summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-07-27checking for firmware works better if I pass thru all optionsMarc Espie
2016-07-27don't include firmwares in the fuzzy auto-reinstall listMarc Espie
2016-07-27hunting around for some sporadic error message. Removing the hash entryMarc Espie
entirely is slightly better. noticed by sthen@
2016-07-27According to RFC 7231 4.3.7, OPTIONS may have body. "Although thisReyk Floeter
specification does not define any use for such a payload, future extensions to HTTP might use the OPTIONS body to make more detailed queries about the target resource." The future has arrived. Found and tested by Michael Lechtermann OK benno@
2016-07-27Improve parsing of the Host by following RFC 7230 Section 5.4 more strictly:Reyk Floeter
- Respond with a 400 (Bad Request) if there is more than one Host: header to prevent ambiguities. - Make sure that the host in the optional absolute form of request-target (eg. GET http://www.target.com/ HTTP/1.1) matches the Host: value. Proxies are supposed to ignore the Host: value if the request-target exists, but relayd used to ignore the absolute request-target form instead. In HTTP terminology, relayd is a gateway and not a proxy, but it has to make sure that the host is validated consistently. OK benno@ bluhm@
2016-07-25Fix rarpd hang. The receive buffer of a route socket can become fullVisa Hankala
while rarpd process is idle. To avoid getting stuck in rtmsg(), the process has to clear the buffer and retry. ok benno@ deraadt@ millert@
2016-07-25Initialize the log subsytem in the SE like it is done in the RDE. WithoutClaudio Jeker
this all logging is going via stderr to /dev/null which is not helpful. OK deraadt@ phessler@
2016-07-25err() instead of errx(); noted by timTheo de Raadt
2016-07-24Split the root vs not-root cases better with regards to chroot setup.Theo de Raadt
ok kettenis benno tedu canacar
2016-07-24bump versionGilles Chehade
ok deraadt@
2016-07-23no quirks in FwUpdate.Marc Espie
okay theo
2016-07-22Create a smtp transaction context on a session only for the duration ofEric Faurot
that transaction. ok gilles@
2016-07-22"wpath" is needed in the parent pledge when using the /dev/switch0 device.Reyk Floeter
2016-07-22fix some cases where we relay_abort_http() the connection too soon.Sebastian Benoit
instead, pass a more specific error back and handle the errors in relay_test() instead. reported by Arto Jonsson and Hiltjo Posthuma, thanks! ok bluhm@ reyk@
2016-07-21Add basic support for OpenFlow 1.3 PACKET_IN+PACKET_OUT,Reyk Floeter
no FLOW_MOD yet.
2016-07-21Remove a fatal() in peer_up when the local addrs of a peer can't be figured out.Claudio Jeker
Instead bring the session down and wait for admin help. OK henning@, benno@, phessler@
2016-07-21long to uint32_t portReyk Floeter
2016-07-21With uint32_t ports, we cannot sneak the port into an int anymoreReyk Floeter
2016-07-21Turn ofp*_debug functions into ofp*_validate functions to follow aReyk Floeter
similar approach like iked: first validate the packet, then parse it, and execute actions. debug logging is a side effect of validation.
2016-07-212004 privsep caused "tcpdump -r" to became a priviledged operation becauseTheo de Raadt
we felt chroot-containment was also necessary for off-line analysis. Today use of pledge "stdio" for the packet parser acts as an even better sandbox. We can therefore silently ignore chroot setup failure, and regain tcpdump -r support. Result of a discussion with tedu -- which probably happened because we became aware of the laughable retarded -Z option in upstream tcpdump. ok tedu sthen guenther stsp
2016-07-20fix typos in commentsReyk Floeter
2016-07-20pledge switchctlReyk Floeter
2016-07-20pledge(2) all the switchd processes.Reyk Floeter
2016-07-20Handle ports as uint32_t instead of in_port_t: OpenFlow 1.0 used 16bitReyk Floeter
ports, but later versions switched to 32bit ports (for the case that a virtual switch has more than 65535 switch ports, of course).
2016-07-20Parse and print OpenFlow 1.3 PACKET_IN and OXM (Openflow eXtended Match) -Reyk Floeter
no action yet.
2016-07-20Use more compact idiom to select architecture dependent files to compile. NoKenneth R Westerback
intentional functional change. Diff from Miod. ok millert@ deraadt@
2016-07-20Update OpenFlow 1.3 stub based on the 1.0 code.Reyk Floeter
2016-07-20Fix dependencies of generated map files.Reyk Floeter
2016-07-20Add a -n flag to check the configuration and exit. Matches what almostJonathan Gray
all the other daemons do. ok reyk@
2016-07-20Fix typoYASUOKA Masahiko
from Atzm Watanabe
2016-07-19The -DNAME=switch flag is an artifact from the PoC when I couldn'tReyk Floeter
decide on a name. Remove it and fix the name to switchd now.
2016-07-19Correctly use ssize_t instead of size_t for read/write return values.Reyk Floeter
Pointed out by David Hill and clang.
2016-07-19Remove unused variableReyk Floeter
2016-07-19A bit of cleanup and style changes. ofcconn needs more work.Reyk Floeter
2016-07-19L2 tun is tap nowReyk Floeter
2016-07-19Don't use .p_shutdown in the proc structReyk Floeter
2016-07-19Comment out device/switch(4) for nowReyk Floeter
2016-07-19Import switchd(8), a basic WIP OpenFlow implementation for OpenBSD.Reyk Floeter
switchd consists of two parts: 1. switchd(8) and switchctl(8), an OpenFlow controller or "vswitch". 2. switch(4), an OpenFlow-aware kernel "bridge". This the 1st part, the driver will be imported later. The code will remain disabled for a while, but it helps development to have it in the tree. switchd currently supports partial OpenFlow 1.0, but the goal is to use OpenFlow 1.3.5 instead (switch(4) already does 1.3.5). For more background information see: http://www.openbsd.org/papers/bsdcan2016-switchd.pdf https://youtu.be/Cuo0qT-lqig With help from yasuoka@ goda@ Import discussed with deraadt@
2016-07-19Replace malloc() + memset() with calloc().Martin Natano
ok mlarkin
2016-07-19In rcctl ls, skip all files with a '.' in the name, not just rc.subr;Stuart Henderson
pkg_add renames files in this way when the checksums don't match at update or removal time. [[ ]] suggestion from guenther@ to avoid the messy "case" that I had in my first diff. Other feedback/suggestions from halex aja millert, ok halex@ aja@.
2016-07-19remove bogus attributes from ifstated, spooted by guenther@Sebastian Benoit
2016-07-19remove bogus attributes on fatal* spotted by guenther@Sebastian Benoit
2016-07-18add format attributes to log functions and fix some errorsSebastian Benoit
ok claudio@ florian@
2016-07-18add format attributes to log functionsSebastian Benoit
ok florian@ claudio@
2016-07-18add format attributes to log functionsSebastian Benoit
ok claudio@
2016-07-18add format attributes to log functionsSebastian Benoit
ok stsp@ claudio@ florian@
2016-07-18add format attributes to log functions and fix two errorsSebastian Benoit
ok renato@
2016-07-18add format attributes to log functions and fix am error when usingSebastian Benoit
log_warnx() ok renato@ claudio@
2016-07-18Fix VFLAG formattingPhilip Guenther
ok bluhm@
2016-07-18Linking against libkvm is unnecessary herePhilip Guenther
ok mlarkin@