summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2016-07-15Fix previous: the mandocdb() prototype was already there, it justIngo Schwarze
hid among static functions, as noticed by tedu@ (my bad).
2016-07-15add missing prototypes, no code change;Ingo Schwarze
noticed by Christos Zoulas with -Wmissing-prototypes
2016-07-15Tweak output of environment logging.Nicholas Marriott
2016-07-15Log environment to new panes.Nicholas Marriott
2016-07-15Wrap some long lines and apply some static.Nicholas Marriott
2016-07-15Reduce the syslog level of some relatively common protocol eventsDarren Tucker
from LOG_CRIT by replacing fatal() calls with logdie(). Part of bz#2585, ok djm@
2016-07-15Don't update cells in each block of data read from a pane immediately,Nicholas Marriott
instead track them as change (dirty) and update them once at the end, saves much time if repeatedly writing the same cell. Also fix comparison of cells being equal in a few places (memcmp is not enough).
2016-07-15Instead of representing colours in several different forms with variousNicholas Marriott
cell flags, convert to use an int with flags marking 256 or RGB colours in the top byte (except in cells, which we don't want to make any bigger). From Brad Town.
2016-07-15Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)Damien Miller
command-line flag to allow simplified indirection through a SSH bastion or "jump host". These options construct a proxy command that connects to the specified jump host(s) (more than one may be specified) and uses port-forwarding to establish a connection to the next destination. This codifies the safest way of indirecting connections through SSH servers and makes it easy to use. ok markus@
2016-07-14make several program to use "chown" promise.Sebastien Marie
it allows chown(2) call to change the user or group on a file. - usr.bin/compress : aka gzip - usr.bin/mg : open a file for writing - usr.bin/sed : inplace editing - usr.bin/sort : if outfile equals one of the input files ok deraadt@ tb@ (and a reminder from Remi Locherer) warning: in order to use it, you must have a recent kernel with the new promise.
2016-07-13When matching a day in the month, make sure that the date is stillTodd C. Miller
in the month we are interested in after calling mktime(3). This fixes things like Sunday+5 for months where there is not a 5th Sunday and the 31st day in months with less than 31 days. From Andy Bradford
2016-07-13ross l richardson reports that an auto reply is no longer generatedJason McIntyre
on submission, so remove that sentence (correct me if this is wrong); while here replace some mandoc chars;
2016-07-13Adjust existing tls_config_set_cipher() callers for TLS cipher groupJoel Sing
changes - map the previous configuration to the equivalent in the new groups. This will be revisited post release. Discussed with beck@
2016-07-13Introduce RTF_MULTICAST and flag corresponding IPv6 routes as suchMartin Pieuchot
instead of abusing RTF_CLONING. Fix a leak reporeted by Aaron Riekenberg on misc@, ok sthen@
2016-07-12add "recvfd" to doas(1) for use with skey.Sebastien Marie
ok tb@ deraadt@
2016-07-11Make all components of the URI individually optional,Ingo Schwarze
independent of each other, as in: http://man.openbsd.org[/manpath][/mansec][/arch]/name[.sec] The restrictions in the past kept confusing people. Triggered by a question from RafaelNeves at gmail dot com.
2016-07-11Add missing "recvfd" pledge promise: Raf Czlonka reported ssh coredumpsTheo Buehler
when Control* keywords were set in ssh_config. This patch also fixes similar problems with scp and sftp. ok deraadt, looks good to millert
2016-07-11obsolete note about fascistloggin is obsolete. ok djm dtuckerTed Unangst
2016-07-10Fix a nasty typo that prevented .so links to gziped manualsIngo Schwarze
from working in the absence of a mandoc.db(5) database. Found the hard way by Svyatoslav Mishyn on Crux Linux.
2016-07-10Simplify the code and the server setup by deleting the pseudo-manpathIngo Schwarze
"mandoc" that was used for man.cgi(8) documentation and by assuming that the apropos(1) and man.cgi(8) manuals are simply installed in the default manpath. Even though man.cgi(8) is not installed by default when installing OpenBSD, it is easy to copy it into the default manpath used for man.cgi(8). Idea found when considering a question asked by wrant dot com.
2016-07-10rename variable for consistencyTed Unangst
2016-07-09Do not treat PATH_INFO as a complete path if it doesn't containIngo Schwarze
a manpath. For example, this makes http://man.openbsd.org/mandoc work as expected. Bug reported by tb@, reminded by Svyatoslav Mishyn.
2016-07-09getopt(3) is declared in <unistd.h>, and <getopt.h> is not needed;Ingo Schwarze
from Joerg Sonnenberger via Thomas Klausner, NetBSD.
2016-07-08ISO C99 7.19.2.5 doesn't like mixing putchar(3) and putwchar(3) onIngo Schwarze
the same stream, and actually, it fails spectacularly on glibc. Portability issue pointed out by Svyatoslav Mishyn <juef at openmailbox dot org> after testing on Void Linux.
2016-07-08POSIX requires that a process calling tcsetpgrp(3) from the backgroundIngo Schwarze
gets a SIGTTOU signal. In that case, do not stop. Portability issue found while testing on commercial Solaris 9/10/11. Thanks to opencsw.org for providing me with a testing environment.
2016-07-08Pass errret pointer to setupterm() to prevent setupterm()Todd C. Miller
from calling exit() when given an unknown terminal type. From Anton Lindqvist, who also upstreamed the fix.
2016-07-08Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms.Damien Miller
Previously we were computing the MAC, decrypting the packet and then checking the MAC. This gave rise to the possibility of creating a side-channel oracle in the decryption step, though no such oracle has been identified. This adds a mac_check() function that computes and checks the MAC in one pass, and uses it to advance MAC checking for EtM algorithms to before payload decryption. Reported by Jean Paul Degabriele, Kenny Paterson, Torben Hansen and Martin Albrecht. feedback and ok markus@
2016-07-07sync with mdocml.bsd.lv: mention httpd(8) and slowcgi(8)Ingo Schwarze
2016-07-07Revert previous since the libtls change has been reverted.Joel Sing
2016-07-07biff, mesg, vi: only consider ACCESSPERMS for setting tty mode.Sebastien Marie
it explicitly removes any S_ISUID|S_ISGID|S_ISTXT bits, instead of letting pledge(2) silenciously remove them. ok beck@ deraadt@
2016-07-07tmux: only consider ACCESSPERMS for setting mode on socket_path.Sebastien Marie
it explicitly removes any S_ISUID|S_ISGID|S_ISTXT bits, instead of letting pledge(2) silenciously remove them. ok nicm@ beck@ deraadt@
2016-07-06Remove manual file loading (now that libtls does this for us) and adjustJoel Sing
pledge to match. Also use tls_config_error() to provide friendlier error messages.
2016-07-05Modify code added in rev 1.30 to use the correct variable instead of aJonathan Gray
different uninitialised one. ok martijn@
2016-07-04DEBUGLIBS has been broken since the gcc4 switch, so delete it. CFLAGSPhilip Guenther
contains -g by default anyway problem noted by Edgar Pettijohn (edgar (at) pettijohn-web.com) ok millert@ kettenis@ deraadt@
2016-07-04Use fstatat() instead of crafting a filename to use with stat()Philip Guenther
ok millert@
2016-07-04The -I flag is documented but not implemented. This fixes that andTodd C. Miller
also honors the -I flag from ci/co when prompting like GNU RCS. OK jca@
2016-07-02do not uppercase "hop limit";Jason McIntyre
2016-07-01Update and simplify the documentation of the -s option,Ingo Schwarze
which was forgotten when implementing the new man.conf(5) format. The outdated information was originally pointed out by Andy Bradford <amb dash openbsd at bradfords dot org> on misc@. OK jmc@
2016-07-01update currency exchange rates;Jason McIntyre
2016-07-01Simplify IP proto-specific sockopt error handling.Brent Cook
This makes error messages more specific and simplifies masking compatible sections for the portable version. ok beck@
2016-06-30Use CLOCK_UPTIME instead of CLOCK_MONOTONIC, as the later makes jumpsAlexandre Ratchov
during suspend/resume cycles which triggers watchdog time-outs and in turn prevents sndiod from resuming.
2016-06-30Explicitly check for 100% completion to avoid potential floating pointDarren Tucker
rounding error, which could cause progressmeter to report 99% on completion. While there invert the test so the 100% case is clearer. with & ok djm@
2016-06-29If /tmp/vi.recover doesn't exist, don't create it. Warn onceTheo Buehler
that it doesn't exist, afterwards fail silently. ok millert
2016-06-29sort the -o list;Jason McIntyre
2016-06-28Add -M and -m options to specify the outgoing and incoming minimum TTLJeremie Courreges-Anglas
Req by and ok blumh@
2016-06-28If an error path if close() is called, save errno so that original errorTheo de Raadt
is shown by errx ok millert krw
2016-06-27Be more careful initializing and tracking socket s through main, this isTheo de Raadt
so complicated that a future refactoring could easily in introduce a bug. ok millert krw
2016-06-27minor tweaks; ok teduJason McIntyre
2016-06-27somehow nopass snuck onto the :wheel example. i think it's better without.Ted Unangst
2016-06-27revise environment handling.Ted Unangst
Add a setenv keyword for manipulating the environment. keepenv now means only retain everything. (for one release, the old use of keepenv will still work.) Allow setting variables to new or existing values, and also removing vars when keepenv is used. ok djm martijn tb