| Commit message (Collapse) | Author | Files | Lines |
|
- for PLEDGE_FATTR: the code is more accurate to be PLEDGE_FATTR, has
p->p_pledgenote could have multiple bits inside, and it is the lake of
PLEDGE_FATTR that make the check fail.
- for PLEDGE_RECVFD and PLEDGE_SENDFD, change the error to be EINVAL: we fail,
not because of lake of PLEDGE_RECVFD / PLEDGE_SENDFD permission, but because
the value passed is invalid in pledged program (for example trying to send a
VDIR).
"go ahead" deraadt@
|
|
provide the required pledge request for pledge_fail().
ok deraadt@
|
|
|
|
|
|
hang at a host key prompt if you have an A or CNAME for "proxy" in your local
domain.
|
|
ok guenther@
|
|
|
|
|
|
While here, there is no option to pass a different tos, and no other
use of the "tos" variable out of tn(), so move the "tos" variable in tn()
and assign it the right value from the start.
ok millert@
|
|
"set" reminds of select(2) fd_set, and is never used elsewhere in the
tree as a name for a pollfd array. No functional change.
|
|
Gets rid of a lot of warnings with -Wshadow. No functional change.
|
|
|
|
No functional change.
|
|
No functional change.
|
|
No functional change.
|
|
identity file exists. This means that if the shell doesn't do the expansion
(eg because the option and filename were given as a single argument) then
we'll still add the key. bz#2481, ok markus@
|
|
No functional change.
|
|
file. It's an unnecessary optimization from repurposed ProxyCommand code
and prevents some things working with some shells. bz#2471, pointed out
by res at qoxp.net. ok markus@
|
|
|
|
No functional change.
|
|
No functional change.
|
|
No functional change.
|
|
Since 1999 no one has found the need to write support for a config file.
|
|
|
|
|
|
#{=10:...} length limit, add #{t:...} to convert a time_t format to a
string, #{b:...} for basename and #{d:...} for dirname. Remove all the
foo_string time formats as they can now be replaced by "t:", for example
#{window_activity_string} becomes #{t:window_activity}.
|
|
ok jca sthen
|
|
|
|
|
|
head(1) and tail(1).
Input & okay from jmc@
|
|
|
|
|
|
Requested by stsp
|
|
|
|
running so verify that if the cron socket exists nothing is listening
on it. OK tedu@
|
|
pid files aren't useful on OpenBSD, the rc.d(8) framework doesn't use
them. In rtadvd, not writing a pid file means that we can set tighter
pledge(2) settings. Also the pid file handling is pretty basic and the
atexit handler can't remove the pid file since rtadvd did a chroot - beurk.
ok florian@, "perfect" deraadt@ (!)
|
|
ok krw deraadt
|
|
used less than "stdio" -- include all the "self" operations. Instead of
different defines, use regular PLEDGE_* in the "p_pledgenote" variable
(which indicates the operation subtype a system call is performing). Many
checks before easier to understand. p_pledgenote can often be passed
directly to ktrace, so that kdump says:
15565 test CALL pledge(0xa9a3f804c51,0)
15565 test STRU pledge request="stdio"
15565 test RET pledge 0
15565 test CALL open(0xa9a3f804c57,0x2<O_RDWR>)
15565 test NAMI "/tmp/testfile"
15565 test PLDG open, "wpath", errno 1 Operation not permitted
with help from semarie, ok guenther
|
|
|
|
ok deraadt
|
|
From BoringSSL commit: d13a5e15d4e4eb51513be665306a2beba39869df
|
|
|
|
|
|
|
|
also avoid excessive tsleep()s for updates within the sensor task,
moreover this should fix some seldom seen 'comm collision' errors
|
|
Strip out unnecessary #includes and use NULL instead of (struct rusage *)0
|
|
imsg_ctl_rde since these function should only be used by the control
code. Also switch ibuf_rde to ibuf_rde_ctl so that the control imsgs
don't need to queue behind all the incoming bgp UPDATES. This speeds
up 'bgpctl show' from taking minutes to a few seconds. The RDE was doing
this since a very long time but it seems the SE was not adjusted. Yikes
|
|
control socket has not many messages queued.
|
|
ok guenther@
|
|
doesn't get pulled into all static executables
ok millert@ jca@
|