summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2021-01-21Revert r1.87 "Pledge before authentication when possible"kn1-9/+5
2021-01-21some updates from pjanzen;jmc1-2/+7
2021-01-21don't set AUTO_RETRY. it's a remnant of an experiment.tb1-3/+1
2021-01-21Rearrange variables in dump / restore to handle -fno-common.mortimer9-76/+100
2021-01-20An invalid packet may not have set src and dst in packet descriptor.bluhm1-7/+9
2021-01-20Missing return value; ok jmc@otto1-2/+3
2021-01-20Make sure to enforce matching dstid as initiator. Use policy lookuptobhe1-1/+23
2021-01-20Cleanup, fix and add a few more test cases. Make sure that the decisionclaudio1-24/+86
2021-01-20Test path MTU discovery with IPv6 TCP packets tunneled in IPv4 ESP.bluhm3-17/+75
2021-01-20If pledge "wroute" is missing for setsockopt SO_RTABLE, print failurebluhm1-2/+2
2021-01-20Check the rewritten address output from tcpdump -e on pflog.bluhm1-15/+37
2021-01-20Print rewritten addresses in tcpdump(8) logged with pflog(4) forbluhm2-16/+28
2021-01-20Reprogram outbound windows to match the device tree. Necessary becausekettenis1-3/+34
2021-01-20typo; spotted by jmcsthen1-3/+3
2021-01-20Check management capabilities before trying to attach temperature sensors,jmatthew1-1/+43
2021-01-20Pledge before authentication when possiblekn1-5/+9
2021-01-20Change so that window_flags escapes # automatically which means configsnicm7-33/+39
2021-01-20Drop unneeded cast in seal_record_protected_ciphertb1-2/+2
2021-01-19pflog(4) tried to log the translated packet with rdr-to, nat-to,bluhm2-149/+5
2021-01-19blacklist com on m3000s. our com code causes faults somehow.dlg1-1/+20
2021-01-19Implement intx support.kettenis1-18/+122
2021-01-19pipex(4): convert ifunit() to if_unit(9)mvs1-2/+5
2021-01-19switch(4): convert ifunit to if_unit(9)mvs2-21/+38
2021-01-19pppoe(4): convert ifunit() to if_unit(9)mvs1-2/+4
2021-01-19pipex(4): convert ifunit() to if_unit(9)mvs1-5/+12
2021-01-19kern/subr_disk.c: convert ifunit() to if_unit(9)mvs1-3/+5
2021-01-19nfs/nfs_boot.c: convert ifunit() to if_unit(9)mvs1-2/+3
2021-01-19Enable athn(4)kettenis2-2/+4
2021-01-19Add code to handle change of cipher state in the new TLSv1.2 record layer.jsing5-17/+137
2021-01-19Provide functions to determine if TLSv1.2 record protection is engaged.jsing5-18/+37
2021-01-19Provide record layer overhead for DTLS.jsing3-17/+38
2021-01-19Factor out code for explicit IV length, block size and MAC length.jsing1-21/+77
2021-01-19s/KHz/kHz/ and reduce dmesg spam a bitkettenis1-4/+4
2021-01-19s/KHZ/kHz/ and reduce dmesg spam a bitkettenis8-23/+23
2021-01-19/etc/malloc.conf path-approval in pledge is no longer needed since 6.5deraadt1-9/+1
2021-01-19Get rid of inet_net_pton and inet_net_ntop.florian2-12/+23
2021-01-19Make imsg event structs static to fix -fno-common.florian3-16/+14
2021-01-19Move control_state and ctl_conns to control.c, it's not neededflorian4-26/+24
2021-01-19No need for a global rad_process; unbreaks -fno-common.florian4-26/+17
2021-01-19Make imsg event structs static to fix -fno-common.florian3-18/+15
2021-01-19Move control_state and ctl_conns to control.c, it's not neededflorian4-26/+24
2021-01-19Prevent more yacc clashes; fixes -fno-common.florian1-0/+6
2021-01-19Reduce scope of routesock unbreaking -fno-common.florian1-3/+6
2021-01-19No need for a global uw_process; unbreaks -fno-common.florian4-26/+17
2021-01-19Make imsg event structs static to fix -fno-common.florian3-12/+12
2021-01-19Move control_state and ctl_conns to control.c, it's not neededflorian4-31/+23
2021-01-19No need for a global slaacd_process; unbreaks -fno-common.florian4-27/+17
2021-01-19Prevent an overflow in inet_net_pton(3) when the passed in buffer isflorian1-11/+18
2021-01-19usb_init_task() wants a struct usb_task as the first argumentanton1-3/+3
2021-01-19First bits of a regress test that ensures that the decision processclaudio2-1/+232