summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2016-06-10Add the "llprio" field to struct ifnet, and the corresponding keywordVincent Gross
to ifconfig. "llprio" allows one to set the priority of packets that do not go through pf(4), as the case is for arp(4) or bpf(4). ok sthen@ mikeb@
2016-06-07Document the net.inet.tcp.synuselimit sysctl; OK bluhm@ jmc@Tim van der Molen
2016-06-07per trending style, add continue to emtpy loop bodies.Ted Unangst
ok mglocker
2016-06-06restore my ability to do full bulks.Marc Espie
okay deraadt@
2016-06-03update default value for rebootTed Unangst
2016-06-03The networks I use are sufficiently fast that a 10 second "reboot" timeoutTed Unangst
is not necessary, and in fact quite annoying when I swtich networks and want to get back to the init state quickly. Default instead to 1 second. The very few users who encounter problems may edit dhclient.conf. ok benno krw does not object
2016-06-02Use the last 32-bits of the IPv6 address to dynamically assignPatrick Wildt
addresses from the pool, instead of the fourth byte, which usually represents network bits. ok markus@ mikeb@
2016-06-01Fix automatic disk allocation based on a template which I broke in theTheo Buehler
previous commit. readlabel() calls editor_allocspace() which will use the default label unless a template was provided beforehand. Thus, call parse_autolabel() before redlabel(). Problem found and fix provided by Mark Patruck, thanks! Fix asap, deraadt@
2016-06-01Implement a second address pool specifically for IPv6, so thatPatrick Wildt
clients can be given an IPv4 and IPv6 address at the same time, thus enabling dual stack usage. ok markus@ mikeb@
2016-06-01Kill sysctl net.inet6.ip6.rr_pruneJeremie Courreges-Anglas
We don't support Router Renumbering and there are no plans to change that. ok mpi@
2016-06-01ikev2_cp_fixaddr() is called to replace unspecified (e.g. 0.0.0.0)Patrick Wildt
addresses by specified (e.g. 192.0.2.1) ones. The function should return if the address is already set. The check was wrong for the IPv6 case, as it returned if it's not set. This caused the address to never be fixed. ok markus@ mikeb@
2016-05-31permit wxallowed on mfsTheo de Raadt
discussed with naddy a bit, ok millert
2016-05-29Refactor and clean up the logic before pledge a bit and fix pledgeTheo Buehler
fallout related to pledge disklabel (e.g. 'disklabel /dev/tty'). - Allow 'disklabel sdN' again for non-root users. - Make sure at least one DIO* ioctl comes before pledge "disklabel" - Fix the op == WRITE logic that broke 'make release' in -r2.217 Based on -r2.17 from beck. ok beck
2016-05-29wxabort bits; ok deraadtJason McIntyre
2016-05-29sort mount options, and shorten slightly the wxabort text;Jason McIntyre
2016-05-28Don't pledge before opendev() and ioctl DIOCGDINFO were called.Theo Buehler
Avoids a pledge crash with 'ncheck_ffs /dev/tty'. deraadt agrees
2016-05-28Don't pledge before opendev. Just leave pledge "stdio" rightTheo Buehler
afterwards. deraadt agrees
2016-05-28back out previous; -wAT template vnd0 failsTheo de Raadt
2016-05-28Remove all the pledge "disklabel" before ioctl DIOCGPDINFO isTheo Buehler
called in order to avoid a pledge crash with 'pdisk /dev/tty'. Only the pledge "stdio" right after the ioctl remains. ok krw
2016-05-28Give growfs a chance to error out with ENOTTY before pledging disklabel.Theo Buehler
Fixes pledge crash due to ioctl DIOCGDINFO with an inappropriate file. looks good to deraadt
2016-05-28Another misplaced pledge disklabel that needs to be removed because ofTheo Buehler
a DIOCGPDINFO that could be applied to a non-disk and thus cause a crash. After that ioctl, the program continues with pledge "stdio". ok beck semarie
2016-05-28Fix a pledge abort that can be triggered by using DIOCGDINFO on a fileTheo Buehler
that is not a disk device (e.g. fsirand -p /altroot) by removing the first of the two pledges. The program then runs with pledge "stdio" right after the ioctl. ok deraadt
2016-05-28host readlabel() above the pledge so we can avoid pledge violationsBob Beck
when the provided device is not a disk ok tb@
2016-05-28fix crash if filename not providedBob Beck
2016-05-28Hoist the opendev() call before the pledge because it can ioctl() whenBob Beck
the provided path is bogus or not a device. ok deraadt
2016-05-27W^X violations are no longer permitted by default. A kernel log messageTheo de Raadt
is generated, and mprotect/mmap return ENOTSUP. If the sysctl(8) flag kern.wxabort is set then a SIGABRT occurs instead, for gdb use or coredump creation. W^X violating programs can be permitted on a ffs/nfs filesystem-basis, using the "wxallowed" mount option. One day far in the future upstream software developers will understand that W^X violations are a tremendously risky practice and that style of programming will be banished outright. Until then, we recommend most users need to use the wxallowed option on their /usr/local filesystem. At least your other filesystems don't permit such programs. ok jca kettenis mlarkin natano
2016-05-25remove knowledge of MNT_EXKERBTheo de Raadt
2016-05-23remove the sysctl kern.random counters, since none of the remainingTheo de Raadt
ones are capable of giving valuable works vs does-not-work evidence. ok tedu
2016-05-23VOP_REALLOCBLKS() and related code is unused since the removal ofMartin Natano
cluster_write(). ok beck zhuk
2016-05-21no more -x;Jason McIntyre
2016-05-21Remove the -x flag from mount_msdos and always assume the execute bitMartin Natano
for readable directories, while making it subject to the mask option (-m in mount_msdos), so it is still possible to mount with non-executable directories, but with semantics that are easier to comprehend. This makes directory listings with default mount options work again. ok deraadt@
2016-05-19Remove sysctl net.inet6.ip6.v6onlyJeremie Courreges-Anglas
This sysctl is a no-op, read-only since it was introduced. There are no plans to support IPv4-mapped addresses on OpenBSD, thus this sysctl is meaningless. Noticed by djm@, ok claudio@ mpi@ sthen@ henning@
2016-05-13overzealous use of errx() hides useful information about errors.Ted Unangst
ok benno millert
2016-05-12more hppa64 cleaningTheo de Raadt
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis
2016-05-10Do not close the stdio file desciptors in init(8), but dup2(2) themAlexander Bluhm
from /dev/null. The code is taken from daemon(3). Also move this operation to the beginning. OK millert@ deraadt@
2016-05-08Do not print MPSAFE when the corresponding bit is set on the interfaceMartin Pieuchot
flags. This read-only flag is a hint for the network stack and does not matter for end user, in fact exposing it just creates confusion. ok kettenis@, deraadt@
2016-05-08Use /dev/bpf0 instead of /dev/bpf (without loop though), as suggested byMartin Natano
sthen@. to make remote upgrades without media less painful. ok tb@
2016-05-04Kill #ifdef INET6 occurrences in userland.Jeremie Courreges-Anglas
Prompted by and ok millert@ (tcpdump and libpcap left untouched, the #ifdef force is too strong with those)
2016-05-03Remove INET6 #ifdefsJeremie Courreges-Anglas
ifconfig.c doesn't build without -DINET6, and those #ifdefs clutter the code. ok bluhm@ henning@
2016-05-03Move to /dev/bpf; ok tb jmcMartin Natano
2016-04-28If the attempt to broadcast a DCHPDISCOVER packet returns EAFNOSUPPORT,Kenneth R Westerback
don't bother to keep trying to get a lease. It ain't gonna happen. Just print and error message and exit.
2016-04-28Show 11n HT rate in ifconfig scan output. Needs a new kernel.Stefan Sperling
ok mpi@
2016-04-28Fix fsck'ing. ext2fs_dinode grew extra bits to support ext4Kenneth R Westerback
and sizeof(struct ext2fs_dinode) had to be replaced with EXT2_DINODE_SIZE() and such. ok beck@
2016-04-27Tweak command line processing vs pledge logic to make things nicer. NoKenneth R Westerback
functional change. Prodded (a while ago) and ok (recently) deraadt@
2016-04-18Print interface index after priority.Martin Pieuchot
Suggestion from claudio@, ok benno@, sthen@
2016-04-06move the parent and vnetid stuff around so it builds on ramdisks too.David Gwynne
ramdisk breakage found by jsg@ ok jsg@
2016-04-06document autoconfprivacy being the defaultJonathan Gray
ok stsp@ bluhm@
2016-04-06move getting the vnetid out next to getting the ifparentDavid Gwynne
its now separate to getting the tunnel address. ok mpi@
2016-04-04Remove caveat about only supporting 512-byte sectors.Kenneth R Westerback
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-12 16:53:53 +0000