| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
Pointed out by: David Schultz
|
|
|
|
|
| |
PR: docs/40952
MFC After: 3 days
|
|
|
|
|
| |
PR: docs/51397
MFC After: 3 days
|
|
|
|
|
| |
PR: 50796
Submitted by: Dmitry Sivachenko <mitya@cavia.pp.ru>
|
| |
|
|
|
|
|
|
| |
preparing to edit it.
PR: bin/50563
|
|
|
|
|
|
|
| |
or the tty, just block selected signals in the parent like system(3) does.
Many thanks to bde for his assistance in finding the correct solution.
PR: bin/50679
|
|
|
|
|
|
|
|
| |
proper way to fix this. The way this works is to prepend "exec " to
the editor command to eliminate the "shell in the middle" which prevents
us from properly reawakening the editor after a SIGTSTP.
PR: bin/50679
|
| |
|
|
|
|
|
|
|
| |
variable.
PR: 48748
Reviewed by: mike (mentor)
|
|
|
|
|
|
|
|
| |
revision of this file, but note that they are not supported in the
base system.
Requested by: ache
Reviewed by: ache, mike (mentor)
|
|
|
|
|
|
|
|
|
|
|
|
| |
password quality, not login.conf(5).
- Move warnexpire and warnpasswd from the ``Accounting Limits''
section to ``Authentication'', and nix everything else in the
former section. The accounting knobs are not available in
the base system, and the subset of them available in ports
should be documented in the ports' manpages.
PR: 47960
Reviewed by: mike (mentor), doc
|
| |
|
|
|
|
|
|
|
|
| |
(previous variant return NULL pointer for both empty file case and error case,
so caller can't sense error properly).
It not affect existen programs because property_find() now returns NULL
for both NULL pointer and NULLified struct.
|
| |
|
|
|
|
| |
Handle NULL return from malloc and strdup
|
|
|
|
| |
Add FreeBSD Id tag where missing.
|
| |
|
|
|
|
|
|
| |
Approved by: re
Sponsored by: DARPA, Network Associates Labs
Obtained from: TrustedBSD Project
|
|
|
|
| |
to be non-fatal due to stack alignment roundups.
|
|
|
|
|
|
|
|
| |
information, since we rely on the pwd entry to know what MAC labels
to set as part of the login process.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
| |
|
|
|
|
| |
Submitted by: joerg
|
|
|
|
|
|
|
|
|
|
|
|
| |
if the user has a 'label' entry in their login class. If so, attempt
to set that label on the process as part of the credential setup. If
we're unable to parse the label, or unable to set the label, fail.
In the future, we may also want to warn if a label is set but the
kernel doesn't support MAC.
Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
that it should also set the user's default MAC label, if available and
permitted.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
|
|
| |
for MAC-related commits to the login infrastructure.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
| |
|
|
|
|
|
| |
"term" according to manpage, i.e. not overwrite it, if already present in
environment.
|
|
|
|
| |
Submitted by: bde
|
|
|
|
| |
by RLIMIT_VMEM addition.
|
| |
|
|
|
|
| |
sshd, /usr/bin/login, etc)
|
|
|
|
|
|
|
| |
Distinguish between a held lock and a failed lock op.
If rpc.lockd is not running on a diskless client this makes clearer
what the problem is.
|
|
|
|
| |
Submitted by: Sergey Zorin <sergey@cc.tpu.edu.ru>
|
| |
|
|
|
|
| |
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
Sponsored by: DARPA, NAI Labs
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
named by its argument and use ttyslot(3) instead to determine what slot to
use. The problem is that sshd(8) calls pam_open_session(3) before forking
the child (as it should), at which point it does not have a controlling
terminal. Also, ttyslot(3) is very crude as it assumes fd 0, 1 or 2 refers
to the controlling terminal, which is usually (but not always) the case.
Instead of using ttyslot(3) to determine the slot number, look up the
specified tty in /etc/ttys ourselves (this is what ttyslot(3) does anyway).
(perforce change 9969)
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
|
|
|
|
| |
them to point at static strings that contain the default paths. This
makes 'vipw -d' work again (I broke it in rev 1.21; apologies for taking
so long to fix it.)
Spotted by: Olivier Houchard <doginou@cognet.ci0.org>
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
| |
Approved by: murray
MFC after: 1 week
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|