summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2015-12-12Send DECLINE messages in response to ACK messages that turn out toKenneth R Westerback
have inadequate or invalid leases. In particular leases for addresses that are already configured on a different interface. After the DECLINE, return to INIT state and start looking for a valid lease. This conforms much closer to the relevant RFC's. Avoids 'hanging' dhclient(8) during boot when the attempt to configure the address fails without dhclient(8) realizing it. Issue found and various fixes tested by mpi@. Feedback from beck@ and reyk@. ok mpi@
2015-12-12add keyboard backlight variableJoerg Jung
tested by Bryan Vyhmeister, krw, tb, and myself ok jcs krw tb
2015-12-12In olden times (i + u + e) was considered a clever way to 'or'Kenneth R Westerback
together three boolean values. In today's englightened world we know about '||'. Pointed out by naddy@
2015-12-12Open disk READONLY if none of i, e or u are specified.Kenneth R Westerback
Suggestion, original diff and ok naddy@
2015-12-11there are no boot_ pages for armish or landisk that i can see,Jason McIntyre
so remove their references; while here undo a predefined string (as mandoc_char(7) calls them);
2015-12-11Add '-v' flag that forces the display of both GPT's and the MBR.Kenneth R Westerback
Useful for seeing exactly what is currently on the disk. Suggested by a request from kettenis@. Man page & usage ok jmc@
2015-12-10Pledge.Kenneth R Westerback
Diff from Ricardo Mestre. ok deraadt@
2015-12-10Remove NULL-checks before free(). ok tb@mmcc
2015-12-10comment typommcc
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
DES is insecure since brute force attacks are practical due to its short key length. This removes support for DES-CBC encryption in ESP and in IKE main and quick mode from the kernel, isakmpd(8), ipsecctl(8), and iked(8). ok mikeb@
2015-12-09Revert SIOCDIFADDR_IN6 fix.Martin Pieuchot
It's not possible to fix this issue in ifconfig(8) because in_control() and in6_control() have a subtle semantic difference which result in breaking alias for IPv4. in_control() always select the first address on the list of an interface whereas in6_control() doesn't. That's why ifconfig(8) passes an empty "struct in_aliasreq" and that fails in netinet6. Breakage reported by deraadt@
2015-12-09add braces to correct pledge logicJonathan Gray
ok deraadt@
2015-12-08spaces to tabsTed Unangst
2015-12-07Add imsg "peerid" to debug messages (only within -DDEBUG).Reyk Floeter
2015-12-07Sync proc.c, use shorter proc_compose[v]()Reyk Floeter
2015-12-07sync with vmdReyk Floeter
2015-12-07Convert to arc4random_uniform.tb
ok krw@
2015-12-06remove trailers option that was already obsolete when this code was imported.Ted Unangst
ok benno krw
2015-12-06remove txpower option. only relevant to the now irrelevant wi driver.Ted Unangst
(several other drivers misleadingly claim generic 802.11 txpower, but do not in fact do anything. the knob is not connected to the radio.) ok benno jsg krw reyk
2015-12-06Use __progname instead of manually handling argv[0].Tobias Stoeckmann
ok deraadt, mmcc, tedu
2015-12-06Avoid out of boundary access on illegal command line arguments.Tobias Stoeckmann
ok deraadt, mmcc, tedu
2015-12-05EAGAIN handling for imsg_read. OK henning@ benno@Claudio Jeker
2015-12-03No need to continuously check the current rdomain of the interfaceKenneth R Westerback
using the SIOCGIFRDOMAIN ioctl. If the rdomain is changed an RTM_IFINFO message is generated on the old rdomain indicating the interface is down. This will cause dhclient to exit, just like our manual check did but even faster! Should make pledging easier. Behaviour confirmed by phessler@
2015-12-03Document etherip(4) as another tunnel interface.Stuart Henderson
2015-12-03Print the interface index which is part of the route msg header.Claudio Jeker
mpi@ and benno@ agree
2015-12-02remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@Christian Weisgerber
2015-12-01Send solbourne to where the ...........Theo de Raadt
2015-12-01Send Aviion to same place as Nova IITheo de Raadt
discussed with jsg
2015-12-01Fix inexplicable use of 'disk' instead of 'disk.name' when trying toKenneth R Westerback
print the disk's name in an error message.
2015-12-01Make '-i' set 'reinited' flag so that the initial Xwrite() will zapKenneth R Westerback
any undesirable GPT hanging around. i.e. same as 'reinit' from the fdisk(8) command line. Noticed now that install media relies on '-i' rather than issuing 'reinit' in a script.
2015-11-29use ping6(8)'s engine; next step in unificationFlorian Obser
OK benno@
2015-11-29Reimplement source address selection. Inspired by the previousFlorian Obser
traceroute / traceroute6 merge. Next step in unification. OK benno@
2015-11-29Include RFC number in referenceTim van der Molen
2015-11-29Doubles are not reals. Imprecision might lead to trying toFlorian Obser
calculate square root of a negative number. Just use 0 in this case. Pointed out by and fix from Nathanael Rensen ( nathanael AT list DOT polymorpheus DOT com ), thanks! OK deraadt@ (Funnily this bug was in ping6 for many years, only discovered once I synced ping to the ping6 implementation recently.)
2015-11-28hoist TIOCGWINSZ code upwards, and pledge "stdio disklabel" at theTheo de Raadt
right place. tested by mmcc
2015-11-28Oops, left the pledge "tty" active in the previous commitedTheo de Raadt
pointed out by Chris Hettrick
2015-11-27spacesTheo de Raadt
2015-11-27After evaluating patches from Ricardo Mestre, it became obvious thatSebastian Benoit
route needs pledge("stdio rpath dns") in all cases. Looks best to me deraadt@
2015-11-26When prompting for a GPT partition type, use the partition's current type asTim van der Molen
default; OK krw@
2015-11-26When prompting for an LBA, show the min and max values in the prompt; OK krw@Tim van der Molen
2015-11-26Instead, hoist TIOCGWINSZ up to the top, then "tty" pledge is not needed.Theo de Raadt
2015-11-26unbelievable.. this uses TIOCGWINSZ.. how did i miss that. pledge "tty".Theo de Raadt
2015-11-25We can't make a pledge if we're mount_mfs(8) as we need the ability to callMark Kettenis
mount(2). ok deraadt@
2015-11-25Try harder to prevent 0-length partitions from being defined.Kenneth R Westerback
Suggested by & ok tim@
2015-11-25-A needs cflag too. Noted by sthen@ during install.Kenneth R Westerback
2015-11-25Put back 1.305 without breaking the hand rolled inet_net_pton(3) caseMartin Pieuchot
for IPv4. Tested by sebastia@ and krw@
2015-11-25Do not do the early pledge, because hotroot() is a lie. fsck_extfsTheo de Raadt
is not correct duid-aware by itself.
2015-11-24hotroot is calculated late in fsck_ffs, so defer the pledge.Theo de Raadt
2015-11-24Need 'cpath' for op == EDITOR, as '-F' to write out the ascii label inKenneth R Westerback
an arbitrary location is a possibility. Suggested by & ok deraadt@
2015-11-24pledge "stdio rpath wpath disklabel proc exec" throughout, afterTheo de Raadt
krw's refactorings which hoisted disk-opening to the top. tested by krw