summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAge
* privsep: Implement pledge(2) support as found on OpenBSDRoy Marples2020-05-10
|
* privsep: Add function for indirect ioctlRoy Marples2020-05-10
|
* privsep: Copy back ioctl dataRoy Marples2020-05-10
|
* Fix compile error for non capsicumRoy Marples2020-05-10
|
* Merge branch 'master' of github.com:rsmarples/dhcpcdRoy Marples2020-05-10
|\
| * Merge pull request #15 from mpu/controlgroupRoy Marples2020-05-09
| |\ | | | | | | Do not report an error if control_group is already set
| | * Do not report an error if control_group is already setQuentin Carbonneaux2020-05-06
| | |
| * | Merge pull request #14 from mpu/masterRoy Marples2020-05-08
| |\ \ | | | | | | | | fix buffer size in getgrnam_r
| | * | Fix buffer size in getgrnam_rQuentin Carbonneaux2020-05-06
| | |/
* | | privsep: Enable capsicum for network facing processesRoy Marples2020-05-07
| | | | | | | | | | | | | | | | | | | | | All fd's in network facing processes are fully limited. Capability mode is only enabled for BPF processes because it's too restrictive otherwise - the reasons are noted in the commit.
* | | if: Be more descriptive on error for getifaddrsRoy Marples2020-05-07
| | |
* | | inet6: Move BSD get/set scope function to ipv6 for general useRoy Marples2020-05-07
| | | | | | | | | | | | | | | | | | It seems that FreeBSD doesn't allow binding to scoped addresses, so let's use our functions everwhere rather than directly setting scope.
* | | privsep: Remove unsued function.Roy Marples2020-05-07
|/ /
* | DHCP: Use correct buffer for receiving UDPRoy Marples2020-05-05
| | | | | | | | | | | | Big wup! While here, ensure buffer is aligned to the structure we want to read.
* | privsep: Allow a blank string to force privsep users home directoryRoy Marples2020-05-05
| | | | | | | | So FreeBSD users can set it like other OS's if they so choose.
* | privsep: Document any overridden chroot directory.Roy Marples2020-05-05
|/
* dhcpcd: Discard the freopen result.Roy Marples2020-05-01
|
* privsep: Discard the freopen result.Roy Marples2020-05-01
|
* Align whitespaceRoy Marples2020-04-30
|
* privsep: allow --chrootdir= to configure a default chroot directoryRoy Marples2020-04-30
|
* privsep: Add --chroot configurableRoy Marples2020-04-30
| | | | | Overrides the directory to chroot to away from the privilege separation users home directory.
* inet6: Mark temp addrs for regenRoy Marples2020-04-29
| | | | | This solves an infinite loop where new temp addrs regened are added at the tail and we loop endlessly.
* inet6: Set default ND timers before a RA arrives after preservationRoy Marples2020-04-29
| | | | | | | | Other OS will just remove the RA's on carrier down and thus set default values, but not so on NetBSD. As such as need to set default values just before settings any values from the incoming RA. This allows us to change networks sensibly.
* inet6: Expire ND on the second, not after itRoy Marples2020-04-29
| | | | Otherwise the timing is slightly confused.
* inet6: Apply the best RA which is still valid.Roy Marples2020-04-29
| | | | If there is no such RA, then apply some defaults.
* Linux: Only set positive reachable timersRoy Marples2020-04-29
|
* NetBSD: Gear up for kernel RA removal.Roy Marples2020-04-29
| | | | | | linkmtu will vanish from nd_ifinfo along with other things. Also, there is not need to pre-fetch ifinfo because flags are no longer updated when setting ifinfo back again.
* DHCP: Close sockets on carrier downRoy Marples2020-04-28
| | | | This allows any BPF filter to reset family on carrier up.
* Bump dates for prior.Roy Marples2020-04-28
|
* Grammar nitsSascha Wildner2020-04-28
|
* WhitespaceRoy Marples2020-04-28
|
* Align more CMSG foo.Roy Marples2020-04-26
|
* DHCP6: Implement DECLINE support for duplicated addressesRoy Marples2020-04-26
| | | | | | This is the final piece of DHCP6 to implement! Part of this change drops the use of the IPV6_AF_DUPLICATED flag and we just use IN6_IFF_DUPLICATED now.
* This should really be sa_family_t.Roy Marples2020-04-24
|
* dhcpcd: Fix separation of per interface and per familyRoy Marples2020-04-23
| | | | While here improve privsep proess titles for this.
* if: support changing hardware address type on LinuxRoy Marples2020-04-23
|
* Remove unsed define.Roy Marples2020-04-23
|
* Rename ifp->family -> ifp->hwtype so it's less confusingRoy Marples2020-04-23
|
* privsep: Open the IPV6 ND socket when running IPv6Roy Marples2020-04-22
| | | | IPv6 RS could be turned off globally
* Release dhcpcd-9.0.2Roy Marples2020-04-21
|
* align CMSG bufferRoy Marples2020-04-21
|
* DHCP: Avoid mis-aligned BOOTP structureRoy Marples2020-04-20
| | | | This was caused by the recent change to pass back the frame header.
* OpenBSD: set IN6_IFF_AUTOCONF for addresses generated from a RARoy Marples2020-04-20
| | | | | NetBSD will follow suit once the code in the kernel to handle RA has been removed.
* if: ensure interface flags persist when setting a flagRoy Marples2020-04-20
| | | | Otherwise we stupidly drop IFF_MULTICAST on Linux.
* inet6: Add 'temporary' directive to the slaac optionRoy Marples2020-04-19
| | | | | | | | This instructs dhcpcd to create a temporary address for each address generated from a RA. As such, dhcpcd no longer looks at the kernel option for it as the functionality is being removed from some or never existed in the first place.
* BSD: Dont warn if the kernel does not support flushing routersRoy Marples2020-04-19
| | | | As the implemention might be removed one day.
* DHCP6: don't log when things consitently failRoy Marples2020-04-17
| | | | | For example, the RA says obtain more inforamtion via DHCPv6 but there is no DHCPv6 server to service the request.
* inet6: Only log RA's when they are from a new serverRoy Marples2020-04-17
| | | | | | | We cannot log them normally as there are implementations which vary the expiry times based on their own times so each message is different. As such, we only log from new servers or coming back from expiration.
* inet6: Don't regen temporary addresses without an IPv6 stateRoy Marples2020-04-16
| | | | As this is not possible.
* dhcpcd: daemomize if no valid interfaces foundRoy Marples2020-04-16
| | | | But if we're waitig for an ip address we still wait.
generated by cgit v1.2.3 (git 2.25.1) at 2021-03-13 23:30:53 +0000