
2010-08-11Fix a logic problem which could in theory cause pfctlJonathan Gray
to recursively print anchors with wildcards when not requested via the command line but in practice only applied to automatically generated inline anchors (which don't have wildcards) or when recursion was requested. Found by the clang static analyser and behaviour explained by mcbride@ ok henning@ mcbride@
2010-08-10Add support for t/T == terabyte units to -E. Prodded by deraadt@.Kenneth R Westerback
Semantically equivalent version ok beck@ millert@ and tested ckeuthe@. "just commit" deraadt@
2010-08-09Improve the editor prompt for the 'R' (resize) commandTheo de Raadt
from otto
2010-08-08get the mark up for `|' correct;Jason McIntyre
2010-08-08make disklabel -p slightly nicer by accepting capital letters and printingTed Unangst
a more useful error message for invalid ones. ok deraadt
2010-08-07disable lidsuspend when we are powering downPeter Hessler
"I like this" marco@, "Sure" deraadt@
2010-08-04fixup keylength for aes-128-cbc in quickmodeTheo de Raadt
from mikeb
2010-08-03fix linecount bug with comments spanning multiple linesHenning Brauer
problem reported with the obvious fix for bgpd by Sebastian Benoit <benoit-lists at fb12.de>, also PR 6432 applied to all the others by yours truly. ok theo isn't it amazing how far this parser (and more) spread?
2010-08-03Group string comparisons and supply more helpful comments. AddKenneth R Westerback
"total sectors" to "boundstart" and "boundend" in the list of fields that are left alone during a RESTORE operation. ok deraadt@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-13 13:30:41 +0000