summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2018-04-19Tweak the description of -l:Ingo Schwarze
Avoid the misunderstanding that the essential purpose of -l is similar to the purpose of the -a option in mandoc(1), which is not the point: the fact that -l implies -a is merely a minor detail. The point of -l is to make man(1) behave like mandoc(1). Move the mention of -a to the end to de-emphasize it. Nate Bargmann reported that this seriously confused him, and i can see why.
2018-04-19Compatibility with man-db:Ingo Schwarze
In page name mode (= man(1) default mode), also try to interpret names containing slashes as absolute or relative file names. Missing feature reported by Nate Bargmann on <groff at gnu dot org>, and the man-db maintainer Colin Watson <cjwatson at debian dot org> explained to me how this is supposed to work.
2018-04-18Change how display-message uses the client. Originally it was onlyNicholas Marriott
intended as the target client where the message should be displayed but at some point (perhaps when -p was added), it was used for format expansion too. This means it can get a bit weird where you have client formats expanding for a client with a different current session than the target session. However, it is nice that display-message can be used to show information about a specific client. So change so that the -c client will be used if the session matches the target session (-t or default), otherwise the best client will be chosen.
2018-04-18Include source function name in grid_check_y logging.Nicholas Marriott
2018-04-18Fix || example.Nicholas Marriott
2018-04-16Disable SSH2_MSG_DEBUG messages for Twisted Conch clients withoutDamien Miller
version numbers since they choke on them under some circumstances. https://twistedmatrix.com/trac/ticket/9422 via Colin Watson Newer Conch versions have a version number in their ident string and handle debug messages okay. https://twistedmatrix.com/trac/ticket/9424
2018-04-14don't free the %C expansion, it's used later for LocalCommandDamien Miller
2018-04-13Use TIOCGWINSZ to reduce the default -Owidth during interactive useIngo Schwarze
on terminals narrower than 79 columns and the default -Oindent on terminals narrower than 66 columns. Requested by and feedback from pirofti@; mpi@ and juanfra@ also like the general direction.
2018-04-13Make sure that mandoc only goes into UTF-8 mode if the user reallyIngo Schwarze
selected UTF-8, not some other multibyte locale. This obviously makes no difference on OpenBSD but improves portability. Issue reported by <Nakayama at NetBSD> via wiz@.
2018-04-13preserve comments before .Dd and .TH (typically Copyright and license)Ingo Schwarze
in full HTML output, but not with -Ofragment, e.g. in man.cgi(8); suggested by Thomas Klausner <wiz at NetBSD>
2018-04-13mg tries to write backups to the wrong directory when run under aFlorian Obser
different effective user, i.e. when invoced via su and backup-to-home-directory is enabled. Problem pointed out and diff provied by Lucas Gabriel Vuotto <lvuotto92 () gmail ! com>, thanks! Subsequently slacked on for nearly a year by yours truly. Then remembered when Han Boetes <hboetes () gmail ! com> came up with a similar diff because of a problem report by Mark Willson where it turned out that getlogin(2) is not very portable. OK tb
2018-04-13notify user immediately when underlying ssh process dies;Damien Miller
patch from Thomas Kuthan in bz2719; ok dtucker@
2018-04-13Defend against user enumeration timing attacks.Darren Tucker
This establishes a minimum time for each failed authentication attempt (5ms) and adds a per-user constant derived from a host secret (0-4ms). Based on work by joona.kannisto at tut.fi, ok markus@ djm@.
2018-04-11preserve comments before .Dd when converting mdoc(7) to man(7)Ingo Schwarze
with mandoc -Tman; suggested by Thomas Klausner <wiz at NetBSD>
2018-04-11Stop telling patch(1) runs ed(1).Vadim Zhukov
okay tb@ and benno@
2018-04-11Allow no client for rename-session, from Ryan Freeman.Nicholas Marriott
2018-04-10Delete the description of the argument of the "ciphers" commandIngo Schwarze
because it was (1) woefully incomplete, (2) partially outdated and wrong, (3) in parts imprecisely worded and hard to understand, (4) excessively technical for a section 1 manual, (5) of excessive size for this particular page, (6) and didn't belong here in the first place because it essentially tried to document a C API - SSL_CTX_set_cipher_list(3), which is now documented, so point to it.
2018-04-10A couple of fixes to the : form of SGR. Apparently there is an extraNicholas Marriott
argument that nobody knew about, so skip that if it exists. Also there are a bunch of useless optional arguments at the end, so ignore those.
2018-04-10print rtable for internet sockets unless it's the default; based on a diffStuart Henderson
from Peter J. Philipp but printing slightly differently to avoid the need for a flag. ok claudio@ bluhm@
2018-04-10Add x and X to choose-tree (with a confirmation prompt) to kill anNicholas Marriott
item. Suggested by Matt Zagrabelny.
2018-04-10typo: "anon's" -> "anons"Mike Larkin
ok jmc, krw, deraadt
2018-04-10Two new low-level roff(7) features:Ingo Schwarze
* .nr optional third argument (auto-increment step size) * \n+ and \n- numerical register auto-increment and -decrement bentley@ reported on Dec 9, 2013 that lang/sbcl(1) uses these.
2018-04-10lots of typos in comments/docs. Patch from Karsten Weiss after checkingDamien Miller
with codespell tool (https://github.com/lucasdemarchi/codespell)
2018-04-09don't kill ssh-agent's listening socket entriely if we fail to accept aDamien Miller
connection; bz#2837, patch from Lukas Kuster
2018-04-09When accessing an undefined number register, define it to be zero, likeIngo Schwarze
the previous commit for strings and macros, only technically simpler. Desired behaviour also mentioned by Werner Lemberg in 2011. This diff adds functionality but is -21 +19 LOC. :-)
2018-04-09the UseLogin option was removed, so remove it here too.T.J. Townsend
ok dtucker
2018-04-09Using an undefined string or macro will cause it to be defined as empty.Ingo Schwarze
Observed by Werner Lemberg on Nov 14, 2011 and rotting on my TODO list ever since.
2018-04-08The assault on Dutschke happened in 1968.Theo Buehler
From Leah Neukirchen
2018-04-08tweak previous;Jason McIntyre
2018-04-07have libtool do libtool work, mainly work around exec limitations byMarc Espie
using ar @file construct. okay aja@
2018-04-07Remove unused pathnames.h header since patch was refactoring into not invokinganton
ed back in 2015; ok millert@ tb@ tobias@
2018-04-07tweak previous;Jason McIntyre
2018-04-06Print a 'p' flag for file descriptors that were opened after pledge(2).Alexander Bluhm
OK deraadt@
2018-04-06Allow "SendEnv -PATTERN" to clear environment variables previouslyDamien Miller
labeled for sendind. bz#1285 ok dtucker@
2018-04-06Fix link, from Eliran Gonen.Nicholas Marriott
2018-04-06relax checking of authorized_keys environment="..." options to allowDamien Miller
underscores in variable names (regression introduced in 7.7). bz2851, ok deraadt@
2018-04-06add a couple of missed options to the config dump; patch fromDamien Miller
Jakub Jelen via bz2835
2018-04-06ssh does not accept -oInclude=... on the commandline, the Include keywordDamien Miller
is for configuration files only. bz#2840, patch from Jakub Jelen
2018-04-05We don't offer CBC cipher by default any more. Spotted by RenaudDamien Miller
Allard (via otto@)
2018-04-05Do not use a non-portable .R man(7) macro. Neither groff nor theIngo Schwarze
heirloom-doctools support it. Work around the gap by using .BR with an empty first argument. This was noticed more than once in the past, but i always forgot to fix it.
2018-04-05use the portable \(lq and \(rq internally rather than \(Lq and \(RqIngo Schwarze
2018-04-05For .Do/.Dq, use the documented and portable \(lq and \(rqIngo Schwarze
character escape sequences rather than the undocumented and non-portable \(Lq and \(Rq. Bug reported by Tim L <darkxst at github> via Thomas Klausner <wiz at NetBSD>; see https://github.com/nih-at/libzip/pull/42
2018-04-04Update default IPQoS in ssh(1), sshd(8) to DSCP AF21 for interactive and CS1 ↵job
for bulk AF21 was selected as this is the highest priority within the low-latency service class (and it is higher than what we have today). SSH is elastic and time-sensitive data, where a user is waiting for a response via the network in order to continue with a task at hand. As such, these flows should be considered foreground traffic, with delays or drops to such traffic directly impacting user-productivity. For bulk SSH traffic, the CS1 "Lower Effort" marker was chosen to enable networks implementing a scavanger/lower-than-best effort class to discriminate scp(1) below normal activities, such as web surfing. In general this type of bulk SSH traffic is a background activity. An advantage of using "AF21" for interactive SSH and "CS1" for bulk SSH is that they are recognisable values on all common platforms (IANA https://www.iana.org/assignments/dscp-registry/dscp-registry.xml), and for AF21 specifically a definition of the intended behavior exists https://tools.ietf.org/html/rfc4594#section-4.7 in addition to the definition of the Assured Forwarding PHB group https://tools.ietf.org/html/rfc2597, and for CS1 (Lower Effort) there is https://tools.ietf.org/html/rfc3662 The first three bits of "AF21" map to the equivalent IEEEE 802.1D PCP, IEEE 802.11e, MPLS EXP/CoS and IP Precedence value of 2 (also known as "Immediate", or "AC_BE"), and CS1's first 3 bits map to IEEEE 802.1D PCP, IEEE 802.11e, MPLS/CoS and IP Precedence value 1 ("Background" or "AC_BK"). OK deraadt@, "no objection" djm@
2018-04-03Import regenerated moduli file.Darren Tucker
2018-04-01With malloc option J, the first realloc(3) in apply(1) would returnAlexander Bluhm
memory that is filled with junk only. Allocate the empty string with malloc(3) and initialize it explicitly with the NUL terminator. OK tb@ tobias@
2018-04-01update currency exchange rates;Jason McIntyre
2018-03-31Improve description of openssl(1) ciphers.Ingo Schwarze
* Remove -tls1 option which has no effect. * For -V, sort the fields in the order they are printed, and do not talk about key size restrictions, nothing like that is printed.
2018-03-30Updates to the description of "openssl ca" from OpenSSL.Ingo Schwarze
Some options were missing, some were in the wrong section (CRL-related or not), and there were some minor errors, typos, and omissions.
2018-03-30checked the content against the current version of OpenSSL openssl.pod;Ingo Schwarze
resulting fixes: markup of "command" below SYNOPSIS and links to the config file formats below SEE ALSO
2018-03-30Fix overflow in list value parsing.Tobias Stoeckmann
On 64 bit systems an integer overflow between strtol and int casting could occur, resulting in out of boundary writes. Using strtonum fixes this issue and leads to better error messages. ok schwarze