21fee912Add ipmi(4) cdev entry on amd64 and i386 by
uebayasi2016-02-05 06:29:45 +0000
f91e94f2Convert sigemptyset and sigfillset to inline functions to avoid warnings with newer gcc versions and -Werror=unused-value. OK guenther@ by
millert2016-02-04 22:04:34 +0000
41146672Remove setproctitle() for the parent process. Because rc.d(8) uses process titles (including flags) to distinguish between daemons, this makes it possible to manage multiple copies of a daemon using the normal infrastructure by symlinking rc.d scripts to a new name. ok jung@ ajacoutot@, smtpd ok gilles@ by
sthen2016-02-02 17:51:11 +0000
6f541e82Run "rcctl ls faulty", which is silent when all services work as expected. Based on an original idea and a different patch from landry@. OK jung@ zhuk@ landry@ krw@ agreed to the general idea by
schwarze2016-01-28 15:45:34 +0000
db002981Don't attempt to kill() the constraint in the wrong process. The process management of the contraint processes has been moved from ntp to the parent, for better privsep and pledge, but the ntp process still attempted to kill the constraints on timeout directly. Fix this regression by introducing a new imsg from ntp to the parent and the related logic to kill a constraint at the right place. by
reyk2016-01-27 21:48:34 +0000
fade868bupdate ntpd log initialization to work like relayd, fix debug log levels by
bcook2016-01-27 21:36:25 +0000
8aa106deAdd /etc/examples/pkg.conf, generated from mirrors.dat over in www/. Positive feedback and/or OKs from benno millert jcs aja jasper by
sthen2016-01-27 20:52:41 +0000
3e71c28bAdd /dev/pvbus0 (mode 0640) to MAKEDEV on i386 and amd64. Needed for the key-value interface that has been added to pvbus(4). by
reyk2016-01-27 09:09:29 +0000
0af523ebDon't crash dumping malloc stats if malloc_init hasn't been called, noted by David CARLIER by
otto2016-01-26 15:44:28 +0000
6bc957b3Remove decls #if'0ed since rev. 1.1 by
jca2016-01-25 12:17:48 +0000
5c167be8After nearly 20 years of warning that malloc.h is obsolete, it's about time we actually remove this header. It was originally added for ports, which is malloc.h-free now. by
jasper2016-01-20 19:09:52 +0000
7d4e59a7fix year by
deraadt2016-01-20 18:37:13 +0000
73313dcesneaky whitespace snuck in again by
deraadt2016-01-11 15:30:56 +0000
07785d41delete vi catalog space; ok millert by
deraadt2016-01-06 23:28:47 +0000
c3dcc81bLong ago, malloc internally had two kinds of failures, warnings and errors. The 'A' option elevated warnings to errors, and has been the default for some time. Then warnings were effectively eliminated in favor of everything being an error, but then the 'a' flag turned real errors into warnings! Remove the 'a' option entirely. You shouldn't have used it anyway. ok tb tdeval by
tedu2016-01-06 17:57:22 +0000
7636e775some old signify keys no longer have relevance to new releases. prompted by comments from naddy by
deraadt2016-01-06 17:07:25 +0000
52e92914This is just an example and we don't have to bump the set's version number all the time, but let's use install59.fs as it will be the first release that includes vmm. by
reyk2016-01-06 09:59:30 +0000
15b6e6f3add 6.0 firmware key by
sthen2016-01-05 22:04:36 +0000
b20526d16.0 packages key by
naddy2016-01-05 20:50:59 +0000
5020d45aadd 6.0 base key for release after 5.9 by
deraadt2016-01-05 17:17:37 +0000
d5584793Follow style(9) and drop lint /* NOTREACHED */ annotations from the examples. by
tb2016-01-04 19:43:13 +0000
66623659Calling clone(2) with CLONE_NEWPID yields multiple processes with pid=1. by
bcook2016-01-04 02:04:56 +0000
f7116f47Remove portslocks from /etc/daily. The ports LOCKDIR was moved from /tmp to /usr/ports/pobj years ago. by
rpe2015-12-30 22:59:53 +0000
0e32a1f5date requires strict format including spaces, from miod by
deraadt2015-12-30 15:04:41 +0000
5724f1aeanother case where bad things would happen after wrterror by
tedu2015-12-30 06:04:39 +0000
57beaad8if somebody makes the mistake of disabling abort, don't deref null in validate_junk. from Michal Mazurek by
tedu2015-12-30 06:01:18 +0000
69394aedReplace single pattern case-blocks with simpler code. by
rpe2015-12-29 19:41:24 +0000
27b3656fRemove backslash, not necessary after '&&' by
rpe2015-12-29 19:37:31 +0000
054cc29fReplace last remaining `` with $() by
rpe2015-12-29 19:33:43 +0000
e33f078cDon't assume fprintf() will set the FILE * error condition. Instead, check the return value of fprintf() and fflush() and call clearerr() before returning on error. OK jca@ by
millert2015-12-29 18:23:28 +0000
9e6e578dmention that ibuf_free() does not need a NULL check. by
benno2015-12-29 18:05:23 +0000
a3c84db0check for NULL in ibuf_free(). ok and slight improvement, mmcco@ ok semarie@ and encouragement tedu@ krw@ by
benno2015-12-29 18:05:01 +0000
77669212Remove NULL-checks before free() and a few related dead assignments. by
mmcc2015-12-28 22:08:18 +0000
b3424201Switch login(3) from lseek+read/write to pread/pwrite and only do the pread() if the data is needed. Use O_CLOEXEC on the internal fd as MT paranoia. Fix cast in offset calculation; delete register keyword; prefer memset() over bzero() by
guenther2015-12-28 20:11:36 +0000
9fd93fdfwelcome GENERIC.IP27 MP (dual cpu on O350 now) ok visa by
deraadt2015-12-27 16:31:08 +0000
0edf23d6remove unused variable by
chl2015-12-27 01:26:47 +0000
2beb0016Remove blank line for consistency with other rc.d scripts; no change in behavior. by
ajacoutot2015-12-26 09:55:15 +0000
d690be1bmountd(8) changes require a pexp. by
krw2015-12-26 02:52:53 +0000
a9b2bc5dadd rcsid by
gsoares2015-12-25 21:50:07 +0000
83a87d34Now that default smtpd.conf aliases table has been switched to 'file' backend, we no longer have to generate the .db files. by
sunil2015-12-22 07:39:00 +0000
63d34636regen MAKEDEV by
sf2015-12-21 22:23:24 +0000
afc2f24cadd virtio-console driver by
sf2015-12-21 22:15:53 +0000
6af539cbregen MAKEDEV by
sf2015-12-21 21:55:42 +0000
68066c25Switch to 'file' backend for aliases table for default configuration. by
sunil2015-12-21 16:25:44 +0000
b2419890Revert, rc.d scripts have been fixed. by
ajacoutot2015-12-21 10:18:05 +0000
27456e7cComment the wait for start until I fix the x11 managers rc.d script. by
ajacoutot2015-12-21 09:29:12 +0000
2377bf81Expose internal functions necessary to open audio devices and midi ports using existing file descriptors. by
ratchov2015-12-20 11:29:29 +0000
0dc6f9d6No need for an extra log.h by
reyk2015-12-19 20:44:35 +0000
094b6ba0move to 5.9-beta by
deraadt2015-12-19 19:44:09 +0000
97252e04Switch and sync to the log.c variant from httpd/relayd/iked/snmpd/vmd. by
reyk2015-12-19 17:55:29 +0000
643ff62eAfter starting, unconditionally wait up to $daemon_timeout seconds to check that the daemon is actually running (instead of only when using rc_bg). by
ajacoutot2015-12-19 14:10:41 +0000
b8496badMove log_sockaddr() to from log.c to util.c as it is a local addition and actually not a "logging" function. No functional change. by
reyk2015-12-19 13:58:08 +0000
55908109Child will not return a config parsing error to the parent so rc.d will lie and tell you that the daemon succesfully started; prevent this by running a config check first. Note that we only do this for those particular daemons, not all that support a config test mode. by
ajacoutot2015-12-19 13:45:12 +0000
da0a0680Tidy up _rc_wait(). by
ajacoutot2015-12-19 11:19:17 +0000
d156959aTweak pexp. by
ajacoutot2015-12-19 10:09:04 +0000
90b17882Simplify return call of rand() and rand_r() to make it easier to read. This is slightly less robust, but RAND_MAX must be one below a power of two in both variants anyway. by
tb2015-12-18 08:52:34 +0000
1e906118Drop the now useless multicast setup comment. by
ajacoutot2015-12-18 08:49:53 +0000
3628daa0Simplify multicast option handling (10 less lines) by matching /etc/rc behavior towards other YES|NO options and drop the error warning. by
ajacoutot2015-12-17 23:19:23 +0000
0dbf1530Add _sndiop user and group for (future) privileged sndiod process. by
ratchov2015-12-16 18:19:25 +0000
84f196c4Add pexp match otherwise rcctl stop vmd doesn't work. OK deraadt@ by
jturner2015-12-16 14:21:28 +0000
e8c24d03add commented-out unbound.conf entries for dns64 (sitting in my tree and ok'd some time ago by phessler and IIRC also mikeb), and for qname-minimisation by
sthen2015-12-15 20:26:55 +0000
d697a492automatic HOSTALIASES setup is a bad idea by
deraadt2015-12-15 16:37:58 +0000
acb3665ftiny sanity check on file size by
tedu2015-12-10 18:06:06 +0000
a1172a2cbump the major for libcrypto/ssl/tls for a CRYPTO_chacha_20 ABI change by
bcook2015-12-09 14:11:03 +0000
a02ad431Add a cast to silence a compiler warning by clang on FreeBSD. From Craig Rodrigues. ok tedu@ by
tb2015-12-09 11:54:12 +0000
eb43e0a3vmm node only needs mode 600 by
deraadt2015-12-09 04:11:58 +0000
1bd8c9e7Integrate two patches originally from Daniel Micay. 1. Optionally add random "canaries" to the end of an allocation. This requires increasing the internal size of the allocation slightly, which probably results in a large effective increase with current power of two sizing. Therefore, this option is only enabled via 'C'. 2. When writing junk (0xdf) to freed chunks (current default behavior), check that the junk is still intact when finally freeing the delayed chunk to catch some potential use after free. This should be pretty cheap so there's no option to control it separately. ok deraadt tb by
tedu2015-12-09 02:45:23 +0000
c7360610libexec/smtpd dir no longer needed; ok gilles by
deraadt2015-12-08 16:38:20 +0000
fe815f77Use mailwrapper path instead of smtpd. by
sunil2015-12-08 09:03:50 +0000
67ade0d2Previously forgot another /var in the comment by
reyk2015-12-07 17:12:16 +0000
c107e6cd/var/vm is a terrible idea, the images are filled on demand, they are not backed by blocks until used. by
reyk2015-12-07 16:40:41 +0000
07eac4e2Add initial vm.conf(5) example. But please note that the grammar is not fixed yet. by
reyk2015-12-07 13:58:48 +0000
a1901af8Now that makemap(8)/newaliases(8) are merged into smtpctl(8), update the paths. by
sunil2015-12-07 12:32:06 +0000
4281692bAdd missing rc bits for rebound. by
rpe2015-12-06 13:51:41 +0000
38163061multicast_router -> multicast by
ajacoutot2015-12-06 08:31:05 +0000
d372622fIt does not make sense to insert a specific route for 224/4 when the default one is good enough. by
mpi2015-12-05 18:43:12 +0000
d6e39ab1EAGAIN handling for imsg_read. OK henning@ benno@ by
claudio2015-12-05 13:12:16 +0000
a3ecc333Do not loop on EAGAIN in imsg_read(). Better to return the error to the caller and let him do another poll loop. This fixes spinning relayd processes seen on busy TLS relays. OK benno@ henning@ by
claudio2015-12-05 13:06:52 +0000
defd0fdfadd rcscript for vmd by
jasper2015-12-05 09:55:18 +0000
50650f2aremove doas.conf since the permission check is too onerous. the doas program itself will refuse to use an insecure config file. (changelist will continue to watch for changes, as well.) by
tedu2015-12-05 09:12:15 +0000
c3b3b643Since version 1.467 of /etc/rc, it was no longer possible to add shlib_dirs using /etc/rc.conf.local. by
rpe2015-12-02 20:39:57 +0000
d6a94a22Send Aviion to same place as Nova II by
deraadt2015-12-01 08:10:38 +0000
c12490e4Send Aviion to same place as Nova II discussed with jsg by
deraadt2015-12-01 07:50:06 +0000
8808d80ccreate new independent uid/gid for tftp_proxy and ftp_proxy. They should not share a uid. Leave the proxy uid for later mop-up (sysmerge does not handle uid renamings well enough) ok dlg, ok aja a while back by
deraadt2015-12-01 07:31:29 +0000
11bd1912Phrase allocation failure more clearly. ok deraadt@ by
mmcc2015-12-01 01:32:48 +0000
a21aed8fAdd rebound rc.d script. by
jturner2015-11-30 23:35:30 +0000
d892e438change Xrs from now-defunct db(3) to dbopen(3); this wasn;t a straight replace: thanks both to schwarze and maja for feedback on how to rewrite parts; by
jmc2015-11-30 17:03:05 +0000
ad315a6fyppasswd went away by
deraadt2015-11-27 03:53:28 +0000
e95c7e36Remove three NULL-checks before free(). ok millert@ by
mmcc2015-11-27 01:57:59 +0000
af62780cUse the backchannel for all error messages instead of syslog(3). OK deraadt@ beck@ by
millert2015-11-26 23:32:52 +0000
f1d90ba8Disable by default the *.emerg block; ok millert beck by
deraadt2015-11-26 15:25:14 +0000
c7b217f2Wrap <icdb.h> so that calls go direct and the symbols are all weak by
guenther2015-11-25 15:49:50 +0000
bc3b5c81Document that these functions are now in strings.h. by
daniel2015-11-24 09:14:35 +0000
490b2e24Don't fake a bulleted list by prefixing items with 'o'. by
bentley2015-11-24 09:03:16 +0000
531d8709Cache values from getpwnam() done at initialization, which need to be used by the constraint processes setup later (chroot, setuid...) [late getpwnam discovered during a further audit] ok millert by
deraadt2015-11-24 01:03:25 +0000
8c8787aaPOSIX says that ffs(), strcasecmp(), strncasecmp(), r?index() and the b* byte functions belong in strings.h, not string.h so break them out of string.h into a new strings.h. As long as there is no POSIX or X/OPEN define in use string.h will pull in strings.h. OK naddy@ deraadt@ by
millert2015-11-20 23:40:32 +0000