| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
kernel access control.
Create directories for per-policy include files.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
by luigi@) and never used share/examples/kld/dyn_sysctl/module.
|
|
|
|
|
| |
instead of the user immutable flag, now that mergemaster handles
schg directories in its /var/tmp/temproot.
|
|
|
|
|
| |
/var/empty, because it makes it difficult for mergemaster(8) to remove
/var/tmp/temproot/var.
|
|
|
|
|
|
|
|
|
|
| |
which needs an empty directory into which to chroot(2).
Hint to the operator that this directory really _should_ be empty
by creating it with mode 0555 and the system immutable flag (schg)
set.
Reviewed by: des
|
| |
|
|
|
|
|
|
| |
following the lead of The XFree86 Project's default.
Approved by: Murray
|
| |
|
| |
|
|
|
|
| |
Reviewed by: grog
|
|
|
|
| |
(anymore).
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
PR: 32265
Submitted by: Thierry Thomas <thierry@pompo.net>
MFC after: 1 week
|
|
|
|
|
|
|
|
| |
the creation of /var/spool/clientmqueue and therefore the need for the
smmsp user and group if NO_SENDMAIL is defined. This required breaking out
the creation of the directory into a new BSD.sendmail.dist mtree file.
MFC after: 1 week
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Install sys/<arch>/include/pc/*.h to /usr/include/machine/pc/.
PR: docs/29534
Install sys/netatm/*/*.h to /usr/include/netatm/*/.
Don't install compatibility symlinks for <machine/soundcard.h>
and <machine/joystick.h>. Three years is enough to be aware of
the change, and these weren't visible in the SHARED=symlinks
case.
Back out include/Makefile,v 1.160 that was a null change anyway
due to the bug in the path, and we now don't want to install
these headers because they would otherwise be invisible in the
SHARED=symlinks case.
Don't install IPFILTER headers. Userland utilities fetch them
directly, and they were not visible in the SHARED=symlinks case.
Resurrect SHARED=symlinks in Makefile.inc1.
PR: bin/28002
Prodded by: bde
MFC after: 2 weeks
|
| |
|
| |
|
|
|
|
| |
include files
|
|
|
|
|
|
| |
PR: misc/34800 (from Steven Grady)
Submitted by: phantom (patch)
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
| |
/usr/share/examples/pppd.
Remove the out-of-place pppd(8) configuration files in etc/ppp,
ppp.shells.sample and ppp.deny.
Make the appropriate changes to the build process, etc/Makefile and
etc/mtree/BSD.usr.mtree, so it all works.
|
|
|
|
|
| |
Approved by: ru, silence on -ports
MFC after: 1 week
|
|
|
|
|
|
| |
The code will be fixed for all known security vulnerabilities,
and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for
those who still want it installed setuid for whatever reasons.
|
|
|
|
|
| |
install parts of /etc manually and it helps to have a makefile for
each subdir even if the main makefile doesn't invoke it.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The catpaging and setuidness features of man(1) combined make
it vulnerable to a number of security attacks. Specifically,
it was possible to overwrite system catpages with arbitrarily
contents by either setting up a symlink to a directory holding
system catpages, or by writing custom -mdoc or -man groff(1)
macro packages and setting up GROFF_TMAC_PATH in environment
to point to them. (See PR below for details).
This means man(1) can no longer create system catpages on a
regular user's behalf. (It is still able to if the user has
write permissions to the directory holding catpages, e.g.,
user's own manpages, or if the running user is ``root''.)
To create and install catpages during ``make world'', please
set MANBUILDCAT=YES in /etc/make.conf. To rebuild catpages
on a weekly basis, please set weekly_catman_enable="YES" in
/etc/periodic.conf.
PR: bin/32791
|
|
|
|
|
| |
PR: 33343
Submitted by: Adrian Penisoara <ady@warpnet.ro>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a packed array so sizeof work. This broke RFMON mode and passing
up 802.11 packets.
The Linux emulation code was derived from the open source Linux driver to
maintain compatibility.
LEAP support is added, hints from Richard Johnson. I've verified this
locally with PC350v42510.img firmware. More bug fixing from Marco to
fix long passwords.
Change DELAYs in flash part of driver to FLASH_DELAY which uses tsleep
so it doesn't look like your system died during a flash update.
Install header files in /usr/include/dev/an
Cleanup some ifmedia bugs add "Home" key mode to ifmedia and ancontrol.
This way you can manage 2 keys a little easier. Map the home mode into
key 5. Enhance ifconfig to dump the various configured SSIDs. I use
a bunch of different ones and roam between them. Use the syntax similar
to the WEP keys to deal with setting difference SSIDs.
Bump up up the Card capabilities RID since they added 2 bytes to it
in the latest firmware. Thankfully we changed it from a terminal
failure so the card still worked but the driver whined.
Some cleanup patches from Marco Molteni.
Submitted by: Richard Johnson <raj@cisco.com>
Marco Molteni <molter@tin.it>
and myself
Various checks: David Wolfskill <david@catwhisker.org>
Reviewed by: Brooks Davis <brooks@freebsd.org>
Warner Losh <imp@freebsd.org>
Approved by: Brooks Davis <brooks@freebsd.org>
Warner Losh <imp@freebsd.org>
Obtained from: Linux emulation API's from Aironet driver.
|
|
|
|
| |
Requested by: ache
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
LC_MESSAGES related data was installed to <locale>/LC_MESSAGES file.
Now it go to <locale>/LC_MESSAGES/SYS_LC_MESSAGES file. LC_MESSAGES
directory is supposed to be storage of message catalogs of userland tools.
This should allow us to avoid many potential problems with future
libintl related functionality introduction.
Thanks for useful suggestions about correct way how to replace plain
files with directories at installworld stage to: Ruslan Ermilov <ru>
|
|
|
|
|
| |
PR: 32450
Submitted by: partially by Alexey Klimov <kao@wiuu.kiev.ua>
|
| |
|
| |
|
|
|
|
|
|
|
| |
The addition of the smbfs examples should have included this delta.
Failure to include this delta broken world.
Reported by: jhay
|
|
|
|
|
|
|
|
|
|
| |
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.
Reviewed by: ru
Approved by: ru
|
| |
|
|
|
|
| |
Sponsored by: DARPA, NAI Labs
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
PR: 25472
Submitted by: Peter Pentchev <roam@ringlet.net>
|
|
|
|
| |
previous commit yesterday may wish to check /var/run for junk.
|
|
|
|
|
|
| |
PR: bin/29966
Approved by: brian
MFC after: 4
|