summaryrefslogtreecommitdiffstats
path: root/sbin
Commit message (Collapse)AuthorAgeFilesLines
* In ipfw2, avoid left-shifting negative integers, which is undefined.dim2015-08-121-4/+4
| | | | | | While here, make some other arguments to htonl(3) unsigned too. MFC after: 3 days
* Make LAG LACP fast timeout tunable through IOCTL.hiren2015-08-122-1/+9
| | | | | | | | Differential Revision: D3300 Submitted by: LN Sundararajan <lakshmi.n at msystechnologies> Reviewed by: wblock, smh, gnn, hiren, rpokala at panasas MFC after: 2 weeks Sponsored by: Panasas
* Fix a few mandoc warnings.brueffer2015-08-122-2/+0
| | | | MFC after: 1 week
* sbin/ipfw fix typo: info -> intofeld2015-08-101-1/+1
| | | | | | | | example: DEPRECATED: inserting data into non-existent table sshguard. (auto-created) Approved by: bdrewery
* Allow to disable BIO_DELETE passthru in fstab for swap-on-geli devices bypjd2015-08-081-4/+6
| | | | | | | passing 'notrim' option. PR: 198863 Submitted by: Matthew D. Fuller fullermd at over-yonder dot net
* Enable BIO_DELETE passthru in GELI, so TRIM/UNMAP can work as expected whenpjd2015-08-082-15/+82
| | | | | | | | | | | | | | | | | | | GELI is used on a SSD or inside virtual machine, so that guest can tell host that it is no longer using some of the storage. Enabling BIO_DELETE passthru comes with a small security consequence - an attacker can tell how much space is being really used on encrypted device and has less data no analyse then. This is why the -T option can be given to the init subcommand to turn off this behaviour and -t/T options for the configure subcommand can be used to adjust this setting later. PR: 198863 Submitted by: Matthew D. Fuller fullermd at over-yonder dot net This commit also includes a fix from Fabian Keil freebsd-listen at fabiankeil.de for 'configure' on onetime providers which is not strictly related, but is entangled in the same code, so would cause conflicts if separated out.
* Whoops, wrong flag.trasz2015-08-061-1/+1
| | | | | MFC after: 1 month Sponsored by: The FreeBSD Foundation
* Tweak mdconfig(8) manual page, in particular revise the EXAMPLEStrasz2015-08-061-47/+46
| | | | | | | | | | section. This removes stuff that doesn't really belong there, and simplifies examples for the basic operations. Reviewed by: wblock@ MFC after: 1 month Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D3198
* Fix a bug which could make routed(8) daemon exit by sending a special RIPdelphij2015-08-051-0/+6
| | | | | | query from a remote machine, similar to SA-14:21.routed. Submitted by: hrs
* Fix ipfw range deletion.melifaro2015-08-031-3/+8
| | | | Spotted by: ian,julian
* Add support for keys that include 4 byte SALT values,gnn2015-07-312-2/+25
| | | | | | | | including GCM and ICM/CTR modes for AES. Reviewed by: jmg MFC after: 1 week Sponsored by: Rubicon Communications (Netgate)
* Summary: Remove unsupported 3des-deriv encryption algorithm from documentation.gnn2015-07-311-1/+0
|
* Teach sysctl about the new optional suffix after IK to specifyimp2015-07-291-8/+42
| | | | | | | precision. Update input as well. Add IK to the manual (it was missing completely). Differential Revision: https://reviews.freebsd.org/D3181
* Add missing SIGUSR1 description.trasz2015-07-241-1/+2
| | | | | MFC after: 2 weeks Sponsored by: The FreeBSD Foundation
* mount_nfs: Be more clear on nmount(2) error with errmsg unsetcem2015-07-221-1/+2
| | | | | | | | Differential Revision: https://reviews.freebsd.org/D3147 Reviewed by: rmacklem Approved by: markj (mentor) MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* nvmecontrol: read controller identify data before any log page operationsjimharris2015-07-221-1/+2
| | | | | MFC after: 3 days Sponsored by: Intel
* lseek() allows an offset to be set beyond the end of file. Usingae2015-07-211-7/+4
| | | | | | | | it to check that partition has enough space to write bootcode doesn't work. Use the known size of provider instead. PR: 201504 MFC after: 1 week
* Only report the lack of ALTQ support if pfctl is using verbose (-v) mode.gnn2015-07-201-1/+1
| | | | | | PR: 194935 Submitted by: Jim Thompson MFC after: 2 weeks
* Document suspend/resume notification in devd.conf(5).trasz2015-07-181-0/+4
| | | | | MFC after: 2 weeks Sponsored by: The FreeBSD Foundation
* Add CARP events description to devd.conf(5).trasz2015-07-181-1/+21
| | | | | MFC after: 2 weeks Sponsored by: The FreeBSD Foundation
* Fix contraction spotted by igor(1) and remove 2 .Ed spotted by mandoc(1).araujo2015-07-181-7/+5
| | | | | | | | | Also, don't capitalize "module" and remove a redundant phrase introduced in my previous commit. Differential Revision: D3112 Reviewed by: wblock Sponsored by: gandi.net
* Describe how to load gmultipath at boot time.araujo2015-07-171-1/+11
| | | | | | Differential Revision: D3112 Reviewed by: allanjude, bapt Sponsored by: gandi.net
* fix the docs, the number of frags per inode (NFPI) changed in r228794jmg2015-07-151-4/+4
| | | | | | | | to 2 from 4, but the man page didn't get updated... other minor changes to make igor happy... MFC after: 3 days
* Add a new option to gpart(8) to fix Lenovo BIOS boot issueallanjude2015-07-151-1/+7
| | | | | | | | | | PR: 184910 Reviewed by: ae, wblock Approved by: marcel MFC after: 3 days Relnotes: yes Sponsored by: ScaleEngine Inc. Differential Revision: https://reviews.freebsd.org/D3065
* Cleanup; mostly language with a little bit of mdoc style.brueffer2015-07-143-17/+18
| | | | MFC after: 1 week
* Unbreak ggatec and ggatel on i386 after r238119, which added two morebrueffer2015-07-142-0/+2
| | | | | | | | | | | | | 'struct g_gate_ctl_create' fields. While the behaviour was technically undefined on other architectures as well, on the reporter's amd64 systems the uninitialized bytes the kernel cares about were always zero so everything worked as expected. PR: 197309, 199559 Submitted by: ota@j.email.ne.jp, Fabian Keil Reviewed by: pjd MFC after: 1 week
* If ggated's exports_find() fails, the connection is removed beforebrueffer2015-07-141-1/+1
| | | | | | | | | | | | | | (trying to) report the problem to the client. sendfail() is called with an already closed socket and thus it fails to inform the client about the problem. Fix this by calling sendfail() before connection_remove(). PR: 195944 Submitted by: Fabian Keil Reviewed by: pjd MFC after: 1 week
* Since the case where secflavor < 0 indicates the security flavor isrmacklem2015-07-071-2/+2
| | | | | | | | | | | | to be negotiated, it could be a Kerberized mount. As such, filling in the "principal" argument using the canonized host name makes sense. If it is negotiated as AUTH_SYS, the "principal" argument is meaningless but harmless. Requested by: masato@itc.naist.jp Tested by: masato@itc.naist.jp PR: 201073 MFC after: 1 month
* Remove unused variable flags reported by clang. The function zygote_clone()araujo2015-07-043-6/+4
| | | | | | | | always receive the flags with value 0 and this flags is never checked on zygote_main(). Differential Revision: D2689 Reviewed by: rodrigc, oshogbo
* Update the date on the manual page.gnn2015-07-031-1/+1
| | | | Noticed by: bz
* New AES modes for IPSec, user space components.gnn2015-07-032-1/+3
| | | | | | | | | | | | Update setkey and libipsec to understand aes-gcm-16 as an encryption method. A partial commit of the work in review D2936. Submitted by: eri Reviewed by: jmg MFC after: 2 weeks Sponsored by: Rubicon Communications (Netgate)
* Let the nv.h and dnv.h includes be only in sys directory.oshogbo2015-07-022-2/+2
| | | | | | | Change consumers to include those files from sys. Add duplicated files to ObsoleteFiles. Approved by: pjd (mentor)
* Add -b to the devlist usage info, forgotten in r260059.brueffer2015-07-021-1/+1
| | | | | | PR: 195094 Submitted by: robin.hahling@gw-computing.net MFC after: 1 week
* Fix an obviously wrong boolean operator.brueffer2015-07-021-1/+1
| | | | | | PR: 200983 Submitted by: David Bindeman MFC after: 1 week
* Allow to omit keyfile number for the first keyfile.pjd2015-07-021-1/+8
|
* Fix support for the null encryption algorithm which now requiresgnn2015-06-251-1/+1
| | | | | | a key. Sponsored by: Rubicon Communications (Netgate)
* ALTQ FAIRQ discipline import from DragonFLYeri2015-06-244-4/+337
| | | | | | | | Differential Revision: https://reviews.freebsd.org/D2847 Reviewed by: glebius, wblock(manpage) Approved by: gnn(mentor) Obtained from: pfSense Sponsored by: Netgate
* Document that a forced dismount of an NFSv3 mount when thermacklem2015-06-171-1/+4
| | | | | | | | | NLM (rpc.lockd) is running can crash the system. Unfortunately this is not easy to fix, but I have left PR#200585 open. PR: 200585 MFC after: 3 days
* new dependssjg2015-06-163-1/+2
|
* Revert r284417 it is not necessary anymorebapt2015-06-151-1/+1
|
* Enforce overwritting SHLIBDIRbapt2015-06-151-1/+1
| | | | | | | | | Since METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loading bsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere. This makes /lib being populated again. Reported by: many
* Add META_MODE support.sjg2015-06-13112-0/+2333
|\ | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp
| * Revert unneeded changesjg2015-06-101-1/+1
| |
| * dirdeps.mk now sets DEP_RELDIRsjg2015-06-08108-216/+0
| |
| * Merge sync of headsjg2015-05-27160-1891/+2120
| |\
| * | Updated/new dependenciessjg2014-11-192-1/+1
| | |
| * | Merge from head@274682sjg2014-11-1985-2088/+7091
| |\ \
| * \ \ Merge head from 7/28sjg2014-08-1999-241/+1903
| |\ \ \
| * | | | Updated dependenciessjg2014-05-16105-102/+6
| | | | |
| * | | | Updated dependenciessjg2014-05-10101-0/+203
| | | | |
OpenPOWER on IntegriCloud