summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2011-06-29make -u flag per-device similarly to -a and -wAlexandre Ratchov
2011-06-27for mount_ntfs, fix an error in previous; for tr, fix an error of theJason McIntyre
same variety...
2011-06-27remove two forgotten debug printf()sAlexandre Ratchov
2011-06-27Display the CPU usage when -ddddd is used, ie the time spent onAlexandre Ratchov
calculations compared to the time spend on sleeping in poll().
2011-06-27expose audio client names through sysex messages, this way anyAlexandre Ratchov
midi client could determine which volume knob corresponds to which client. Such sysex messages are ignored by hardware or software that don't understand them
2011-06-27PANE_FREEZE doesn't do anything anymore, so remove it.Nicholas Marriott
2011-06-26no mcdTed Unangst
2011-06-25DESTDIR handling does not belong here. This is built live.Theo de Raadt
ok otto
2011-06-25some improvements from Cl??ment B??sch; ok teduJason McIntyre
2011-06-25add CAVEATS section explaining some of the differences between thisJasper Lievisse Adriaanse
and the fd.o implementation feedback/ok jmc@
2011-06-23ignore EINTR errors from poll()Damien Miller
2011-06-23switch to installing source manuals (base part)Ingo Schwarze
discussed with lots of people, tested by naddy@, "move fast" deraadt@
2011-06-23Don't check dev/ramdisk.h for ioctl(2) commands as it doesn't existMatthew Dempsky
anymore. Noticed by and ok claudio@
2011-06-23Add a couple of extra xterm-style keys that gnome terminal provides,Nicholas Marriott
from Dustin Kirkland.
2011-06-23rename sandbox.h => ssh-sandbox.h to make things easier for portableDamien Miller
2011-06-22$OpenBSD$ makersDamien Miller
2011-06-22hook up a channel confirm callback to warn the user then requested X11Damien Miller
forwarding was refused by the server; ok markus@
2011-06-22introduce sandboxing of the pre-auth privsep child using systrace(4).Damien Miller
This introduces a new "UsePrivilegeSeparation=sandbox" option for sshd_config that applies mandatory restrictions on the syscalls the privsep child can perform. This prevents a compromised privsep child from being used to attack other hosts (by opening sockets and proxying) or probing local kernel attack surface. The sandbox is implemented using systrace(4) in unsupervised "fast-path" mode, where a list of permitted syscalls is supplied. Any syscall not on the list results in SIGKILL being sent to the privsep child. Note that this requires a kernel with the new SYSTR_POLICY_KILL option. UsePrivilegeSeparation=sandbox will become the default in the future so please start testing it now. feedback dtucker@; ok markus@
2011-06-22reuse the multistate option arrays to pretty-print options for "sshd -T"Damien Miller
2011-06-21Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudioMike Belopuhov
2011-06-20Make -aoff option apply to MIDI ports (-q) as well, ensuring the deviceAlexandre Ratchov
stays closed also if -q is used. As we're at it, add -a to midicat so it behaves like aucat.
2011-06-20fix a segfault found by jasper@Marc Espie
ok miod@, otto@, jasper@
2011-06-20Switch binary file detection from !(isprint() || isspace()) to checkingStefan Sperling
for embedded NULs. Matches GNU and FreeBSD grep, and avoids problems with e.g. latin1-encoded files being treated as binary in the UTF-8 locale once grep calls setlocale() (which it does not, yet). OK millert@ tedu@
2011-06-20more fancy kdump output, mostly from FreeBSD; ok deraadt@ tedu@Otto Moerbeek
2011-06-20Teach lint about %F, %A, %a format specifiers.Martynas Venckus
OK millert@.
2011-06-20Revert rev 1.21 which is superceded by 1.22Todd C. Miller
2011-06-20Prevent lint from warning about %m in C format strings. QuietsTodd C. Miller
false positives when check syslog(3) format strings that use %m. OK tedu@ martynas@
2011-06-20- Adjust Getopts() hash to align options with values.Jasper Lievisse Adriaanse
- Tweak comment about static libs.
2011-06-20- implement --static, and preserve dependency order,Jasper Lievisse Adriaanse
instead of search order when printing the libraries required for linking. this now passes our --static regress tests and matches fd.o
2011-06-18the %m argument as used by syslog does not eat an argument, so skip over it.Ted Unangst
ok martynas
2011-06-18Have -T[x]html print out the link target for `Lk'Ingo Schwarze
if no link title is provided. Based on a patch by Tim van der Molen, tweaked by kristaps@.
2011-06-18Warn and stop processing if the format string ends with an backslash.Philip Guenthe
From Andres Perera (andres.p at zoho.com), ok otto@, millert@
2011-06-17setproctitle for a mux master that has been gracefully stopped;Damien Miller
bz#1911 from Bert.Wesarg AT googlemail.com
2011-06-17factor out multi-choice option parsing into a parse_multistate labelDamien Miller
and some support structures; ok dtucker@
2011-06-17the protocol version should be unsigned; bz#1913 reported by mb ATDamien Miller
smartftp.com
2011-06-17make the pre-auth privsep slave log via a socketpair shared with theDamien Miller
monitor rather than /var/empty/dev/log; ok dtucker@ deraadt@ markus@
2011-06-16Prototypes of functions generated by mksubr.Otto Moerbeek
2011-06-16Local changes to make this work on OpenBSD. Not used functions disabled forOtto Moerbeek
now.
2011-06-16mksubr from freebsd, to be used to generate flags to name translationOtto Moerbeek
for kdump. Added missing license to the file, with the kind permission of the author David Kirchner. Not used yet. ok miod@
2011-06-16- finally unconfuse emacs by using parentheses for split()Jasper Lievisse Adriaanse
2011-06-16fix printrequiresprivate-mode name in a testJasper Lievisse Adriaanse
2011-06-15- only process Requires.private if needed (--cflags, --static or ↵Jasper Lievisse Adriaanse
--print-requires-private) - process Requires.private before processing Requires, order matters these are first steps towards a working --static. static doesn't work yet as libraries get re-ordered in a funky way.
2011-06-14make sure key_parse_public/private_rsa1() no longer consumes its input buffer.Markus Friedl
fixes ssh-add for passphrase-protected ssh1-keys; noted by naddy@; ok djm@
2011-06-14exit if there is an unknown option; from FreeBSDChristian Weisgerber
ok millert@
2011-06-12tweak the virtual pkg-config configJasper Lievisse Adriaanse
2011-06-12- rename pr_* to say_* to be consistent with perl (prompted by espie@)Jasper Lievisse Adriaanse
- move actual printing to STDERR to one place, this makes it easier to: - honor $mode{estdout} (--errors-to-stdout) which was silently ignored untill now
2011-06-12- Rename $D to $mode{debug} for consistency.Jasper Lievisse Adriaanse
- Factorize lots of prints into a common debug/error subroutine. This reduces unneeded clutter when testing for $mode{printerr} or $mode{debug}. Will be adjusted further when fixing --errors-to-stdout
2011-06-12- fix commentJasper Lievisse Adriaanse
- style nit
2011-06-12- fix version comparison by adjusting the regex which decides aboutJasper Lievisse Adriaanse
what is an operator and what is a valid version. (all version comparison regress tests pass now) - add back 'rc' support ok sthen@
2011-06-11- add check for empty filesJasper Lievisse Adriaanse
- only do the above check, and print an error if we lack a required field if $mode{printerr}. - put code setting $D together