summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2014-02-26Try to reduce the confusion about rdomain vs rtable. More is needed butClaudio Jeker
2014-02-26Try to be more precise about rtable and rdomains.Claudio Jeker
2014-02-26Still a lie, the default is not 0. It is inherited from the process.Claudio Jeker
2014-02-26don't policy_ref an activate policy (policy_ref/unref are assymetrical),Markus Friedl
2014-02-26short note that the filesystem is always mounted readonlyTed Unangst
2014-02-22Revert mountpoints tweaking. Needs much more serious surgery than timeKenneth R Westerback
2014-02-21support rekeying for IPCOMP; ok mikeb@Markus Friedl
2014-02-21Permit building without portmap/mountd rpc calls in the fallback nfs pathTheo de Raadt
2014-02-18check the error from ikev2_cp_setaddrMarkus Friedl
2014-02-18Do not create the default dhcp-client-identifier if an empty stringKenneth R Westerback
2014-02-17interpret 'config address net/prefix' as a pool of addresses andMarkus Friedl
2014-02-17basic OCSP support. enable with 'set ocsp "http://10.0.0.10:8888/"'Markus Friedl
2014-02-17Fix compiler warnings in the format strings: use %zd for ssize_t andReyk Floeter
2014-02-17Remove a stray debug printf that crept in via one of the newqueueLawrence Teo
2014-02-16Further tweak to mpfree(). Don't bother setting about-to-be-freedKenneth R Westerback
2014-02-15Don't risk dereferencing NULL pointer to mountpoints arrayKenneth R Westerback
2014-02-15Stop leaking mount point strings in temporary copies of theKenneth R Westerback
2014-02-14Ooops. r1.169 was supposed to add 'total sectors' to the list ofKenneth R Westerback
2014-02-14remove unused function that distracts from cleaning up the imsg_flush() messSebastian Benoit
2014-02-14initial support for IPCompMarkus Friedl
2014-02-13mark up argument placeholders with .Ar; from Jan Stary <hans at stare dot cz>Ingo Schwarze
2014-02-13Hard looping on EAGAIN is bad. Just fall out to outer event loopKenneth R Westerback
2014-02-12make sure to set the msg_responded flag on the original message; ok mikeb@Markus Friedl
2014-02-09Don't use imsg_flush(), roll a local flush_unpriv_ibuf() that loopsKenneth R Westerback
2014-02-09Nuke a couple of extraneous blank lines.Kenneth R Westerback
2014-02-09Use correct function name in error message. 'cleanup' was renamedKenneth R Westerback
2014-02-09Missing {} around multi-statement else. Malformed IMSG_HUP messages shouldKenneth R Westerback
2014-02-08Create dhclient lease files and dhcpd lease files with permissions 0640,Kenneth R Westerback
2014-02-07Create -L leases files with the same 0000 permissions as regularKenneth R Westerback
2014-02-07Log failures to fchmod() or fchown() the file written inKenneth R Westerback
2014-02-07Nuke unused #define CLIENT_PATH. A remnant of dhclient-script.Kenneth R Westerback
2014-02-05add a fstab example, with help from and ok jmc@Nick Holland
2014-02-05Always set the signature to DOSMBR_SIGNATURE when writing a MBR toKenneth R Westerback
2014-01-25Correct parsing of dhclient.conf statements 'fixed-address' andKenneth R Westerback
2014-01-24Don't include <machine/vmparam.h> directly. Instead, get it with its necessaryMiod Vallat
2014-01-24re-lookup the policy as soon as we have the ID of the peer (destid)Markus Friedl
2014-01-24enable format-string checks for log_*(); ok mikebMarkus Friedl
2014-01-24make sure sa_lookup() can actually find SAs; ok mikebMarkus Friedl
2014-01-24don't leak prv RSA key for each signature; ok mikebMarkus Friedl
2014-01-24use a bit saner timer apiMike Belopuhov
2014-01-23kern.intrcnt is viewable with vmstat+systatPhilip Guenther
2014-01-23Remove a mid-layer which acts like arc4random isn't fairly standard.Theo de Raadt
2014-01-22regrand can die, from millertTheo de Raadt
2014-01-22fix printing of IPcomp SAs; ok mikeb@ & todd@Markus Friedl
2014-01-22implement DPD similar to isakmpd, but only send DPD-messages 'on-demand'Markus Friedl
2014-01-22Remove genmask support from route(8). It still will show them in monitorClaudio Jeker
2014-01-22improve randomization. remove some junk debugging features that areTheo de Raadt
2014-01-22relax the cfg file secrecy check slightly to allow group readabilityHenning Brauer
2014-01-21include util.h for scan_scaled()Jonathan Gray
2014-01-21allow pflow(4) to determine the src IP address based on the routeSebastian Benoit