summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2015-11-11exit() after perror() for pledge failure. Perhaps this got introducedTheo de Raadt
as a test idiom, either when pledge was young or during the transition to strings.... dunno
2015-11-10kill the whitespace.. kill the whitespace..Theo de Raadt
2015-11-10With ikectl now requiring ca specific sections not present in theJonathan Gray
general openssl cnf files install the ikeca.cnf file. ok sthen@ requested by reyk@
2015-11-09Remove unused xpid argument to log_it().Todd C. Miller
2015-11-09Update CRONDIR comment to reality.Todd C. Miller
2015-11-09Rename AT_DIR -> AT_SPOOL and SPOOL_DIR -> CRON_SPOOL to improveTodd C. Miller
readability.
2015-11-09Use fstatat() when checking the files in the at queue so weTodd C. Miller
don't need to chdir to the queue dir. OK guenther@
2015-11-09Remove -h from the command line options.YASUOKA Masahiko
diff from Benjamin Baier
2015-11-09queue(3) instead of homegrown queues and lists. This also fixesTodd C. Miller
some potential memory leaks in error paths. OK guenther@
2015-11-08Set the effective gid to kmem so the fchown of kvm_bsd.db is allowedTodd C. Miller
by pledge(2). This requires pledge "id" but that can be dropped immediately after the setegid() call. From Theo Buehler
2015-11-08Quiet silly clang analyzer warning in calloc() usage.Todd C. Miller
2015-11-07Ensure the safety of isprint()'s argument. Suggested by guenther@ a fewmmcc
weeks ago.
2015-11-06Use __progname instead of the homegrown ProgramName.Todd C. Miller
2015-11-06"source" doesn't need to be a global. While here, the correct spellingFlorian Obser
is NULL. Noticed while trying to hoist the source address selection from traceroute into ping / ping6.
2015-11-06relayd.conf(5) macro cleanup.Anthony J. Bentley
- use <> instead of \*(Lt and \*(Gt - use <> instead of Aq (Aq is not the same as <> in a UTF-8 locale) - replace Ar usage when appropriate - mark up RTP_STATIC with Dv with input from jmc@ schwarze@, ok schwarze@
2015-11-06Radically improve the performance of bgpd filters. Based on PF's skipPeter Hessler
steps (and uses much of the same code). In a torture test of ~600k prefix filters and 65k prefixes, convergance time goes from 35 minutes to 30 seconds. Many thanks to LONAP for providing a base configuration for torture testing. many discussions with claudio@, benno@, sthen@ and the rest of the bgpd crowd OK sthen@ benno@
2015-11-06the Solver uses kept_names, so we need these there tooMarc Espie
found by aja@
2015-11-06Use pledge in ikectl. For now one request for sending imsgs to ikedJonathan Gray
another request for the ca portion. ok deraadt@
2015-11-06err(1, "%s", "") -> err(1, NULL)mmcc
Discussed with schwarze@
2015-11-05undo botched import to wrong dir, spotted by sobrado@Stuart Henderson
2015-11-05mergeStuart Henderson
2015-11-05update to unbound 1.5.6, ok millert@ florian@Stuart Henderson
2015-11-05mergeStuart Henderson
2015-11-05update to NSD 4.1.6, ok millert@ florian@Stuart Henderson
2015-11-05pledge(2) for slowcgi.Florian Obser
After initialization slowcgi accepts from a AF_UNIX socket, forks and execs. After fork we only need to close(2), chdir(2) and exec. OK benno@
2015-11-05re-shuffle slowcgi_listen to run less code as root.Florian Obser
OK benno@
2015-11-05pledge(2) for httpd.Florian Obser
1) The main process listens on sockets and accepts connections. It creates and opens log files, creates and kills child processes. On start up and on receiving a HUP signal it parses the configuration. It passes on file descriptors for logging or requests to it's children. 2) The logger process writes log messages to a file descriptor passed in from the main process. 3) The server process reads the request from a file descriptor passed in from the main process. It reads a file or creates a directory index to send a response. Additionally this process handles fastcgi requests. It connects to AF_UNIX, AF_INET or AF_INET6 sockets. A re-factoring might make it possible to drop the additional fastcgi privileges when only static files are served. with deraadt@ some time ago prodding & OK deraadt@ tweaks and OK reyk@
2015-11-05Account for the header size when dealing with null link layer ifaces.Jeremie Courreges-Anglas
From Kevin Reay, ok sthen@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2010-01-15NSD v3.2.4Jakob Schlyter
2015-11-05there is a retry path in here which contains rename() and fchown().Theo de Raadt
Use a slightly larger pledge, earlier on. from gregor best
2015-11-05revert sys/kern/kern_pledge.c 1.103 and reenable pledge in pwd_mkdbSebastien Marie
ok deraadt@
2015-11-05quick fix for a regression introduced by sys/kern/kern_pledge.c 1.103Sebastien Marie
ok benno phessler
2015-11-05tweak dependencies handling, might fix some infrequent bugs including theMarc Espie
infamous cups bug. - look for candidates in the whole new set first. Yep, that includes kept packages (should make things slightly faster, I expect) - correctly remove caching of list of installed packages outsides of old packages from the current set each time we revisit the set (looking at the old behavior this actually sounds very likely).
2015-11-05replace u_char and u_int* with standard stdint.h types to ease portable versionJoerg Jung
also remove trailing whitespaces while here no binary change ok sunil millert gilles
2015-11-05Print unsigned integers as unsigned integers, kill inconsistent casts.Jeremie Courreges-Anglas
Initial diff by Kevin Reay.
2015-11-05Cap the GRE packet len to tcpdump's snap len, fixes a segfault.Jeremie Courreges-Anglas
From Kevin Reay, ok sthen@
2015-11-05When fetching the GRE version, use GRE_VERS and not a naked "7" as mask.Jeremie Courreges-Anglas
From Kevin Reay
2015-11-05spelling; from tjJason McIntyre
while here, knock out a double rcs id
2015-11-05spelling; from tjJason McIntyre
2015-11-05"commandline" -> "command line", since there are so few examplesJason McIntyre
of the former in the pages, so many of the latter, and in some of these pages we had multiple spellings; prompted by tj
2015-11-05Implement smtpctl uncorrupt <msgid>Sunil Nimmagadda
"uncorrupt" moves envelopes from corrupt bucket back to the queue for further discovery by the daemon. After correcting the corrupt envelopes, admin could now... # smtpctl uncorrupt msgid # smtpctl discover msgid to schedule the messages. Ok gilles@
2015-11-05Do not terminate message walk on a corrupt envelope.Sunil Nimmagadda
Ok gilles@
2015-11-05when a message consists solely of headers and does not end them with anGilles Chehade
empty line, the message parser gets confused, and forgets to flush last header to message file. detect if we're still in headers when hitting EOM, and flush if that is the case. reported by Philipp Takacs <philipp@bureaucracy.de> ok millert@, jung@, sunil@, eric@
2015-11-04replace setbuf with setvbuf, from Frederic NowakTed Unangst
2015-11-04Change cron from including all headers in every file to only includingTodd C. Miller
what each .c file needs. I have not removed cron.h since it will be used in a future clean up of the cron's .h files. OK nicm@
2015-11-04Bump distribution tarball versions.mmcc
2015-11-04Remove unused LogFD variableTodd C. Miller
2015-11-04Change some globals from extern to static when they are not usedTodd C. Miller
outside their respective .c files. Also remove some unused defines. OK jung@
2015-11-04fix a memory leak in multiple error pathsJonathan Gray
ok krw@