272461 |
03-Oct-2014 |
gjb |
Copy stable/10@r272459 to releng/10.1 as part of the 10.1-RELEASE process.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
256281 |
10-Oct-2013 |
gjb |
Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
240734 |
20-Sep-2012 |
glebius |
Re-do r240271: - Set IP_RECVDSTADDR sockopt on the socket only in case if it is INADDR_ANY bound. - Supply IP_SENDSRCADDR control message only if we did receive IP_RECVDSTADDR control message.
This fixes operation of snmpd bound to a specific local IP address.
PR: bin/171279
|
240271 |
09-Sep-2012 |
glebius |
For UDP transport set IP_RECVDSTADDR sockopt on the socket, and provide IP_SENDSRCADDR control with datagram message we reply with. This makes bsnmpd reply from exactly same address that request was sent to, thus successfully bypassing stateful firewalls or other kinds of strict checking.
PR: bin/171279
|
240234 |
08-Sep-2012 |
glebius |
The first part of check_priv() function, that attempts to obtain creds from the control message, actually never worked. This means check_priv() didn't work for local dgram sockets.
The SCM_CREDS control messages is received only in two cases:
1) If we did setsockopt(LOCAL_CREDS) on our socket, and in this case the message is struct sockcred. 2) If sender did supplied SCM_CREDS control message in his sendmsg() syscall. In this case the message is struct cmsgcred.
We can't rely on 2), so we will use 1) for dgram sockets. For stream sockets it is more reliable to obtain accept-time credentials, since SCM_CREDS control message is attached only on first read. Thus:
o Do setsockopt(LOCAL_CREDS) on local dgram sockets. o Split check_priv() into check_priv_stream() and check_priv_dgram(), and call them from recv_stream() and recv_dgram() respectively. o Don't provide space for SCM_CREDS control message in recv_stream(). o Provide space for SCM_CREDS control message in recv_dgram(), but there is no need to initialize anything in it. o In recv_dgram() do not blindly expect that first message is SCM_CREDS, instead use correct search cycle through control messages.
|
240191 |
07-Sep-2012 |
kevlo |
Fully initialize the stack-allocated "struct sockaddr_in sa" structure.
|
233128 |
18-Mar-2012 |
harti |
memset() wants the size of the structure to clear, not the size of the pointer to it.
Submitted by: Pawel Worach
|
228411 |
11-Dec-2011 |
trociny |
Include sys/queue.h: snmpmod.h uses TAILQ.
PR: bin/153153 MFC after: 2 weeks
|
220882 |
20-Apr-2011 |
ru |
Don't spam syslog with "inet_ntop(): Address family not supported by protocol family" when processing requests received from the UNIX domain socket.
MFC after: 3 days
|
216605 |
20-Dec-2010 |
syrinx |
Unbreak the build by temprorarily not using include directives in bsnmpd(1)' def files, until bsd.snmpmod.mk & Makefiles are fixed to pass proper include path flags to gensnmptree.
|
216594 |
20-Dec-2010 |
syrinx |
Bring in a SNMP module that allows configuration of SNMPv3 Notification targets.
Sponsored by: The FreeBSD Foundation Reviewed by: philip Approved by: philip
|
216294 |
08-Dec-2010 |
syrinx |
In bsnmpd(1) add support for SNMPv3 message processing model, including message authentication, packet encryption & view-based access control (RFC 3412, 3414, 3415).
Sponsored by: The FreeBSD Foundation Reviewed by: philip@ (mostly) Approved by: philip@
|
214237 |
23-Oct-2010 |
uqs |
Remove mention of non-existant -o flag for debugging options.
MFC after: 3 days
|
211404 |
16-Aug-2010 |
joel |
Fix two minor typos.
|
211402 |
16-Aug-2010 |
uqs |
Bump document date after content changes.
Pointy hat to: uqs
|
211401 |
16-Aug-2010 |
uqs |
Wordsmithing of bsnmpd.1
PR: docs/149157 Submitted by: Warren Block <wblock@wonkity.com> MFC after: 1 week
|
208483 |
24-May-2010 |
uqs |
mdoc: consistently spell our email addresses <foo@FreeBSD.org>
Reviewed by: ru Approved by: harti
|
205729 |
27-Mar-2010 |
antoine |
(S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument. Fix some wrong usages. Note: this does not affect generated binaries as this argument is not used.
Approved by: harti@
|
205078 |
12-Mar-2010 |
uqs |
Fix typo in macro name and macro usage.
Found by: make manlint Reviewed by: ru Approved by: harti, philip (mentor)
|
176893 |
07-Mar-2008 |
syrinx |
This commit was generated by cvs2svn to compensate for changes in r176892, which included commits to RCS files with non-trunk default branches.
|
163821 |
31-Oct-2006 |
harti |
This commit was generated by cvs2svn to compensate for changes in r163820, which included commits to RCS files with non-trunk default branches.
|
156067 |
27-Feb-2006 |
harti |
This commit was generated by cvs2svn to compensate for changes in r156066, which included commits to RCS files with non-trunk default branches.
|
155430 |
07-Feb-2006 |
harti |
This commit was generated by cvs2svn to compensate for changes in r155429, which included commits to RCS files with non-trunk default branches.
|
155095 |
31-Jan-2006 |
harti |
This commit was generated by cvs2svn to compensate for changes in r155094, which included commits to RCS files with non-trunk default branches.
|
154181 |
10-Jan-2006 |
harti |
This commit was generated by cvs2svn to compensate for changes in r154180, which included commits to RCS files with non-trunk default branches.
|
154179 |
10-Jan-2006 |
harti |
This commit was generated by cvs2svn to compensate for changes in r154178, which included commits to RCS files with non-trunk default branches.
|
150975 |
05-Oct-2005 |
harti |
This commit was generated by cvs2svn to compensate for changes in r150974, which included commits to RCS files with non-trunk default branches.
|
150924 |
04-Oct-2005 |
harti |
These files are not needed and were imported by accident in the previous import.
|
150921 |
04-Oct-2005 |
harti |
This commit was generated by cvs2svn to compensate for changes in r150920, which included commits to RCS files with non-trunk default branches.
|
146526 |
23-May-2005 |
harti |
This commit was generated by cvs2svn to compensate for changes in r146525, which included commits to RCS files with non-trunk default branches.
|
145674 |
29-Apr-2005 |
harti |
This commit was generated by cvs2svn to compensate for changes in r145673, which included commits to RCS files with non-trunk default branches.
|
145558 |
26-Apr-2005 |
harti |
This commit was generated by cvs2svn to compensate for changes in r145557, which included commits to RCS files with non-trunk default branches.
|
142811 |
28-Feb-2005 |
harti |
This commit was generated by cvs2svn to compensate for changes in r142810, which included commits to RCS files with non-trunk default branches.
|
133595 |
12-Aug-2004 |
harti |
This commit was generated by cvs2svn to compensate for changes in r133594, which included commits to RCS files with non-trunk default branches.
|
133212 |
06-Aug-2004 |
harti |
This commit was generated by cvs2svn to compensate for changes in r133211, which included commits to RCS files with non-trunk default branches.
|
128238 |
14-Apr-2004 |
harti |
This commit was generated by cvs2svn to compensate for changes in r128237, which included commits to RCS files with non-trunk default branches.
|
124862 |
23-Jan-2004 |
harti |
This commit was generated by cvs2svn to compensate for changes in r124861, which included commits to RCS files with non-trunk default branches.
|
122395 |
10-Nov-2003 |
harti |
This commit was generated by cvs2svn to compensate for changes in r122394, which included commits to RCS files with non-trunk default branches.
|