summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add two sysctl variables that can be read by libutil and libkvm so thatpeter1996-02-242-3/+18
| | | | they can adapt to simple kernel VM layout changes.
* Make the ipfw LKM work again.phk1996-02-243-97/+6
| | | | This concludes this round of updates to ipfw, have at it!
* Update to match kernel code.phk1996-02-243-100/+252
|
* Make getsockopt() capable of handling more than one mbuf worth of data.phk1996-02-245-48/+121
| | | | | Use this to read rules out of ipfw. Add the lkm code to ipfw.c
* A new ipfw program that can set and control the new features.phk1996-02-242-969/+400
| | | | An almost correct usage is printed.
* The new firewall functionality:phk1996-02-244-57/+70
| | | | | Filter on the direction (in/out). Filter on fragment/not fragment.
* Attempt to document the recent in_pcb local port address changes..peter1996-02-231-0/+34
|
* I overlooked this one.phk1996-02-231-1/+6
|
* rfork/minherit glue in libcpeter1996-02-234-7/+237
| | | | man pages adapted from OpenBSD's versions.
* Add prototype for rfork().peter1996-02-231-0/+1
|
* Garrett pointed out that the correct place for unix system call argspeter1996-02-233-21/+21
| | | | | | | is <sys/unistd.h>, with the prototype in <unistd.h>. sys/unistd.h is visible to the kernel compile, and is #included by unistd.h. Also, I missed a reference to a static int in the midst of my other diffs.
* kern_descrip.c: add fdshare()/fdcopy()peter1996-02-2310-49/+247
| | | | | | | | | | | | | | | | | | | | kern_fork.c: add the tiny bit of code for rfork operation. kern/sysv_*: shmfork() takes one less arg, it was never used. sys/shm.h: drop "isvfork" arg from shmfork() prototype sys/param.h: declare rfork args.. (this is where OpenBSD put it..) sys/filedesc.h: protos for fdshare/fdcopy. vm/vm_mmap.c: add minherit code, add rounding to mmap() type args where it makes sense. vm/*: drop unused isvfork arg. Note: this rfork() implementation copies the address space mappings, it does not connect the mappings together. ie: once the two processes have split, the pages may be shared, but the address space is not. If one does a mmap() etc, it does not appear in the other. This makes it not useful for pthreads, but it is useful in it's own right for having light-weight threads in a static shared address space. Obtained from: Original by Ron Minnich, extended by OpenBSD
* Run makesyscalls to regen the tables.peter1996-02-235-21/+78
|
* Add hooks for rfork/minherit pair, and reset args of vfork in preperationpeter1996-02-231-2/+24
| | | | for adding the syscalls.
* Note the syscall numbers used in BSD/OS 2.x. We dont want topeter1996-02-231-10/+9
| | | | | | accidently use one of these ourselves as it'd make it harder to run their binaries. Also, remove the now-defunct #include "opt_sysvipc.h".
* If a .db file is 0 length, initialize it as if it did not exist.pst1996-02-231-1/+2
| | | | Reviewed by: wollman
* Merge in changes to support the new rpc.yppasswdd(8) and fix a few bugs.wpaul1996-02-2310-295/+755
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In passwd(1): - Gut most of yp_passwd.c and leave only a few things that aren't common to pw_yp.c. - Add support for -d and -h flags to select domains and NIS server hosts to use when updating NIS passwords. This allows passwd(1) to be used for changing NIS passwords from machines that aren't configured as NIS clients. (This is mostly to allow passwd(1) to work on NIS master servers that aren't configured as clients -- an NIS server need not necessarily be configured as a client itself.) NOTE: Realize that having the ability to specify a domain and hostname lets you use passwd(1) (and chpass(1) too) to submit update requests to yppasswd daemons running on remote servers in remote domains which you may not even be bound to. For example, my machine at home is not an NIS client of the servers on the network that I manage, yet I can easily change my password at work using my FreeBSD box at home by doing: 'passwd -d work.net.domain -h any.nis.server.on.my.net wpaul'. (Yes, I do use securenets at work; temporarily modified my securenets file to give my home system access.) Some people may not be too thrilled with this idea. Those who don't like this feature can recompile passwd(1) and chpass(1) with -DPARANOID to restrict the use of these flags to the superuser. (Oh, I should be adding proper securenets support to ypserv(8) and rpc.yppasswdd(8) over the weekend.) - Merge in changes to allow root on the NIS master server to bypass authentication and change any user's NIS password. (The super-user on the NIS master already has privileges to do this, but doing it through passwd(1) is much easier than updating the maps by hand.) Note that passwd(1) communicates with rpc.yppasswdd(8) via a UNIX domain socket instead of via standard RPC/IP in this case. - Update man page. In chpass(1): - Fix pw_yp.c to work properly in environments where NIS client services aren't available. - Use realloc() instead of malloc() in copy_yp_pass() and copy_local_pass(). - Fix silly bug in copy_yp_pass(); some of the members of the passwd structure weren't being filled in correctly. (This went unnoticed for a while since the old yppasswdd didn't allow changes to the fields that were being botched.) - chpass(1) now also allows the superuser on the NIS master server to make unrestricted changes to any user's NIS password information. - Use UNIX domain comm channel to rpc.yppasswdd(8) when run by the superuser on the NIS master. This allows several new things: o superuser can update an entire master.passwd.{byname,byuid} entry o superuser can update records in arbitrary domains using -d flag to select a domain (before you could only change the default domain) o superuser can _add_ records to the NIS master.passwd maps, provided rpc.yppasswdd(8) has been started with the -a flag (to do this, the superuser must force NIS operation by specifying the -y flag to chpass(1) along with -a, i.e. 'chpass -y -a 'foo:::::::::') - Back out the 'chpass -a <new password entry> breaks with NIS' fix from the last revision and fix it properly this time. The previous revision fixed the immediate problem but broke NIS operation in some cases. - In edit.c, be a little more reasonable about deciding when to prevent the shell field from being changed. Submitted by Charles Owens <owensc@enc.edu>, who said: "I made a minor (one-line) modification to chpass, with regards to whether or not it allows the changing of shells. In the 2.0.5 code, field changing follows the settings specified in the "list" structure defined in table.c . For the shell, though, this is ignored. A quick look in edit.c showed me why, but I don't understand why it was written as such. The logic was if shell is standard shell, allow changing I changed it to if shell changing is allowed (per table.c) and it is a standard shell OR if uid=0, then allow changing." Makes sense to me. - Update man page.
* Update -current ipfw program as well.phk1996-02-232-170/+29
| | | | I hope it all compiles...
* Big sweep over the IPFIREWALL and IPACCT code.phk1996-02-239-851/+361
| | | | | | | | | | | | | | Close the ip-fragment hole. Waste less memory. Rewrite to contemporary more readable style. Kill separate IPACCT facility, use "accept" rules in IPFIREWALL. Filter incoming >and< outgoing packets. Replace "policy" by sticky "deny all" rule. Rules have numbers used for ordering and deletion. Remove "rerorder" code entirely. Count packet & bytecount matches for rules. Code in -current & -stable is now the same.
* rpc.yppasswdd instead of yppasswddadam1996-02-231-2/+2
|
* Add a dire warning about misusing the setlogin() system call. Be verypeter1996-02-231-1/+46
| | | | | | | explicit that it is global to the entire "session", and that setsid() or daemon() are need to have been called at some point. The most notable offender of setlogin() misuse is XFree86's xdm.
* Kill gets() foundache1996-02-231-3/+3
|
* Add a note about the RFC-1535 compliant behaviour of the recent BINDjoerg1996-02-221-1/+32
| | | | | | version that's now shipping with FreeBSD. Pointed-out by: Holm Tiffe <holm@geophysik.tu-freiberg.de>
* Make the default behavior of local port assignment match traditionalpeter1996-02-224-30/+163
| | | | | | | | | | | | | | | | | | | | | | | | | systems (my last change did not mix well with some firewall configurations). As much as I dislike firewalls, this is one thing I I was not prepared to break by default.. :-) Allow the user to nominate one of three ranges of port numbers as candidates for selecting a local address to replace a zero port number. The ranges are selected via a setsockopt(s, IPPROTO_IP, IP_PORTRANGE, &arg) call. The three ranges are: default, high (to bypass firewalls) and low (to get a port below 1024). The default and high port ranges are sysctl settable under sysctl net.inet.ip.portrange.* This code also fixes a potential deadlock if the system accidently ran out of local port addresses. It'd drop into an infinite while loop. The secure port selection (for root) should reduce overheads and increase reliability of rlogin/rlogind/rsh/rshd if they are modified to take advantage of it. Partly suggested by: pst Reviewed by: wollman
* Remove useless (for us) Makefiles. There were already other "Makefile.dist"peter1996-02-2256-6351/+0
| | | | | | | files missing, so these shouldn't hurt. If somebody wanted to use sendmail 8.7 on their machine, they should use a clean dist anyway, not this one. Submitted by: wollman
* Merge 8.7.3->8.7.4 changes onto mainline.peter1996-02-222-6/+13
|
* This commit was generated by cvs2svn to compensate for changes in r14182,peter1996-02-223-9/+29
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Update to sendmail-8.7.4. This fixes a DNS related security vulnerabilty.peter1996-02-225-15/+42
| |
* | Fixed bug in Path MTU Discovery that caused the system to have to re-dg1996-02-222-48/+8
| | | | | | | | | | | | | | discover the Path MTU for each connection if the connecting host didn't offer an initial MSS. Submitted by: davidg & olah
* | Add Bernd Rosauer to contributors.tg1996-02-221-1/+2
| |
* | Add a "NO_SWAPPING" option to disable swapping. This was originally donedg1996-02-222-15/+24
| | | | | | | | | | | | | | | | | | | | to help diagnose a problem on wcarchive (where the kernel stack was sometimes not present), but is useful in its own right since swapping actually reduces performance on some systems (such as wcarchive). Note: swapping in this context means making the U pages pageable and has nothing to do with generic VM paging, which is unaffected by this option. Reviewed by: <dyson>
* | Fix a problem that select did not work with direct writes. Makedyson1996-02-221-8/+15
| | | | | | | | wakeup channels more consistant also.
* | . cast the error and status registers properly to (unsigned short),joerg1996-02-221-5/+9
| | | | | | | | | | | | to avoid misinterpreting the 0x8000 bit as a negative sign, . use the <machine/wtio.h> register def's to print them.
* | . move out the error and status register def's for wt intojoerg1996-02-223-27/+76
| | | | | | | | | | | | | | <machine/wtio.h>, so mt(1) can print them, . cosmetics: put the return type and the function name onto different lines.
* | Removed un-used code.nate1996-02-212-24/+0
| |
* | Updated PC-CARD support to contain most of the code from the latestnate1996-02-211-0/+104
| | | | | | | | | | | | | | Japanese BSD-Nomad release. Reviewed by: phk Submitted by: hosokawa@mt.cs.keio.ac.jp and the rest of the Nomads
* | Updated PC-CARD support to contain most of the code from the latestnate1996-02-215-19/+160
| | | | | | | | | | | | | | Japanese BSD-Nomad release. Reviewed by: phk Submitted by: hosokawa@mt.cs.keio.ac.jp and the rest of the Nomads
* | Fix weak random number holeache1996-02-218-15/+284
| | | | | | | | Obtained from: CERT
* | Print out an informative message if the verbose option is givenmpp1996-02-212-3/+7
| | | | | | | | | | | | | | | | | | | | | | and an unknown uid/gid is found in the file system. This is useful if you wind up with a file in your file system that has a uid that is extremely large, since quotacheck will wind up running a very very long time due to it not handling large gaps in uids very well (this is a problem that should be addressed some day). Update the man page to reflect that fact the the -v flag now prints some additional diagnostic messages.
* | Add back missing crypt.3 man page.jkh1996-02-211-1/+2
| |
* | Add a few questions forwarded by Jordan and one from Jörg aboutroberto1996-02-211-5/+121
| | | | | | | | | | | | XDM. Submitted by: geert@sun3.iaf.nl,tedm%toybox@agora.rdrop.com,joerg
* | option -f and -i are exclusive (Posix)wosch1996-02-202-9/+29
| | | | | | | | | | | | respond `Y' is equal to `y' update usage string prompt only if source exist
* | Submitted by: John Hay -- John.Hay@csir.co.zajulian1996-02-201-2/+7
| | | | | | | | fix broken local routing .. (broken in previous patch)
* | Make the "arpresolve: can't allocate llinfo" error messagefenner1996-02-201-2/+3
| | | | | | | | | | | | more useful by printing out the IP address it was trying to resolve, since we're seeing so many complaints about this error.
* | Changed the dimensions of __CTOR_LIST__ and __DTOR_LIST__ from 0jdp1996-02-201-14/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | to 2. This makes them agree with the declarations in libgcc, and clears the way once again for linking c++rt0.o into all libraries, and eliminating CPLUSPLUSLIB from <bsd.lib.mk>. (I have not made that change yet, because there is still a bootstrapping problem for "make world".) Also, removed a check which ensured that the constructor count in the first word of __CTOR_LIST__ was greater than zero before traversing the list. I had added that check earlier, but it is no longer necessary, now that there is guaranteed to be at least 2 words in __CTOR_LIST__.
* | cosmetic fixes plus bring the cdevsw and bdevsw entriesjulian1996-02-191-10/+12
| | | | | | | | into line with the new form.
* | allow the default tape unit to try figure out what it is rather thanjulian1996-02-191-2/+6
| | | | | | | | forcing it to 512 byte blocks....
* | Don't initialize udata, fix usage stringpst1996-02-191-4/+3
| |
* | Don't initialize udata, remove bogus case, fix usage stringpst1996-02-192-6/+5
| |
* | -- is implemented in getopt(3)pst1996-02-191-5/+2
| | | | | | | | -? is an unnecessary case statement and not useful
OpenPOWER on IntegriCloud