summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2009-03-04plug a memory leak, remove lka session from the the lka session tree whenGilles Chehade
we are done expanding aliases/forwards, and cleanup a bit the expansion code so that I can soon remove some of the duplication.
2009-03-03when forwards/aliases expansion fails in an lka session, make sure that mfaGilles Chehade
is notified so that the session does not hang
2009-03-03Fix a long standing issue where ~/.forward files were opened by user _smtpdGilles Chehade
causing them not to be handled when a user's homedir is set to mode 0700. I still need to do some cleanup and make sure it works as it should, but this diff provides better behavior than what we had.
2009-03-03fix mbox locking by having it done by mail.local(8) which in turns usesGilles Chehade
lockspool(1). this means our mbox delivery follows a code path that has become almost identical to external mda deliveries. this is the first of a serie of diffs actually... lockspool(1) suggestion by deraadt@, mail.local(8) idea by jacekm@, and fix and testing by me
2009-03-03stupid bug. If I don't name the class the same way, I don't overrideMarc Espie
behavior correctly. Be consistent, use the same naming scheme. problem noticed by Brad Smith.
2009-03-03spacesKevin Steves
2009-03-01- Refuse delivery to mbox that is a symlink, pipe, chardev, etc. etc.Jacek Masiulaniec
- Introduce secure_file, based on secure_filename from OpenSSH, it checks that mbox has right perms, and that path components are trustworthy, too. ok gilles@
2009-03-01open mbox with O_EXLOCK (better than open+flock), and without O_SYNC,Jacek Masiulaniec
since fsync is done in final safe_fclose; ok gilles@
2009-03-01Print the correct function name in log_debug().Michele Marchetto
OK claudio@ stsp@
2009-03-01fix possible NULL dereference when getpwnam fails; ok gilles@Jacek Masiulaniec
2009-03-01make the condition under which delivery is made by SMTPD_USER moreJacek Masiulaniec
explicit; ok gilles@
2009-03-01simplify *_open functions by passing them char * instead of structJacek Masiulaniec
path *; ok gilles@
2009-03-01deny regular users to run "smtpctl show stats" and "smtpctl schedule";Jacek Masiulaniec
ok gilles@
2009-03-01In "smtpctl show stats", break queue.inserts into queue.inserts.remoteJacek Masiulaniec
and queue.inserts.local; ok gilles@
2009-03-01ss_len was set to sizeof pointer, should be sizeof structure; ok gilles@Jacek Masiulaniec
2009-02-26Change apmd to use the new _REQ ioctls for zzz, this gives X a chance toOwain Ainsworth
vt-switch internally so it's likely to actually survive the suspend. tested by beck@, sthen@. ok deraadt@
2009-02-26revert 1.50 and 1.51. kettenis discovered they don't let his sparcle go ↵Ted Unangst
slow enough
2009-02-25add a stupid workaround for a race somewhere in the crypto code in theHenning Brauer
kernel. a one second sleep has made it go away in all my tests. ok theo
2009-02-25Fix an invalid pointer dereference in control_close(). If control_connbyfd()Claudio Jeker
fails -- which should never happen -- the function does not return and is accession the NULL set control pointer later on. Found by Matthew Haub. OK deraadt@
2009-02-25NULL pointer dereferenceGilles Chehade
spotted by Matthew Haub <matthew.haub@alumni.adelaide.edu.au>
2009-02-25remove chown's called when running with user privs, ie. basically noops;Jacek Masiulaniec
ok gilles@
2009-02-24fix tilde expansion (eg. ~/Mail); ok gilles@Jacek Masiulaniec
2009-02-24teach smtpctl's parser how to deal with parameters that are not necessarilyGilles Chehade
a token so that it is possible to do: smtpctl schedule <message id/uid> introduce F_MESSAGE_FORCESCHEDULE which lets the runner schedule a message even if the retry delay has not been expired. F_MESSAGE_ENQUEUED is a valid flag for a message and should not cause an\ errx() in smtpctl show queue
2009-02-23add valid_message_id() and valid_message_uid() which test that a message idGilles Chehade
and uid do not look wrong. this was not needed earlier because we only deal with message id's coming from trusted sources, but smtpctl will soon have a new feature which requires us to deal with user provided message id's.
2009-02-23better detect short frames. always print the version and length of theDavid Gwynne
frame according to the pfsync header. dont try to parse an unsupported version of the protocol.
2009-02-23add missing headers needed by time()Charles Longeau
ok jacekm@ gilles@
2009-02-22Fix race possible between runner and queue when starting up.Jacek Masiulaniec
runner_reset_flags would attempt to update envelope, but its envelope.tmp could be renamed by queue_purge. The fix is to store envelope.tmp in a place no other process writes to, and /queue/envelope.tmp is perfect for this. ok gilles@
2009-02-22reorganize code so that couple of indentation levels can be removed;Jacek Masiulaniec
ok gilles@
2009-02-22add missing headersCharles Longeau
ok gilles@
2009-02-22put repeated inet_ntop calls into new func ss_to_text, which usesJacek Masiulaniec
getnameinfo internally; ok gilles@
2009-02-22simplify qwalk() error handling; ok gilles@Jacek Masiulaniec
2009-02-22replace MAX* constants by sizeof where possibleOleg Safiullin
ok jacekm@
2009-02-20purge /enqueue at startup; ok gilles@Jacek Masiulaniec
2009-02-20Fix "Received: from" headerspea
ok gilles@
2009-02-19Use rde_router_id() instead of directly accessing rdeconf->rtr_id.s_addr.Stefan Sperling
"For sure!" claudio@
2009-02-19Enable origination of Intra-Area-Prefix LSAs in rde.Stefan Sperling
New Intra-Area-Prefix LSAs are originated when a neighbour becomes adjacent, or when a neighbour loses adjacency, or when an interface changes state. ok claudio@
2009-02-19Virtually re-implement origination of Intra-Area-Prefix LSAs.Stefan Sperling
We now comply with RFC5340 and move prefixes between the two ref-types of Intra-Area-Prefix LSAs (router and network). In case an LSA ends up having all of its prefixes moved to another one, the LSA is flushed from the LSDB by re-originating with MAX_AGE. (This does not yet work reliably. We end up having LSAs with zero prefixes in the LSDB in some cases. Should not affect SPF calculation, so not much harm done, but will need to be fixed.) This commit just adds the necessary code to do origination, but it is not being called yet. This will be done in a separate commit. "Looks good." claudio@
2009-02-19Remove origination of Intra-Area-Prefix LSAs from ospfe.Stefan Sperling
Will soon be done in rde instead. "Sure but don't wait too long before readding the code in rde" claudio@
2009-02-19Sync iface fsm state from ospfe to rde.Stefan Sperling
Also syncs other fields the ospfe is syncing to when getting iface updates from parent process. None of these fields are used by the rde yet, but state will be important soon, for proper origination of Intra-Area-Prefix LSAs. ok claudio@
2009-02-19In ospfe, originate new Router and Network LSAs before informing RDEStefan Sperling
about nbr state change. Intra-Area-Prefix LSAs refer to these LSAs. While not strictly necessary, it makes sense for these LSAs to be up-to-date in the LSDB before new Intra-Area-Prefix LSAs are originated. This change has no effect yet because Intra-Area-Prefix LSAs are currently originated during updates of LSA types it depends on, but origination will soon be synced to state changes in the iface and nbr state machines instead. ok claudio@
2009-02-19Make ospfe send correct nbr state to RDE.Stefan Sperling
ospfe was sending state from a local variable which does not always reflect the true state of the neighbour. The RDE would end up with an invalid nbr state of zero in some situations. Send state saved in nbr structure instead, this is always valid. ok claudio@
2009-02-19Use a bob sized header for IPv6 not the default pedro sized one.Claudio Jeker
Seems like nobody ever tried to dump IPv6 tables. Found while reworking this code.
2009-02-19don't let libevent buffer long lines forever; ok gilles@Jacek Masiulaniec
2009-02-18- add basic syntax checking to mfaJacek Masiulaniec
- decline source routing at MAIL FROM, strip at RCPT TO ok gilles@
2009-02-18IMSG_MFA_RCPT handlers are almost identical, put common code in newJacek Masiulaniec
mfa_test_rcpt; ok gilles@
2009-02-18fix compiler warning; ok gilles@Jacek Masiulaniec
2009-02-18Print spi in lowercase hex for consistency with print-enc.c and ipsecctl.Ryan Thomas McBride
ok hshoexer msf
2009-02-18previous commit was incomplete, this fixes ssmtpGilles Chehade
2009-02-18smtp_accept() now requests from lka that it performs the hostname lookupGilles Chehade
and inserts the session into the session tree. session_init() is called only when we receive the resolution answer. this fixes a race condition that would sometimes cause the hostname to appear as "<unknown>" in headers just because dns was lagging, and it unbreaks ssmtp support which suffered from th very same race condition.
2009-02-17- flock input file while the database is being builtJacek Masiulaniec
- make newaliases finish with short summary ok gilles@