summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2016-09-26spacingReyk Floeter
2016-09-26Fix compilation warning by using the correct cast/format.Rafael Zalamena
improved by sthen@ ok reyk@
2016-09-26Teach switchd(8) how to create flows for new connections using OpenFlowRafael Zalamena
1.3.5, implement the OXM filters to use with flow matching and Set-Action, prepare code to receive group management and add dummy flow_removed handler to avoid closing the connection on idle flows.
2016-09-26Set pkt_buf variable on incoming packet_in messages.Rafael Zalamena
small style correction and ok reyk@
2016-09-26Fix a memory leak and a loop in the ofp_read() that happens every time aRafael Zalamena
message is received or a socket is closed. This is just a temporary fix to avoid switchd(8) from hogging the cpu and leaking memory while testing. ok reyk@
2016-09-26Enable more debug messages to help developing flow modification messages.Rafael Zalamena
ok reyk@
2016-09-25Document the dependency on sysctl kern.allowkmemTheo de Raadt
ok tb
2016-09-25Correct the flag listing for switchd(8) and add a files section for theJonathan Gray
configuration file. Sync usage() with the result. With feedback from and ok jmc@
2016-09-25Make a move towards ending 4 decades of kernel snooping.Theo de Raadt
Add sysctl kern.allowkmem (default 0) which controls the ability to open /dev/mem or /dev/kmem at securelevel > 0. Over 15 years we converted 99% of utilities in the tree to operate on sysctl-nodes (either by themselves or via code hiding in the guts of -lkvm). pstat -d and -v & procmap are affected and continued use of them will require kern.allowkmem=1 in /etc/sysctl.conf. acpidump (and it's buddy sendbug) are affected, but we'll work out a solution soon. There will be some impact in ports. ok kettenis guenther
2016-09-25Remove more duplicated includesFrederic Cambus
OK jca@, deraadt@
2016-09-25consistently use MAX_ prefixFlorian Obser
OK jca
2016-09-25Interval calculations are perfectly fine with ints.Florian Obser
OK jca@
2016-09-24The file descriptor needs to be closed in both the TLS and non-TLS case,Joel Sing
so make it a common/shared code path.
2016-09-24Both tls_free() and tls_config_free() are safe to call with NULL.Joel Sing
2016-09-24Remove more backwards compat for unsupported OpenBSD releases.Joel Sing
2016-09-24sort FILES;Jason McIntyre
2016-09-24improve DESCRIPTION;Jason McIntyre
from bluhm and myself
2016-09-23Revert a wording change. Requested by jmc@Alexander Bluhm
2016-09-23Add some more improvements from jmc@ to syslogd(8).Alexander Bluhm
2016-09-23Document certificate handling in syslogd(8) man page.Alexander Bluhm
Written together with jmc@
2016-09-23It is ok to call free() on NULL pointers.Rafael Zalamena
ok reyk@
2016-09-23With the new large socket buffer sizes, syslogd could use more mbufsAlexander Bluhm
for TCP or TLS connections than before. It makes no sense to buffer messages in kernel, the dynamic limit there makes testing the dropped message statistics unreliable. Syslog has no high performance requirements, so limit all TCP socket buffers to 64 KB. OK henning@ deraadt@
2016-09-23use sizeof instead of constant 16 in function callsJonathan Gray
suggested by and ok reyk@
2016-09-23Improve syslogd(8) man page.Alexander Bluhm
Written together with jmc@
2016-09-22Make sure we don't have conflicting UIDs/GIDs when adding user/group.Antoine Jacoutot
reported by florian@
2016-09-22Change function arguments from "unsigned char keyname[16]" toJonathan Gray
"unsigned char *keyname" to make it clear that an array size can not be inferred. Suggested by millert@
2016-09-22correct invalid use of sizeofJonathan Gray
ok krw@ millert@ claudio@
2016-09-22include time.h for time()Jonathan Gray
2016-09-21Use a properly aligned buffer (malloc'd, not on stack) to get routing messages.Jeremie Courreges-Anglas
This fixes rtadvd on (at least) armv7. Problem reported and fix tested by Martin Brandenburg.
2016-09-21Use the correct local variable to get address & prefixlen in routing messagesJeremie Courreges-Anglas
This currently has no effect because route sockets are datagram (PR_ATOMIC) sockets, so we only get one message at a time. This means that the parsing code could be simplified. route(4) sockets cluebat from claudio@
2016-09-21tweak previous;Jason McIntyre
2016-09-21Add an option to give syslogd a server CA that is used to validateAlexander Bluhm
client certificates. This prevent that malicious clients can send fake messages. OK deraadt@
2016-09-21Remove the use of cast. It is unnecessary and potentially problematic.YASUOKA Masahiko
input semarie ok deraadt
2016-09-20reoorder includes,Sebastian Benoit
noticed by & ok florian@
2016-09-20Unbreak logging for children process in switchd(8). log_init/verbose()Rafael Zalamena
must be called before proc_init() otherwise child process won't have this configured. ok reyk@
2016-09-20some fixes from rob pierce; ok yasuokaJason McIntyre
2016-09-19Add pledge support to pstatTheo Buehler
The filemode(), ttymode() and vnodemode() functions can be split into two pieces. The *_prep() piece must be hoisted to before pledge and the rest can run under pledge "stdio rpath vminfo". The magic block that decides which ones of the *_prep() pieces must be run with which combination of command line switches is quite impressive. Patch from Rob Pierce, thanks! ok deraadt
2016-09-19Fix pstat -ft. In presence of the -f flag, a logic error in ttymode()Theo Buehler
leads to entering codepaths that try to work with only partially initialized kvm structures -- with unsurprising outcomes. Problem found by Rob Pierce, ok deraadt
2016-09-19the pf.conf sample should refer to group _tftp_proxy, not proxy;Jason McIntyre
from joel knight
2016-09-19Fix 'const char *' qualifier removal warning by casting it out withRafael Zalamena
uintptr_t. It is safe here to pass a 'const' to exec*(). improved by and ok millert@
2016-09-19Only allow standard dot notation for IPv4 addresses as target.Florian Obser
We can get rid of inet_aton(3) and use the AF independent getaddrinfo(3). OK natano@, krw@, millert@, claudio@
2016-09-18tweak previous;Jason McIntyre
2016-09-18add a config file parser to acme-client (unused at the moment, so thatSebastian Benoit
it can be worked on in the tree). ok florian@ deraadt@
2016-09-18Kill p_env from proc.c. The p_env variable was not being used seriously andRafael Zalamena
it was always a copy of ps->ps_env. You might access the env variable now with: p->p_ps->ps_env. ok reyk@
2016-09-17move the .SUNW_ctf section name definition to exec_elf.h and document it in ↵Jasper Lievisse Adriaanse
elf(5) feedback from guenther@ ok guenther@ kettenis@
2016-09-16procmap fumbles with uvm_map_addr structures, which are now in RBTsDavid Gwynne
it also does proper traversal of the tree (ie, it does FOREACH) which in turn uses MIN and NEXT operations to iterate over the whole tree. theyre complicated and need code. so for now this pulls in subr_tree.c from the kernel and builds it as part of procmap. that allows for traversal of the RBT using the same code that the kernel uses. it is a bit ugly though because procmap updates the pointers between items in the tree so they point at local copies instead of kernel addresses. its made worse because RBT code has pointers between rb_entry structs, not between the nodes. im putting this in now to unbreak the tree. it can be polished after coffee/naps.
2016-09-15add some Xr for acme-client(1);Jason McIntyre
2016-09-15more fat trimming;Jason McIntyre
2016-09-15Go in the background later, using rdaemon().Jeremie Courreges-Anglas
rdaemon() works like daemon(3) but requires its caller to pre-open /dev/null. This makes it possible to go in the background after a chroot(2), allowing for more error checking. The pattern is basically - open /dev/null - chroot - privdrop - rdaemon "design" initialy discussed with semarie@ a while ago, ok dlg@
2016-09-15Teach switchd(8) how to shutdown using close() instead of kill().Rafael Zalamena
This commit mostly removes the parent SIGCHLD handler, the rest of the code is already in proc.c. ok reyk@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 10:13:27 +0000