summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2015-12-02Add back the "peerid" to the proc_compose*() functions: in relayd, IReyk Floeter
initially left it out because I didn't have a need for it. But it is actually quite useful to carry a reference to the imsg data context across processes.
2015-12-02The earlier "nifs" change broke the configuration file; unbreak it byReyk Floeter
adding a missing bit.
2015-12-02Start tweaking vmd's privsep and daemon model by splitting the mainReyk Floeter
process into multiple parts and adopting the "proc.c"-style from other daemons. This allows to further reduce the privileges, to give better pledge(2), and to add some upcoming changes. "please do" mlarkin@, deraadt@
2015-12-02whitespacesGilles Chehade
2015-12-02comment typommcc
2015-12-01add missing fclose(3)Gleydson Soares
ok tedu@
2015-12-01missing articles in previous;Jason McIntyre
2015-12-01Fix -i option handling.Alexander Hall
ok reyk@
2015-12-01whitespaceGilles Chehade
2015-12-01Steal code from kern/subr_disk.c to check for a protective MBR beforeKenneth R Westerback
using GPT info. Otherwise GPT remnants might become revenants.
2015-12-01Print PME# state together with the PCI power state when enabled/asserted.Mark Kettenis
2015-12-01add received-auth parameter to listener to identify authenticated sessionsGilles Chehade
in locally appended Received header when enabled ok millert@, jung@
2015-12-01Fix a couple typos. ok yasuoka@mmcc
2015-12-01update enum values in listen optionsGilles Chehade
2015-12-01aviion went awayTheo de Raadt
2015-12-01when peer outputs a multi-line response, concat response into a single logGilles Chehade
ok sunil@, jung@
2015-12-01Use setsockopt(ROUTE_MSGFILTER) instead of hand-rolled filtering.Jeremie Courreges-Anglas
ok florian@
2015-12-01This RTM_GET case can't trigger due to the filtering done above.Jeremie Courreges-Anglas
ok florian@
2015-12-01It is not a network hackathon without a bgpd commit. So here we go.Claudio Jeker
Fix rdomain setups that got broken some time ago when I refactored the config loading to exec the rde and se on startup. Works for me and I think I'm the only user.
2015-12-01reorder headerGilles Chehade
2015-12-01whitespaceGilles Chehade
2015-12-01delay between retries when operating as a secondary MX increases too much,Gilles Chehade
reduce it to something saner. while at it cleanup some whitespaces and set the relay task pointer to NULL before iterating over tasks
2015-12-01cleanup MakefileGilles Chehade
2015-12-01cleanup MakefileGilles Chehade
2015-12-01cleanup MakefileGilles Chehade
2015-12-01add IMSG_SMTP_CHECK_SENDER in list of smtp IMSGGilles Chehade
2015-12-01add IMSG_SMTP_CHECK_SENDER in preparation for another diffGilles Chehade
2015-12-01prepare the ground for the CA certificate handling refactor, this commitGilles Chehade
adds the parse.y bit + structures & members needed but does not make use of it yet
2015-12-01switch to new _ftp_proxy user; ok dlgTheo de Raadt
2015-12-01switch to new _tftp_proxy user; ok dlgTheo de Raadt
2015-12-01Don't need <sys/types.h> and <sys/param.h>. Nuke the former when DEV_BSIZEKenneth R Westerback
is needed.
2015-11-30pledge regression: some operations appear to want to getpwent fromTheo de Raadt
spwd, then apply to a new password database. This runs into issues also with the new shadow routines. Needs to be looked at more, but for now remove pledge to make the shadow issues easier to figure out..
2015-11-30Sort includes.Jeremie Courreges-Anglas
2015-11-30Fix error message after conversion from select(2) to poll(2).Jeremie Courreges-Anglas
2015-11-30Kill Mobile IPv6 references. Also spotted by florian@Jeremie Courreges-Anglas
2015-11-30Clean up get_next_msg(): kill dead argument/codeJeremie Courreges-Anglas
The "ifindex" argument has always been zero, making the interface index checks within get_next_msg() useless. The caller already properly retrieves and handle the interface index of the routing messages. ok florian@
2015-11-30Remove the already disabled Router Renumbering support (RFC2894).Jeremie Courreges-Anglas
This code has only been reachable for two months after rtadvd has been imported into the tree. This unsafe protocol is supposed to be used along with IPsec and rrenumd(8), a KAME tool that we don't have. I couldn't find an example of use in the real world. ok sthen@ florian@ millter@
2015-11-30remove table-passwd, table-sqlite, and table-ldapJoerg Jung
about 4k lines seldom used code people who rely on this install mail/opensmtpd-extras direction discussed (and agreed) with many ok gilles
2015-11-30Revert the sync -> fsync conversion (at least for the time being) - thereJoel Sing
is a good chance that this is causing the 'No blocks to load' errors that various people have encountered.
2015-11-30change Xrs from now-defunct db(3) to dbopen(3); this wasn;t aJason McIntyre
straight replace: thanks both to schwarze and maja for feedback on how to rewrite parts; i've snuck in an rcs id->openbsd id change in dev_mkdb too;
2015-11-30fix prototypeGilles Chehade
2015-11-30smtpd-api.h update, missing prototypes, no functional changeGilles Chehade
2015-11-30add a couple smtpd-specific defines we want to expose to filtersGilles Chehade
and comment to clarify what they are used for
2015-11-30if a ca_name is set, dump it to on-disk envelope so we recall it on reload.Gilles Chehade
we don't set ca_name yet, it is part of a larger diff i'm splitting
2015-11-30add ca_name field to some structures in preparation for a largerGilles Chehade
diff to refactor handling of CA certificates
2015-11-30when looking up tables, start in /usr/local/libexec before /usr/libexec, soGilles Chehade
ports/packages can be installed in the proper place ok jung@
2015-11-30bring lka_mailaddrmap(), currently unused, required by sendermap/masqueradeGilles Chehade
ok jung@
2015-11-30handle "mda command too long" as a tempfailGilles Chehade
2015-11-30replace a fatalx() with a graceful failureGilles Chehade
2015-11-30update to.c to fix IPv6 address parsing in smtpd.conf, while at it allowGilles Chehade
use of tls+backup:// schema for relaying over TLS to primary MX ok sunil@, ok jung@