<feed xmlns='http://www.w3.org/2005/Atom'>
<title>wireguard-openbsd/libexec/fingerd, branch master</title>
<subtitle>WireGuard implementation for the OpenBSD kernel</subtitle>
<id>https://git.zx2c4.com/wireguard-openbsd/atom/libexec/fingerd?h=master</id>
<link rel='self' href='https://git.zx2c4.com/wireguard-openbsd/atom/libexec/fingerd?h=master'/>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/'/>
<updated>2019-06-28T13:32:41Z</updated>
<entry>
<title>When system calls indicate an error they return -1, not some arbitrary</title>
<updated>2019-06-28T13:32:41Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2019-06-28T13:32:41Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=df69c215c7c66baf660f3f65414fd34796c96152'/>
<id>urn:sha1:df69c215c7c66baf660f3f65414fd34796c96152</id>
<content type='text'>
value &lt; 0.  errno is only updated in this case.  Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.
</content>
</entry>
<entry>
<title>Move pledge to after getopt, when the finger program becomes known</title>
<updated>2018-08-03T15:14:18Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2018-08-03T15:14:18Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=19a58c97c6ac669df6ffb98319f0862ab85f223b'/>
<id>urn:sha1:19a58c97c6ac669df6ffb98319f0862ab85f223b</id>
<content type='text'>
(defaults to /usr/bin/finger, but can be redefined with -P option).
Then unveil that program for "x" (execution), and pledge as before.
No other filesystem accesses occur after that point.
</content>
</entry>
<entry>
<title>4-step pledge in a program noone really uses anymore.</title>
<updated>2015-11-13T01:26:33Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2015-11-13T01:26:33Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=6fc5b1151ffef2007462995d5414b2bd0163b53e'/>
<id>urn:sha1:6fc5b1151ffef2007462995d5414b2bd0163b53e</id>
<content type='text'>
pledge "stdio inet dns proc exec" at startup.
In the logging codepath, "stdio dns proc exec" after getpeername()
drop to stdio proc exec(), before fork / execve
Parent moving data out of the pipe only needs "stdio"
</content>
</entry>
<entry>
<title>_exit() in the child; as a result, must use syslog() directly.</title>
<updated>2015-11-13T01:23:59Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2015-11-13T01:23:59Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=592468f08d9a79b1a946baa8151e768dbfa07692'/>
<id>urn:sha1:592468f08d9a79b1a946baa8151e768dbfa07692</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Replace &lt;sys/param.h&gt; with &lt;limits.h&gt; and other less dirty headers where</title>
<updated>2015-01-16T06:39:28Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2015-01-16T06:39:28Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=b9fc9a728fce9c4289b7e9a992665e28d5629a54'/>
<id>urn:sha1:b9fc9a728fce9c4289b7e9a992665e28d5629a54</id>
<content type='text'>
possible.  Annotate &lt;sys/param.h&gt; lines with their current reasons.  Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc.  Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution.  These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)
</content>
</entry>
<entry>
<title>remove .Tn; from Jan Stary &lt;hans at stare dot cz&gt;</title>
<updated>2015-01-15T19:06:31Z</updated>
<author>
<name>schwarze</name>
<email>schwarze@openbsd.org</email>
</author>
<published>2015-01-15T19:06:31Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=12bc606974c905e41cd828804759a212d331fea1'/>
<id>urn:sha1:12bc606974c905e41cd828804759a212d331fea1</id>
<content type='text'>
</content>
</entry>
<entry>
<title>user error is not a bug. fingerd is not responsible for filtering out</title>
<updated>2014-11-20T13:21:05Z</updated>
<author>
<name>tedu</name>
<email>tedu@openbsd.org</email>
</author>
<published>2014-11-20T13:21:05Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=e4a55fdf7b13239f8fd855bda9def2edc472c6e2'/>
<id>urn:sha1:e4a55fdf7b13239f8fd855bda9def2edc472c6e2</id>
<content type='text'>
incorrect client garbage. ok deraadt sthen
</content>
</entry>
<entry>
<title>Add STANDARDS section to finger(1)/fingerd(8).</title>
<updated>2013-11-14T08:50:04Z</updated>
<author>
<name>bentley</name>
<email>bentley@openbsd.org</email>
</author>
<published>2013-11-14T08:50:04Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=ef38614fcc9ff6ca80336734637385fa0564a26d'/>
<id>urn:sha1:ef38614fcc9ff6ca80336734637385fa0564a26d</id>
<content type='text'>
tweaks/ok jmc@
</content>
</entry>
<entry>
<title>remove some unnecessary sys/param.h inclusions</title>
<updated>2012-12-04T02:24:45Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2012-12-04T02:24:45Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=f4faee9106dab4458d5d3326f876cd772c8e31da'/>
<id>urn:sha1:f4faee9106dab4458d5d3326f876cd772c8e31da</id>
<content type='text'>
</content>
</entry>
<entry>
<title>rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and</title>
<updated>2009-10-27T23:59:19Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2009-10-27T23:59:19Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=043fbe51c197dbbcd422e917b65f765d8b5f8874'/>
<id>urn:sha1:043fbe51c197dbbcd422e917b65f765d8b5f8874</id>
<content type='text'>
unmaintainable).  these days, people use source.  these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms
</content>
</entry>
</feed>
