deraadt
c6fc6500f7
_ppp uid/gid will come up for recycling (but please not within a year)
10 years ago
deraadt
357cb1b33e
the userland ppp(9) code goes awa. Having too much ppp choice in the
tree results in one-true-ppp not coming into existance. This code is
essentially un-audited and quite dangerous.
ok claudio sthen
10 years ago
guenther
5ebaeabad3
lint is dead (long live the lint!), so stop using it as a cpp conditional
(namespace pollution!) or talking about its opinion on code.
ok krw@
10 years ago
sthen
85815eee50
add unbound.conf and (dnssec) root.key to changelist
10 years ago
sthen
216f65a4eb
Add _unbound user here too. Reminded by aja@
10 years ago
sthen
cc6c887d94
Enable Unbound in base, ok deraadt@
10 years ago
miod
423a89bb3d
Bump the cdXX image from 12MB to 13MB.
10 years ago
sthen
62f586f294
httpd_flags was still used here; remove it.
Add a log socket in /var/www/dev/log if nginx is enabled, it is needed as
the openlog() call is done after chrooting.
ok brad@ florian@ deraadt@
10 years ago
sthen
227e08b10e
Add a new sample config file and rc.d script for unbound, ok deraadt@
10 years ago
kettenis
68a0072e4a
regen
10 years ago
kettenis
7d3fe827b5
We no longer support the userland interface for agp(4).
10 years ago
sthen
a16eb2ca9e
Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's added
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA
service-names-port-numbers.txt.
If anyone's interested in adding AF_UNIX support for comms between unbound
and unbound-control, that would very welcome.
OK brad@ deraadt@
10 years ago
tedu
f053ee9367
adding a user is hard. mistakes pointed out by ajacoutot
10 years ago
tedu
681c9fb0a4
smtpd dudes forgot to add their _smtpq user
10 years ago
tedu
ada69bdc62
the default rsh is now spelled ssh. ok deraadt
10 years ago
tedu
dcfc5e6745
it's a tedu miracle! this file is just descriptions, so resurrect sprayd
10 years ago
florian
859c20a99c
Unhook httpd(8) from build; etc bits
OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@
"The time is right." and much help getting the show on
the road deraadt@
10 years ago
florian
1c3ccedd79
Unhook httpd(8) from build
OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@
"The time is right." and much help getting the show on
the road deraadt@
10 years ago
tedu
f87d303583
just run newaliases. should be about the same, but less sendmail.
ok todd
10 years ago
tedu
01d0115415
switch over to smtpd by default.
ok deraadt gilles todd
10 years ago
tedu
79db798be4
Are they going to help?
No.
Well, then tell them to stay out of the way.
ok deraadt
10 years ago
tedu
2afac518f6
too old, undermaintained
10 years ago
deraadt
ef92d07080
the pre-5.5 test keys are no longer useful
10 years ago
deraadt
e42554fe04
some files were not being hashes, because they were missing from MDEXT
noticed by jsg, and important enough to make release
10 years ago
deraadt
a5b057e094
cdemu is no more
10 years ago
deraadt
ecddb37e92
Add two disktab entries, for *.fs install filesystems (let's call them
'miniroot and maxiroot')..
from chris
10 years ago
deraadt
9bc65eb166
proper (non-test) keys for 5.5 and 5.6 base
10 years ago
miod
9dfb0807e1
Build a small miniroot filesystem which can be dumped on a new disk or an
existing swap partition for an easier initial installation.
10 years ago
sthen
bd5b2f0252
proper (non-test) keys for 5.5 and 5.6 firmware
10 years ago
deraadt
39d9fc4437
the test 5.4 keys can go away
10 years ago
naddy
800f5f6c0b
OpenBSD 5.5 and 5.6 packages public keys
10 years ago
giovanni
aa34f03d02
fix pkg names
10 years ago
espie
559004a235
revert previous
has fun effects on some manpages under some circumstances, as found out
by sthen@: the gindent manpage looks like shit when seen with that new
default man.conf on an uft8 terminal, e.g., quotes combine with the
previous character to yield accented letters for no reason.
this should be handled calmly after release, not rushed in at the last
minute (okay deraadt@)
10 years ago
tedu
0b9e1f8234
solar's testsuite revealed insufficient validation of invalid input hashes.
add a more complete check for the rounds parameter. ok deraadt
10 years ago
tedu
8658bb7eae
default to locale awareness. safer than changing internal mandoc defaults.
10 years ago
schwarze
0f060ca5c4
in HISTORY, say where this actually came from;
ok deraadt@ bentley@
10 years ago
schwarze
4ba743acc2
Ignore blank characters at the end of ${pkg_scripts} in order
to refrain from trying to execute /etc/rc.d/ in that case.
Problem noticed by jasper@.
Opinions on this patch vary: "much nicer, ok" sthen@
"good god, what horrible shell voodoo, ok" ajacoutot@
10 years ago
tedu
d1419f7b10
remove redundant test
10 years ago
tedu
ddd68ca1c6
sticking strlen into a char leads to wraparound at 256. fix this and
introduce a new 'b' hash minor. still generate 'a' minors for now.
reported by solar designer. diff by some combination of solar and jca.
ok deraadt
10 years ago
pelikan
df4f9adb13
Show the exemplary rules for accepting default routes for IPv6 as well.
ok sthen florian
10 years ago
ratchov
c5b839f3a5
regen to add audio*
10 years ago
ratchov
f4b52f62a7
readd audio devices, from david@, thanks!
10 years ago
schwarze
22595e2034
Remove the bogus author "U. Delaware" from RFC 5905
as noticed by Arto Jonsson <ajonsson at kapsi dot fi>.
While here, give the full author names, which costs no additional work
because i had to cross-check against the original documents anyway.
10 years ago
dtucker
c438f027ad
Run the serving and privileged ntpd processes at high priority and the
dns process at normal priority. Should improve latency on loaded machines.
ok henning@
10 years ago
stsp
8c495fa1f9
Remove unnecessary stdio.h include.
Patch by Jean-Philippe Ouellet ; ok krw@
10 years ago
miod
a4710516a3
Build and document bsd.mp on alpha.
10 years ago
tedu
a0c81f7a45
explicit_bzero where useful
10 years ago
sthen
8b3ce8e88e
typo in errx() string
10 years ago
deraadt
36f63ef5a1
delete junk file
11 years ago
dtucker
65f45be470
Change the default PF policy to "block return", including x11 as
suggested by naddy@. This solves the problem that occurs when a
server crashes or is hard booted and comes back up without tearing
down any connections to it, and packets from these connections don't
match any existing state or rule and are silenty dropped.
ok phessler@ henning@ claudio@ dlg@
11 years ago