summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2019-05-15do not use CRLF when passing data lines to filters.Eric Faurot
ok gilles@
2019-05-15normalize newlines when reading the messageEric Faurot
spotted by martijn@ ok martijn@ gilles@
2019-05-14make "bgpctl sh rib detail *out*" look less confusingSebastian Benoit
ok claudio@
2019-05-14Revert my recent sysupgrade changes; it broke unattended upgrades forAntoine Jacoutot
espie@. Need to look deeper.
2019-05-14allow specifying a cmdfile instead of trying to pipe in commands for -ef.Ted Unangst
ok deraadt
2019-05-14Delete some .Sx macros that were used in a wrong way.Ingo Schwarze
Part of a patch from Stephen Gregoratto <dev at sgregoratto dot me>.
2019-05-14fix typos in log messagesEric Faurot
2019-05-14Add support for `boot device' to vm.conf grammar which is the `-B device'anton
counterpart from vmctl. ok mlarkin@
2019-05-13Don't use a hardcoded list of how attribute are dumped and instead moveClaudio Jeker
to a loop-switch construct in up_generate_attr(). This way attributes are always dumped in ascending order as suggested by the RFC and adding special attributes is simpler than in the current way. The MP attributes are a special case since those are handled at a later stage of creating UPDATE messages. OK benno@
2019-05-13Add Connection: close when switching to "unlimited" reading mode.Reyk Floeter
Ask the server to close the connection after the request since we don't read any further request headers. This fixes an issue with OPTIONS and optional body, as well as similar cases. Reported and tested by Rivo Nurges OK benno@
2019-05-13fix export default-route.denis
OK claudio@
2019-05-13Fix filter rules with "forward to" statement in persistent connections.Reyk Floeter
OK bentley@ mikeb@
2019-05-13According to RFC3414 section 4 applications should be able to discover theMartijn van Duren
snmpEngineBoots and snmpEngineTime by sending an AuthPriv request with the requested values set to zero and with a valid user. Move the engine_boots and engine_time down after the user check and remove the 0-check, so we can reply with the appropriate usmStatsNotInTimeWindows. This allows us to use p5-Net-SNMP against snmpd with seclevel enc. OK rob@
2019-05-13According to RFC3414 section 4 applications should be able to discover theMartijn van Duren
snmpEngineID by sending a noAuthNoPriv request. Move the seclevel check to after the usm_decode phase, so we can reply with the mandatory usmStatsUnknownEngineIDs instead of usmStatsUnsupportedSecLevels. This brings us one step closer to using p5-Net-SNMP with seclevel enc. OK tb@, rob@
2019-05-13Use the same heuristic as the installer to find a proper prefetch area for theAntoine Jacoutot
sets instead of hardcoding /home. This leads the way to a knob for manually choosing a sets directory if we want that. Create /auto_upgrade.conf that will get picked up by the installer for the unattended upgrade mode. Similar inputs from naddy@ and kn@ ok florian@ kmos@ kn@
2019-05-12remove .PATH. this was used in previous eras to build bpf compiler stuff,Ted Unangst
that's all used via libpcap now. found by deraadt ok tb
2019-05-12vmm: add a x86 page table walkerpd
Add a first cut of x86 page table walker to vmd(8) and vmm(4). This function is not used right now but is a building block for future features like HPET, OUTSB and INSB emulation, nested virtualisation support, etc. With help from Mike Larkin ok mlarkin@
2019-05-12fix typodenis
OK claudio@ deraadt@
2019-05-11report vm state through 'vmctl status'; whereas previously this would ↵Jasper Lievisse Adriaanse
display the state of the vcpu (which is why it got removed), it now actually reports the correct state (running, stopped, disabled, paused, etc) ok ccardenas@ mlarkin@
2019-05-11vm_dump_header allocated space for a signature but it was never set;Jasper Lievisse Adriaanse
set it to VMM_HV_SIGNATURE and check for it upon restoring a vm image ok mlarkin@ pd@
2019-05-11add missing comment about VM_STATE_SHUTDOWN; as discussed with ccardenas@Jasper Lievisse Adriaanse
2019-05-11track the state of the vm (running, paused, etc) using a single bitfield ↵Jasper Lievisse Adriaanse
instead of a handful of separate variables. this will makes it easier for vmd to report and check on the individual vm states no functional change intended ok ccardenas@ mlarkin@
2019-05-11Make acpidump match the kernel's acpi_loadtables() behavior byLawrence Teo
preferring XSDT over RSDT. Thanks to kettenis@ who pointed out the mismatch. ok guenther@ kettenis@
2019-05-11The BER API is currently used by ldap, ldapd, ldapctl, ypldap, snmpd, androb
snmpctl. Separate copies of ber.[ch] have existed and been maintained in sync in ldap, ldapd, ypldap and snmpd. This commit moves the BER API into /usr/lib/libutil. All current consumers already link libutil. ldapd and snmpd regress passes, and release builds. With help from tb@ and guenther@. ok deraadt@, tb@
2019-05-11Support extended shutdown communications in tcpdump as well.Claudio Jeker
OK sthen@ deraadt@
2019-05-11socppc makes an extended visit to the bigbucket.Theo de Raadt
ok kettenis
2019-05-11sync the vm state in vmd too when (un)pausing a vm, otherwise the vm processJasper Lievisse Adriaanse
knows the vm is paused, but vmd does not. ok mlarkin@ pd@
2019-05-10remove receive_vm prototype for the function does not exist (anymore)Jasper Lievisse Adriaanse
ok pd@
2019-05-10Fix dhcpd build on gcc architectures.Visa Hankala
OK deraadt@ jca@
2019-05-10When calculating how much payload ospf6d can put into DD and LSREQ packetsClaudio Jeker
substract the size of the IPv6 header and not the IPv4 header from the MTU. This stops ospf6d to send out fragmented packets. Found with and OK benno@
2019-05-10Add support for from/to in relay filter rules.Reyk Floeter
For example, pass from 10.0.0.0/8 path "/hello/*" forward to <b> Ok benno@
2019-05-10Delete superfluous #includes of <ifaddrs.h>, <net/if_dl.h>, and <net/if_enc.h>Philip Guenther
ok krw@, jsg@
2019-05-10tweak verbosity; ok ccardenas@Christian Weisgerber
2019-05-09Neither rde_apply_set() nor rde_filter() are called with a NULL state soClaudio Jeker
remove some unneeded == NULL checks. OK benno@
2019-05-09Add a -k flag to keep the files in /home/_sysupgrade, since theyChristian Weisgerber
will be deleted after the upgrade by default. ok kn@
2019-05-09sysupgrade already verifies all sets, so eliminate redundantChristian Weisgerber
verification by the installer: Verification is triggered by the presence of SHA256.sig. In sysupgrade, remove SHA256.sig once the signature has been verified. Compare SHA256 against a stored copy from the previous install/upgrade. In the installer, stash away a copy of SHA256 and move that code into install_files() where the sets are actually processed. Confirm in the response file that we want to proceed without verifying the sets. ok florian@ tj@
2019-05-08convert system() calls to an execv() like interface.Ted Unangst
avoids sh difficulties, etc. from Matthew Martin. ok deraadt reyk
2019-05-08Fix and tweak websocket upgrade handling.Reyk Floeter
- Don't expect the Connection header to equal Upgrade, it may include Upgrade - Reshuffle the code to check the Upgrade/Connection headers in one place Reported and tested by Rivo Nurges OK and input from benno@ Cvs: ----------------------------------------------------------------------
2019-05-08Switch domain-search parsing from hand rolled hex string toKenneth R Westerback
human readable list of strings. Slightly tweaked version of a diff from William Ahern via tech@. Long silence on all fronts leads to community based testing.
2019-05-08The QUERY_STRING macro is not actually URL encoded, so fix the manual.Theo Buehler
Add a QUERY_STRING_ENC macro that is URL encoded. Patch from Tim Baumgartner ok reyk
2019-05-08Set the REQUEST_URI CGI variable to the requested URI and query stringTheo Buehler
instead of the rewritten path and query string. Patch from Tim Baumgard, reminded by Mischa Peters. ok benno, reyk
2019-05-08spacingReyk Floeter
2019-05-08when passing objects to imsg use the for 'obj, sizeof(*obj)' instead ofClaudio Jeker
'obj, sizeof(struct object)' OK benno@
2019-05-08It is not an error condition if no new snapshot is available.Christian Weisgerber
ok jasper@ florian@
2019-05-08better signatures.Marc Espie
- pass state along to be able to do proper errsay instead of raw printing. - compare VERSION markers first, because they're supposed to trump everything else. (todo: evaluate -v diagnostics for version bumps) okay sthen@
2019-05-08Rework the TCP md5sig and IKE handling. Move the pfkey socket to the parentClaudio Jeker
process in this process. The refreshing of the keys is done whenever the session state is changes to state IDLE or ACTIVE. This should behave better when reloading configs with auth changes. OK benno@
2019-05-08fix pkg_info -S bug: multiple inheritance tricks signature into actuallyMarc Espie
ignoring version elements.
2019-05-06not do -> do not; ok jmc@Otto Moerbeek
2019-05-06Fix reloading of network statements that have no fixed prefix specification.Claudio Jeker
The return value of kr_net_redist_add() was not as intended and so kr_redistribute() removed those networks on config reloads. Bug reported by openbsd (at) kene.nu OK benno@
2019-05-06double macro snuck in;Jason McIntyre
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 13:16:46 +0000