summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-04-21Use automatic DH parameters, instead of fixed ones. Also disable DHE byJoel Sing
default since it is computationally expensive and a potential DoS vector. ok gilles@
2016-04-20from tim baumgard: a location section may not include hsts;Jason McIntyre
to that, i've added alias and tls no feedback on this diff, so let's hope i'm right/.
2016-04-19Use log_warnx() instead of log_warn() when the failure will not haveJoel Sing
resulted in errno being set. ok reyk@
2016-04-18add -T to SYNOPSIS;Jason McIntyre
2016-04-18document the -T flagJoerg Jung
original diff from Bernard Spil ok millert
2016-04-18Revert previous commit.Renato Westphal
When a process receives an EOF on a socketpair, it removes the event handler for that fd and then calls event_loopexit(). Once the process leaves the main loop, it calls its shutdown function. With that said, revert the previous patch because it was unnecessary. Pointed out and ok by deraadt@
2016-04-17fix typo, it is supposed to be smtpctl trace "filters" not "filter"Joerg Jung
from Boudewijn Dijkstra
2016-04-16Replace bcopy() from struct bpf_timeval to struct timeval; thoseMartin Natano
structures are not exchangeable. This should unbreak connection timeouts in rbootd, although I can't verify due to lack of rboot-able hardware. ok guenther millert
2016-04-16Remove am_maxslot from amap.Stefan Kempf
am_maxslot represents the total number of slots an amap can be extended to. Since we do not extend amaps, this field as well as rounding the number of slots to the next malloc bucket is not useful. This also removes the corresponding output from procmap(1). ok kettenis@
2016-04-16Change last non-/gnu/ fcntl(x, F_GETFL, 0) strays to fcntl(x, F_GETFL).Kenneth R Westerback
No functional change. ok millert@
2016-04-16fallback to _pfetch after _pkgfetch until sysmerge is run automaticallyMarc Espie
2016-04-15Check for subnet overlap between the configured summary-addresses.Renato Westphal
2016-04-15Kill the child processes if their parent dies unexpectedly.Renato Westphal
There's no point on keeping eigrpd running if any of its processes dies unexpectedly.
2016-04-15Fix segfault on reloading the config multiple times.Renato Westphal
2016-04-15Properly implement the clear_config() function.Renato Westphal
We need to free the internal pointers of the eigrpd_conf struct, not only the main struct. This avoids memory leaks when a config reload happens to fail (e.g. due to a syntax error).
2016-04-15Move several other variables out of eigrpd_conf.Renato Westphal
Now eigrpd_conf contains only variables that can be modified via a config reload. The other variables were moved to a new struct called eigrpd_global, which is now a central point for storing global variables.
2016-04-15Move the command line options out of struct eigrpd_configRenato Westphal
into an own flag field since these can't be modified via a config reload. Pulled from bgpd. Original author: claudio@
2016-04-15Fix corner case in Feasible Condition check.Renato Westphal
From the EIGRP draft: "The Feasibility Condition is met when a neighbor's advertised cost, (RD) to a destination is less than the Feasible Distance for that destination". So, according to the draf, when the Reported Distance is EQUAL to the Feasible Distance, the Feasible Condition is NOT met.
2016-04-15Minor fixes and code cleanup.Renato Westphal
* whitespace cleanup; * copy in_addr structs directly; * add more malloc return value checks; * fix some log messages; * turn ifacecnt into a static variable; * use eigrp_addrcmp() on if_deladdr() to avoid code duplication; * s/route_print_origin/log_route_origin/ * more smaller issues.
2016-04-13remove "abort" promise from debugging code in radiusdSebastien Marie
it is the default now, and the promise name isn't valid anymore. ok yasuoka@
2016-04-12The -T flag consumes the same data as the -f flag so it requiresTodd C. Miller
nlist too. Fixes a crash when the -T flag is specified due to calling kvm_read() with a NULL kvm_t. From Rob Pierce
2016-04-10convert ypldap_addr list to a tailqJonathan Matthew
ok dlg@
2016-04-10arguments to "chain" are space separated, not comma; verified by jungJason McIntyre
diff from david+bsd i also removed Op, since ... is enough/
2016-04-09Use builtin.Antoine Jacoutot
2016-04-08When bgp receives an RTM_CHANGE message for an RTF_MPATH route[1], andPeter Hessler
it finds it actually on an interface, bgpd can get confused. In this case, just log it and treat it as an RTM_ADD so bgpd doesn't suicide. [1] includes all ospfd installed routes, btw. OK benno@ sthen@
2016-04-07Place a BOOTARG_END section at the end of the boot arguments list pushedMike Larkin
to the VM during boot. i386 guest kernels need this marker to boot, and with this diff, it is possible to install and run an OpenBSD i386 guest VM using vmm(4). Note that i386 guests require a host CPU that supports unrestricted guest mode (eg, post-Nehalem) for the time being, hopefully this can be addressed later.
2016-04-07Remove headers associated with code that's been moved to other .c filesPhilip Guenther
ok mlarkin@
2016-04-06Apply revisions 1.4 and 1.5 from ldapd's ber.c to ypldap's copy, so it canJonathan Matthew
deal with messages that haven't been fully read from the server yet. Not needed yet, but will be soon. ok dlg@
2016-04-05Move more fcntl(,F_GETFL,0) -> fcntl(,F_GETFL).Kenneth R Westerback
No functional change. ok guenther@
2016-04-05Describe the format used by -s once, and refer to it when documenting -f.Jeremie Courreges-Anglas
Discussed with jmc@
2016-04-05Consistent v6-speak: hostname -> nodename, proxy NDP -> ND proxyJeremie Courreges-Anglas
Discussed with jmc@
2016-04-05Pointless commented-out lines; discussed with jmc@Jeremie Courreges-Anglas
2016-04-05etheraddr -> ether_addr, as in arp(8); discussed with jmc@Jeremie Courreges-Anglas
2016-04-05Support processors without unrestricted guest capability.Mike Larkin
ok stefan
2016-04-05Remove the iterator for control connections unfinished and unused.YASUOKA Masahiko
ok claudio
2016-04-04Directly use physical addresses from ELF header for kernel loading.Stefan Kempf
This allows us to remove the 'do_mask' parameters in read_mem and write_mem as well as the address mask operaton itself. ok mlarkin@
2016-04-04Add sys/queue.h where it's needed. Unbreak userland following recentStuart Henderson
removal from mbuf.h. ok mpi@
2016-04-04In udpsockmode codepath dhcpd.c had the promise route for pledge(2) but it wasRicardo Mestre
missing from udpsock_startup() (udpsock.c) which happens earlier and therefore would abort the program due to SIOCGIFADDR ioctl(2) on udpsock_handler Reported by Philip Higgins <phil ! unita.com.au> OK tb@
2016-04-04Hook up ndp -f.Jeremie Courreges-Anglas
Initial diff from Dimitris Papastamos. Support from mikeb@, ok benno@.
2016-04-02Eliminate superfluous 3rd params in fcntl(F_GETFL) calls.Kenneth R Westerback
ttymsg.c doesn't need to include fcntl.h. Tweak standard fd sanitising to be more like the sanitise_stdfd() used elsewhere, though other uses of 'nullfd' make importing sanitise_stdfd() itself unappetizing. Add a die(0) if dup2() fails. suggestions & ok bluhm@
2016-04-02streamline the code that checks meta information before extracting filesMarc Espie
- verify_modes should only verify modes - put the whole checking code in one single routine in validate_meta, makes the size checking code more obvious - document what's going on - prevent PkgCreate from creating impossible packages, only a few Ustar objects are actually usable.
2016-04-02sprinkle spaces to make more obvious which fields we useMarc Espie
2016-04-01Rename the 'faulty' list action to 'failed'; it clearer.Antoine Jacoutot
prodded by matthieu@ ok millert@ jung@ sthen@
2016-03-31For consistency, omit the variable name in rdaemon() prototype.Jeremie Courreges-Anglas
2016-03-31Go in the background much later, to reduce possible silent failures.Jeremie Courreges-Anglas
rev. 1.34 moved the call to daemon() before the chroot, thus hiding errors if the target directory or _tftpd user don't exist. To go in the background later we need to preopen /dev/null. The code is put in a daemon(3) like function that could be used in other daemons. Lack of error reporting spotted by ajacoutot@, initial diff from dlg@. rdaemon() "concept" discussed with semarie@. ok ajacoutot@ dlg@
2016-03-31Don't use .Aq for syntax elements that require ASCII "<>".Ingo Schwarze
Patch from Christian Heckendorf <mbie at ulmus dot me>. OK jmc@ bentley@
2016-03-31Simplify MACHINE tests, the only platforms in the tree without wsdisplayJonathan Gray
are octeon and hppa64.
2016-03-30for some time now mandoc has not required MLINKS to functionJason McIntyre
correctly - logically complete that now by removing MLINKS from base; authors need only to ensure there is an entry in NAME for any function/ util being added. MLINKS will still work, and remain for perl to ease upgrades; ok nicm (curses) bcook (ssl) ok schwarze, who provided a lot of feedback and assistance ok tb natano jung
2016-03-29If program cannot reserve memory then the user doesn't need to know exactly howRicardo Mestre
many bytes it couldn't allocate Suggested and OK from natano@ and millert@ also agrees
2016-03-29- Add missing goto in order to avoid a dereference of a null objectRicardo Mestre
- While here remove lint comment OK millert@