diff options
author | brian <brian@FreeBSD.org> | 1997-11-11 22:58:14 +0000 |
---|---|---|
committer | brian <brian@FreeBSD.org> | 1997-11-11 22:58:14 +0000 |
commit | 0c64913a0fbb1bccd7f0787213eab0ce73ae6968 (patch) | |
tree | 2bb96c72d2185278aecf865790605846f14ac045 /usr.sbin/ppp/auth.c | |
parent | 9f4a5b39505ed832de088509c172e885813ffd87 (diff) | |
download | FreeBSD-src-0c64913a0fbb1bccd7f0787213eab0ce73ae6968.zip FreeBSD-src-0c64913a0fbb1bccd7f0787213eab0ce73ae6968.tar.gz |
Finish the security improvements:
o Add "allow" command:
"allow users a b c" gives access to users a, b and c.
"allow modes auto" gives those users access to auto mode only.
"allow users *" and "allow modes *" are accepted.
No users and all modes are allowed by default.
UID 0 can do anything.
o Set the current label with the "load" and "dial" commands
so that the call to ppp.linkdown makes sense.
o Up the verison number.
o Don't OR MODE_AUTO for -background and -ddial.
o Don't OR MODE_INTER when we get a diagnostic connection.
o Allow up to 40 args per line (was 20).
o "set ifaddr" only changes the interface in AUTO mode (with other
modes, it happens after IPCP negotiation).
o Sort command descriptions in the man page.
o Support -dedicated mode where we just talk ppp forever (no login etc).
Diffstat (limited to 'usr.sbin/ppp/auth.c')
-rw-r--r-- | usr.sbin/ppp/auth.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/usr.sbin/ppp/auth.c b/usr.sbin/ppp/auth.c index 89e4894..a2f328b 100644 --- a/usr.sbin/ppp/auth.c +++ b/usr.sbin/ppp/auth.c @@ -17,7 +17,7 @@ * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. * - * $Id: auth.c,v 1.20 1997/11/09 18:51:21 brian Exp $ + * $Id: auth.c,v 1.21 1997/11/09 22:07:27 brian Exp $ * * TODO: * o Implement check against with registered IP addresses. @@ -60,8 +60,8 @@ LocalAuthInit() *p = '\0'; } - if (!(mode&(MODE_AUTO|MODE_DEDICATED|MODE_DIRECT))) - /* We're allowed in interactive and direct */ + if (!(mode&MODE_DAEMON)) + /* We're allowed in interactive mode */ VarLocalAuth = LOCAL_AUTH; else if (VarHaveLocalAuthKey) VarLocalAuth = *VarLocalAuthKey == '\0' ? LOCAL_AUTH : LOCAL_NO_AUTH; |