| Age | Commit message (Expand) | Author |
|---|
| 2015-10-16 | Remove -B from EXAMPLES; reminded by jmc@ | Miod Vallat |
| 2015-10-15 | Remove disklabel -B (NUMBOOT) support. All the platforms which used to need | Miod Vallat |
| 2015-10-15 | Remove some unnecessary NULL-checks before free(). Change two bzero() | mmcc |
| 2015-10-15 | corrects pledge code for fsck_ffs and fsck_ext2fs | Sebastien Marie |
| 2015-10-15 | A classic case for bzero() -> explicit_bzero() | mmcc |
| 2015-10-15 | fsck_ffs has a ^T signal handler which opens /dev/tty late. Hoist that | Theo de Raadt |
| 2015-10-14 | To specify a source address ping uses -I while ping6 uses -S. Switch | Florian Obser |
| 2015-10-14 | Since the fsck_* programs now only handle one filesystem, this creates | Theo de Raadt |
| 2015-10-14 | unfortunately rewritelabel() just before termination does a non-permitted | Theo de Raadt |
| 2015-10-14 | Only accept one filesystem/device as argument for checking. Few people | Theo de Raadt |
| 2015-10-13 | Remove -b flag and let ping6 set the socket buffer size automatically | Florian Obser |
| 2015-10-13 | can pledge "stdio" after opening device. | Theo de Raadt |
| 2015-10-13 | Pledge "stdio rpath" requests for nologin. | Doug Hogan |
| 2015-10-12 | deprecate & remove -W option; ok florian | Theo de Raadt |
| 2015-10-12 | Annotate an pretty obvious signal race... no time to fix it now. | Theo de Raadt |
| 2015-10-12 | tunefs can pledge to only use "stdio", after it has opened the device. | Theo de Raadt |
| 2015-10-12 | pledge "stdio" right after opening the device. The remainder is | Theo de Raadt |
| 2015-10-11 | Pledge that ncheck_ffs only uses "stdio" after opening the device. | Doug Hogan |
| 2015-10-11 | After the filesystem is opened, pledge "stdio" | Theo de Raadt |
| 2015-10-11 | If only displaying the disklabel (the normal thing to do against potentially | Theo de Raadt |
| 2015-10-11 | After the disk is opened, this can pledge "stdio". | Theo de Raadt |
| 2015-10-11 | Prefer dprintf() over snprintf()+write() | Philip Guenther |
| 2015-10-10 | pflogd contained the same "privsep error" as tcpdump -- assuming that | Theo de Raadt |
| 2015-10-09 | Change all tame callers to namechange to pledge(2). | Theo de Raadt |
| 2015-10-07 | Note permissions for the crc32() code adapted from Hacker's Delight. | Kenneth R Westerback |
| 2015-10-06 | fix flowsrc spec, ok florian, thx ingo! | Sebastian Benoit |
| 2015-10-05 | Remove 'landisk' from the comment about NUMBOOT archs. Only one | Kenneth R Westerback |
| 2015-10-05 | Remove disklabel -B support on landisk - superseded by MI installboot. | Miod Vallat |
| 2015-10-05 | Oops. Missed file in fdisk commit. | Kenneth R Westerback |
| 2015-10-05 | Tweak man page to describe newly enhanced '-g' operation. | Kenneth R Westerback |
| 2015-10-05 | Enhance '-g' to create a default GPT label in addition to the protective | Kenneth R Westerback |
| 2015-10-04 | dmesg has two modes. The normal sysctl mode, and the -M/-N kvm searcher. | Theo de Raadt |
| 2015-10-04 | Repair tame() error check to be == -1 | Theo de Raadt |
| 2015-10-03 | IPv6 transport for pflow data. | Florian Obser |
| 2015-10-03 | If we care about placing core files from SUID programs in a safe place, | Vadim Zhukov |
| 2015-10-03 | ping6 is a setuid root priv-drop which holds a sockraw. we can tame it | Theo de Raadt |
| 2015-10-03 | ping is a setuid root priv-drop which holds a sockraw. we can tame it | Theo de Raadt |
| 2015-10-02 | Curve25519 is now specified in draft-ietf-ipsecme-safecurves-00 (along | Reyk Floeter |
| 2015-10-02 | RFC7634 specifies ChaCha20-Poly1305 for IKEv2 and IPsec and IANA | Reyk Floeter |
| 2015-10-02 | Remove MD5 from the default proposals. At least SHA1 seems to be the | Reyk Floeter |
| 2015-10-02 | If the policy certreqtype is 0, use the global one instead. | Reyk Floeter |
| 2015-10-02 | Make 'pfctl -s all' show queues. pfctl(8) says it does, and 5.4 | Kenneth R Westerback |
| 2015-10-02 | oh no, a KERBEROS lefover; from Ilya Kaliman | Theo de Raadt |
| 2015-10-01 | Don't reject an "empty" CERTREQ (one with no CA hashes), instead treat it as | Stuart Henderson |
| 2015-10-01 | Fix interoperability with Apple iOS9: If we don't get a (valid) | Reyk Floeter |
| 2015-09-30 | remove old self-kill() in the signal handler. must predate the | Theo de Raadt |
| 2015-09-29 | Delete the final, inscrutable NOSTRICT and VARARGS lint comments | Philip Guenther |
| 2015-09-27 | Mark ask() as printf-like; split up a pwarn() with variable number of specifiers | Philip Guenther |
| 2015-09-27 | lint is dead: delete the trivial uses of /* VARARGS[0-9]+ */ | Philip Guenther |
| 2015-09-25 | there's no need to keep init secret these days, and the (unused) | Ted Unangst |
