summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-07-09ansiTheo de Raadt
2004-07-08free() and close() in error path.Hans-Joerg Hoexer
ok ho@
2004-07-08typo, and line adjustment;Jason McIntyre
2004-07-07document -a/-K and "Acquire-Only"/"Use-Keynote".Hans-Joerg Hoexer
ok markus@ henning@ ho@ english polish and mdoc help and ok jmc@
2004-07-07make the shell script execution window 3 seconds. i really need to findTheo de Raadt
a better solution...
2004-07-07plug memleak when receiving an INVALID_HASH_INFORMATION notify.Hans-Joerg Hoexer
Found by Patrick Latifi, thanks! ok ho@
2004-07-07compile cleanly with -Wsign-compare; while around, kill a spaceHans-Joerg Hoexer
ok ho@
2004-07-06delint: offset arg to mmap is off_t and remove dead codeOtto Moerbeek
ok millert@
2004-07-05when running as supplier and asked about a defualt route but we have no,Henning Brauer
do not try to fake one when the query comes from a non-local network, i. e. ifp is NULL, which caused a segfault. PR3841, William J Hulley <jonny@abduction.org>
2004-07-05userquota and groupquota _optionally_ have a value.Otto Moerbeek
ok pedro@ millert@
2004-07-05%lu and cast to unsigned long to print a size_t; ok hoPeter Valchev
2004-07-05remove useless (always false) check; ok millert henningPeter Valchev
2004-07-05fix warning: extra tokens at end of #undef; ok henningPeter Valchev
2004-07-04properly bitch when we cannot open the config file, basically resemblingHenning Brauer
a diff from Damir Horvat <damir@x-si.org> which didn't apply cleanly
2004-07-03zap INET_ONLY, compress usage(); jaredTheo de Raadt
2004-07-03ansi; jaredTheo de Raadt
2004-07-02Take TMPDIR into account when creating a temp mountpoint for populating.Otto Moerbeek
ok avsm@ millert@; man page ok jmc@
2004-07-02Use "time_second" instead of "time" now that time handling in the kernelThorsten Lockert
has changed. ok art@ millert@ marc@
2004-06-30Compile cleanly with gcc3.3.2.Hans-Joerg Hoexer
ok ho@
2004-06-29remove cedric's bogus interface name verification code.Henning Brauer
this was meant to verify that ne3 is a valid interface that could show up, but bogus0 is not. while this might sound like a good idea it is completely broken and causes a shitload of problems. just allow for anything as interface name, the kernel abstracts that nice enough. if no interface by that name exists (or shows up) the rule never matches; that matches pf semantics used everywhere else. this also fixes the "pfctl always has to run as root" issue that cedric did not fix over the last 6 months despite being bugged to regularily. help & ok mcbride@
2004-06-29convert a few memcpy()s to strlcpy() so we don't copy uninitialized junk intoMike Frantzen
a interface name's slack space past the \0. will be needed for the optimizer. ok henning@
2004-06-28- repair examples which i damaged in previous commitJason McIntyre
- tidy up DIAGNOSTICS, and use -diag - wording from jared yanovich;
2004-06-26For all the mfs lovers:Otto Moerbeek
- Make the root of an mfs file system inherit the permission and owner/group of the mountpoint. Work by david@. - Add the ability to populate an mfs file system with the contents of a directory or a file system immediately after creation, controlled by the new -P mount option. Discussed with and tested by many, ok djm@ david@
2004-06-26cleanup ioctl for ifgroups; ok pb@Markus Friedl
2004-06-26grammar, formatting, consistency, spelling, etc. from jared yanovich;Jason McIntyre
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26new sentence, new line;Jason McIntyre
2004-06-26grammar;Jason McIntyre
2004-06-26add back PF_INOUT, fixes reassemble tcpDavid Krause
ok canacar@ mcbride@
2004-06-26Add option that allows to change timeslot range forn network card.Alex Feldman
ok mcbride@
2004-06-26Narrow down privsep interface. Move pf_key_v2_open() to monitor.Hans-Joerg Hoexer
Work in progress. ok ho@
2004-06-26ignore IFGROUP errs in ifconfig -a for "too old" kernels right nowPhilipp Buehler
2004-06-26Remove -DHAVE_GETNAMEINFO frome makefiles.Ryan Thomas McBride
Pointed out by ho@
2004-06-26Remove scsi(3) from SEE ALSO. ok deraadt@Robert Nagy
2004-06-26more netiso leftoversPhilipp Buehler
by pointer from yared janovich henning@ ok
2004-06-26groups in usage() - from jared yanovichPhilipp Buehler
2004-06-25Keynote policy checking can now be disabled by "-K" switch and config tagHans-Joerg Hoexer
"Use-Keynote". Default is to use keynote. ok henning@ ho@
2004-06-25Remove HAVE_GETNAMEINFO alternate code. Compiled binary is unchanged.Ryan Thomas McBride
ok msf@ hshoexer@ itojun@ ho@
2004-06-25interface groupsPhilipp Buehler
mcbride@ ok
2004-06-25introduce "interface groups"Philipp Buehler
by "ifconfig fxp0 group foobar" "ifconfig xl0 group foobar" these two interfaces are in one group. Every interface has its if-family as default group. idea/design from henning@, based on some work/disucssion from Joris Vink. henning@, mcbride@ ok.
2004-06-25repair tree nanobreak by the nanobumTheo de Raadt
2004-06-25remove two ununsed includesHenning Brauer
2004-06-25remove netiso and netns codeHenning Brauer
2004-06-25Narrow down privsep interface. Remove ui_init to monitor. So we can get rid ofHans-Joerg Hoexer
monitor_mkfifo. Work in progress. ok ho@
2004-06-24iso is goneHenning Brauer
2004-06-24remove netiso stuffHenning Brauer
2004-06-24Remove some unused code.Hans-Joerg Hoexer
Fix handling of sigchild. Now it's possible to sigstop/sigcont isakmpd correclty. ok ho@
2004-06-24Also handle keys from x509-certificates embedded in keynote credentials.Hans-Joerg Hoexer
with msf@ ok ho@
2004-06-23Print corrent prefix. Found and tested by alex at vbone.net.Hakan Olsson
2004-06-23make -w optional; ok miod@David Krause