| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
Instead assign the process name directly to log_procname which was
the last user of ripd_process.
|
|
|
|
|
|
|
|
|
|
| |
Use unveil to remove file system access for the parent proc.
Also remove control_cleanup as discussed on tech@. It allows to fully remove
fs access (ripd does not support reload). It's not an issue for ripd and
ripctrl if an unused socket file is lying around.
reads OK for claudio@ and mestre@
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
On shutdown, there's no need to use kill(2) to kill the child
processes. Just closing the IPC sockets will make the children receive
an EOF, break out from the event loop and then exit.
Tha advantages of this "pipe teardown" are:
* simpler code;
* no need to pledge "proc" in the parent process;
* removal of a (hard to trigger) PID reuse race condition.
ok benno@ claudio@
|
|
|
|
|
|
|
| |
move daemon-local functions into new logmsg.c, and reduce
the (mostly whitespace) differences so that log.c's can be diffed easily.
ok claudio@, feedback from henning@, deraadt@, reyk@
|
| |
|
|
|
|
|
|
|
|
|
| |
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)
|
|
|
|
| |
ok claudio@
|
|
|
|
| |
"looks right" deraadt and sthen.
|
|
|
|
|
|
| |
system header pulls the latter in
ok millert@
|
|
|
|
| |
log_debug(). ok michele, henning, sthen
|
|
|
|
| |
ok claudio@
|
|
|
|
| |
ok pyr@
|
| |
|
|
|
|
| |
the same ospfd diff applied with some fuzz.
|
|
|
|
| |
16). So use u_int8_t everywhere.
|
|
|
|
|
|
| |
instead do a "nice" shutdown. Ignore SIGHUP in the childs even though we
have no reload support (yet). Remove some redundant code and clean up some
types.
|
| |
|
|
|
|
|
|
| |
higly recommended in the rfc.
tested by me and OK claudio@
|
|
|
|
| |
some other cosmetics.
|
|
|
|
| |
report crashes. Discussed with norby@
|
|
|
|
|
| |
redistribute setups as in ospfd (rtlables, per prefix, negation).
Tested, input and OK michele@
|
| |
|
|
started by Michele Marchetto some time ago by using the imsg/three process framework
of ospfd. He implemented most of the daemon with a little help and guidance from
Claudio and I.
Currently the daemon is more or less complete, with the exception of key lifetime
and rollover.
Not yet connected to the builds.
OK claudio@
|