| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
pam_login_access(8) and pam_securetty(8) to enforce various checks
previously done by login(1) but now handled by PAM, and pam_lastlog(8) to
record login sessions in utmp / wtmp / lastlog.
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
| |
install parts of /etc manually and it helps to have a makefile for
each subdir even if the main makefile doesn't invoke it.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
10 in -STABLE), pccardd's string comparison between
pccard.conf's entry and PC card's CIS tupple became strict
matching.
As influences of this commit, some PC cards don't work since
some /etc/default/pccard.conf's card identifiers entries are
incorrectly described.
- Lexar Media compact flash
- IO DATA CBIDE2 in 16 bit mode
- TOSHIBA Portable 24X Speed CD-ROM Drive PA2673UJ
- Hewlett Packard M820e (CD-writer)
Update these card configs.
PR: 33815
Obtained from: [bsd-nomads:16128]
|
| |
|
|
|
|
|
|
|
|
| |
conflicts.
PR: conf/34316
Submitted by: Sean Chittenden <sean@chittenden.org>
MFC after: 2 weeks
|
|
|
|
| |
Submitted by: eliedtke@apogeetelecom.com
|
|
|
|
|
|
|
|
|
|
| |
/usr/share/examples/pppd.
Remove the out-of-place pppd(8) configuration files in etc/ppp,
ppp.shells.sample and ppp.deny.
Make the appropriate changes to the build process, etc/Makefile and
etc/mtree/BSD.usr.mtree, so it all works.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
/usr/share/examples/pppd.
Update pppd(8) documentation to reflect this, usr.sbin/pppd/pppd.8.
Remove the out-of-place pppd(8) configuration files in etc/ppp,
ppp.shells.sample and ppp.deny.
Make the appropriate changes to the build process, etc/Makefile and
etc/mtree/BSD.usr.mtree, so it all works.
The files from etc/ppp, ppp.shells.sample and ppp.deny, were moved
with a repo copy. Note it in the logs with a forced commit to these
two.
Submitted by: Maxim Konovalov <maxim@macomnet.ru> provided the new samples.
|
|
|
|
|
|
|
|
| |
This change was submitted to the freebsd-audit mailing list for review
but received no feedback. Hindsight-enabled reviews are welcome.
PR: conf/31358
Submitted: Thomas Quinot <thomas@cuivre.fr.eu.org>
|
|
|
|
|
|
|
|
| |
# This card has the same PCMCIA and OEM id as ELSA XI300 wireless card, which
# appears to be listed elsewhere in this file.
Submitted by: Abe Toshiaki-san <ans@sun-tec.co.jp>
MFC After: 5 days
|
|
|
|
|
|
|
|
|
|
| |
Try this out in -CURRENT, MFC, and then consider dropping the
'log_in_vain' knob all together. It really is something for
sysctl.conf(5).
PR: bin/32953
Reviewed by: -bugs discussion
MFC after: 1 week
|
|
|
|
|
| |
Approved by: ru, silence on -ports
MFC after: 1 week
|
| |
|
|
|
|
|
|
| |
The code will be fixed for all known security vulnerabilities,
and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for
those who still want it installed setuid for whatever reasons.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
users who don't wish to use it. If the admin is worried about leaking
information about which users exist and which have OPIE enabled, the
no_fake_prompts option can simply be removed.
Also insert the appropriate pam_opieaccess lines after pam_opie to break
the chain in case the user is logging in from an untrusted host, or has a
.opiealways file. The entire opieaccess / opiealways concept is slightly
unpammish, but admins familiar with OPIE will expect it to work.
Reviewed by: ache, markm
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
twentyfour hours ago, except for RCS ids.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
"[default=ignore success=done cred_err=die]"
options instead of "required"
|
|
|
|
|
|
|
| |
changed firmware and the new cards don't work without this.
Submitted by: ume
MFC after: 3 days
|
|
|
|
| |
chained with pam_opie
|
| |
|
|
|
|
|
|
|
|
| |
Accton airDirect WN3301
Melco WLI-CF-S11G
GeoWave GW-NS11S
Submitted by: Shigeru Ishida-san on bsd-nomads (16142,16143,16144)
|
|
|
|
|
|
|
|
|
|
|
|
| |
We now do it as a "camcontrol rescan all" which is something ken
promised to implement; for the time being it's not worse than the old
"camcontrol rescan $device" which ended up in something like
"camcontrol rescan aic1". Currently, camcontrol misinterprets the
third non-numeric arg as number 0, and rescans bus 0, which is about
the best we could get at this time.
Approved by: imp
MFC after: 1 week
|
|
|
|
| |
to be wrapped around 60, others around 40 columns.
|
|
|
|
| |
o Improve line-wrapping of another comment for consistency.
|
|
|
|
|
| |
install parts of /etc manually and it helps to have a makefile for
each subdir even if the main makefile doesn't invoke it.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The catpaging and setuidness features of man(1) combined make
it vulnerable to a number of security attacks. Specifically,
it was possible to overwrite system catpages with arbitrarily
contents by either setting up a symlink to a directory holding
system catpages, or by writing custom -mdoc or -man groff(1)
macro packages and setting up GROFF_TMAC_PATH in environment
to point to them. (See PR below for details).
This means man(1) can no longer create system catpages on a
regular user's behalf. (It is still able to if the user has
write permissions to the directory holding catpages, e.g.,
user's own manpages, or if the running user is ``root''.)
To create and install catpages during ``make world'', please
set MANBUILDCAT=YES in /etc/make.conf. To rebuild catpages
on a weekly basis, please set weekly_catman_enable="YES" in
/etc/periodic.conf.
PR: bin/32791
|
|
|
|
|
|
| |
be removed outright.
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
|
| |
pam.d will find out about it by reading pam.conf.
Sponsored by: DARPA, NAI Labs
|
| |
|
|
|
|
| |
it all over again.
|
|
|
|
|
|
| |
definitely need coffee.
Apologies to: ache
|
| |
|
|
|
|
| |
Sponsored by: DARPA / NAI Labs
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Submitted by: Michael Johansson <micke@nevermind.net>
o Sony PCWA-C100 WaveLAN card
Submitted by: "Jeremiah Gowdy" <jgowdy@home.com>
o Corega KK Wireless LAN PCCA-11 (version b?)
Submitted by: Masahide *MAC* Noda <mac@clave.gr.jp>
|
|
|
|
|
|
| |
DEPCM-BA card, as found on my rev. C01 card.
MFC after: 1 week
|
| |
|
| |
|
| |
|
|
|
|
|
| |
PR: 33343
Submitted by: Adrian Penisoara <ady@warpnet.ro>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
to have backward compatibility symbolic links.
This code should check existence of deprecated locales and
fix them using following scheme:
. if new locale directory exisists and is a symlink -- remove it
. if old locale directory exists and not a symlink -- rename it to
its new name
This should allow to mtree(1) and existing locale aliases make(1)
rules to setup locale dirs correctly (avoid self-referenced symlinks)
BTW, this commit brings in backward compatibility support for ru_SU
locales (aliased to appropriate ru_RU ones).
|
|
|
|
|
|
|
|
|
|
| |
- The disktab was taken from etc.alpha.
- rc.sparc64 doesn't do anything right now.
- The ttys file has all the vty's commented out since we don't know how
those will work yet. Also, an entry is added for the Openfirmware
console device.
Submitted by: jake (partially)
|