openbsd
10 years agoPut _rc_err argument under quotes to respect the syntax we are passing.
ajacoutot [Mon, 25 Aug 2014 07:34:12 +0000 (07:34 +0000)]
Put _rc_err argument under quotes to respect the syntax we are passing.

10 years agoStart removing unused documentation and the server and related binaries source
brad [Mon, 25 Aug 2014 07:08:32 +0000 (07:08 +0000)]
Start removing unused documentation and the server and related binaries source
code.

10 years agoOops. Garbage collect unused variable.
schwarze [Sun, 24 Aug 2014 23:44:50 +0000 (23:44 +0000)]
Oops.  Garbage collect unused variable.

10 years agoWhen support for bold italic font was added to the parsers and to the
schwarze [Sun, 24 Aug 2014 23:40:41 +0000 (23:40 +0000)]
When support for bold italic font was added to the parsers and to the
generic parts of the formatters some time ago, the PostScript- and
PDF-specific part of the formatters was neglected.

Now pascal@ reports that mandoc -Tps throws an assertion on perl(1),
apparently because that manual actually uses bold italic font.

So here is an overdue implementation of bold italic font support for
PostScript and PDF output.

10 years agosocketvar.h instead of socket.h, oops
deraadt [Sun, 24 Aug 2014 20:06:57 +0000 (20:06 +0000)]
socketvar.h instead of socket.h, oops

10 years agomore NO_CROSS
deraadt [Sun, 24 Aug 2014 20:04:10 +0000 (20:04 +0000)]
more NO_CROSS

10 years agoDelete the function svc_get_all().
schwarze [Sun, 24 Aug 2014 19:44:02 +0000 (19:44 +0000)]
Delete the function svc_get_all().
In svc_is_avail(), this simplifies the code by getting rid of the loop.
When running "rcctl status", this allows to not run svc_is_special() -
which spawns a grep - for each and every service, resulting in a 20%
speedup.  As a bonus, we get the special services listed at the end,
where they are easier to see than mixed in with the daemons.
ok ajacoutot@ jasper@

10 years agoWhitelisting allowed services is safer and less confusing than
schwarze [Sun, 24 Aug 2014 19:00:46 +0000 (19:00 +0000)]
Whitelisting allowed services is safer and less confusing than
blacklisting auxiliary variables, and it makes the coupling
to rc.subr(8) less tight.
Feedback and OK ajacoutot@.

10 years agoStart all error messages with "rcctl: " such that it is clear where
schwarze [Sun, 24 Aug 2014 18:10:26 +0000 (18:10 +0000)]
Start all error messages with "rcctl: " such that it is clear where
they come from.  While here, there is no need to check the argument
of needs_root() before displaying it, it is always provided.
ok ajacoutot@ jasper@

10 years agoFix wrong IEEE 802.11 ioctl's:
zhuk [Sun, 24 Aug 2014 18:01:27 +0000 (18:01 +0000)]
Fix wrong IEEE 802.11 ioctl's:

  * SIOCG80211ALLNODES operates on struct ieee80211_nodereq_all, not
    struct ieee80211_nodereq.

  * Six SIOC* from wi(4) were using same codes with generic parts of
    IEEE 802.11 framework. Things worked due to the fact that size
    of data struct being passed is encoded in actual SIOC*, too.

This commit means that ifconfig and some ports will need to be rebuilt,
if any of affected SIOC* codes is used. Port bumps to follow.

First part okay reyk@, whole diff okay mpi@
Heavy prodding to commit now from deraadt@

10 years agoremove trailing whitespace
sf [Sun, 24 Aug 2014 17:55:14 +0000 (17:55 +0000)]
remove trailing whitespace

10 years agoAdd a comment to unconfuse Ingo :-)
ajacoutot [Sun, 24 Aug 2014 17:52:38 +0000 (17:52 +0000)]
Add a comment to unconfuse Ingo :-)

10 years agoFix reversed logic.
ajacoutot [Sun, 24 Aug 2014 17:15:24 +0000 (17:15 +0000)]
Fix reversed logic.

ok schwarze@

10 years agoDrop obvious comments.
ajacoutot [Sun, 24 Aug 2014 17:01:44 +0000 (17:01 +0000)]
Drop obvious comments.

10 years agoconstify strerror return value
bcook [Sun, 24 Aug 2014 16:11:39 +0000 (16:11 +0000)]
constify strerror return value

There is no intention to modify the string returned by strerror and
doing so is forbidden by the standard.

from Jonas 'Sortie' Termansen

ok tedu@ deraadt@

10 years agoInclude <sys/time.h> to get struct timeval
bcook [Sun, 24 Aug 2014 16:08:30 +0000 (16:08 +0000)]
Include <sys/time.h> to get struct timeval

The crypto/bio/bss_dgram.c file assumes that another file indirectly
includes <stdlib.h> that includes <sys/time.h>.

from Jonas 'Sortie' Termansen

ok deraadt@ tedu@

10 years agoInclude <sys/select.h> to get select
bcook [Sun, 24 Aug 2014 16:07:29 +0000 (16:07 +0000)]
Include <sys/select.h> to get select

These files currently depends on the wrapper <stdlib.h> file indirectly
including a header that provides select().

from Jonas 'Sortie' Termansen

ok deraadt@ tedu@

10 years agoLet SSL_CIPHER_description() allocate the buffer for the description,
jsing [Sun, 24 Aug 2014 14:55:23 +0000 (14:55 +0000)]
Let SSL_CIPHER_description() allocate the buffer for the description,
rather than passing in a fixed size buffer.

This is yet another example of a horribly designed API - if the given
buffer is NULL then SSL_CIPHER_description() allocates one for us (great!),
which we then need to free (no problem). However, if this allocation fails
it returns a pointer to a static string "OPENSSL_malloc Error" - obviously
bad things happen if we call free() with this pointer.

Unfortunately, there is no way of knowing that the function failed, other
than comparing the returned string against the string literal - so do that
before calling free()...

Joint work with beck@ during g2k14.

10 years agoRemove imaginary non-reserved port support from mountd.
doug [Sun, 24 Aug 2014 14:45:00 +0000 (14:45 +0000)]
Remove imaginary non-reserved port support from mountd.

This bug was reported by Julian Hsiao.

ok concept deraadt@, miod@
mountd.8 diff is from jmc@.  ok doug@
mountd.c diff is from me.  ok miod@

10 years agoReplace the remaining uses of ssl3_put_cipher_by_char() with s2n and a
jsing [Sun, 24 Aug 2014 14:36:45 +0000 (14:36 +0000)]
Replace the remaining uses of ssl3_put_cipher_by_char() with s2n and a
ssl3_cipher_get_value() helper function, which returns the cipher suite
value for the given cipher.

ok miod@

10 years agoreduce indentation of main program by one tab, no functional change
schwarze [Sun, 24 Aug 2014 13:46:57 +0000 (13:46 +0000)]
reduce indentation of main program by one tab, no functional change
ok ajacoutot@

10 years agoDrop uneeded parenthesis in usage().
ajacoutot [Sun, 24 Aug 2014 13:32:53 +0000 (13:32 +0000)]
Drop uneeded parenthesis in usage().

ok schwarze@

10 years agoDrop unused variables.
ajacoutot [Sun, 24 Aug 2014 13:30:27 +0000 (13:30 +0000)]
Drop unused variables.

10 years agoIn debug mode, make it clear when we are using the default flags when
ajacoutot [Sun, 24 Aug 2014 13:29:16 +0000 (13:29 +0000)]
In debug mode, make it clear when we are using the default flags when
none are set.

initial patch from me but reworked by schwarze@
ok schwarze@

10 years agoFix args to needs_root() when using "disable" (broken in the v1.9
ajacoutot [Sun, 24 Aug 2014 08:13:15 +0000 (08:13 +0000)]
Fix args to needs_root() when using "disable" (broken in the v1.9
positional args cleanup commit).

from Sebastien Marie

10 years agoIn debug mode (`-d'), only print the flags relevant to the rc.d(8) we are
ajacoutot [Sun, 24 Aug 2014 07:55:20 +0000 (07:55 +0000)]
In debug mode (`-d'), only print the flags relevant to the rc.d(8) we are
calling instead of all flags which makes it very difficult to see the
information we actually need.

ok schwarze@ robert@

10 years agoSince rcctl(8) can changes the position of such and such variable, sort
ajacoutot [Sun, 24 Aug 2014 07:46:54 +0000 (07:46 +0000)]
Since rcctl(8) can changes the position of such and such variable, sort
the file so that we always have a consistent output.

ok schwarze@ jasper@

10 years agoMake it possible to pass `-d' and `-f' to the rc.d(8) script.
ajacoutot [Sun, 24 Aug 2014 07:33:26 +0000 (07:33 +0000)]
Make it possible to pass `-d' and `-f' to the rc.d(8) script.

man page bits from schwarze@
ok jasper@ schwarze@

10 years agoAdd some TX BD flags for BCM5717 family chips.
brad [Sun, 24 Aug 2014 05:01:42 +0000 (05:01 +0000)]
Add some TX BD flags for BCM5717 family chips.

10 years agoMove splnet() in in_ifinit() to protect less code that does not
bluhm [Sat, 23 Aug 2014 18:32:55 +0000 (18:32 +0000)]
Move splnet() in in_ifinit() to protect less code that does not
need it.
OK mpi@

10 years agoRemove non-standard GOST cipher suites (which are not compiled in
jsing [Sat, 23 Aug 2014 15:37:38 +0000 (15:37 +0000)]
Remove non-standard GOST cipher suites (which are not compiled in
currently).

From Dmitry Eremin-Solenikov.

10 years agoclose fd when fdopen fails
doug [Sat, 23 Aug 2014 15:29:55 +0000 (15:29 +0000)]
close fd when fdopen fails

ok yasuoka@

10 years agoReplace the remaining ssl3_get_cipher_by_char() calls with n2s() and
jsing [Sat, 23 Aug 2014 14:52:41 +0000 (14:52 +0000)]
Replace the remaining ssl3_get_cipher_by_char() calls with n2s() and
ssl3_get_cipher_by_id().

ok bcook@

10 years agooddly now needs sys/socket.h, because someone removed struct socket fwd
deraadt [Sat, 23 Aug 2014 11:38:56 +0000 (11:38 +0000)]
oddly now needs sys/socket.h, because someone removed struct socket fwd
decl definition from somewhere in .h.  This appears to be the only fallout
in the kernel.

10 years agoEnhance the ldomctl(8) man page.
stsp [Sat, 23 Aug 2014 10:34:18 +0000 (10:34 +0000)]
Enhance the ldomctl(8) man page.
Describe all available commands, document the init-system file format, and
add examples guiding users through the process of setting up guest domains
based on http://undeadly.org/cgi?action=article&sid=20121214153413
input and ok jasper jmc schwarze

10 years agounbind;
jmc [Sat, 23 Aug 2014 07:25:54 +0000 (07:25 +0000)]
unbind;

10 years agoShrink this to the minimum, but reference /etc/examples/pf.conf
deraadt [Sat, 23 Aug 2014 05:49:42 +0000 (05:49 +0000)]
Shrink this to the minimum, but reference /etc/examples/pf.conf
(someone should really sit down and flesh out the examples)

10 years agosync
deraadt [Sat, 23 Aug 2014 04:00:41 +0000 (04:00 +0000)]
sync

10 years agoFix fd leak when fdopen fails.
doug [Sat, 23 Aug 2014 01:00:20 +0000 (01:00 +0000)]
Fix fd leak when fdopen fails.

ok schwarze@

10 years agoFix double free in ike_auth.c
doug [Sat, 23 Aug 2014 00:48:57 +0000 (00:48 +0000)]
Fix double free in ike_auth.c

ok jca@

10 years agowhen you specify queues in a rule, make sure they have been defined.
pelikan [Sat, 23 Aug 2014 00:11:03 +0000 (00:11 +0000)]
when you specify queues in a rule, make sure they have been defined.

DIOCADDRULE EBUSY turns into an error message that pfctl -n catches.
DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported
to occur, possibly from hfsc.c: this should be fixed as well.

ok henning mikeb sthen

10 years agoPOSIX/FreeBSD/NetBSD/Linux/etc agree -- blk[size|cnt]_t is the bomb.
krw [Fri, 22 Aug 2014 23:05:15 +0000 (23:05 +0000)]
POSIX/FreeBSD/NetBSD/Linux/etc agree -- blk[size|cnt]_t is the bomb.

So add the types blksize_t (a.k.a. int32_t) and blkcnt_t (a.k.a.
int64_t). Use blkcnt_t in stat.h since the base type (int64_t) does
not change. blksize_t in stat.h will follow after the tree is audited
for signed issues, since the base type will change from u_int32_t
to a POSIX compliant int32_t.

Guidance and feedback from guenther@

ok millert@

10 years agoswitch ndp to display MAC addresses in 00:00:00:00:00:00 format, ok deraadt@
sthen [Fri, 22 Aug 2014 22:37:32 +0000 (22:37 +0000)]
switch ndp to display MAC addresses in 00:00:00:00:00:00 format, ok deraadt@

10 years agoprint leading 0's in MAC addresses again, ok deraadt
sthen [Fri, 22 Aug 2014 22:14:53 +0000 (22:14 +0000)]
print leading 0's in MAC addresses again, ok deraadt

10 years agopseudo-device crypto was accidentally left for some architectures.
deraadt [Fri, 22 Aug 2014 20:03:54 +0000 (20:03 +0000)]
pseudo-device crypto was accidentally left for some architectures.

10 years agoStrip the BIND code down to just building and installing dig, host and nslookup.
brad [Fri, 22 Aug 2014 19:28:25 +0000 (19:28 +0000)]
Strip the BIND code down to just building and installing dig, host and nslookup.

10 years agodisable use of bind in base; in the base use nsd/unbound instead.
deraadt [Fri, 22 Aug 2014 19:19:25 +0000 (19:19 +0000)]
disable use of bind in base; in the base use nsd/unbound instead.
a proper & complete bind port will show up.
discussed with many for years

10 years agodon't need this file, only the mod version
tedu [Fri, 22 Aug 2014 16:29:27 +0000 (16:29 +0000)]
don't need this file, only the mod version

10 years agoInstead of getting a nasty error message from privsep
bluhm [Fri, 22 Aug 2014 16:14:11 +0000 (16:14 +0000)]
Instead of getting a nasty error message from privsep
"syslogd: priv_getaddrinfo: overflow attempt in hostname"
check the host and port length when parsing the config.
OK henning@

10 years agotypo; noticed by jmc@ some time ago
schwarze [Fri, 22 Aug 2014 15:49:44 +0000 (15:49 +0000)]
typo; noticed by jmc@ some time ago

10 years agoSet the default nfsd flags to "-tun 4". Matches the comment
jsg [Fri, 22 Aug 2014 08:10:38 +0000 (08:10 +0000)]
Set the default nfsd flags to "-tun 4".  Matches the comment
in rc.conf and the behaviour of the backwards compatibility
code in rc.subr for nfs_server=YES.
ok ajacoutot@

10 years agofix memory leak in isakmpd
doug [Fri, 22 Aug 2014 07:59:52 +0000 (07:59 +0000)]
fix memory leak in isakmpd

ok gerhard@ (also corrected first version)

10 years agosync
deraadt [Fri, 22 Aug 2014 07:41:48 +0000 (07:41 +0000)]
sync

10 years agoEnable rcctl(8).
ajacoutot [Fri, 22 Aug 2014 05:47:08 +0000 (05:47 +0000)]
Enable rcctl(8).

prodded by deraadt@

10 years agoremove an uneeded test
jsg [Fri, 22 Aug 2014 04:36:16 +0000 (04:36 +0000)]
remove an uneeded test
ok yasuoka@

10 years agosync
deraadt [Fri, 22 Aug 2014 01:28:19 +0000 (01:28 +0000)]
sync

10 years agoSet the sensor's status when docking and undocking, not just its value.
kspillner [Thu, 21 Aug 2014 21:49:37 +0000 (21:49 +0000)]
Set the sensor's status when docking and undocking, not just its value.
With this change sensorsd(8) now correctly detects state changes when
docking and undocking.

ok mlarkin@

10 years agoBugfix: make whatis(1) case-insensitive again.
schwarze [Thu, 21 Aug 2014 20:27:03 +0000 (20:27 +0000)]
Bugfix: make whatis(1) case-insensitive again.
The traditional whatis(1) was case-insensitve and it's still documented
that way, that but apparently got broken with or after the switch.

10 years agoAdd Last-Modified: HTTP header.
chrisz [Thu, 21 Aug 2014 19:23:10 +0000 (19:23 +0000)]
Add Last-Modified: HTTP header.

OK reyk@

10 years agoDocument square brackets for IPv6 addresses. From FreeBSD.
bluhm [Thu, 21 Aug 2014 17:16:37 +0000 (17:16 +0000)]
Document square brackets for IPv6 addresses.  From FreeBSD.
OK logan@ henning@

10 years agoSend and receive UDP syslog packets on the IPv6 socket.
bluhm [Thu, 21 Aug 2014 17:00:34 +0000 (17:00 +0000)]
Send and receive UDP syslog packets on the IPv6 socket.
OK henning@

10 years agoUnbreak when "SRCDIR=."
ajacoutot [Thu, 21 Aug 2014 16:50:11 +0000 (16:50 +0000)]
Unbreak when "SRCDIR=."

reported by phessler@

10 years agoFix double free. ok guenther@
jca [Thu, 21 Aug 2014 16:46:48 +0000 (16:46 +0000)]
Fix double free.  ok guenther@

10 years agolimit CGI process execution time to make REDoS attacks less effective;
schwarze [Thu, 21 Aug 2014 16:03:50 +0000 (16:03 +0000)]
limit CGI process execution time to make REDoS attacks less effective;
attack surface pointed out by Sebastien Marie

10 years agodeny "once" flags for match rules; ok henning
mikeb [Thu, 21 Aug 2014 15:09:27 +0000 (15:09 +0000)]
deny "once" flags for match rules;  ok henning

10 years agoNow that DVACT_DEACTIVATE is propagated to the children of a device when
mpi [Thu, 21 Aug 2014 14:52:55 +0000 (14:52 +0000)]
Now that DVACT_DEACTIVATE is propagated to the children of a device when
a driver does not implement a specific *_activate() handler and that our
USB stack sets the dying flag before detaching a device, these specific
handlers can die.

10 years agoFix a copy and pasto with the standard ring setup with calling if_rxr_init()
brad [Thu, 21 Aug 2014 14:30:21 +0000 (14:30 +0000)]
Fix a copy and pasto with the standard ring setup with calling if_rxr_init()
to use BGE_STD_RX_RING_CNT instead of BGE_JUMBO_RX_RING_CNT.

ok dlg@

10 years agoadd $OpenBSD$
jsg [Thu, 21 Aug 2014 14:26:16 +0000 (14:26 +0000)]
add $OpenBSD$

10 years agoKill the remaining <netinet/in_systm.h> inclusion!
mpi [Thu, 21 Aug 2014 14:24:08 +0000 (14:24 +0000)]
Kill the remaining <netinet/in_systm.h> inclusion!

10 years agoRight after .Fl, a middle delimiter triggers an empty scope,
schwarze [Thu, 21 Aug 2014 12:56:24 +0000 (12:56 +0000)]
Right after .Fl, a middle delimiter triggers an empty scope,
just like a closing delimiter.  This didn't work in groff-1.15,
but it now works in groff-1.22.

After being closed by delimiters, .Nm scopes do not reopen.

Do not suppress white space after .Fl if the next node is a text node
on the same input line; that can happen for middle delimiters.

Fixing an issue reported by jmc@.

10 years agoMake "rcctl status" output match rc.conf(8) format.
ajacoutot [Thu, 21 Aug 2014 12:47:22 +0000 (12:47 +0000)]
Make "rcctl status" output match rc.conf(8) format.

ok jasper@

10 years agoMisleading comments about splnet().
mpi [Thu, 21 Aug 2014 11:54:00 +0000 (11:54 +0000)]
Misleading comments about splnet().

10 years agoChange the output of arp(8) to match what ndp(8) does and include the
mpi [Thu, 21 Aug 2014 10:23:47 +0000 (10:23 +0000)]
Change the output of arp(8) to match what ndp(8) does and include the
expire timer.

This will makes it easier to add further information in a coherent way
between these tools for local and broadcast entries.

This new view displays either symbolic names (by default) or numerical
addresses (with "-n") for hosts but not both at the same time, just
like ndp(8), route(8) or netstat(1) do.

ok henning@

10 years agoNow that rc.conf(8) defines what a base system service, a base
schwarze [Thu, 21 Aug 2014 10:15:11 +0000 (10:15 +0000)]
Now that rc.conf(8) defines what a base system service, a base
system daemon, and a package daemon is, refer to it instead of
duplicating information.  While here, clean up wording.
OK ajacoutot@

10 years agoIf an ifa has as NULL ifp pointer then is should be considered as
mpi [Thu, 21 Aug 2014 10:07:07 +0000 (10:07 +0000)]
If an ifa has as NULL ifp pointer then is should be considered as
invalid.  When such thing happens, it means that the address is no
longer configured on the system but still referenced by some routes.
So do not return such ifa in ifa_ifwithroute().

Fix a panic reported by Pierre Bardou.

ok mikeb@, henning@

10 years agoDrop sanitation, _rc_parse_conf does this for us already.
ajacoutot [Thu, 21 Aug 2014 10:06:14 +0000 (10:06 +0000)]
Drop sanitation, _rc_parse_conf does this for us already.

ok schwarze@

10 years agoIf a service is disabled its flags are unconditionally set to "NO", so
ajacoutot [Thu, 21 Aug 2014 08:54:58 +0000 (08:54 +0000)]
If a service is disabled its flags are unconditionally set to "NO", so
there's not need to display "enabled" or "disabled" when calling "status",
we have the information already.

10 years agoFree resources on error in mkstemp and fdopen
doug [Thu, 21 Aug 2014 01:08:52 +0000 (01:08 +0000)]
Free resources on error in mkstemp and fdopen

ok djm@

10 years agoParse loghost in a separate function. Allow [] around hostname,
bluhm [Thu, 21 Aug 2014 00:04:58 +0000 (00:04 +0000)]
Parse loghost in a separate function.  Allow [] around hostname,
needed for IPv6 addresses.  Print full loghost specifier in case
of error or debug.  Make string sizes more precise.
input henning@; input and OK deraadt@

10 years agoafter allocating an mbuf and cluster you still need to init the length
dlg [Wed, 20 Aug 2014 23:56:57 +0000 (23:56 +0000)]
after allocating an mbuf and cluster you still need to init the length
fields.

found by steven roberts, who also tested this fix for me

10 years agoMove the examples to the EXAMPLES section and add some actual
schwarze [Wed, 20 Aug 2014 22:13:24 +0000 (22:13 +0000)]
Move the examples to the EXAMPLES section and add some actual
reference manual style documentation to the DESCRIPTION.
Feedback and OK rpe@ and ajacoutot@, also using feedback from deraadt@.

10 years agoLink ospfd and syslogd regression tests to the build.
bluhm [Wed, 20 Aug 2014 20:54:27 +0000 (20:54 +0000)]
Link ospfd and syslogd regression tests to the build.

10 years agoRun syslogd regressions tests. As only one syslogd can run per
bluhm [Wed, 20 Aug 2014 20:52:14 +0000 (20:52 +0000)]
Run syslogd regressions tests.  As only one syslogd can run per
machine, each test kills any syslogd first.  At the end the system's
syslogd gets restarted.
The test framework runs a client, and a server, and a syslogd.  The
messages are passed via the log socket or via UDP from the client
to syslogd.  From there UDP transport is used to reach the server.
All processes write log files where the message has to show up.
The test arguments are kept in the args-*.pl files.
The content of a log file, the data sent to a pipe process and what
the server received are checked.  The invocation of the sendsyslog(2)
syscall is checked with ktrace, the open file descriptors of syslogd
are checked with fstat.

10 years agoReplace gethostbyaddr(3) with getnameinfo(3). Remove the sigprocmask()
bluhm [Wed, 20 Aug 2014 20:10:17 +0000 (20:10 +0000)]
Replace gethostbyaddr(3) with getnameinfo(3).  Remove the sigprocmask()
that was necessary for gethostbyaddr() because the latter is not
signal safe.  Change the return code semantics of priv_getnameinfo()
to match getnameinfo(3).
input and OK jca@

10 years agoAdd missing OpenBSD RCS id.
bluhm [Wed, 20 Aug 2014 19:33:43 +0000 (19:33 +0000)]
Add missing OpenBSD RCS id.

10 years agoRename priv_gethostserv() to priv_getaddrinfo() as this is what the
bluhm [Wed, 20 Aug 2014 19:16:27 +0000 (19:16 +0000)]
Rename priv_gethostserv() to priv_getaddrinfo() as this is what the
function does.  Change the return code semantics to match getaddrinfo(3).
OK deraadt@

10 years agoBetter explain what unbound is for.
florian [Wed, 20 Aug 2014 19:13:03 +0000 (19:13 +0000)]
Better explain what unbound is for.
While there fix some nits.
Problem pointed out by deraadt@
Input jmc@, schwarze@
wouter@ committed a slightly different diff upstream. Pull that on out
of svn and hand merge it.
OK schwarze@

10 years agoremove one more reference to crypto(4); ok mikeb
jmc [Wed, 20 Aug 2014 18:59:56 +0000 (18:59 +0000)]
remove one more reference to crypto(4); ok mikeb

10 years agoStore the positional args in vars with meaningful names which makes the arg
rpe [Wed, 20 Aug 2014 17:15:17 +0000 (17:15 +0000)]
Store the positional args in vars with meaningful names which makes the arg
checking block easier to comprehend.

OK ajacoutot@

10 years agoGreatly simplify get/set flags and status.
ajacoutot [Wed, 20 Aug 2014 15:04:14 +0000 (15:04 +0000)]
Greatly simplify get/set flags and status.

Provide a unified output for the status of disabled services/daemons:
foobar_flags will always be "NO" regardless of the type (pkg script,
base system daemon, special variable).

10 years agoDrop default values from rc.conf.local when we run "enable".
ajacoutot [Wed, 20 Aug 2014 13:23:56 +0000 (13:23 +0000)]
Drop default values from rc.conf.local when we run "enable".

10 years agoRemove userland bits related to the crypto(4) interface; ok deraadt
mikeb [Wed, 20 Aug 2014 11:23:40 +0000 (11:23 +0000)]
Remove userland bits related to the crypto(4) interface;  ok deraadt

10 years agoImplement rxrinfo ioctl for cluster usage statistics
mikeb [Wed, 20 Aug 2014 10:06:31 +0000 (10:06 +0000)]
Implement rxrinfo ioctl for cluster usage statistics

10 years agounify the declaration of functions.
rpointel [Wed, 20 Aug 2014 07:55:45 +0000 (07:55 +0000)]
unify the declaration of functions.
ok aja@

10 years agoCall audio_{pint,rint}() call-backs with the mutex held. Found by
ratchov [Wed, 20 Aug 2014 07:19:42 +0000 (07:19 +0000)]
Call audio_{pint,rint}() call-backs with the mutex held. Found by
Izumi Tsutsui, thanks!
ok miod@

10 years agoWhen doing Whole disk installs on macppc, blank the first 1 meg of the
phessler [Wed, 20 Aug 2014 06:52:21 +0000 (06:52 +0000)]
When doing Whole disk installs on macppc, blank the first 1 meg of the
disk, so we can successfully create our partitions including the
all important boot partition.

Reported by many, but last by /u/TheWalkingGlitch via reddit

OK krw@

10 years agoBye bye /dev/crypto
mikeb [Wed, 20 Aug 2014 06:31:22 +0000 (06:31 +0000)]
Bye bye /dev/crypto

The interface has been disabled by default for about 4 years and
currently there's not much value in having it around at all.

ok deraadt

10 years agoBye bye /dev/crypto
mikeb [Wed, 20 Aug 2014 06:23:03 +0000 (06:23 +0000)]
Bye bye /dev/crypto

The interface has been disabled by default for about 4 years and
currently there's not much value in having it around at all.

ok deraadt

10 years agounlink crypto(4) pseudo device from the architecture dependant character
mikeb [Wed, 20 Aug 2014 06:14:42 +0000 (06:14 +0000)]
unlink crypto(4) pseudo device from the architecture dependant character
device tables and kernel config files.  ok deraadt

10 years agoRelease CPU mutexes on EINVAL.
doug [Wed, 20 Aug 2014 06:03:20 +0000 (06:03 +0000)]
Release CPU mutexes on EINVAL.

ok guenther@