| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
is a more complicated problem than it appears.
ok deraadt@
|
|
send frames to the ethernet broadcast address, so this will need some more
thought and it's too late for 6.0.
Problem reported by Holger Mikolon.
ok mpi@
|
|
created with far fewer inodes than DEV_BSIZE devices.
Scale the default 'density' value by (sector size)/DEV_BSIZE to
create the same number of inodes. Obviously a NO-OP on DEV_BSIZE
devices.
Thanks David!
ok deraadt@
|
|
In situations where >1 offer is received this will eliminate unbounded memory
growth and make us a more polite netizen. In some corner cases it might
prevent reuse of inappropriate older offers.
ok millert@
|
|
i.e. == 0 and != 0 as appropriate. No intentional functional change.
Suggested by & ok tom@
|
|
it to do less. Discussion with guenther.
ok krw
|
|
systems throw away bits upon chown). Not in this case, but code gets
copied..
ok krw
|
|
correctly, as parse.y's $$ is not zero-initialized.
Found by Rene Ammerlaan
OK markus@ florian@
|
|
swapping between two syn caches for random reseeding anyway, this
feature can be added easily. When the cache is empty, there is an
opportunity to change the hash size. This allows an admin under
SYN flood attack to defend his machine.
Suggested by claudio@; OK jung@ claudio@ jmc@
|
|
interface's LLADDR pass. Rely on dhclient's existing ability to
detect and react to LLADDR changes.
This limits the number of packets that get dropped as a result of
dhclient setting BIOCSFILDROP on the bpf descriptor.
Problem with bridges and multiple dhclients noted by stsp@.
ok mpi@ stsp@ deraadt@ henning@
|
|
|
|
noticed since struct node_queue stayed. ok claudio benno gcc
|
|
ok deraadt
|
|
instead of abusing RTF_CLONING.
Fix a leak reporeted by Aaron Riekenberg on misc@, ok sthen@
|
|
|
|
|
|
ok deraadt@
|
|
|
|
|
|
|
|
This diff by deraadt was overlooked far too many times, mostly by me.
It's the original fix of the pledge disklabel breakage found by espie.
diff by deraadt; ok semarie, tb.
|
|
condition in the if statement more readable while I'm there.
ok phessler@, benno@, florian@
|
|
change this in all config parsers in our tree that support macros.
problem reported by sven falempin.
feedback from henning@, stsp@, deraadt@
ok florian@ mikeb@
|
|
the pf.conf parser allows it, which leads a non working configuration
being loaded.
this changes the parser to make pass out .. af-to an error.
ok henning@ mikeb@
|
|
ok millert@
feedback/ok natano@
|
|
|
|
pledge in-between the two funtion calls. The new readlabel() only does
a DIOC*DINFO ioctl, making sure the fd points to a disk, while
parselabel() does the scary string manipulations. In the makelabel()
code path do an early DIOCGDINFO before pledge. This fixes yet another
pledge problem (disklabel -w /dev/tty floppy576).
Some of this was discussed with beck.
ok semarie, earlier version ok deraadt
|
|
cannot be bound to by non-root users.
Ok millert@ bluhm@
|
|
with this,
anchor foo {
include "/path/to/rules"
}
works and "load anchor" is obsolete, to be removed somewhen later after
release.
co-production with reky at bsdcan, ok reyk mikeb benno sasha
|
|
The umb(4) driver provides support for USB MBIM devices.
Those devices establish connections via celluar networks such as
GPRS, UMTS, and LTE.
ok mpi@ sthen@
additional feedback from deraadt@ jmc@ stsp@ kettenis@
|
|
|
|
ok tb@
|
|
to ifconfig.
"llprio" allows one to set the priority of packets that do not go through
pf(4), as the case is for arp(4) or bpf(4).
ok sthen@ mikeb@
|
|
|
|
ok mglocker
|
|
okay deraadt@
|
|
|
|
is not necessary, and in fact quite annoying when I swtich networks and
want to get back to the init state quickly. Default instead to 1 second.
The very few users who encounter problems may edit dhclient.conf.
ok benno
krw does not object
|
|
addresses from the pool, instead of the fourth byte, which usually
represents network bits.
ok markus@ mikeb@
|
|
previous commit. readlabel() calls editor_allocspace() which will use
the default label unless a template was provided beforehand. Thus,
call parse_autolabel() before redlabel().
Problem found and fix provided by Mark Patruck, thanks!
Fix asap, deraadt@
|
|
clients can be given an IPv4 and IPv6 address at the same time,
thus enabling dual stack usage.
ok markus@ mikeb@
|
|
We don't support Router Renumbering and there are no plans to change
that. ok mpi@
|
|
addresses by specified (e.g. 192.0.2.1) ones. The function should
return if the address is already set. The check was wrong for the
IPv6 case, as it returned if it's not set. This caused the address
to never be fixed.
ok markus@ mikeb@
|
|
discussed with naddy a bit, ok millert
|
|
fallout related to pledge disklabel (e.g. 'disklabel /dev/tty').
- Allow 'disklabel sdN' again for non-root users.
- Make sure at least one DIO* ioctl comes before pledge "disklabel"
- Fix the op == WRITE logic that broke 'make release' in -r2.217
Based on -r2.17 from beck.
ok beck
|
|
|
|
|
|
Avoids a pledge crash with 'ncheck_ffs /dev/tty'.
deraadt agrees
|
