Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-05-22 | makes sure the value of the asprintf buffer is zeroed on error | Joerg Jung | |
from Hiltjo Posthuma "do." deraadt | |||
2016-05-22 | fix unbalanced va_start and va_end macros | Joerg Jung | |
from Hiltjo Posthuma "do." deraadt | |||
2016-05-22 | start work on improving the log format, this is work in progress but it'll | Gilles Chehade | |
be better worked in tree ok eric@, beck@ | |||
2016-05-22 | use temporary variables to store some struct tm values, no functional | Gilles Chehade | |
change but reduces the changeset with portable version | |||
2016-05-21 | Build on armv7. | Mark Kettenis | |
2016-05-21 | replace hardcoded '+' with TAG_CHAR define | Gilles Chehade | |
diff from obadz <github@obadz.com> | |||
2016-05-21 | Byteswap 32-bit "cells" on little-endian platforms before printing them. | Mark Kettenis | |
OpenFirware/FDT is defined to be big-endian. This makes eeprom -p print sensible numbers on little-endian platforms. ok deraadt@ | |||
2016-05-21 | Zero op_name when we start enumerating properties such that we don't risk | Mark Kettenis | |
skipping the properties of the root node when the lookup of random stack garbage fails. ok deraadt@ | |||
2016-05-21 | Harden TLS for ntpd constraints - stop disabling server name verification, | Joel Sing | |
ensure that we load the CA certificates and use tls_connect_servername() so that we can verify the server we are connecting to (even though we've already resolved the hostname). Also add additional warnings for TLS connect and TLS write failures so that we know what is happening and why. Lack of server name verification also reported by Luis M. Merino <luismiguelmerino at gmail dot com> - thanks! ok deraadt@ reyk@ | |||
2016-05-20 | Restore support for 'instbin program args...' | Philip Guenther | |
problem noted by and ok deraadt@ | |||
2016-05-19 | table formats are described in table(5) not makemap(8) | Gilles Chehade | |
2016-05-17 | remove pam and shadow code that's not used. ok deraadt jca | Ted Unangst | |
2016-05-17 | Repair some file descriptor leaks. | Theo de Raadt | |
ok beck krw millert | |||
2016-05-16 | No need to store the return value of fcntl(fd, F_SETFL, flags). | Todd C. Miller | |
OK jung@ | |||
2016-05-16 | fix logic in error code path of smtp state machine that can lead to an | Gilles Chehade | |
invalid state ending in fatal(), while at it plug a file pointer leak. ok eric@, millert@ | |||
2016-05-16 | replace hardcoded + with TAG_CHAR | Gilles Chehade | |
2016-05-15 | set glitch correctly | Marc Espie | |
2016-05-14 | use twice the same code for prepare_long and verify_modes so that it can't | Marc Espie | |
diverge. tested for a few days and okay aja@ | |||
2016-05-14 | Be gone /var/sysmerge/examplessum. | Antoine Jacoutot | |
2016-05-14 | Remove handling of /etc/examples/ files by sysmerge(8). Getting regular messages | Antoine Jacoutot | |
about pkg.conf isn't really that helpful and if a big syntax change comes along well we have current.html. it was disabled during p2k16 and no one complained so far discussed with and ok deraadt@ | |||
2016-05-14 | ftp:// -> http:// for main ftp site example. | T.J. Townsend | |
2016-05-13 | add a stub log for signify, problem noticed by tedu | Marc Espie | |
2016-05-13 | fix logging. | Ted Unangst | |
1. va must be restarted before reuse. 2. don't syslog in debug. assume someone is watching stderr. | |||
2016-05-12 | Disable EIGRPv6 on an interface when it loses its link-local address. | Renato Westphal | |
2016-05-12 | Improve support for config reloading. | Renato Westphal | |
2016-05-11 | remove hppa64 port, which we never got going beyond broken single users. | Theo de Raadt | |
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis | |||
2016-05-11 | mention ca option in listen directive | Joerg Jung | |
same spelling fix from jmc and gilles ok gilles | |||
2016-05-10 | go deeper in Term::ReadKey, we don't need smart guesses. | Marc Espie | |
okay afresh@/millert@ | |||
2016-05-10 | move some argument checking from vmmaction() to start_vm() | Mike Larkin | |
from a diff posted to tech@ by Fabien Siron, thanks. | |||
2016-05-10 | typo in comment | Mike Larkin | |
2016-05-09 | in the http redirect example, also include the requested url instead | T.J. Townsend | |
of just going to the home page. requested by and ok beck | |||
2016-05-09 | need to use shadow passwd function here, reminded by sthen | Ted Unangst | |
2016-05-09 | prepare for API tweaks of OpenBSD::MkTemp | Marc Espie | |
okay afresh1@ | |||
2016-05-09 | stop depending on *.ph | Marc Espie | |
use Term::ReadKey a bit of funky stuff while old ports Term::ReadKey is around | |||
2016-05-09 | remove mention of dbm(3) and surrounding cruft; ok jmc@ | Christian Weisgerber | |
2016-05-08 | The "loop detected" message should not print the errno string. | Todd C. Miller | |
OK gilles@ | |||
2016-05-08 | allow root files to be root-writable. | Marc Espie | |
common work with aja@, okay aja@ | |||
2016-05-08 | Use /dev/bpf0 instead of /dev/bpf (without loop though), as suggested by | Martin Natano | |
sthen@. to make remote upgrades without media less painful. ok tb@ | |||
2016-05-07 | Print RA Route Information prefix, preference and lifetime. | Jeremie Courreges-Anglas | |
ok mpi@ | |||
2016-05-07 | Replace .Po/.Pc with .Pq, and drop extra .Li; suggested by jmc@ | Jeremie Courreges-Anglas | |
2016-05-07 | Document that both raflags and rtflags can hold route preference flags. | Jeremie Courreges-Anglas | |
Input from an ok jmc@ | |||
2016-05-06 | In verbose mode, print the router preference contained in RAs. | Jeremie Courreges-Anglas | |
"pref" keyword taken from tcpdump.org. ok mpi@ sthen@ deraadt@ | |||
2016-05-06 | Unconfuse things by renaming variables to match their contents. | Joel Sing | |
ok deraadt@ reyk@ | |||
2016-05-05 | Fix a pasto; from Michal Mazurek <akfaew at jasminek dot net>. | Ingo Schwarze | |
OK mlarkin | |||
2016-05-03 | Fix regression on usermod/userdel by calling getpwnam_shadow(3) and saving | Ricardo Mestre | |
passwd hash early, instead of getpwnam(3), then close fds by calling endpwent(3) and finally only call pledge(2) after it, otherwise on any modification to the user it would destroy the passwd hash and therefore forbidding him/her to login again to the machine. Reported and tested by Edgar Pettijohn <edgar ! pettijohn-web at com> According to deraadt@ "that looks better then" | |||
2016-05-03 | listen directive may use a table for authentication, to make this work the | Joerg Jung | |
table has to be defined BEFORE consequently move all tables in the examples to the beginning and before the listen directive to avoid tables not being found no functional change ran into this myself earlier, also reported by cjones via irc ok gilles | |||
2016-05-03 | Move to /dev/bpf; ok lteo | Martin Natano | |
2016-05-02 | Kill useless CPPFLAGS | Jeremie Courreges-Anglas | |
usr.sbin/ndp has no #ifdef INET6 test, and doesn't need an explicit -I. directive. ok sha256 mpi@ | |||
2016-05-02 | When writing master.password entries, use %lld for time_t and cast | Todd C. Miller | |
to long long. OK ajacoutot@ | |||
2016-05-02 | prepare userland for removing chroot(2) from allowed syscalls under pledge(2). | Sebastien Marie | |
for ntpd(8), removing the pledge call is a first step: futher redesign will occurs later. ok reyk@ benno@ |