Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-11-10 | Extend documentation a bit. It'll probably need some adjustments soon. | Antoine Jacoutot | |
2016-11-10 | Simplify checkfs() and fix read-only/remote fs detection. | Antoine Jacoutot | |
2016-11-10 | Fix tcp ip ttl / minttl on IPv6 sockets. | Jeremie Courreges-Anglas | |
ok florian@ | |||
2016-11-10 | Extend mtree(8) comment. | Antoine Jacoutot | |
2016-11-10 | Remove redundant check. | Antoine Jacoutot | |
2016-11-10 | Create the bsd rollback kernel in create_rollback() (it is contained in | Antoine Jacoutot | |
the rollback tarball anyway but that's impractical if the new bsd does not boot ;-)). While here, make sure /bsd actually exists before saving it. | |||
2016-11-10 | update reference to the RFC now numbered 7606 | Peter Hessler | |
reminded by jmc@ | |||
2016-11-10 | properly check if large-community was set before | Peter Hessler | |
reported by Job Snijders | |||
2016-11-10 | draft-ietf-idr-optional-transitive-00 became RFC 7606 | Peter Hessler | |
changes from the draft to the RFC: - PARTIAL flag is no longer considered protection - for some attrs, a length of 0 is invalid OK florian@ | |||
2016-11-10 | Sync bsize and fsize defaults with newfs. | Martin Natano | |
2016-11-10 | Remove the unused cpg field from ffs_opt_t. | Martin Natano | |
2016-11-09 | Improve source IP address handling. | Jeremie Courreges-Anglas | |
- send replies using a source address equal to the destination address of queries, using IP_SENDSRCADDR. This help in multihomed setups and can remove the need to explicitely configure a bind address. - config knob to set the source address of packets sent to trap receivers. "trap receiver" gains an optional "source-address" setting. Source address issues reported by Andy Lemin. ok benno@ | |||
2016-11-08 | Respect -Ooffset for the disklabel location. | Martin Natano | |
2016-11-08 | Describe -o disklabel=name. | Martin Natano | |
2016-11-08 | Add a disklabel option that creates a disklabel with the info provided | Martin Natano | |
by disktab. This is one piece of the puzzle that will allow use to build install media without vnd. ok deraadt | |||
2016-11-08 | syspatch-60-001_foobar -> syspatch60-001_foobar to match base system sets name. | Antoine Jacoutot | |
Should be transparent to the early testers as long as you have the most recent syspatch.sh checkout from cvs(1). | |||
2016-11-08 | Simplify. | Antoine Jacoutot | |
2016-11-08 | Few fixes and consistency. | Antoine Jacoutot | |
2016-11-08 | pledge for "stdio rpath wpath cpath" promises since it only needs to | Ricardo Mestre | |
read/write/create files OK natano@ and tb@, thank you both for noticing the bad indentation | |||
2016-11-07 | - Remove -? since parameters don't make sense for this command (but still keep | Ricardo Mestre | |
default case to have usage() explaining that) - Replace exit(3) with return to enable SSP | |||
2016-11-07 | Implement support for flow-mod messages validation, this includes: | Rafael Zalamena | |
action and instructions validation. ok reyk@ | |||
2016-11-07 | Fix a small parsing error in packet-in: don't count ofp_match header bytes | Rafael Zalamena | |
when iterating over the OXMs. It only works because the last bytes are either padding or something that looks like OXM. ok reyk@ | |||
2016-11-06 | Rework the cleanup trap handling using the EXIT trap; | Alexander Hall | |
trap 'cleanup; goes; here' EXIT trap exit HUP INT TERM ERR FOO BAR BAZ This makes sure the cleanup is always done (unless we exec), and preserves the exit code, such as SIGINT => 130. Also trap less signals. Special signals are special. tested and OK ajacoutot@ | |||
2016-11-06 | conditionalize ocsp load properly | Bob Beck | |
ok jsing@ | |||
2016-11-06 | since ocsp stapling is optional, make sure we guard if we do not have it. | Bob Beck | |
ok jsing@ | |||
2016-11-06 | Remove unused fields from ffs_opt_t. | Martin Natano | |
2016-11-06 | tweak previous; | Jason McIntyre | |
2016-11-06 | Add OCSP stapling support to httpd | Bob Beck | |
ok jsing@ bcook@ | |||
2016-11-04 | Empty -> empty in log messages | Reyk Floeter | |
2016-11-04 | Move ofp_output() into ofp_common.c and few function prototypes into | Reyk Floeter | |
switchd.h. No functional change. | |||
2016-11-04 | Be verbose when PATCH_PATH is not set (that is temporary until we agree on | Antoine Jacoutot | |
a way to point to a syspatch mirror). | |||
2016-11-04 | One more XXX. | Antoine Jacoutot | |
2016-11-04 | Pass the internal vmid or 0 to vm_register() instead of changing it | Reyk Floeter | |
once again after setting the next available id. Suggested by edd@ | |||
2016-11-04 | Update the config/register/get VM methods to match the config_set/get | Reyk Floeter | |
style that is used in other places. Also keep the vmid from the parent. OK edd@ | |||
2016-11-04 | Zap extra space. | Antoine Jacoutot | |
2016-11-04 | Make sure our filesystems are local and not read-only. | Antoine Jacoutot | |
2016-11-04 | Use 'rm -f' to remove the rollback tarball if we have an errir; it may | Antoine Jacoutot | |
be because we have a read-only /var. | |||
2016-11-03 | Missing local. | Antoine Jacoutot | |
2016-11-03 | Hook up syspatch(8). | Antoine Jacoutot | |
expectations elevation encouragement from deraadt@ | |||
2016-11-03 | rollback -> revert where it makes sense. | Antoine Jacoutot | |
2016-11-03 | XXX match with installed sets (comp, x...)? | Antoine Jacoutot | |
2016-11-03 | Hardlinks are properly handled; for the rest, we'll see if we need to care | Antoine Jacoutot | |
or not (XXX). | |||
2016-11-03 | Make sure PATCH_PATH is an URL that ftp(1) can cope with. | Antoine Jacoutot | |
2016-11-03 | Merge ls_avail() into ls_missing(), it's only used once. | Antoine Jacoutot | |
While here, cope with a missing index.txt or other ftp(1) error. | |||
2016-11-03 | Use hw.ncpufound. | Antoine Jacoutot | |
2016-11-03 | Simplify for loops; prompted by a comment from rpe@ | Antoine Jacoutot | |
2016-11-02 | Be verbose when reverting a patch. | Antoine Jacoutot | |
committing now to please espie@ | |||
2016-11-02 | Use secure defaults for TLS - instead of accepting TLSv1.0 and any cipher | Joel Sing | |
suite, use the libtls defaults and require TLSv1.2 with an AEAD+PFS cipher suite - given who we're talking to one would hope that they meet these requirements... ok benno@ deraadt@ florian@ | |||
2016-11-01 | Simplify. | Antoine Jacoutot | |
2016-11-01 | Tap SIGINT while install(1)ing so that we can properly rollback and not | Antoine Jacoutot | |
be left in an inconsistent state. |