summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* o SIOCGIFCONF -> getifaddrs(3) conversion. As a side effect fixmaxim2006-05-172-97/+44
| | | | | | | | | bin/95041: subnet mask mismatch. PR: bin/95041 Obtained from: NetBSD Tested by: Hans Lambermont MFC after: 2 months
* - Update to ntp-4.2.0pav2006-05-177-1340/+2457
| | | | | PR: docs/79857 Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
* Send the pcvt(4) driver off to retirement.phk2006-05-1788-12434/+0
|
* Fix formatting. Add missing break;emax2006-05-141-2/+3
| | | | | Submitted by: Iain Hibbert MFC after: 3 days
* Fix typo.cperciva2006-05-131-1/+1
| | | | Pointed out by: ceri
* Add a mechanism for constructing INDEX files which include local ports.cperciva2006-05-132-2/+22
| | | | Requested by: brooks
* PR: bin/71663hm2006-05-132-7/+7
| | | | | | | | Submitted by: Dan Lukes Reviewed by: hm@ fix compile warnings in isdnd and isdntest. some more compile time warnings also mentioned in this PR were already fixed in an earlier commit today.
* fix conflicting types for log(), add some prototypes to isdnd.hhm2006-05-1317-545/+547
|
* correct strtol(3) usage and style(9)matteo2006-05-121-4/+8
| | | | | Reviewed by: maxim MFC after: 2 weeks
* Use 'rm -rf foo/bar' to remove a port instead of 'rm -rf foo/bar/'.cperciva2006-05-121-3/+6
| | | | | | | When /usr/ports/foo/bar is a symlink pointing outside the tree, this deletes the symlink instead of the directory it points to. Requested by: delphij
* o Style(9) the previous commit a bit.maxim2006-05-111-13/+7
|
* Use sysctlbyname() instead of sysctlphk2006-05-111-4/+1
|
* Add the -s option to set jail's securelevel. This is useful for jails run ↵matteo2006-05-112-4/+26
| | | | | | | with non-root privileges. PR: bin/80242 MFC after: 2 weeks
* Alpha doesn't support linux ABI compat now.jhb2006-05-102-2/+2
|
* Use .Vt for struct xprisonmatteo2006-05-101-2/+4
| | | | Suggested by: keramida
* document security.jail.list sysctl in jail(8)matteo2006-05-081-1/+9
| | | | | PR: docs/96807 MFC after: 3
* If perform-actual-lookups is enabled, getservbyname() matches an entryume2006-05-052-24/+20
| | | | | | even when proto is not valid. Submitted by: Michael Bushkov <bushman__at__rsu.ru>
* Allow the HTTP_PROXY environment variable to be (mis)spelled ascperciva2006-05-052-2/+4
| | | | | "http_proxy", since some people apparently do this and fetch(3) allows it.
* Fix the test for whether ${HTTP_PROXY} is set -- I got it backwards.cperciva2006-05-051-1/+1
| | | | | Pointy hat to: cperciva Pointed out by: pjd
* Fix binary upgrades by accounting for the schg flag on /var/empty.ceri2006-05-041-1/+1
| | | | | | | PR: 96711, 96780 Submitted by: Nobuyuki Koganemaru, Martin Jackson Approved by: re (scottl) MFC after: 1 day
* Remove two lines of debugging which I forgot to remove before the lastcperciva2006-05-031-2/+0
| | | | | | commit. Noticed by: simon
* The approach portsnap uses of "pick a random HTTP mirror" doesn'tcperciva2006-05-031-3/+16
| | | | | | | | | | | | | | | | | | | | interact very nicely with HTTP proxies: Since proxies do not know that all the files on portsnap1.freebsd.org are identical to the files with the same names on portsnap2.freebsd.org, said proxies end up downloading and storing files in duplicate. This commit uses the HTTP_PROXY environment variable, if set, to generate a random number seed for use in selecting a mirror. This means that if several systems all have the same HTTP_PROXY value set, they will ask the proxy to fetch files from the same mirror (unless that mirror fails, in which case all the systems will use the same second choice, et cetera). Portsnap still doesn't interact very well with "transparent" HTTP proxies, but there's nothing I can do about those. Requested by: simon Sponsored by: FreeBSD security development fundraiser
* Instead of selecting a mirror and failing if it is inaccessible, keepcperciva2006-05-031-25/+50
| | | | | | | | | | | | | | | | | | | track of which mirrors we have tried and try a different mirror if we fail when trying to download the SSL public key or the snapshot signature. Failures later in the download process will not result in switching to a different mirror, for two reasons: 1. If is very unlikely that a mirror will fail partway through the process of downloading updates. 2. If we switched from a more recently updated mirror to a less recently updated mirror partway through the download process, we would end up failing anyway because we would be trying to fetch files which the second mirror didn't have yet. PR: bin/96288 Requested by: lots of people Sponsored by: FreeBSD security development fundraiser
* o Document security.jail.jailed sysctl.maxim2006-05-031-1/+6
| | | | | | PR: docs/94711 Submitted by: Andreas Kohn MFC after: 2 weeks
* Fix alignment problem on AMD64.ume2006-05-022-12/+16
| | | | | | Reported by: Pascal Hofstee <caelian__at__gmail.com> Submitted by: Michael Bushkov <bushman__at__rsu.ru> Tested by: Pascal Hofstee <caelian__at__gmail.com>
* Note that when -d flag is used, mountd(8) will not detach from thekeramida2006-05-021-1/+4
| | | | | | | | controlling terminal. PR: docs/96660 Submitted by: Jeff Ito <ijk@speakeasy.net> MFC after: 1 week
* Teach portsnap to parse the output of the host(1) in BIND 8 as well ascperciva2006-05-021-3/+7
| | | | | | | | | the host(1) from BIND 9. This doesn't matter for HEAD, but will help people who install portsnap from the ports tree onto older versions of FreeBSD. PR: ports/93901 Sponsored by: FreeBSD security development fundraiser
* Add missed SYNOPSIS flag for auto upgrade.gordon2006-04-301-1/+1
| | | | Submitted by: marck at rinet dot ru
* o Sort .Xrs.maxim2006-04-302-4/+4
|
* o Reformat FILES section.maxim2006-04-302-2/+8
|
* o Add missed commas.maxim2006-04-302-4/+4
|
* o Silence mdoc(7) warnings: remove an empty line, add missed .El macro.maxim2006-04-302-60/+74
| | | | New sentence - new line.
* Specify default values for positive-policy and negative-policy .matteo2006-04-302-6/+6
|
* Typo.ceri2006-04-302-2/+2
|
* Document sysinstall's limitation on operating on mounted disks.scottl2006-04-302-0/+22
|
* Reword a sentence modified in my previous commit. This new one is probablytrhodes2006-04-302-2/+4
| | | | | | better. Hinted by: ceri
* Add auto upgrade capability to mergemaster.gordon2006-04-292-1/+88
| | | | | | | | | | | | | | | | | | | An mtree description of all non-zero files that make distribution installs (only size and md5) is built from the temproot. When the user completes a mergemaster run, the mtree description file gets installed into /var/db for safe-keeping. When the user then decides to do a subsequent upgrade (with the -U flag), the existing mtree description from /var/db is called into service looking for files that are different in DESTDIR. This is stashed away until a file that would normally end up prompting the user to look at changes is encountered. Since there are no user modified changes, the new file is installed without bothering the user. Looked at by: dougb MFC after: 6 weeks
* Follow FreeBSD mdoc(7) conventions:trhodes2006-04-292-70/+86
| | | | | | | | | | | - Remove hard sentence breaks; - Avoid using double negatives or "sexist" language; - Expand contractions; - Remove a blank line; - Some grammar changes. Usually we do not "hard code" requests to submit bugs to the author, but I will leave this go for now.
* - Extend the nsswitch to support Services, Protocols and Rpcume2006-04-2878-0/+20239
| | | | | | | | databases. - Make nsswitch support caching. Submitted by: Michael Bushkov <bushman__at__rsu.ru> Sponsored by: Google Summer of Code 2005
* Add some new options to mac_bsdestended. We can now match on:dwmalone2006-04-232-44/+196
| | | | | | | | | | | | | | | | | | | | | | | subject: ranges of uid, ranges of gid, jail id objects: ranges of uid, ranges of gid, filesystem, object is suid, object is sgid, object matches subject uid/gid object type We can also negate individual conditions. The ruleset language is a superset of the previous language, so old rules should continue to work. These changes require a change to the API between libugidfw and the mac_bsdextended module. Add a version number, so we can tell if we're running mismatched versions. Update man pages to reflect changes, add extra test cases to test_ugidfw.c and add a shell script that checks that the the module seems to do what we expect. Suggestions from: rwatson, trhodes Reviewed by: trhodes MFC after: 2 months
* add debug msgsam2006-04-201-0/+3
|
* Add -u and -U which functions like the jail(8) that allowdelphij2006-04-193-6/+80
| | | | | | | commands to be executed under a different credential. PR: bin/95777 Submitted by: clsung
* Add the ability to log to an arbitrary udp port as well as thejulian2006-04-172-6/+43
| | | | | standard syslog port. This allows syslog to easily export lines of interest to an external logging system.
* Update a couple of comments relating to RFCs.dwmalone2006-04-171-2/+5
|
* Back out a Makefile change that accidently snook in.dwmalone2006-04-171-1/+1
|
* Port 37 (RFC 738) style times are supposed to be a 32 bit time sincedwmalone2006-04-172-7/+7
| | | | | | | | | | | | 1900 in network byte order. Use a uint32_t to calculate and send the time, so that we don't need to know how big ints or longs are. I used uint32_t instead of int in the patch, on the off chance someone uses our inetd source on a system that doesnt 32 bit ints. PR: 95290 Submitted by: Bruce Becker <hostmaster@whois.gts.net> MFC after: 2 weeks
* Add INDEX-7 and remove trailing spaces.krion2006-04-171-3/+5
| | | | MFC after: 5 days
* Use bzip2(1) by default to compress package tarball onkrion2006-04-171-1/+6
| | | | | | | __FreeBSD_version >= 500039. Submitted by: Alex Lyashkov <umka@sevcity.net> MFC after: 5 days
* remove some unnecessary perror callssam2006-04-171-2/+0
| | | | | Noticed by: Jouni Malinen MFC after: 2 weeks
* o De-register local vars.maxim2006-04-161-6/+4
|
OpenPOWER on IntegriCloud