Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-12-12 | Send DECLINE messages in response to ACK messages that turn out to | Kenneth R Westerback | |
have inadequate or invalid leases. In particular leases for addresses that are already configured on a different interface. After the DECLINE, return to INIT state and start looking for a valid lease. This conforms much closer to the relevant RFC's. Avoids 'hanging' dhclient(8) during boot when the attempt to configure the address fails without dhclient(8) realizing it. Issue found and various fixes tested by mpi@. Feedback from beck@ and reyk@. ok mpi@ | |||
2015-12-12 | add keyboard backlight variable | Joerg Jung | |
tested by Bryan Vyhmeister, krw, tb, and myself ok jcs krw tb | |||
2015-12-12 | In olden times (i + u + e) was considered a clever way to 'or' | Kenneth R Westerback | |
together three boolean values. In today's englightened world we know about '||'. Pointed out by naddy@ | |||
2015-12-12 | Open disk READONLY if none of i, e or u are specified. | Kenneth R Westerback | |
Suggestion, original diff and ok naddy@ | |||
2015-12-11 | there are no boot_ pages for armish or landisk that i can see, | Jason McIntyre | |
so remove their references; while here undo a predefined string (as mandoc_char(7) calls them); | |||
2015-12-11 | Add '-v' flag that forces the display of both GPT's and the MBR. | Kenneth R Westerback | |
Useful for seeing exactly what is currently on the disk. Suggested by a request from kettenis@. Man page & usage ok jmc@ | |||
2015-12-10 | Pledge. | Kenneth R Westerback | |
Diff from Ricardo Mestre. ok deraadt@ | |||
2015-12-10 | Remove NULL-checks before free(). ok tb@ | mmcc | |
2015-12-10 | comment typo | mmcc | |
2015-12-09 | Remove plain DES encryption from IPsec. | Christian Weisgerber | |
DES is insecure since brute force attacks are practical due to its short key length. This removes support for DES-CBC encryption in ESP and in IKE main and quick mode from the kernel, isakmpd(8), ipsecctl(8), and iked(8). ok mikeb@ | |||
2015-12-09 | Revert SIOCDIFADDR_IN6 fix. | Martin Pieuchot | |
It's not possible to fix this issue in ifconfig(8) because in_control() and in6_control() have a subtle semantic difference which result in breaking alias for IPv4. in_control() always select the first address on the list of an interface whereas in6_control() doesn't. That's why ifconfig(8) passes an empty "struct in_aliasreq" and that fails in netinet6. Breakage reported by deraadt@ | |||
2015-12-09 | add braces to correct pledge logic | Jonathan Gray | |
ok deraadt@ | |||
2015-12-08 | spaces to tabs | Ted Unangst | |
2015-12-07 | Add imsg "peerid" to debug messages (only within -DDEBUG). | Reyk Floeter | |
2015-12-07 | Sync proc.c, use shorter proc_compose[v]() | Reyk Floeter | |
2015-12-07 | sync with vmd | Reyk Floeter | |
2015-12-07 | Convert to arc4random_uniform. | tb | |
ok krw@ | |||
2015-12-06 | remove trailers option that was already obsolete when this code was imported. | Ted Unangst | |
ok benno krw | |||
2015-12-06 | remove txpower option. only relevant to the now irrelevant wi driver. | Ted Unangst | |
(several other drivers misleadingly claim generic 802.11 txpower, but do not in fact do anything. the knob is not connected to the radio.) ok benno jsg krw reyk | |||
2015-12-06 | Use __progname instead of manually handling argv[0]. | Tobias Stoeckmann | |
ok deraadt, mmcc, tedu | |||
2015-12-06 | Avoid out of boundary access on illegal command line arguments. | Tobias Stoeckmann | |
ok deraadt, mmcc, tedu | |||
2015-12-05 | EAGAIN handling for imsg_read. OK henning@ benno@ | Claudio Jeker | |
2015-12-03 | No need to continuously check the current rdomain of the interface | Kenneth R Westerback | |
using the SIOCGIFRDOMAIN ioctl. If the rdomain is changed an RTM_IFINFO message is generated on the old rdomain indicating the interface is down. This will cause dhclient to exit, just like our manual check did but even faster! Should make pledging easier. Behaviour confirmed by phessler@ | |||
2015-12-03 | Document etherip(4) as another tunnel interface. | Stuart Henderson | |
2015-12-03 | Print the interface index which is part of the route msg header. | Claudio Jeker | |
mpi@ and benno@ agree | |||
2015-12-02 | remove unimplemented PF_KEY algorithms; ok sthen@ mpi@ mikeb@ | Christian Weisgerber | |
2015-12-01 | Send solbourne to where the ........... | Theo de Raadt | |
2015-12-01 | Send Aviion to same place as Nova II | Theo de Raadt | |
discussed with jsg | |||
2015-12-01 | Fix inexplicable use of 'disk' instead of 'disk.name' when trying to | Kenneth R Westerback | |
print the disk's name in an error message. | |||
2015-12-01 | Make '-i' set 'reinited' flag so that the initial Xwrite() will zap | Kenneth R Westerback | |
any undesirable GPT hanging around. i.e. same as 'reinit' from the fdisk(8) command line. Noticed now that install media relies on '-i' rather than issuing 'reinit' in a script. | |||
2015-11-29 | use ping6(8)'s engine; next step in unification | Florian Obser | |
OK benno@ | |||
2015-11-29 | Reimplement source address selection. Inspired by the previous | Florian Obser | |
traceroute / traceroute6 merge. Next step in unification. OK benno@ | |||
2015-11-29 | Include RFC number in reference | Tim van der Molen | |
2015-11-29 | Doubles are not reals. Imprecision might lead to trying to | Florian Obser | |
calculate square root of a negative number. Just use 0 in this case. Pointed out by and fix from Nathanael Rensen ( nathanael AT list DOT polymorpheus DOT com ), thanks! OK deraadt@ (Funnily this bug was in ping6 for many years, only discovered once I synced ping to the ping6 implementation recently.) | |||
2015-11-28 | hoist TIOCGWINSZ code upwards, and pledge "stdio disklabel" at the | Theo de Raadt | |
right place. tested by mmcc | |||
2015-11-28 | Oops, left the pledge "tty" active in the previous commited | Theo de Raadt | |
pointed out by Chris Hettrick | |||
2015-11-27 | spaces | Theo de Raadt | |
2015-11-27 | After evaluating patches from Ricardo Mestre, it became obvious that | Sebastian Benoit | |
route needs pledge("stdio rpath dns") in all cases. Looks best to me deraadt@ | |||
2015-11-26 | When prompting for a GPT partition type, use the partition's current type as | Tim van der Molen | |
default; OK krw@ | |||
2015-11-26 | When prompting for an LBA, show the min and max values in the prompt; OK krw@ | Tim van der Molen | |
2015-11-26 | Instead, hoist TIOCGWINSZ up to the top, then "tty" pledge is not needed. | Theo de Raadt | |
2015-11-26 | unbelievable.. this uses TIOCGWINSZ.. how did i miss that. pledge "tty". | Theo de Raadt | |
2015-11-25 | We can't make a pledge if we're mount_mfs(8) as we need the ability to call | Mark Kettenis | |
mount(2). ok deraadt@ | |||
2015-11-25 | Try harder to prevent 0-length partitions from being defined. | Kenneth R Westerback | |
Suggested by & ok tim@ | |||
2015-11-25 | -A needs cflag too. Noted by sthen@ during install. | Kenneth R Westerback | |
2015-11-25 | Put back 1.305 without breaking the hand rolled inet_net_pton(3) case | Martin Pieuchot | |
for IPv4. Tested by sebastia@ and krw@ | |||
2015-11-25 | Do not do the early pledge, because hotroot() is a lie. fsck_extfs | Theo de Raadt | |
is not correct duid-aware by itself. | |||
2015-11-24 | hotroot is calculated late in fsck_ffs, so defer the pledge. | Theo de Raadt | |
2015-11-24 | Need 'cpath' for op == EDITOR, as '-F' to write out the ascii label in | Kenneth R Westerback | |
an arbitrary location is a possibility. Suggested by & ok deraadt@ | |||
2015-11-24 | pledge "stdio rpath wpath disklabel proc exec" throughout, after | Theo de Raadt | |
krw's refactorings which hoisted disk-opening to the top. tested by krw |