summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Expand)Author
2018-08-08Unveil the special files needed for reading AML tables, and theTheo de Raadt
2018-08-08In netproc process, unveil to only expose the CA file.Theo de Raadt
2018-08-08Move struct wire_largecommunity to rde_attr.c since it is only used internallyClaudio Jeker
2018-08-08Merge getcommunity() and getlargecommunity() into one function thatClaudio Jeker
2018-08-08Make the (non-)transitive handling of ext communities a bit more obvious.Claudio Jeker
2018-08-08One ; too muchClaudio Jeker
2018-08-08Update the RIB after a config reload in the background. This moves theClaudio Jeker
2018-08-08hide rib[] internals in new rib_valid() functionSebastian Benoit
2018-08-07Unveil is used at tail of initialization to allow "r" of /tftpbootTheo de Raadt
2018-08-07Unveil fits nicely into the syslogd privsep model. Unveiled filesTheo de Raadt
2018-08-07Post-g2k18 fix: unbreak the optional vmd-internal vmboot loader.Reyk Floeter
2018-08-07Fix paste error in "no read access to" debug message, tweak messages.Reyk Floeter
2018-08-06space required between macro args and punctuation;Jason McIntyre
2018-08-06Reflect reality.Marc Espie
2018-08-06replace the current log optionsSebastian Benoit
2018-08-06Change manpage example for reserved words since the macro used is to replaceRicardo Mestre
2018-08-06Validate the prefix sent in a network delete call before trying to deleteClaudio Jeker
2018-08-06Pass the stale timestamp to path_remove_stale() removes a asp->peer dereferenceClaudio Jeker
2018-08-06Replace two asp->peer with prefix_peer(p) which is the same.Claudio Jeker
2018-08-06Assign peer1 and peer2 early on and use them everywhere instead of aspX->peer.Claudio Jeker
2018-08-05Since -s argument is no longer checked, during reexec, the argv size then mustRicardo Mestre
2018-08-05Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
2018-08-05Remove now unused header which I forgot to commit on previous.Ricardo Mestre
2018-08-05Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
2018-08-05Remove cpath pledge(2) promise. We decided that not deleting the unix controlRicardo Mestre
2018-08-05Revert back previous and remove cpath pledge(2) promise entirely. We decidedRicardo Mestre
2018-08-04Revert back previous commit, we have decided that socket files don't cause anyRicardo Mestre
2018-08-04Leave the control socket behind on shutdown. It doesn't hurt anyone.Florian Obser
2018-08-04I can find no reason why portmap needs rpath after initialization.Theo de Raadt
2018-08-03advertise slaacd.8;Jason McIntyre
2018-08-03sort; ok florianJason McIntyre
2018-08-03return is not a function and if (x) -> if (x != NULL)Sebastian Benoit
2018-08-03fix error messages from earlier syntax changeSebastian Benoit
2018-08-03correct an error message, from Ross L RichardsonSebastian Benoit
2018-08-03document the default in the abscence of a certificate authority.Sebastian Benoit
2018-08-03Document that domain certificate is optional.Sebastian Benoit
2018-08-03Move nexthop and nexthop flags from the rde_aspath to struct prefix.Claudio Jeker
2018-08-03We can only unveil if the prefix is a directory (the input paths, and theTheo de Raadt
2018-08-03unveil _PATH_DEVDB for devname(). All other filenames are openedTheo de Raadt
2018-08-03Reshuffle the way bgpd does the softreload after filter changes.Claudio Jeker
2018-08-03Move dns settings to global options so that they don't need to beFlorian Obser
2018-08-03actually heed localbase when looking for groffMarc Espie
2018-08-03reorg groff runner so that failures are handled betterMarc Espie
2018-08-03- exit in case of exec error. Prevents code from continuing badlyMarc Espie
2018-08-03Place a limit on the number of elements in a ber sequence/set. This preventsrob
2018-08-02Split out the rule skipping logic into own function and by doing so ensureClaudio Jeker
2018-08-02According to code (and testing), each is optional but at leastSebastian Benoit
2018-08-02It's an "X.509 certificate" rather than a "TLS certificate".Sebastian Benoit
2018-08-02its a X.509 certificate, consistency with acme-client.conf.5Sebastian Benoit
2018-08-02ntpd(8) has logic in place to delete its control socket on shutdown, but itRicardo Mestre