summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2016-01-03Remove obsolete and undocumented "-carpdev" option, from Fabian Raetz.Martin Pieuchot
ok benno@, claudio@
2016-01-01rmeove unused noprint variableJoerg Jung
from Fabian Raetz via tech@ ok krw
2015-12-30Remove use of sysexits.h. OK guenther@Todd C. Miller
2015-12-30Revert r1.59's over-enthusiatic MBR zero'ing in MBR_init(). It wasKenneth R Westerback
killing the macppc MSDOS partition created by '-i'. Should fix the macppc install problems reported by Brian Conway on bugs@. Date of breakage found by rpe@.
2015-12-27Use 'standard' gpt_chk_mbr() to check for protective MBR.Kenneth R Westerback
2015-12-24tweak auto-allocation description, with and ok jmc@Otto Moerbeek
2015-12-23Remove unnecessary SIGSYS/ENOSYS handling for getfh(2).Tim van der Molen
Encouragement from deraadt@
2015-12-23Add privilege separation and pledge().Tim van der Molen
A privileged (that is, unpledged) child is forked that makes the "unpledgable" getfh(2) and mount(2) calls. It also takes care of writing /var/db/mountdtab so that the parent does not have to pledge "cpath wpath". This, then, allows the parent to pledge "stdio rpath inet dns". Suggestions and OK deraadt@
2015-12-23Use NULL rather than 0 for pointers. No binary change.mmcc
2015-12-22assign pointers to NULL rather than 0, remove a needless castmmcc
2015-12-19Don't exit if a route can't be added. Just log particulars andKenneth R Westerback
let someone else figure it out. ok mpi@
2015-12-19Delete superfluous "continue;" just before end of loop.Kenneth R Westerback
2015-12-19Delete superfluous "close(s);return" just before "close(s);<functionKenneth R Westerback
exit>".
2015-12-18Check ioctl() result with == -1, not < 0. Break long line.Kenneth R Westerback
2015-12-18pledge "stdio rpath wpath cpath dpath fattr", as long as the -m optionTheo de Raadt
wasn't used
2015-12-15Include RFC number in reference. While here, improve formatting of anotherTim van der Molen
reference.
2015-12-15Document /var/db/mountdtabTim van der Molen
2015-12-15When (re)reading /etc/exports, handle the case where the mount point of anTim van der Molen
export is not also the mount point of a local filesystem. In this case, the local filesystem would not be removed from the "unexport list", causing the export to be "unexported" again. This fix then also allows us to actually delete an export that has been removed from /etc/exports, by passing the MNT_DELEXPORT export flag to mount(2). Makes sense to millert@.
2015-12-12Send DECLINE messages in response to ACK messages that turn out toKenneth R Westerback
have inadequate or invalid leases. In particular leases for addresses that are already configured on a different interface. After the DECLINE, return to INIT state and start looking for a valid lease. This conforms much closer to the relevant RFC's. Avoids 'hanging' dhclient(8) during boot when the attempt to configure the address fails without dhclient(8) realizing it. Issue found and various fixes tested by mpi@. Feedback from beck@ and reyk@. ok mpi@
2015-12-12add keyboard backlight variableJoerg Jung
tested by Bryan Vyhmeister, krw, tb, and myself ok jcs krw tb
2015-12-12In olden times (i + u + e) was considered a clever way to 'or'Kenneth R Westerback
together three boolean values. In today's englightened world we know about '||'. Pointed out by naddy@
2015-12-12Open disk READONLY if none of i, e or u are specified.Kenneth R Westerback
Suggestion, original diff and ok naddy@
2015-12-11there are no boot_ pages for armish or landisk that i can see,Jason McIntyre
so remove their references; while here undo a predefined string (as mandoc_char(7) calls them);
2015-12-11Add '-v' flag that forces the display of both GPT's and the MBR.Kenneth R Westerback
Useful for seeing exactly what is currently on the disk. Suggested by a request from kettenis@. Man page & usage ok jmc@
2015-12-10Pledge.Kenneth R Westerback
Diff from Ricardo Mestre. ok deraadt@
2015-12-10Remove NULL-checks before free(). ok tb@mmcc
2015-12-10comment typommcc
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
DES is insecure since brute force attacks are practical due to its short key length. This removes support for DES-CBC encryption in ESP and in IKE main and quick mode from the kernel, isakmpd(8), ipsecctl(8), and iked(8). ok mikeb@
2015-12-09Revert SIOCDIFADDR_IN6 fix.Martin Pieuchot
It's not possible to fix this issue in ifconfig(8) because in_control() and in6_control() have a subtle semantic difference which result in breaking alias for IPv4. in_control() always select the first address on the list of an interface whereas in6_control() doesn't. That's why ifconfig(8) passes an empty "struct in_aliasreq" and that fails in netinet6. Breakage reported by deraadt@
2015-12-09add braces to correct pledge logicJonathan Gray
ok deraadt@
2015-12-08spaces to tabsTed Unangst
2015-12-07Add imsg "peerid" to debug messages (only within -DDEBUG).Reyk Floeter
2015-12-07Sync proc.c, use shorter proc_compose[v]()Reyk Floeter
2015-12-07sync with vmdReyk Floeter
2015-12-07Convert to arc4random_uniform.tb
ok krw@
2015-12-06remove trailers option that was already obsolete when this code was imported.Ted Unangst
ok benno krw
2015-12-06remove txpower option. only relevant to the now irrelevant wi driver.Ted Unangst
(several other drivers misleadingly claim generic 802.11 txpower, but do not in fact do anything. the knob is not connected to the radio.) ok benno jsg krw reyk
2015-12-06Use __progname instead of manually handling argv[0].Tobias Stoeckmann
ok deraadt, mmcc, tedu
2015-12-06Avoid out of boundary access on illegal command line arguments.Tobias Stoeckmann
ok deraadt, mmcc, tedu
2015-12-05EAGAIN handling for imsg_read. OK henning@ benno@Claudio Jeker
2015-12-03No need to continuously check the current rdomain of the interfaceKenneth R Westerback
using the SIOCGIFRDOMAIN ioctl. If the rdomain is changed an RTM_IFINFO message is generated on the old rdomain indicating the interface is down. This will cause dhclient to exit, just like our manual check did but even faster! Should make pledging easier. Behaviour confirmed by phessler@
2015-12-03Document etherip(4) as another tunnel interface.Stuart Henderson
2015-12-03Print the interface index which is part of the route msg header.Claudio Jeker
mpi@ and benno@ agree
2015-12-02remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@Christian Weisgerber
2015-12-01Send solbourne to where the ...........Theo de Raadt
2015-12-01Send Aviion to same place as Nova IITheo de Raadt
discussed with jsg
2015-12-01Fix inexplicable use of 'disk' instead of 'disk.name' when trying toKenneth R Westerback
print the disk's name in an error message.
2015-12-01Make '-i' set 'reinited' flag so that the initial Xwrite() will zapKenneth R Westerback
any undesirable GPT hanging around. i.e. same as 'reinit' from the fdisk(8) command line. Noticed now that install media relies on '-i' rather than issuing 'reinit' in a script.
2015-11-29use ping6(8)'s engine; next step in unificationFlorian Obser
OK benno@
2015-11-29Reimplement source address selection. Inspired by the previousFlorian Obser
traceroute / traceroute6 merge. Next step in unification. OK benno@