summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2014-04-03add mention about "monitor" command.YASUOKA Masahiko
2014-04-03calucuation of response message size was wrong.YASUOKA Masahiko
2014-04-02use setresgid()Theo de Raadt
ok guenther millert
2014-04-01Remove -ggdb -g3, this shouldn't be hereFederico G. Schwindt
Requested by deraadt@
2014-04-01cleanup forkmda() and get rid of a useless seteuid()-based danceGilles Chehade
prompted by deraadt@, ok eric@
2014-03-29bugfix and security update to 1.4.7:Robert Nagy
CVE-2014-0133 does not affect OpenBSD because SPDY is not enabled ok florian@
2014-03-29use deltaT to calculate time intervalls; reduces diff to traceroute6Florian Obser
OK benno@, lteo@
2014-03-29use iovec in wait_for_reply; reduces diff to traceroute6Florian Obser
OK benno@
2014-03-27one more Xr to smtpd;Jason McIntyre
2014-03-27switch smtpd and sendmail examples now that smtpd is the defaultGilles Chehade
ok jmc@ tedu@
2014-03-27adjust commented-out sample blocks for PHP and SSL configurations:Stuart Henderson
- add a small shared SSL session cache - disable rc4 ciphers in sample config - switch to a unix socket for php-fpm - use try_files to avoid passing non-existing files to php http://wiki.nginx.org/Pitfalls#Passing_Uncontrolled_Requests_to_PHP ok robert@
2014-03-27zap dead code; OK lteo@Florian Obser
2014-03-27restore_sum: remove newly created sum file(s).Antoine Jacoutot
2014-03-26login.conf(5) is not special anymore.Antoine Jacoutot
2014-03-26Remove bsd-wrapper pieces to handle pulling unbound-host.1 from src,Stuart Henderson
no longer needed now that this file is handled the same in Unbound's build infrastructure as the other manpages.
2014-03-26Handle unbound-host(1) the same way as other manpages and have configureStuart Henderson
generate a copy in the build directory. Removes some complexity and fixes a problem noticed by rpe@ when running 'make -f Makefile.bsd-wrapper clean' in src dir without having an obj dir present. From upstream r3100.
2014-03-26Print correct filename if config errors exist in an "include"d file.Stuart Henderson
From upstream r3099
2014-03-26asr API is now publicEric Faurot
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2014-03-25update after asr API updateEric Faurot
2014-03-25reword error message when a table has an invalid configuration file, it hasGilles Chehade
confused a few people ok eric@
2014-03-25when locally enqueuing messages without specifying a domain for sender orGilles Chehade
recipient, the local domain is assumed. this was correctly handled at the smtp level, but headers were not updated to reflect that. issue experienced by several people, fix tested by ajacoutot@ and I ok eric@
2014-03-25Integrate necessary dns packet parsing helpers from asr.Eric Faurot
They are not supposed to be exposed. ok gilles@
2014-03-24Rework the way we fetch and verify sets to simplify the process.Antoine Jacoutot
Don't fetch SHA256 twice when we are updating from the same repo. Better output. Simplify extract_set (becomes extract_sets and deal with all sets at once). Make sure we cannot pass -s xetcXX and/or -x etcXX. Bring consistency in condition evaluations. Drop some unused variables. with inputs from rpe@
2014-03-24do not call purge_task every 10 secs, it is only needed once at startup andGilles Chehade
will cause the parent process to wake up unnecessarily at runtime ok eric@
2014-03-24don't proceed in case of permission errorsMarc Espie
2014-03-24Remove "-r" option from ping(8) and traceroute{,6}(8). You've probablyMartin Pieuchot
never heard about it, it was to bypass the routing tables, not available for IPv6 and we're going to always use the routing tables soon. ok florian@, man pages ok jmc@
2014-03-24Passing MSG_DONTROUTE to sendto() here has no effect since SO_DONTROUTEMartin Pieuchot
is only implemented for IPv4. Just remove it. Tested by and ok florian@
2014-03-24Remove commented out MSG_DONTROUTE flag. No object change.Martin Pieuchot
ok florian@
2014-03-22Fix trap: do not remove the entire WRKDIR -- we may have our backed up filesAntoine Jacoutot
in there.
2014-03-22Also remove TEMPROOT in error_rm_wrkdir.Antoine Jacoutot
2014-03-22Make sure to add missing users/groups _before_ running theAntoine Jacoutot
distribution-etc-root-var target; otherwise mtree(8) can fail. issue reported and debugged by deraadt@ ok sthen@
2014-03-22disable the imsg buffers profiling code unless requested, this will preventGilles Chehade
all processes from waking up every second
2014-03-22Now tunnel can have multiple listen addresses.YASUOKA Masahiko
2014-03-22Reimplement control part of npppd(8) with imsg. Also add "monitor"YASUOKA Masahiko
command for npppctl(8) to monitor PPP session start/stop events.
2014-03-22Add an assert not to call radius_cancel_request() on callback. If theYASUOKA Masahiko
assert is disabled by compile time, the function returns immediatly on that condition.
2014-03-22Fixed a bug in npppd_auth_get_user() which caused segmentation faults afterYASUOKA Masahiko
a user authentication is succeeded in case the authentication config option has `username-suffix' and 'strip-atmark-realm' is yes. Delete `username-prefix' from authentication setting. This config option was mis-leading and useless.
2014-03-22In RADIUS accounting, realm_framed_ip_address was mistakenly used forYASUOKA Masahiko
Framed-IP-Address. acct_framed_ip_address should be used for that purpose.
2014-03-22Don't stop listening 1723/tcp when accept() is failed.YASUOKA Masahiko
2014-03-22Stop output "Stopped" log message of the tunnel protocols.YASUOKA Masahiko
2014-03-21Disable MS-CHAPv1 (RFC 2433) support. Undocumented; Microsoft droppedChristian Weisgerber
support in 2007 (Windows Vista); requires MD4, which will be removed. ok sthen@
2014-03-21Use ftp -D.Antoine Jacoutot
2014-03-21Fix small regression when not using a full path to sets.Antoine Jacoutot
2014-03-21Install a /var/unbound/db directory, writable by the _unbound daemon,Stuart Henderson
and use it as the default location for the DNSSEC root key. Update default config for this location. With this, the only step required to enable DNSSEC validation is to uncomment these default config entries and restart: #module-config: "validator iterator" #auto-trust-anchor-file: "/var/unbound/db/root.key" There is no longer a requirement to run unbound-anchor manually to update the root key. The rc.d script will take care of updates at boot, and Unbound will manage the file itself at runtime. Test with "dig test.dnssec-or-not.net txt @127.0.0.1" or similar.
2014-03-20- add a comment pointing to http://wiki.nginx.org/Pitfalls, it has importantStuart Henderson
information for people writing nginx configuration. - remove commented-out "ssl_protocols SSLv3 TLSv1" line; nginx default is "SSLv3 TLSv1 TLSv1.1 TLSv1.2", so uncommenting this line removes desirable protocols ok robert@
2014-03-20Cope with recent signify(1) changes and simplify getting/checking the sets.Antoine Jacoutot
ok sthen@ rpe@
2014-03-19use smtpd man pages by default. ok deraadt jmcTed Unangst
sendmail.8 note by jmc
2014-03-19Remove #ifdef FreeBSD.Martin Pieuchot
2014-03-19Pull in FreeBSD r37363 and r37887:Philip Guenther
-- Sync timestamp changes for inodes of special files to disk as late as possible (when the inode is reclaimed). Temporarily only do this if option UFS_LAZYMOD configured and softupdates aren't enabled. UFS_LAZYMOD is intentionally left out of /sys/conf/options. This is mainly to avoid almost useless disk i/o on battery powered machines. It's silly to write to disk (on the next sync or when the inode becomes inactive) just because someone hit a key or something wrote to the screen or /dev/null. -- Made lazy syncing of timestamps for special files non-optional. -- Also, include support in 'pstat -v' to display the IN_LAZYMOD flag. ok tedu@ millert@
2014-03-18Retire hp300, mvme68k and mvme88k ports. These ports have no users, keepingMiod Vallat
this hardware alive is becoming increasingly difficult, and I should heed the message sent by the three disks which have died on me over the last few days. Noone sane will mourn these ports anyway. So long, and thanks for the fish.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-26 11:33:47 +0000