Add a storage process to snmpd, which lives in /var/db/snmpd, and use it to
store SNNMP engine information.
Previously snmpEngineBoots was hardcoded to 0, and snmpEngineTime was set
to CLOCK_REALTIME. Having snmpEngineBoots set to 0 is against the
specifications, and snmpEngineTime is a 32 bit integer and thus would
overflow in 2038. With the storage process we start snmpEngineBoots at 1,
and increment it by 1 on every restart as per RFC3414, and snmpEngineTime
is set to the amount of seconds the engine has been up using
CLOCK_MONOTONIC.
feedback and OK jmatthew@
enable deprecated siphash, which is required for botan's libsodium compat
API, as used by keepassxc's "browser" flavour
enable deprecated legacy_ec_point, also used by keepassxc's "browser" flavour
rpki-client: rename crldp to dps in cert_crldp()
In a later commit I want to use crldp for something else. The one CRL
distribution point is called dp, so call the stack of distribution points
dps.
ok job
make a AuthorizedPrincipalsCommand with no specified arguments do what
it is documented to do: supply the target username as a default argument.
Anthropic ANT-2026-YX19N77E
when updating known_hosts files for UpdateHostKeys, bail out if the
unable to write to the first known_hosts file in the list.
Avoids a situation where a host key could be fully removed from all
known_hosts files.
Anthropic ANT-2026-YH3JNW7S
when uploading/crossloading, prefer to use LSETSTAT as it makes it more
difficult for a local attacker on the destination play tricks where
they replace paths around the time where the client is restoring
permissions on things.
Also skip setting permissions entirely when its not necessary to do so.
Anthropic ANT-2026-Y4XK22QX
