summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2014-10-02dhclient: add support for RFC 3442 local subnet routesMatthew Dempsky
If the classless-static-routes option specifies the router IP address as 0.0.0.0, then that indicates the route is a "local subnet route" that should be directly routable via the interface. This reuses the "route add -net $dest -netmask $mask -cloning -iface $addr" trick suggested by claudio@ for r1.272. Restores interoperability with Google Compute Engine after recent GCE DHCP server changes. ok krw, mpi
2014-10-02no more sl(4);Jason McIntyre
2014-10-01Remove some sl(4) references.Martin Pieuchot
2014-10-01tedu slattach, part of the slip show.Martin Pieuchot
2014-10-01Unhook slattach(8) it has been deprecated for a long time and will hitMartin Pieuchot
the Attic soon.
2014-09-27Fix mmap() calls that check for a result other than MAP_FAILED.Doug Hogan
ok tedu@
2014-09-20provide a hint for enabling jumbo frames, since we removed it from theJason McIntyre
driver pages;
2014-09-15Remove non-standard <sys/dkstat.h> header. It has not contained anythingMiod Vallat
related to disk stastics for almost 17 years, and the remaining userland-visible defines duplicate those found in <sys/sched.h>. Move the remaining _KERNEL defines to <sys/tty.h> where they belong, and update all users to cope with this. ok kettenis@
2014-09-13Replace all queue *_END macro calls except CIRCLEQ_END with NULL.Doug Hogan
CIRCLEQ_* is deprecated and not called in the tree. The other queue types have *_END macros which were added for symmetry with CIRCLEQ_END. They are defined as NULL. There's no reason to keep the other *_END macro calls. ok millert@
2014-09-08Additional cleanup for procfs removalDoug Hogan
ok guenther@
2014-09-08Delete procfs; it's always had races and is now unused: no one noticed forPhilip Guenther
months that I broke it before the 5.5 release. confirmed as not being required by ports by sthen@, ajacoutot@, dcoppa@
2014-09-08obvious cases of missing .An;Ingo Schwarze
found with the new mandoc(1) MANDOCERR_AN_MISSING warning; no text changes
2014-09-07Reuse xtrfile() to avoid duplication.Philip Guenther
Casting from long to int for a size_t argument is dumb. Calling warnx() right before err() is silly. ok millert@
2014-09-06inodesc.id_entryno holds a file size, so upgrade it from int to u_int64_t;Philip Guenther
this fixes handling of very large files on FFS2. Correct a copy-n-pasto that rendered useless the check for allocated fragmented that are marked free in the bitmap. allocdir() returns an inode number, so return an ino_t. sizeof()*N should be printed with %zu, while direct and indirect block numbers should be cast to (long long) use %lld inodesc.id_entryno fix based on a diff from David Vasek <vasek@fido.cz> ok krw@ otto@
2014-09-03Mark msg() and panic() as printf-like and fix the format error it turns upPhilip Guenther
ok krw@
2014-09-03Kill off compat for systems that don't define NAME_MAX or that lack stuffPhilip Guenther
like, oh, strchr() and prototypes for read() and write(). Mark quit() as both __dead and printf-like, and dumpabort() as __dead. ok krw@
2014-08-29mount_mfs does not require disklabel to be run;Jason McIntyre
diff From: Navan Carson confirmed/ok mikeb
2014-08-27Nuke net.inet6.icmp6.rediraccept and allow redirects on interfacesFlorian Obser
with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@
2014-08-27Add support for Curve25519 using the public domain code that is foundReyk Floeter
in OpenSSH. The "private use" DH group 1034 is based on the value that was picked by strongswan recently. OK mikeb@ markus@
2014-08-25Sync dh.[ch] from iked. The files are identical, so any change inReyk Floeter
either iked or isakmpd should be synced to the other daemon. The previous changes from iked include: plug two memory leaks, verify EC points and add the Brainpool curves. All tests in regress/sbin/isakmpd/dh passed OKAY. ok markus@ mikeb@
2014-08-25Add support for DH groups 27-30 using the Brainpool curves which haveReyk Floeter
previously been added to LibreSSL's libcrypto. ok markus@ mikeb@
2014-08-25Fix a few fd leaks in isakmpd.Doug Hogan
The latter close is from a sweep of the tree looking for fdopen problems. While reviewing the patch, gerhard@ fixed another leak. ok gerhard@
2014-08-25Delete secret or secret-derived data with explicit_bzero.Doug Hogan
concept ok deraadt@ diff looks ok tedu@
2014-08-24Remove imaginary non-reserved port support from mountd.Doug Hogan
This bug was reported by Julian Hsiao. ok concept deraadt@, miod@ mountd.8 diff is from jmc@. ok doug@ mountd.c diff is from me. ok miod@
2014-08-23Fix double free in ike_auth.cdoug
ok jca@
2014-08-23when you specify queues in a rule, make sure they have been defined.Martin Pelikan
DIOCADDRULE EBUSY turns into an error message that pfctl -n catches. DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported to occur, possibly from hfsc.c: this should be fixed as well. ok henning mikeb sthen
2014-08-22fix memory leak in isakmpddoug
ok gerhard@ (also corrected first version)
2014-08-21deny "once" flags for match rules; ok henningMike Belopuhov
2014-08-20Remove userland bits related to the crypto(4) interface; ok deraadtMike Belopuhov
2014-08-19Entries for broadcast addresses should also be ignored, just like localMartin Pieuchot
entries. ok florian@, mikeb@, henning@
2014-08-18Sync proc.c with httpd. httpd needs SIGUSR1 but iked will ignore itReyk Floeter
now instead of terminating the process. ok mikeb@
2014-08-16repair operation of kern.arandom, which will only allow a buffer ofTheo de Raadt
512 bytes. As a result, it stopped working... ok miod
2014-08-11When parsing 32 bit values, verify that we received 4 bytes.Tobias Stoeckmann
ok krw@
2014-08-10Only need <stdint.h> and not all of <inttypes.h> herePhilip Guenther
2014-08-10Delete extern declarations for variables that don't exist (anymore?)Philip Guenther
2014-08-10msts(4) appears to support TIOCSTSTAMPPhilip Guenther
From Maurice Janssen (maurice (at) z74.net)
2014-08-05Fix an example, nat-to requires to specify the "out" direction in pf rules.Reyk Floeter
From "Vigdis" via misc@ can go in deraadt@
2014-07-31unbreak the build - e2fs_isave now needs the superblock.Martin Pelikan
2014-07-28Fix memory exhaustion occurring on DHCP options with 0 length.Tobias Stoeckmann
halex@ and krw@ pointed out that a NULL check before free can go, too. ok deraadt@, halex@, krw@
2014-07-28merge dhcpd's packet.c revision 1.7:Tobias Stoeckmann
Fix very hard to reach DoS attack vector, which would involve more than 8 billion network packets. Mixture of many many malformed and proper packets could result in a division by zero. ok krw@
2014-07-24Unbreak ''route flush'': the kernel now adds local (RTF_LOCAL) routesJeremie Courreges-Anglas
for addresses configured on the system, and prevents userland from deleting them. Just skip those routes when flushing. Problem noticed by mlarkin@, ok henning@ mpi@ claudio@ sthen@ deraadt@
2014-07-22FSTAB -> _PATH_FSTAB, the latter is deprecated.Jeremie Courreges-Anglas
From natano@bitrig, ok deraadt@
2014-07-21Switch from <sys/endian.h> or <machine/endian.h> to the new,Philip Guenther
being-standardized <endian.h> ok deraadt@ millert@ beck@
2014-07-20Make sure the correct errno is reported by warn* or err* and notPhilip Guenther
the errno of an intervening cleanup operation like close/unlink/etc. Diff from Doug Hogan (doug (at) acyclic.org)
2014-07-20Mark fatal() as printf-like.Philip Guenther
Don't put a format string that's only used once in a variable.
2014-07-17files-to-dump can be a duid;Jason McIntyre
From: Maximilian Fillinger
2014-07-17Convert a couple calloc()s that were originally malloc()s to reallocarray()s.Philip Guenther
The child after fork() should use _exit() instead of exit(). Fix comment typo. ok millert@
2014-07-16zap trailing newlines; "go for it" deraadtOkan Demirmen
2014-07-16Yes /etc/disklabels/ is a good practice for placing labels of disksTheo de Raadt
in case of catastropy. But it is so poorly documented that any admin is more likely to store the labels elsewhere, so let's stop bothering with providing the directory. Discussed a bit, no objections.
2014-07-15add -N to usage()/SYNOPSIS and tweak previous;Jason McIntyre
rather than adding "net" to the -o list, claudio points out that -o net and -o noauto are really noops, so remove "noauto"; help/ok claudio
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-22 12:18:24 +0000