GitLab

  * Fix #ifndef safeguards (rename/add where missing);
  * Use consistent spelling for year when it's mentioned in day desc;
  * Tweak some wrong casing cases;
  * Remove calendar.msk since Moscow doesn't have summer time anymore,
    and that was the only thing this file was about;
  * A few other corrections.

Some corrections from Mikhail on tech@, thanks!
Small fix & okay from mikeb@.

and out of boundary accesses.

with input by miod, ok stsp

offset.

From Serguey Parkhomovsky via bugs@, in response to problem report
from matthieu@. Same fix is in NetBSD for one.

ok tedu@

Kaliman.

ok nicm@

e.g. print pointers with %p instead of %08x. No changes outside of
MSDOSFS_DEBUG.

and coping with error conditions... that lets us avoid a pledge "wpath".

Putting it all together, this lets the master ntpd pledge "stdio rpath
inet settime proc id".  It works like this: "rpath" to load the
certificates, "proc" to create constraint processes, "id" to chroot
and lock the constraint processes into a jail, then "inet" to open a
https session.  "settime" is used by the master to manage the system
time when the ntp-speaking engine instructs the master.

with help from naddy

in a background process.  A potential fork(2) at every message is
bad, so replace this with an event.  As a bonus the syslogd child
process does not need to pledge "proc" anymore.  Also limit the
number of delayed write events.
OK deraadt@

slightly in the server to "stdio rpath wpath cpath fattr unix recvfd
proc exec tty ps".

256-colour escape sequences (so setaf/setab can be bypassed if needed).

ok sunil millert

found through pledge. ok deraadt@

Note: "pseudo-device tun" is used by both devices this is not a typo
OK dlg@ mpi@

OK dlg@ mpi@

as well. OK dlg@ mpi@

between modes. The two drivers still share most of the code but the mode
switcher is gone.
OK dlg@ mpi@

(sysctl and then print), change (getsocket, then read/write on that).
Refactor lightly and insert pledge "stdio rpath dns" in each case.
ok claudio benno phessler

non-sensical.  The dns lookups happened in the process routing table
(usually '0'), which is very likely to have different results from the
other routing domains.  If you do depend on having this behaviour,
you'll need to use pf to cross the rtable boundary.

"listen on * rtable X" is still supported.

Users of "server * rtable X" will need to switch to launching ntpd with
"route -T X exec /usr/sbin/ntpd"

OK deraadt@

fixing input like \fB\('e; issue reported by bentley@

This allows us to only grab the KERNEL_LOCK when the last reference
of an entry has been dropped.

For symmetry also grab the KERNEL_LOCK inside rtalloc(9).

ok dlg@, bluhm@

messages still appear on the tty.

route by changing the gateway.  Despite the error message when doing
so, the route did actually change.  The gateway is modified by
rt_setgate(), the error is created by rt_getifa().  Do these
operations the other way around.
OK mpi@

ok claudio@

pledge "stdio rpath".

list of interface names. At the same time switch if_nametoindex(3) and
if_indextoname(3) to use if_nameindex(3) instead of getifaddrs(3).
if_nameindex(3) exposes much less then getifaddrs(3) and is allowed by
pledge(2).
With and OK deraadt@