Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd,
resolvd, slaacd, unwind.
The mitigation story is way better: syscalls are in a randomly located
libc, and every syscall stub is

Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd,
resolvd, slaacd, unwind.
The mitigation story is way better: syscalls are in a randomly located
libc, and every syscall stub is randomly located inside that due to
random relinking. As opposed to fixed offset inside a release binary.
There is one known consequence: /usr nfs mounting must use statically
configured IP addresses.
ok kettenis florian, others

show more ...

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege sepa

Do not install pcap-int.h to /usr/include as it is an internal library
header (pointed out by matthew@). Let only pflogd and tcpdump include
pcap-int.h directly since they need it for privilege separation.

"looks good" sthen
feedback/ok deraadt matthew millert

show more ...

pflogd no longer needs libutil; ok deraadt@

repair missing DPADD requests

remove -Werror from userland builds, to give us a chance to
use more verbose warning options if desired.
ok millert@, henning@, david@

privilege seperated pflogd

_pflogd user and group must be created for proper operation.

ok frantzen@ henning@ mcbride@ deraadt@

Add ANSI prototypes. Get rid of shadow warnings. Use correct
printf format specifiers where needed. Clarify one comment.
Now compiles with -Wmissing-prototypes -Wshadow, and this is
reflected in t

Add ANSI prototypes. Get rid of shadow warnings. Use correct
printf format specifiers where needed. Clarify one comment.
Now compiles with -Wmissing-prototypes -Wshadow, and this is
reflected in the Makefile.
OK deraadt@

show more ...

Add missing libraries to bsd.prog.mk (mostly kerberosV)
Use them in DPADD throughout the tree.
Fix a few mispells (LIBMATH -> LIBM...)
Wipe obsolete lib (LIBRESOLV)
Sort added missing libraries, move

Add missing libraries to bsd.prog.mk (mostly kerberosV)
Use them in DPADD throughout the tree.
Fix a few mispells (LIBMATH -> LIBM...)
Wipe obsolete lib (LIBRESOLV)
Sort added missing libraries, move obsolete stuff apart.
Synch documentation in bsd.README

ok deraadt@

show more ...

Use pidfile() instead of doing the equivalent thing by hand, and sometimes
forgetting to unlink the pid file at exit.
ok millert@ deraadt@

pflogd; work by canacar@eee.metu.edu.tr and myself