summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2017-05-07Add arm64 support.Mark Kettenis
ok tom@
2017-05-07Limit -Werror to gcc4 as was done in libcrypto/libssl/libtls to avoidJonathan Gray
failed builds with different compilers. ok jsing@
2017-05-06Convert explicit_bzero() + free() to freezero().Frederic Cambus
OK reyk@, deraadt@ (previous version)
2017-05-05VMs cannot use proc_compose() to PROC_VMM, they have to useReyk Floeter
imsg_compose() on the "vmm_pipe" directly. This fixes the communication channel from VMs back to vmm.
2017-05-05Add a `-R' switch that reverts all patches.Antoine Jacoutot
prodded by deraadt@ knobs sorting input jmc@ ok sthen@
2017-05-05Allow vmd(8) to set guest %xcr0Mike Larkin
Usermode part of previous vmm(4) diff. Posted to tech by Pratik Vyas
2017-05-04Report command failure back to vmctl reload, reset, load, log verbose.Reyk Floeter
OK mlarkin@
2017-05-04Report error for vmctl commands that need root privileges.Reyk Floeter
specifically: vmctl (load|reload|reset|log) Reported by Christian Barthel
2017-05-04Document that -u wants to read from /dev/mem, so it needs kern.allowkmem=1.Theo Buehler
Problem reported by jdd () cs ! toronto ! edu on bugs. ok brynet deraadt jmc
2017-05-04Expand comment and bump copyright while here.Antoine Jacoutot
2017-05-04Add support for rdomains.Reyk Floeter
This allows to configure VM interfaces and switches in individual rdomains. OK mlarkin@
2017-05-03Output explicit error messages for:Antoine Jacoutot
- trying to install files mounted on a remote FS (diskless clients etc.) - read-only FS - not enough space on FS These were all properly catched before (syspatch would refuse to do anything) but the error message was a bit cryptic.
2017-05-03- Don't make an empty syspatch/ repo an error; having no available patchAntoine Jacoutot
is perfectly legit. - Abort immediately if we cannot reach our mirror server listed in installurl. - Return a proper error code when running without arguments and we cannot list the available patches.
2017-05-03Use the safe idiom of cleaning sensitive data from memory with explicit_bzero,Ricardo Mestre
instead of relying on other methods, after readpassphrase. Some programs on this diff won't benefit that much since it happens near the terminal path, but someone might copy the unsafe idiom to another program and place it where it may leak sensitive data. Discussed aeons ago with tb@, OK deraadt@ and beck@
2017-05-03Sort parser tokens, no functional changeReyk Floeter
2017-05-02Resynchronize the guest RTC via vmmci(4) on host resume from zzz/ZZZMike Larkin
(vmd part) This feature is for OpenBSD guests only. ok reyk, kettenis
2017-05-02fix an error in i386 vmd buildMike Larkin
2017-05-02Matching vmd(8) part of previous diff (first part of vmctl send/receive).Mike Larkin
ok kettenis
2017-05-01in function used for tracing, display unknown lookup types as "???"Gilles Chehade
diff from Wolf480pl
2017-05-01Fewer kgdb(7) references and fix previous.Martin Pieuchot
Pointed by jmc@
2017-04-30Remove KGDB references.Martin Pieuchot
2017-04-30Tweak error message when running on an unsupported release.Antoine Jacoutot
2017-04-29fix argument check, this should never trigger because it is a libexec called byJoerg Jung
smtpd, but for the sake of correctness from Edgar Pettijohn ok gilles@
2017-04-28When syslogd(8) failed to open a logfile, the error message couldAlexander Bluhm
get lost. Remove log_setdebug() as it adds too much abstraction, use the global variable Started instead. Set the Started value before the init() function. Then errors during config file processing will be logged to the console as Initialize is still 0. This is better than stderr as the latter may be redirected to /dev/null. Print the timestamp and hostname also for direct messages to console, so that they look like all others. bug report jung@; OK benno@
2017-04-28rename i8253 "counter" to "channel", a better name for what we areMike Larkin
emulating
2017-04-27clang warns about some of the strlcpy arguments here, which aren't theTed Unangst
typical idiom because there's invisible size dependencies. rewrite some of it to use memcpy, which makes clear the lengths are the same.
2017-04-26remove some repetitive text chunks; ok krwJason McIntyre
2017-04-26Install arm64 manpages: eeprom(8), MAKEDEV(8). ok phessler kettenisStuart Henderson
2017-04-25Allow syslogd(8) to listen on multiple addresses for incomming TLSAlexander Bluhm
connections. This expands the feature from UDP and TCP to syslog over TLS. input jmc@; OK millert@
2017-04-25Generate randomized MAC addresses earlier to keep them across reboots.Reyk Floeter
OK deraadt@
2017-04-25spacingReyk Floeter
2017-04-24Print bgp administrative shutdown messages (draft-ietf-idr-shutdown)Sebastian Benoit
From Job Snijders <job -AT instituut -DOT- net>, thanks! ok canacar@, deraadt@
2017-04-24a little more consistent text for previous; ok krwJason McIntyre
2017-04-24Add 'echo-client-id' statment, so that RFC 6842 behaviour can beKenneth R Westerback
turned off for those clients and networks that find it impossible to move past RFC 2131. Modelled on the same statement in recent ISC versions, though we default to 'on' (a.k.a. RFC 6842) rather that 'off' (a.k.a. RFC 2131). Problems reported by Bastien Durel (Xerox Phaser 6022 printer) and Bryan Vyhmeister (Hon Hai Precision router) via misc@. Thanks!
2017-04-24Don't overflow the allocated DHCP response buffer.Reyk Floeter
When copying the DHCP/BOOTP response into the allocated buffer, use the calculated response length instead of the maximum size of a DHCP packet. The response length was verified correctly but the very last step missed to use it. Found by Caspar Schutijser and malloc.conf(5) "S" OK deraadt@
2017-04-21Repair AgentX support.Jeremie Courreges-Anglas
which I broke when adding support for multiple listen address. SNMP data should be sent to the client using the appropriate socket, which we now store when we receive the query. Reported & fix tested by Rivo Nurges.
2017-04-21Fix uninitialized variable that coult result in a crash.Jeremie Courreges-Anglas
Fix from Rivo Nurges.
2017-04-21Fail if vm.conf exists but cannot be opened, ignore if it doesn't exist.Reyk Floeter
This fixes 'vmd -nf /etv/vm.conf' if the file is not readable.
2017-04-21Add global configuration option "local prefix" to change prefix for -L.Reyk Floeter
The default prefix is 100.64.0.0/10 from RFC6598. Requested by sthen@ chris@ OK mlarkin@
2017-04-21vmd(8) pci emulation fix required for upcoming option rom support.Mike Larkin
This will be used in the future to support an sgabios option rom, to do VGA text mode console redirection. ok reyk
2017-04-19Add support for dynamic "NAT" interfaces (-L/local interface).Reyk Floeter
When a local interface is configured, vmd configures a /31 address on the tap(4) interface of the host and provides another IP in the same subnet via DHCP (BOOTP) to the VM. vmd runs an internal BOOTP server that replies with IP, gateway, and DNS addresses to the VM. The built-in server only ever responds to the VM on the inside and cannot leak its DHCP responses to the outside. Thanks to Uwe Werler, Josh Grosse, and some others for testing! OK deraadt@
2017-04-19better example; from hiltjo posthumaJason McIntyre
ok sthen
2017-04-19Switch base tools from /dev/bpf0 to /dev/bpf. Now that /dev/bpf has beenMartin Natano
around for two releases, it should be safe to do so. ok bluhm deraadt sthen tb yasuoka
2017-04-18recent perl have signal names we don't have, protect against that.Marc Espie
also, allow child_error to take a parameter so that this can be used to decode an arbitrary wait() result.
2017-04-18Tweak parameters to decode_*, add a check or two, and thus gain most of theKenneth R Westerback
sanity improvements reyk@ recently put into dhcrelay to ensure no more than the captured packet is processed.
2017-04-18After 11 years of pondering about it I think that brookdavis@freebsd.orgKenneth R Westerback
had it correct. Don't BPF_WORDALIGN() the value for the number of bytes read() into the buffer. This could theoretically cause the processing of 1 - 3 more bytes than were read.
2017-04-18removed unused function; from Edgar PettijohnTheo de Raadt
2017-04-18Warn if pipex(4) is disabled but the configuration uses it.YASUOKA Masahiko
2017-04-18Delete #include lines which are unnecessary.YASUOKA Masahiko
2017-04-18use freezero()Theo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-04 18:22:32 +0000