summaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* GC code that moved to crtbrand.c.obrien2002-01-281-4/+0
|
* Do not try to convert to char already converted C monetary locale members.ache2002-01-282-28/+40
| | | | Do this conversion on locale load stage instead.
* o return EINVAL if acl_to_text() have been sent a NULL acl. ↵jedgar2002-01-261-1/+6
| | | | | | o update copyright dates. Reviewed by: rwatson
* Use ctime_r to build the timestamp for syslog, so that we don'tdwmalone2002-01-251-2/+2
| | | | | | | | clobber a ctime buffer which is passed in. PR: 34022 Submitted by: Hartmut Brandt <brandt@fokus.gmd.de> MFC after: 2 weeks
* Add libfetch.so.2 from a 17-Dec-2001 4.5-RC (releng4) build.obrien2002-01-242-0/+456
|
* WARNS=4 fixes. Protect with NO_WERROR for the modules that havemarkm2002-01-2421-127/+138
| | | | warnings that are hard to fix or that I've been asked to leave alone.
* PAM modules shouldn't call putenv(); pam_putenv() is sufficient. Thedes2002-01-241-1/+0
| | | | | | | caller is supposed to check the PAM envlist and export the variables it contains; if it doesn't, it's broken. Sponsored by: DARPA, NAI Labs
* Change the order in which pam_sm_open_session() updates the logs. Thisdes2002-01-242-25/+14
| | | | | | | | | | | doesn't really make any difference, except it matches wtmp(5) better. Don't do anything in pam_sm_close_session(); init(8) will take care of utmp and wtmp when the tty is released. Clearing them here would make it possible to create a ghost session by logging in, running 'login -f $USER' and exiting the subshell. Sponsored by: DARPA, NAI Labs (but the bugs are all mine)
* Correctly interpret PAM_RHOST being unset as an indicator of a localdes2002-01-241-3/+2
| | | | | | login. Sponsored by: DARPA, NAI Labs
* Correctly interpret PAM_RHOST being unset as an indicator of a localdes2002-01-241-1/+5
| | | | login.
* Style nits.des2002-01-241-2/+2
| | | | Sponsored by: DARPA, NAI Labs
* get __time_load_locale() prototype from include file, rather than declarephantom2002-01-241-3/+2
| | | | own
* * style(9)'fyphantom2002-01-242-33/+34
| | | | * declare prototype for __time_load_locale() in timelocal.h
* Fix problem where with PicoBSD the shell coredumps if it does not find anobrien2002-01-241-1/+1
| | | | | | entry for its terminal type in /etc/termcap. Submitted by: bde
* Document the even_root option.des2002-01-241-1/+7
| | | | Sponsored by: DARPA, NAI Labs
* Don't let root through unless the "even_root" option was specified.des2002-01-241-2/+16
| | | | Sponsored by: DARPA, NAI Labs
* Change brk's prototype from char *brk(const char *) to int brk(const void *)dwmalone2002-01-241-15/+7
| | | | | | | | | | | | | | | and sbrk's prototype from char *sbrk(int) to void *sbrk(intptr_t). This makes us more consistant with NetBSD and standards which include these functions. Bruce pointed out that ptrdiff_t would probably have been better than intptr_t, but this doesn't match other implimentations. Also remove local declarations of sbrk and unnecessary casting. PR: 32296 Tested by: Harti Brandt <brandt@fokus.gmd.de> MFC after: 1 month
* Add a PAM module that records sessions in utmp/wtmp/lastlog.des2002-01-243-0/+369
| | | | Sponsored by: DARPA, NAI Labs
* Fix some pastos. Rather shoddy of me...des2002-01-242-5/+5
| | | | Sponsored by: DARPA, NAI Labs
* Add libfetch.so.2 from a 10-Dec-2001 releng4 build.obrien2002-01-242-0/+392
|
* Add a PAM module that provides an account management component for checkingdes2002-01-233-0/+285
| | | | | | | | | | | | | either PAM_RHOST or PAM_TTY against /etc/login.access.o This uncovers a problem with PAM_RHOST, in that if we always set it, there is no way to distinguish between a user logging in locally and a user logging in using 'ssh localhost'. This will be fixed by first making sure that all PAM modules can handle PAM_RHOST being unset (which is currently not the case), and then modifying su(1) and login(1) to not set it for local logins. Sponsored by: DARPA, NAI Labs
* Add an AUTHORS section crediting ThinkSec, DARPA and NAI Labs.des2002-01-232-2/+16
| | | | Sponsored by: DARPA, NAI Labs
* Add pam_ssh support to the static PAM library, libpam.a:ru2002-01-232-4/+5
| | | | | | | | | | | - Spam /usr/lib some more by making libssh a standard library. - Tweak ${LIBPAM} and ${MINUSLPAM}. - Garbage collect unused libssh_pic.a. - Add fake -lz dependency to secure/ makefiles needed for dynamic linkage with -lssh. Reviewed by: des, markm Approved by: markm
* Base the comparison on UIDs, not on user names.des2002-01-232-14/+12
| | | | Sponsored by: DARPA, NAI Labs
* Make libssh.so useable (undefined reference to IPv4or6).ru2002-01-231-2/+0
| | | | | Reviewed by: des, markm Approved by: markm
* The sixth argument to the NET_RT_IFLIST sysctl is actually 0 forru2002-01-231-1/+1
| | | | all interfaces, and ifnet.if_index value for a single interface.
* Undo the work-around for the sendfile bug where nbytes needed the hdr/trldg2002-01-221-11/+0
| | | | | | | size added to it in order for it to work properly when nbytes != 0. Reviewed by: alfred MFC after: 3 days
* Restore C99 standard conformance information, isblank() _is_ in finalache2002-01-221-0/+5
| | | | | | standard document Pointed by: "Jacques A. Vidrine" <n@nectar.cc>
* Use the proper type (gid_t) for (group)->gr_gid to be orthogonalmarkm2002-01-225-15/+16
| | | | | | with uid_t usage and (user)->pw_uid. PR: 3242
* Fix the description of the O_NONBLOCK flag to match reality.ru2002-01-221-2/+1
| | | | | Prodded by: Maxim Konovalov <maxim@macomnet.ru> Obtained from: BSD/OS
* Fix a typo I made in revision 1.5.ru2002-01-221-1/+1
| | | | Submitted by: trevor
* Finish cleanup in kvm.c revisions 1.10 and 1.11 -- mark sf (swapfile)ru2002-01-222-6/+4
| | | | | | | | | argument to kvm_open() and kvm_openfiles() as unused. BSD didn't read swap since kvm.c CSRG revision 5.21 (u-area is pageable under new VM. no need to read from swap.) The old !NEWVM code was removed in CSRG revision 5.23 (~ten years ago).
* Link pam_opieaccess, pam_self and pam_ssh into the static library.des2002-01-211-0/+3
| | | | Sponsored by: DARPA, NAI Labs
* On second thought, getpwnam() failure should be treated just as if the userdes2002-01-211-4/+1
| | | | | | | existed, but had no OPIE key, i.e. PAM_IGNORE. Pointed out by: ache Sponsored by: DARPA, NAI Labs
* Return PAM_SERVICE_ERR rather than PAM_USER_UNKNOWN if getpwnam() fails, asdes2002-01-211-1/+1
| | | | | | | PAM_USER_UNKNOWN will break the chain, revealing to an attacker that the user does not exist. Sponsored by: DARPA, NAI Labs
* Further changes to allow enabling pam_opie(8) by default:des2002-01-212-12/+38
| | | | | | | | | | | | | | | - Ignore the {try,use}_first_pass options by clearing PAM_AUTHTOK before challenging the user. These options are meaningless for pam_opie(8) since the user can't possibly know the right response before she sees the challenge. - Introduce the no_fake_prompts option. If this option is set, pam_opie(8) will fail - rather than present a bogus challenge - if the target user does not have an OPIE key. With this option, users who haven't set up OPIE won't have to wonder what that "weird otp-md5 s**t" means :) Reviewed by: ache, markm Sponsored by: DARPA, NAI Labs
* Add a new module, pam_opieaccess(8), which is responsible for checkingdes2002-01-215-0/+300
| | | | | | | | /etc/opieaccess and ~/.opiealways so we can decide what to do after pam_opie(8) fails. Sponsored by: DARPA, NAI Labs Reviewed by: ache, markm
* snprintf bloat -> strlcpyache2002-01-201-2/+3
| | | | | | Add getpwnam return check Approved by: des, markm
* Check the return value from read() when reading the CR/LF at the end of ades2002-01-201-2/+4
| | | | | | | chunk. PR: bin/33608 MFC after: 2 weeks
* Mark uploads as O_WRONLY, not O_RDONLY.des2002-01-201-2/+6
| | | | | PR: misc/34043 MFC after: 2 weeks
* Minor typo fix: uquad_t -> u_quad_t.yar2002-01-201-1/+1
|
* I've been meaning to do this for a while. Add an underscore to thedillon2002-01-191-12/+12
| | | | | | | | time_to_xxx() and xxx_to_time() functions. e.g. _time_to_xxx() instead of time_to_xxx(), to make it more obvious that these are stopgap functions & placemarkers and not meant to create a defacto standard. They will eventually be replaced when a real standard comes out of committee.
* Back out recent changesache2002-01-192-31/+19
|
* If user not exist in OPIE system, return failure immediately insteadache2002-01-191-1/+1
| | | | | of producing fake prompts with random numbers which can be detected by potential intruder in two tries and totally confuse non-OPIE users.
* Back out second right-now-expired password check in pam_sm_chauthtok,ache2002-01-191-2/+1
| | | | old expired password assumed there
* Previous commit was incomplete, use new error code PAM_CRED_ERR toache2002-01-191-2/+1
| | | | indicate die case, different from PAM_SUCCESS and PAM_AUTH_ERR
* Rewrite 'pwok' fallback in the way it can be properly chained with pam_unixache2002-01-191-19/+10
| | | | | | Replace snprintf %s with strlcpy Check for NULL returned from getpwnam()
* Add yet one expired-right-now password check, in pam_sm_chauthtokache2002-01-191-13/+12
| | | | | srandomdev() can't be used in libraries, replace srandomdev()+random() by arc4random()
* Set pwok to 1 for non-OPIE usersache2002-01-191-2/+2
|
* Add missing check for right-now-expired passwordache2002-01-191-0/+2
|
OpenPOWER on IntegriCloud