summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-05-22makes sure the value of the asprintf buffer is zeroed on errorJoerg Jung
from Hiltjo Posthuma "do." deraadt
2016-05-22fix unbalanced va_start and va_end macrosJoerg Jung
from Hiltjo Posthuma "do." deraadt
2016-05-22start work on improving the log format, this is work in progress but it'llGilles Chehade
be better worked in tree ok eric@, beck@
2016-05-22use temporary variables to store some struct tm values, no functionalGilles Chehade
change but reduces the changeset with portable version
2016-05-21Build on armv7.Mark Kettenis
2016-05-21replace hardcoded '+' with TAG_CHAR defineGilles Chehade
diff from obadz <github@obadz.com>
2016-05-21Byteswap 32-bit "cells" on little-endian platforms before printing them.Mark Kettenis
OpenFirware/FDT is defined to be big-endian. This makes eeprom -p print sensible numbers on little-endian platforms. ok deraadt@
2016-05-21Zero op_name when we start enumerating properties such that we don't riskMark Kettenis
skipping the properties of the root node when the lookup of random stack garbage fails. ok deraadt@
2016-05-21Harden TLS for ntpd constraints - stop disabling server name verification,Joel Sing
ensure that we load the CA certificates and use tls_connect_servername() so that we can verify the server we are connecting to (even though we've already resolved the hostname). Also add additional warnings for TLS connect and TLS write failures so that we know what is happening and why. Lack of server name verification also reported by Luis M. Merino <luismiguelmerino at gmail dot com> - thanks! ok deraadt@ reyk@
2016-05-20Restore support for 'instbin program args...'Philip Guenther
problem noted by and ok deraadt@
2016-05-19table formats are described in table(5) not makemap(8)Gilles Chehade
2016-05-17remove pam and shadow code that's not used. ok deraadt jcaTed Unangst
2016-05-17Repair some file descriptor leaks.Theo de Raadt
ok beck krw millert
2016-05-16No need to store the return value of fcntl(fd, F_SETFL, flags).Todd C. Miller
OK jung@
2016-05-16fix logic in error code path of smtp state machine that can lead to anGilles Chehade
invalid state ending in fatal(), while at it plug a file pointer leak. ok eric@, millert@
2016-05-16replace hardcoded + with TAG_CHARGilles Chehade
2016-05-15set glitch correctlyMarc Espie
2016-05-14use twice the same code for prepare_long and verify_modes so that it can'tMarc Espie
diverge. tested for a few days and okay aja@
2016-05-14Be gone /var/sysmerge/examplessum.Antoine Jacoutot
2016-05-14Remove handling of /etc/examples/ files by sysmerge(8). Getting regular messagesAntoine Jacoutot
about pkg.conf isn't really that helpful and if a big syntax change comes along well we have current.html. it was disabled during p2k16 and no one complained so far discussed with and ok deraadt@
2016-05-14ftp:// -> http:// for main ftp site example.T.J. Townsend
2016-05-13add a stub log for signify, problem noticed by teduMarc Espie
2016-05-13fix logging.Ted Unangst
1. va must be restarted before reuse. 2. don't syslog in debug. assume someone is watching stderr.
2016-05-12Disable EIGRPv6 on an interface when it loses its link-local address.Renato Westphal
2016-05-12Improve support for config reloading.Renato Westphal
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis
2016-05-11mention ca option in listen directiveJoerg Jung
same spelling fix from jmc and gilles ok gilles
2016-05-10go deeper in Term::ReadKey, we don't need smart guesses.Marc Espie
okay afresh@/millert@
2016-05-10move some argument checking from vmmaction() to start_vm()Mike Larkin
from a diff posted to tech@ by Fabien Siron, thanks.
2016-05-10typo in commentMike Larkin
2016-05-09in the http redirect example, also include the requested url insteadT.J. Townsend
of just going to the home page. requested by and ok beck
2016-05-09need to use shadow passwd function here, reminded by sthenTed Unangst
2016-05-09prepare for API tweaks of OpenBSD::MkTempMarc Espie
okay afresh1@
2016-05-09stop depending on *.phMarc Espie
use Term::ReadKey a bit of funky stuff while old ports Term::ReadKey is around
2016-05-09remove mention of dbm(3) and surrounding cruft; ok jmc@Christian Weisgerber
2016-05-08The "loop detected" message should not print the errno string.Todd C. Miller
OK gilles@
2016-05-08allow root files to be root-writable.Marc Espie
common work with aja@, okay aja@
2016-05-08Use /dev/bpf0 instead of /dev/bpf (without loop though), as suggested byMartin Natano
sthen@. to make remote upgrades without media less painful. ok tb@
2016-05-07Print RA Route Information prefix, preference and lifetime.Jeremie Courreges-Anglas
ok mpi@
2016-05-07Replace .Po/.Pc with .Pq, and drop extra .Li; suggested by jmc@Jeremie Courreges-Anglas
2016-05-07Document that both raflags and rtflags can hold route preference flags.Jeremie Courreges-Anglas
Input from an ok jmc@
2016-05-06In verbose mode, print the router preference contained in RAs.Jeremie Courreges-Anglas
"pref" keyword taken from tcpdump.org. ok mpi@ sthen@ deraadt@
2016-05-06Unconfuse things by renaming variables to match their contents.Joel Sing
ok deraadt@ reyk@
2016-05-05Fix a pasto; from Michal Mazurek <akfaew at jasminek dot net>.Ingo Schwarze
OK mlarkin
2016-05-03Fix regression on usermod/userdel by calling getpwnam_shadow(3) and savingRicardo Mestre
passwd hash early, instead of getpwnam(3), then close fds by calling endpwent(3) and finally only call pledge(2) after it, otherwise on any modification to the user it would destroy the passwd hash and therefore forbidding him/her to login again to the machine. Reported and tested by Edgar Pettijohn <edgar ! pettijohn-web at com> According to deraadt@ "that looks better then"
2016-05-03listen directive may use a table for authentication, to make this work theJoerg Jung
table has to be defined BEFORE consequently move all tables in the examples to the beginning and before the listen directive to avoid tables not being found no functional change ran into this myself earlier, also reported by cjones via irc ok gilles
2016-05-03Move to /dev/bpf; ok lteoMartin Natano
2016-05-02Kill useless CPPFLAGSJeremie Courreges-Anglas
usr.sbin/ndp has no #ifdef INET6 test, and doesn't need an explicit -I. directive. ok sha256 mpi@
2016-05-02When writing master.password entries, use %lld for time_t and castTodd C. Miller
to long long. OK ajacoutot@
2016-05-02prepare userland for removing chroot(2) from allowed syscalls under pledge(2).Sebastien Marie
for ntpd(8), removing the pledge call is a first step: futher redesign will occurs later. ok reyk@ benno@