florian
50ad58deca
add rad.conf; from semarie; tweak & OK tb
6 years ago
henning
8dc6551ff1
if we couldn't update the clock for ~1h due to lack of data from peers and
sensors, mark us unsynced again. ok reyk krw, pt out / discussion / help naddy
6 years ago
florian
2aa7a2601f
rc(8) infrastructure for rad
6 years ago
florian
fabfc282cb
Add _rad user and group for rad(8).
This recycles the _btd uid/gid that have been removed in 2013.
Discussed in the hackroom.
6 years ago
sthen
c67ac50576
Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commands
to running VMs (at least for OpenBSD ones), but the stop routine for system
daemons is not usually called at shutdown.
Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me
to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped
it with a "stopping VMs" message (it can take some time, especially when you
have multiple VMs, so better to have some clear feedback).
6 years ago
reyk
f5786aed54
Add -w option to vmctl stop to wait for completion of VM termination.
Use it in /etc/rc.d/vmd accordingly.
OK sthen@
6 years ago
florian
cd73602e69
Don't hide errors when IPv6 forwarding is not enabled.
OK(failed) phessler
OK deraadt
6 years ago
henning
f8ee3dae04
we were refering to 10k states by default here as well, pt out by claudio
6 years ago
krw
b977896d36
No need to mention which memory allocation entry point failed (malloc,
calloc or strdup), we just need to log that we ran out of memory in a
particular function.
Recommended by florian@ and deraadt@
ok benno@ henning@ tb@
6 years ago
tb
4e809e852a
netstart is used during system start, but also interactively.
Show proper error message if a regular user executes netstart.
Only do the privilege check if the id binary is available,
which might not be the case during diskless system startup.
ok deraadt, jasper, jca, krw, rpe (who wrote the same diff), sthen
6 years ago
krw
81de90466c
Be consistent in warn() and log_warn() usage when
running out of memory.
Next step, be correct *and* consistent.
ok dennis@ tb@ benno@ schwarze@
6 years ago
dlg
8efe1f2175
list the ports for gre in udp, as per rfc8086 and iana assignments.
ok benno@ deraadt@
6 years ago
tb
ceb98dc281
a mirror URLs -> a mirror URL
From Raf Czlonka
6 years ago
job
960aed9420
Add 6to4 anycast prefixes to bogon filter
Globally anycasted 6to4 has outlived its usefulness.
Operational discussion: http://seclists.org/nanog/2018/Jun/268
OK deraadt@
6 years ago
reyk
e563c271ca
Rename httpd.conf "root strip" option to "request strip".
"root strip" was semantically incorrect and did cause some confusion
as it never stripped the root but the client's request path.
Discussed with many. Heads up: this is a grammar change that also
affects acme-client(1) configurations (see current.html).
OK claudio@
6 years ago
claudio
c5da7cc273
Adjust example after the announce (all|self|...) change.
Adjust filters and comment them to explain the basic operation.
Use large-community and a prefix-set to ensure no bad prefixes are
leaked to eBGP speakers.
With and OK job@
6 years ago
matthieu
a901c5446c
prepare for dri3proto
6 years ago
jmc
4706701ee3
remove "from local" (the default) from one of the match rules: the line
immediately above also uses this notation, it's shorter, and it keeps
two examples in the man page which claim to be the same as the default config
(but with exceptions) in sync;
ok gilles
6 years ago
bluhm
45e07ff629
The open POSIX test suite reveals that sigpause(int sigmask) from
4.2 BSD takes a signal mask as argument while POSIX sigpause(int
sig) expects a single signal. Do not expose our traditional BSD
sigpause(3) to XPG/POSIX sources.
OK guenther@
6 years ago
gilles
d2be86d37b
update default config to new grammar
ok eric@
6 years ago
florian
5eee69a22f
Put commented minimal-reponses and refuse-any defaults into nsd.conf
so that the changed default will be pointed out to the admin by
sysmerge.
Idea & OK sthen
6 years ago
mpf
0b3d8e1fc4
Remove default ls -C alias.
OK millert@, kn@, ian@, sthen@
6 years ago
djm
468ab01728
constrain fractional part to [0-9] (less confusing to static analysis); ok ian@
6 years ago
benno
04aba995ed
don't put options in here that should not be needed in the majority of
cases and will just be copied by users without thinking.
ok claudio@
6 years ago
kettenis
9bce2fbaa9
Add std.1500000 entry, mostly because of firmware constraints on various
Rockchip ARM SoCs.
ok millert@, deraadt@
6 years ago
denis
f814382efe
Add a missing header when compiling with -DDEBUG
With advice from jca@
OK jca@ millert@
6 years ago
schwarze
369994e74f
stop installing /etc/networks, it is now unused; OK deraadt@ tb@
6 years ago
rpe
728f495514
Add a proper usage() function.
Suggested by and OK jmc.
OK tb
6 years ago
ajacoutot
c930cc9e34
spaces->tab
ok kettenis@+florian@'s OCD
6 years ago
florian
b45fb6b071
"listen on * port 80" means all v4 and v6 addresses these days.
OK benno
6 years ago
otto
dbc5faf4ac
sys/uio.h is not used anymore
6 years ago
jsg
376907d69e
adapt armv7 manual pages for arm64
6 years ago
dtucker
8324e3ea4f
Import regenerated moduli file.
6 years ago
otto
79b103c901
fix MALLOC_STATS; spotted by and ok semarie@
6 years ago
florian
7e2a5e7e2d
Add aggressive-nsec example block.
While here, qname minimisation is an RFC since some time.
tweak & OK sthen
6 years ago
deraadt
8b1b18f87e
probably the correct date
6 years ago
florian
26292f37a1
Provide an example httpd.conf that's actually useful.
With & OK deraadt
input sthen
looks better to beck
OK benno
6 years ago
claudio
c9a2eca5f1
Since a while relayd switched from the TLS session cache to using only TLS
session tickets instead. Adjust example relayd.conf file.
From Matt Schwartz, reminded by jmc@ OK deraadt@
6 years ago
mpi
7a2dbe746e
Consistently spell "IPsec" in comments and debug outputs.
From Raf Czlonka, ok sthen@
6 years ago
robert
fda1a6ede1
add syspatch public keys for 6.3 and 6.4
6 years ago
tj
f3a21c728f
remove 6.0 keys
6 years ago
bcook
becf8cef00
ensure SYS_getrandom and GRND_NONBLOCK are both defined before using getrandom(2)
Based on discussion here https://github.com/libressl-portable/openbsd/pull/82
Suggested fix from jsing@
6 years ago
kettenis
d9ddac82be
Implement sicos(3), sincosf(3) and sincosl(3). These functions are common
extensions and modern compilers (such as clang) will use them to optimize
separate calculations of sine and cosine.
ok tom@, patrick@, deraadt@, jmc@
6 years ago
deraadt
d6aeb76165
use _ALIGN() which is uhm a bit OpenBSD-specific, but it means we
don't need to use sys/param.h at all, guess which one i believe is
greater namespace polution
ok otto
6 years ago
deraadt
02c2718077
Use _MAX_PAGE_SHIFT, rather than #ifdef mips64
ok guenther kettenis
6 years ago
deraadt
04e34b8297
#define _MAX_PAGE_SHIFT in MD _types.h as the maximum pagesize an arch
needs (looking at you sgi, but others required this before). This is for
the circumstances we need pagesize known at compile time, not getpagesize()
runtime. Use it for malloc storage sizes, for shm, and to set pthread stack
default sizes. The stack sizes were a mess, and pushing them towards
page-aligned is healthy move (which will also be needed by the coming
stack register checker)
ok guenther kettenis, discussion with stefan
6 years ago
jmc
4f90eb9712
when -n is used, no need to spit out "Missing parameters." before
displaying usage();
ok tb
6 years ago
landry
ef55c3f3d3
Lowercase 'usage' and group -n with interface in it.
From jmc@, ok tb@
6 years ago
naddy
cfb5baa452
OpenBSD 6.4 packages key
6 years ago
deraadt
4412da1cde
openbsd 6.4 base key
6 years ago