summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-04-10When failing to validate a peer TLS certificate in the MTA due to theBob Beck
desired name of the MX not being present in the certificate, log that this is he reason for the failure and the name we couldn't find in the cert. ok millert@ martijn@
2020-04-09No need to check for NULL before free().Kenneth R Westerback
From Geoff Hill.
2020-04-08vmm(4): add IOCTL handler to sets the access protections of the eptpd
This exposes VMM_IOC_MPROTECT_EPT which can be used by vmd to lock in physical pages. Currently, vmd just terminates the vm in case it gets a protection fault in the future. This feature is used by solo5 which uses vmm(4) as a backend hypervisor. ok mpi@ Patch from Adam Steen <adam@adamsteen.com.au>
2020-04-08bump smtpd versionEric Faurot
2020-04-06dhcpd could reference freed memory after releasing a lease withKenneth R Westerback
an unusually long uid. Reported by Adarsh Dinesh. Thanks!
2020-04-05Handle connected routes as ospfd(8) does.denis
OK remi@
2020-04-05"Protocol" keyword no longer used; from martin vahlensieckJason McIntyre
2020-04-02Use fopen() and BIO_new_fd() instead of BIO_new_file so that a possibleClaudio Jeker
open error can be better logged to the operator. The cryptowarnx function logs warnings is a less optimal way (mainly because of OpenSSL error stacks). OK benno@ deraadt@
2020-04-01Split the mft file and hash check from the mft parsing. This makes it easierClaudio Jeker
to check all files in a mft before failing and also the check is now done after the embedded cert was checked. This refactor was triggered because of a bug in mft_parse_econtent(). check_validity() altered rc but later failure code assumed that goto out is good enough to return an error (rc == -1) but since rc was 1 success was returned. This bug is now also fixed. Bug report and OK job@
2020-04-01Better warning message. Show the filename of the CRL instead of the constantClaudio Jeker
function name. Also AKI (authority key identifier) should be capitalized and use duplicated instead of dup. There was a case where this error got hit so better make it pretty.
2020-04-01Put the interface down if the kernel fails to enable pipex.Martin Pieuchot
This is necessary to not silently continue if pppx_ioctl() returns an error. Found out by and diff from Vitaliy Makkoveev. ok yasuoka@
2020-03-31Missing semi-colons.Antoine Jacoutot
2020-03-30Use defines instead of raw numbers for intervals specified by RFCFlorian Obser
4861. No binary change. While here consistently use #define<tab> instead of #define<space>.
2020-03-30Delay failure in mft parsing until all elements of FileAndHash have beenClaudio Jeker
checked. This way all corrupted or missing files should show up in a single run. This should help operators to get a better idea what and how much is broken. OK benno@
2020-03-30Check the hash and with it the presence of a file referenced in a MFT earlyClaudio Jeker
on. In case the file hash does not match or the file does not exist the full MFT is considered invalid and dropped. With this partial ROA updates based on a corrupt data set will produce less likely inconsistencies in the VRP output. With and OK job@
2020-03-29Change space to tabdenis
2020-03-29Rework of rde_asext_get()/rde_asext_put().denis
Also change get_net_link() and get_rtr_link() to work like ospfd(8) couterpart. OK remi@
2020-03-27btrace(8): simplify builtin_nsecs(); ok mpi@cheloha
2020-03-27Use the correct math to calculate how many bytes are needed for b64_pton().Claudio Jeker
The size is first rounded up in case where the input string length is not a multiple of 4. Reported by kristaps@
2020-03-27Skip first line if it starts with '#!'Martin Pieuchot
2020-03-26Add support for "alpha" suffixes in package versionsJeremie Courreges-Anglas
We already supported "beta" releases but not "alpha", probably to discourage people from pushing "alpha-quality" software in the ports tree. We have 30 ports with distfiles matching "alpha", and people just work around the lack of explicit support for "alpha" releases with mixes of crafted PKGNAME and REVISION/EPOCH. This looks needlessly complicated and a bit unfair when compared to GH_COMMIT support. Pointers from landry@ and sthen@, lgtm landry@, no objection from espie@
2020-03-23Map are printed by default now, document that option "-c" is needed :)Martin Pieuchot
2020-03-23Some architectures require <machine/param.h> to use VM_MIN_KERNEL_ADDRESS.Martin Pieuchot
Fix build on at least sparc64
2020-03-23Document some functions.Martin Pieuchot
2020-03-23Print maps when exiting unless an END rule has been defined.Martin Pieuchot
This allows to use oneliners like: # btrace -e 'profile:hz:99 { @[tid] = count(); }' ok kn@
2020-03-23Spell "status" correctly.Patrick Wildt
ok jasper@ mpi@
2020-03-22Add 'ikectl show sa' command to print information about the state oftobhe
negotiated IKE SAs, their Child SAs and resulting IPsec flows. ok patrick@
2020-03-20remove unbound files that aren't really useful here, pointed out by florian@Stuart Henderson
2020-03-20Document exit, zero and delete functionskn
While here, reword existing function descriptions a little. Feedback OK mpi jmc
2020-03-20Reshuffle code more to separate out the output functions into output.c.Claudio Jeker
Rewrite some functions to return a string instead of calling printf directly. OK benno@
2020-03-19merge update to Unbound 1.10.0Stuart Henderson
2020-03-19import Unbound 1.10.0, ok tb@Stuart Henderson
2020-03-19Use bv_name() in debug output and include the hash of a map.Martin Pieuchot
2020-03-19Add support for unnamed map.Martin Pieuchot
The following is now possible but won't print anything by default: # btrace -e 'profile:hz:99 { @[kstack] = count() }' ok patrick@, tobhe@
2020-03-19When looking at which data should be recorded by the kernel include theMartin Pieuchot
key of a map. This makes map indexed by stack traces work. For example to know where the sleeps are coming from: tracepoint:sched:sleep { @map[kstack] = count(); } ok patrick@, tobhe@
2020-03-18Add 'ikectl reset id <ID>' command to reset all SAs from policies withtobhe
matching destination ID. ok patrick@ markus@
2020-03-18time() takes a strftime(3) format stringkn
OK mpi
2020-03-18use CRLF line-ending during the SMTP dialog in the local enqueuerEric Faurot
ok millert@
2020-03-18Whitelist 'map' type in order to use them in real (non BEGIN/END) rules.Martin Pieuchot
2020-03-17Print IO device names next to path with "list-io"kn
Names help identify the right iodevice to be assigned in ldom.conf(5); they directly match the structure seen in the iLOM shell, and the output format is similar to Solaris "ldm list-io". OK kettenis
2020-03-17Exit when m_get_string() returns NULL to prevent nullptr dereference intobhe
strlen(). ok millert@
2020-03-16Initialize session.rcptto to NULL before parsing command line optinos.Todd C. Miller
Otherwise, if neither -r nor -u is specified, it will be used uninitialized. Found by tobhe@; OK tobhe@ deraadt@
2020-03-16fix cast in isdigit() calls.Sebastian Benoit
ok eric@ deraadt@
2020-03-16The assumption that in roa tables a prefix / source-as combo only appearsClaudio Jeker
once in the input file is not correct. I thought the RPKI validators would aggreagte these entries but that is not necessarily the case. There are cases where prefixes show up with the same source-as multiple times with different maxlen lenght. In those cases merge these multiple entries and keep the one entry with the longest maxlen length since that is the VRP which covers all others. Found by job@ OK benno@
2020-03-16Fix affectation that should be conditionnal tests inside asserts.Martin Pieuchot
From tom@
2020-03-15Add missing casts to unsigned char when using ctype(3).Todd C. Miller
From Hiltjo Posthuma
2020-03-13Block autoaction after it kicks in, until 60 seconds after resumeJeremie Courreges-Anglas
This prevents your laptop from immediately going back to sleep after resume, leaving you some time to look up stuff or even stop apmd in case you need the machine RIGHT NOW. Blocking autoaction until the laptop resumes prevents spurious suspend/resume cycles. Advices from cheloha@
2020-03-11fix spelling of IMSG_VMDOP_TERMINATE_VM_RESPONSE in commentJasper Lievisse Adriaanse
from Matt Schultz
2020-03-11Make traphandler_parse also set vbinds for SNMPv1 traps.Martijn van Duren
This also prevents the access of an initialized pointer in traphandler_fork_handler as found by jan@. OK jan@
2020-03-10Narrow the visibility of some functions and variables local to output.cJeremie Courreges-Anglas
Also make the outputs table const. Based on a suggestion from claudio@, ok deraadt@ claudio@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-19 13:24:25 +0000