- 23 Oct, 2015 40 commits
-
-
Vadim Zhukov authored
* Fix #ifndef safeguards (rename/add where missing); * Use consistent spelling for year when it's mentioned in day desc; * Tweak some wrong casing cases; * Remove calendar.msk since Moscow doesn't have summer time anymore, and that was the only thing this file was about; * A few other corrections. Some corrections from Mikhail on tech@, thanks! Small fix & okay from mikeb@.
-
mmcc authored
-
Tobias Stoeckmann authored
and out of boundary accesses. with input by miod, ok stsp
-
mmcc authored
-
mmcc authored
-
Ted Unangst authored
-
Kenneth R Westerback authored
offset. From Serguey Parkhomovsky via bugs@, in response to problem report from matthieu@. Same fix is in NetBSD for one. ok tedu@
-
mmcc authored
Kaliman. ok nicm@
-
Kenneth R Westerback authored
e.g. print pointers with %p instead of %08x. No changes outside of MSDOSFS_DEBUG.
-
Claudio Jeker authored
-
Claudio Jeker authored
-
Theo de Raadt authored
and coping with error conditions... that lets us avoid a pledge "wpath". Putting it all together, this lets the master ntpd pledge "stdio rpath inet settime proc id". It works like this: "rpath" to load the certificates, "proc" to create constraint processes, "id" to chroot and lock the constraint processes into a jail, then "inet" to open a https session. "settime" is used by the master to manage the system time when the ntp-speaking engine instructs the master. with help from naddy
-
Nicholas Marriott authored
-
Nicholas Marriott authored
-
Alexander Bluhm authored
in a background process. A potential fork(2) at every message is bad, so replace this with an event. As a bonus the syslogd child process does not need to pledge "proc" anymore. Also limit the number of delayed write events. OK deraadt@
-
Nicholas Marriott authored
slightly in the server to "stdio rpath wpath cpath fattr unix recvfd proc exec tty ps".
-
Nicholas Marriott authored
-
Theo de Raadt authored
-
Nicholas Marriott authored
256-colour escape sequences (so setaf/setab can be bypassed if needed).
-
Joerg Jung authored
ok sunil millert
-
Sebastian Benoit authored
found through pledge. ok deraadt@
-
Claudio Jeker authored
-
Claudio Jeker authored
-
Claudio Jeker authored
Note: "pseudo-device tun" is used by both devices this is not a typo OK dlg@ mpi@
-
Claudio Jeker authored
-
Claudio Jeker authored
OK dlg@ mpi@
-
Claudio Jeker authored
as well. OK dlg@ mpi@
-
Claudio Jeker authored
between modes. The two drivers still share most of the code but the mode switcher is gone. OK dlg@ mpi@
-
Theo de Raadt authored
(sysctl and then print), change (getsocket, then read/write on that). Refactor lightly and insert pledge "stdio rpath dns" in each case. ok claudio benno phessler
-
Peter Hessler authored
non-sensical. The dns lookups happened in the process routing table (usually '0'), which is very likely to have different results from the other routing domains. If you do depend on having this behaviour, you'll need to use pf to cross the rtable boundary. "listen on * rtable X" is still supported. Users of "server * rtable X" will need to switch to launching ntpd with "route -T X exec /usr/sbin/ntpd" OK deraadt@
-
Martin Pieuchot authored
-
Ingo Schwarze authored
fixing input like \fB\('e; issue reported by bentley@
-
Martin Pieuchot authored
This allows us to only grab the KERNEL_LOCK when the last reference of an entry has been dropped. For symmetry also grab the KERNEL_LOCK inside rtalloc(9). ok dlg@, bluhm@
-
Ted Unangst authored
-
Ted Unangst authored
-
Alexander Bluhm authored
messages still appear on the tty.
-
Alexander Bluhm authored
route by changing the gateway. Despite the error message when doing so, the route did actually change. The gateway is modified by rt_setgate(), the error is created by rt_getifa(). Do these operations the other way around. OK mpi@
-
Martin Pieuchot authored
ok claudio@
-
Theo de Raadt authored
pledge "stdio rpath".
-
Claudio Jeker authored
list of interface names. At the same time switch if_nametoindex(3) and if_indextoname(3) to use if_nameindex(3) instead of getifaddrs(3). if_nameindex(3) exposes much less then getifaddrs(3) and is allowed by pledge(2). With and OK deraadt@
-