Fincer
/
openntpd-openbsd
mirror of https://github.com/Fincer/openntpd-openbsd
1
0
Fork 0
Code Issues 0 Projects 0 Releases 61 Wiki Activity

Commit Graph

  • 933287a1 grow alpha and hppa media to accomodate some recent growth by deraadt 2018-09-20 15:19:38 +0000
  • d836cee7 Import updated moduli. by dtucker 2018-09-20 08:07:03 +0000
  • af42cd75 6.5 packages key by naddy 2018-09-18 19:15:40 +0000
  • 7907c39d 6.5 base key by deraadt 2018-09-18 18:48:16 +0000
  • bb40e30d grow arm64 ramdisk by deraadt 2018-09-18 13:45:09 +0000
  • 15d69843 Add uid_from_user() and gid_from_group(), derived from pax's cache.c. It replaces the existing pwcache.c functions user_from_uid(3) and group_from_gid(3) with the pax equivalents. Adapted from NetBSD (mycroft) changes from our own pax's cache.c. OK guenther@ by millert 2018-09-13 12:31:15 +0000
  • 9a9b5e27 Adjust the config to -current bgpd which makes it a lot more readable. OK phessler@ by claudio 2018-09-10 09:10:36 +0000
  • f1efffb1 update example bgpd.conf to use new config language features: network prefix-set ... and filters with prefix-set ... or-longer. ok claudio@ by benno 2018-09-09 12:49:44 +0000
  • 0f8c7571 Remove optional commas from example config. In the future these optional commas may become a syntax error. by claudio 2018-09-08 08:00:21 +0000
  • 183780a9 Make host_*() AF-agnostic by kn 2018-09-07 20:31:39 +0000
  • 48ecc076 the main process must chdir to /, since it cannot have daemon() do the job at startup. After much anguish I accept dlg's solution of chdir for the problem ("starting ntpd on a filesystem I want to unmount"), but we cannot change the main-process daemon() call. Why? Because the ntpd privsep design predates more modern designs where the config file is parsed once, and configuration marshalled to the fork+exec children. Instead each ntpd process re-parses the config, and if we chdir before fork+exec startup, it will move the basedir causing -f "relativepath" to fail. by deraadt 2018-08-31 18:45:02 +0000
  • b97d7361 sync by jcs 2018-08-31 02:32:57 +0000
  • 2c5c64d7 Add more uhid devices, 8 total by jcs 2018-08-31 02:32:29 +0000
  • 93b9d6f2 Historically /etc/netstart (and the equivalent code in the install script) did 'ifconfig <if> down' before starting dhclient(8). This was a way of ensuring old running copies of dhclient were killed before a new one started. Current dhclient does not need this assist, so change "ifconfig <if> down" to "ifconfig <if> up" pending further script optimizations. by krw 2018-08-29 11:30:48 +0000
  • f224b1cf Unclutter bgpd.conf example config file by job 2018-08-28 17:52:16 +0000
  • 699153d5 sync by kettenis 2018-08-20 16:08:33 +0000
  • 19e13373 Add /dev/drm[0-3]. by kettenis 2018-08-20 16:07:39 +0000
  • bb06c042 sync by anton 2018-08-19 11:48:28 +0000
  • 2a16acac Add kcov(4), a kernel code coverage tracing driver. It's used in conjunction with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and fixed. This effort will continue. by anton 2018-08-19 11:42:33 +0000
  • e5b260c6 Switch nsd control socket from localhost to a unix domain socket. OK sthen by florian 2018-08-16 17:59:12 +0000
  • 1bc01393 The zoneinfo directories can be mode 755 just like everything else. OK deraadt@ by millert 2018-08-16 17:40:54 +0000
  • 6cbfee9e don't need 61 keys anymore by deraadt 2018-08-11 15:43:44 +0000
  • 5ed5d3cb crank to 6.4-beta by deraadt 2018-08-10 20:27:01 +0000
  • 68d7aa06 delete volatile intended to silence whiny old compilers around vfork. This variable is only used in the parent context so there is no issue. ok kettenis by deraadt 2018-08-10 17:03:26 +0000
  • a27b8724 ntpd unveils the cert.pem "r" file (which is passed-over-socket to the constraints process), and /usr/sbin/ntpd "x" to perform fork+exec operations. by deraadt 2018-08-08 22:56:42 +0000
  • 48e89086 Similar to the ldpd.conf change don't use a macro of the secret. Macros get sometimes logged so we should not encurage to use them for sensitive data. by claudio 2018-08-07 07:06:20 +0000
  • b0cdc9a1 Correct example file since reserved words cannot be used as macros. Not only that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. by mestre 2018-08-06 17:26:31 +0000
  • 7b9d9ca1 Revert back previous commit, we have decided that socket files don't cause any harm if not deleted after the daemon is shutdown and at the same time we also tackle another attack surface by not allowing the program to create/delete any more files (by removing "cpath" promise from pledge(2)). by mestre 2018-08-04 11:07:14 +0000
  • b448df25 ntpd(8) has logic in place to delete its control socket on shutdown, but it currently doesn't call the function control_cleanup to do so. The solution is to simply call that function just before the program quits. by mestre 2018-08-02 13:05:34 +0000
  • f5de1229 Add _PATH_AUTHPROGDIR = "/usr/libexec/auth", this path will be used to unveil. Unfortunately the auth subsystem uses _PATH_AUTHPROG = "/usr/libexec/auth/login_", which it auth-program is appended to -- a rather gross idea which now shows lack of wisdom. by deraadt 2018-07-29 19:40:41 +0000
  • 713244e9 sync by ratchov 2018-07-28 08:11:08 +0000
  • bea64d8e Remove unused /dev/audio and /dev/audioctl symlinks. by ratchov 2018-07-28 08:09:50 +0000
  • 653c436b s/resolver/nameserver/ to match parse.y -r1.4 by jasper 2018-07-25 05:11:49 +0000
  • a12a085f add rad.conf example by jasper 2018-07-24 18:15:31 +0000
  • b3865995 add _rad user OK tb, claudio by florian 2018-07-23 14:15:14 +0000
  • 4c381664 Remove rtadvd(8) rc script. by florian 2018-07-23 12:05:50 +0000
  • 86afacfe Remove rtadvd(8) leftovers in etc. OK deraadt, phessler by florian 2018-07-23 11:57:17 +0000
  • 3edf9087 It's time to switch to rad(8); tested by many. Unhook rtadvd from build. OK deraadt, phessler by florian 2018-07-23 11:56:02 +0000
  • f305d195 It's time to switch to rad(8); tested by many. Remove rtadvd(8) from rc(8). OK deraadt, phessler by florian 2018-07-23 11:54:49 +0000
  • e58d5815 document method=https, and use it in the example config; from lauri tirkkonen; by jmc 2018-07-22 17:09:43 +0000
  • 19c0bfe3 revert previous, something isn't quite right as clients see ntpd as unsynced. reported by naddy, also seen by me (I noticed because monitoring-plugins check_ntp complained). ok claudio henning by sthen 2018-07-19 10:20:09 +0000
  • 0ded5800 Unveiling unveil(2). This brings unveil into the tree, disabled by default - Currently this will return EPERM on all attempts to use it until we are fully certain it is ready for people to start using, but this now allows for others to do more tweaking and experimentation. by beck 2018-07-13 09:25:22 +0000
  • 50ad58de add rad.conf; from semarie; tweak & OK tb by florian 2018-07-13 06:56:59 +0000
  • 8dc6551f if we couldn't update the clock for ~1h due to lack of data from peers and sensors, mark us unsynced again. ok reyk krw, pt out / discussion / help naddy by henning 2018-07-12 19:31:05 +0000
  • 2aa7a260 rc(8) infrastructure for rad by florian 2018-07-12 08:20:36 +0000
  • fabfc282 Add _rad user and group for rad(8). This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom. by florian 2018-07-12 08:17:27 +0000
  • c67ac505 Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commands to running VMs (at least for OpenBSD ones), but the stop routine for system daemons is not usually called at shutdown. by sthen 2018-07-11 21:49:37 +0000
  • f5786aed Add -w option to vmctl stop to wait for completion of VM termination. by reyk 2018-07-11 13:19:47 +0000
  • cd73602e Don't hide errors when IPv6 forwarding is not enabled. OK(failed) phessler OK deraadt by florian 2018-07-11 08:31:48 +0000
  • f8ee3dae we were refering to 10k states by default here as well, pt out by claudio by henning 2018-07-10 19:28:35 +0000
  • b977896d No need to mention which memory allocation entry point failed (malloc, calloc or strdup), we just need to log that we ran out of memory in a particular function. by krw 2018-07-09 12:05:11 +0000
  • 4e809e85 netstart is used during system start, but also interactively. Show proper error message if a regular user executes netstart. Only do the privilege check if the id binary is available, which might not be the case during diskless system startup. by tb 2018-07-08 20:10:26 +0000
  • 81de9046 Be consistent in warn() and log_warn() usage when running out of memory. by krw 2018-07-08 17:15:07 +0000
  • 8efe1f21 list the ports for gre in udp, as per rfc8086 and iana assignments. by dlg 2018-07-03 23:52:27 +0000
  • ceb98dc2 a mirror URLs -> a mirror URL by tb 2018-06-27 03:24:33 +0000
  • 960aed94 Add 6to4 anycast prefixes to bogon filter by job 2018-06-21 15:57:04 +0000
  • e563c271 Rename httpd.conf "root strip" option to "request strip". by reyk 2018-06-13 15:08:24 +0000
  • c5da7cc2 Adjust example after the announce (all|self|...) change. Adjust filters and comment them to explain the basic operation. Use large-community and a prefix-set to ensure no bad prefixes are leaked to eBGP speakers. With and OK job@ by claudio 2018-06-13 09:44:57 +0000
  • a901c544 prepare for dri3proto by matthieu 2018-06-07 21:23:44 +0000
  • 4706701e remove "from local" (the default) from one of the match rules: the line immediately above also uses this notation, it's shorter, and it keeps two examples in the man page which claim to be the same as the default config (but with exceptions) in sync; by jmc 2018-06-04 21:10:58 +0000
  • 45e07ff6 The open POSIX test suite reveals that sigpause(int sigmask) from 4.2 BSD takes a signal mask as argument while POSIX sigpause(int sig) expects a single signal. Do not expose our traditional BSD sigpause(3) to XPG/POSIX sources. OK guenther@ by bluhm 2018-05-30 13:20:38 +0000
  • d2be86d3 update default config to new grammar by gilles 2018-05-24 11:40:17 +0000
  • 5eee69a2 Put commented minimal-reponses and refuse-any defaults into nsd.conf so that the changed default will be pointed out to the admin by sysmerge. by florian 2018-05-18 05:15:33 +0000
  • 0b3d8e1f Remove default ls -C alias. by mpf 2018-05-16 14:01:41 +0000
  • 468ab017 constrain fractional part to [0-9] (less confusing to static analysis); ok ian@ by djm 2018-05-14 04:39:04 +0000
  • 04aba995 don't put options in here that should not be needed in the majority of cases and will just be copied by users without thinking. ok claudio@ by benno 2018-05-06 20:56:55 +0000
  • 9bce2fba Add std.1500000 entry, mostly because of firmware constraints on various Rockchip ARM SoCs. by kettenis 2018-05-02 21:06:14 +0000
  • f814382e Add a missing header when compiling with -DDEBUG by denis 2018-04-30 07:44:56 +0000
  • 369994e7 stop installing /etc/networks, it is now unused; OK deraadt@ tb@ by schwarze 2018-04-29 11:17:02 +0000
  • 728f4955 Add a proper usage() function. by rpe 2018-04-28 22:38:32 +0000
  • c930cc9e spaces->tab ok kettenis@+florian@'s OCD by ajacoutot 2018-04-13 08:24:38 +0000
  • b45fb6b0 "listen on * port 80" means all v4 and v6 addresses these days. OK benno by florian 2018-04-11 15:51:50 +0000
  • dbc5faf4 sys/uio.h is not used anymore by otto 2018-04-07 09:57:08 +0000
  • 376907d6 adapt armv7 manual pages for arm64 by jsg 2018-04-04 14:21:26 +0000
  • 8324e3ea Import regenerated moduli file. by dtucker 2018-04-03 02:14:08 +0000
  • 79b103c9 fix MALLOC_STATS; spotted by and ok semarie@ by otto 2018-03-30 07:23:15 +0000
  • 7e2a5e7e Add aggressive-nsec example block. While here, qname minimisation is an RFC since some time. by florian 2018-03-29 20:40:22 +0000
  • 8b1b18f8 (tag: OPENBSD_6_3_BASE) probably the correct date by deraadt 2018-03-23 15:45:56 +0000
  • 26292f37 Provide an example httpd.conf that's actually useful. With & OK deraadt input sthen looks better to beck OK benno by florian 2018-03-23 11:36:41 +0000
  • c9a2eca5 Since a while relayd switched from the TLS session cache to using only TLS session tickets instead. Adjust example relayd.conf file. From Matt Schwartz, reminded by jmc@ OK deraadt@ by claudio 2018-03-23 09:55:06 +0000
  • 7a2dbe74 Consistently spell "IPsec" in comments and debug outputs. by mpi 2018-03-16 12:31:09 +0000
  • fda1a6ed add syspatch public keys for 6.3 and 6.4 by robert 2018-03-15 11:15:58 +0000
  • f3a21c72 remove 6.0 keys by tj 2018-03-14 17:16:57 +0000
  • becf8cef ensure SYS_getrandom and GRND_NONBLOCK are both defined before using getrandom(2) by bcook 2018-03-13 22:53:28 +0000
  • d9ddac82 Implement sicos(3), sincosf(3) and sincosl(3). These functions are common extensions and modern compilers (such as clang) will use them to optimize separate calculations of sine and cosine. by kettenis 2018-03-10 20:52:58 +0000
  • d6aeb761 use _ALIGN() which is uhm a bit OpenBSD-specific, but it means we don't need to use sys/param.h at all, guess which one i believe is greater namespace polution ok otto by deraadt 2018-03-06 14:28:01 +0000
  • 02c27180 Use _MAX_PAGE_SHIFT, rather than #ifdef mips64 ok guenther kettenis by deraadt 2018-03-05 01:32:32 +0000
  • 04e34b82 #define _MAX_PAGE_SHIFT in MD _types.h as the maximum pagesize an arch needs (looking at you sgi, but others required this before). This is for the circumstances we need pagesize known at compile time, not getpagesize() runtime. Use it for malloc storage sizes, for shm, and to set pthread stack default sizes. The stack sizes were a mess, and pushing them towards page-aligned is healthy move (which will also be needed by the coming stack register checker) ok guenther kettenis, discussion with stefan by deraadt 2018-03-05 01:15:26 +0000
  • 4f90eb97 when -n is used, no need to spit out "Missing parameters." before displaying usage(); by jmc 2018-03-04 10:12:26 +0000
  • ef55c3f3 Lowercase 'usage' and group -n with interface in it. From jmc@, ok tb@ by landry 2018-03-03 07:34:19 +0000
  • cfb5baa4 OpenBSD 6.4 packages key by naddy 2018-03-01 18:45:57 +0000
  • 4412da1c openbsd 6.4 base key by deraadt 2018-03-01 18:06:07 +0000
  • 5543d472 add 6.4 firmware key by sthen 2018-03-01 07:57:06 +0000
  • e36f1b60 move to 6.3-beta by deraadt 2018-02-28 14:56:46 +0000
  • e36efedc Tweak comments. by rpe 2018-02-21 19:57:21 +0000
  • 85b83fc0 add bsd.mp by jsg 2018-02-21 00:43:03 +0000
  • 7299a2f2 Call "vmctl stop" on each VM at shutdown, for OpenBSD guests this means they are signalled to shutdown cleanly. Wait for each to finish to avoid too much busy work at once; this may need revising if it turns out to be too slow with a larger number of VMs (e.g. signal/delay/signal/delay/... then wait for shutdowns), but let's avoid making it more complex unless we know it's needed. by sthen 2018-02-20 10:12:14 +0000
  • 0b914515 Write warning/error messages to stderr and end them with a fullstop. by rpe 2018-02-19 23:42:29 +0000
  • 988ee6a0 - use specific patterns when looping over /etc/hostname.if files to skip backup or temp files. - test if the patterns matched actual files - warn if ifcreate() fails on an interface and continue with the subsequent interfaces in the list instead of return'ing by rpe 2018-02-19 21:47:43 +0000
  • 775ea3cb zap *_path() functions by kn 2018-02-18 21:48:00 +0000