| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | sysctl.conf is an example. | 2014-08-09 | 2 | -5/+6 | ||
| | | | | | | Tweak error output. Mention that `-S' has no effect when sets aren't used. | |||||
| * | Drop some useless verbiage. | 2014-08-08 | 1 | -17/+6 | ||
| | | | | | sysctl.conf is an example now. | |||||
| * | Tweak verbiage. | 2014-08-08 | 1 | -3/+3 | ||
| | | ||||||
| * | Properly warn when an example changes and the corresponding file is found | 2014-07-30 | 1 | -2/+2 | ||
| | | | | | | | | under /etc. issue reported by Nathanael Rensen "fine" deraadt@ | |||||
| * | Fix auto-upgradable files detection. | 2014-07-20 | 1 | -2/+2 | ||
| | | | | | from Nathanael Rensen, thanks! | |||||
| * | Cleanups: | 2014-07-18 | 1 | -5/+5 | ||
| | | | | | | - links are already ignored when creating the sums - better CVSID match | |||||
| * | typo | 2014-07-15 | 1 | -3/+3 | ||
| | | ||||||
| * | /var/db/sysmerge -> /usr/share/sysmerge | 2014-07-15 | 2 | -11/+11 | ||
| | | | | | ok deraadt@ | |||||
| * | Also ignore examplessum. | 2014-07-13 | 2 | -4/+5 | ||
| | | ||||||
| * | egsum -> examplessum | 2014-07-12 | 1 | -2/+2 | ||
| | | ||||||
| * | Extend output a bit. | 2014-07-12 | 2 | -5/+7 | ||
| | | ||||||
| * | Use sha256(1) for compared files, just like we do for examples. | 2014-07-12 | 1 | -7/+6 | ||
| | | ||||||
| * | Initial support for /etc/examples. | 2014-07-12 | 2 | -8/+49 | ||
| | | ||||||
| * | /var/games/tetris.scores will move away from the etc set. | 2014-07-10 | 2 | -5/+3 | ||
| | | ||||||
| * | restore_sum: remove newly created sum file(s). | 2014-03-27 | 1 | -1/+2 | ||
| | | ||||||
| * | login.conf(5) is not special anymore. | 2014-03-26 | 2 | -5/+4 | ||
| | | ||||||
| * | Rework the way we fetch and verify sets to simplify the process. | 2014-03-24 | 1 | -68/+81 | ||
| | | | | | | | | | | | | | | Don't fetch SHA256 twice when we are updating from the same repo. Better output. Simplify extract_set (becomes extract_sets and deal with all sets at once). Make sure we cannot pass -s xetcXX and/or -x etcXX. Bring consistency in condition evaluations. Drop some unused variables. with inputs from rpe@ | |||||
| * | Fix trap: do not remove the entire WRKDIR -- we may have our backed up files | 2014-03-22 | 1 | -2/+2 | ||
| | | | | | in there. | |||||
| * | Also remove TEMPROOT in error_rm_wrkdir. | 2014-03-22 | 1 | -1/+2 | ||
| | | ||||||
| * | Make sure to add missing users/groups _before_ running the | 2014-03-22 | 1 | -60/+53 | ||
| | | | | | | | | distribution-etc-root-var target; otherwise mtree(8) can fail. issue reported and debugged by deraadt@ ok sthen@ | |||||
| * | Use ftp -D. | 2014-03-21 | 1 | -3/+3 | ||
| | | ||||||
| * | Fix small regression when not using a full path to sets. | 2014-03-21 | 1 | -4/+4 | ||
| | | ||||||
| * | Cope with recent signify(1) changes and simplify getting/checking the sets. | 2014-03-20 | 1 | -43/+16 | ||
| | | | | | ok sthen@ rpe@ | |||||
| * | Drop the check for badly formed *etc sets when we check signatures; it saves | 2014-03-18 | 1 | -3/+4 | ||
| | | | | | | us time and if the sets are signed we can assume they are legit (yes, I am an assumer). | |||||
| * | Always print the key signify(1) is using. | 2014-03-06 | 1 | -2/+2 | ||
| | | | | | sure deraadt@ | |||||
| * | start using the new officially named keys. This is being done before | 2014-03-01 | 1 | -3/+3 | ||
| | | | | | | | any snapshots come out which are signed with that key... but just give it a day or two. from ajacoutot | |||||
| * | Only create DBDIR if it does not exist. | 2014-02-08 | 1 | -2/+5 | ||
| | | ||||||
| * | When using SM_PATH, fetch the SHA256 file only once since we will not be | 2014-02-07 | 1 | -7/+14 | ||
| | | | | | | | using multiple repos. ok rpe@ | |||||
| * | Sync getopts with usage. | 2014-02-05 | 1 | -2/+2 | ||
| | | ||||||
| * | Really clean up after a run. | 2014-02-03 | 1 | -10/+14 | ||
| | | | | | | | Factorize the sig file name. Do not through an error when a file got manually removed but is still present in the sum file. | |||||
| * | Drop comma (sthen@). | 2014-01-28 | 1 | -2/+2 | ||
| | | ||||||
| * | Drop FETCH_CMD and always use ftp(1). | 2014-01-28 | 2 | -32/+24 | ||
| | | | | | | | | | New fetch() function that wraps ftp(1) with our needed knobs (courtesy of halex@) input from halex@ rpe@ ok halex@ | |||||
| * | Only remove COMPFILE if it exists. | 2014-01-27 | 1 | -2/+3 | ||
| | | ||||||
| * | Move "EDIT" to the top. | 2014-01-27 | 1 | -7/+7 | ||
| | | ||||||
| * | Enhance errors output and display exactly what is going on. | 2014-01-27 | 1 | -29/+36 | ||
| | | | | | | | | req. by deraadt@ Don't redirect error messages unless in a couple of places where it actually makes sense. | |||||
| * | Make it clear SM_PATH will fetch the sets corresponding to the currently | 2014-01-27 | 1 | -4/+4 | ||
| | | | | | running release. | |||||
| * | specifically NOT suppress signify error output | 2014-01-23 | 1 | -2/+2 | ||
| | | | | | | suggested by espie@ OK deraadt@ | |||||
| * | More output enhancements, put errors and warnings where they belong. | 2014-01-23 | 1 | -27/+23 | ||
| | | ||||||
| * | Verify both the signature and the checksum in check_sig(). | 2014-01-23 | 1 | -19/+18 | ||
| | | | | | | | | Fix a regression with '-s' and '-x' when not using full path to the sets. Be a little bit more verbose about what we do. ok rpe@ | |||||
| * | Do not bother comparing/merging empty files. Regression from previous | 2014-01-22 | 1 | -2/+9 | ||
| | | | | | spotted by kettenis@ | |||||
| * | Don't remove the SHA256 file twice. | 2014-01-22 | 1 | -2/+2 | ||
| | | ||||||
| * | Cleanup and simplify: | 2014-01-22 | 1 | -39/+61 | ||
| | | | | | | | | | | | | | | | | - rename restore_bak to restore_sum since this is what it does - better clean up after ourselves so only user relevant files are left in the work directory after a run - better handling of symlinks and make sure they match - tweak output: no need to warn the user when we are finished, it is pretty obvious; output that we are veryfing sigs - simplify signature handling: drop get_sig and get signatures at the same time we get the sets -- this allows to get a specific SHA256.sig file for each set check signature in check_sig() right after getting the corresponding set ok rpe@ | |||||
| * | Document -S and the new signify(1) use by sysmerge(8). | 2014-01-21 | 1 | -4/+12 | ||
| | | | | | input and ok jmc@ | |||||
| * | Protect variable names. | 2014-01-21 | 1 | -5/+5 | ||
| | | ||||||
| * | Add and enable signature checking per default. | 2014-01-21 | 1 | -7/+30 | ||
| | | | | | | | | | Provide new option -S to skip that step. idea and initial work from jturner@ with feedback from deraadt@ ok aja@ | |||||
| * | Add support for the SM_PATH environment variable. This changes the | 2013-09-10 | 2 | -7/+22 | ||
| | | | | | | | | | | | | | | | default behavior of sysmerge when no source is specified on the command line: * if SM_PATH is set, then sysmerge will search this path for etcXX.tgz and/or xetcXX.tgz * if SM_PATH is not set (the default), then the behaviour is the same as before and /usr/src is used idea from espie@ man page refactoring jmc@ (who else :-)) "good idea" krw@ ok rpe@ landry@ espie@ | |||||
| * | use .Mt for email addresses; from Jan Stary <hans at stare dot cz>; ok jmc@ | 2013-07-16 | 1 | -4/+4 | ||
| | | ||||||
| * | Do not register symlinks in the sum files. This makes no sense and makes | 2013-03-22 | 1 | -5/+6 | ||
| | | | | | | | | sysmerge(8) output a warning when the target of the link does not yes exist on the system. ok sthen@ | |||||
| * | Always compare aliases(5) at the end of the sysmerge(8) run after all | 2013-03-02 | 1 | -5/+7 | ||
| | | | | | | | | | files have already been merged. This is needed in the case where the syntax of smtpd.conf changed to prevent newaliases(8) from failing. issue reported by todd@ ok sthen@ | |||||
| * | Rename some functions and bump copyright. | 2013-01-25 | 1 | -19/+19 | ||
| | | | | | No functionnal change. | |||||
