summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2018-02-28Better documentation of the classless-static-routes option.Matthieu Herrb
ok krw@, tweaks by jmc@
2018-02-28vmd: Fix 100% vmd cpu usage on linux receive / unpausepd
Use rtc_reschedule_per in mc146818_start instead of re arming the periodic interrupt without checking if it's enabled in REGB. reported by Dave Voutila ok phessler@
2018-02-27sanitize say/print output furtherMarc Espie
- have confirm go thru f() every time (adding confirm_defaults_to_no/confirm_defaults_to_yes apis... verbose but effective) - check DESCR in pkg_create, as suggested by sthen@ - don't do the whole safe dance when not needed (optimization) - misnamed allowed -> forbidden (schwarze@) This effectively prevents DESCR from using diacritics. Sorry! Ingo makes a compelling argument that using UTF8 while installing a new box is currently fairly dangerous, considering tty setups. This affects about 10 ports at the moment, all of which were fixed before this commit.
2018-02-26actually have safe do something, stupid typoMarc Espie
2018-02-26revert, unneededMarc Espie
2018-02-26forgot the non-interactive caseMarc Espie
2018-02-26spacingMarc Espie
2018-02-26- move sane into State.pmMarc Espie
- use it for every parameter to say/print - extend it for actual printable characters, plus a hack for \n - add confirmf for passing formats to the confirm - adjust PkgCheck accordingly - tweak the files test in PkgCheck to also hunt unknown files under /var/db/pkg/somepackage okay sthen@
2018-02-26vmctl: clarify console error messageccardenas
Clear up ambiguous error message when attaching to a console fails as the vm id is not guaranteed to be populated. ok mlarkin@
2018-02-25much better checksMarc Espie
- add an explicit dir thingy so that we don't look for /var/db/pkg/+CONTENTS - actually prepend dir name to info name, oops - also check for files/dirs that do not belong to root:wheel or have too lax permissions.
2018-02-25add explicit permission checks.Marc Espie
pkg_check is most often run as root. In case of a garbled file systems it won't notice when permissions are completely wrong.
2018-02-25sprinkle quite a few more calls to safeMarc Espie
2018-02-24sort;Jason McIntyre
2018-02-24add an alias for vmctl show, matches finger memory and the rest of thePeter Hessler
*ctl programs OK mlarkin@ benno@ deraadt@
2018-02-24make the gre flowid output always 2 chars so payloads stay lined up.David Gwynne
2018-02-22Same change as rev 1.22 in ospfd:Claudio Jeker
The IF_EVT_NBR_CHNG event needs to be fired when a neighbor transitions to a state of 2-Way or higher. There is no need to trigger the event for new neighbors. With this situations with multiple DRs after a netsplit should be solved. OK sthen@ and remi@
2018-02-22The IF_EVT_NBR_CHNG event needs to be fired when a neighbor transitions toClaudio Jeker
a state of 2-Way or higher. There is no need to trigger the event for new neighbors. With this situations with multiple DRs after a netsplit should be solved. OK sthen@ and remi@
2018-02-20merge configure.ac from NSD 4.1.19, previously we had an updatedStuart Henderson
generated configure file, but old configure.ac.
2018-02-18vmd: fix vmctl pause for non existing vm ids (never returns)pd
check if vm id is valid before sending to vmm for pausing. The 'lock' is caused by vmm sending back ENOENT for a non existent vm but vmd drops the message because it doesn't recogize the vmid vmm is talking about. This is an artifact of the 'policy' don't trust any imsg from a sibling priv sep process and do your own checking. reported by Abel Abraham Camarillo Ojeda ok mlarkin@ and ccardenas@
2018-02-16bump max line length to 16K for incoming mail.Eric Faurot
SMTP commands are still limited to LINE_MAX. ok gilles@
2018-02-15vmd(8): Properly return the correct byte when doing byte-aligned PCIMike Larkin
config space reads. ok kettenis@, ccardenas@
2018-02-14whitespacerob
2018-02-13Normalize handle limit timeval in microsecond (usec) case.cheloha
Makes stuff like limit 1500000 usec work correctly. ok millert@ tb@
2018-02-13give up a bit on the infamous cups update issue.Marc Espie
sort dependencies so that at least this is 100% reproducible...
2018-02-12some mode of session resumptions are not currently supported by ftp(1)Marc Espie
be fair to those servers, display a more accurate message of what we know
2018-02-11Use the new route filter ROUTE_PRIOFILTER in ospfd. Usually we onlySebastian Benoit
need to see routes with a higher priority (lower value) than ospfds own routes. ok claudio, ok henning previous version, feedback from sthen
2018-02-11sysctl.h is no longer neededTheo Buehler
ok tedu
2018-02-10Cap wait/interval at 100 million seconds.cheloha
Keeps nanosleep(2) from choking. While here, call the argument to the -w flag "wait" in the error message to match up with documentation and usage(). ok tedu@ deraadt@ tb@
2018-02-10Pledge monitoring process; ok tedu@anton
2018-02-10less macro; ok bennoJason McIntyre
2018-02-10implement the use of new ftp -S session=... for httpsMarc Espie
- add a setup_session hook that creates an anonymous tempfile in the ::HTTPS class - parse tls connection resumed messages and tell on servers that do not support this - remove the CLOEXE flag on the fd just before running ftp, so that other processes do not see it at all. This makes https somewhat more bearable, though still slower than http... :( thanks to jsing@ et al for the design of session
2018-02-10rewrite file around fh_file, temp file creation with signal protection,Marc Espie
to be used to get anon temp files for https
2018-02-10print etherip on ipv6.David Gwynne
2018-02-10Follow rfc8277 more closely and make make sure bgpd is encoding VPNv4Claudio Jeker
withdraws they way other systems are doing it. Interop problem discovered by Andrew Thrift. Tested by Andrew and job@.
2018-02-10claudio noted that this is an else case because we have either aSebastian Benoit
prefix or a prefix-set.
2018-02-10Add prefix-sets, lists of prefixes which can be used in place of aSebastian Benoit
prefix in a filter rule. Initial idea hashed out with job@ in Toronto. This is WIP, i'm commiting it now so we can work on it in the tree. ok florian@ claudio@
2018-02-09Style tweaksJeremie Courreges-Anglas
ok remi@ benno@
2018-02-09isolate calls to the rfc2822 parser and handling of "." in smtp_dataline()Eric Faurot
ok gilles@
2018-02-09use ether_tryprint, which looks inside the ether packet.David Gwynne
ether_print just prints the ether header.
2018-02-09Clear the dr and bdr fields of a neighbor when it goes down.Claudio Jeker
Same is done in ospfd for quite a while.
2018-02-09Simplify logic a bit by moving a block. nbr_stop_itimer() does not useClaudio Jeker
the dr or bdr fields so clear them first.
2018-02-09it turns out the wccp header is optionalDavid Gwynne
peek inside the payload to see if the first nibble looks like ipv4. if it isnt ipv4 assume it is the wccp header.
2018-02-08have a go at decoding cisco wccp gre packets, and let them fall into IP.David Gwynne
2018-02-08ospf6d mostly only cares about AF_INET6 routesSebastian Benoit
found while investigating routing socket desync with claudio. ok remi jca claudio
2018-02-08Kill ber.c support for direct fd read/writesJeremie Courreges-Anglas
This mechanism is already unused and annotated with lots of XXX's, no need to keep it around. ok claudio@
2018-02-08recognise gre proto 0 as a "keep alive" packetDavid Gwynne
2018-02-08Bump the read sockbuf of the routing socket to 2MB, may help reduce some ofClaudio Jeker
the desync cases. OK benno@
2018-02-08Bump the read sockbuf of the routing socket to 2MB, may help reduce some ofClaudio Jeker
the desync cases. OK benno@
2018-02-07Markup SIGHUP.anton
2018-02-07prepare for session filesMarc Espie
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 11:49:57 +0000