Use the aux-args-located AUX_openbsd_execpath entry provided by
execve(2) as $ORIGIN for requests from the main executable dso (if
available, otherwise attempt to use the old realpath mechanism). The
ld.so bootstrapping parses the AUX_* array into a 10-entry dl_data[]
for the post-relocation code to inspect easier. Index 0 was not being
used, so use it to pass the auxval pointer to the bootstrap code. In
the bootstrap code we make a copy of the execpath string to avoid later
$ORIGIN expansions in ld.so looking at possibly (intentionally?) damaged
stack.
ok kettenis kurt
add a TLS flag to envelopes
make a configuration like
match ... tls ... action foobar
actually work.
diff from Johan Hattne with a small smtpctl.c tweak by me.
okay kirill@
Support including a HTML snippet from an optional file head.html
right before the end of the <head> element.
For example, man.voidlinux.org uses this to include a second,
site-specific CSS file such that mandoc.css can be used unchanged.
Based on a patch from Abigail G <dev at placeviolette.net>
slightly tweaked by me to open the file early.
update to PrismLauncher 11.1.0
Tested by MAINTAINER, myself, and izzy Meyer with b1.7.3, 1.20.6, 1.21.11 on amd64 and arm64.
from MAINTAINER Daniil Ryvkin
OK phessler@
Allow man.cgi(8) to cope with compressed manual pages.
While we don't do that on man.openbsd.org and while i doubt whether
saving a small amount of disk space on a web server is worth consuming
additional CPU time over and over again when the page is served,
some public servers on the Internet run the mandoc man.gi(8) and
serve from gzipped pages, and it's surprisingly easy to implement
because the internal API function mparse_open() already encapsulates
the required logic.
Based on a patch from Duncan Overbruck <duncaen at voidlinux.org>,
tweaked by me to correctly free the mchars and mparse objects
in the error path.
smptd: extend mask-src to suppress session details
mask-src omits the source host from Received headers but retains the
SMTP variant, TLS parameters and authentication details; suppress the
with clause and TLS metadata, including the authentication status and
username emitted by received-auth, when source masking is enabled.
Diff from Andrea Pappacoda
OK: op@
If reorder_kernel is running, then syspatch will abort to prevent stepping on an
already running reorder.
Restrict the process matching to the root user to prevent a non privileged user
from drafting and running an endless script called reorder_kernel which would
prevent syspatch run.
This is not a perfect solution but it's less bad than before.
Initial diff from Nick Owens
drop the old 2019-era static copy of geolite databases, other ports have
stopped using them. either sign up to fetch updated geolite2 from maxmind,
or use the freely available databases in net/dbip/{asn,city,country} instead.
jujutsu: remove base-gcc workaround
The intersection of RUST_ARCHS and GCC4_ARCHS is empty nowadays, so
"COMPILER=base-clang ports-gcc" and "COMPILER_LANGS=c" is just noise.
