Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-12-22 | assign pointers to NULL rather than 0, remove a needless cast | mmcc | |
2015-12-19 | Don't exit if a route can't be added. Just log particulars and | Kenneth R Westerback | |
let someone else figure it out. ok mpi@ | |||
2015-12-19 | Delete superfluous "continue;" just before end of loop. | Kenneth R Westerback | |
2015-12-19 | Delete superfluous "close(s);return" just before "close(s);<function | Kenneth R Westerback | |
exit>". | |||
2015-12-18 | Check ioctl() result with == -1, not < 0. Break long line. | Kenneth R Westerback | |
2015-12-18 | pledge "stdio rpath wpath cpath dpath fattr", as long as the -m option | Theo de Raadt | |
wasn't used | |||
2015-12-15 | Include RFC number in reference. While here, improve formatting of another | Tim van der Molen | |
reference. | |||
2015-12-15 | Document /var/db/mountdtab | Tim van der Molen | |
2015-12-15 | When (re)reading /etc/exports, handle the case where the mount point of an | Tim van der Molen | |
export is not also the mount point of a local filesystem. In this case, the local filesystem would not be removed from the "unexport list", causing the export to be "unexported" again. This fix then also allows us to actually delete an export that has been removed from /etc/exports, by passing the MNT_DELEXPORT export flag to mount(2). Makes sense to millert@. | |||
2015-12-12 | Send DECLINE messages in response to ACK messages that turn out to | Kenneth R Westerback | |
have inadequate or invalid leases. In particular leases for addresses that are already configured on a different interface. After the DECLINE, return to INIT state and start looking for a valid lease. This conforms much closer to the relevant RFC's. Avoids 'hanging' dhclient(8) during boot when the attempt to configure the address fails without dhclient(8) realizing it. Issue found and various fixes tested by mpi@. Feedback from beck@ and reyk@. ok mpi@ | |||
2015-12-12 | add keyboard backlight variable | Joerg Jung | |
tested by Bryan Vyhmeister, krw, tb, and myself ok jcs krw tb | |||
2015-12-12 | In olden times (i + u + e) was considered a clever way to 'or' | Kenneth R Westerback | |
together three boolean values. In today's englightened world we know about '||'. Pointed out by naddy@ | |||
2015-12-12 | Open disk READONLY if none of i, e or u are specified. | Kenneth R Westerback | |
Suggestion, original diff and ok naddy@ | |||
2015-12-11 | there are no boot_ pages for armish or landisk that i can see, | Jason McIntyre | |
so remove their references; while here undo a predefined string (as mandoc_char(7) calls them); | |||
2015-12-11 | Add '-v' flag that forces the display of both GPT's and the MBR. | Kenneth R Westerback | |
Useful for seeing exactly what is currently on the disk. Suggested by a request from kettenis@. Man page & usage ok jmc@ | |||
2015-12-10 | Pledge. | Kenneth R Westerback | |
Diff from Ricardo Mestre. ok deraadt@ | |||
2015-12-10 | Remove NULL-checks before free(). ok tb@ | mmcc | |
2015-12-10 | comment typo | mmcc | |
2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber | |
DES is insecure since brute force attacks are practical due to its short key length. This removes support for DES-CBC encryption in ESP and in IKE main and quick mode from the kernel, isakmpd(8), ipsecctl(8), and iked(8). ok mikeb@ | |||
2015-12-09 | Revert SIOCDIFADDR_IN6 fix. | Martin Pieuchot | |
It's not possible to fix this issue in ifconfig(8) because in_control() and in6_control() have a subtle semantic difference which result in breaking alias for IPv4. in_control() always select the first address on the list of an interface whereas in6_control() doesn't. That's why ifconfig(8) passes an empty "struct in_aliasreq" and that fails in netinet6. Breakage reported by deraadt@ | |||
2015-12-09 | add braces to correct pledge logic | Jonathan Gray | |
ok deraadt@ | |||
2015-12-08 | spaces to tabs | Ted Unangst | |
2015-12-07 | Add imsg "peerid" to debug messages (only within -DDEBUG). | Reyk Floeter | |
2015-12-07 | Sync proc.c, use shorter proc_compose[v]() | Reyk Floeter | |
2015-12-07 | sync with vmd | Reyk Floeter | |
2015-12-07 | Convert to arc4random_uniform. | tb | |
ok krw@ | |||
2015-12-06 | remove trailers option that was already obsolete when this code was imported. | Ted Unangst | |
ok benno krw | |||
2015-12-06 | remove txpower option. only relevant to the now irrelevant wi driver. | Ted Unangst | |
(several other drivers misleadingly claim generic 802.11 txpower, but do not in fact do anything. the knob is not connected to the radio.) ok benno jsg krw reyk | |||
2015-12-06 | Use __progname instead of manually handling argv[0]. | Tobias Stoeckmann | |
ok deraadt, mmcc, tedu | |||
2015-12-06 | Avoid out of boundary access on illegal command line arguments. | Tobias Stoeckmann | |
ok deraadt, mmcc, tedu | |||
2015-12-05 | EAGAIN handling for imsg_read. OK henning@ benno@ | Claudio Jeker | |
2015-12-03 | No need to continuously check the current rdomain of the interface | Kenneth R Westerback | |
using the SIOCGIFRDOMAIN ioctl. If the rdomain is changed an RTM_IFINFO message is generated on the old rdomain indicating the interface is down. This will cause dhclient to exit, just like our manual check did but even faster! Should make pledging easier. Behaviour confirmed by phessler@ | |||
2015-12-03 | Document etherip(4) as another tunnel interface. | Stuart Henderson | |
2015-12-03 | Print the interface index which is part of the route msg header. | Claudio Jeker | |
mpi@ and benno@ agree | |||
2015-12-02 | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ | Christian Weisgerber | |
2015-12-01 | Send solbourne to where the ........... | Theo de Raadt | |
2015-12-01 | Send Aviion to same place as Nova II | Theo de Raadt | |
discussed with jsg | |||
2015-12-01 | Fix inexplicable use of 'disk' instead of 'disk.name' when trying to | Kenneth R Westerback | |
print the disk's name in an error message. | |||
2015-12-01 | Make '-i' set 'reinited' flag so that the initial Xwrite() will zap | Kenneth R Westerback | |
any undesirable GPT hanging around. i.e. same as 'reinit' from the fdisk(8) command line. Noticed now that install media relies on '-i' rather than issuing 'reinit' in a script. | |||
2015-11-29 | use ping6(8)'s engine; next step in unification | Florian Obser | |
OK benno@ | |||
2015-11-29 | Reimplement source address selection. Inspired by the previous | Florian Obser | |
traceroute / traceroute6 merge. Next step in unification. OK benno@ | |||
2015-11-29 | Include RFC number in reference | Tim van der Molen | |
2015-11-29 | Doubles are not reals. Imprecision might lead to trying to | Florian Obser | |
calculate square root of a negative number. Just use 0 in this case. Pointed out by and fix from Nathanael Rensen ( nathanael AT list DOT polymorpheus DOT com ), thanks! OK deraadt@ (Funnily this bug was in ping6 for many years, only discovered once I synced ping to the ping6 implementation recently.) | |||
2015-11-28 | hoist TIOCGWINSZ code upwards, and pledge "stdio disklabel" at the | Theo de Raadt | |
right place. tested by mmcc | |||
2015-11-28 | Oops, left the pledge "tty" active in the previous commited | Theo de Raadt | |
pointed out by Chris Hettrick | |||
2015-11-27 | spaces | Theo de Raadt | |
2015-11-27 | After evaluating patches from Ricardo Mestre, it became obvious that | Sebastian Benoit | |
route needs pledge("stdio rpath dns") in all cases. Looks best to me deraadt@ | |||
2015-11-26 | When prompting for a GPT partition type, use the partition's current type as | Tim van der Molen | |
default; OK krw@ | |||
2015-11-26 | When prompting for an LBA, show the min and max values in the prompt; OK krw@ | Tim van der Molen | |
2015-11-26 | Instead, hoist TIOCGWINSZ up to the top, then "tty" pledge is not needed. | Theo de Raadt | |