summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove EXAMPLES section which duplicates text in fetch(3).des2004-02-271-22/+0
|
* NetBSD rev. 1.10mtm2004-02-271-16/+51
| | | | | | | | | | | | | | successful [is spelled] with only one l NetBSD rev. 1.12 Implement ``one'' prefix to allow a "one shot" operation as if ${rcvar}=yes yet all the other prerequisite tests are still performed. The existing ``force'' prefix is a sledgehammer that ignores all the prerequisite checks and always returns a zero exit status; this is a more gentle approach to the problem of "manipulate this disabled service without editing rc.conf(5)". Obtained From: NetBSD
* NetBSD rev. 1.61mtm2004-02-271-6/+16
| | | | | | | | | | | | | | | | Implement ``one'' prefix to allow a "one shot" operation as if ${rcvar}=yes yet all the other prerequisite tests are still performed. The existing ``force'' prefix is a sledgehammer that ignores all the prerequisite checks and always returns a zero exit status; this is a more gentle approach to the problem of "manipulate this disabled service without editing rc.conf(5)". Obtained From: NetBSD # We have a work-around in our version of rc.subr that # makes force* return a non-zero exit status if the # command/service could not be acted upon. The work-around # is no longer necessary and should be removed.
* Cut through the bikeshed and remove login(1)'s setuid bit. It has nodes2004-02-271-3/+0
| | | | | business trying to impersonate su(1), and it does not need to be setuid to function properly when invoked by getty(8) or telnetd(8).
* Look for both name and if_<name> strings in module metadata. Pseudo-deviceskan2004-02-271-1/+2
| | | | | | like tun are naming their modules using the 'if_; prefix and previous version of the code failed to detect their presence in the kernel, resulting in the same module being loaded twice.
* Add the clean_environment call to libutil.h also.kientzle2004-02-261-0/+2
| | | | MFC after: 2 weeks
* Add a clean_environment call to libutil.kientzle2004-02-263-4/+211
| | | | | | | | | | | | | | | | | This function removes all environment variables except the ones listed on a "whitelist." The function accepts two whitelist arguments. If the first is NULL, a built-in default list will be used. This allows callers to get a variety of behaviors: * Default screening: provide NULL for both lists * Custom screening: provide a custom list for the first argument * Modified default screening: provide NULL for first arg, list of additional variables to preserve in the second arg Idea from: Jacques Vidrine MFC after: 2 weeks
* Add extra sanity check for SDP packets in libsdp(3)emax2004-02-262-1/+4
| | | | Fix yet another endianess bug in sdpd(8)
* Forward declare struct proc, struct sockaddr, and struct thread, whichrwatson2004-02-262-0/+6
| | | | | | | are employed in entry points later in the same include file. Obtained from: TrustedBSD Project Sponsored by: DARPA, Air Force Research Laboratory, McAfee Research
* Replace the ktrace queue's semaphore with a condition variable instead asjhb2004-02-261-5/+5
| | | | | it is slightly more efficient since we already have a mutex to protect the queue. Ktrace originally used a semaphore more as a proof of concept.
* Mention getaddrinfo(3)/resolver(3) ABI change.green2004-02-261-0/+7
| | | | Reminded by: bmah
* Bump CTL_MAXNAME from 12 to 24.des2004-02-261-1/+1
|
* Forward declare struct bpf_d, struct ifnet, struct image_params, andrwatson2004-02-262-2/+10
| | | | | | | | | struct vattr in mac_policy.h. This permits policies not implementing entry points using these types to compile without including include files with these types. Obtained from: TrustedBSD Project Sponsored by: DARPA, Air Force Research Laboratory
* New release notes: GNU regex import, routed 2.27.bmah2004-02-262-2/+42
| | | | | Updated release notes: OpenSSH 3.8p1 and default configuration changes.
* It's protocol version 1 I've disabled, not version 2.des2004-02-261-1/+1
|
* Merged from sys/isa/fd.c revision 1.266.nyan2004-02-262-366/+126
|
* o NetBSD rev. 1.60mtm2004-02-261-2/+2
| | | | | | | | | Add "*,v" to the list of scratch files to skip. Suggested by Johnny Lam / Alistair Crooks o Update NetBSD rcsid Obtained From: NetBSD
* NetBSD rev. 1.57mtm2004-02-261-1/+1
| | | | | | | | run_rc_command(): when checking if ${command} exists before executing it, be sure to check under ${name_chroot} (if set). Fix from Ed Ravin in [bin/18523] Obtained From: NetBSD
* NetBSD rev. 1.56mtm2004-02-261-3/+3
| | | | | | | | Use more concise shell syntax: 1. for i in $* -> for i 2. foo=$* -> foo="$@" Obtained From: NetBSD
* NetBSD rev. 1.53, 1.54 and 1.55:mtm2004-02-261-7/+11
| | | | | | | | | | Change how internal boolean variables are used to: if ! ${_somevar:-false}; then _somevar=true fi (Consisent, slightly quicker, and slightly cleaner) Obtained from: NetBSD
* Mention the recent sshd configuration changes.des2004-02-261-0/+7
|
* Update VersionAddendum in config files and man pages.des2004-02-264-4/+4
|
* Update for 3.8p1, including workaround for a bug in gss-genr.c.des2004-02-264-11/+14
|
* Define HAVE_GSSAPI_H.des2004-02-261-1/+1
|
* Regenerate.des2004-02-261-10/+52
|
* Document recently changed configuration defaults.des2004-02-261-0/+4
|
* Resolve conflicts.des2004-02-2661-2966/+2250
|
* This commit was generated by cvs2svn to compensate for changes in r126274,des2004-02-26144-1437/+4749
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor import of OpenSSH 3.8p1.des2004-02-26203-3208/+7022
| |
* | Merge OpenSSH 3.8p1.des2004-02-261-56/+24
| |
* | Prepare for upcoming 3.8p1 import.des2004-02-261-1/+1
| |
* | Pull asbesthos underpants on and disable protocol version 1 by default.des2004-02-263-3/+3
| |
* | Merge from NetBSD rev. 1.3 (drochner): Use getifaddrs(3) instead oftjr2004-02-261-61/+30
| | | | | | | | SIOCGIFCONF.
* | Rremoved bogus -static from CFLAGS. Makeworld will add -static in thebde2004-02-262-2/+2
| | | | | | | | | | correct place if needed and possible. Self-hosted builds can just use the system default.
* | Backed out rev.1.6 and subsequent copying of it (bogus addition ofbde2004-02-261-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | -static to CFLAGS). It just turned rev.1.5 into an obfuscated no-op. As explained in the log for rev.1.5, testing should be done in the host environment but there is a problem in cross-compilation environments. As not explained in the log for rev.1.6, there was apparently a practical problem with cross-compiling (makeworld should have set -static in LDFLAGS but apparently didn't). Cross-compilation was especially complicated because the relevant programs are test programs that were run at beforeinstall time -- dynamic libraries might or might not exist depending on the build options. The complications became moot in rev.1.8 when beforeinstall was renamed "test".
* | Backed out the residue of rev.1.13 (bogus addition of -static to CFLAGS).bde2004-02-261-2/+5
| | | | | | | | | | | | | | | | Makeworld will add -static in the correct place if needed and possible. Self-hosted builds can just use the system default. Fixed some nearby style bugs (code unrelated to its comment, and comment formatting).
* | Backed out previous commit (bogus addition of -static to CFLAGS).bde2004-02-261-3/+2
| | | | | | | | Sorted macros (in build order).
* | Bring eventhandler callbacks for pf.mlaier2004-02-264-0/+28
| | | | | | | | | | | | | | | | This enables pf to track dynamic address changes on interfaces (dailup) with the "on (<ifname>)"-syntax. This also brings hooks in anticipation of tracking cloned interfaces, which will be in future versions of pf. Approved by: bms(mentor)
* | Tweak existing header and other build infrastructure to be able to buildmlaier2004-02-2617-5/+148
| | | | | | | | | | | | | | pf/pflog/pfsync as modules. Do not list them in NOTES or modules/Makefile (i.e. do not connect it to any (automatic) builds - yet). Approved by: bms(mentor)
* | Move inet and inet6 related MAC Framework entry points from mac_net.crwatson2004-02-265-655/+809
| | | | | | | | | | | | | | | | | | | | | | | | | | | | to a new mac_inet.c. This code is now conditionally compiled based on inet support being compiled into the kernel. Move socket related MAC Framework entry points from mac_net.c to a new mac_socket.c. To do this, some additional _enforce MIB variables are now non-static. In addition, mbuf_to_label() is now mac_mbuf_to_label() and non-static. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
* | Bring diff from the security/pf port. This has code been tested as a portmlaier2004-02-2611-50/+3205
| | | | | | | | | | | | | | | | | | | | | | | | | | for a long time and is run in production use. This is the code present in portversion 2.03 with some additional tweaks. The rather extensive diff accounts for: - locking (to enable pf to work with a giant-free netstack) - byte order difference between OpenBSD and FreeBSD for ip_len/ip_off - conversion from pool(9) to zone(9) - api differences etc. Approved by: bms(mentor) (in general)
* | This commit was generated by cvs2svn to compensate for changes in r126258,mlaier2004-02-2611-0/+13723
|\ \ | | | | | | | | | which included commits to RCS files with non-trunk default branches.
| * | Vendor import of OpenBSD's packet filter (pf) as of OpenBSD 3.4mlaier2004-02-2611-0/+13723
| / | | | | | | Approved by: bms(mentor), core (in general)
* | Test data before using it.eric2004-02-261-0/+4
| | | | | | | | | | | | | | | | Of course, libdialog is still chock-full of similar bugs, but it's been multiple years and no one has any better suggestions so the bugs will just be dealt with case-by-case. PR: 28221
* | Update copyright on mac.9 for 2004. Use "-" for copyright yearrwatson2004-02-261-3/+9
| | | | | | | | | | | | | | | | | | ranges. Add additional credits for contributions to the MAC Framework. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
* | Add a "-l" parameter to mdmfs so that memory file systems can berwatson2004-02-262-1/+7
| | | | | | | | | | | | | | | | created with the multilabel flag from inception. This simply passes the "-l" flag on to newfs(8). Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
* | Add a "-l" flag to newfs, which sets the FS_MULTILABEL flag. Thisrwatson2004-02-264-2/+11
| | | | | | | | | | | | | | | | permits users of newfs to set the multilabel flag on UFS1 and UFS2 file systems from inception without using tunefs. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
* | Split the mlock() kernel code into two parts, mlock(), which unpackstruckman2004-02-2616-87/+111
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the syscall arguments and does the suser() permission check, and kern_mlock(), which does the resource limit checking and calls vm_map_wire(). Split munlock() in a similar way. Enable the RLIMIT_MEMLOCK checking code in kern_mlock(). Replace calls to vslock() and vsunlock() in the sysctl code with calls to kern_mlock() and kern_munlock() so that the sysctl code will obey the wired memory limits. Nuke the vslock() and vsunlock() implementations, which are no longer used. Add a member to struct sysctl_req to track the amount of memory that is wired to handle the request. Modify sysctl_wire_old_buffer() to return an error if its call to kern_mlock() fails. Only wire the minimum of the length specified in the sysctl request and the length specified in its argument list. It is recommended that sysctl handlers that use sysctl_wire_old_buffer() should specify reasonable estimates for the amount of data they want to return so that only the minimum amount of memory is wired no matter what length has been specified by the request. Modify the callers of sysctl_wire_old_buffer() to look for the error return. Modify sysctl_old_user to obey the wired buffer length and clean up its implementation. Reviewed by: bms
* | Assert pipe mutex in pipeselwakeup(), as we manipulate pipe_staterwatson2004-02-261-0/+1
| | | | | | | | | | in a non-atomic manner. It appears to always be called with the mutex (good).
* | Add a note about the routed update breaking compatibility (for MD5bms2004-02-251-0/+8
| | | | | | | | authentication only) with older versions of FreeBSD's routed.
OpenPOWER on IntegriCloud