summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-11-10Extend documentation a bit. It'll probably need some adjustments soon.Antoine Jacoutot
2016-11-10Simplify checkfs() and fix read-only/remote fs detection.Antoine Jacoutot
2016-11-10Fix tcp ip ttl / minttl on IPv6 sockets.Jeremie Courreges-Anglas
ok florian@
2016-11-10Extend mtree(8) comment.Antoine Jacoutot
2016-11-10Remove redundant check.Antoine Jacoutot
2016-11-10Create the bsd rollback kernel in create_rollback() (it is contained inAntoine Jacoutot
the rollback tarball anyway but that's impractical if the new bsd does not boot ;-)). While here, make sure /bsd actually exists before saving it.
2016-11-10update reference to the RFC now numbered 7606Peter Hessler
reminded by jmc@
2016-11-10properly check if large-community was set beforePeter Hessler
reported by Job Snijders
2016-11-10draft-ietf-idr-optional-transitive-00 became RFC 7606Peter Hessler
changes from the draft to the RFC: - PARTIAL flag is no longer considered protection - for some attrs, a length of 0 is invalid OK florian@
2016-11-10Sync bsize and fsize defaults with newfs.Martin Natano
2016-11-10Remove the unused cpg field from ffs_opt_t.Martin Natano
2016-11-09Improve source IP address handling.Jeremie Courreges-Anglas
- send replies using a source address equal to the destination address of queries, using IP_SENDSRCADDR. This help in multihomed setups and can remove the need to explicitely configure a bind address. - config knob to set the source address of packets sent to trap receivers. "trap receiver" gains an optional "source-address" setting. Source address issues reported by Andy Lemin. ok benno@
2016-11-08Respect -Ooffset for the disklabel location.Martin Natano
2016-11-08Describe -o disklabel=name.Martin Natano
2016-11-08Add a disklabel option that creates a disklabel with the info providedMartin Natano
by disktab. This is one piece of the puzzle that will allow use to build install media without vnd. ok deraadt
2016-11-08syspatch-60-001_foobar -> syspatch60-001_foobar to match base system sets name.Antoine Jacoutot
Should be transparent to the early testers as long as you have the most recent syspatch.sh checkout from cvs(1).
2016-11-08Simplify.Antoine Jacoutot
2016-11-08Few fixes and consistency.Antoine Jacoutot
2016-11-08pledge for "stdio rpath wpath cpath" promises since it only needs toRicardo Mestre
read/write/create files OK natano@ and tb@, thank you both for noticing the bad indentation
2016-11-07- Remove -? since parameters don't make sense for this command (but still keepRicardo Mestre
default case to have usage() explaining that) - Replace exit(3) with return to enable SSP
2016-11-07Implement support for flow-mod messages validation, this includes:Rafael Zalamena
action and instructions validation. ok reyk@
2016-11-07Fix a small parsing error in packet-in: don't count ofp_match header bytesRafael Zalamena
when iterating over the OXMs. It only works because the last bytes are either padding or something that looks like OXM. ok reyk@
2016-11-06Rework the cleanup trap handling using the EXIT trap;Alexander Hall
trap 'cleanup; goes; here' EXIT trap exit HUP INT TERM ERR FOO BAR BAZ This makes sure the cleanup is always done (unless we exec), and preserves the exit code, such as SIGINT => 130. Also trap less signals. Special signals are special. tested and OK ajacoutot@
2016-11-06conditionalize ocsp load properlyBob Beck
ok jsing@
2016-11-06since ocsp stapling is optional, make sure we guard if we do not have it.Bob Beck
ok jsing@
2016-11-06Remove unused fields from ffs_opt_t.Martin Natano
2016-11-06tweak previous;Jason McIntyre
2016-11-06Add OCSP stapling support to httpdBob Beck
ok jsing@ bcook@
2016-11-04Empty -> empty in log messagesReyk Floeter
2016-11-04Move ofp_output() into ofp_common.c and few function prototypes intoReyk Floeter
switchd.h. No functional change.
2016-11-04Be verbose when PATCH_PATH is not set (that is temporary until we agree onAntoine Jacoutot
a way to point to a syspatch mirror).
2016-11-04One more XXX.Antoine Jacoutot
2016-11-04Pass the internal vmid or 0 to vm_register() instead of changing itReyk Floeter
once again after setting the next available id. Suggested by edd@
2016-11-04Update the config/register/get VM methods to match the config_set/getReyk Floeter
style that is used in other places. Also keep the vmid from the parent. OK edd@
2016-11-04Zap extra space.Antoine Jacoutot
2016-11-04Make sure our filesystems are local and not read-only.Antoine Jacoutot
2016-11-04Use 'rm -f' to remove the rollback tarball if we have an errir; it mayAntoine Jacoutot
be because we have a read-only /var.
2016-11-03Missing local.Antoine Jacoutot
2016-11-03Hook up syspatch(8).Antoine Jacoutot
expectations elevation encouragement from deraadt@
2016-11-03rollback -> revert where it makes sense.Antoine Jacoutot
2016-11-03XXX match with installed sets (comp, x...)?Antoine Jacoutot
2016-11-03Hardlinks are properly handled; for the rest, we'll see if we need to careAntoine Jacoutot
or not (XXX).
2016-11-03Make sure PATCH_PATH is an URL that ftp(1) can cope with.Antoine Jacoutot
2016-11-03Merge ls_avail() into ls_missing(), it's only used once.Antoine Jacoutot
While here, cope with a missing index.txt or other ftp(1) error.
2016-11-03Use hw.ncpufound.Antoine Jacoutot
2016-11-03Simplify for loops; prompted by a comment from rpe@Antoine Jacoutot
2016-11-02Be verbose when reverting a patch.Antoine Jacoutot
committing now to please espie@
2016-11-02Use secure defaults for TLS - instead of accepting TLSv1.0 and any cipherJoel Sing
suite, use the libtls defaults and require TLSv1.2 with an AEAD+PFS cipher suite - given who we're talking to one would hope that they meet these requirements... ok benno@ deraadt@ florian@
2016-11-01Simplify.Antoine Jacoutot
2016-11-01Tap SIGINT while install(1)ing so that we can properly rollback and notAntoine Jacoutot
be left in an inconsistent state.