summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
...
* When there is a file that can't be deleted due to checksum mismatch print namesobomax2001-08-021-2/+1
| | | | | | | of that file to stdout to simplify debugging. IMO it was a mistake to print this warning only when `verbose' mode is on. MFC after: 1 month
* Add a ``nat punch_fw'' command for punching FTP and IRC DCC holes throughbrian2001-08-025-0/+75
| | | | the firewall.
* Only try to allocated properly aligned I/O segments. This should stopimp2001-08-021-17/+12
| | | | | | | some of the config problems that we've been seeing (where wi0 tries to allocate 0x138-0x198, for example). Use err(1,"foo") rather than perror + exit while I'm here.
* Add the ability to modify /etc/ttys before first reboot during therwatson2001-08-026-0/+58
| | | | | | | | | | | | | system installation process. This allows users installing via serial console to enable serial console login during the installation process using an un-customized install. The user is not prompted to modify /etc/ttys during a normal install, but is offered the opportunity during post-install configuration. - Introduce configTTYs(), which describes the benefits of editing /etc/ttys, and asks for confirmation before spawning the editor. - add configTTYs to the post-install configuration, as well as to the global configuration index.
* Compensate for default disabling of network services in inetd.conf(5)rwatson2001-08-0211-2/+95
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | by providing the opportunity to edit inetd.conf during the system installation process. The following modifications were made: (1) Expand the Anonymous FTP description dialog to indicate that inetd and ftpd must be enabled before it can be used. (2) Introduce a new configInetd() pair of dialogs, the first describing inetd, giving a couple of examples of services that require it, and hinting at potential risk, then asking the user if they wish to enable it. The second indicates that inetd.conf must be configured to enabled specific services, and asks if the user would like to load inetd.conf into the editor to modify it. Add this configuration action to the index. There are some further improvements that might be considered: (1) Provide a more inetd.conf-specific configuration tool that speaks inetd.conf(5). However, this is made difficult by the "yet another configuration format" nature of inetd.conf, as well as its use of commenting to disable services, rather than an in-syntax way to disable a service without commenting it out. Submissions here would probably be welcome. (2) There's some overlap between settings in the somewhat obtuse Security Profile mechanism and other settings, including the inetd setting, and NFS server configuration. As features become individually tunable, they should probably be removed from the security profile mechanism. Otherwise, somewhat counter-intuitively, sysinstall (in practice) queries multiple times whether inetd, nfsd, etc, should be enabled/disabled. A possible future direction might be to drive profiles not by degree of paranoia, rather, the set of services desired. Or simply to remove the Security Profile mechanism and resort to feature-driven configuration. Reviewed by: imp, chris, jake, nate, -arch, -stable
* Add "use Fcntl" to resolve O_RDWR|O_CREAT|O_EXCL macros used inghelmer2001-08-011-0/+2
| | | | | | new sysopen call. PR: 29366 (in part)
* Install the new password file with pwd_mkdb, not the old one.ghelmer2001-08-011-1/+1
| | | | PR: 29366 (in part)
* MFS: in HISTORY section, fix release number of first appearancesheldonh2001-08-011-1/+1
|
* Don't include a NUL at the end of our CHAP SUCCESS packet.brian2001-07-311-1/+1
| | | | | | | | | | When encryption (MPPE) is enabled, WindowsME and Windows98 both fail because of the extra byte, suggesting that they autheticated successfully in their log and then dropping the connection, telling the user that the peer doesn't support compatible encryption options. MFC after: 1 week
* Reword for consistency.eric2001-07-312-6/+6
|
* jhb says a 10 line change containing casts is more invasive than a 28 lineobrien2001-07-311-14/+14
| | | | change.
* Logging should wind up in /var/log, not /etc/ppp/.asmodai2001-07-311-1/+1
| | | | | | PR: 11989 Submitted by: Phil Homewood <phil@rivendell.apana.org.au> MFC after: 1 week
* Remove an irritating diagnostic emitted to LogPHASE when abrian2001-07-313-11/+11
| | | | | | | | | static proxy arp entry is deleted. Rename a function (for consistency) and remove some whitespace (for readability). MFC after: 1 week
* When we receive a CHAP81 challenge response, we always expect the lastbrian2001-07-311-0/+5
| | | | | | | | | | byte of the packet to contain '\0'. Windows 98 gets this wrong, dropping garbage into the last byte and failing authentication. Now, we notice this and whinge to our log file that we're compensating for the corrupt data.
* Have pccardd always ask the kernel for the IRQ to use. The kernelimp2001-07-312-38/+47
| | | | | | | | | | will soon return the irq from the pcic bridge in cases where't that's appropriate. Note: I've had to disbale -I option for the moment. I've made it easy to reenable it for people that need it. MFC After: soon!
* Remove an accidental comma that managed to creep in with the last commit.eric2001-07-312-2/+2
|
* Use the POSIX syntax for chown.obrien2001-07-301-1/+1
| | | | Submmited by: garrett
* Fix the third argument to sysctlbyname() to be of the type size_t *tmm2001-07-301-1/+2
| | | | | | (instead of int *). MFC after: 2 days
* If we're set to non-interactive, we shouldn't ask the user yes/no questionsjkh2001-07-303-4/+10
| | | | but simply return the default answer instead.
* Simplify (and hopefully clarify) some date-parsing arithmetic.wollman2001-07-301-1/+1
|
* If the peer REJects our MRU REQ, stop REQing it -- *EVEN* if we'rebrian2001-07-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | doing PPPoE and the default MRU is therefore too big. When negotiating with win2k, we ask for MRU 1492 and the win2k box NAKs us saying ``MRU 1492''. This doesn't make sense to me. When we continue to request MRU 1492, the win2k box eventually REJs our MRU. This fix allows negotiations to continue at that point, bringing the link up and potentially allowing the win2k box to send us frames that are too large. AFAICT this is better than failing to bring the link up.... probably ! I have no idea how to do the equivalent of ``route get'' or ``ifconfig -a'' under win2k, so I can't tell what MTU it actually ends up using. I believe the bug is in win2k (it's certainly mis-negotiating). I'll MFC given the release engineers permission as code freeze begins on August 1. PR: 29277 MFC after: 3 days
* Make spacing consistant and set WARNS correctly.brooks2001-07-301-4/+4
|
* style(9)obrien2001-07-301-29/+59
|
* The variable giving the name of the temporary password file wasghelmer2001-07-301-5/+5
| | | | | | | | inconsistently named "ptmp" and "etc_ptmp". This commit changes it to "passwd_tmp" for consistency and to match OpenBSD's name for the variable. Consulted with: jedgar
* WARNS-2'ify.obrien2001-07-302-12/+14
| | | | (this included removing the funny "if (unsigned_var < 0)" test)
* Add the ability to Bzip2 your logs.obrien2001-07-303-7/+63
| | | | | PR: 27901 Submitted by: Anders Nordby <anders@fix.no> (stylistic changes by me)
* Fixed bitrot in DPADD in previous commit. The previous commit changedbde2001-07-301-8/+0
| | | | | LDADD to link to a correct copy of libkeycap but didn't change DPADD to match.
* Fixed bitrot in DPADD in previous commit.bde2001-07-301-1/+1
|
* Enable the new libmp in the build, and disable libgmp and itsdd2001-07-291-1/+1
| | | | henchmen.
* Change permissions back to 4554/554brian2001-07-281-2/+2
| | | | Suggested by: kris
* If the peer sends a REQ without the IPADDR option, only reject itbrian2001-07-282-6/+16
| | | | | | | | | | once. If they repeat the request (again without the IPADDR option) ACK it. I've had reports that some ppp implementations will not assign themselves an IP number. This should negotiate with such things. MFC after: 3 days
* The security officer requested this be backed out for discussion.obrien2001-07-282-18/+32
|
* Remove s_strl*(). I am not sure what was thought they accomplished.obrien2001-07-282-32/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When reading the code I had to stop, say "ok, what does *these* modifications of strl*() do? Pull out grep. Oh, not in add/, maybe above in ../lib/? Yep. So what do they do? Comments above them are misleading, guess I'll have to read the code. Oh, they just test strl* against the size and return the result of the test. Now I can continue to read the code I was. The uses of s_strl*() then test that result and errx()'s. Lets think about the "optimized" code I am removing: In general the compiler pushes the three args to strl* onto the stack and calls s_strl*. s_strl* has to indirectly access 3 args from the stack. Then push them on the stack a 2nd time for the real strl* call. s_strl* then pops the return from strl* off the stack; or moves it from the register it was returned in, to the register where tests can happen. s_strl* then pops the three arguments to strl*. Perform the test, push the result of the test, or move it from the result register to the return value register. The caller to s_strl* now has to either pop the return value of s_strl* or move it from the return value register to the test register. The caller then pops the three args to s_strl* off the stack (the same args that s_strl* itself had to pop off after the real call to strl*). The s_strl* caller then performs a simular test to what has already been done, and conditionally jumps. By doing things this way, we've given the compiler optimizer less to work with. Also, please don't forget the that call to s_strl* has possibly jumped to code not in the cache due to being far away from the calling code, thus causing a pipeline stall. So where is the "optimization" from s_strl*? It isn't code clarity. It isn't code execution speed. It isn't code size either.
* Make ancontrol WARNS=2 clean.brooks2001-07-272-44/+52
|
* Improve wording for pccard memory assignement.imp2001-07-271-4/+11
| | | | | Document intended correct behavior for pccardc power and how it interacts with suspend/resume.
* Remove -traditional from CFLAGS and add unistd.h to header.h so thisbrooks2001-07-273-2/+3
| | | | | actually compiles. Hopefully, this code didn't rely on some weird side effect of -traditional.
* Use alignment-safe code on non-i386 architectures.fenner2001-07-261-0/+3
|
* Only match the first osreldate date range for constructing the FTP URL,kris2001-07-261-1/+1
| | | | | | not all of them. Noticed by: obrien
* Handle peer REQ/NAKs of >1500 byte MRUs when we have no preference.brian2001-07-262-12/+16
| | | | MFC after: 3 days
* Use STD{ERR,IN,OUT}_FILENO instead of their numeric values. Thesheldonh2001-07-268-43/+58
| | | | | | | definitions are more readable, and it's possible that they're more portable to pathalogical platforms. Submitted by: David Hill <david@phobia.ms>
* Remove duplicate cvs tag.eric2001-07-262-4/+0
|
* Update sysinstall menu texts to reflect the new key behavior.eric2001-07-262-18/+28
| | | | Approved by: jkh
* Use a safer method of creating the temporary password file.jedgar2001-07-251-8/+8
| | | | | | Submitted by: dynamo@harvard.net Obtained from: OpenBSD MFC after: 3 days
* Change permissions from [4]554 to [4]551brian2001-07-251-2/+2
| | | | MFC after: 3 days
* fix misspelling introduced in rev 1.14 (sames as -> same as)billf2001-07-251-1/+1
|
* Replace strncpy -> strlcpykris2001-07-241-6/+3
| | | | | Obtained from: OpenBSD MFC after: 1 week
* Install this mode 4550 owned by group dialer; there is unsafe codekris2001-07-241-1/+3
| | | | | | | | in the signal handlers which may pose a risk when executable by untrusted users. Submitted by: Przemyslaw Frasunek <venglin@freebsd.lublin.pl> MFC After: 3 days
* Basically rewrite the dofork() routine, to add more error-checking andgad2001-07-231-14/+55
| | | | | | | | | correct the error-checking that was there. With the old code, an error return from getpwuid(daemon_user) could turn the lpd process into a very effective fork-bomb... Reviewed by: freebsd-audit freebsd-print (a little...) MFC after: 6 days
* You were knocked senseless by the Boomerang, spun around by the Cyclone,wpaul2001-07-232-0/+2
| | | | | | | | | | | | | | | | | | blown over by the Hurricane and had a house dropped on you by the Tornado. Now it's time to have your parade rained on by... the Typhoon! This commit adds driver support for 3Com 3cR990 10/100 ethernet adapters based on the Typhoon I and Typhoon II chipsets. This is actually a port of the OpenBSD driver with many hacks by me. No Virginia, there isn't any support for the hardware crypto yet. However there is support for TCP/IP checksum offload and VLANs. Special thanks go to Jason Wright, Aaron Campbell and Theo de Raadt for squeezing enough info out of 3Com to get this written, and for doing most of the hard work. Manual page is included. Compiled as a module and included in GENERIC.
* Fix removal of at jobs.ghelmer2001-07-231-24/+66
| | | | | | PR: bin/23052 Submitted by: Mike Sellenschuetter <mike.sellenschuetter@bankofamerica.com> MFC after: 1 week
OpenPOWER on IntegriCloud