Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-07-09 | ansi | Theo de Raadt | |
2004-07-08 | free() and close() in error path. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-07-08 | typo, and line adjustment; | Jason McIntyre | |
2004-07-07 | document -a/-K and "Acquire-Only"/"Use-Keynote". | Hans-Joerg Hoexer | |
ok markus@ henning@ ho@ english polish and mdoc help and ok jmc@ | |||
2004-07-07 | make the shell script execution window 3 seconds. i really need to find | Theo de Raadt | |
a better solution... | |||
2004-07-07 | plug memleak when receiving an INVALID_HASH_INFORMATION notify. | Hans-Joerg Hoexer | |
Found by Patrick Latifi, thanks! ok ho@ | |||
2004-07-07 | compile cleanly with -Wsign-compare; while around, kill a space | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-07-06 | delint: offset arg to mmap is off_t and remove dead code | Otto Moerbeek | |
ok millert@ | |||
2004-07-05 | when running as supplier and asked about a defualt route but we have no, | Henning Brauer | |
do not try to fake one when the query comes from a non-local network, i. e. ifp is NULL, which caused a segfault. PR3841, William J Hulley <jonny@abduction.org> | |||
2004-07-05 | userquota and groupquota _optionally_ have a value. | Otto Moerbeek | |
ok pedro@ millert@ | |||
2004-07-05 | %lu and cast to unsigned long to print a size_t; ok ho | Peter Valchev | |
2004-07-05 | remove useless (always false) check; ok millert henning | Peter Valchev | |
2004-07-05 | fix warning: extra tokens at end of #undef; ok henning | Peter Valchev | |
2004-07-04 | properly bitch when we cannot open the config file, basically resembling | Henning Brauer | |
a diff from Damir Horvat <damir@x-si.org> which didn't apply cleanly | |||
2004-07-03 | zap INET_ONLY, compress usage(); jared | Theo de Raadt | |
2004-07-03 | ansi; jared | Theo de Raadt | |
2004-07-02 | Take TMPDIR into account when creating a temp mountpoint for populating. | Otto Moerbeek | |
ok avsm@ millert@; man page ok jmc@ | |||
2004-07-02 | Use "time_second" instead of "time" now that time handling in the kernel | Thorsten Lockert | |
has changed. ok art@ millert@ marc@ | |||
2004-06-30 | Compile cleanly with gcc3.3.2. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-29 | remove cedric's bogus interface name verification code. | Henning Brauer | |
this was meant to verify that ne3 is a valid interface that could show up, but bogus0 is not. while this might sound like a good idea it is completely broken and causes a shitload of problems. just allow for anything as interface name, the kernel abstracts that nice enough. if no interface by that name exists (or shows up) the rule never matches; that matches pf semantics used everywhere else. this also fixes the "pfctl always has to run as root" issue that cedric did not fix over the last 6 months despite being bugged to regularily. help & ok mcbride@ | |||
2004-06-29 | convert a few memcpy()s to strlcpy() so we don't copy uninitialized junk into | Mike Frantzen | |
a interface name's slack space past the \0. will be needed for the optimizer. ok henning@ | |||
2004-06-28 | - repair examples which i damaged in previous commit | Jason McIntyre | |
- tidy up DIAGNOSTICS, and use -diag - wording from jared yanovich; | |||
2004-06-26 | For all the mfs lovers: | Otto Moerbeek | |
- Make the root of an mfs file system inherit the permission and owner/group of the mountpoint. Work by david@. - Add the ability to populate an mfs file system with the contents of a directory or a file system immediately after creation, controlled by the new -P mount option. Discussed with and tested by many, ok djm@ david@ | |||
2004-06-26 | cleanup ioctl for ifgroups; ok pb@ | Markus Friedl | |
2004-06-26 | grammar, formatting, consistency, spelling, etc. from jared yanovich; | Jason McIntyre | |
2004-06-26 | new sentence, new line; | Jason McIntyre | |
2004-06-26 | new sentence, new line; | Jason McIntyre | |
2004-06-26 | grammar; | Jason McIntyre | |
2004-06-26 | add back PF_INOUT, fixes reassemble tcp | David Krause | |
ok canacar@ mcbride@ | |||
2004-06-26 | Add option that allows to change timeslot range forn network card. | Alex Feldman | |
ok mcbride@ | |||
2004-06-26 | Narrow down privsep interface. Move pf_key_v2_open() to monitor. | Hans-Joerg Hoexer | |
Work in progress. ok ho@ | |||
2004-06-26 | ignore IFGROUP errs in ifconfig -a for "too old" kernels right now | Philipp Buehler | |
2004-06-26 | Remove -DHAVE_GETNAMEINFO frome makefiles. | Ryan Thomas McBride | |
Pointed out by ho@ | |||
2004-06-26 | Remove scsi(3) from SEE ALSO. ok deraadt@ | Robert Nagy | |
2004-06-26 | more netiso leftovers | Philipp Buehler | |
by pointer from yared janovich henning@ ok | |||
2004-06-26 | groups in usage() - from jared yanovich | Philipp Buehler | |
2004-06-25 | Keynote policy checking can now be disabled by "-K" switch and config tag | Hans-Joerg Hoexer | |
"Use-Keynote". Default is to use keynote. ok henning@ ho@ | |||
2004-06-25 | Remove HAVE_GETNAMEINFO alternate code. Compiled binary is unchanged. | Ryan Thomas McBride | |
ok msf@ hshoexer@ itojun@ ho@ | |||
2004-06-25 | interface groups | Philipp Buehler | |
mcbride@ ok | |||
2004-06-25 | introduce "interface groups" | Philipp Buehler | |
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok. | |||
2004-06-25 | repair tree nanobreak by the nanobum | Theo de Raadt | |
2004-06-25 | remove two ununsed includes | Henning Brauer | |
2004-06-25 | remove netiso and netns code | Henning Brauer | |
2004-06-25 | Narrow down privsep interface. Remove ui_init to monitor. So we can get rid of | Hans-Joerg Hoexer | |
monitor_mkfifo. Work in progress. ok ho@ | |||
2004-06-24 | iso is gone | Henning Brauer | |
2004-06-24 | remove netiso stuff | Henning Brauer | |
2004-06-24 | Remove some unused code. | Hans-Joerg Hoexer | |
Fix handling of sigchild. Now it's possible to sigstop/sigcont isakmpd correclty. ok ho@ | |||
2004-06-24 | Also handle keys from x509-certificates embedded in keynote credentials. | Hans-Joerg Hoexer | |
with msf@ ok ho@ | |||
2004-06-23 | Print corrent prefix. Found and tested by alex at vbone.net. | Hakan Olsson | |
2004-06-23 | make -w optional; ok miod@ | David Krause | |