OpenBSD src changes summary for 2015-10-23
==========================================

bin/ksh                                 bin/mkdir
bin/ps                                  distrib/sets
etc/MAKEDEV.common                      etc/Makefile
etc/etc.alpha/MAKEDEV                   etc/etc.alpha/MAKEDEV.md
etc/etc.alpha/login.conf                etc/etc.amd64/MAKEDEV
etc/etc.amd64/MAKEDEV.md                etc/etc.amd64/login.conf
etc/etc.armish/MAKEDEV                  etc/etc.armish/MAKEDEV.md
etc/etc.armish/login.conf               etc/etc.armv7/MAKEDEV
etc/etc.armv7/MAKEDEV.md                etc/etc.armv7/login.conf
etc/etc.aviion/MAKEDEV                  etc/etc.aviion/MAKEDEV.md
etc/etc.aviion/login.conf               etc/etc.hppa/MAKEDEV
etc/etc.hppa/MAKEDEV.md                 etc/etc.hppa/login.conf
etc/etc.hppa64/MAKEDEV                  etc/etc.hppa64/MAKEDEV.md
etc/etc.hppa64/login.conf               etc/etc.i386/MAKEDEV
etc/etc.i386/MAKEDEV.md                 etc/etc.i386/login.conf
etc/etc.landisk/MAKEDEV                 etc/etc.landisk/MAKEDEV.md
etc/etc.landisk/login.conf              etc/etc.loongson/MAKEDEV
etc/etc.loongson/MAKEDEV.md             etc/etc.loongson/login.conf
etc/etc.luna88k/MAKEDEV                 etc/etc.luna88k/MAKEDEV.md
etc/etc.luna88k/login.conf              etc/etc.macppc/MAKEDEV
etc/etc.macppc/MAKEDEV.md               etc/etc.macppc/login.conf
etc/etc.octeon/MAKEDEV                  etc/etc.octeon/MAKEDEV.md
etc/etc.octeon/login.conf               etc/etc.sgi/MAKEDEV
etc/etc.sgi/MAKEDEV.md                  etc/etc.sgi/login.conf
etc/etc.socppc/MAKEDEV                  etc/etc.socppc/MAKEDEV.md
etc/etc.socppc/login.conf               etc/etc.sparc/MAKEDEV
etc/etc.sparc/MAKEDEV.md                etc/etc.sparc/login.conf
etc/etc.sparc64/MAKEDEV                 etc/etc.sparc64/MAKEDEV.md
etc/etc.sparc64/login.conf              etc/etc.vax/MAKEDEV
etc/etc.vax/MAKEDEV.md                  etc/etc.vax/login.conf
etc/etc.zaurus/MAKEDEV                  etc/etc.zaurus/MAKEDEV.md
etc/etc.zaurus/login.conf               etc/netstart
games/bcd                               games/morse
lib/libc                                lib/librthread
regress/lib                             regress/sys
regress/usr.bin                         regress/usr.sbin
sbin/ifconfig                           sbin/iked
sbin/route                              share/man
sys/arch/alpha/alpha                    sys/arch/amd64/amd64
sys/arch/amd64/conf                     sys/arch/arm/arm
sys/arch/aviion/aviion                  sys/arch/hppa/hppa
sys/arch/hppa64/hppa64                  sys/arch/i386/conf
sys/arch/i386/i386                      sys/arch/i386/include
sys/arch/landisk/landisk                sys/arch/loongson/loongson
sys/arch/luna88k/luna88k                sys/arch/macppc/macppc
sys/arch/octeon/octeon                  sys/arch/sgi/sgi
sys/arch/socppc/socppc                  sys/arch/sparc/sparc
sys/arch/sparc64/sparc64                sys/arch/vax/vax
sys/conf                                sys/dev/ic
sys/dev/pci                             sys/kern
sys/msdosfs                             sys/net
sys/netinet                             sys/netinet6
sys/netmpls                             sys/sys
sys/uvm                                 usr.bin/calendar
usr.bin/fstat                           usr.bin/locate
usr.bin/mandoc                          usr.bin/nc
usr.bin/netstat                         usr.bin/nfsstat
usr.bin/su                              usr.bin/tmux
usr.bin/top                             usr.bin/w
usr.sbin/cron                           usr.sbin/iostat
usr.sbin/ldpctl                         usr.sbin/ldpd
usr.sbin/ndp                            usr.sbin/ntpd
usr.sbin/relayd                         usr.sbin/smtpd
usr.sbin/syslogd                        

== bin =============================================================== 01/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/bin

ksh

  - proto.h                               ~ sh.h

  > proto.h contains many function prototypes. It's apparently separate from
  > sh.h because the pdksh devs used a prototype generator (last run in
  > 1992). Merging it into sh.h makes things clearer.
  > ok nicm@ (mmcc@)

  ~ sh.h                                  

  > Remove two comments listing functionless files. Trivial, no functional
  > change. (mmcc@)

  ~ shf.c                                 

  > Remove three strange and unused preproc defines. Submitted by Ilya
  > Kaliman.
  > ok nicm@ (mmcc@)

mkdir

  ~ mkdir.c                               

  > correct precedence; from Ilya Kaliman (deraadt@)

ps

  ~ ps.c                                  

  > With new pledge "ps" and "vminfo" requests, ps/top/w become possible.
  > (deraadt@)

== distrib =========================================================== 02/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib

sets

  ~ lists/base/md.alpha                   ~ lists/base/md.amd64
  ~ lists/base/md.armish                  ~ lists/base/md.armv7
  ~ lists/base/md.aviion                  ~ lists/base/md.hppa
  ~ lists/base/md.hppa64                  ~ lists/base/md.i386
  ~ lists/base/md.landisk                 ~ lists/base/md.loongson
  ~ lists/base/md.luna88k                 ~ lists/base/md.macppc
  ~ lists/base/md.octeon                  ~ lists/base/md.sgi
  ~ lists/base/md.socppc                  ~ lists/base/md.sparc
  ~ lists/base/md.sparc64                 ~ lists/base/md.zaurus
  ~ lists/comp/mi                         

  > sync (deraadt@)

== etc =============================================================== 03/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc

MAKEDEV.common

  ~ MAKEDEV.common                        

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

Makefile

  ~ Makefile                              

  > add BUILDINFO file. currently contains a timestamp. ok deraadt (tedu@)

etc.alpha/MAKEDEV

  ~ etc.alpha/MAKEDEV                     

  > Sync (after tap addition) (claudio@)

etc.alpha/MAKEDEV.md

  ~ etc.alpha/MAKEDEV.md                  

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.alpha/login.conf

  ~ etc.alpha/login.conf                  

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.amd64/MAKEDEV

  ~ etc.amd64/MAKEDEV                     

  > Sync (after tap addition) (claudio@)

etc.amd64/MAKEDEV.md

  ~ etc.amd64/MAKEDEV.md                  

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.amd64/login.conf

  ~ etc.amd64/login.conf                  

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.armish/MAKEDEV

  ~ etc.armish/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.armish/MAKEDEV.md

  ~ etc.armish/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.armish/login.conf

  ~ etc.armish/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.armv7/MAKEDEV

  ~ etc.armv7/MAKEDEV                     

  > Sync (after tap addition) (claudio@)

etc.armv7/MAKEDEV.md

  ~ etc.armv7/MAKEDEV.md                  

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.armv7/login.conf

  ~ etc.armv7/login.conf                  

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.aviion/MAKEDEV

  ~ etc.aviion/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.aviion/MAKEDEV.md

  ~ etc.aviion/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.aviion/login.conf

  ~ etc.aviion/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.hppa/MAKEDEV

  ~ etc.hppa/MAKEDEV                      

  > Sync (after tap addition) (claudio@)

etc.hppa/MAKEDEV.md

  ~ etc.hppa/MAKEDEV.md                   

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.hppa/login.conf

  ~ etc.hppa/login.conf                   

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.hppa64/MAKEDEV

  ~ etc.hppa64/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.hppa64/MAKEDEV.md

  ~ etc.hppa64/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.hppa64/login.conf

  ~ etc.hppa64/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.i386/MAKEDEV

  ~ etc.i386/MAKEDEV                      

  > Sync (after tap addition) (claudio@)

etc.i386/MAKEDEV.md

  ~ etc.i386/MAKEDEV.md                   

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.i386/login.conf

  ~ etc.i386/login.conf                   

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.landisk/MAKEDEV

  ~ etc.landisk/MAKEDEV                   

  > Sync (after tap addition) (claudio@)

etc.landisk/MAKEDEV.md

  ~ etc.landisk/MAKEDEV.md                

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.landisk/login.conf

  ~ etc.landisk/login.conf                

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.loongson/MAKEDEV

  ~ etc.loongson/MAKEDEV                  

  > Sync (after tap addition) (claudio@)

etc.loongson/MAKEDEV.md

  ~ etc.loongson/MAKEDEV.md               

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.loongson/login.conf

  ~ etc.loongson/login.conf               

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.luna88k/MAKEDEV

  ~ etc.luna88k/MAKEDEV                   

  > Sync (after tap addition) (claudio@)

etc.luna88k/MAKEDEV.md

  ~ etc.luna88k/MAKEDEV.md                

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.luna88k/login.conf

  ~ etc.luna88k/login.conf                

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.macppc/MAKEDEV

  ~ etc.macppc/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.macppc/MAKEDEV.md

  ~ etc.macppc/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.macppc/login.conf

  ~ etc.macppc/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.octeon/MAKEDEV

  ~ etc.octeon/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.octeon/MAKEDEV.md

  ~ etc.octeon/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.octeon/login.conf

  ~ etc.octeon/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.sgi/MAKEDEV

  ~ etc.sgi/MAKEDEV                       

  > Sync (after tap addition) (claudio@)

etc.sgi/MAKEDEV.md

  ~ etc.sgi/MAKEDEV.md                    

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.sgi/login.conf

  ~ etc.sgi/login.conf                    

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.socppc/MAKEDEV

  ~ etc.socppc/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.socppc/MAKEDEV.md

  ~ etc.socppc/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.socppc/login.conf

  ~ etc.socppc/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.sparc/MAKEDEV

  ~ etc.sparc/MAKEDEV                     

  > Sync (after tap addition) (claudio@)

etc.sparc/MAKEDEV.md

  ~ etc.sparc/MAKEDEV.md                  

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.sparc/login.conf

  ~ etc.sparc/login.conf                  

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.sparc64/MAKEDEV

  ~ etc.sparc64/MAKEDEV                   

  > Sync (after tap addition) (claudio@)

etc.sparc64/MAKEDEV.md

  ~ etc.sparc64/MAKEDEV.md                

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.sparc64/login.conf

  ~ etc.sparc64/login.conf                

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.vax/MAKEDEV

  ~ etc.vax/MAKEDEV                       

  > Sync (after tap addition) (claudio@)

etc.vax/MAKEDEV.md

  ~ etc.vax/MAKEDEV.md                    

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.vax/login.conf

  ~ etc.vax/login.conf                    

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

etc.zaurus/MAKEDEV

  ~ etc.zaurus/MAKEDEV                    

  > Sync (after tap addition) (claudio@)

etc.zaurus/MAKEDEV.md

  ~ etc.zaurus/MAKEDEV.md                 

  > MAKEDEV bits for tap(4)
  > OK dlg@ mpi@ (claudio@)

etc.zaurus/login.conf

  ~ etc.zaurus/login.conf                 

  > ypcipher isn't supported any more - it was already removed from
  > login.conf(5)
  > and pwd_gensalt.c - so remove it from the default /etc/login.conf files as
  > well.
  > ok millert@ (sthen@)

netstart

  ~ netstart                              

  > netstart bits for tap(4) (claudio@)

== games ============================================================= 04/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/games

bcd

  ~ bcd.c                                 

  > include err.h for err() calls added with recent pledge commits. (jsg@)

morse

  ~ morse.c                               

  > include err.h for err() calls added with recent pledge commits. (jsg@)

== lib =============================================================== 05/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib

libc

  ~ asr/res_send_async.c                  

  > Switch to using SOCK_DNS flag, rather than the dnssocket() and
  > dnssonnect() calls.  Be a bit careful crossing over this, need a kernel
  > no older than Monday.
  > ok guenther tedu semarie (deraadt@)

  ~ sys/Makefile.inc                      ~ hidden/asr.h

  > Remove dnssocket() and dnsconnect(), since we decided to use a SOCK_DNS
  > flag instead.
  > ok guenther tedu semarie (deraadt@)

  ~ shlib_version                         

  > crank libc major (deraadt@)

  ~ sys/pledge.2                          

  > Add 3 new pledge requests.  "ps" exposes enough sysctl information for
  > ps-style programs (there are quite a few in the tree, including tmux).
  > "vminfo" exposes a bit more system operation information, which many
  > observation programs want (such as top).  settime allows setting the system
  > time, and will be used to pledge-protect the last ntpd process. (deraadt@)

  ~ Symbols.list                          ~ hidden/signal.h
  ~ sys/Makefile.inc                      ~ compat-43/sigcompat.c
  ~ gen/posix_spawn.c                     ~ gen/siginterrupt.c
  ~ gen/signal.c                          ~ stdlib/abort.c
  ~ include/namespace.h                   ~ arch/alpha/SYS.h
  ~ arch/alpha/sys/sigpending.S           ~ arch/alpha/sys/sigprocmask.S
  ~ arch/alpha/sys/sigsuspend.S           ~ arch/amd64/SYS.h
  ~ arch/amd64/sys/sigprocmask.S          ~ arch/arm/SYS.h
  ~ arch/arm/sys/sigprocmask.S            ~ arch/hppa/sys/sigprocmask.S
  ~ arch/hppa64/sys/sigprocmask.S         ~ arch/i386/SYS.h
  ~ arch/i386/sys/sigprocmask.S           ~ arch/m88k/SYS.h
  ~ arch/m88k/sys/sigprocmask.S           ~ arch/mips64/SYS.h
  ~ arch/mips64/sys/sigpending.S          ~ arch/mips64/sys/sigprocmask.S
  ~ arch/mips64/sys/sigsuspend.S          ~ arch/powerpc/SYS.h
  ~ arch/powerpc/sys/sigprocmask.S        ~ arch/sh/SYS.h
  ~ arch/sh/sys/sigprocmask.S             ~ arch/sparc/SYS.h
  ~ arch/sparc/sys/sigprocmask.S          ~ arch/sparc64/SYS.h
  ~ arch/sparc64/sys/sigprocmask.S        ~ arch/vax/SYS.h
  ~ arch/vax/sys/sigprocmask.S            + sys/pthread_sigmask.c
  + sys/w_sigaction.c                     + sys/w_sigprocmask.c

  > Merge the sigaction() and sigprocmask() overloads/wrappers from libpthread
  > into libc, and move pthread_sigmask() as well (just a trivial wrapper).
  > This provides consistent handling of SIGTHR between single- and
  > multi-threaded
  > programs and is a step in the merge of all the libpthread overloads,
  > providing
  > some ASM and Makefile bits that the other wrappers will need.
  > ok deraadt@ millert@ (guenther@)

  ~ stdlib/system.c                       

  > Loop the waitpid() on EINTR, and save and restore the disposition of
  > SIGINT and SIGQUIT with sigaction() instead of signal() so that all bits
  > are preserved.
  > ok deraadt@ millert@ (guenther@)

  ~ net/rcmdsh.c                          

  > Use waitpid() instead of wait() to avoid returning early from another child
  > exiting, and loop the waitpid() on EINTR
  > ok deraadt@ millert@ (guenther@)

  ~ gen/auth_subr.c                       

  > Fix waitpid() loop again: do the errno check only if waitpid() returns -1
  > and check WIFEXITED() only if it returns != -1.  Delete the logging of
  > errors other than ECHILD: EFAULT and EINVAL are impossible here.
  > ok deraadt@ millert@ (guenther@)

  ~ hidden/net/if.h                       ~ net/if_indextoname.c
  ~ net/if_nameindex.c                    ~ net/if_nametoindex.c

  > Switch if_nameindex(3) to use the new NET_RT_IFNAMES sysctl to get the
  > list of interface names. At the same time switch if_nametoindex(3) and
  > if_indextoname(3) to use if_nameindex(3) instead of getifaddrs(3).
  > if_nameindex(3) exposes much less then getifaddrs(3) and is allowed by
  > pledge(2).
  > With and OK deraadt@ (claudio@)

  ~ nls/catopen.c                         

  > Verify that opened message catalog is valid, i.e. avoid integer overflows
  > and out of boundary accesses.
  > with input by miod, ok stsp (tobias@)

librthread

  ~ rthread_sig.c                         ~ rthread.c
  ~ shlib_version                         

  > Merge the sigaction() and sigprocmask() overloads/wrappers from libpthread
  > into libc, and move pthread_sigmask() as well (just a trivial wrapper).
  > This provides consistent handling of SIGTHR between single- and
  > multi-threaded
  > programs and is a step in the merge of all the libpthread overloads,
  > providing
  > some ASM and Makefile bits that the other wrappers will need.
  > ok deraadt@ millert@ (guenther@)

== regress =========================================================== 06/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/regress

lib

  ~ libc/Makefile                         

  > Add ifnameindex to te libc regress tests (claudio@)

  ~ libc/db/dbtest.c                      

  > Cast ctype functions' arguments to unsigned char. (mmcc@)

sys

  ~ crypto/aes/aestest.c                  

  > Cast isspace() argument to unsigned char. (mmcc@)

  ~ kern/pledge/generic/manager.c         

  > Cast isdigit() argument to unsigned char. (mmcc@)

usr.bin

  ~ ssh/dhgex.sh                          

  > Update expected group sizes to match recent code changes. (dtucker@)

usr.sbin

  ~ syslogd/args-default.pl               ~ syslogd/args-tls-cafile-fake.pl
  ~ syslogd/args-ttymsg-wall.pl           ~ syslogd/funcs.pl
  ~ syslogd/ttylog.c                      + syslogd/args-ttymsg-delay.pl

  > Check that syslogd delays a blocking write to tty and that that all
  > messages still appear on the tty. (bluhm@)

  + syslogd/args-tls-cert-empty.pl        + syslogd/args-tls-cert-noexist.pl
  + syslogd/args-tls-key-empty.pl         + syslogd/args-tls-key-noexist.pl

  > Test syslogd with empty or non existing server certificates and
  > keys. (bluhm@)

== sbin ============================================================== 07/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin

ifconfig

  ~ ifconfig.c                            ~ ifconfig.8

  > tweak the vnetid so it can be optional and therefore cleared/deleted.
  > the abstract vnetid is promoted to a uin32_t, and adds a SIOCDVNETID
  > ioctl so it can be cleared.
  > this is all because i set an assignment on implementing a virtual
  > network interface and the students got confused when vnetid 0 didnt
  > show up in ifconfig output.
  > the vnetid in the vxlan(4) protocol is optional, but the current
  > code confuses 0 with no vnetid being set. this makes it clear.
  > ok reyk@ who also simplified my diff (dlg@)

iked

  ~ Makefile                              

  > push LDSTATIC line down so it's not overridden by makefile.inc. ok reyk
  > (tedu@)

route

  ~ route.c                               ~ show.c

  > route has 3 code paths: monitor (listening on route socket); show
  > (sysctl and then print), change (getsocket, then read/write on that).
  > Refactor lightly and insert pledge "stdio rpath dns" in each case.
  > ok claudio benno phessler (deraadt@)

== share ============================================================= 08/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share

man

  ~ man9/socreate.9                       

  > there's an extra argument to soreceive now.
  > found by teary students. (dlg@)

  ~ man4/tun.4                            + man4/tap.4

  > Adjust tun(4) and tap(4) after the split.
  > Note: "pseudo-device tun" is used by both devices this is not a typo
  > OK dlg@ mpi@ (claudio@)

  ~ man8/man8.alpha/MAKEDEV.8             ~ man8/man8.amd64/MAKEDEV.8
  ~ man8/man8.armish/MAKEDEV.8            ~ man8/man8.armv7/MAKEDEV.8
  ~ man8/man8.aviion/MAKEDEV.8            ~ man8/man8.hppa/MAKEDEV.8
  ~ man8/man8.hppa64/MAKEDEV.8            ~ man8/man8.i386/MAKEDEV.8
  ~ man8/man8.landisk/MAKEDEV.8           ~ man8/man8.loongson/MAKEDEV.8
  ~ man8/man8.luna88k/MAKEDEV.8           ~ man8/man8.macppc/MAKEDEV.8
  ~ man8/man8.octeon/MAKEDEV.8            ~ man8/man8.sgi/MAKEDEV.8
  ~ man8/man8.socppc/MAKEDEV.8            ~ man8/man8.sparc/MAKEDEV.8
  ~ man8/man8.sparc64/MAKEDEV.8           ~ man8/man8.vax/MAKEDEV.8
  ~ man8/man8.zaurus/MAKEDEV.8            

  > Sync (MAKEDEV addition of tap) (claudio@)

  ~ man4/Makefile                         

  > Forgot to install the new tap.4 man page. (claudio@)

  ~ man4/tun.4                            ~ man4/tap.4

  > From jmc@ "the exclusive open propery" does not make sense. Try with 'an'.
  > (claudio@)

== sys =============================================================== 09/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys

arch/alpha/alpha

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/amd64/amd64

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/amd64/conf

  ~ RAMDISK_CD                            

  > enable viornd on RAMDISK_CD
  > ok kettenis@, deraadt@ (mlarkin@)

arch/arm/arm

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/aviion/aviion

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/hppa/hppa

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/hppa64/hppa64

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/i386/conf

  ~ RAMDISK_CD                            

  > enable viornd on RAMDISK_CD
  > ok kettenis@, deraadt@ (mlarkin@)

arch/i386/i386

  ~ pmap.c                                ~ pmapae.c

  > Zap pv allocation abstraction layer.
  > ok mlarkin@ (kettenis@)

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/i386/include

  ~ pmap.h                                

  > Zap pv allocation abstraction layer.
  > ok mlarkin@ (kettenis@)

arch/landisk/landisk

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/loongson/loongson

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/luna88k/luna88k

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/macppc/macppc

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/octeon/octeon

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/sgi/sgi

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/socppc/socppc

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/sparc/sparc

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/sparc64/sparc64

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

arch/vax/vax

  ~ conf.c                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

conf

  ~ GENERIC                               

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

dev/ic

  ~ mpi.c                                 

  > replace pointer arithmetic and casts with offsetof
  > ok dlg@ krw@ (jsg@)

dev/pci

  ~ drm/ttm/ttm_bo.c                      ~ drm/ttm/ttm_bo_vm.c

  > Fix uvm_object reference counting.  While these reference counts aren't
  > reaaly
  > used (ttm bo's have their own reference counts), we can't let the reference
  > count go negative as this will freak out the upper uvm layers.  Since the
  > uvm_object reference count is still a useful debugging tool (ddb will
  > display
  > it for example), adjust it such that the uvm_object reference count
  > represents
  > the number of references held by the uvm layer.
  > tested by matthieu@
  > ok jsg@ (kettenis@)

kern

  ~ kern_pledge.c                         

  > Allow hw.ncpu sysctl (a few reasons showed up in my mailbox rapidly..)
  > (deraadt@)

  ~ kern_pledge.c                         

  > Add 3 new pledge requests.  "ps" exposes enough sysctl information for
  > ps-style programs (there are quite a few in the tree, including tmux).
  > "vminfo" exposes a bit more system operation information, which many
  > observation programs want (such as top).  settime allows setting the system
  > time, and will be used to pledge-protect the last ntpd process. (deraadt@)

  ~ kern_pledge.c                         

  > Introduce a new sysctl NET_RT_IFNAMES that returns only ifnames to ifindex
  > mappings. This will be used by if_nameindex(3), if_nametoindex(3) and
  > if_indextoname(3) soon to fix the issues in pledge because of inet6 link
  > local addressing.
  > OK mpi@ benno@ deraadt@
  > The libc version will follow soon so better start updating your kernels
  > (claudio@)

  ~ kern_pledge.c                         

  > Allow SIOCGIFINFO_IN6 (deraadt@)

msdosfs

  ~ bootsect.h                            ~ bpb.h
  ~ denode.h                              ~ direntry.h
  ~ fat.h                                 ~ msdosfs_conv.c
  ~ msdosfs_denode.c                      ~ msdosfs_fat.c
  ~ msdosfs_lookup.c                      ~ msdosfs_vfsops.c
  ~ msdosfs_vnops.c                       ~ msdosfsmount.h

  > Nuke a bunch of leading/embedded/trailing whitespace so the code can be
  > read without generating spurious headaches. (krw@)

  ~ msdosfs_denode.c                      ~ msdosfs_fat.c
  ~ msdosfs_lookup.c                      ~ msdosfs_vfsops.c
  ~ msdosfs_vnops.c                       

  > Fix printf() types so kernel compiles with or w/o MSDOSFS_DEBUG.
  > e.g. print pointers with %p instead of %08x. No changes outside of
  > MSDOSFS_DEBUG. (krw@)

  ~ msdosfs_vnops.c                       

  > Fix renaming in the root directory by correctly setting directory
  > offset.
  > From Serguey Parkhomovsky via bugs@, in response to problem report
  > from matthieu@. Same fix is in NetBSD for one.
  > ok tedu@ (krw@)

net

  ~ hfsc.c                                

  > remove the pointer from hfsc_class structs back to hfsc_if.
  > you get to hfsc_class via a hfsc_if, so just pass the hfsc_if around
  > on the stack when we need it rather than following the pointer back.
  > most of this change is passing the hif on the stack.
  > ok mpi@ henning@ (dlg@)

  ~ if.h                                  ~ if_vxlan.c
  ~ if_vxlan.h                            

  > tweak the vnetid so it can be optional and therefore cleared/deleted.
  > the abstract vnetid is promoted to a uin32_t, and adds a SIOCDVNETID
  > ioctl so it can be cleared.
  > this is all because i set an assignment on implementing a virtual
  > network interface and the students got confused when vnetid 0 didnt
  > show up in ifconfig output.
  > the vnetid in the vxlan(4) protocol is optional, but the current
  > code confuses 0 with no vnetid being set. this makes it clear.
  > ok reyk@ who also simplified my diff (dlg@)

  ~ hfsc.c                                

  > counting packets in hif_packets in hfsc_if is redundant.
  > the ifqueue struct has the same information, and hif_packets is never
  > read separately. trim it. (dlg@)

  ~ hfsc.c                                

  > inline the hif_eligible TAILQ.
  > make hif_eligible in hfsc_if a TAILQ rather than a pointer to a
  > TAILQ that gets allocated separately.
  > "look ma, i saved 4 or 8 bytes" (dlg@)

  ~ hfsc.c                                

  > inline the hfsc_active TAILQ.
  > make cl_actc in hfsc_class a TAILQ rather than a pointer to a TAILQ
  > that gets allocated seaprately. (dlg@)

  ~ hfsc.c                                

  > pass the right sizes to free. (dlg@)

  ~ if.h                                  ~ rtsock.c

  > Introduce a new sysctl NET_RT_IFNAMES that returns only ifnames to ifindex
  > mappings. This will be used by if_nameindex(3), if_nametoindex(3) and
  > if_indextoname(3) soon to fix the issues in pledge because of inet6 link
  > local addressing.
  > OK mpi@ benno@ deraadt@
  > The libc version will follow soon so better start updating your kernels
  > (claudio@)

  ~ rtsock.c                              

  > It was possible to create a gateway route pointing to another gateway
  > route by changing the gateway.  Despite the error message when doing
  > so, the route did actually change.  The gateway is modified by
  > rt_setgate(), the error is created by rt_getifa().  Do these
  > operations the other way around.
  > OK mpi@ (bluhm@)

  ~ route.c                               

  > Update route entries reference counters atomically.
  > This allows us to only grab the KERNEL_LOCK when the last reference
  > of an entry has been dropped.
  > For symmetry also grab the KERNEL_LOCK inside rtalloc(9).
  > ok dlg@, bluhm@ (mpi@)

  ~ if_tun.c                              

  > Split up tun(4) into tun(4) & tap(4). Killing the link0 magic to switch
  > between modes. The two drivers still share most of the code but the mode
  > switcher is gone.
  > OK dlg@ mpi@ (claudio@)

netinet

  ~ in_pcb.c                              

  > ``rt_ifp'' cannot be NULL.
  > ok claudio@ (mpi@)

netinet6

  ~ ip6_input.c                           

  > replace pointer arithmetic and casts with offsetof
  > ok mpi@ bluhm@ (jsg@)

netmpls

  ~ mpls_input.c                          

  > rtfree(9) and rtalloc(9) no longer need to be called under KERNEL_LOCK.
  > (mpi@)

sys

  ~ pledge.h                              

  > Add 3 new pledge requests.  "ps" exposes enough sysctl information for
  > ps-style programs (there are quite a few in the tree, including tmux).
  > "vminfo" exposes a bit more system operation information, which many
  > observation programs want (such as top).  settime allows setting the system
  > time, and will be used to pledge-protect the last ntpd process. (deraadt@)

  ~ sockio.h                              

  > tweak the vnetid so it can be optional and therefore cleared/deleted.
  > the abstract vnetid is promoted to a uin32_t, and adds a SIOCDVNETID
  > ioctl so it can be cleared.
  > this is all because i set an assignment on implementing a virtual
  > network interface and the students got confused when vnetid 0 didnt
  > show up in ifconfig output.
  > the vnetid in the vxlan(4) protocol is optional, but the current
  > code confuses 0 with no vnetid being set. this makes it clear.
  > ok reyk@ who also simplified my diff (dlg@)

  ~ socket.h                              ~ sysctl.h

  > Introduce a new sysctl NET_RT_IFNAMES that returns only ifnames to ifindex
  > mappings. This will be used by if_nameindex(3), if_nametoindex(3) and
  > if_indextoname(3) soon to fix the issues in pledge because of inet6 link
  > local addressing.
  > OK mpi@ benno@ deraadt@
  > The libc version will follow soon so better start updating your kernels
  > (claudio@)

  ~ conf.h                                

  > Allocate a new major for tap(4) also note that pseudo-device tun is for tap
  > as well. OK dlg@ mpi@ (claudio@)

uvm

  ~ uvm_swap.c                            

  > Add 3 new pledge requests.  "ps" exposes enough sysctl information for
  > ps-style programs (there are quite a few in the tree, including tmux).
  > "vminfo" exposes a bit more system operation information, which many
  > observation programs want (such as top).  settime allows setting the system
  > time, and will be used to pledge-protect the last ntpd process. (deraadt@)

== usr.bin =========================================================== 10/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin

calendar

  - calendars/de_DE.ISO_8859-1/calendar.all
  - calendars/de_DE.ISO_8859-1/calendar.feiertag
  - calendars/de_DE.ISO_8859-1/calendar.geschichte
  - calendars/de_DE.ISO_8859-1/calendar.kirche
  - calendars/de_DE.ISO_8859-1/calendar.literatur
  - calendars/de_DE.ISO_8859-1/calendar.musik
  - calendars/de_DE.ISO_8859-1/calendar.wissenschaft
  - calendars/fr_FR.ISO8859-1/calendar.all
  - calendars/fr_FR.ISO8859-1/calendar.fetes
  - calendars/fr_FR.ISO8859-1/calendar.french
  - calendars/fr_FR.ISO8859-1/calendar.jferies
  - calendars/fr_FR.ISO8859-1/calendar.proverbes
  - calendars/hr_HR.ISO_8859-2/calendar.all
  - calendars/hr_HR.ISO_8859-2/calendar.praznici
  - calendars/ru_RU.KOI8-R/calendar.all   
  - calendars/ru_RU.KOI8-R/calendar.common
  - calendars/ru_RU.KOI8-R/calendar.history
  - calendars/ru_RU.KOI8-R/calendar.msk   
  - calendars/ru_RU.KOI8-R/calendar.orthodox
  - calendars/ru_RU.KOI8-R/calendar.pagan
  - calendars/ru_RU.KOI8-R/calendar.primety
  ~ calendars/calendar.croatian           ~ calendars/calendar.french
  ~ calendars/calendar.german             ~ calendars/calendar.history
  ~ calendars/calendar.russian            + calendars/de_DE.UTF-8/calendar.all
  + calendars/de_DE.UTF-8/calendar.feiertag
  + calendars/de_DE.UTF-8/calendar.geschichte
  + calendars/de_DE.UTF-8/calendar.kirche
  + calendars/de_DE.UTF-8/calendar.literatur
  + calendars/de_DE.UTF-8/calendar.musik
  + calendars/de_DE.UTF-8/calendar.wissenschaft
  + calendars/fr_FR.UTF-8/calendar.all    
  + calendars/fr_FR.UTF-8/calendar.fetes
  + calendars/fr_FR.UTF-8/calendar.french
  + calendars/fr_FR.UTF-8/calendar.jferies
  + calendars/fr_FR.UTF-8/calendar.proverbes
  + calendars/hr_HR.UTF-8/calendar.all    
  + calendars/hr_HR.UTF-8/calendar.praznici
  + calendars/ru_RU.UTF-8/calendar.all    
  + calendars/ru_RU.UTF-8/calendar.common
  + calendars/ru_RU.UTF-8/calendar.history
  + calendars/ru_RU.UTF-8/calendar.msk    
  + calendars/ru_RU.UTF-8/calendar.orthodox
  + calendars/ru_RU.UTF-8/calendar.pagan
  + calendars/ru_RU.UTF-8/calendar.primety

  > translate calendar files to utf-8 (tedu@)

  ~ calendars/ru_RU.UTF-8/calendar.primety

  > i assume this file needs a LANG like all the rest (tedu@)

  ~ Makefile                              

  > forgot to commit makefile change for utf-8 calendars (tedu@)

  ~ io.c                                  ~ calendar.1

  > Fix BODUN handling after switch to UTF-8.
  > Still wondering if this functionality should be removed, but I'll leave
  > the decision to those who drink alcohol.
  > Input from & okay tedu@. (zhuk@)

  ~ calendar.c                            ~ day.c
  ~ io.c                                  

  > A bit of whitespace cleanup, to make further diffs smaller. (zhuk@)

  ~ io.c                                  

  > delete ) that jumped in (deraadt@)

  - calendars/ru_RU.UTF-8/calendar.msk    ~ calendars/ru_RU.UTF-8/calendar.all
  ~ calendars/ru_RU.UTF-8/calendar.common
  ~ calendars/ru_RU.UTF-8/calendar.history
  ~ calendars/ru_RU.UTF-8/calendar.orthodox
  ~ calendars/ru_RU.UTF-8/calendar.pagan
  ~ calendars/ru_RU.UTF-8/calendar.primety

  > Fix a couple of issues in Russian calendar entries:
  > * Fix #ifndef safeguards (rename/add where missing);
  > * Use consistent spelling for year when it's mentioned in day desc;
  > * Tweak some wrong casing cases;
  > * Remove calendar.msk since Moscow doesn't have summer time anymore,
  > and that was the only thing this file was about;
  > * A few other corrections.
  > Some corrections from Mikhail on tech@, thanks!
  > Small fix & okay from mikeb@. (zhuk@)

fstat

  ~ fstat.c                               

  > getnameinfo() no longer needs pledge "route".  this drops to
  > pledge "stdio rpath". (deraadt@)

locate

  ~ locate/fastfind.c                     ~ locate/locate.1
  ~ locate/locate.c                       

  > mmap is the default. it's effectively the only tested codepath. so burn
  > down
  > the stdio code path.
  > pros: everything is simpler. how can anyone read code this heavily spliced
  > with ifdef?
  > cons: you can't pipe a database into locate. who does this???
  > ok deraadt (tedu@)

  ~ locate/locate.c                       

  > undent includes, from michael reed (tedu@)

  ~ locate/locate.c                       

  > correct spelling of statistic in function name, from Pablo Hernandez
  > (tedu@)

  ~ locate/Makefile                       

  > don't need MMAP to compile now (tedu@)

mandoc

  ~ term.c                                

  > apply bold and italic to all non-ASCII Unicode codepoints,
  > fixing input like \fB\('e; issue reported by bentley@ (schwarze@)

nc

  ~ netcat.c                              

  > Initial pledge of netcat - unfortunately flawed because fiddling the
  > rtableid
  > in a socket option can be pretty scary and there is no better interface for
  > this.
  > so if the -V option is used you get no pledge at all.. Otherwise, do what
  > works for the various options.  Still needs refinement for tls to drop
  > rpath,
  > and a better solution for the routing table stuff (beck@)

netstat

  ~ main.c                                

  > simplify backcompat. no more support for kernel or kmem on argv (tedu@)

  ~ main.c                                

  > further simplify argv (tedu@)

nfsstat

  ~ nfsstat.c                             

  > cleanup argv handling a bit (tedu@)

su

  ~ su.c                                  

  > pledge "stdio rpath getpw proc exec id" at start, much like doas.
  > 2 further pledges are possible, not as many as doas can do, because the
  > order of some su operations is a bit different.  also it is trying
  > harder to please non-root nfs mounts? (deraadt@)

tmux

  ~ tty.c                                 

  > Use tty_term_flag not _has for XT, and make -2 force direct use of
  > 256-colour escape sequences (so setaf/setab can be bypassed if needed).
  > (nicm@)

  ~ format.c                              ~ tmux.1
  ~ tmux.h                                ~ window-copy.c

  > Format for scroll position, from Jorge Morante. (nicm@)

  ~ server.c                              ~ tmux.c

  > tmux can call pledge() in main with large set and then reduce it
  > slightly in the server to "stdio rpath wpath cpath fattr unix recvfd
  > proc exec tty ps". (nicm@)

  ~ cmd-find.c                            

  > If $TMUX is set, and we are unsure about the session, use it. (nicm@)

  ~ cmd-new-session.c                     ~ cmd-new-window.c
  ~ cmd-split-window.c                    ~ tty.c

  > Remove some unnecessary checks before free(). (nicm@)

  ~ server-client.c                       

  > Pasting mouse escape sequences is unlikely, so skip them when working
  > out whether the user is pasting. (nicm@)

top

  ~ top.c                                 

  > With new pledge "ps" and "vminfo" requests, ps/top/w become possible.
  > (deraadt@)

w

  ~ w.c                                   

  > With new pledge "ps" and "vminfo" requests, ps/top/w become possible.
  > (deraadt@)

== usr.sbin ========================================================== 11/11 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin

cron

  ~ atrun.c                               ~ config.h
  ~ do_command.c                          ~ misc.c
  ~ pathnames.h                           

  > remove some more ifdef maziness (tedu@)

iostat

  ~ iostat.c                              

  > simplify argv back compat (tedu@)

ldpctl

  ~ ldpctl.c                              

  > Make use of pledge(2).
  > ok deraadt@ (renato@)

ldpd

  ~ lde.c                                 ~ ldpe.c

  > Add pledge(2) to the child processes.
  > This is almost identical to the eigrpd(8) pledge diff, with the exception
  > that the parent process can not be pledged bacause of a SIOCSETMPWCFG
  > ioctl used to configure pseudowires.
  > Looks good to deraadt@. (renato@)

ndp

  ~ ndp.c                                 

  > ndp -n -d <addr> does dns lookups, even with -n. it should not.
  > found through pledge. ok deraadt@ (benno@)

ntpd

  ~ client.c                              ~ control.c
  ~ ntp.c                                 ~ ntpd.conf.5
  ~ ntpd.h                                ~ parse.y

  > Allowing upstream servers of ntp being in multiple routing tables is
  > non-sensical.  The dns lookups happened in the process routing table
  > (usually '0'), which is very likely to have different results from the
  > other routing domains.  If you do depend on having this behaviour,
  > you'll need to use pf to cross the rtable boundary.
  > "listen on * rtable X" is still supported.
  > Users of "server * rtable X" will need to switch to launching ntpd with
  > "route -T X exec /usr/sbin/ntpd"
  > OK deraadt@ (phessler@)

  ~ ntpd.c                                

  > Rather than re-opening the driftfile to write, keep it open; rewinding
  > and coping with error conditions... that lets us avoid a pledge "wpath".
  > Putting it all together, this lets the master ntpd pledge "stdio rpath
  > inet settime proc id".  It works like this: "rpath" to load the
  > certificates, "proc" to create constraint processes, "id" to chroot
  > and lock the constraint processes into a jail, then "inet" to open a
  > https session.  "settime" is used by the master to manage the system
  > time when the ntp-speaking engine instructs the master.
  > with help from naddy (deraadt@)

relayd

  ~ check_icmp.c                          

  > let the icmp check use getsockopt IP_IPDEFTTL to get the default ttl
  > instead of using sysctl. makes it possible to pledge hce. (benno@)

smtpd

  ~ sendmail.8                            ~ smtpd.8

  > document -h flag and add a .Xr
  > ok sunil millert (jung@)

syslogd

  ~ syslogd.c                             ~ syslogd.h
  ~ ttymsg.c                              

  > If writing to a tty blocks, syslogd forked and tried to write again
  > in a background process.  A potential fork(2) at every message is
  > bad, so replace this with an event.  As a bonus the syslogd child
  > process does not need to pledge "proc" anymore.  Also limit the
  > number of delayed write events.
  > OK deraadt@ (bluhm@)

===============================================================================
_______________________________________________
odc mailing list
[email protected]
http://www.squish.net/mailman/listinfo/odc

Reply via email to