| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Submitted by: kuriyama
MFC after: 3 days
|
| |
|
|
|
|
|
|
| |
(s/IPFIREWALL_DEFAULT_TO_ACCEPT/IPV6FIREWALL_DEFAULT_TO_ACCEPT/)
MFC after: 1 week
|
|
|
|
| |
Submitted by: Danny Braniss <danny@cs.huji.ac.il>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
non-printable characters to sneak into /var/log/messages (e.g.
someone aims a Solaris/Linux RCP exploit at your FreeBSD box and
you end up with his shellcode as part of a log entry). You might
get something like,
host.mydom.org login failures:
Binary file (standard input) matches
In the daily security script as a result. Allowing attackers to
mess with your security script's ability to accurately report
is a Bad Thing. Tell grep(1) to treat /var/log/messages like a
text file even if it has non-printable characters.
Submitted by: Tim Zingelman <zingelman@fnal.gov> on freebsd-security
Approved by: ru
MFC after: 1 week
|
|
|
|
|
|
|
| |
the default section and into the papchap section.
It's really irritating when you run ppp with no arguments and end up
blowing away your default route !
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the following description in RFC2461:
AdvSendAdvertisements
A flag indicating whether or not the router sends
periodic Router Advertisements and responds to
Router Solicitations.
Default: FALSE
Note that AdvSendAdvertisements MUST be FALSE by
default so that a node will not accidentally start
acting as a router unless it is explicitly
configured by system management to send Router
Advertisements.
Submitted by: JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
MFC after: 1 week
|
|
|
|
|
| |
To use a FAITH actually, you also need faithd(8) setup.
Please consult faithd(8) manpage.
|
|
|
|
| |
MFC after: 2 weeks
|
|
|
|
| |
MFC after: 3 days
|
|
|
|
| |
MFC after: 1 week
|
|\
| |
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| | |
Note that `rc' and `rc.shutdown' could not be imported because we already
have files with those names.
|
| |
| |
| |
| |
| | |
Note that `rc' and `rc.shutdown' could not be imported because we already
have files with those names.
|
| |
| |
| |
| |
| | |
PR: 28185
Submitted by: Gordon Tetlow <gordont@bluemtn.net>
|
| |
| |
| |
| | |
from another host.
|
| |
| |
| |
| |
| | |
PR: 26870
Submitted by: Tomonobu AKIMOTO <akimoto@xephion.ne.jp>
|
| | |
|
| |
| |
| |
| |
| | |
PR: 27707
Approved by: bmah, markm
|
| |
| |
| |
| |
| |
| |
| | |
is just a shell script for backward compatibility. Now, we always use
ifconfig(8) instead of prefix(8).
MFC after: 3 weeks
|
| |
| |
| |
| | |
c) The listing should be kept in filename sorted order.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.
TODO:
- The definitions of SADB_* in sys/net/pfkeyv2.h are still different
from RFC2407/IANA assignment because of binary compatibility
issue. It should be fixed under 5-CURRENT.
- ip6po_m member of struct ip6_pktopts is no longer used. But, it
is still there because of binary compatibility issue. It should
be removed under 5-CURRENT.
Reviewed by: itojun
Obtained from: KAME
MFC after: 3 weeks
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
Submitted by: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
PR: 28014
MFC after: 1 week
|
| | |
|
| |
| |
| |
| | |
Requested by: wollman, rwatson
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
after the network is configured.
Future remote filesystem types should be added to remote_fstypes, which
is a whitespace-delimited list of type:description pairs.
The specific problem this fixes right now is that smbfs mounts described
in /etc/ftsab were failing.
|
| |
| |
| |
| | |
Reviewed by: ru
|
| |
| |
| |
| |
| | |
Reminded by: Niels Chr. Bank-Pedersen <ncbp@bank-pedersen.dk>
MFC after: 1 week
|
| | |
|
| |
| |
| |
| | |
as /usr/include/dev/ic.
|
| |
| |
| |
| | |
a more BSD flavour.
|
| |
| |
| |
| | |
Submitted by: sumikawa
|
| |
| |
| |
| |
| |
| |
| | |
Make the default setting YES for now to get some experience with it.
Note: If people starts seeing disk errors because of this then it
should not be backed.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
With a small disk being 20GB these days, chances are pretty good that
an ailing sector will not be read while still being recoverable by
the drive.
Diskcheck daemon will read disks in the background at a low rate and
that way give the diskdrive a chance to detect and correct soft read
errors before they become hard errors.
Idea by: phk
Written by: ben
|
| |
| |
| |
| |
| |
| | |
PR: 26543
Submitted by: Brooks Davis <brooks@one-eyed-alien.net>
MFC after: 3 weeks
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
(which is present both in /usr and /usr/local) which is causing a few
ports to erroneously report mtree failures on bento.
Submitted by: ade
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
Submitted by: Miklos Niedermayer <mico@bsd.hu>
PR: conf/27726
|
| |
| |
| |
| |
| |
| |
| |
| | |
originally submitted patch (oops!).
Also check for an empty $daily_accounting_save.
Submitted by: Udo Schweigert <Udo.Schweigert@cert.siemens.de>
|
| |
| |
| |
| |
| | |
Submitted by: Udo Schweigert <Udo.Schweigert@cert.siemens.de>
MFC after: 2 weeks
|