summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Expand)Author
2015-10-17KNFGilles Chehade
2015-10-17our strip() function should use isspace()Gilles Chehade
2015-10-17Tighten up snmpd's control socket: do not allow users to terminate theReyk Floeter
2015-10-17smtpd starts rather robustly with a gigantic pledge request group (keepTheo de Raadt
2015-10-17route6d pledges to use only "stdio rpath wpath cpath inet route mcast"Jeremie Courreges-Anglas
2015-10-17don't need fcntl for non blocking socket, just ask for it upfrontTed Unangst
2015-10-16use daemon(), jca had the same diff in his treeTheo de Raadt
2015-10-16pledge "stdio rpath wpath cpath getpw fattr flock"Theo de Raadt
2015-10-16pledge "stdio rpath wpath cpath fattr proc exec"Theo de Raadt
2015-10-16pledge "stdio rpath wpath cpath proc exec".Theo de Raadt
2015-10-16Use SSL_get_version() not SSL_get_cipher_version(); the former gives the TLSStuart Henderson
2015-10-16add flock to pledge request, needed by delivery_filenameGilles Chehade
2015-10-16Unbreak route6d.Jeremie Courreges-Anglas
2015-10-16save some file descriptors. instead of a pipe, use kevent to watch parentTed Unangst
2015-10-16naddy would like the child to exit when the parent dies.Ted Unangst
2015-10-16Drop usage of TMPDIR.Antoine Jacoutot
2015-10-16life is simpler if all requests go in the fifo, and then just remove themTed Unangst
2015-10-16deraadt tells me i'm supposed to check if connect() actually worked.Ted Unangst
2015-10-16two phase handling for tcp so that slow connects don't stall the processTed Unangst
2015-10-16Check file sizes only for regular files. The current code breaks savecoreTobias Stoeckmann
2015-10-16Pledge the syslogd privsep process with "stdio rpath wpath cpathAlexander Bluhm
2015-10-16save request length in cache. naddy noticed we weren't getting any hits.Ted Unangst
2015-10-16ugly white spaceTheo de Raadt
2015-10-16Merge nlist out of boundary access fix with other nlist implementations.Tobias Stoeckmann
2015-10-16Implement real "flock" request and add it to userland programs thatTodd C. Miller
2015-10-16Pledge support for the parent/resolver in identd(8).Doug Hogan
2015-10-16fine tune the logging some moreTed Unangst
2015-10-16simplify logging functions. once a daemon, always a daemonTed Unangst
2015-10-16safety check that we're dealing with the filter we expectTed Unangst
2015-10-16most things should be staticTed Unangst
2015-10-16exit(1) is better for the impossible conditionTed Unangst
2015-10-15it is perhaps better style to not call close() on -1, even if harmlessTed Unangst
2015-10-15make sure req is zeroed in tcp caseTed Unangst
2015-10-15better memory handling of the request/cache chainTed Unangst
2015-10-15do not insert entry into cache until it's fully formedTed Unangst
2015-10-15doh, not all requests are the same size. check len first.Ted Unangst
2015-10-15assert is the wrong toolTed Unangst
2015-10-15the inet sockets don't work well with inet6 addrs. pick family from addr.Ted Unangst
2015-10-15everybody can build reboundTed Unangst
2015-10-15introduce logerr, since most logging is followed by exitTed Unangst
2015-10-15don't allow NSD to pick up libevent from /usr/local if the libevent2Stuart Henderson
2015-10-15now with _rebound user, we can try a little harder at privdropTed Unangst
2015-10-15make the HUP interlocking in the parent work better.Ted Unangst
2015-10-15trivial KNFTheo de Raadt
2015-10-15In syslogd replace the dprintf() macro with a logdebug() functionAlexander Bluhm
2015-10-15just a space in usage, from deraadtTed Unangst
2015-10-15add a hint about the config file, until it changesTed Unangst
2015-10-15child can be pledged down a bit to just sockets and ioTed Unangst
2015-10-15import rebound, a lightweight dns proxy, for further polishingTed Unangst
2015-10-15Add an extra argument to bootstrap() to allow for a limited overlap between anMiod Vallat