summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Add TIOCCBRK and TIOCSDTR to the whitelist for pledge ioctl.doug2015-10-161-1/+3
* Pledge support for the parent/resolver in identd(8).doug2015-10-161-1/+14
* Pledge for ftp(1) in non-interactive mode.doug2015-10-161-1/+23
* Remove -B from EXAMPLES; reminded by jmc@miod2015-10-161-23/+2
* Add allocarray(), an overflow-safe allocation function.mmcc2015-10-161-1/+26
* syncderaadt2015-10-162-0/+2
* fine tune the logging some moretedu2015-10-161-1/+8
* simplify logging functions. once a daemon, always a daemontedu2015-10-161-23/+19
* safety check that we're dealing with the filter we expecttedu2015-10-161-2/+5
* most things should be statictedu2015-10-161-15/+15
* exit(1) is better for the impossible conditiontedu2015-10-161-2/+3
* fix some signed/unsigned integer type mismatches in formatdjm2015-10-154-9/+9
* Do not abuse .Nm for emphasis;schwarze2015-10-151-12/+5
* Delete two preprocessor constants that are no longer used.schwarze2015-10-152-7/+2
* argument to sshkey_from_private() and sshkey_demote() can't be NULLdjm2015-10-151-7/+3
* After spawning, the parent can pledge "stdio rpath wpath cpath"deraadt2015-10-151-1/+4
* Remove three distracting aliases for NULL.mmcc2015-10-152-15/+11
* Simplify the part of args() that is handling .Bl -column phrases:schwarze2015-10-151-73/+28
* When blk_full() handles an .It line in .Bl -column and indirectlyschwarze2015-10-151-1/+6
* it is perhaps better style to not call close() on -1, even if harmlesstedu2015-10-151-6/+12
* make sure req is zeroed in tcp casetedu2015-10-151-2/+2
* better memory handling of the request/cache chaintedu2015-10-151-9/+23
* do not insert entry into cache until it's fully formedtedu2015-10-151-2/+2
* doh, not all requests are the same size. check len first.tedu2015-10-151-2/+3
* assert is the wrong tooltedu2015-10-151-3/+4
* the inet sockets don't work well with inet6 addrs. pick family from addr.tedu2015-10-151-3/+3
* everybody can build reboundtedu2015-10-151-2/+3
* no mail for _rebound. deraadttedu2015-10-151-1/+2
* introduce logerr, since most logging is followed by exittedu2015-10-151-33/+36
* don't allow NSD to pick up libevent from /usr/local if the libevent2sthen2015-10-151-1/+2
* now with _rebound user, we can try a little harder at privdroptedu2015-10-151-3/+11
* _rebound user and group (52)tedu2015-10-152-0/+2
* make the HUP interlocking in the parent work better.tedu2015-10-151-10/+24
* trivial KNFderaadt2015-10-151-3/+5
* In syslogd replace the dprintf() macro with a logdebug() functionbluhm2015-10-153-85/+97
* Pledge login_token with "stdio rpath wpath cpath fattr getpw tty".bluhm2015-10-151-1/+4
* just a space in usage, from deraadttedu2015-10-151-2/+2
* Remove an unused included header (sys/stat.h).mmcc2015-10-151-2/+1
* add a hint about the config file, until it changestedu2015-10-151-1/+5
* child can be pledged down a bit to just sockets and iotedu2015-10-151-1/+6
* When using a pf rule with both nat-to and rdr-to, it could happenbluhm2015-10-151-3/+6
* import rebound, a lightweight dns proxy, for further polishingtedu2015-10-154-0/+648
* Introduce an unsigned char variable for the ctype function calls.mmcc2015-10-151-5/+7
* Don't Xr flock, since that is not the locking method used.deraadt2015-10-151-3/+2
* Remove disklabel -B (NUMBOOT) support. All the platforms which used to needmiod2015-10-154-320/+8
* Avoid a race between fopen(3) and fchmod(2). Use umask(2) andbluhm2015-10-151-3/+4
* No need to create links for xxboot now that MI installboot is the preferredmiod2015-10-151-4/+1
* Use MI installboot instead of disklabel -B to install boot blocks.miod2015-10-156-36/+19
* Add an extra argument to bootstrap() to allow for a limited overlap between anmiod2015-10-156-14/+31
* add missing comma and missing range restriction, found by smilintsthen2015-10-151-4/+7