summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2020-06-29Build on powerpc64.Mark Kettenis
2020-06-28Fix build errorDale Rahn
ok tb
2020-06-28vmd(8): Eliminate libevent state corruptionpd
libevent functions for com, pic and rtc are now only called on event_thread. vcpu exit handlers send messages on a dev pipe and callbacks on these events do the event management (event_add, evtimer_add, etc). Previously, libevent state was mutated by two threads, event_thread, that runs all the callbacks and the vcpu thread when running exit handlers. This could have lead to libevent state corruption. Patch from Dave Voutila <dave@sisu.io> ok claudio@ tested by abieber@ and brynet@
2020-06-28obviously powerpc64 will want pcidumpTheo de Raadt
2020-06-27convert macppc, octeon, and loongson to use MI installboot, removingTheo de Raadt
special case scripting in install.md. (macppc still requires manual steps for HFS bootmode) tested by krw, visa, gkoehler
2020-06-27Replace TAILQ concatenation loop with TAILQ_CONCATbket
OK claudio@
2020-06-26Replace SIMPLEQ concatenation loop with SIMPLEQ_CONCATbket
OK florian@, millert@, kn@
2020-06-26Replace SIMPLEQ concatenation loop with SIMPLEQ_CONCATbket
OK florian@, millert@, kn@
2020-06-26Replace SIMPLEQ concatenation loops with SIMPLEQ_CONCATbket
As a result *ra_rdnss and *ra_dnssl are not used any more, and can be removed. While here remove spurious space. OK florian@, millert@
2020-06-24Stop using rsync --delete when syncing up with the CA repos. InsteadClaudio Jeker
use the files referenced in the manifests to build up a list of files to keep and remove anything that is not in the list after doing the full computation. OK job@ benno@
2020-06-24Using the "ldaps" or "tls" keywords in ldapd.conf currently enables allTheo Buehler
protocols and ciphers. So you get a TLS server speaking TLSv1.0 and supporting cipher suites with RC4 and 3DES encryption, all of which should be considered broken. There is no way of disabling TLSv1.0 and TLSv1.1 in ldapd. All this is also not very clearly called out in the documentation. This commit switches the defaults to using the libtls defaults for both protocols and ciphers. If compatibility with the insecure legacy protocols and ciphers is needed, use the "legacy" keyword before "tls" or "ldaps" in ldapd.conf. tested by abieber. inoguchi agrees with the direction. ok beck
2020-06-22Remove unused variabledenis
2020-06-22On my previous commit I made the wrong assumption that the control socket wasRicardo Mestre
being unlink(2)ed from the main proc so I removed "cpath" from the pledge(2) on the ldpe proc but actually the socket was unlink(2)ed from here, this means the daemon would crash on exit due to pledge(2) not having "cpath" permissions anymore. Finish the job by just not deleting the socket at all during control_cleanup(), which keeps the control program still working without issues but more importantly prevents the crash during exit, sorry about that. Crash reported by wlund at iki.fi OK deraadt@ claudio@ remi@
2020-06-22add missing .PpLandry Breuil
2020-06-22Fix "the symbol HZ is undefined" yacc warningkn
OK mpi
2020-06-22Install npppd.conf(5) with mode 0600 instead of 0640. npppd.conf(5) canmvs
store radius passwords and nothing requires it to be group readable. ok yasuoka@
2020-06-22When the main process exits, it closes the pipe so a read 0 occurs.Otto Moerbeek
Move log level to debug for that case and while there correct the string, we're reding, not writing.
2020-06-22a first cut at requesting and parsing vpd info.David Gwynne
reading vpd stuff is useful when you're trying to get support information about a pci device, eg, if you want a serial number, or firmware versions, or specific part name or number, it's likely available via vpd. also, im sick of having the diff in my tree. this relies on the new PCIOCGETVPD ioctl i just committed to the kernel. it's a very quick and dirty implementation, hopefully someone will pick it up and polish it a bit. tested by hrvoje popovski on a variety of cards ok jmatthew@
2020-06-21vmd(8): fix ns8250 lockup due to race conditionpd
Inject a pending interrupt even if the rcv_pending flag is set to avoid the endless EV_READ loop where a byte lingers read to be read but the vcpu never gets the interrupt to read it. (e.g. the result of spamming RETURN via the serial console) Also, protect com ratelimit handler with mutexes to avoid corruption of the device state. These changes help preventing linux vm crashes when the return key is held on boot. Discovered by and patch from Dave Voutila <dave@sisu.io> ok tb@
2020-06-21Add RCS markerTheo Buehler
2020-06-21wire the wireguard packet printer into tcpdump.David Gwynne
from Matt Dunwoodie and Jason A. Donenfeld
2020-06-21don't claim packets as wg if there's not enough captured bytes to read.David Gwynne
2020-06-21cope with a truncated capture of a packet. this avoids reading invalid mem.David Gwynne
2020-06-21add a printer for wireguard messages, but not hooked up just yet.David Gwynne
from Matt Dunwoodie and Jason A. Donenfeld
2020-06-18Apply rules to the number of events returned by the last read(2).Martin Pieuchot
Fix a corner case where old events could be re-evaluated. From Yuichiro NAITO.
2020-06-17We are no longer using the "keep" file as a flag.Florian Obser
Pointed out by Martin Vahlensieck, thanks!
2020-06-16vmd(8): backout previous commit to ns8250.c as it reintroduced the bug where thepd
vm would get stuck if disconnected from console and get unstuck once console is attached. Spotted by tb@
2020-06-16vmd(8): fix ns8250 lockup due to race conditionpd
Inject pending interrupt if com has receive pending. This was previously accidently checked in with an unrelated change by Mike Larkin and was backed out as it didn't fix the intended problem. Also, protect com ratelimit handler with mutexes to avoid corruption of the device state. These changes help preventing linux vm crashes when the return key is held on boot. Discovered by and patch from Dave Voutila <dave@sisu.io>
2020-06-13remove the reference to tun(4), as suggested by kaya saman,Jason McIntyre
and advised by dlg;
2020-06-10Cast imsg->data to char pointer to silence GCC warningkn
warning: format '%s' expects type 'char *', but argument 2 has type 'void *' Seen on sparc64. OK tobhe
2020-06-09Show a message while pkg_add updates the font cache. This occurs at theStuart Henderson
end of an install and can take quite a while if you have certain fonts installed. Before this change the cursor was left at an empty line. tweak/ok espie@
2020-06-09set TLS SNI when relaying to hostSebastien Marie
ok beck@ "looks reasonable" millert@
2020-06-09Prepare buffer for both receive and transmit side so that a client canYASUOKA Masahiko
use them separately. Actually a version of CISCO does and expects the peer does the same. Also fix some typos.
2020-06-08Provide clear errors when trying to install oversized boot loaderkn
sparc64 installboot(8) on softraid(4) with too large files, e.g. unstripped builds, fails poorly with "installboot: softraid installboot failed". This is due to the BIOCINSTALLBOOT ioctl(2) returing the default EINVAL rather than using softraid's sr_error() interface properly; additionally, installboot does not check for such message from the bio(4) layer. Make the kernel generate "boot block too large" and "boot loader too large" messages for softraid devices and have installboot act upon them analogous to bioctl(8), by adapting its bio_status() into the new sr_status() helper. Input, reminder to look at bioctl, same kernel diff from, OK jsing
2020-06-07whitespaceFlorian Obser
2020-06-07Swap arguments of calloc(3).Florian Obser
While it doesn't matter for calloc, it's easier on the eyes to always list the number of elements first and then the size. From Donovan Watteau ( contrib AT dwatteau.fr), Thanks!
2020-06-05Remove redundant codedenis
Reported by Prof. Dr. Steffen Wendzel <wendzel @ hs-worms . de>, thanks! OK martijn@ sthen@
2020-06-02remove useless redirectionsMarc Espie
okay tb@, florian@
2020-06-02less convoluted Makefile, removes useless redirectionsMarc Espie
okay tb@, florian@
2020-06-01Run lmtp deliveries as SMTPD_USER instead of the recipient user.Christopher Zimmermann
ok millert@
2020-05-28Enable building wsmoused on arm64 and armv7.Frederic Cambus
OK deraadt@, kettenis@
2020-05-28Enable building wsfontload on arm64 and armv7.Frederic Cambus
OK deraadt@, kettenis@
2020-05-27Remove unneeded <stddef.h>denis
2020-05-25When DNS lookup of an UDP loghost failed, syslogd(8) did close theAlexander Bluhm
UDP sockets for sending messages. Keep the sockets open if the config allows to send UDP. Then they can be used to send if DNS is working during the next SIGHUP. bug reported and fix tested by sven falempin; OK millert@
2020-05-24Make "init-system -n" check vcpu and memory constraintskn
Second attempt after config.c revision 1.37, this time merely delay the "-n" test until after constraint checks have been performed such that the PRI is still read, as required in order to get the total number of VCPUs and memory. OK kmos who also tested this
2020-05-24msgkn
2020-05-24Relax the filename checks to allow dashes as well. Starting withTheo Buehler
OpenBSD 6.9, we can use less awkward filenames. Initial diff by deraadt, ok aja
2020-05-23Typofixkn
2020-05-23Fail on duplicate vcpu, memory or iodevice parameterskn
Domains get to define their cores and memory only once unlike vnet, vdisk and variable parameters of which it makes sense to have more than one; iodevices are unique my design and may only be assigned once. OK kettenis
2020-05-22Revert previouskn
Total vcpu and memory are read from the PRI so constraint checks must not be done before that, noted by kettenis. The fact that "total_cpus" as a global variable (initialized with zero) is always smaller than the total number of configured vcpus and the fact that I only tested a negative example without a positive one made me jump the trigger, sorry.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-14 04:53:12 +0000