summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2015-11-30While delivering to lmtp or mda, accept optional "as user" parameterSunil Nimmagadda
whose privileges would be used instead of the default. Ok gilles@ jung@
2015-11-30remove mailaddr_to_username(), no longer neededGilles Chehade
suggested by jung@
2015-11-30teach aliases expansion how to deal with user+tagGilles Chehade
ok sunil@, ok jung@
2015-11-29Better cope with meta rc.d scripts; these are ugly but well...Antoine Jacoutot
2015-11-29Tedu stdethers and stdhosts from /usr/sbin, which are only used in Makefile.ypRobert Peichaer
for creating the hosts.byname, hosts.byaddr ethers.byname and ethers.byaddr YP maps. Replace most of their functionality with sed/awk scripting directly in Makefile.yp. Suggested by and OK deraadt@ Feedback from @semarie
2015-11-29Use pledge("pf") in pfe.c.Sebastian Benoit
Move getrtable() from pfe to parent process, since its in the way of pledge. ok deraadt@, feedback from reyk@ on previous version.
2015-11-29give up on pledge for now.Theo de Raadt
this will have to wait until jsing and stsp find time to look at it.
2015-11-28pledge: allow getsockopt IP_IPDEFTTL with promise inetSebastian Benoit
then relayd's host check engine can be pledged. ok reyk@, approach suggested by deraadt@ weeks ago.
2015-11-28Use SOCK_NONBLOCK in relayd as well.Reyk Floeter
OK benno@
2015-11-28chflags -l flag went away. Noticed this myself 15 minutesTheo de Raadt
before Chris Hettrick did.
2015-11-28add missing "log" bitsGleydson Soares
spotted out by Luiz Gustavo Costa < luizgustavo at mundounix.com.br >, Thanks! OK jmc@ jsg@
2015-11-27Imporve error messages for the imsg handler code. OK sthen@Claudio Jeker
2015-11-27add getpw to pledge. rpath would normally suffice, but there's some doubleTed Unangst
checking code in snapshots, and it serves as a useful annotation. from Carlin Bingham
2015-11-27Change the command line syntax to a "command + getopts" style, eg.Reyk Floeter
vmmctl start "myvm" -m 512M -i 1 -d disk.img -k /bsd Networking people like me are used to the human-readable CLI-style syntax that we have in some of our OpenBSD *ctl tools, including bgpctl, other routing daemons, or relayctl. But this didn't work for vmmctl, so change it to something a bit less human-readable but more BSD- and POSIX-ish. After all, the command line is only intended for simple configuration, more details will go into the configuration file, so we can avoid getopt flag conflicts or scary things like the getsubopt(3) style. OK krw@ jasper@, with input from kettenis@ jmc@ deraadt@ mlarkin@ etc.
2015-11-26Apply pledge.Theo de Raadt
The people I asked to review this did not get back to me, so we will test this a different way.
2015-11-26Delete YP lookup code; user base of 0.Theo de Raadt
2015-11-26Don't dereference a route and then reference it again. In this particular case,Tim van der Molen
the route would be referenced at least twice, so there is no use after free. Prompted by a mail from David CARLIER to misc@opensmtpd. OK eric@
2015-11-26Remove vmm enable / disable in parse.y as well -Reyk Floeter
see previous commit to vmd/vmmctl.
2015-11-26Automatically start vmm(4) when the first VM is created and after theReyk Floeter
last VM is terminated. This allows to remove the explicit "vmm enable" / "vmm disable" (VMM_IOC_START / VMM_IOC_STOP) ioctls. You'll have to update kernel and userland for this change, as the kernel ABI changes. OK mpi@ mlarkin@
2015-11-26Fix potentially uninitialized variable.Reyk Floeter
Found by jsg@
2015-11-25typo: should be looking pid == -1Ted Unangst
2015-11-24realloc* is designed so that NULL pointer = malloc. Ditch redundant codeMarc Espie
okay reyk@ mlarkin@
2015-11-24zap useless use of strlen, okay reyk@ mlarkin@Marc Espie
2015-11-24add filter.c plumbing, not linked to the build, not used yetGilles Chehade
ok sunil@, ok jung@, ok eric@
2015-11-24teach table_db and table_static about mailaddr maps (unused yet)Gilles Chehade
ok sunil@, ok jung@
2015-11-24Cache values from getpwnam() done at initialization, which need to beTheo de Raadt
used by the constraint processes setup later (chroot, setuid...) [late getpwnam discovered during a further audit] ok millert
2015-11-24use canonical pledge argument orderingTheo de Raadt
2015-11-23Do not need YFLAGS=Theo de Raadt
2015-11-23allow table API to lookup for mailaddr mappingsGilles Chehade
ok sunil@, ok jung@
2015-11-23spelling fix; from frank groeneveldJason McIntyre
2015-11-23accept4() is restarted after signals which prevents vmd from exitingReyk Floeter
in the current control socket loop. Add a poll before the accept that is not restarted and allows to escape the loop. This code is kind of temporary, as we're planning to replace the event handling, but it allows to kill (or Ctrl+c) vmd for now. OK tedu@, discussed with many
2015-11-23missing pledge "getpw" for getgrnam(3)Theo de Raadt
2015-11-23Retire socket_set_blockmode() in favor of the SOCK_NONBLOCK type flag.Reyk Floeter
As done in iked and snmpd. OK jung@
2015-11-23I accidentally removed a newline in usage() when converting the logReyk Floeter
messages to log_*. From Cesare Gargano
2015-11-23Use SOCK_NONBLOCK to replace socket_set_blockmode() and fcntl(..O_NONBLOCK).Reyk Floeter
(SOCK_CLOEXEC should also be added where it is appropriate, but this is OBnot done in this commit yet.) OK claudio@
2015-11-23Sync proc.c with ikedReyk Floeter
2015-11-23Sync proc.c with iked.Reyk Floeter
2015-11-23Sync proc.c with iked: the default proc_dispatch_null allows to removeReyk Floeter
some empty imsg callback stubs in the privsep processes. iked's proc.c -r1.24 was OK benno@ deraadt@
2015-11-23Clarify the size argument, you can specify it as bytes or kilobytes,Reyk Floeter
but it is rounded to megabytes. Pointed out by deraadt@
2015-11-23strings.h -> string.hGilles Chehade
ok sunil@
2015-11-23cleanupGilles Chehade
2015-11-23Add support for logging to stderr or syslog, and to run vmd inReyk Floeter
foreground with -d. OK mlarkin@ jung@
2015-11-23Restructure bounce content as a multi-part MIME message.Sunil Nimmagadda
Content-Type header diff from Philipp Takacs <philipp<at>bureaucracy.de> Ok gilles@ jung@
2015-11-23install manpages global, since two architecture (will) use them.Theo de Raadt
2015-11-22mare naesplit;Jason McIntyre
2015-11-22+.An -naesplitJason McIntyre
2015-11-22use PATH_MAX where neededTheo de Raadt
2015-11-22enter dirs..Theo de Raadt
2015-11-22Add $ IdsReyk Floeter
2015-11-22sundry tweaks;Jason McIntyre