summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2007-08-14sync printing w/ sysctl(8) and add missing sensor types to conf parser;Constantine A. Murenin
document how values are parsed in sensorsd.conf(5). ok deraadt@; man-page ok/help jmc@
2007-08-14Commentary in the examples section was wrong from the start, because it gaveConstantine A. Murenin
the impression that alerts are only issued when things go wrong, not when they come back to specification -- but this was never the case with sensorsd. Whilst here, also zip some useless examples, as we now have so many. Discussed with jmc@
2007-08-13No need to #include <netinet/in.h> twice. Noticed by Diego Casati.Kenneth R Westerback
ok stevesk@
2007-08-11add caveats section, documenting previously undocumented state dumping ↵Constantine A. Murenin
mechanism; ok jmc@ henning@
2007-08-11s/ and alerter// against previous: 'alerter' is not a standard word (yet),Constantine A. Murenin
even if it is present in certain dictionaries (it is). Also, it doesn't add that much to .Nd anyhow. Requested by jmc@
2007-08-10sync sensorsd.8: add my copyright; change NAME summary; fix some grammar;Constantine A. Murenin
fix description of when the command is executed (it was wrong from the start); say a few more words about automatic monitoring of all sensors that keep state. ok henning@
2007-08-10sync sensorsd.conf.5 with reality, including:Constantine A. Murenin
* add myself to the copyright; remove unneeded synopsis * invalid sensors can now be monitored as such (since c2k7) * manual boundaries for smart sensors are no longer ignored (since c2k7) * populate history with 4.1 and 4.2 additions * add caveats section documenting a long-standing misconception and a workaround some help jmc@; ok jmc@
2007-08-09fix CVE-2007-3304Martynas Venckus
The Apache HTTP server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the HTTP server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of service. ok miod@ (who also noticed to protect reclaim_child_processes); henning@; djm@
2007-08-08fix CVE-2006-5752Martynas Venckus
A flaw was found in the mod_status module. On sites where the server-status page is publicly accessible and ExtendedStatus is enabled this could lead to a cross-site scripting attack. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available. ok miod@, henning@
2007-08-06the ellipsis is not an optional argument; while here, sync the usageIgor Sobrado
and synopsis of commands lots of good ideas by jmc@ ok jmc@
2007-08-06Fix two issues in the RIB calculation. First rt_nexthop_add() should notClaudio Jeker
return from the inner loop if the outer loop is not finished -- just break the inner loop and continue the outside one. In rt_update() nexthops should not be cleared and freed if the new route is better. This resulted in reset RIB timers after any calculation run. Instead just mark the nexthop invalid and go on. Tested and OK pyr@
2007-08-05use memchr and a memrchr like implementation on non C strings. fixesFederico G. Schwindt
a crash triggered by specific malloc.conf settings. with help and ok millert@
2007-08-04This diff makes ntpd poll for sensors more aggressively when the use ofChris Kuethe
sensors is requested, but no sensors are found. ok henning
2007-08-03document reload command.Pierre-Yves Ritschard
ok claudio@
2007-08-02catch a few truncation cases instead of silently ignoring them. one of theTheo de Raadt
fixes is from pr 5554. ok millert, ray
2007-08-02document the reload command.Pierre-Yves Ritschard
2007-08-01cats went awayTheo de Raadt
2007-08-01cats went awayTheo de Raadt
2007-08-01- -T before -tJason McIntyre
- use .Bk/.Ek
2007-08-01allow ftp-proxy to add tag statements to teh rules it insertsHenning Brauer
clever, nice and easy diff from bsd@openbsd.rutgers.edu, ok pyr reyk
2007-07-31something went wrong w/ previous;Jason McIntyre
2007-07-31document the -d option of sensorsd; input and ok from jmc@, deraadt@Robert Nagy
2007-07-26Combine http filter/expect cases to simplify code.Jonathan Gray
ok reyk@
2007-07-26Remove the space after "Password:" in password prompts where echo isTodd C. Miller
turned off. This is consistent with historic UNIX behavior.
2007-07-25Don't fatal if the imsg pipe is closed, this is often triggered in the parentClaudio Jeker
and hides the real cause of the termination. OK norby@, reyk@, pyr@
2007-07-24Quote digest otherwise it won't be parsed as a string.Pierre-Yves Ritschard
2007-07-24make imsg_create use dynamic buffers.Pierre-Yves Ritschard
this does not change imsg_compose's behavior but allows the message's buffer to grow and will avoid sending a ton of small messages when unrolling lists between two processes. this is needed for sending multiple routes at once when updating the fib with multipath routes. discussed and ok claudio@
2007-07-24use 1 vs. -1 for true; ok henning@ krw@Kevin Steves
2007-07-24make imsg_create use dynamic buffers.Pierre-Yves Ritschard
this does not change imsg_compose's behavior but allows the message's buffer to grow and will avoid sending a ton of small messages when unrolling lists between two processes. discussed with claudio (and coming to ospfd soon).
2007-07-23fix a variable shadowing problemHenning Brauer
PR5549, From: veins@evilkittens.org
2007-07-23when multipath routes exist, display them in ospfctl sh fib output.Pierre-Yves Ritschard
ok claudio@
2007-07-2164 bit mips support for the arla lwp code, requested by todd@ long ago...Miod Vallat
2007-07-21s/ETHERTYPE_EAPOL/ETHERTYPE_PAE/ to be in line with src/sys/net/ethertypes.hDamien Bergamini
also, ETHERTYPE_PAE is the name used in the 802.1X standard. pointed out by jsg@
2007-07-18Fix uninitialised variable 'sum' in single-processor idle calculation.Ryan Thomas McBride
ok ckuethe, sturm
2007-07-18- document the fact that mkfontscale is now run as well as mkfontdir andAntoine Jacoutot
fc-cache for @fontdir ok kili@ espie@
2007-07-16typoPierre-Yves Ritschard
also found by Kevin Steves
2007-07-16use fatal and not err, the message would get lost.Pierre-Yves Ritschard
found by Kevin Steves <stevesk (at) pobox dot com>
2007-07-14- there's no point in running mkfontdir only for @fontdir ; so let's runAntoine Jacoutot
mkfontscale too (and remove fonts.scale on package removal) discussed with matthieu@ and espie@ weeks ago "seems fine" pyr@, ok espie@
2007-07-11make the demote count argument optional as advertised in the man page.Pierre-Yves Ritschard
2007-07-09Handle IPv6 on PPP printer, from Stuart HendersonCan Erkin Acar
2007-07-05use a more traditional while() instead of for() for getopt().Thordur I. Bjornsson
sync usage() to the man page. format string fixes. complain about failed calloc()'s instead of exiting silently. ok pry@,reyk@
2007-07-04Add ffs2 support; from FreeBSD. OK deraadt@Todd C. Miller
2007-07-02Display payload for DS to DS and NO DS traffic.Can Erkin Acar
ok reyk@, looks ok damien@
2007-07-02Add HISTORY and AUTHORS sections. OK jmc@.Xavier Santolaria
2007-06-30move the UpdateSet stuff into its separate file, leaving Vstat much cleaner.Marc Espie
2007-06-30fix saving of old partial packages... problem noticed by Paul IroftiMarc Espie
2007-06-29make it easy to spot wich nfs version the traffic is.Thordur I. Bjornsson
input & OK canacar@
2007-06-28Add check for nlist failure to prevent a segfault.Ray Lai
Remove ret variable, which is only set but not never checked. return (1) instead of exit(1) for consistency. Original diff from Rainer Giedat. OK millert, maja, and otto.
2007-06-27When aligning buffers correctly handle the case where theCan Erkin Acar
buffers overlap, which happens on 64 bit archs, when handling encapsulated packets. Reported and tested by Jurjen Oskam additional testing by Stuart Henderson and todd@, ok henning@
2007-06-26fix pkg_info's find_by_path behavior, which I accidentally broke twoMarc Espie
versions back...