summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add a note about the pf update, mark libexec/ftp-proxy as obsolete and bumpmlaier2007-07-033-1/+10
| | | | | | __FreeBSD_version for ports. Approved by: re (implicit)
* Add two place holders in struct pf_rule for future netgraph integration.mlaier2007-07-031-0/+2
| | | | | Submitted by: Ermal Luçi Approved by: re (kensmith)
* Link pf 4.1 to the build:mlaier2007-07-0322-76/+222
| | | | | | | | - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith)
* Commit resolved import of OpenBSD 4.1 pf userland from perforce.mlaier2007-07-0328-3423/+3641
| | | | Approved by: re (kensmith)
* This commit was generated by cvs2svn to compensate for changes in r171169,mlaier2007-07-0321-7/+5188
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import pf userland from OpenBSD 4.1 and (for ftp-proxy) libevent 1.3b asmlaier2007-07-0343-2655/+8750
| | | | | | | | a local lib.
* | Commit resolved import of OpenBSD 4.1 pf from perforce.mlaier2007-07-0313-2488/+3410
| | | | | | | | Approved by: re (kensmith)
* | Commit the change from FAST_IPSEC to IPSEC. The FAST_IPSECgnn2007-07-0343-219/+209
| | | | | | | | | | | | | | | | option is now deprecated, as well as the KAME IPsec code. What was FAST_IPSEC is now IPSEC. Approved by: re Sponsored by: Secure Computing
* | This commit was generated by cvs2svn to compensate for changes in r171164,mlaier2007-07-031-0/+415
|\ \ | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Import pf from OpenBSD 4.1mlaier2007-07-0312-1690/+2973
| | |
| * | Loopback four fixes from OpenBSD for problems reported to the freebsd-pfmlaier2005-09-082-21/+67
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | mailing list onto the vendor branch: pf_ioctl.c Revision 1.153 Sun Aug 7 11:37:33 2005 UTC by dhartmei | verify ticket in DIOCADDADDR, from Boris Polevoy, ok deraadt@ pf_ioctl.c Revision 1.158 Mon Sep 5 14:51:08 2005 UTC by dhartmei | in DIOCCHANGERULE, properly initialize table, if used in NAT rule. | from Boris Polevoy <vapcom at mail dot ru>, ok mcbride@ pf.c Revision 1.502 Mon Aug 22 11:54:25 2005 UTC by dhartmei | when nat'ing icmp 'connections', replace icmp id with proxy values | (similar to proxy ports for tcp/udp). not all clients use | per-invokation random ids, this allows multiple concurrent | connections from such clients. | thanks for testing to Rod Whitworth, "looks ok" markus@ pf.c Revision 1.501 Mon Aug 22 09:48:05 2005 UTC by dhartmei | fix rdr to bitmask replacement address pool. patch from Max Laier, | reported by Boris Polevoy, tested by Jean Debogue, ok henning@
| * | Import pf from OpenBSD 3.7 (OPENBSD_3_7 as of today)mlaier2005-05-0311-1093/+2403
| | |
| * | Import a fix from the OpenBSD-stable branch, that slipped by my previousmlaier2004-08-121-2/+3
| | | | | | | | | | | | import. Sorry.
| * | Import a couple of fixes from OpenBSD-current, which did not make -stable inmlaier2004-08-124-7/+17
| | | | | | | | | | | | | | | | | | OpenBSD for various reasons. Discussed with: yongari
| * | Import from OpenBSD stable branchmlaier2004-07-171-42/+53
| | |
| * | Import OpenBSD stable branch.mlaier2004-06-173-19/+16
| | |
* | | Fix hardware checksum verification on fragments.mlaier2007-07-031-0/+9
| | | | | | | | | | | | | | | | | | | | | MFC after: 7 days Reported/tested by: Hugo Koji Kobayashi, Vadym Chepkov Reviewed/help by: yongari Approved by: re (kensmith)
* | | Fixing !INET6 + FAST_IPSEC builds.avatar2007-07-031-1/+1
| | | | | | | | | | | | | | | Reviewed by: gnn Approved by: re (kensmith)
* | | Recover from some major omissions/problems with the 24XX port.mjacob2007-07-024-21/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | First, we were never correctly checking for a 24XX Status Type 0 response- that cased us to fall through to evaluate status for commands as if this were a 2100/2200/2300 Status Type 0 response. This is *close*, but not quite the same. This has been reported to be apparent with some wierd lun configuration problems with some arrays. It became glaringly apparent on sparc64 where none of the correct byte swap things were done. Fixing this omission then caused a whole universe shifting debug cycle of endian issues for the 2400. The manual for 24XX f/w turns out to be wrong about the endianness of a couple of entities. The lun and cdb fields for the type 7 request are *not* unconditionally big endian- they happen to be opposite of whatever the endian of the current machine type is. Same with the sense data for the 24XX type 0 response. While we're at it investigate and resolve some NVRAM endian issues. Approved by: re (ken) MFC after: 3 days
* | | - Consolidate the code that free's chunks to actually alsorrs2007-07-027-43/+97
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | call the sctp_free_remote_address() function. - Assure that when we allocate a chunk the whoTo is NULL, also when we free it and place it into the cache we NULL it (that way the consolidation code will always work). - Fix a small race, when a empty data holder is left on the stream out queue, and both sides do a shutdown, the empty data holder would prevent us from sending a SHUTDOWN-ACK and at the same time we never would cleanup the empty holder (since nothing was ever in queue). We now add a utility function that a) cleans up empty holders and b) properly determines if there are still pending data chunks on the stream out wheel. Approved by: re@freebsd.org (Ken Smith)
* | | Continue pre-7.0 privilege cleanup: update suser(9) comments to be priv(9)rwatson2007-07-022-3/+3
| | | | | | | | | | | | | | | | | | comments. Approved by: re (bmah)
* | | Continue kernel privilege cleanup for 7.0: unstaticize suser_enabled andrwatson2007-07-022-2/+1
| | | | | | | | | | | | | | | | | | | | | stop declaring it in systm.h -- it's used only in kern_priv.c and is not required elsewhere. Approved by: re (kensmith)
* | | ed(1) no longer relies on crypto library when built for the fixit media.kensmith2007-07-021-1/+1
| | | | | | | | | | | | Approved by: re (hrs)
* | | Don't include encryption features of ed(1) when building for thekensmith2007-07-021-0/+2
| | | | | | | | | | | | | | | | | | | | | "rescue media" bundled with releases. Suggested by: ru Approved by: re (hrs)
* | | - Add some needed error checking on bad fd passing in the sctprrs2007-07-021-6/+10
| | | | | | | | | | | | | | | | | | syscalls. Approved by: re@freebsd.org (Ken Smith) Obtained from: Weongyo Jeong (weongyo.jeong@gmail.com)
* | | - Removes some incorrect error returns (errno was being overriden inrrs2007-07-021-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | one of the functions) - Fixes the error return of sctp_get_opt, it was returning the errno not -1. Approved by: re@freebsd.org (Robert Watson) Obtained from: Weongyo Jeong (weongyo.jeong@gmail.com)
* | | In the previous revision, when I replaced the unconditional acquisitionalc2007-07-021-11/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | of Giant in vm_pageout_scan() with VFS_LOCK_GIANT(), I had to eliminate the acquisition of the vnode interlock before releasing the vm object's lock because the vnode interlock cannot be held when VFS_LOCK_GIANT() is performed. Unfortunately, this allows the vnode to be recycled between the release of the vm object's lock and the vget() on the vnode. In this revision, I prevent the vnode from being recycled by acquiring another reference to the vm object and underlying vnode before releasing the vm object's lock. This change also addresses another preexisting but trivial problem. By acquiring another reference to the vm object, I also prevent the vm object from being recycled. Previously, the "vnodes skipped" counter could be wrong because if it examined a recycled vm object. Reported by: kib Reviewed by: kib Approved by: re (kensmith) MFC after: 3 weeks
* | | WD Firewire/USB Combo hangs under load on USB interface. Fix withimp2007-07-022-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | these quirks. Submitted by: John Pettitt PR: 79140 Approved by: re@ (blanket)
* | | Removing old, dead, KAME IPsec files as part of the move to thegnn2007-07-0217-20184/+0
| | | | | | | | | | | | | | | | | | | | | new FAST_IPSEC based IPsec stack. Approved by: re Reviewed by: bz
* | | Fix an annoying pointer/int cast warning that shows up on 64 bit systems.peter2007-07-021-1/+1
| | | | | | | | | | | | Approved by: re
* | | Revert previous commit, retaining cpufreq.njl2007-07-012-0/+6
| | | | | | | | | | | | Approved by: re (implicitly)
* | | Add cpufreq(4) to GENERIC. It does not change the frequency by default,njl2007-07-014-6/+6
| | | | | | | | | | | | | | | | | | | | | so systems should be relatively unaffected. Users can then simply enable powerd(8) in rc.conf to take advantage of it. Approved by: re
* | | Remove two boot printfs generated by Audit to announce it's presence,rwatson2007-07-012-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | and replace with software-testable sysctl node (security.audit) that can be used to detect kernel audit support. Obtained from: TrustedBSD Project Approved by: re (kensmith)
* | | The wicontrol(8) manpage is obsolete too.thompsa2007-07-011-0/+1
| | | | | | | | | | | | | | | Pointed out by: Pawel Worach Approved by: re (rwatson)
* | | After talking with njl@, change this wildcard entry to be a bit less wild.imp2007-07-011-1/+1
| | | | | | | | | | | | Approved by: re (blanket)
* | | - Fix input/microphone support for ASUS A8N-VMCSM series.ariff2007-07-012-39/+109
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submitted by: Simon Schubert <corecode@fs.ei.tum.de> - Defer flushing unsolicited response into taskqueue thread rather than handle it directly in interrupt handler, since few of its operations (like measuring/calibrating jack impedance) are quite expensive. - Misc. debugging cleanups. Tested by: joel Approved by: re (hrs) MFC after: 3 days
* | | Fix no-sound issues with ASUS A9T notebook.ariff2007-07-011-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Note: The offending quirk should have been made model/codec specific, but since there were no records / log which model requires it, the quirk logic had to be inverted (blacklist instead of whitelist). Tested by: Arkadiy Dudevitch <dudevitch@englerllc.com> Approved by: re (hrs) MFC after: 3 days
* | | Fix a dangling netinet6 to netipsec transition for SCTP include files.gnn2007-07-011-1/+1
| | | | | | | | | | | | Approved by: re
* | | Remove a dangling file reference that is no longer needed with the removalgnn2007-07-011-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | of KAME IPsec Reviewed by: bz Approved by: re Supported by: Secure Computing
* | | As part of KAME IPsec removal:bz2007-07-011-20/+19
| | | | | | | | | | | | | | | | | | | | | change the date to today instead of leaving the date when the patch was done. Move the block to the top. Approved by: re (kensmith)
* | | Follow on cleanup and removal of two unnecessary include files.gnn2007-07-012-81/+0
| | | | | | | | | | | | | | | | | | Reviewed by: bz Approved by: re Supported by: Secure Computing
* | | Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-0138-133/+76
| | | | | | | | | | | | | | | | | | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re
* | | Switch to "-O1 -pipe" as cross-build compatible gcc workaround.ache2007-07-011-1/+1
| | | | | | | | | | | | | | | | | | | | | "Looks like Alexander chimed in with "I'm comfortable with that until we can import a fixed GCC"." Approved by: re (kensmith)
* | | Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-0161-2373/+798
| | | | | | | | | | | | | | | | | | | | | | | | | | | This commit includes only the kernel files, the rest of the files will follow in a second commit. Reviewed by: bz Approved by: re Supported by: Secure Computing
* | | Remove wicontrol(8) from the base system. Using wicontrol to configure anthompsa2007-07-0114-1860/+7
| | | | | | | | | | | | | | | | | | | | | interface has been deprecated since 5.1, wi(4) wireless interfaces are managed via the net80211 stack and ifconfig. Approved by: re (rwatson)
* | | The driver will also first appear in 6.3. While here, fix somebrueffer2007-07-011-5/+7
| | | | | | | | | | | | | | | | | | | | | grammar issues and capitalize Jumbo Frames. Approved by: re (blanket) MFC after: 3 days
* | | Add my ports heritage.obrien2007-07-011-0/+9
| | | | | | | | | | | | Approved by: re(KEN)
* | | Pages that do belong to an object and page queue can now be freed withoutalc2007-07-012-20/+16
| | | | | | | | | | | | | | | | | | | | | | | | holding the page queues lock. Thus, the page table pages released by pmap_remove() and pmap_remove_pages() can be freed after the page queues lock is released. Approved by: re (kensmith)
* | | Move the XCHANNEL radiotap definition to a free slot. NetBSD defined somethompsa2007-07-011-1/+2
| | | | | | | | | | | | | | | | | | | | | additional values causing a conflict. Submitted by: sam Approved by: re (kensmith)
* | | - Use rufetchcalc() rather than calcru() in ttyinfo so that we getjeff2007-07-011-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | correct system and user time stats. Approved by: re Reported by: kris Discussed with: Attilio
OpenPOWER on IntegriCloud