summaryrefslogtreecommitdiffstats
path: root/lib/libutil/_secure_path.3
Commit message (Collapse)AuthorAgeFilesLines
* The .Fn functioncharnier2003-03-241-1/+2
|
* Correct a typo.dd2002-03-031-1/+1
| | | | | PR: 35273 Submitted by: Nicola Vitale <nivit@libero.it>
* mdoc(7) police: Use the new .In macro for #include statements.ru2001-10-011-2/+2
|
* mdoc(7) police: removed HISTORY info from the .Os call.ru2001-07-101-1/+1
|
* Introduce .Lb macro to libutil manpagesphantom2000-04-221-7/+3
| | | | | | Sort .Nm values in some manpages Remove explicit note about compiling with -lutil, it's implicitly declared by .Lb macro now.
* Add the "use -lutil" line to all functions that require it so people likebillf2000-01-181-0/+5
| | | | | | | Dan Papsian <bugg@bugg.strangled.net> don't anger wpaul and myself with silly linking errors. Reviewed by: chris
* mdoc(7)'fyphantom1999-09-211-3/+6
| | | | Reviewed by: mpp
* $Id$ -> $FreeBSD$peter1999-08-281-1/+1
|
* Bad reference to lstat(3) changed to lstat(2)chris1999-08-141-2/+2
|
* Spelling corrections.jkoshy1998-06-061-2/+2
| | | | | PR: 6868 Submitted by: Josh Gilliam <josh@quick.net>
* For non-root uids, consider root-owned files also 'secure' unless otherwisedavidn1997-05-151-2/+2
| | | | disqualified.
* Summary of login.conf support changes:davidn1997-05-101-0/+70
o Incorporated BSDI code and enhancements, better logging for error checking (which has been shown to be a problem, and is therefore justified, imho); also some minor things we were missing, including better quad_t math, which checks for under/overflows. o setusercontext() now allows user resource limit overrides, but does this AFTER dropping root privs, to restrict the user to droping hard limits and set soft limits within the kernel's allowed user limits. o umask() only set once, and only if requested. o add _secure_path(), and use in login.conf to guard against symlinks etc. and non-root owned or non-user owned files being used. Derived from BSDI contributed code. o revamped authentication code to BSDI's latest api, which includes deleting authenticate() and adding auth_check() and a few other functions. This is still marked as depecated in BSDI, but is included for completeness. No other source in the tree uses this anyway, so it is now bracketed with #ifdef LOGIN_CAP_AUTH which is by default not defined. Only auth_checknologin() and auth_cat() are actually used in module login_auth.c. o AUTH_NONE definition removed (collided with other includes in the tree). [bde] o BSDI's login_getclass() now accepts a char *classname parameter rather than struct passwd *pwd. We now do likewise, but added login_getpwclass() for (sort of) backwards compatiblity, namely because we handle root as a special case for the default class. This will require quite a few changes elsewhere in the source tree. o We no longer pretend to support rlim_t as a long type. o Revised code formatting to be more bsd-ish style.
OpenPOWER on IntegriCloud