| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2003-12-26 | Niels Provos kindly agreed to drop clauses 3 and 4 from the | wiz | |
| license -- thanks. Based on OpenBSD commit and hints by itojun. | |||
| 2003-12-17 | Fix ICMPV6CTL_ND6_[DP]RLIST, they broke with new sysctl. | lha | |
| Makes ndp -r/ndp -p work again, patch from atatat | |||
| 2003-12-10 | fix cases where pktinfo specifies outgoing interface of "0". | itojun | |
| 2003-12-10 | use if_indexlim (instead of if_index) and ifindex2ifnet[x] != NULL | itojun | |
| to check if interface exists, as (1) if_index has different meaning (2) ifindex2ifnet could become NULL when interface gets destroyed, since when we have introduced dynamically-created interfaces. from kame | |||
| 2003-12-10 | validate set/getsockopt arg more strictly. with previous code privileged | itojun | |
| user can cause kernel crash. | |||
| 2003-12-10 | comment from niels provos; | itojun | |
| - seed2 is necessary, but use it as "seed2 + x" not "seed2 ^ x". - skipping number is not needed, so disable it for 16bit generator (makes the repetition period to 30000) | |||
| 2003-12-04 | Dynamic sysctl. | atatat | |
| Gone are the old kern_sysctl(), cpu_sysctl(), hw_sysctl(), vfs_sysctl(), etc, routines, along with sysctl_int() et al. Now all nodes are registered with the tree, and nodes can be added (or removed) easily, and I/O to and from the tree is handled generically. Since the nodes are registered with the tree, the mapping from name to number (and back again) can now be discovered, instead of having to be hard coded. Adding new nodes to the tree is likewise much simpler -- the new infrastructure handles almost all the work for simple types, and just about anything else can be done with a small helper function. All existing nodes are where they were before (numerically speaking), so all existing consumers of sysctl information should notice no difference. PS - I'm sorry, but there's a distinct lack of documentation at the moment. I'm working on sysctl(3/8/9) right now, and I promise to watch out for buses. | |||
| 2003-12-04 | netbsd.org -> NetBSD.org | keihan | |
| This was the last commit of this kind to src/sys, which is now totally "NetBSD.org clean". Thanks for the patiance, and sorry for all the commits. | |||
| 2003-11-25 | "seed2" was ruining non-repeating property, so remove it. discussed on tech-net | itojun | |
| 2003-11-17 | Revert the (default) ip_id algorithm to the pre-randomid algorithm, | jonathan | |
| due to demonstrated low-period repeated IDs from the randomized IP_id code. Consensus is that the low-period repetition (much less than 2^15) is not suitable for general-purpose use. Allocators of new IPv4 IDs should now call the function ip_newid(). Randomized IP_ids is now a config-time option, "options RANDOM_IP_ID". ip_newid() can use ip_random-id()_IP_ID if and only if configured with RANDOM_IP_ID. A sysctl knob should be provided. This API may be reworked in the near future to support linear ip_id counters per (src,dst) IP-address pair. | |||
| 2003-11-12 | implement net.inet6.ifq | itojun | |
| 2003-11-06 | correct behavior when ipv6mr_interface is 0. Matthias Drochner | itojun | |
| 2003-11-05 | use hash table for in6_pcbbind(). similar to in_pcb 1.89 -> 1.90 | itojun | |
| 2003-11-03 | Revert the change in default value of ipv6_v6only. Further discussion | briggs | |
| on this topic is required. It should be reintroduced and pursued in the IETF. | |||
| 2003-10-30 | Remove some assigned-to but otherwise unused variables. | simonb | |
| 2003-10-29 | Do a jump optimization that eliminates some uninitialized variable warnings. | mycroft | |
| 2003-10-28 | Toggle the default value of ip6_v6only. Also provide a sample sysctl to | briggs | |
| retain the existing behavior. | |||
| 2003-10-25 | fix uninitialized variables | christos | |
| 2003-10-15 | backout previous (ENETREST special handlng) | itojun | |
| 2003-10-15 | ignore ENETRESET on ADDMULTI | itojun | |
| 2003-10-15 | ignore ENETRESET on ADDMULTI. | itojun | |
| 2003-10-15 | define struct prf_ra outside of in6_prflags, to be c++ friendly. sync w/kame | itojun | |
| 2003-10-14 | fix endian bug in fragment header scanning. | itojun | |
| 2003-10-03 | no need to clear mbuf flags here; sync w/kame | itojun | |
| 2003-10-03 | when dropping M_PKTHDR, need to free m_tag associated with it. | itojun | |
| 2003-10-03 | use in6_{embed,recover}scope for scoped address manipulation | itojun | |
| 2003-10-03 | shouldn't check scope match when encapsulating packet into tunnel mode. | itojun | |
| iij seil team | |||
| 2003-10-02 | do not deref state.ro if it is NULL | itojun | |
| 2003-10-02 | correctly look at outer IPv6 header when forwarding packet into ipsec tunnel. | itojun | |
| iij seil team | |||
| 2003-10-02 | permit tunnel mode over link-local address. (outer header is link-local) | itojun | |
| iij seil team | |||
| 2003-10-02 | handle link-local address in ipsec6_tunnel_validate(). from iij seli team | itojun | |
| 2003-09-30 | Fix off-by-one in PRC_NCMDS check. From FreeBSD via OpenBSD | christos | |
| 2003-09-28 | Remove some code that breaks AH tunnels completely. The comment describing | mycroft | |
| the purpose of this code appears to be on crack -- it's talking about end-to-end authentication, but the purpose of an AH tunnel is NOT end-to-end authentication; it's authentication of the tunnel endpoints. NB: This does not fix the fact that IPsec leaks "packet tags." | |||
| 2003-09-26 | Process has only one c. From miod@openbsd. | wiz | |
| 2003-09-22 | mark security policy that should persist in the system "persistent". | itojun | |
| this should prevent recently-reported kernel panic when "spdflush" is issued. | |||
| 2003-09-20 | separate netkey/key* and netipsec/key* | itojun | |
| 2003-09-16 | exp is a reserved name under posix | itojun | |
| 2003-09-15 | avoid overflow during multiply. David Laight | itojun | |
| 2003-09-13 | correct ru_a/ru_b setup for 20bit case | itojun | |
| 2003-09-12 | change confusing filename | itojun | |
| 2003-09-12 | remove extra blank line | itojun | |
| 2003-09-12 | make synchronization w/ PF tag support code easier | itojun | |
| 2003-09-12 | make it possible to SADB_DUMP via sysctl. request by mrg | itojun | |
| 2003-09-10 | record socket * associated with secpolicy | itojun | |
| 2003-09-09 | lint | itojun | |
| 2003-09-07 | - prepare for RFC2401bis 64bit sequence number (no behavior change yet) | itojun | |
| - use hash for SPI-based SAD entry lookup (should be faster, i hope) - cleanup keydb.c and key.c. key.c is responsible for refcounting secasvar, keydb.c is responsible for alloc/free. | |||
| 2003-09-07 | prototype should have no variable name | itojun | |
| 2003-09-06 | correct seed generation. sync w/ kame | itojun | |
| 2003-09-06 | fix comment, from kame | itojun | |
| 2003-09-06 | committed by mistake, sorry | itojun | |
