summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2014-03-25update after asr API updateEric Faurot
2014-03-25reword error message when a table has an invalid configuration file, it hasGilles Chehade
confused a few people ok eric@
2014-03-25when locally enqueuing messages without specifying a domain for sender orGilles Chehade
recipient, the local domain is assumed. this was correctly handled at the smtp level, but headers were not updated to reflect that. issue experienced by several people, fix tested by ajacoutot@ and I ok eric@
2014-03-25Integrate necessary dns packet parsing helpers from asr.Eric Faurot
They are not supposed to be exposed. ok gilles@
2014-03-24Rework the way we fetch and verify sets to simplify the process.Antoine Jacoutot
Don't fetch SHA256 twice when we are updating from the same repo. Better output. Simplify extract_set (becomes extract_sets and deal with all sets at once). Make sure we cannot pass -s xetcXX and/or -x etcXX. Bring consistency in condition evaluations. Drop some unused variables. with inputs from rpe@
2014-03-24do not call purge_task every 10 secs, it is only needed once at startup andGilles Chehade
will cause the parent process to wake up unnecessarily at runtime ok eric@
2014-03-24don't proceed in case of permission errorsMarc Espie
2014-03-24Remove "-r" option from ping(8) and traceroute{,6}(8). You've probablyMartin Pieuchot
never heard about it, it was to bypass the routing tables, not available for IPv6 and we're going to always use the routing tables soon. ok florian@, man pages ok jmc@
2014-03-24Passing MSG_DONTROUTE to sendto() here has no effect since SO_DONTROUTEMartin Pieuchot
is only implemented for IPv4. Just remove it. Tested by and ok florian@
2014-03-24Remove commented out MSG_DONTROUTE flag. No object change.Martin Pieuchot
ok florian@
2014-03-22Fix trap: do not remove the entire WRKDIR -- we may have our backed up filesAntoine Jacoutot
in there.
2014-03-22Also remove TEMPROOT in error_rm_wrkdir.Antoine Jacoutot
2014-03-22Make sure to add missing users/groups _before_ running theAntoine Jacoutot
distribution-etc-root-var target; otherwise mtree(8) can fail. issue reported and debugged by deraadt@ ok sthen@
2014-03-22disable the imsg buffers profiling code unless requested, this will preventGilles Chehade
all processes from waking up every second
2014-03-22Now tunnel can have multiple listen addresses.YASUOKA Masahiko
2014-03-22Reimplement control part of npppd(8) with imsg. Also add "monitor"YASUOKA Masahiko
command for npppctl(8) to monitor PPP session start/stop events.
2014-03-22Add an assert not to call radius_cancel_request() on callback. If theYASUOKA Masahiko
assert is disabled by compile time, the function returns immediatly on that condition.
2014-03-22Fixed a bug in npppd_auth_get_user() which caused segmentation faults afterYASUOKA Masahiko
a user authentication is succeeded in case the authentication config option has `username-suffix' and 'strip-atmark-realm' is yes. Delete `username-prefix' from authentication setting. This config option was mis-leading and useless.
2014-03-22In RADIUS accounting, realm_framed_ip_address was mistakenly used forYASUOKA Masahiko
Framed-IP-Address. acct_framed_ip_address should be used for that purpose.
2014-03-22Don't stop listening 1723/tcp when accept() is failed.YASUOKA Masahiko
2014-03-22Stop output "Stopped" log message of the tunnel protocols.YASUOKA Masahiko
2014-03-21Disable MS-CHAPv1 (RFC 2433) support. Undocumented; Microsoft droppedChristian Weisgerber
support in 2007 (Windows Vista); requires MD4, which will be removed. ok sthen@
2014-03-21Use ftp -D.Antoine Jacoutot
2014-03-21Fix small regression when not using a full path to sets.Antoine Jacoutot
2014-03-21Install a /var/unbound/db directory, writable by the _unbound daemon,Stuart Henderson
and use it as the default location for the DNSSEC root key. Update default config for this location. With this, the only step required to enable DNSSEC validation is to uncomment these default config entries and restart: #module-config: "validator iterator" #auto-trust-anchor-file: "/var/unbound/db/root.key" There is no longer a requirement to run unbound-anchor manually to update the root key. The rc.d script will take care of updates at boot, and Unbound will manage the file itself at runtime. Test with "dig test.dnssec-or-not.net txt @127.0.0.1" or similar.
2014-03-20- add a comment pointing to http://wiki.nginx.org/Pitfalls, it has importantStuart Henderson
information for people writing nginx configuration. - remove commented-out "ssl_protocols SSLv3 TLSv1" line; nginx default is "SSLv3 TLSv1 TLSv1.1 TLSv1.2", so uncommenting this line removes desirable protocols ok robert@
2014-03-20Cope with recent signify(1) changes and simplify getting/checking the sets.Antoine Jacoutot
ok sthen@ rpe@
2014-03-19use smtpd man pages by default. ok deraadt jmcTed Unangst
sendmail.8 note by jmc
2014-03-19Remove #ifdef FreeBSD.Martin Pieuchot
2014-03-19Pull in FreeBSD r37363 and r37887:Philip Guenther
-- Sync timestamp changes for inodes of special files to disk as late as possible (when the inode is reclaimed). Temporarily only do this if option UFS_LAZYMOD configured and softupdates aren't enabled. UFS_LAZYMOD is intentionally left out of /sys/conf/options. This is mainly to avoid almost useless disk i/o on battery powered machines. It's silly to write to disk (on the next sync or when the inode becomes inactive) just because someone hit a key or something wrote to the screen or /dev/null. -- Made lazy syncing of timestamps for special files non-optional. -- Also, include support in 'pstat -v' to display the IN_LAZYMOD flag. ok tedu@ millert@
2014-03-18Retire hp300, mvme68k and mvme88k ports. These ports have no users, keepingMiod Vallat
this hardware alive is becoming increasingly difficult, and I should heed the message sent by the three disks which have died on me over the last few days. Noone sane will mourn these ports anyway. So long, and thanks for the fish.
2014-03-18don't use $_ as "throw-away" variable, proper idiom is "undef"Marc Espie
(and if you're wondering about the unused extra parameter, this is designed to allow a new makewhatis that shares more code with pkg_create)
2014-03-18remove $_ usage that warns under perl 5.18Marc Espie
2014-03-18Drop the check for badly formed *etc sets when we check signatures; it savesAntoine Jacoutot
us time and if the sets are signed we can assume they are legit (yes, I am an assumer).
2014-03-18... and commit this as well (linked to new signify.pm): allows specificMarc Espie
block of code to run on both father&child sides, thus making our system more useful around pipes... Also zap two "my $_" on while(<>) to prepare for new perl.
2014-03-18now that signify can read/write messages to pipes, use that to avoidMarc Espie
creating temporary files. for checking, use the "embedded sig" format to avoid writing to two distinct pipes from the same process (tedu@ reluctantly agrees)
2014-03-18Put AF_ROUTE socket that arp(8) operates on into the appropriate rdomain.Mike Belopuhov
Previously "arp -V 1 -d 10.0.0.1" would hang forever since while the target rdomain was passed in the rtm, the AF_ROUTE socket was always created in the rdomain 0. Due to the logic in route_input (rtsock.c) route socket's rdomain is compared against the target rdomain of the request and reply is generated only when they match. In our case rdomains were different which cased arp(8) to hang waiting for the reply that would never be sent. ok deraadt
2014-03-18Correctly parse attribute length form imsg. While there don't assignFlorian Obser
data twice. From rivo nurges ris _AT_ estpak _DOT_ ee, thanks! OK sthen
2014-03-18Make print AF independet and use it in traceroute and traceroute6.Florian Obser
OK benno
2014-03-18Sync inetname from traceroute6 and thereby make it AF independent.Florian Obser
While there drop the !nflag check as it's never called with nflag set, simplify the code a bit and adapt style from traceroute. OK benno
2014-03-18AF independent print_asnFlorian Obser
OK benno
2014-03-18Stop if the sum of unreachables and timeouts are >= number of probes, butFlorian Obser
only if we have at least one unreachable; from traceroute OK benno
2014-03-18Wrap long line.Florian Obser
OK lteo, benno
2014-03-18Remove #if 0; after nearly 14 years it's probably the right thing toFlorian Obser
set rcvhlim to zero. OK lteo, benno
2014-03-18Free -l flag, by default print hostnames and numeric addresses, likeFlorian Obser
traceroute does. Immediatly reclaim -l flag to print hop limit of received pkg like traceroute does. OK benno
2014-03-17to the great bit bucket in the sky...Theo de Raadt
2014-03-17ppp(8) goes to the bit bucket in the skyTheo de Raadt
2014-03-17the userland ppp(9) code goes awa. Having too much ppp choice in theTheo de Raadt
tree results in one-true-ppp not coming into existance. This code is essentially un-audited and quite dangerous. ok claudio sthen
2014-03-17jturner pointed out that if one wants to run cgi scripts outsideFlorian Obser
/cgi-bin SCRIPT_NAME doesn't cut it. The spec says: "The SCRIPT_NAME variable MUST be set to a URL path". Use SCRIPT_FILENAME which can be an absolute filesystem path for these cases and fall back to using SCRIPT_NAME if SCRIPT_FILENAME is not present. Details how to handle this worked out by jturner and sthen. Based on an erlier diff by jturner. Tested by jturner OK jturner, sthen
2014-03-16Zap some globals and a TODO missed in the a.out purge.Philip Guenther
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-02 09:10:02 +0000