wireguard-openbsd/libexec/spamlogd, branch jd/queueboosts

Fix copy pasto, re-add missing goto in error path.

2019-07-25T17:32:33Z

Yet another workaround for crappy libpcap API design

2019-07-25T14:53:21Z

Add an internal version of pcap_open_live that ensures bpf(4) devices are opened read-only before locking. Neither pflogd(8) or spamlogd(8) require write access to bpf(4). Inspired by similar solution in OpenBSD tcpdump(8). pflogd(8) was safe since being unveiled last year, but spamlogd(8) was having /dev/bpf opened O_RDWR. Issue discovered by bluhm@'s unveil(2) accounting commit. ok deraadt@, mestre@ (thanks for testing spamlogd!)

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:32:41Z

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

The only file that spamlogd(8) needs to access after calling pledge(2) is

2018-10-25T06:41:50Z

PATH_SPAMD_DB, so unveil(2) it with O_RDWR permissions. OK millert@ beck@

add missing ${LIBCRYPTO} to DPADD

2018-06-28T02:23:27Z

OK deraadt@ millert@ jca@

- Check if user running spamlogd(8) has root privileges and if not then stop

2016-03-16T14:47:04Z

program early - #define SPAMD_USER "_spamd" and use it on getpwnam(3) call - Set usage() as __dead void - Remove lint-style comments OK beck@

pledge spamlogd - again from Ricardo Mestre - Thanks!

2015-12-11T17:16:52Z

Include before . In a future change when

2015-01-21T21:50:32Z

ports is ready, will stop including a pile of balony.

Replace with and other less dirty headers where

2015-01-16T06:39:28Z

possible. Annotate lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)

Remove unnecessary netinet/in_systm.h include.

2014-10-25T03:19:22Z

ok millert@