| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
| |
directory can be specified for a user or a group.
Add the manpage ftpchroot(5) since the file's format has grown
complex enough.
PR: bin/45327
Portions submitted by: Hideki SAKAMOTO <sakamoto@hlla.is.tsukuba.ac.jp>
MFC after: 1 week
|
|
|
|
|
|
|
|
|
|
|
| |
than the LOMAC-specific interfaces for listing MAC labels. This permits
ls to view MAC labels in a manner similar to getfmac, when ls is used
with the -l argument. Next generation LOMAC will use the MAC Framework
so should "just" work with this and other policies. Not the prettiest
code in the world, but then, neither is ls(1).
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
|
|
|
| |
for this stuff.
|
|
|
|
| |
(and dcc the committer a dictionary)
|
|
|
|
| |
are not yet warning-clean. Tested on i386 and alpha.
|
|
|
|
| |
DPADD and LDADD.
|
|
|
|
| |
Submitted by: Mike Makonnen <mike_makonnen@yahoo.com>
|
|
|
|
| |
Found by: ken
|
|
|
|
|
|
|
| |
with the conversation function and challenges which needs to be
revisited, so in the interim a hack is introduced to provide
an OPIE challenge (which is random if OPIE does not apply)
at all non-anonymnous logins.
|
|
|
|
| |
wanting static apps).
|
| |
|
|
|
|
| |
Asked for by: BDE
|
|
|
|
|
|
|
| |
The PAM_FAIL_CHECK and PAM_END macros in su.c came from the util-linux
package's PAM patches to the BSD login.c
Submitted by: "David J. MacKenzie" <djm@web.us.uu.net>
|
|
|
|
| |
- MAN[1-9] -> MAN.
|
| |
|
|
|
|
|
|
|
| |
files. Mostly -I${.CURDIR} was needed -- especially for YACC generated
files as the new cpp does not look in the ultimate source file
(ie, the .y file)'s directory as told by the "#line" directive. Some were
misspellings of "-I${.CURDIR}" as "-I.".
|
|
|
|
| |
include files in subdirs of it.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
interface, and statically link them to the programs using them.
These functions, upon reflection and discussion, are too generically
named for a library interface with such specific functionality.
Also the api that they use, whilst ok for private use, isn't good
enough for a libc function.
Additionally there were complications with the build/install-world
process. It depends heavily upon xinstall, which got broken by
the change in api, and caused bootstrap problems and general mayhem.
There is work in progress to address future problems that may be
caused by changes in install-chain tools, and better names for
{g|s}etflags can be derived when some future program requires them.
For now the code has been left in src/lib/libc/gen (it started off
in src/bin/ls).
It's important to provide library functions for manipulating file
flag strings if we ever want this interface to be adopted outside
of the source tree, but now isn't necessarily the right moment
with 4.0-release just around the corner.
Approved: jkh
|
|
|
|
|
|
|
| |
-g for CFLAGS which was set at debugging time was mistakenly committed,
so removed it.
Approved by: jkh
|
|
|
|
|
|
|
| |
ftp, telnet, ftpd, faithd
also telnet related sync with crypto, secure, kerberosIV
Obtained from: KAME project
|
|
|
|
| |
many places nowadays.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
really dislikes this, we could add a switch to disable it at runtime and
check in popen.c.
|
|
|
|
|
| |
of in "src/usr.bin/login". The latter instance is going away. As
soon as ftpd is PAMized, it won't need to use klogin.c at all.
|
| |
|
|
|
|
|
|
| |
target.
Reviewed by: <many different folks>
Submitted by: Nickolay N. Dudorov" <nnd@nnd.itfs.nsk.su>
|
|
|
|
| |
definition of a system's virtual hosts.
|
|
|
|
|
|
|
|
|
|
|
| |
modules from src/bin/ls, and handling exec(_PATH_LS,..) as a
special case, very useful in an environment where many users
are given chroot access. "~/etc/{s}pwd.db" files are still
needed if uid/gid->user/group translation is desired.
To enable this it must be compiled with the make variable
FTP_INTERNAL_LS defined, either in /etc/make.conf or the
environment.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
|
| |
|
|
|
|
|
|
|
|
| |
Document the new -R (relax paranoia) option.
From NetBSD/Lite2: code and man page cleanups, Kerberos IV hooks
(relax, we're still exportable), and /etc/ftpchroot feature for
semi-anonymous accounts
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
or addresses other than the requestor's address. This violates the FTP
protocol (hmm...as I write this, I'm going to change this to a run-time var.)
Require login before PASV and RNTO commands.
Close unused PASV ports so they don't hang around forever.
Do not allow file overwrites via rename or STOR when anonymous
(suspenders).
Clean up buffer utilization.
My code, but heavily inspired by Hobbit's changes to wu-ftpd as pointed out
by Mike Prettejohn and Kit Knox.
|
| |
|
|
|
|
|
| |
compiled values. see sysctl net.inet.ip.portrange.* and the IP_PORTRANGE
discussion in <netinet/in.h>
|
| |
|
|
|
|
|
| |
I've left the old code in there under #ifdef OLD_SETPROCTITLE in case
somebody wants to try to compile out ftpd on some other machine.
|
|
|
|
|
|
|
| |
in a firewall environment. Original idea by Mark Tracy (?).
Reviewed by: wollman
Submitted by: pst
|
| |
|
|
|
|
|
|
| |
libskey contains references to _crypt and can't resolve it unless
-lcrypt occurs after it in the link command. This only occurs when
linking statically.
|
|
|
|
|
|
|
| |
transfers. It only does this when -S is set.
Reviewed by:
Submitted by:
Obtained from: logdaemon package
|
| |
|
| |
|
|
|
|
|
| |
Reviewed by:
Submitted by: guido
|
|
|
|
| |
Submitted by: Geoff
|