summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2017-07-19Don't recommend using /var/vmm for VM images.Mike Larkin
Discussed with deraadt
2017-07-19Update vmd man page to describe we have more processes running (aside fromMike Larkin
one per VM plus "one more")
2017-07-18Stop automatically regenerating gap.o (and hence linking a new kernel)Theo Buehler
whenever make is issued. Only do this when there are actual source changes below /sys. This restores the behavior prior to the KARL implementation. Problem noticed and patiently explained by mpi implementation with a lot of help from espie ok mpi, espie, deraadt
2017-07-15consistent case;Jason McIntyre
2017-07-15Add vmctl send and vmctl receivepd
ok reyk@ and mlarkin@
2017-07-13man pages with pseudo synopses which list filenames end up creatingJason McIntyre
very ugly output in man -k; after some discussion with ingo, we feel the simplest fix is to remove such SYNOPSIS sections: the info is hardly helpful at page top, is contained already in FILES, and there are sufficiently few that just zapping them is simple; ok schwarze, who also helpfully ran things through a build to check output;
2017-07-13add an option to listen to an address other than localhost,Ted Unangst
upgrading to a mini recursive resolver for small networks.
2017-07-13Simplify usage and man page synopsis after removal of prefix list andFlorian Obser
default router flags. Pointed out and diff from jcm@, OK me While reviewing the diff I stumbled upon the H flag, which is now useless, too. jmc suggested that I commit his diff and zap H at the same time.
2017-07-12Log when we have finished pushing users and groupsJeremie Courreges-Anglas
Helps people testing new configurations. From Kurt Mosiejczuk
2017-07-12Useless includeJeremie Courreges-Anglas
from Matthew Martin
2017-07-12Consistently use the variable "ttl" for get/setsockoptJeremie Courreges-Anglas
ok benno@ on an earlier version, input from Kapetanakis Giannis
2017-07-12Remove defunct code, the kernel no longer providesFlorian Obser
ICMPV6CTL_ND6_DRLIST and ICMPV6CTL_ND6_PRLIST sysctls since it no longer tracks that information. We can no longer flush or list the prefix list or the default router list. Pointed out by & OK mpi
2017-07-12errno is not set, use log_warnxFlorian Obser
OK benno
2017-07-12replaceFlorian Obser
log_warnx("foo"); exit(1); with fatalx("foo); OK benno
2017-07-12Bring over fatal{,x} from bgpd so that we can have format strings.Florian Obser
OK benno
2017-07-12Don't clobber errno, we want to log_warn what went wrong.Florian Obser
OK benno, millert
2017-07-11Correctly set ttl for IPv4 and IPv6.Florian Obser
Problem noted and fix from Kapetanakis Giannis, thanks! Input & OK jca.
2017-07-11The config option is called "no splice", the parser rejects "nosplice".Alexander Bluhm
2017-07-11Handle DHCPINFORM from clients behind a DHCP relay.Reyk Floeter
The dhcpinform() function has assumed that ciaddr matches the packet's IP source address and didn't consider a relay, such as dhcrelay(8) - indicated by giaddr, has forwarded the request. Tested by landry@ OK krw@
2017-07-11Remove "listen secure" syntax from smtpd.conf. It's broken since a couple ofMartin Natano
months and noone complained. Users should replace existing "listen secure" directives with two separate "tls" and "smtps" listeners. i.e. a line like listen on $iface tls pki $pki has to be replaced with listen on $iface tls pki $pki listen on $iface smtps pki $pki Relaying syntax is not affected by this change. suggested by eric ok gilles
2017-07-10remove misc. depend and yacc nits that no longer matter.Marc Espie
okay millert@
2017-07-09have bsd.prog.mk/bsd.lib.mk generate .y -> .c/.h rules without intermediateMarc Espie
files. This fixes up parallel builds in the default case. FreeBSD does something similar. okay millert@
2017-07-09vmd/vmctl: Add ability to pause / unpause vmspd
With help from Ashwin Agrawal ok reyk@ mlarkin@
2017-07-08fix typo in commentTheo Buehler
from Hiltjo Posthuma
2017-07-07Handle carp(4) as HTYPE_ETHER.Reyk Floeter
This fixes "dhcrelay -i carpX" that used to work when dhcrelay didn't care. Reported and tested by Kapetanakis Giannis bilias at edu.physics.uoc.gr
2017-07-06fix RCS Id; found with mandoc -TlintIngo Schwarze
2017-07-06delete duplicate RCS IDs; found with mandoc -TlintIngo Schwarze
2017-07-06/tmp/cvsa9y4jmMarc Espie
2017-07-06vmd: increase the max number of disks from 2 to 4. Requires kernel rebuildMike Larkin
as a struct passed to vmm has changed size. ok deraadt, pd
2017-07-05forgot to commit this oneMarc Espie
2017-07-05Don't stop logging to stderr when running in foreground with -d.Reyk Floeter
Pointed out by Kapetanakis Giannis
2017-07-05Some documentation improvements:Martin Pieuchot
- Fix TLS s/server/client/ - Use 'remote loghost' consistently, even if it's not clear to which endpoint this correspond. - Replace 'forwarding' by 'sending' to remove the ambiguity about the inserted hostname. - Do not use the word 'server' with 'socket' to avoid confusion with a TLS server. - Prefer 'senders' than 'clients' when it comes to spoofing, to reduce one usage of the word 'client. ok jmc@, bluhm@
2017-07-04Fix the only remaining mandoc(1) ERROR in the base system.Ingo Schwarze
(Can't resist the temptation to commit 'cause it allows such a cute commit message.)
2017-07-04delete tokens that have never been used.Sebastian Benoit
From Rob Pierce ok yacc and gcc
2017-07-04rename fetch_state() to fetch_ifstate(). The word "state" is a bitSebastian Benoit
overloaded in this daemon. From Rob Pierce
2017-07-04Fix some variable alignment whitespace.Sebastian Benoit
From Rob Pierce
2017-07-04if configured, set the ttl (IPV6_UNICAST_HOPS) for ipv6 tcp checks.Sebastian Benoit
From Kapetanakis Giannis, thanks. ok florian@
2017-07-04Detect upfront whether we have a particular set installed and if not, do *not*Antoine Jacoutot
list a matching syspatch as available. This will allow to skip the syspatches for the X sets for example if we don't have them installed. If we do install these sets a posteriori, then syspatch *will* list the X syspatches if there are any. req. by many ok robert@
2017-07-04make relayd not crash in relay_udp_server() when using a dns relay.Sebastian Benoit
needs revisiting. From Rivo Nurges, thanks. ok florian@
2017-07-04It does not make sense to use ioctl(FIONREAD) with TLS as libtlsAlexander Bluhm
has already read the buffer from kernel to user land. I have blindly copied this code from libevent for syslogd(8) TLS, remove it together with the bug. It caused hangs in ldapd(8). report, analysis, testing, OK Seiya Kawashima, Robert Klein, gsoares@
2017-07-04consistently use the evtimer wrappers around the connection timeout.Florian Obser
this is instead of setting the timeout up with event_set and event_add, but removing it with evtimer_del. this uses evtimer_set and evtimer_add. prompted by dlg's commit to identd OK dlg
2017-07-04Include stdarg.h explicitly instead of relying on event.h to bring it in.Florian Obser
prompted by dlg's commit to identd OK dlg
2017-07-04consistently use the evtimer wrappers around the connection timeout.David Gwynne
this is instead of setting the timeout up with event_set and event_add, but removing it with evtimer_del. this uses evtimer_set and evtimer_add.
2017-07-04include stdarg.h explicitly instead of relying on event.h to bring it in.David Gwynne
2017-07-04properly adjust the ttl of replies instead of freezing them in timeTed Unangst
2017-07-03no need to generate y.tab.h if nothing uses it, set YFLAGS to nothingMarc Espie
instead of CLEANFILES += y.tab.h okay millert@
2017-07-03Remove obvious clear_config() comments and misleading state_change() comments.Sebastian Benoit
Also relocate do_action() calls for the init block from change_state() to occur with the corresponding do_action() calls for the body block. From Rob Pierce ok stsp@ and i
2017-07-03don't bother caching invalid or very short lived responsesTed Unangst
2017-07-03check that a cachehit hasn't expired before using it.Ted Unangst
2017-07-02Second diff to rename additional "always" variable in struct ifsd_config.Sebastian Benoit
from Rob Pierce. Requested by stsp@