d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
222,433 Commits 4 Branches 49 Tags 2 GiB
534c9c78f3
Commit Graph

188 Commits

Author SHA1 Message Date
truckman
157633b369 Check for socket creation success before calling bind(). 
Reported by:	Coverity
CID:		1194209
 2016-05-12 05:43:54 +00:00
gjb
1dc4c40e3b MFH 
Sponsored by:	The FreeBSD Foundation
 2016-04-04 23:55:32 +00:00
maxim
578b681e58 o Restore some good whitespace killed in the previous commit. 
Spotted by:	bjk
 2016-03-18 15:44:21 +00:00
maxim
96ffb8bbbe o Kill EoL whitespaces. 2016-03-18 15:07:43 +00:00
maxim
2384b1d735 o No need to resolve a mask that we get with ICMP_MASKREPLY, 
pass it directly to inet_ntoa(3).
 2016-03-18 15:06:50 +00:00
gjb
086e6f562f MFH 
Sponsored by:	The FreeBSD Foundation
 2016-03-14 18:54:29 +00:00
glebius
5b04e75f25 Allow minimum and maximum sweep size be the same. 
Submitted by:	maxim
 2016-03-11 21:06:17 +00:00
maxim
986728b254 o Kill EoL whitespaces. No functional changes. 2016-03-11 16:03:47 +00:00
maxim
5c49f37ec4 o Xr icmp(4). 2016-03-11 15:29:00 +00:00
maxim
80cf8e3a5c o Document net.inet.icmp.maskfake and net.inet.icmp.tstamprepl sysctls. 2016-03-11 15:26:56 +00:00
gjb
955ce29ea3 MFH 
Sponsored by:	The FreeBSD Foundation
 2016-03-02 16:14:46 +00:00
bdrewery
eb3588c7b6 Update dependencies. 
Sponsored by:	EMC / Isilon Storage Division
 2016-02-26 22:14:15 +00:00
oshogbo
023f14d65b Convert casperd(8) daemon to the libcasper. 
After calling the cap_init(3) function Casper will fork from it's original
process, using pdfork(2). Forking from a process has a lot of advantages:
1. We have the same cwd as the original process.
2. The same uid, gid and groups.
3. The same MAC labels.
4. The same descriptor table.
5. The same routing table.
6. The same umask.
7. The same cpuset(1).
From now services are also in form of libraries.
We also removed libcapsicum at all and converts existing program using Casper
to new architecture.

Discussed with:		pjd, jonathan, ed, drysdale@google.com, emaste
Partially reviewed by:	drysdale@google.com, bdrewery
Approved by:		pjd (mentor)
Differential Revision:	https://reviews.freebsd.org/D4277
 2016-02-25 18:23:40 +00:00
gjb
4e38aaedb8 Explicitly add more files to the 'runtime' package. 
Sponsored by:	The FreeBSD Foundation
 2016-02-09 20:19:31 +00:00
sjg
008d7c831f Add META_MODE support. 
Off by default, build behaves normally.
WITH_META_MODE we get auto objdir creation, the ability to
start build from anywhere in the tree.

Still need to add real targets under targets/ to build packages.

Differential Revision:       D2796
Reviewed by: brooks imp
 2015-06-13 19:20:56 +00:00
sjg
75a137820d dirdeps.mk now sets DEP_RELDIR 2015-06-08 23:35:17 +00:00
sjg
65145fa4c8 Merge sync of head 2015-05-27 01:19:58 +00:00
brooks
fe846feb04 Remove "capability mode sandbox enabled" messages. 
These messages serve little purpose and break some consumers.

PR:		199855
Differential Revision:	https://reviews.freebsd.org/D2440
Reviewed by:	rwatson
Approved by:	pjd
MFC after:	1 week
Sponsored by:	DARPA, AFRL
 2015-05-04 21:44:51 +00:00
ae
2ea9ad214b After r270929 RAW IP code assumes that all IP fields are in network 
byte order. Fix ping(8) to pass an IP header with converted ip_off
and ip_len fields, when IP_HDRINCL socket option used.
 2015-01-23 13:26:35 +00:00
bapt
6fdc031751 Convert sbin/ to LIBADD 
Reduce overlinking
 2014-11-25 11:23:12 +00:00
sjg
b137080f19 Merge from head@274682 2014-11-19 01:07:58 +00:00
hrs
4a3d5910e2 WARNS=3 and style fixes. No functionality change. 2014-10-20 00:27:40 +00:00
sjg
5860f0d106 Updated dependencies 2014-05-16 14:09:51 +00:00
sjg
1a7e48acf1 Updated dependencies 2014-05-10 05:16:28 +00:00
sjg
ed3fc70bf5 Merge from head 2014-05-08 23:54:15 +00:00
imp
2118f42afd Use src.opts.mk in preference to bsd.own.mk except where we need stuff 
from the latter.
 2014-05-06 04:22:01 +00:00
sjg
5e568154a0 Merge head 2014-04-28 07:50:45 +00:00
jilles
a704d83919 Fix statically-linked build (WITHOUT_DYNAMICROOT). 2014-03-16 13:43:06 +00:00
rwatson
a400e9c007 Update most userspace consumers of capability.h to use capsicum.h instead. 
auditdistd is not updated as I will make the change upstream and then do a
vendor import sometime in the next week or two.

MFC after:	3 weeks
 2014-03-16 11:04:44 +00:00
pjd
0248f22ea4 Protect ping(8) using Capsicum and Casper. This is protection against malicious 
network packets that we parse and not against local users trying to gain root
access through ping's set-uid bit - this is handled by dropping privileges very
early in ping.

Submitted by:	Mikhail <mp@lenta.ru>
 2014-02-04 21:43:53 +00:00
sjg
6d37b86f2b Updated dependencies 2013-03-11 17:21:52 +00:00
sjg
0ee5295509 Updated dependencies 2013-02-16 01:23:54 +00:00
sjg
778e93c51a Sync from head 2012-11-04 02:52:03 +00:00
eadler
4bc19b04c5 Check the return error of set[ug]id. While this can never fail in the 
current version of FreeBSD, this isn't guarenteed by the API.  Custom
security modules, or future implementations of the setuid and setgid
may fail.

PR:		bin/172289
PR:		bin/172290
PR:		bin/172291
Submittud by:	Erik Cederstrand <erik@cederstrand.dk>
Discussed by:	freebsd-security
Approved by:	cperciva
MFC after:	1 week
 2012-10-22 03:31:22 +00:00
marcel
9dd41e3647 Sync FreeBSD's bmake branch with Juniper's internal bmake branch. 
Requested by: Simon Gerraty <sjg@juniper.net>
 2012-08-22 19:25:57 +00:00
delphij
ca1787f8ea Use timeclear() instead of home grown version. 
MFC after:	2 weeks
 2012-07-02 02:38:27 +00:00
ed
01e81eb99e Small style fixes: 
- ANSIfy prototypes.
- Remove unneeded whitespace.
- Add const keyword to function where it can be used.
 2010-06-20 12:52:33 +00:00
danger
53dabe7d04 - improve readability 
Reviewed by:	trhodes, keramida
MFC after:	3 days
 2009-01-11 22:36:45 +00:00
danger
5648111d56 - rename the RETURN VALUES section to EXIT STATUS 
- not bumping a date as this is not a real content change

Approved by:	ru
MFC after:	3 days
 2009-01-07 00:51:41 +00:00
gnn
f5875f045c Commit IPv6 support for FAST_IPSEC to the tree. 
This commit includes all remaining changes for the time being including
user space updates.

Submitted by:    bz
Approved by:    re
 2007-07-01 12:08:08 +00:00
cognet
fc0e827f1a Force the alignment of the chars arrays, as they are casted later to 
structs.
gcc 4.2 doesn't do it by default, and that results in unaligned access on
arm.
 2007-05-21 14:38:45 +00:00
ru
4d582ffe09 Remove alpha left-overs. 2006-08-22 08:03:01 +00:00
dd
462216939a Print packet loss figures with one decimal place. ping6 already does 
this, and OpenBSD and NetBSD pings do it too. This is primarily useful
for comparing low levels of packet loss.
 2006-08-14 07:54:17 +00:00
glebius
e41986c80d Add a new feature to ping(8) - possibility to specify maximum 
wait time for a packet. This allows to:

 - Count number of packets received before and after specified
   time.
 - Shorten time of execution of 'ping -c 1' scripts.

Submitted by:	Lytochkin Boris <lytboris gmail.com>
 2006-04-05 12:30:42 +00:00
ru
4677f91765 Sync usage() with SYNOPSIS. 2005-12-01 22:03:34 +00:00
ru
4de1ee30af -mdoc sweep. 2005-11-18 10:36:29 +00:00
glebius
79e1a39bf2 Implement a new feature for ping(8) - sweeping pings. In a sweeping 
ping ICMP payload of packets being sent is increased with given step.
Sweeping pings are useful for testing problematic channels, MTU
issues or traffic policing functions in networks.

PR:		bin/82625
Submitted by:	Chris Hellberg <chellberg juniper.net> (with some cleanups)
 2005-08-15 14:15:37 +00:00
maxim
9fddea1399 o Store timestamp in network byte order. 
o Remove an assumption sizeof(struct timeval) == 8 (this is not
  true on sparc64).

Reviewed by:	imp, -hackers
Obtained from:	NetBSD (rev. 1.75)
MT5 after:	1 month
 2004-09-30 07:35:56 +00:00
stefanf
bcdeb8e73c Avoid using void pointers in additive expressions. 
PR:		56653
 2004-08-14 17:46:10 +00:00
markm
90f91e7879 Remove advertising clause from University of California Regent's license, 
per letter dated July 22, 1999.

Approved by: core, imp
 2004-04-09 19:58:40 +00:00