summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2018-04-02aspath_verify() can not call aspath_extract() since this function only worksClaudio Jeker
on 4-byte AS path. Since this function is also called with 2-byte ASPATH attributes. Instead inline the check using the as_size. Problem found by Tom Beard (tom at exilien.uk), thanks for the report OK job@
2018-03-31Fix description of -v and implement -v for -a showing holes; ok deraadt@Otto Moerbeek
2018-03-29Check the result of strdup not the argument for NULL to report mallocFlorian Obser
errors. Pointed out by benno
2018-03-29update to unbound 1.7.0Florian Obser
testing tb, sthen OK benno, sthen
2018-03-29Make sure that the global config is send out immediately when it isMartijn van Duren
loaded. This makes sure that the local prefix specied in the config is always used. OK ccardenas@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2018-03-19two fixes from klemens nanni, plus one tweak from myself;Jason McIntyre
ok sthen
2018-03-16Consistently spell "IPsec" in comments and debug outputs.Martin Pieuchot
From Raf Czlonka, ok sthen@
2018-03-15writebufg() does two write(2) calls, both can return EPIPE, so handle it inOtto Moerbeek
both cases. Avoids race in the exit path. ok sthen@ florian@
2018-03-14bump minor version just to be sure it makes release :-)Gilles Chehade
ok gilles@
2018-03-14newaliases is so 70s, very tied to the 'db' table backend (which has notGilles Chehade
been the default for a long time now) but users still assume this is the way to update aliases within the MTA. when smtpctl is invoked as newaliases, have it notify the daemon that it has had the aliases table updated, no matter what backend it uses, as it will at worst be a noop and at best do what user expected. ok eric@
2018-03-14Message-Id header is not added if sent over submission port because theGilles Chehade
port is stored in the listener structure using the network order. ok eric@
2018-03-14skip spf mechanisms that have been processed already.Eric Faurot
prevent possible loops on badly configured spf records. ok gilles@
2018-03-14disable the session resumption warnings for releaseMarc Espie
2018-03-14letsencrypt responded with a 301 redirect when requesting the chainFlorian Obser
certificate for some time. While they stopped doing so it seems best to follow redirects anyway. More status codes pointed out by & OK sthen OK benno
2018-03-14block two VMs from using the same disk image file at the same time.Mike Larkin
Also changes an error message in vmctl to reflect same.
2018-03-14knfMike Larkin
2018-03-12correct flags example; from artturi almJason McIntyre
ok sthen knock out a dud Tn while here
2018-03-11Increase SO_RCVBUF of the ospf socket to 256k having this buffer can resultClaudio Jeker
in packet loss on busy and big networks and therefor to instability. From camield@
2018-03-11Increase SO_RCVBUF of the ospf socket to 256k having this buffer can resultClaudio Jeker
in packet loss on busy and big networks and therefor to instability. Also adjust the SO_SNDBUF to real 64k just for consistency. From camiel@
2018-03-10Allow fetching syspatches from ftp.Antoine Jacoutot
from Andrew Marks ok deraadt@
2018-03-07rfc4954 provides more than one method to submit the same credentials and inGilles Chehade
a recent cleanup we accidentally removed one of the ways breaking some .net lib apparently, sorry. this commit reintroduces the "pass password in the same line as username" method ok millert@
2018-03-07check for expected record typeOtto Moerbeek
ok deraadt@ mestre@ gilles@
2018-03-06update to NSD 4.1.20, ok florian@Stuart Henderson
- Fix memory leak in zone file read of unknown rr formatted RRs. - Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.
2018-03-06Initialize pushback_index like we do (mostly) everywhere else.rob
2013-02-18Update to NSD 3.2.15, ok brad@ phessler@ deraadt@ also tested by okan@Stuart Henderson
2018-03-06Mention that there is no macro expansion inside quotes.rob
ok jmc@
2018-03-04remove unnecessary headerGilles Chehade
2018-03-03Be specific on what is slowjob
OK espie@
2018-03-03Add missing comma.rob
2018-03-01consistently spell "IPsec"; from raf czlonkaJason McIntyre
note that this is only part of raf's original diff: the rest is for code. although i'm sure the diff itself is correct, i don;t judge myself qualified to decide whether those changes are warranted. still, i'd appreciate at least a reply to raf's diff from another developer (yay! nay!)
2018-02-28Better documentation of the classless-static-routes option.Matthieu Herrb
ok krw@, tweaks by jmc@
2018-02-28vmd: Fix 100% vmd cpu usage on linux receive / unpausepd
Use rtc_reschedule_per in mc146818_start instead of re arming the periodic interrupt without checking if it's enabled in REGB. reported by Dave Voutila ok phessler@
2018-02-27sanitize say/print output furtherMarc Espie
- have confirm go thru f() every time (adding confirm_defaults_to_no/confirm_defaults_to_yes apis... verbose but effective) - check DESCR in pkg_create, as suggested by sthen@ - don't do the whole safe dance when not needed (optimization) - misnamed allowed -> forbidden (schwarze@) This effectively prevents DESCR from using diacritics. Sorry! Ingo makes a compelling argument that using UTF8 while installing a new box is currently fairly dangerous, considering tty setups. This affects about 10 ports at the moment, all of which were fixed before this commit.
2018-02-26actually have safe do something, stupid typoMarc Espie
2018-02-26revert, unneededMarc Espie
2018-02-26forgot the non-interactive caseMarc Espie
2018-02-26spacingMarc Espie
2018-02-26- move sane into State.pmMarc Espie
- use it for every parameter to say/print - extend it for actual printable characters, plus a hack for \n - add confirmf for passing formats to the confirm - adjust PkgCheck accordingly - tweak the files test in PkgCheck to also hunt unknown files under /var/db/pkg/somepackage okay sthen@
2018-02-26vmctl: clarify console error messageccardenas
Clear up ambiguous error message when attaching to a console fails as the vm id is not guaranteed to be populated. ok mlarkin@
2018-02-25much better checksMarc Espie
- add an explicit dir thingy so that we don't look for /var/db/pkg/+CONTENTS - actually prepend dir name to info name, oops - also check for files/dirs that do not belong to root:wheel or have too lax permissions.
2018-02-25add explicit permission checks.Marc Espie
pkg_check is most often run as root. In case of a garbled file systems it won't notice when permissions are completely wrong.
2018-02-25sprinkle quite a few more calls to safeMarc Espie
2018-02-24sort;Jason McIntyre
2018-02-24add an alias for vmctl show, matches finger memory and the rest of thePeter Hessler
*ctl programs OK mlarkin@ benno@ deraadt@
2018-02-24make the gre flowid output always 2 chars so payloads stay lined up.David Gwynne
2018-02-22Same change as rev 1.22 in ospfd:Claudio Jeker
The IF_EVT_NBR_CHNG event needs to be fired when a neighbor transitions to a state of 2-Way or higher. There is no need to trigger the event for new neighbors. With this situations with multiple DRs after a netsplit should be solved. OK sthen@ and remi@
2018-02-22The IF_EVT_NBR_CHNG event needs to be fired when a neighbor transitions toClaudio Jeker
a state of 2-Way or higher. There is no need to trigger the event for new neighbors. With this situations with multiple DRs after a netsplit should be solved. OK sthen@ and remi@
2018-02-20merge configure.ac from NSD 4.1.19, previously we had an updatedStuart Henderson
generated configure file, but old configure.ac.
2018-02-18vmd: fix vmctl pause for non existing vm ids (never returns)pd
check if vm id is valid before sending to vmm for pausing. The 'lock' is caused by vmm sending back ENOENT for a non existent vm but vmd drops the message because it doesn't recogize the vmid vmm is talking about. This is an artifact of the 'policy' don't trust any imsg from a sibling priv sep process and do your own checking. reported by Abel Abraham Camarillo Ojeda ok mlarkin@ and ccardenas@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-17 08:40:24 +0000