| Age | Commit message (Expand) | Author |
|---|
| 2016-09-15 | all pools have their ipl set via pool_setipl, so fold it into pool_init. | David Gwynne |
| 2016-09-06 | pool_setipl for various netinet and netinet6 bits | David Gwynne |
| 2016-08-04 | Commit in6_selectsrc() split again, with missing assignment fixed. | Vincent Gross |
| 2016-07-22 | Revert in_selectsrc() refactoring, it breaks IPv6. | Martin Pieuchot |
| 2016-07-20 | Split in6_selectsrc() into a low-level part and a pcb-level part, and | Vincent Gross |
| 2016-07-19 | NULLify a route pointer after calling rtfree(9). | Martin Pieuchot |
| 2016-07-05 | Do not use ``rt_addr'' in in{6,}_selectsrc() it doesn't work with magic | Martin Pieuchot |
| 2016-06-30 | Use ``rt_addr'' rather than ``rt_ifa'' to get the source address | Martin Pieuchot |
| 2016-06-18 | Add net.inet.{tcp,udp}.rootonly sysctl, to mark which ports | Vincent Gross |
| 2016-04-19 | Use the correct byte-order when checking against baddynamic ports, | Stuart Henderson |
| 2016-04-13 | Remove extra parenthesis around comparison. | Vincent Gross |
| 2016-04-12 | Unbreak tree. Put 'laddr6' declaration inside #ifdef INET6/#endif. | Kenneth R Westerback |
| 2016-04-11 | Simplify in_pcblookup_local() logic. | Vincent Gross |
| 2016-04-11 | Rename in_pcblookup() to in_pcblookup_local() and change its prototype | Vincent Gross |
| 2016-04-08 | We must always check if the socket is already bound, and always set | Vincent Gross |
| 2016-04-05 | Move reserved port checks from in(6)_pcbaddrisavail() to in_pcbbind(). | Vincent Gross |
| 2016-04-05 | Move inp_laddr assignment after in_pcbpickport(), extend in_pcbpickport() | Vincent Gross |
| 2016-03-26 | Always include the route priority in routing messages. | Martin Pieuchot |
| 2016-03-23 | Merge in_pcbbind() and in6_pcbbind(), and change every call to | Vincent Gross |
| 2016-03-23 | Extract in_pcbaddrisavail() from in_pcbbind(). | Vincent Gross |
| 2015-12-18 | Fix SO_REUSE* flags effects when binding multicast addresses. No | Vincent Gross |
| 2015-12-03 | Get rid of rt_mask() and stop allocating a "struct sockaddr" for every | Martin Pieuchot |
| 2015-12-03 | Remove broadcast matching from ifa_ifwithaddr(), use in_broadcast() where | Vincent Gross |
| 2015-12-03 | To avoid that the stack manipules the pf statekeys directly, introduce | Alexander Bluhm |
| 2015-12-03 | Rename pf_unlink_state() to pf_remove_state() so the name does not | Alexander Bluhm |
| 2015-12-02 | Move port picking away from in_pcbbind() | Vincent Gross |
| 2015-12-02 | - hide PF internals to pf_unlink_divert_state() from in_pcb.c | Alexandr Nedvedicky |
| 2015-10-30 | Rename rtrequest1() to rtrequest(). | Alexander Bluhm |
| 2015-10-25 | Instead of doing the the if_get() dance for rt_missmsg(), change the | Alexander Bluhm |
| 2015-10-23 | ``rt_ifp'' cannot be NULL. | Martin Pieuchot |
| 2015-10-20 | At guenther's suggestion replace dnssocket() with a SOCK_DNS flag on | Theo de Raadt |
| 2015-10-19 | Stop checking for RTF_UP directly, call rtisvalid(9) instead. | Martin Pieuchot |
| 2015-10-19 | deduplicate in[6]_pcbbind() port scan loop. | Vincent Gross |
| 2015-10-18 | Add two new system calls: dnssocket() and dnsconnect(). This creates a | Theo de Raadt |
| 2015-10-09 | Rename tame() to pledge(). This fairly interface has evolved to be more | Theo de Raadt |
| 2015-09-22 | Remove inpt_lastport from struct inpcbtable, use local variables | Vincent Gross |
| 2015-09-11 | Convert _TM_ flags to TAME_ flags, collapsing the entire mapping | Theo de Raadt |
| 2015-09-11 | Stricter checks on sockaddr content when binding PF_INET sockets. | Vincent Gross |
| 2015-09-11 | Only include <sys/tame.h> in the .c files that need it | Philip Guenther |
| 2015-09-09 | if_put after you if_get | David Gwynne |
| 2015-09-01 | Replace sockaddr casts with the proper satosin(), ... calls. | Alexander Bluhm |
| 2015-08-22 | Move to tame(int flags, char *paths[]) API/ABI. | Theo de Raadt |
| 2015-08-19 | Convert all calls to rtrequest1() and the following error check | Alexander Bluhm |
| 2015-07-19 | tame(2) is a subsystem which restricts programs into a "reduced feature | Theo de Raadt |
| 2015-07-15 | m_freem() can handle NULL, do not check for this condition beforehands. | Theo de Raadt |
| 2015-04-16 | remove unfinished/unused support for socket-attached ipsec-policies | Markus Friedl |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-02-10 | bzero -> memset and unify sizeof() usage (no space). | Claudio Jeker |
| 2015-02-10 | Nuke sin_zero before passing it on down into the ifa_ifwithaddr() that | Claudio Jeker |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
