IABSD.fr/src/sbin
Branch :
Log
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
 |
3612e128 | 2024-11-01 08:27:49 | Simplify name/prefix markup, readability tweak and cleanup Leave the notion of repition to ... and markup optional prefixes as such; 'name/prefix [name/prefix ...]' becomes 'name[/prefix] ...'. Also sync with unwind.conf.5 to fix curly braces and indentation. OK florian Input OK jmc | |
 |
be0e8945 | 2024-10-30 17:01:28 | Document /var/db/dhcp6leased/uuid. Input & OK kn, jmc, sthen | |
 |
a52c5fd0 | 2024-10-23 03:14:32 | remove duplicate defines | |
 |
df2ad427 | 2024-10-08 00:21:08 | apply the CVE-2024-8508 fix from unbound (put a limit on resources used for handling DNS compression). OK florian | |
 |
c08965e9 | 2024-10-05 13:27:16 | Make scaling available for normal mice, too; not just for touchpads. Add reverse_scrolling to the manpage. ok bru@ | |
 |
411db55c | 2024-09-29 18:00:38 | add some commas, to aid readability; from thorsten blum | |
 |
21cd3483 | 2024-09-25 19:56:33 | Correct an indexing error that may leave stale data in the mousecfg buffer. ok mpi@ | |
|
479c151d | 2024-09-20 02:00:46 | remove unneeded semicolons; checked by millert@ | |
|
1a834994 | 2024-09-16 07:34:49 | Close correct file descriptor. Instead of closing the just received UDP socket we closed the imsg fd thus cleanly shutting down dhcpleased(8). Problem triggered by sf@ with something like while :; do ifconfig vio0 -inet; done while :; do ifconfig vio0 inet autoconf; done The problem triggers when dhcpleased configured a lease and in just the right moment the autoconf flag gets removed. The main process opens a udp socket and sends it to the frontend. At the same time the frontend learned (from the route socket), that the interface lost its autoconf flag. When the frontend then receives the udp socket via fd passing it tries to close it. Due to a typo it would instead close the imsg file descriptor. Found by me after lots of head scratching. OK tb | |
 |
9ca241fc | 2024-09-15 11:08:50 | Add handling of "Class" attribute. diff from markus ok markus | |
|
f6e4162f | 2024-09-15 07:14:58 | remove unused variables | |
|
4c856965 | 2024-09-11 00:41:51 | Fix a typo | |
|
6bf66549 | 2024-09-10 05:33:32 | missing "Ar" in previous; | |
|
ed822a90 | 2024-09-09 23:38:29 | When accounting start the type attribute was added twice. from markus | |
|
2402a19b | 2024-09-09 05:36:17 | Add triple-dots to synopsis as multiple name[=value] arguments may be given OK jmc sobrado | |
 |
19b65b99 | 2024-09-06 06:31:11 | Repair build with gcc. | |
|
7037e34c | 2024-09-05 08:22:46 | Sync to unbound 1.21.0; heavy lifting by sthen parse_edns_from_query_pkt() grew a parameter to handle cookies, which we don't use. | |
 |
c920a736 | 2024-09-01 20:24:42 | dhcpleased: fix a sizeof for IMSG_REQUEST_REBOOT. "fatal in engine: engine_dispatch_frontend: invalid IMSG_REQUEST_REBOOT" reported by qwer.ty tuta io ok florian kn | |
|
596e1897 | 2024-08-27 05:55:39 | Do not send zero sized vendor or client ids. The frontend and engine do not like this due to improved error checking. Found by Josh Grosse and Renato Aguiar, thanks! | |
|
7e5648d1 | 2024-08-26 06:06:04 | Use i2s instead of hard coding the imsg type. Suggested by tb. | |
|
c7074a52 | 2024-08-26 06:05:05 | errno is unset, use fatalx(3) instead of fatal(3). | |
|
f46577a8 | 2024-08-26 06:04:24 | Be stricter in what we accept from the main process. While here mention function where fatalx(3) occurred like everywhere else. Suggested by & OK tb | |
|
45c5e5ad | 2024-08-25 09:53:53 | Do not peek inside of struct imsg. input & OK tb | |
|
5bd09d2d | 2024-08-25 07:04:05 | sin6_to_str and i2s take a single argument. Pointed out by tb | |
|
9a7d784a | 2024-08-24 16:35:05 | Simplify engine_showinfo_ctl() It only handles one imsg type these days, so it doesn't need to peek into struct imsg at all. pointed out by & OK tb | |
|
46c03dec | 2024-08-24 16:34:23 | Stop peeking into struct imsg when relaying control messages. pointed out by & OK tb | |
|
33d2acb6 | 2024-08-24 09:44:41 | Do not peek inside of struct imsg. While here use i2s helper function for error logging. OK tb | |
|
d5be4999 | 2024-08-24 09:42:40 | Helper function for logging imsg type names. OK tb as part of a larger diff | |
|
3ff0799e | 2024-08-19 13:01:47 | correctly indent a line | |
|
a81015d0 | 2024-08-19 05:58:41 | Replace too flexible inet_aton(3) with getaddrinfo(3). 0xdecafbad will no longer work as an IPv4 address, sorry. OK bluhm | |
|
8172eb65 | 2024-08-17 03:28:22 | Fix some memory leaks in the RADIUS part. ok tobhe | |
|
fb6793a6 | 2024-08-11 06:07:37 | rework DESCRIPTION for both dhcpleased(8) and slaacd(8) to more accurately reflect how they work, to emphasize that they do nothing unless auto conf is set, and to more closely match each other; prompted by a diff from andrew christopher hawk on tech, who noted a wonky sentence; help/feedback deraadt florian; ok deraadt | |
|
10427868 | 2024-08-09 19:43:26 | Add 2024 root zone trust-anchor, it is expected to be used in 2026. The trust-anchor was copied from the upcoming unbound(8) release and verified against https://www.iana.org/reports/2024/root-ksk-2024.pdf While here switch the 2017 trust-anchor from DNSKEY to DS to use the same record type as for the 2024 trust-anchor. They are functionally equivalent. It was verified against https://www.iana.org/reports/2017/root-ksk-2017.pdf As well as with run-time testing, i.e. unwind would still perform DNSSEC validation. checked pdfs & OK phessler | |
|
3a580dd9 | 2024-08-08 03:58:53 | Fix a typo in log message. | |
|
ee519c7f | 2024-07-18 08:58:59 | Fix memory leaks and improve id handling of iked_radserver_req. original diff from markus ok tobhe | |
 |
0025a967 | 2024-07-15 13:32:50 | Add e2fs_fsmnt, and the newly defined e2fs_kbytes_written to the list of fields that can differ between the primary and 1st backup superblock. This fixes fsck issues I've encountered on my system with a shared home partition. OK miod@ | |
|
178701b6 | 2024-07-15 05:36:08 | bioctl.8: - tweak bioctl text - don;t repeat the device examples - reinstate softraid device being always softraid0 usage(): - add vertical blank between two formats - rewrap to match 80col (shorter and matches man) feedback/ok krw kn | |
 |
30269bc3 | 2024-07-14 19:51:08 | This change allows user to define table inside the anchor like that: anchor foo { table <bar> { 192.168.1.1 } pass in from <bar> to <self> } Without this diff one must either create table <bar> in main ruleset (root) or use 'pfctl -a foo -t bar -T add 192.168.1.1' This glitch is hard to notice. Not many human admins try to attach tables to non-global anchors. Deamons which configure pf(4) automatically at run time such as relayd(8) and spamd(8) create tables attached to thair anchors (for example 'relayd/*') but the deamons use way similar to pfctl(8) to add and manage those tables. The reason why I'd like to seal this gap is that my long term goal is to turn global `pfr_ktable` in pf(4) into member of pf_anchor. So each ruleset will get its own tree of tables. feedback and OK bluhm@ | |
 |
9182e176 | 2024-07-14 16:09:06 | Shuffle verbiage to make page more general. e.g. by mentioning nvme(4). Feedback jmc@ jmatthew@ deraadt@ kn@ ok jmc@ kn@ | |
 |
f294d01e | 2024-07-14 13:13:33 | Fail explicitly on unexptected imsg->hdr_type. Otherwise the following comparison is undefined. | |
|
237d2500 | 2024-07-14 08:57:32 | sync slaacd(8) log.c to dhcpleased(8)'s version. We don't built log.c on the ramdisk so no need for ifndef small. | |
|
7ab22e66 | 2024-07-14 08:45:05 | log_getverbose() is a void function pointed out by tb | |
|
dc5d4411 | 2024-07-14 08:41:54 | sync slaacd(8) log.h to dhcpleased(8) log.h - include stdlib.h for exit(3) - knf fixes - define log_getverbose as (0) instead of 0 input & OK tb | |
|
38b547d0 | 2024-07-14 06:34:04 | Unbreak tree by defining log_getverbose() for SMALL builds ok anton florian | |
|
cf6341ec | 2024-07-13 16:06:34 | Reduce if_indextoname(3) usage. Don't ask the kernel to translate an if_index to a name if we are not running with verbose logging, it's not free. | |
|
65246e30 | 2024-07-13 14:28:27 | NULL check must be inside the loop. found tobhe ok tobhe | |
|
4fa86b90 | 2024-07-13 14:19:09 | Fix radius.c again^2. Cancel previous and revert the latest one (sent to tech@). | |
|
a07498b0 | 2024-07-13 14:08:53 | Fix radius.c again. Previous was old one. | |
|
260e310e | 2024-07-13 12:58:51 | grammar/macro fixes for the radius text; | |
|
37e26f97 | 2024-07-13 12:25:07 | Fix radius.c. Previous it was broken. | |
|
f36db9c4 | 2024-07-13 12:22:46 | Add RADIUS support. Authentication, accounting, and "Dynamic Authorization Extensions"(DAE) are supported. feedback markus stu ok tobhe | |
|
7520e8fa | 2024-07-11 13:38:03 | Make sure we are interested in an interface that shows up. | |
|
0498f896 | 2024-07-11 10:48:51 | Be a bit more noisy in syslog on what is going on. So far dhcp6leased(8) has been completely silent. Prodding by Brian Conway. | |
|
cc3e93c2 | 2024-07-11 10:38:57 | Write lease after we configured prefixes. While here, do not claim we have a ::/0 lease, it confuses the parser. | |
|
8e130894 | 2024-07-11 10:37:47 | Do not show expired lease information in dhcp6leasectl. | |
|
363167f4 | 2024-07-11 09:39:13 | Forgot to initialize status_code in previous. No STATUS_CODE option from the server means "success", but we are now using stack garbage, which is usually not "success". | |
|
70eb162f | 2024-07-10 12:52:51 | Pass status option up. If we are in state "renewing" and the DHCPv6 server returns an unsuccessful status go to "rebinding", i.e. ask any DHCPv6 server for a lease not just the one we got the lease from. This likely fixes a problem reported by Brian Conway where the ISP returned "NoBinding - Prefix not bound to this interface." for a renew. dhcp6leased recovered once T1 expired and we went to "rebinding" after some time. | |
|
7571100d | 2024-07-10 12:44:46 | Pass int to the *2str functions, we don't need anything fancy. | |
|
7580ae52 | 2024-07-10 10:30:46 | Only vis(3) the option, not the rest of the packet. Lots of head scratching and help from the hackroom ensued because of a inconveniently placed \r that truncated a string and placed garbage at a weird place. | |
|
0da4c31d | 2024-07-09 16:24:57 | Track configured and new prefix delegations in iface. When the DHCPv6 server renumbers and hands us new delegations we have to deconfigure the old prefixes. To prevent situations where we have no IPv6 at all, first configure the new prefixes and then remove the old prefixes. | |
|
10da7d5d | 2024-07-09 16:15:42 | Skip prefixes with vltime 0. Servers indicate unusable prefixes with vltime 0 when we are in state reboot and probably hand us new, valid prefixes. In IPv4 dhcp we would receive a NACK instead... | |
|
38e980d7 | 2024-07-09 13:27:18 | remove unnused prototype | |
|
ce9c2690 | 2024-07-09 05:19:41 | point mount -> mount point; from netbsd -r1.46/pgoyette | |
|
ce50f388 | 2024-07-01 14:15:15 | Enclose IPv6 address in a square bracket if the address is used with the port number. ok florian tobhe | |
|
d2504b08 | 2024-06-30 23:44:49 | correct history; dmesg appeared (without a manual page) in v7 ok deraadt@ | |
 |
0fbf39a0 | 2024-06-30 17:30:52 | delete dhclient(8). ipv4 dhcp leases have been acquired by the always-running-in-background dhcpleased(8) for a while, which is activated per-interface with "ifconfig $if autoconf', or "ifconfig $if inet autoconf", or with "inet autoconf" in /etc/hostname.$if dhclient(8) has done execve(3) of ifconfig(8) to handle this for a while, so everyone has moved to the dhcpleased(8) method ok florian | |
|
9518e4db | 2024-06-30 16:10:26 | Clearify "force" and "preference" interaction. Problem reported by Kirill A. Korinsky OK kn | |
|
0d495f9a | 2024-06-29 17:25:56 | Disable the shared cache between resolvers for now. Since the latest libunbound update the frontend process would segfault about once a day on one of my MX servers with what looks like a use-after-free deep inside of libunbound. Maybe we are poking too much at internals and the shared cache is too much of a hack. #ifdef for now to ease investigation, but it is possible that this code just has to go. | |
|
a83add34 | 2024-06-29 12:09:51 | remove unused vars | |
|
cba2acdf | 2024-06-27 14:53:06 | dhclient hasn't prodded us in a long time to renew a lease. OK deraadt | |
|
6912c931 | 2024-06-19 07:42:44 | Handle interfaces going down and up again. Missing feature reported by, testing & OK semarie | |
|
a65418df | 2024-06-18 05:08:41 | iked: do not attempt to read multiple SANs No extension in a valid certificate appears more than once per RFC 5280 section 4.2. So don't go walking the extension stack and try to inspect multiple subject alternative names because crappy OpenSSL API encourages you to do so. Instead call the API in the only correct way possible and report multiple SANs in log_info(). This is unlikely to be hit since the extension caching in LibreSSL has rejected repeated OIDs in a cert for a long time. ok tobhe | |
|
096314fe | 2024-06-14 07:45:44 | sync to unbound 1.20.0 heavy lifting by sthen | |
 |
1a9be797 | 2024-06-09 16:25:27 | Introduce IFCAP_VLAN_HWOFFLOAD for vio(4). Add IFCAP_VLAN_HWOFFLOAD to signal hardware like vio(4) can handle checksum or TSO offloading with inline VLAN tags. tested by Mark Patruck, sf@ and bluhm@ ok sf@ and bluhm@ | |
|
f35103ce | 2024-06-06 15:15:44 | hand PD_IAs to dhcp6leasectl | |
|
292805c1 | 2024-06-06 06:26:14 | Accept more compact forms of prefix delegation requests. For example, these are now valid, too: request prefix delegation on vio1 for vether4/64 request prefix delegation on vio1 for { vether5 vether6/64 } Reminded by Tim Kuijsten | |
|
763cddbd | 2024-06-05 16:15:47 | Implement lease files. | |
|
1788a962 | 2024-06-05 16:14:12 | Use a loop to add request options. This makes it easier to extend in the future. | |
|
86bec527 | 2024-06-05 16:12:09 | unused function | |
|
33c99573 | 2024-06-05 16:11:26 | implement removing of addresses from interfaces | |
|
7e484d93 | 2024-06-05 10:48:56 | Do not try to configure an interface with prefix length 0. | |
|
6bb68921 | 2024-06-05 10:25:07 | Do not request a prefix with length zero. If we got a prefix delegation for some IA but not others use the prefix lenght from the configuration for the ones we did not get a prefix delegation. | |
|
92119d76 | 2024-06-04 15:48:47 | IAIDs can start at 0. I was under the impression that an IAID of 0 is special, but that's not true. Letting IAID start at zero makes array indexing easier and avoids an out of bounds access pointed out by dhill. While here, do not trust IAID received via imsg but do our own accounting. | |
|
28a160f9 | 2024-06-03 18:10:04 | gc v4 struct | |
|
3a2a6d8f | 2024-06-03 17:58:33 | more sleepy florian knf issues | |
|
95ce3e7d | 2024-06-03 15:53:26 | more whitespace and knf | |
|
736e16a7 | 2024-06-03 15:52:17 | knf; pointed out by deraadt | |
|
3ae4b9df | 2024-06-03 11:08:31 | implement rapid commit | |
|
81ae6c6a | 2024-06-03 10:05:18 | hook dhcp6leased to the build OK deraadt | |
|
e8add275 | 2024-06-02 22:41:42 | sencond -> second; ok florian@ | |
|
be6176a9 | 2024-06-02 17:44:06 | prev_plen is only accessed on the 2nd round through the loop. Static analysers don't understand this. So give it a value to shut them up. Reported by jsg | |
|
e71cb61c | 2024-06-02 17:38:44 | Fix indent; pointed out by miod | |
|
c3b2b409 | 2024-06-02 17:33:48 | Make sure we find a link-local address and rdomain pointed out by jsg & miod | |
|
4bbe84cd | 2024-06-02 17:26:54 | gc unused variable pointed out by jsg | |
|
a5976d07 | 2024-06-02 15:43:24 | oops, we need to hold on to ifap for a bit longer | |
|
c266488b | 2024-06-02 15:19:05 | fix leaks | |
|
f6870f0d | 2024-06-02 14:07:19 | Unlike DHCPv4 we will only send multicast messages. Initialize destination address once and fold udp_send_packet() into send_packet(). While here improve debugging output a bit. | |
|
0ed0336f | 2024-06-02 13:55:37 | we do not poke around in udp headers | |
|
315b80bb | 2024-06-02 13:35:52 | DHCPv6 is not concerned with link layer addresses. pointed out by martijn | |
|
1c8c2e64 | 2024-06-02 12:41:46 | Implement renew & rebind. Missed in previous. |