summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-12-20move stuff aroundMarc Espie
2010-12-20use Auto::cacheMarc Espie
2010-12-20turn find_candidate into a real method we can inherit, tweak parametersMarc Espie
2010-12-20extra indirection: allow registration of library objects (refactor for later)Marc Espie
2010-12-20use state->definesMarc Espie
2010-12-20pass state to SharedLibs for direct printingMarc Espie
(also cosmetic ws)
2010-12-19add -xxx to usage();Jason McIntyre
2010-12-19Add -xxx option that print PCIe extended config space.Mark Kettenis
ok mikeb@, deraadt@
2010-12-19If MX lookup fails, fallback to using the host itself. This has always beenGilles Chehade
the behavior but I introduced a regression when switching to ASR. bug reported by jmc@, bugfix tested by jmc@ and I
2010-12-18document "certificate" a little better;Jason McIntyre
based on a diff from Sunil Nimmagadda ok gilles
2010-12-18bump ->defines up to main state class.Marc Espie
2010-12-18use copy_file from stateMarc Espie
always remove our special sighandlers on fork, this should prevent all the "smart" progress stuff to fail when perl children are active.
2010-12-18zap old Error usage, state incorporates error printing.Marc Espie
2010-12-18go thru state for printing (prodded by landry@)Marc Espie
2010-12-17Unbreak simple passwords with SHA and salted SHA hashes. Revision 1.7Martin Hedenfal
introduced a bug that reversed the check. Found by MERIGHI Marcus.
2010-12-16- since inetd(8) and inetd.conf(5) are one and the same, let's not list themJason McIntyre
both in SEE ALSO - standard options blurb
2010-12-15We run getopt() twice to know if dhcp-sync is used. To make this workClaudio Jeker
both getopt calls need the same optstring or the first getopt() call will end before parsing all arguments. Problem found and fixed supplied by m_athias OK millert@, deraadt@
2010-12-14Use _exit() not exit() after forking. OK deraadt@Todd C. Miller
2010-12-14Treat a missing spool dir like an empty one. OK deraadt@Todd C. Miller
2010-12-13Do not use a carp address as ospf router id because it is not unique.Alexander Bluhm
ok claudio@
2010-12-13remove locals, so that it can be called again and againMarc Espie
(again, needed by landry@)
2010-12-13pass state around and use state->printMarc Espie
inspired by landry@
2010-12-12use memcpy instead of a cast/deref dance that was reading pastJonathan Gray
the end of the buffer. tested by and ok gilles@
2010-12-12overriden -> overridden;Jason McIntyre
2010-12-09The PF_KEY socket is like the routing socket. It must be polled all theClaudio Jeker
time to consume broadcasted messages or the socket gets full and own messages that are needed are lost. This fixes an infinit loop in pfkey_reply that happens when bgpd tcp md5sum is used on a system that also runs a larger IPsec setup. OK henning, lot of patience, debuging and testing by Thomas Boernert
2010-12-05tweak the framework so that individual modules don't exist and returnMarc Espie
the exit code upstream instead. this simplifies the task of people who want to reuse it, as noted by landry@
2010-12-03be more strict on socket lifetime (fixes a fd leak).Eric Faurot
ok gilles@
2010-11-30Do what the comment actually says. Ignore the full attribute not only theClaudio Jeker
header. ATTR_UNDEF is still a bit strange though but at least it will now parse and ignore such a freak attribute correctly.
2010-11-30The returned SSL_METHOD of SSLv23_server_method()/SSLv23_client_method()Reyk Floeter
is const now, adjust the variable and silence a compiler warning.
2010-11-30The relayd processes did already bump up the socket file descriptorReyk Floeter
resource limits to the maximum of the daemon class but the host check process (hce/health checks) didn't and was limited to a fairly low default of 128 open sockets (openfiles-cur=128 in login.conf). This was reached fairly quickly with "check tcp" of many hosts. This diff increases the maximum number of monitored hosts and concurrent health checks in relayd in a significant way and may fix issues for people that have around 100 or more hosts (or fewer hosts with multiple checked ports). tested by phessler@ ok jsg@
2010-11-29Deny prefixes that have F_ATTR_PARSE_ERR set by default. Now theyClaudio Jeker
will not leak into the Loc-RIB or other RIBs but act as withdraws. The invalid prefixes would not been selected anyway but it is better to keep them out of all RIBs but the Adj-RIB-In.
2010-11-29replace the fork-based-non-blocking-resolver-hack by shiny async resolverGilles Chehade
written by eric@. it is still experimental but still better than what we had earlier so ... we'll improve in tree :) diff by me with *lots* of help from eric@, tested by todd and I (and a few people out there)
2010-11-29add rss mime type; while here, use tabs instead of spaces in atom+xml type.Igor Sobrado
ok henning@
2010-11-28remove unused functionsGilles Chehade
2010-11-28remove all unused headersGilles Chehade
2010-11-28remove unused headersGilles Chehade
2010-11-28a bit of .h cleanups, no functionnal changeGilles Chehade
2010-11-27avoid infinite loops correctly this timeMarc Espie
2010-11-27zap old-style .>= specsMarc Espie
2010-11-27minor fix for ports which install manpages in other directories: keepMarc Espie
track of all known directories, so when we generate a manpage in a new catN directory, we add the entry and it gets deleted properly. -> requires a bump to affected packages.
2010-11-26Unbreak re-indexing by checking if an index entry already exists.Martin Hedenfal
2010-11-24add *maxactive statsTodd T. Fries
"ok and no need to keep them for yourself" gilles@
2010-11-24When disabling and enabling tables set the number of hosts that are upJonathan Gray
to zero, consistent with pfe and makes other parts of the code better behaved. From Patrik Lundin. ok reyk@
2010-11-24we can't accept up to MAX_LOCALPART_SIZE (128 bytes) for the user partGilles Chehade
of an email address at session time, then fatal() when we can't fit it in a LOGIN_NAME_MAX (32 bytes) buffer in the aliases expansion code. fix aliases functions to use a buffer that's appropriate, preventing a fatal() from being triggered in aliases_exist(). bug experienced by and reported by Jason Houx, if you're testing smtpd you want to update.
2010-11-24fix spelling in an error messageStuart Henderson
2010-11-22allow weird practices such as ftp_proxy='' instead of unset altogetherMarc Espie
because, apparently, that's what they do in the 3rd world.
2010-11-20clean up cases of ;;Theo de Raadt
2010-11-19mahine->machineMiod Vallat
2010-11-19Use regular double quotes ("") in the MAILTO example so we don'tTodd C. Miller
suggest something that is a syntax error. OK jmc@
2010-11-19Prevent dhcpd(8) from trying to listen on interfaces that don't have aAntoine Jacoutot
valid broadcast (e.g. pflog0). "no objection" krw@, ok claudio@