summaryrefslogtreecommitdiffstats
path: root/libexec/ftpd
Commit message (Collapse)AuthorAgeFilesLines
* Add lomac.c.green2001-11-271-1/+1
| | | | Found by: ken
* Eliminate another instance of the old and well-knownyar2001-11-191-7/+25
| | | | | | | | | DoS bug that the select(2)/accept(2) pair is called on a socket that is in the blocking I/O mode. The bug is triggered if a selected connection dies before the accept(2) leading to the accept(2) blocking virtually forever. MFC after: 1 week
* Don't let a user name in ftpd's proctitleyar2001-10-121-1/+1
| | | | | | | be mistaken for a status message. PR: misc/25217 MFC after: 7 days
* Be consistent about indent at least within one block of code.yar2001-10-121-5/+5
|
* mdoc(7) police: markup nits.ru2001-10-011-1/+3
|
* 1) Use OPIE response only when OPIE keys really usedache2001-09-291-2/+5
| | | | 2) Use commonly used OPIE response form instead of self-made one
* Improve the description on how to construct ~ftp/pub. Specifically,mikeh2001-09-251-5/+7
| | | | | | | | don't instruct users to set the directory mode 777. PR: 30690 Obtained from: NetBSD (with modification) MFC after: 2 weeks
* Remove a field width specifier that's not doing anything more thanmikeh2001-09-101-6/+3
| | | | what using snprintf() achieves. It was also being used incorrectly.
* Do the best we can with respect to fixing command-line option disordersheldonh2001-09-041-62/+62
| | | | | | | | | | in the SYNOPSIS and DESCRIPTION. Note that -l remains an ugly exception, to which no known rules apply, since the specification of a single option multiple times isn't normal standards-compliant CLI behaviour. While here, mark AF_INET* and LOG_* defined values up with Dv.
* Extend the functionality offered by the -o option into a new optionsheldonh2001-09-023-2/+15
| | | | | | | | | | | | | | | -O, which limits the impact of the write-only restriction to guest users. *) The existing manual page's SYNOPSIS and option listing in the DESCRIPTION are already horribly disordered. No attempt has been made to fix this. *) The existing source's getopt() optstring and option handling switch are already horribly disordered. No attempt has been made to fix this. Discussed with: nik, -audit
* long -> off_tache2001-09-021-6/+7
| | | | | | | | | | | long -> time_t %ld -> %qd fseek -> fseeko NOTE: that fseek not works for >long offsets per POSIX: [EOVERFLOW] For fseek( ), the resulting file offset would be a value which cannot be represented correctly in an object of type long.
* Add a new option, '-o', for "Write-only". Disables the RETR command,nik2001-08-283-2/+16
| | | | | | | | | preventing anyone from downloading files. In conjunction with -A, and some appropriate file permissions, this lets you create an anonymous FTP drop box for people to upload files to. The more obvious "-w" flag is already taken by NetBSD's ftpd. "-o" was available as an option letter in all three BSDs.
* Rename the GLOB_MAXPATH flag of glob(3) to GLOB_LIMIT to be compatiblemikeh2001-07-292-2/+2
| | | | | | | | | | with NetBSD and OpenBSD. glob(3) will now return GLOB_NOSPACE with errno set to 0 instead of GLOB_LIMIT when we match more than `gl_matchc' patterns. GLOB_MAXPATH has been left as an alias of GLOB_LIMIT to maintain backwards compatibility. Reviewed by: sheldonh, assar Obtained from: NetBSD/OpenBSD
* Portability configuration data for LukeM ftpd.obrien2001-07-191-0/+281
|
* Remove whitespace at EOL.dd2001-07-151-10/+10
|
* mdoc(7) police: removed HISTORY info from the .Os call.ru2001-07-101-1/+1
|
* Remove S/Key. PAM can do its job. Well, not quite - there is an issuemarkm2001-07-094-63/+19
| | | | | | | with the conversation function and challenges which needs to be revisited, so in the interim a hack is introduced to provide an OPIE challenge (which is random if OPIE does not apply) at all non-anonymnous logins.
* Move the definition of epsvall out of #ifdef VIRTUAL_HOSTING so thatdd2001-06-131-2/+2
| | | | the latter is not required for ftpd to compile.
* Cleaner method of making PAMable apps static (in the optional case ofmarkm2001-04-281-5/+0
| | | | wanting static apps).
* Damn. That should be _enable_ static linking, not _force_ static linking.markm2001-04-281-1/+0
|
* Enable (optional) static linking.markm2001-04-281-0/+6
| | | | Asked for by: BDE
* Change names of functions and variables with global scope that aremarkm2001-04-283-19/+19
| | | | | in conflict with library values of the same name. This allows static linking.
* mdoc(7) police: normalize .Nd.ru2001-04-181-2/+1
|
* Previous clobbered a work-in-progress. Here is the merged result:peter2001-04-171-3/+6
| | | | | | | | | | | | | | | | Limit the "pathname" glob to one item, as that is what all users of it are expecting, except for LIST. Always glob, instead of when the first character is a ~. For example, if you had directories ~/x1, and ~/x2, then "cwd x[1]" would fail, but "cwd ~/x[1]" would work since it was globbed due to the ~ character. Also, "cwd ~/x[12]" used to arbitarily work as it used the first expansion (ie: x1) without an error. Make it return '550 ambiguous' instead of '550 not found' so that the user can see the difference. For LIST, just use the user supplied string as the popen does the glob. Problem noticed by: Ajay Mittal <amittal@iprg.nokia.com>
* Limit number of paths returned via glob() for authorized usersjedgar2001-04-171-0/+4
| | | | using tilde expansion.
* Support the empty "PASS\r\n" command.green2001-04-161-3/+7
|
* Document that SITE extensions are disabled for anonymous logins.ru2001-04-161-0/+2
| | | | Obtained from: logdaemon package by Wietse Venema
* Add the "SITE MD5 filename" facility.phk2001-04-152-1/+16
| | | | | | | | | This allows you to determine if the file on the other side is the same as the one you have without transferring the entire file to compare. Needless to say, if the server end lies to you this check doesn't work, but on the other hand, if it lies to you about the files checksum, what can you trust from it ?
* Add full PAM support for account management and sessions.markm2001-03-272-12/+52
| | | | | | | The PAM_FAIL_CHECK and PAM_END macros in su.c came from the util-linux package's PAM patches to the BSD login.c Submitted by: "David J. MacKenzie" <djm@web.us.uu.net>
* - Backout botched attempt to intoduce MANSECT feature.ru2001-03-261-0/+1
| | | | - MAN[1-9] -> MAN.
* Set the default manual section for libexec/ to 8.ru2001-03-201-1/+0
|
* Teach ftpd about the new GLOB_MAXPATH flag.jlemon2001-03-192-0/+11
|
* When the file was transferred using sendfile(2), we forgot to keep trackdes2001-03-111-0/+1
| | | | | | of the transferred byte count. MFC candidate. PR: bin/25699
* Change the read-only reply to "550 Permission denied.".des2001-02-191-1/+1
|
* Limit commands that can be issued when not logged in:jedgar2001-01-201-70/+90
| | | | | | TYPE, STRU, MODE, ALLO, STAT, ABOR, SITE IDLE, SYST, REST Reviewed by: kris, sheldon
* In send_data(), use sendfile() instead of the mmap() algorithm.dan2000-12-201-20/+22
|
* mdoc(7) police: removed hard sentence breaks, run through spell-checker.ru2000-12-181-12/+15
|
* Fix typo.demon2000-12-171-1/+1
| | | | | PR: 23591 Submitted by: mavetju@chello.nl
* Add option -E to disable EPSV which throws certain stateful firewallsphk2000-12-163-35/+89
| | | | | | | | | into confusion. Add option -r to make ftpd support only read-only operations. Submitted by: Flemming (F3) Jacobsen <fj@batmule.dk> Reviewed by: phk
* The GCC 2.96 snapshots have slightly different rules for finding includeobrien2000-12-011-0/+1
| | | | | | | files. Mostly -I${.CURDIR} was needed -- especially for YACC generated files as the new cpp does not look in the ultimate source file (ie, the .y file)'s directory as told by the "#line" directive. Some were misspellings of "-I${.CURDIR}" as "-I.".
* There is no src/contrib-crypto/ anything directory. So don't look forobrien2000-12-011-2/+1
| | | | include files in subdirs of it.
* Prevent leakage of information about anonymous user's homedirdanny2000-11-261-2/+6
| | | | | | via 'QUOTE CWD'. Reviewed by: des
* mdoc(7) police: use the new features of the Nm macro.ru2000-11-201-2/+2
|
* Format string paranoiakris2000-11-191-2/+2
|
* Fix broken PAM with SKEY behaviour: the skey.access file checksguido2000-10-121-7/+8
| | | | were broken because the code failed to set PAM_RHOST.
* Don't depend on <sys/stat.h> bogusly including <sys/time.h> (and therebywollman2000-10-101-2/+3
| | | | <time.h>).
* remove redundant optreset declarationimp2000-09-041-1/+0
|
* Don't set an arbitrary limit on username lengths; use MAXLOGNAMEsheldonh2000-08-171-1/+1
| | | | | | | instead. PR: 20675 Submitted by: Vladimir B Grebenschikov <vova@express.ru>
* Fix `control socket: Protocol not supported' failure inru2000-08-161-3/+2
| | | | standalone -D mode when neither -4 nor -6 is specified.
* Honour skey.access(5) by allowing UNIX passwords when skeyaccess(3)sheldonh2000-08-011-4/+10
| | | | | | | | | | | | has set pwok to a non-zero value. Previously, the fact that skey.access(5) allowed UNIX passwords for this connection attempt was ignored, even in the NOPAM case. This only addresses the NOPAM case; when libpam is used, the problem will persist. PR: 20333
OpenPOWER on IntegriCloud