summaryrefslogtreecommitdiff
path: root/usr.sbin/ntpd
AgeCommit message (Expand)Author
2016-12-05Use the stack to hold the constraint child process variables instead ofRafael Zalamena
2016-12-01Remove unused variable which was leaking memory, and while here remove 2 otherRicardo Mestre
2016-10-18Check for EAGAIN on imsg_flush() return otherwise we might be failingRafael Zalamena
2016-10-18Save the constraint process pid by getting the start_child() return value,Rafael Zalamena
2016-10-12copy updated log.c from vmd: for correctness, save errno when doingReyk Floeter
2016-10-03Fix a possible bug that will happen with dup2() when oldd == newd. In thatRafael Zalamena
2016-09-26Teach ntpd(8) constraint process to use exec*() instead of just forking,Rafael Zalamena
2016-09-26Teach ntpd(8) how to use socket status to shutdown the daemon. While atRafael Zalamena
2016-09-14Teach ntpd(8) how to fork+exec.Rafael Zalamena
2016-09-14Add clarifications ("comments") to three places where it wasn'tReyk Floeter
2016-09-14Fix copyright disclaimer in util.c.Reyk Floeter
2016-09-03Remove the oh so funny "LOSS OF MIND" from the diclaimer that was notReyk Floeter
2016-08-27Pull in <sys/time.h> for struct timespec, timeval, or clockratePhilip Guenther
2016-07-13Adjust existing tls_config_set_cipher() callers for TLS cipher groupJoel Sing
2016-06-01ntpd is too aggressive about retrying constraint connections. ThisTheo de Raadt
2016-05-21Harden TLS for ntpd constraints - stop disabling server name verification,Joel Sing
2016-05-06Unconfuse things by renaming variables to match their contents.Joel Sing
2016-05-02prepare userland for removing chroot(2) from allowed syscalls under pledge(2).Sebastien Marie
2016-03-27Rename session_socket_blockmode() to session_socket_nonblockmode(),Kenneth R Westerback
2016-03-05According to RFC7231, section 7.1.1.1, the HTTP date header supportsChristian Weisgerber
2016-02-02Remove setproctitle() for the parent process. Because rc.d(8) uses processStuart Henderson
2016-01-27Don't attempt to kill() the constraint in the wrong process. TheReyk Floeter
2016-01-27update ntpd log initialization to work like relayd, fix debug log levelsBrent Cook
2016-01-11sneaky whitespace snuck in againTheo de Raadt
2015-12-29Don't assume fprintf() will set the FILE * error condition.Todd C. Miller
2015-12-19No need for an extra log.hReyk Floeter
2015-12-19Switch and sync to the log.c variant from httpd/relayd/iked/snmpd/vmd.Reyk Floeter
2015-12-19Move log_sockaddr() to from log.c to util.c as it is a local additionReyk Floeter
2015-12-05EAGAIN handling for imsg_read. OK henning@ benno@Claudio Jeker
2015-11-24Cache values from getpwnam() done at initialization, which need to beTheo de Raadt
2015-11-20use RMS for jitter. we're linking with enough libraries that libm is tiny.Ted Unangst
2015-11-19Simplify all instances of get_string() and get_data() using malloc() andmmcc
2015-11-17fix memory leak; from David CARLIERTheo de Raadt
2015-10-31fully revert some parts introduced with the original server rtable support,Christian Weisgerber
2015-10-30drop unused define; ok reyk@Christian Weisgerber
2015-10-30Remove support for sending status reports to syslog on SIGINFO;Reyk Floeter
2015-10-25the DNS process was not discarding & redirecting stdin/out/err toTheo de Raadt
2015-10-23Rather than re-opening the driftfile to write, keep it open; rewindingTheo de Raadt
2015-10-23Allowing upstream servers of ntp being in multiple routing tables isPeter Hessler
2015-10-12Move execution of the constraints from the ntp to the parent process.Reyk Floeter
2015-10-10pledge "dns rw" is not a reliable pattern. This means malloc() and otherTheo de Raadt
2015-10-09the ntp engine can run with "stdio inet proc". For many reasons,Theo de Raadt
2015-10-09Once the constraint engine process is running, it only needsTheo de Raadt
2015-10-09Change all tame callers to namechange to pledge(2).Theo de Raadt
2015-10-05this process deserves -fstack-protector-allTheo de Raadt
2015-10-03the ntp dns process only needs tame "dns rw" to operate. at least,Theo de Raadt
2015-10-03In the ntpctl(1) case, after it has connect()'d to ntpd we can tame "stdio"Theo de Raadt
2015-09-10fix type and return check for tls_read/write.Bob Beck
2015-09-10fix after libtls api changesBob Beck
2015-09-09Fix memory leak in error path when max length exceeded.Todd C. Miller