summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2014-08-29mount_mfs does not require disklabel to be run;Jason McIntyre
diff From: Navan Carson confirmed/ok mikeb
2014-08-27Nuke net.inet6.icmp6.rediraccept and allow redirects on interfacesFlorian Obser
with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@
2014-08-27Add support for Curve25519 using the public domain code that is foundReyk Floeter
in OpenSSH. The "private use" DH group 1034 is based on the value that was picked by strongswan recently. OK mikeb@ markus@
2014-08-25Sync dh.[ch] from iked. The files are identical, so any change inReyk Floeter
either iked or isakmpd should be synced to the other daemon. The previous changes from iked include: plug two memory leaks, verify EC points and add the Brainpool curves. All tests in regress/sbin/isakmpd/dh passed OKAY. ok markus@ mikeb@
2014-08-25Add support for DH groups 27-30 using the Brainpool curves which haveReyk Floeter
previously been added to LibreSSL's libcrypto. ok markus@ mikeb@
2014-08-25Fix a few fd leaks in isakmpd.Doug Hogan
The latter close is from a sweep of the tree looking for fdopen problems. While reviewing the patch, gerhard@ fixed another leak. ok gerhard@
2014-08-25Delete secret or secret-derived data with explicit_bzero.Doug Hogan
concept ok deraadt@ diff looks ok tedu@
2014-08-24Remove imaginary non-reserved port support from mountd.Doug Hogan
This bug was reported by Julian Hsiao. ok concept deraadt@, miod@ mountd.8 diff is from jmc@. ok doug@ mountd.c diff is from me. ok miod@
2014-08-23Fix double free in ike_auth.cdoug
ok jca@
2014-08-23when you specify queues in a rule, make sure they have been defined.Martin Pelikan
DIOCADDRULE EBUSY turns into an error message that pfctl -n catches. DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported to occur, possibly from hfsc.c: this should be fixed as well. ok henning mikeb sthen
2014-08-22fix memory leak in isakmpddoug
ok gerhard@ (also corrected first version)
2014-08-21deny "once" flags for match rules; ok henningMike Belopuhov
2014-08-20Remove userland bits related to the crypto(4) interface; ok deraadtMike Belopuhov
2014-08-19Entries for broadcast addresses should also be ignored, just like localMartin Pieuchot
entries. ok florian@, mikeb@, henning@
2014-08-18Sync proc.c with httpd. httpd needs SIGUSR1 but iked will ignore itReyk Floeter
now instead of terminating the process. ok mikeb@
2014-08-16repair operation of kern.arandom, which will only allow a buffer ofTheo de Raadt
512 bytes. As a result, it stopped working... ok miod
2014-08-11When parsing 32 bit values, verify that we received 4 bytes.Tobias Stoeckmann
ok krw@
2014-08-10Only need <stdint.h> and not all of <inttypes.h> herePhilip Guenther
2014-08-10Delete extern declarations for variables that don't exist (anymore?)Philip Guenther
2014-08-10msts(4) appears to support TIOCSTSTAMPPhilip Guenther
From Maurice Janssen (maurice (at) z74.net)
2014-08-05Fix an example, nat-to requires to specify the "out" direction in pf rules.Reyk Floeter
From "Vigdis" via misc@ can go in deraadt@
2014-07-31unbreak the build - e2fs_isave now needs the superblock.Martin Pelikan
2014-07-28Fix memory exhaustion occurring on DHCP options with 0 length.Tobias Stoeckmann
halex@ and krw@ pointed out that a NULL check before free can go, too. ok deraadt@, halex@, krw@
2014-07-28merge dhcpd's packet.c revision 1.7:Tobias Stoeckmann
Fix very hard to reach DoS attack vector, which would involve more than 8 billion network packets. Mixture of many many malformed and proper packets could result in a division by zero. ok krw@
2014-07-24Unbreak ''route flush'': the kernel now adds local (RTF_LOCAL) routesJeremie Courreges-Anglas
for addresses configured on the system, and prevents userland from deleting them. Just skip those routes when flushing. Problem noticed by mlarkin@, ok henning@ mpi@ claudio@ sthen@ deraadt@
2014-07-22FSTAB -> _PATH_FSTAB, the latter is deprecated.Jeremie Courreges-Anglas
From natano@bitrig, ok deraadt@
2014-07-21Switch from <sys/endian.h> or <machine/endian.h> to the new,Philip Guenther
being-standardized <endian.h> ok deraadt@ millert@ beck@
2014-07-20Make sure the correct errno is reported by warn* or err* and notPhilip Guenther
the errno of an intervening cleanup operation like close/unlink/etc. Diff from Doug Hogan (doug (at) acyclic.org)
2014-07-20Mark fatal() as printf-like.Philip Guenther
Don't put a format string that's only used once in a variable.
2014-07-17files-to-dump can be a duid;Jason McIntyre
From: Maximilian Fillinger
2014-07-17Convert a couple calloc()s that were originally malloc()s to reallocarray()s.Philip Guenther
The child after fork() should use _exit() instead of exit(). Fix comment typo. ok millert@
2014-07-16zap trailing newlines; "go for it" deraadtOkan Demirmen
2014-07-16Yes /etc/disklabels/ is a good practice for placing labels of disksTheo de Raadt
in case of catastropy. But it is so poorly documented that any admin is more likely to store the labels elsewhere, so let's stop bothering with providing the directory. Discussed a bit, no objections.
2014-07-15add -N to usage()/SYNOPSIS and tweak previous;Jason McIntyre
rather than adding "net" to the -o list, claudio points out that -o net and -o noauto are really noops, so remove "noauto"; help/ok claudio
2014-07-14Make sure to correctly exit the loop in priv_flush_routes() in case ofMiod Vallat
allocation failure; ok krw@
2014-07-14powerdown=YES has been removed.Martin Pelikan
ok deraadt
2014-07-14remove the never installed getmntopts.3 page, as well as theJason McIntyre
corresponding comment in Makefile; ok claudio deraadt
2014-07-13-N for SYNOPSIS and usage(), and some small changes to previous;Jason McIntyre
2014-07-13kill fs2hXX/h2fsXX macros with letohXX/htoleXXMartin Pelikan
The reason being that ext2 structures are little-endian but JBD2 journal is big-endian. Don't confuse readers by talking about "file system endian". While here, nuke the copy of bswap.c and link it against the kernel's like fsck_ext2fs has done, for better maintainability. ok guenther
2014-07-13kill fs2hXX/h2fsXX macros with letohXX/htoleXXMartin Pelikan
The reason being that ext2 structures are little-endian but JBD2 journal is big-endian. Don't confuse readers by talking about "file system endian". ok guenther
2014-07-13When renewing a lease, update client->active or you end up in aKenneth R Westerback
tight renew loop. Caused by recent reshuffling of code in bind_lease().
2014-07-13new superblock header needs fixesMartin Pelikan
2014-07-13new superblock header needs fixes for BE architecturesMartin Pelikan
2014-07-13Intorduce the same -N flag that mount(8) just got to do the sameClaudio Jeker
selection of file systems with option 'net'. Again this will be used by the rc script to fsck iscsi file systems before mounting them. Again by default file systems with the net option are ignored when scanning fstab. "Get it in" deraadt@
2014-07-13Introduce a -N option to mount and a 'net' mount option.Claudio Jeker
File systems marked with net will not be mounted by default. mount -a -N will mount all those file systems instead. This will be used to mark file systems needing network to work -- in other words which depend on iscsid. "Get it in" deraadt@
2014-07-12Log a warning whenever RTM_DESYNC is seen. Thus giving entrailKenneth R Westerback
investigators some clue why dhclient may have gotten confused when some RTM_ messages vanish. sthen@ thinks this is a good start.
2014-07-12ewps, that giant table has -inet6 twice, for SMALL and !SMALLHenning Brauer
no breakage involved, but wasn't correct in the SMALL case either
2014-07-12provide a missing rfc number;Jason McIntyre
From: Josh Grosse i've actually just whacked the titles to keep it brief and avoid the mess of the punctuation added by these macros.
2014-07-12Sync msgbuf_write() changes from relayd.Reyk Floeter
Please note that proc.c should be kept identical in relayd, iked and snmpd (currently without the includes). ok benno@
2014-07-12tweak previous;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 02:25:51 +0000