Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-11-30 | While delivering to lmtp or mda, accept optional "as user" parameter | Sunil Nimmagadda | |
whose privileges would be used instead of the default. Ok gilles@ jung@ | |||
2015-11-30 | remove mailaddr_to_username(), no longer needed | Gilles Chehade | |
suggested by jung@ | |||
2015-11-30 | teach aliases expansion how to deal with user+tag | Gilles Chehade | |
ok sunil@, ok jung@ | |||
2015-11-29 | Better cope with meta rc.d scripts; these are ugly but well... | Antoine Jacoutot | |
2015-11-29 | Tedu stdethers and stdhosts from /usr/sbin, which are only used in Makefile.yp | Robert Peichaer | |
for creating the hosts.byname, hosts.byaddr ethers.byname and ethers.byaddr YP maps. Replace most of their functionality with sed/awk scripting directly in Makefile.yp. Suggested by and OK deraadt@ Feedback from @semarie | |||
2015-11-29 | Use pledge("pf") in pfe.c. | Sebastian Benoit | |
Move getrtable() from pfe to parent process, since its in the way of pledge. ok deraadt@, feedback from reyk@ on previous version. | |||
2015-11-29 | give up on pledge for now. | Theo de Raadt | |
this will have to wait until jsing and stsp find time to look at it. | |||
2015-11-28 | pledge: allow getsockopt IP_IPDEFTTL with promise inet | Sebastian Benoit | |
then relayd's host check engine can be pledged. ok reyk@, approach suggested by deraadt@ weeks ago. | |||
2015-11-28 | Use SOCK_NONBLOCK in relayd as well. | Reyk Floeter | |
OK benno@ | |||
2015-11-28 | chflags -l flag went away. Noticed this myself 15 minutes | Theo de Raadt | |
before Chris Hettrick did. | |||
2015-11-28 | add missing "log" bits | Gleydson Soares | |
spotted out by Luiz Gustavo Costa < luizgustavo at mundounix.com.br >, Thanks! OK jmc@ jsg@ | |||
2015-11-27 | Imporve error messages for the imsg handler code. OK sthen@ | Claudio Jeker | |
2015-11-27 | add getpw to pledge. rpath would normally suffice, but there's some double | Ted Unangst | |
checking code in snapshots, and it serves as a useful annotation. from Carlin Bingham | |||
2015-11-27 | Change the command line syntax to a "command + getopts" style, eg. | Reyk Floeter | |
vmmctl start "myvm" -m 512M -i 1 -d disk.img -k /bsd Networking people like me are used to the human-readable CLI-style syntax that we have in some of our OpenBSD *ctl tools, including bgpctl, other routing daemons, or relayctl. But this didn't work for vmmctl, so change it to something a bit less human-readable but more BSD- and POSIX-ish. After all, the command line is only intended for simple configuration, more details will go into the configuration file, so we can avoid getopt flag conflicts or scary things like the getsubopt(3) style. OK krw@ jasper@, with input from kettenis@ jmc@ deraadt@ mlarkin@ etc. | |||
2015-11-26 | Apply pledge. | Theo de Raadt | |
The people I asked to review this did not get back to me, so we will test this a different way. | |||
2015-11-26 | Delete YP lookup code; user base of 0. | Theo de Raadt | |
2015-11-26 | Don't dereference a route and then reference it again. In this particular case, | Tim van der Molen | |
the route would be referenced at least twice, so there is no use after free. Prompted by a mail from David CARLIER to misc@opensmtpd. OK eric@ | |||
2015-11-26 | Remove vmm enable / disable in parse.y as well - | Reyk Floeter | |
see previous commit to vmd/vmmctl. | |||
2015-11-26 | Automatically start vmm(4) when the first VM is created and after the | Reyk Floeter | |
last VM is terminated. This allows to remove the explicit "vmm enable" / "vmm disable" (VMM_IOC_START / VMM_IOC_STOP) ioctls. You'll have to update kernel and userland for this change, as the kernel ABI changes. OK mpi@ mlarkin@ | |||
2015-11-26 | Fix potentially uninitialized variable. | Reyk Floeter | |
Found by jsg@ | |||
2015-11-25 | typo: should be looking pid == -1 | Ted Unangst | |
2015-11-24 | realloc* is designed so that NULL pointer = malloc. Ditch redundant code | Marc Espie | |
okay reyk@ mlarkin@ | |||
2015-11-24 | zap useless use of strlen, okay reyk@ mlarkin@ | Marc Espie | |
2015-11-24 | add filter.c plumbing, not linked to the build, not used yet | Gilles Chehade | |
ok sunil@, ok jung@, ok eric@ | |||
2015-11-24 | teach table_db and table_static about mailaddr maps (unused yet) | Gilles Chehade | |
ok sunil@, ok jung@ | |||
2015-11-24 | Cache values from getpwnam() done at initialization, which need to be | Theo de Raadt | |
used by the constraint processes setup later (chroot, setuid...) [late getpwnam discovered during a further audit] ok millert | |||
2015-11-24 | use canonical pledge argument ordering | Theo de Raadt | |
2015-11-23 | Do not need YFLAGS= | Theo de Raadt | |
2015-11-23 | allow table API to lookup for mailaddr mappings | Gilles Chehade | |
ok sunil@, ok jung@ | |||
2015-11-23 | spelling fix; from frank groeneveld | Jason McIntyre | |
2015-11-23 | accept4() is restarted after signals which prevents vmd from exiting | Reyk Floeter | |
in the current control socket loop. Add a poll before the accept that is not restarted and allows to escape the loop. This code is kind of temporary, as we're planning to replace the event handling, but it allows to kill (or Ctrl+c) vmd for now. OK tedu@, discussed with many | |||
2015-11-23 | missing pledge "getpw" for getgrnam(3) | Theo de Raadt | |
2015-11-23 | Retire socket_set_blockmode() in favor of the SOCK_NONBLOCK type flag. | Reyk Floeter | |
As done in iked and snmpd. OK jung@ | |||
2015-11-23 | I accidentally removed a newline in usage() when converting the log | Reyk Floeter | |
messages to log_*. From Cesare Gargano | |||
2015-11-23 | Use SOCK_NONBLOCK to replace socket_set_blockmode() and fcntl(..O_NONBLOCK). | Reyk Floeter | |
(SOCK_CLOEXEC should also be added where it is appropriate, but this is OBnot done in this commit yet.) OK claudio@ | |||
2015-11-23 | Sync proc.c with iked | Reyk Floeter | |
2015-11-23 | Sync proc.c with iked. | Reyk Floeter | |
2015-11-23 | Sync proc.c with iked: the default proc_dispatch_null allows to remove | Reyk Floeter | |
some empty imsg callback stubs in the privsep processes. iked's proc.c -r1.24 was OK benno@ deraadt@ | |||
2015-11-23 | Clarify the size argument, you can specify it as bytes or kilobytes, | Reyk Floeter | |
but it is rounded to megabytes. Pointed out by deraadt@ | |||
2015-11-23 | strings.h -> string.h | Gilles Chehade | |
ok sunil@ | |||
2015-11-23 | cleanup | Gilles Chehade | |
2015-11-23 | Add support for logging to stderr or syslog, and to run vmd in | Reyk Floeter | |
foreground with -d. OK mlarkin@ jung@ | |||
2015-11-23 | Restructure bounce content as a multi-part MIME message. | Sunil Nimmagadda | |
Content-Type header diff from Philipp Takacs <philipp<at>bureaucracy.de> Ok gilles@ jung@ | |||
2015-11-23 | install manpages global, since two architecture (will) use them. | Theo de Raadt | |
2015-11-22 | mare naesplit; | Jason McIntyre | |
2015-11-22 | +.An -naesplit | Jason McIntyre | |
2015-11-22 | use PATH_MAX where needed | Theo de Raadt | |
2015-11-22 | enter dirs.. | Theo de Raadt | |
2015-11-22 | Add $ Ids | Reyk Floeter | |
2015-11-22 | sundry tweaks; | Jason McIntyre | |