| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2015-10-16 | Pledge support for the parent/resolver in identd(8). |   doug | 1 | -1/+14 | |
| This limits the resolver to just "stdio getpw" or "stdio getpw rpath" depending on whether ~/.noident files are checked. The child/listener cannot use pledge yet because it calls a sysctl that hasn't been whitelisted. "commit" deraadt@ | |||||
| 2015-10-16 | Pledge for ftp(1) in non-interactive mode. | doug | 1 | -1/+23 | |
| We will iterate and remove some of the pledges in the future. This is conservative for now. Tested by sthen@ and myself. ok deraadt@ | |||||
| 2015-10-16 | Remove -B from EXAMPLES; reminded by jmc@ |   miod | 1 | -23/+2 | |
| 2015-10-16 | Add allocarray(), an overflow-safe allocation function. |   mmcc | 1 | -1/+26 | |
| We avoided reallocation support because it demands more fancy footwork to deal with the prepended link struct. This has been on my mind for a while, and a 2010 security review of mksh by the Android security team's Chris Palmer suggested it. ok nicm@. Also discussed with millert@ and tedu@. | |||||
| 2015-10-16 | sync |   deraadt | 2 | -0/+2 | |
| 2015-10-16 | fine tune the logging some more |   tedu | 1 | -1/+8 | |
| 2015-10-16 | simplify logging functions. once a daemon, always a daemon | tedu | 1 | -23/+19 | |
| 2015-10-16 | safety check that we're dealing with the filter we expect | tedu | 1 | -2/+5 | |
| 2015-10-16 | most things should be static | tedu | 1 | -15/+15 | |
| 2015-10-16 | exit(1) is better for the impossible condition | tedu | 1 | -2/+3 | |
| 2015-10-15 | fix some signed/unsigned integer type mismatches in format |   djm | 4 | -9/+9 | |
| strings; reported by Nicholas Lemonias | |||||
| 2015-10-15 | Do not abuse .Nm for emphasis; |   schwarze | 1 | -12/+5 | |
| patch from Michael Reed <m dot reed at mykolab dot com>. Also drop .Tn while here. | |||||
| 2015-10-15 | Delete two preprocessor constants that are no longer used. | schwarze | 2 | -7/+2 | |
| Patch from Michael Reed <m dot reed at mykolab dot com>. | |||||
| 2015-10-15 | argument to sshkey_from_private() and sshkey_demote() can't be NULL | djm | 1 | -7/+3 | |
| 2015-10-15 | After spawning, the parent can pledge "stdio rpath wpath cpath" | deraadt | 1 | -1/+4 | |
| from rob pierce | |||||
| 2015-10-15 | Remove three distracting aliases for NULL. | mmcc | 2 | -15/+11 | |
| ok nicm@ | |||||
| 2015-10-15 | Simplify the part of args() that is handling .Bl -column phrases: | schwarze | 1 | -73/+28 | |
| Delete manual "Ta" handling because macro handling should not be done in an argument parser but should be left to the macro parsers, which exist anyway and work well. No functional change, minus 40 lines of code. Confusing and redundant code found while investigating an old bug report from tim@. | |||||
| 2015-10-15 | When blk_full() handles an .It line in .Bl -column and indirectly | schwarze | 1 | -1/+6 | |
| calls phrase_ta() to handle a .Ta child macro, advance the body pointer accordingly, such that a subsequent tab character rewinds the right body block and doesn't fail an assertion. That happened when there was nothing between the .Ta and the tab character. Bug reported by tim@ some time ago. | |||||
| 2015-10-15 | it is perhaps better style to not call close() on -1, even if harmless | tedu | 1 | -6/+12 | |
| 2015-10-15 | make sure req is zeroed in tcp case | tedu | 1 | -2/+2 | |
| 2015-10-15 | better memory handling of the request/cache chain | tedu | 1 | -9/+23 | |
| 2015-10-15 | do not insert entry into cache until it's fully formed | tedu | 1 | -2/+2 | |
| 2015-10-15 | doh, not all requests are the same size. check len first. | tedu | 1 | -2/+3 | |
| 2015-10-15 | assert is the wrong tool | tedu | 1 | -3/+4 | |
| 2015-10-15 | the inet sockets don't work well with inet6 addrs. pick family from addr. | tedu | 1 | -3/+3 | |
| detected by naddy | |||||
| 2015-10-15 | everybody can build rebound | tedu | 1 | -2/+3 | |
| 2015-10-15 | no mail for _rebound. deraadt | tedu | 1 | -1/+2 | |
| 2015-10-15 | introduce logerr, since most logging is followed by exit | tedu | 1 | -33/+36 | |
| 2015-10-15 | don't allow NSD to pick up libevent from /usr/local if the libevent2 |   sthen | 1 | -1/+2 | |
| package is installed. | |||||
| 2015-10-15 | now with _rebound user, we can try a little harder at privdrop | tedu | 1 | -3/+11 | |
| 2015-10-15 | _rebound user and group (52) | tedu | 2 | -0/+2 | |
| 2015-10-15 | make the HUP interlocking in the parent work better. | tedu | 1 | -10/+24 | |
| 2015-10-15 | trivial KNF | deraadt | 1 | -3/+5 | |
| 2015-10-15 | In syslogd replace the dprintf() macro with a logdebug() function |   bluhm | 3 | -85/+97 | |
| as dprintf(3) is in libc now and does something different. OK guenther@ | |||||
| 2015-10-15 | Pledge login_token with "stdio rpath wpath cpath fattr getpw tty". | bluhm | 1 | -1/+4 | |
| OK deraadt@ | |||||
| 2015-10-15 | just a space in usage, from deraadt | tedu | 1 | -2/+2 | |
| 2015-10-15 | Remove an unused included header (sys/stat.h). | mmcc | 1 | -2/+1 | |
| 2015-10-15 | add a hint about the config file, until it changes | tedu | 1 | -1/+5 | |
| 2015-10-15 | child can be pledged down a bit to just sockets and io | tedu | 1 | -1/+6 | |
| 2015-10-15 | When using a pf rule with both nat-to and rdr-to, it could happen | bluhm | 1 | -3/+6 | |
| that the nated source port was reused as destination port. Do not initialize nport at the beginning of the function, but where it is needed. OK sashan@ | |||||
| 2015-10-15 | import rebound, a lightweight dns proxy, for further polishing | tedu | 4 | -0/+648 | |
| 2015-10-15 | Introduce an unsigned char variable for the ctype function calls. | mmcc | 1 | -5/+7 | |
| ok millert@ | |||||
| 2015-10-15 | Don't Xr flock, since that is not the locking method used. | deraadt | 1 | -3/+2 | |
| ok millert | |||||
| 2015-10-15 | Remove disklabel -B (NUMBOOT) support. All the platforms which used to need | miod | 4 | -320/+8 | |
| it are now using MI installboot for that purpose. ok krw@ deraadt@ | |||||
| 2015-10-15 | Avoid a race between fopen(3) and fchmod(2). Use umask(2) and | bluhm | 1 | -3/+4 | |
| unlink(2) and fopen(3) to prevent an attacker to open an old file with wrong permissions before the secret is written into it. This also guarantees that a new file with correct permissions is created. Without fchmod(2) "fattr" can be removed from pledge. with and OK deraadt@ | |||||
| 2015-10-15 | No need to create links for xxboot now that MI installboot is the preferred | miod | 1 | -4/+1 | |
| way to install boot blocks. | |||||
| 2015-10-15 | Use MI installboot instead of disklabel -B to install boot blocks. | miod | 6 | -36/+19 | |
| ok krw@ deraadt@ | |||||
| 2015-10-15 | Add an extra argument to bootstrap() to allow for a limited overlap between an | miod | 6 | -14/+31 | |
| existing partition and the boot blocks span, and update all callers to require an overlap limit of zero sectors (thus not changing their behaviour). Then, add proper support for vax: copy the 2nd-stage boot block to /boot and install the 1st-stage boot block at the beginning of the disk, retaining the disklabel; allow for an overlap of up to 16 sectors, which is perfectly fine as long as your `a' partition is FFS. Note that regular installs will not even have such an overlap, because the default OpenBSD span on a disk on vax starts at sector 16, but installation media use sperific layout which require this. ok krw@ | |||||
| 2015-10-15 | add missing comma and missing range restriction, found by smilint | sthen | 1 | -4/+7 | |
| 2015-10-15 | relaydMIBObjects, not relaydMIBOjbects. From Rob Pierce. | sthen | 1 | -4/+6 | |
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |