summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2008-06-14When there are no sensors, don't run the hotplugging consistency check,Constantine A. Murenin
the logic of which assumes that there is at least one sdlim. ok henning
2008-06-13- don't ask for yesno confirmation when running in automatic modeAntoine Jacoutot
- allow comments in sysmerge.ignore suggested by, feedback from and ok naddy@
2008-06-13tweak previous;Jason McIntyre
2008-06-13$OpenBSD$Nikolay Sturm
2008-06-13from NetBSD:Nikolay Sturm
Implement file locking in lockd. All the stuff is done in userland, using fhopen() and flock(). This means that if you kill lockd, all locks will be relased. Shared locks are not handled efficiently, they're serialised in lockd when they could be granted. tested against debian etch (linux 2.6.18) not fully functional yet in mixed NFSv2/v3 environments further development in-tree as discussed w/ deraadt
2008-06-13fix two smalls bugs wrt contination lines.Marc Espie
- continuation line at file start would segfault: make it change ginfo as it should instead. - empty continuation lines should be valid. okay millert@
2008-06-13550 is fatal, don't bother retrying.Marc Espie
Problem found by Martynas Venckus, fix by me.
2008-06-13correction from Tamas TEVESZ;Jason McIntyre
2008-06-13Better error messages. Include the function causing the problem and do notClaudio Jeker
include the program name in logmsg() plus exit_daemon() does not return so make it a void function. OK mpf@
2008-06-13Simplify ROUNDUP() macro, it does not need the additional size argument.Claudio Jeker
That will be sizeof(long) no matter what.
2008-06-13Don't install httpd.conf-dist.Marc Balmer
from brad.
2008-06-13- add support for ignoring files and directories from comparisonAntoine Jacoutot
through an optionnal /etc/sysmerge.ignore file requested by many man page tweak from jmc@ /etc/changelist addition suggested by sthen@ ok sthen@ jdixon@ jmc@ naddy@
2008-06-13- always force full file check on fbtab, login.conf, sysctl.conf andAntoine Jacoutot
ttys since they are created using helper scripts and comparing CVS Id would not be accurate original diff from sthen@ man page tweak from jmc@ ok sthen@ jdixon@ jmc@ naddy@
2008-06-12let usage() match SYNOPSIS;Jason McIntyre
2008-06-11When a hotplugged sensordev appears, load its configuration individually,Constantine A. Murenin
instead of reloading the configuration for all sensordevs. ok henning
2008-06-11* Remove the exit condition on no sensors at start-up, since we now supportConstantine A. Murenin
hotplugging. * Factor out some code from main() into a new create() procedure, to save some memory and make the code tidier. ok henning
2008-06-11add support for "transparent" forwarding in relays: normally the l7Reyk Floeter
relay will connect to the target host with its own ip address, but this mode will let it use the address of the client that is connecting from the other side. for example, there is no need to add the X-Forwarded-For HTTP headers for internal webservers in this mode anymore since they magically see the remote client ip address in the connection. it also allows to build fully-transparent ssl encapsulation for tcp sessions and many other things... based on an initial idea from dlg@ and pascoe@ (dlg's talk at opencon) using the new BINDANY and divert-reply interfaces from markus@ (since n2k8) ok markus@ pyr@
2008-06-11cut lookup tag code in smaller piecesMarc Espie
2008-06-11further step on the road to tags:Marc Espie
make definitions migrate to the top of the packing-list, allow solver to find tag on the correct name (will look at full definition later).
2008-06-11defer to the packing element for computing md5Marc Espie
2008-06-11refactor md5 code to be able to work from a filehandle (like a pipe output)Marc Espie
2008-06-11let elements be responsible for computing their own md5 (allows specialMarc Espie
behavior for @bin object).
2008-06-11correctly enumerate MANSUBDIRPeter Hessler
pointed out by deraadt
2008-06-11enable memconfig on amd64Peter Hessler
ok deraadt@
2008-06-11tweak the "route to" text;Jason McIntyre
2008-06-11Support hotpluggable sensors (e.g. the post-4.2 ipmi0 created by theConstantine A. Murenin
deferred thread, as well as some timedelta sensors). ok henning, ckuethe
2008-06-11use monotime instead of wallclock.Henning Brauer
makes us independent from system time changes. diff from japan,was hiding... ok claudio some time ago
2008-06-11getcwd can return NULL on error, so handle that case properly.Tobias Stoeckmann
ok henning
2008-06-10set the inactivity timeout of redirections to a shorter timeout of 600Reyk Floeter
seconds by default (pf's default is 86400s), they can be cranked with the "session timeout" directive and it is consistent to relay session timeouts. also remove the hack to modify the closing timeout because pf's sloppy state handling is taking care about half connection closing now.
2008-06-10use sloppy pf state keeping for routed sessions (direct server return)Reyk Floeter
where we only see the client side of the TCP session; this removes the timeout limitations that we had before. document "route to" in the manpage since it is fully working now.
2008-06-10typo in -as yet- unused code.Marc Espie
2008-06-10clean up the text; ok reykJason McIntyre
2008-06-10one more trafic -> traffic;Jason McIntyre
2008-06-10Fix typo.Joel Sing
2008-06-10add the -O option to run an external script when the "otherReyk Floeter
configuration" flag is found in the RA message. it basically means "here is your IPv6 address, but run something like DHCPv6 to get more information". so the main purpose is to run a dhcpv6 client to get DNS etc. Merged from KAME ok rainer@
2008-06-10For IPv6 addresses, return the first 32 bits of the MD5 hash of theChristian Weisgerber
address as ref ID (RFC4330). ok henning@
2008-06-10According to the latest SNTPv4 spec in RFC4330, secondary serversChristian Weisgerber
return the address of the synchronization source as reference identification. Remove the obsolete special casing specified in RFC2030. ok henning@
2008-06-10Additionnal checks on the file names supplied for -s and -x.Pierre-Yves Ritschard
Based on a diff by ajacoutot@, ok jdixon@ and sthen@ on a previous diff, ok ajacoutot@.
2008-06-09- add a sanity check on tarballs name to ensure we're not feedingAntoine Jacoutot
sysmerge with unrelated sets ok sthen@ pyr@ jdixon@
2008-06-09- encourage people to use the same source as was used to upgrade systemAntoine Jacoutot
binaries so that some etc files don't get forgotten in the process discussed with kurt@ tweaks and ok jmc@
2008-06-09simplify math for arc4random_uniform() suggested byDamien Miller
Jinmei_Tatuya AT isc.org via jakob@ empirically verified for entire domain of upper_bound
2008-06-09drop root privileges in rtadvd to _rtadvdRainer Giedat
ok deraadt@, reyk@, pyr@
2008-06-09also handle wireless interfaces (IFM_IEEE80211 in addition to IFM_ETHER)Reyk Floeter
From kame ok rainer@
2008-06-09Define a new flag, UVM_FLAG_HOLE, for uvm_map to create a vm_map_entry ofMiod Vallat
a new etype, UVM_ET_HOLE, meaning it has no backend. UVM_ET_HOLE entries (which should be created as UVM_PROT_NONE and with UVM_FLAG_NOMERGE and UVM_FLAG_HOLE) are skipped in uvm_unmap_remove(), so that pmap_{k,}remove() is not called on the entry. This is intended to save time, and behave better, on pmaps with MMU holes at process exit time. ok art@, kettenis@ provided feedback as well.
2008-06-09rename refstr to refid since it is an int32; ok henningTheo de Raadt
2008-06-09do not copy up to two garbage characters from a 1 char string into a 4 charTheo de Raadt
output buffer; ok henning
2008-06-09do not leak memory on failure in refid production; ok ckuethe henningTheo de Raadt
2008-06-09spacingTheo de Raadt
2008-06-09Allow outgoing replies from sensor-driven servers to have aChris Kuethe
user-configurable reference ID, eg. "GPS" or "DCF"... ok mbalmer
2008-06-09Correctly round the sockaddrs so that ndp works on 64bit machines.Claudio Jeker
Stupid sockaddr_in6 has the worst size possible. OK henning@ deraadt@