CVS: cvs.openbsd.org: src

2018-08-08 Thread Ayaka Koshibe
CVSROOT:/cvs Module name:src Changes by: akosh...@cvs.openbsd.org2018/08/08 21:35:19 Modified files: sys/net: if.c Log message: Currently, attempting to move an immovable lo(4) to a new rdomain will fail with an EPERM, but the target rdomain will still be

CVS: cvs.openbsd.org: src

2018-08-08 Thread Jonathan Matthew
CVSROOT:/cvs Module name:src Changes by: jmatt...@cvs.openbsd.org2018/08/08 19:41:48 Modified files: sys/scsi : mpath_hds.c Log message: Remove the port id check entirely. We don't do anything with the port id after that, so it seems like a silly reason to

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 16:59:33 Modified files: libexec/lockspool: lockspool.c Log message: lockspool only plays with files in _PATH_MAILDIR, so unveil that path.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 16:57:12 Modified files: usr.sbin/tcpdump: privsep.c Log message: mestre and I can find no reason why the pledge has "unix". Disable that and start listening for failure reports.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 16:56:42 Modified files: usr.sbin/ntpd : ntpd.c Log message: ntpd unveils the cert.pem "r" file (which is passed-over-socket to the constraints process), and /usr/sbin/ntpd "x" to perform

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 16:55:14 Modified files: usr.bin/who: who.c Log message: pledge with "unveil" at the top, so that the various modes can unveil the files they inspect a little later.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Alexandre Ratchov
CVSROOT:/cvs Module name:src Changes by: ratc...@cvs.openbsd.org 2018/08/08 16:31:43 Modified files: usr.bin/sndiod : sndiod.c Log message: Use unveil(2) in the helper process to disallow access to other files than the devices specified with -f and -q options. ok

CVS: cvs.openbsd.org: src

2018-08-08 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2018/08/08 14:57:53 Modified files: sys/arch/arm64/dev: mainbus.c Log message: Support DMA coherent devices that attach to mainbus(4) as well. ok patrick@

CVS: cvs.openbsd.org: src

2018-08-08 Thread Mark Kettenis
CVSROOT:/cvs Module name:src Changes by: kette...@cvs.openbsd.org2018/08/08 14:56:49 Modified files: sys/arch/arm64/dev: agintc.c Log message: Fix the ITLinesNumber mask and bump the number of supprted redistributors up to 24. ok patrick@

CVS: cvs.openbsd.org: src

2018-08-08 Thread Ricardo Mestre
CVSROOT:/cvs Module name:src Changes by: mes...@cvs.openbsd.org 2018/08/08 14:15:17 Modified files: usr.bin/ctfconv: ctfconv.c Log message: add unveil(2) to ctfconv(1) Once we know what the input file is, usually /bsd.gdb, we can unveil it in read mode. If we also

Re: CVS: cvs.openbsd.org: src

2018-08-08 Thread Florian Obser
On Wed, Aug 08, 2018 at 11:26:52AM -0600, Florian Obser wrote: > CVSROOT: /cvs > Module name: src > Changes by: flor...@cvs.openbsd.org 2018/08/08 11:26:52 > > Modified files: > sbin/ifconfig : ifconfig.c > > Log message: > ifconfig cannot be pledged because of its overwhelming

CVS: cvs.openbsd.org: src

2018-08-08 Thread Ricardo Mestre
CVSROOT:/cvs Module name:src Changes by: mes...@cvs.openbsd.org 2018/08/08 13:35:47 Modified files: usr.bin/mixerctl: mixerctl.c Log message: add unveil(2) to mixerctl(1) after we know what is the mixer device to be used, either through MIXERDEVICE env var, the

CVS: cvs.openbsd.org: src

2018-08-08 Thread Rob Pierce
CVSROOT:/cvs Module name:src Changes by: r...@cvs.openbsd.org2018/08/08 12:50:38 Modified files: usr.sbin/snmpctl: snmpclient.c Log message: Some unsigned long to unsigned int cleanup from recent ber (type) changes. ok claudio@

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 12:46:04 Modified files: usr.sbin/acpidump: acpidump.c Log message: Unveil the special files needed for reading AML tables, and the directory for placement. We can only protect the directory

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 12:32:51 Modified files: usr.bin/doas : doas.c Log message: After authentication is complete, unveil login.conf "r" (to discover login tweaks), and walk the path (would could be $PATH, or not)

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo Buehler
CVSROOT:/cvs Module name:src Changes by: t...@cvs.openbsd.org2018/08/08 12:21:02 Modified files: lib/libcrypto/man: OPENSSL_sk_new.3 Log message: typo: macro-generates wrappers -> macro-generated wrappers

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 11:52:46 Modified files: usr.bin/from : from.c Log message: An early pledge takes away many risk factors during spool opening/parsing. This is worthwhile keeping, so add "unveil" to defer

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 11:47:44 Modified files: usr.sbin/acme-client: http.c http.h netproc.c Log message: In netproc process, unveil to only expose the CA file. ok florian

CVS: cvs.openbsd.org: src

2018-08-08 Thread Florian Obser
CVSROOT:/cvs Module name:src Changes by: flor...@cvs.openbsd.org 2018/08/08 11:26:52 Modified files: sbin/ifconfig : ifconfig.c Log message: ifconfig cannot be pledged because of its overwhelming amount of used ioctls. Furthermore due to the way the command line parser

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 09:30:29 Modified files: sbin/ifconfig : ifconfig.c Log message: tabs are ok at start of line, but internally space seperation is the norm

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 08:38:31 Modified files: bin/ps : ps.c Log message: unveil dev.db "r" for devname(), /dev "r", and in the non-sysctl case some kernel memory/symbol files.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 08:35:38 Modified files: usr.bin/tcpbench: tcpbench.c Log message: In the early pledge, add "unveil" to permit changes a little later on. If kernel variables are being watched unveil /dev/mem,

CVS: cvs.openbsd.org: src

2018-08-08 Thread Ingo Schwarze
CVSROOT:/cvs Module name:src Changes by: schwa...@cvs.openbsd.org2018/08/08 08:29:42 Modified files: share/man/man7 : mandoc_char.7 Log message: Even though we strongly discourage escaping hyphens in manual pages in general, when introducing the *typographic*

CVS: cvs.openbsd.org: src

2018-08-08 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2018/08/08 08:29:05 Modified files: usr.sbin/bgpd : bgpd.h rde_attr.c Log message: Move struct wire_largecommunity to rde_attr.c since it is only used internally

CVS: cvs.openbsd.org: src

2018-08-08 Thread Alexandre Ratchov
CVSROOT:/cvs Module name:src Changes by: ratc...@cvs.openbsd.org 2018/08/08 08:25:50 Modified files: sys/dev/usb: uaudio.c Log message: Fix possible division by zero caused by bogus usb descriptors. From Michael W. Bombardieri. Thanks.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Ingo Schwarze
CVSROOT:/cvs Module name:src Changes by: schwa...@cvs.openbsd.org2018/08/08 08:15:21 Modified files: share/man/man7 : mandoc_char.7 Log message: Reorder the text in the "Dashes and Hyphens" subsection to keep the simplest and most important instructions together

CVS: cvs.openbsd.org: src

2018-08-08 Thread Ingo Schwarze
CVSROOT:/cvs Module name:src Changes by: schwa...@cvs.openbsd.org2018/08/08 08:03:17 Modified files: share/man/man7 : mandoc_char.7 Log message: Clarify the confusing "(text)" annotation in the character lists. In some cases, it meant "render as an ASCII

CVS: cvs.openbsd.org: src

2018-08-08 Thread Ingo Schwarze
CVSROOT:/cvs Module name:src Changes by: schwa...@cvs.openbsd.org2018/08/08 07:53:55 Modified files: share/man/man7 : mandoc_char.7 Log message: After years of deliberation, finally provide a clear recommendation for hyphens and minus signs in manual pages. Since

CVS: cvs.openbsd.org: src

2018-08-08 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2018/08/08 07:52:30 Modified files: usr.sbin/bgpd : parse.y Log message: Merge getcommunity() and getlargecommunity() into one function that takes a flag if it is large or not. Makes code more reusable.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2018/08/08 07:49:21 Modified files: usr.sbin/bgpd : rde_update.c Log message: Make the (non-)transitive handling of ext communities a bit more obvious.

CVS: cvs.openbsd.org: src

2018-08-08 Thread Theo de Raadt
CVSROOT:/cvs Module name:src Changes by: dera...@cvs.openbsd.org 2018/08/08 07:46:44 Modified files: distrib/sets/lists/comp: md.armv7 Log message: sync

CVS: cvs.openbsd.org: src

2018-08-08 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2018/08/08 07:32:36 Modified files: usr.sbin/bgpd : rde_attr.c Log message: One ; too much

CVS: cvs.openbsd.org: src

2018-08-08 Thread Claudio Jeker
CVSROOT:/cvs Module name:src Changes by: clau...@cvs.openbsd.org 2018/08/08 07:08:54 Modified files: usr.sbin/bgpd : rde.c rde.h Log message: Update the RIB after a config reload in the background. This moves the heavy bits into the background and so the RDE is able to

CVS: cvs.openbsd.org: src

2018-08-08 Thread Patrick Wildt
CVSROOT:/cvs Module name:src Changes by: patr...@cvs.openbsd.org 2018/08/08 05:06:47 Modified files: sys/dev/fdt: imxgpio.c Log message: Implement IRQ masking and unmasking in imxgpio(4).

CVS: cvs.openbsd.org: src

2018-08-08 Thread Patrick Wildt
CVSROOT:/cvs Module name:src Changes by: patr...@cvs.openbsd.org 2018/08/08 05:06:33 Modified files: sys/arch/arm/include: fdt.h sys/arch/arm64/arm64: intr.c sys/arch/arm64/include: fdt.h intr.h sys/arch/armv7/armv7: intr.c

CVS: cvs.openbsd.org: src

2018-08-08 Thread Kevin Lo
CVSROOT:/cvs Module name:src Changes by: ke...@cvs.openbsd.org 2018/08/08 03:17:45 Modified files: sys/dev/pci: pcidevs.h pcidevs_data.h Log message: regen

CVS: cvs.openbsd.org: src

2018-08-08 Thread Kevin Lo
CVSROOT:/cvs Module name:src Changes by: ke...@cvs.openbsd.org 2018/08/08 03:16:57 Modified files: sys/dev/pci: if_rtwn.c pcidevs Log message: Fix Realtek product name from RT8188 to RTL8188CE ok stsp@

CVS: cvs.openbsd.org: src

2018-08-08 Thread Klemens Nanni
CVSROOT:/cvs Module name:src Changes by: k...@cvs.openbsd.org2018/08/08 02:42:49 Modified files: sys/arch/sparc64/sparc64: emul.c Log message: r1.19 removed a bunch of code, but not enough, and left dead code around. >From Miod Vallat, "Go ahead" kettenis

CVS: cvs.openbsd.org: src

2018-08-08 Thread Sebastian Benoit
CVSROOT:/cvs Module name:src Changes by: be...@cvs.openbsd.org 2018/08/08 00:54:50 Modified files: usr.sbin/bgpd : rde.c rde.h rde_rib.c Log message: hide rib[] internals in new rib_valid() function ok claudio@