| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
Staticize several variables that are used exclusively in bsnmpd/main.c and
bsnmpd/trap.c
This fixes several -Wmissing-variable-declaration warnings noted by clang
|
|
|
|
|
|
|
|
|
|
|
| |
Remove unused function `act_getkernstring`
This fixes a clang -Wunused warning
Differential Revision: https://reviews.freebsd.org/D4697
Reported by: Jenkins
Reviewed by: araujo, bapt
Sponsored by: EMC / Isilon Storage Division
|
|
|
|
|
|
|
|
|
|
|
| |
- Set IP_RECVDSTADDR sockopt on the socket only in case if
it is INADDR_ANY bound.
- Supply IP_SENDSRCADDR control message only if we did receive
IP_RECVDSTADDR control message.
This fixes operation of snmpd bound to a specific local IP address.
PR: bin/171279
|
|
|
|
|
|
|
|
| |
IP_SENDSRCADDR control with datagram message we reply with. This makes
bsnmpd reply from exactly same address that request was sent to, thus
successfully bypassing stateful firewalls or other kinds of strict checking.
PR: bin/171279
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
from the control message, actually never worked. This means check_priv()
didn't work for local dgram sockets.
The SCM_CREDS control messages is received only in two cases:
1) If we did setsockopt(LOCAL_CREDS) on our socket, and in this case
the message is struct sockcred.
2) If sender did supplied SCM_CREDS control message in his sendmsg()
syscall. In this case the message is struct cmsgcred.
We can't rely on 2), so we will use 1) for dgram sockets. For stream
sockets it is more reliable to obtain accept-time credentials, since
SCM_CREDS control message is attached only on first read. Thus:
o Do setsockopt(LOCAL_CREDS) on local dgram sockets.
o Split check_priv() into check_priv_stream() and check_priv_dgram(),
and call them from recv_stream() and recv_dgram() respectively.
o Don't provide space for SCM_CREDS control message in recv_stream().
o Provide space for SCM_CREDS control message in recv_dgram(), but there
is no need to initialize anything in it.
o In recv_dgram() do not blindly expect that first message is SCM_CREDS,
instead use correct search cycle through control messages.
|
| |
|
|
|
|
|
|
| |
of the pointer to it.
Submitted by: Pawel Worach
|
|
|
|
|
| |
PR: bin/153153
MFC after: 2 weeks
|
|
|
|
|
|
|
| |
by protocol family" when processing requests received from the
UNIX domain socket.
MFC after: 3 days
|
|
|
|
|
| |
bsnmpd(1)' def files, until bsd.snmpmod.mk & Makefiles are fixed to
pass proper include path flags to gensnmptree.
|
|
|
|
|
|
| |
Sponsored by: The FreeBSD Foundation
Reviewed by: philip
Approved by: philip
|
|
|
|
|
|
|
|
| |
message authentication, packet encryption & view-based access control (RFC 3412, 3414, 3415).
Sponsored by: The FreeBSD Foundation
Reviewed by: philip@ (mostly)
Approved by: philip@
|
|
|
|
| |
MFC after: 3 days
|
| |
|
|
|
|
| |
Pointy hat to: uqs
|
|
|
|
|
|
| |
PR: docs/149157
Submitted by: Warren Block <wblock@wonkity.com>
MFC after: 1 week
|
|
|
|
|
| |
Reviewed by: ru
Approved by: harti
|
|
|
|
|
|
|
| |
Fix some wrong usages.
Note: this does not affect generated binaries as this argument is not used.
Approved by: harti@
|
|
|
|
|
|
| |
Found by: make manlint
Reviewed by: ru
Approved by: harti, philip (mentor)
|
|\
| |
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| |
| | |
returns an error.
Approved by: bz (mentor), harti
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| |
| |
| | |
of uname -r in FreeBSD. This value can be overwritten in the configuration
file.
Suggested by: phk
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| | |
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| | |
SNMP string length.
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| |
| | |
by an option value.
Submitted by: Shteryana Shopova <shteryana@yahoo.com>
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| |
| | |
basically disables any access unless other strings are set in the config
file. Note, that there is no way to set the communities back to NULL once
they're set to something not NULL.
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| | |
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| | |
for U?INT32_{MAX,MIN} from asn1.h into the .c files that actually require
them (the .h file doesn't refer to these macros).
|
|/
|
|
| |
previous import.
|
| |
|
| |
|
|
|
|
|
| |
libbegemot: the rpoll_start_timer function needs the timeout value in
milli-seconds, not the absolute time when the timer should tick.
|
| |
|
| |
|
|
|
|
| |
Submitted by: Maxim Konovalov <maxim@macomnet.ru>
|
| |
|
| |
|
| |
|
|
|