summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-04-22Check for the dispatcher name in the envelope validation function.Eric Faurot
Fixes a possible crash and caching issue when manually moving an envelope to the queue with smtpctl discover. ok millert@
2020-04-21tweak previous;Jason McIntyre
2020-04-21vmd: improve concurrency control in pausepd
Previous implementation hit a deadlock sometimes as the pthread_cond_broadcast for the pause mutex could happen before pthread_cond_wait. This implementation uses a barrier which is hit when all vpcus are paused. ok mpi@
2020-04-20Document the suggested interval in man pagejob
2020-04-20Strip the 'in bgpd' in the title of the rpki-client man page.Claudio Jeker
rpki-client is not only for bgpd (especially in the portable version). From Robert Scheck. OK job@ benno@
2020-04-18rename the "options" field to "flags" (as suggested by millert): an optionalJason McIntyre
options field was difficult to describe concisely; - tweak wording accordingly - sort flags - condense STANDARDS to avoid text repitition, as suggested by deraadt - document flags may be combined, now deraadt fixed the parsing ok millert deraadt
2020-04-18Rewrite the flag-parsing code to be getopt-like. Tight formations likeTheo de Raadt
-ns are now possible, as well as (useless) repetition like -nnn. ok millert
2020-04-18use correct path for the default cache dir in rpki-client(8). ok claudio@Stuart Henderson
2020-04-18improve whitespaces in usageTheo de Raadt
2020-04-17switch email and result fields in mail-from/rcpt-to event reportsEric Faurot
and bump protocol version. discussed with jung@, martijn@ and Gilles. ok jung@
2020-04-17Document using /etc/ethers to look up ethernet addresses. ok krw@,Darren Tucker
wordsmithing jmc@
2020-04-17Log skipped jobs in job_add() not job_runqueue().Todd C. Miller
We want to log when the job is added but will not be run, not every time the run queue is processed.
2020-04-16Support looking up ethernet addresses in /etc/ethers at dhcpd startup time.Darren Tucker
If the lookup fails it falls back to parsing the ethernet address normally. ok krw@
2020-04-16Reflow text so that the -[nsq] options are described as an optional [options]Theo de Raadt
field before command, rather than muddling up the command description to explain them messily as some sort of exception ok millert
2020-04-16Add a mechanism to prevent cron jobs from running concurrently.Todd C. Miller
This adds a new "-s" flag to the command field which indicates that only a single instance of the job should run concurrenty. OK beck@ job@ deraadt@
2020-04-16remove the libcrypto cleanup before exit. Most of the functions areClaudio Jeker
officially deprecated and even if not exit(3) will take care of freeing all that memory anyway. Non of the functions do any cleanup beyond simple memory deallocation. OK benno@ deraadt@
2020-04-16It is unclear why data is memcpy-ed into a char buf[2] that is used asClaudio Jeker
argument to ntohs(). Just memcpy to a uint16_t value and ntohs this value. Fixes possible alignment issues as reported by newer gcc compilers. OK beck@
2020-04-16Revert last commit, this file slipped in.Claudio Jeker
2020-04-16Replace deprecated ERR_remove_state(0) with ERR_remove_thread_state(NULL);Claudio Jeker
OK tb@
2020-04-16Make the control socket name depend on the routing domain we are in.Florian Obser
That way, when slaacd gets started in a different rdomain with route exec things just work, no need to provide an alternative control socket. Pointed out by claudio Original diff by benno, but I like my bikeshed purple. OK benno, claudio
2020-04-15add support for printing RfC 2332 NBMA Next Hop Resolution Protocol (NHRP)remi
ok dlg@
2020-04-15Make map functions accept a "struct map *" instead of a "struct bt_var *".Martin Pieuchot
This is a step towards reducing the type casting crazyness.
2020-04-15Document filters: one type of predicates checked in kernel.Martin Pieuchot
By default a PID filter is set by dt(4) to not record events for the tracing program. The other type of predicates, which are checked in userland, is coming soon!
2020-04-15Crank key size to 256 to avoid conflicts when storing stack traces in maps.Martin Pieuchot
2020-04-15Stop including <machine/param.h> and <machine/vmparam.h>.Martin Pieuchot
There's no need to redefine the INKERNEL() macro in userland because stacktrace_save_at() only saves kernel stack traces. If we decide to use the same interface to unwind & save userland stack traces we can simply indicate that in the "struct stacktrace". Discussed with deraadt@ and kettenis@
2020-04-15Use the new random interval support in cron instead of a random sleep.Todd C. Miller
The random intervals used can be adjusted as needed. OK deraadt@
2020-04-15Add support for random values using the '~' operator.Todd C. Miller
For example "0~30" will result in a random value between 0 and 30 inclusive. If either (or both) of the numbers on either side of the '~' are omitted, the appropriate limit (low or high) for the field will be used. OK deraadt@ beck@ jmc@
2020-04-12If all addresses are numeric no use for dns probe; ok florian@ sthen@Otto Moerbeek
2020-04-11Avoid using libc SHA256File(), just perform the operation inline toTheo de Raadt
make things easier for -portable ok claudio
2020-04-11To help -portable, use a strrchr instead of basename, since we know whatTheo de Raadt
kinds of paths are coming in here. ok benno claudio
2020-04-11remove a __unused attribute, it's obvious and complicates things.Sebastian Benoit
ok claudio@
2020-04-11Zap double definition of conf and make ibuf_dns static to avoid doubleOtto Moerbeek
definition; from Michael Forney
2020-04-10When failing to validate a peer TLS certificate in the MTA due to theBob Beck
desired name of the MX not being present in the certificate, log that this is he reason for the failure and the name we couldn't find in the cert. ok millert@ martijn@
2020-04-09No need to check for NULL before free().Kenneth R Westerback
From Geoff Hill.
2020-04-08vmm(4): add IOCTL handler to sets the access protections of the eptpd
This exposes VMM_IOC_MPROTECT_EPT which can be used by vmd to lock in physical pages. Currently, vmd just terminates the vm in case it gets a protection fault in the future. This feature is used by solo5 which uses vmm(4) as a backend hypervisor. ok mpi@ Patch from Adam Steen <adam@adamsteen.com.au>
2020-04-08bump smtpd versionEric Faurot
2020-04-06dhcpd could reference freed memory after releasing a lease withKenneth R Westerback
an unusually long uid. Reported by Adarsh Dinesh. Thanks!
2020-04-05Handle connected routes as ospfd(8) does.denis
OK remi@
2020-04-05"Protocol" keyword no longer used; from martin vahlensieckJason McIntyre
2020-04-02Use fopen() and BIO_new_fd() instead of BIO_new_file so that a possibleClaudio Jeker
open error can be better logged to the operator. The cryptowarnx function logs warnings is a less optimal way (mainly because of OpenSSL error stacks). OK benno@ deraadt@
2020-04-01Split the mft file and hash check from the mft parsing. This makes it easierClaudio Jeker
to check all files in a mft before failing and also the check is now done after the embedded cert was checked. This refactor was triggered because of a bug in mft_parse_econtent(). check_validity() altered rc but later failure code assumed that goto out is good enough to return an error (rc == -1) but since rc was 1 success was returned. This bug is now also fixed. Bug report and OK job@
2020-04-01Better warning message. Show the filename of the CRL instead of the constantClaudio Jeker
function name. Also AKI (authority key identifier) should be capitalized and use duplicated instead of dup. There was a case where this error got hit so better make it pretty.
2020-04-01Put the interface down if the kernel fails to enable pipex.Martin Pieuchot
This is necessary to not silently continue if pppx_ioctl() returns an error. Found out by and diff from Vitaliy Makkoveev. ok yasuoka@
2020-03-31Missing semi-colons.Antoine Jacoutot
2020-03-30Use defines instead of raw numbers for intervals specified by RFCFlorian Obser
4861. No binary change. While here consistently use #define<tab> instead of #define<space>.
2020-03-30Delay failure in mft parsing until all elements of FileAndHash have beenClaudio Jeker
checked. This way all corrupted or missing files should show up in a single run. This should help operators to get a better idea what and how much is broken. OK benno@
2020-03-30Check the hash and with it the presence of a file referenced in a MFT earlyClaudio Jeker
on. In case the file hash does not match or the file does not exist the full MFT is considered invalid and dropped. With this partial ROA updates based on a corrupt data set will produce less likely inconsistencies in the VRP output. With and OK job@
2020-03-29Change space to tabdenis
2020-03-29Rework of rde_asext_get()/rde_asext_put().denis
Also change get_net_link() and get_rtr_link() to work like ospfd(8) couterpart. OK remi@
2020-03-27btrace(8): simplify builtin_nsecs(); ok mpi@cheloha
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 22:43:38 +0000