Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-11-29 | expose state table changes | Michael Shalayeff | |
2002-09-26 | renable sppp and lmc, now free | Theo de Raadt | |
2002-09-23 | turn off sppp, lmc, and cz until various licenses on those components are | Theo de Raadt | |
resolved. sorry -- i've been warning people for some time that i would start to take this stance. | |||
2002-07-06 | Remove kernel support for NTP. ok deraadt@ and tholo@ | Thomas Nordin | |
2002-05-16 | systrace pseudo-device okay deraadt@ | Niels Provos | |
2002-05-16 | put TCP_ECN into the kernel | Theo de Raadt | |
2002-03-14 | Turn the ptrace(2) syscall into a kernel compile option, option PTRACE in | Miod Vallat | |
your kernel configuration file. By default, GENERIC will enable this. When PTRACE is not enabled, several ptrace-like features of the procfs filesystem will be disabled as well (namely, the ability to read and write any process' registers, as well as attching, single stepping and detaching to/from processes). This should help paranoid people build better sandboxens, and us to build smaller ramdisks. | |||
2001-09-17 | No need to define TIMEZONE and DST to 0 here, param.c does that automagically. | Artur Grabowski | |
2001-08-09 | change a maze of altq options into just "altq" for the base+red+cbq, and | Theo de Raadt | |
then altq_* for each of the other * experimental options. and.. enable it by default in GENERIC. | |||
2001-08-08 | IPCOMP removal. deraadt@ ok. | Jean-Jacques Bernard-Gundol | |
2001-07-06 | "option IPSEC needs the enc interface" | Angelos D. Keromytis | |
2001-07-05 | IPComp. Turned off by default in GENERIC. | Jean-Jacques Bernard-Gundol | |
2001-06-27 | SWAPPAGER and DEVPAGER are distant memories from the past. | Artur Grabowski | |
2001-06-25 | we need only one pflog now | Niels Provos | |
2001-06-25 | first stab at packet logging for pf. inspired by late night dreams of art. | Niels Provos | |
we just pass drop and passed packets to different pseudo interface that can be listened to with bpf. | |||
2001-06-25 | move pf hooks to sys/conf/GENERIC | Kjell Wooding | |
2001-05-30 | Remove ipf. Darren Reed has interpreted his (old, new, whichever) | Theo de Raadt | |
licence in a way that makes ipf not free according to the rules we established over 5 years ago, at www.openbsd.org/goals.html (and those same basic rules govern the other *BSD projects too). Specifically, Darren says that modified versions are not permitted. But software which OpenBSD uses and redistributes must be free to all (be they people or companies), for any purpose they wish to use it, including modification, use, peeing on, or even integration into baby mulching machines or atomic bombs to be dropped on Australia. Furthermore, we know of a number of companies using ipf with modification like us, who are now in the same situation, and we hope that some of them will work with us to fill this gap that now exists in OpenBSD (temporarily, we hope). | |||
2001-05-17 | It's Daylight Saving Time, not Savings. Fix comments. | Peter Valchev | |
Discussed with pjanzen@ | |||
2001-05-16 | Create COMPAT_25 and move ogetfsstat, ostatfs and ostatfs into it. | Todd C. Miller | |
Create COMPAT_23 and move __osemctl, omsgctl, oshmctl there. | |||
2001-05-16 | kill COMPAT_{09,10,11} kernel options. We still need kern_info_09.c and ↵ | Todd C. Miller | |
kern_ipc_10.c for other compat modules. | |||
2001-05-04 | vlan in GENERIC (ti(4) now has an issue, jason will deal) | Theo de Raadt | |
2001-04-09 | FFS_SOFTUPDATES in sys/conf/GENERIC | Theo de Raadt | |
2001-04-09 | LFS is not an option right now. | Artur Grabowski | |
2001-03-08 | move gif* and faith* into sys/conf/GENERIC. deraadt and angelos ok | Jun-ichiro itojun Hagino | |
2001-01-05 | Add commented-out MROUTING option (for completeness) -- (james@oaktree.co.uk) | Angelos D. Keromytis | |
2000-12-31 | Up the number of gif interfaces, we just need one enc interface. | Angelos D. Keromytis | |
2000-10-13 | enable PULLDOWN_TEST, and use m_pulldown for IPv6 packet parsing. | Jun-ichiro itojun Hagino | |
this will make it easier for IPv6 code to cope with uncontinuous packet header on the mbuf (without this, ep interface on i386 chokes during IPv6 ND process). should affect IPv6 only. | |||
2000-04-26 | pseudo-device vlan (commented out for now) | Chris Cappuccio | |
2000-03-22 | make UVM_SWAP_ENCRYPT default, still need to enable via sysctl | Niels Provos | |
2000-03-17 | Cryptographic services framework, and software "device driver". The | Angelos D. Keromytis | |
idea is to support various cryptographic hardware accelerators (which may be (detachable) cards, secondary/tertiary/etc processors, software crypto, etc). Supports session migration between crypto devices. What it doesn't (yet) support: - multiple instances of the same algorithm used in the same session - use of multiple crypto drivers in the same session - asymmetric crypto No support for a userland device yet. IPsec code path modified to allow for asynchronous cryptography (callbacks used in both input and output processing). Some unrelated code simplification done in the process (especially for AH). Development of this code kindly supported by Network Security Technologies (NSTI). The code was writen mostly in Greece, and is being committed from Montreal. | |||
2000-03-02 | Add an option DDB_SAFE_CONSOLE that defaults db_console to 1. | Artur Grabowski | |
In many cases, setting db_console in /etc/rc is too late. | |||
2000-01-09 | add INET6 into conf/GENERIC. | Jun-ichiro itojun Hagino | |
add pseudo-devices for IPv6 into arch/*/conf/GENERIC. nuke arch/*/conf/GENERIC.v6. | |||
2000-01-08 | gre(4) interface in GENERIC | Angelos D. Keromytis | |
1999-12-30 | insert commented UVM_SWAP_ENCRYPTION | Niels Provos | |
1999-10-29 | Up the number of enc interfaces. | Angelos D. Keromytis | |
1999-10-06 | Put TCP_SACK back in as it is not turned on by default anyway. | Todd C. Miller | |
That way, users who want it can turn it on via sysctl. | |||
1999-10-03 | Remove commented out sample of SHMMAXPGS setting with machine-specific | Niklas Hallqvist | |
comment. People should read options.4 for such info anyhow, not this file. | |||
1999-10-01 | SACK is not bug-free yet; off for 2.6 | Theo de Raadt | |
1999-09-29 | commented out profiling options | Artur Grabowski | |
1999-09-29 | Add option NETATALK (commented out). | Angelos D. Keromytis | |
1999-07-06 | Added TCP_SIGNATURE option. | cmetz | |
1999-07-01 | lmc driver; ported by chris@dqc.org | Theo de Raadt | |
1999-06-08 | disable TCP_FACK for now | Niels Provos | |
1999-05-27 | remove the NO_KMEMSTATS hack from sys/malloc.h | Artur Grabowski | |
add KMEMSTATS to GENERIC to keep old behavior | |||
1999-04-20 | renable TCP_SACK and TCP_FACK again. if you have problems direct flaims | Niels Provos | |
to me. | |||
1999-04-11 | Reenable IPSEC now that it is off by default, but can be enabled via sysctl | Niklas Hallqvist | |
1999-04-07 | and enc is not default either | Theo de Raadt | |
1999-04-07 | disable IPSEC by default | Theo de Raadt | |
1999-03-30 | make option IPSEC imply option KEY | Niklas Hallqvist | |
1999-02-28 | support bridging by default | Theo de Raadt | |