summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* I4B header files are now installed in include/i4b/ and no longerbz2007-07-0613-26/+21
| | | | | | | | in include/machine/. Adapt #include paths. Approved by: re (kensmith)
* Remove the -DFAST_IPSEC from Makefiles again.bz2007-07-053-3/+3
| | | | | | | | | This was needed during the IPSEC->FAST_IPSEC->IPSEC transition period to not break the build after picking up netipsec header files. Now that the FAST_IPSEC kernel option is gone and the default is IPSEC again those defines are superfluous. Approved by: re (rwatson)
* Do not install man pages for the three I4B 'modules' that werebz2007-07-041-1/+4
| | | | | | disabled for the FreeBSD 7.0 timeframe. Approved by: re (rwatson)
* Significantly reduce the memory leak as noted in BUGS section forscf2007-07-045-7/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | setenv(3) by tracking the size of the memory allocated instead of using strlen() on the current value. Convert all calls to POSIX from historic BSD API: - unsetenv returns an int. - putenv takes a char * instead of const char *. - putenv no longer makes a copy of the input string. - errno is set appropriately for POSIX. Exceptions involve bad environ variable and internal initialization code. These both set errno to EFAULT. Several patches to base utilities to handle the POSIX changes from Andrey Chernov's previous commit. A few I re-wrote to use setenv() instead of putenv(). New regression module for tools/regression/environ to test these functions. It also can be used to test the performance. Bump __FreeBSD_version to 700050 due to API change. PR: kern/99826 Approved by: wes Approved by: re (kensmith)
* Link pf 4.1 to the build:mlaier2007-07-036-26/+83
| | | | | | | | - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith)
* Commit IPv6 support for FAST_IPSEC to the tree.gnn2007-07-016-6/+6
| | | | | | | | This commit includes all remaining changes for the time being including user space updates. Submitted by: bz Approved by: re
* Remove wicontrol(8) from the base system. Using wicontrol to configure anthompsa2007-07-014-1840/+0
| | | | | | | interface has been deprecated since 5.1, wi(4) wireless interfaces are managed via the net80211 stack and ifconfig. Approved by: re (rwatson)
* Add support for HTTP/1.0 Persistent Connections to phttpget. Requests arecperciva2007-06-301-3/+10
| | | | | | | | | | | | | | be marked as HTTP/1.1 but "Connection: Keep-Alive" is added; this convinces HTTP/1.0 servers and proxies to hold the TCP connection open despite not being able to use HTTP pipelining. This dramatically cuts down on the number of TCP connections (and thus port numbers) used by portsnap when talking to an HTTP/1.0 proxy (e.g., squid), and has the side benefit of improving performance in those cases. Tested by: simon Approved by: re (kensmith) MFC After: 1 week
* Remove reference to 'phosphor' in the screensaver menu as this is lessmurray2007-06-291-1/+1
| | | | | | | meaningful in the LCD world. Submitted by: Ben Kaduk <minimarmot@gmail.com> Approved by: re (kensmith)
* Teach sysinstall about the 'scddl' source dist.jhb2007-06-283-1/+5
| | | | Approved by: re (kensmith)
* - Add new virtual category kldpav2007-06-281-0/+1
| | | | | MFC after: 3 days Approved by: re (mux)
* Fix a number of documentation-lags-behind-reality bugs in sysinstall(8).philip2007-06-2512-41/+49
| | | | | | | While here, fix a couple of comments too. Submitted by: Oliver Fromme <olli -at- lurza.secnetix.de> Approved by: re (kensmith)
* Add an option to make periodic(8) quiet when no output was generated.dwmalone2007-06-222-5/+13
| | | | | | | | | | | The man page part of the patch is my fault, the changes to the periodic script is Dominik's. PR: 88486 Submitted by: Dominik Brettnacher <domi@saargate.de> Reviewed by: brian Approved by: re MFC after: 1 month
* Update the suspend/resume user API while maintaining backwards compat.njl2007-06-211-28/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Improvements: * /etc/rc.suspend,rc.resume are always run, no matter the source of the suspend request (user or kernel, apm or acpi) * suspend now requires positive user acknowledgement. If a user program wants to cancel the suspend, they can. If one of the user programs hangs or doesn't respond within 10 seconds, the system suspends anyway. * /dev/apm is clonable, allowing multiple listeners for suspend events. In the future, xorg-server can use this to be informed about suspend even if there are other listeners (i.e. apmd). Changes: * Two new ACPI ioctls: REQSLPSTATE and ACKSLPSTATE. Request begins the process of suspending by notifying all listeners. acpi is monitored by devd(8) and /dev/apm listener(s) are also counted. Users register their approval or disapproval via Ack. If anyone disapproves, suspend is vetoed. * Old user programs or kernel modules that used SETSLPSTATE continue to work. A message is printed once that this interface is deprecated. * acpiconf gains the -k flag to ack the suspend request. This flag is undocumented on purpose since it's only used by /etc/rc.suspend. It is not intended to be a permanent change and will be removed once a better power API is implemented. * S5 (power off) is no longer supported via acpiconf -s 5 or apm -z/-Z. This restores previous behavior of halt/shutdown -p being the interface. * Miscellaneous improvements to error reporting Approved by: re
* - Replace rather inefficient bubble sort with a recursive depth-first search.pav2007-06-181-66/+112
| | | | | | | | | | This speeds up registration of packages considerably. - style(9) police welcome! PR: bin/112630 Submitted by: Stephen Montgomery-Smith <stephen@cauchy.math.missouri.edu> Tested by: bento i386 experimental run MFC after: 14 days
* - Bump share library version which were missed in last bumprafan2007-06-181-1/+1
| | | | | | Reported by: jhb Discussed with: deischen, des, doubg, harti Approved by: re (kensmith)
* Fix a (very) longstanding bug in moused(8) affecting high-resolution rodentsphilip2007-06-171-6/+41
| | | | | | | | | | | | when linear acceleration (-a) was enabled with a <1 value to slow them down. Previously, rounding errors would eat small movements so the mouse had to be moved a certain distance to get any movement at all. We now calculate the rounding errors and take them into account when reporting movement. PR: bin/113749 Submitted by: Oliver Fromme <olli -at- secnetix.de> MFC after: 3 days
* Add PAM support to cron(8). Now cron(8) will skip commands scheduledyar2007-06-177-8/+80
| | | | | | | | | | | | | | | | | | | | | | | | | | | by unavailable accounts, e.g., those locked, expired, not allowed in at the moment by nologin(5), or whatever, depending on cron's pam.conf(5). This applies to personal crontabs only, /etc/crontab is unaffected. In other words, now the account management policy will apply to commands scheduled by users via crontab(1) so that a user can no longer use cron(8) to set up a delayed backdoor and run commands during periods when the admin doesn't want him to. The PAM check is done just before running a command, not when loading a crontab, because accounts can get locked, expired, and re-enabled any time with no changes to their crontabs. E.g., imagine that you provide a system with payed access, or better a cluster of such systems with centralized account management via PAM. When a user pays for some days of access, you set his expire field respectively. If the account expires before its owner pays more, its crontab commands won't run until the next payment is made. Then it'll be enough to set the expire field in future for the commands to run again. And so on. Document this change in the cron(8) manpage, which includes adding a FILES section and touching the document date. X-Security: should benefit as users have access to cron(8) by default
* Increase buffer size of DV stream to prevent buffersimokawa2007-06-171-1/+1
| | | | | | overrun caused by long blocking of file I/O (i.e. zfs). MFC after: 3 days
* o Add an example how to create /etc/mtree style mtree(8) files.maxim2007-06-161-1/+12
| | | | | | PR: docs/113667 Submitted by: edwin MFC after: 1 week
* - Add an option to change escape character.simokawa2007-06-152-33/+122
| | | | | | - Use CTRL macro. - Make target reset work on telnet port. - Add a key bind to invoke kgdb on the terminal. (experimental)
* Failing to set new frequency should not lead to powerd exiting.marck2007-06-131-1/+1
| | | | | | Change err(3) to warn(3) as three other cases. Approved by: njl, des
* Options spring cleanup:sepotvin2007-06-131-2/+4
| | | | | | | | | | - Add and document the KVM and KVM_SUPPORT options that are needed for the ifmcstats(3) makefile - Garbage collect unused variables - Add missing inclusion of bsd.own.mk where needed Approved by: kan (mentor) Reviewed by: ru
* Import rewrite of IPv4 socket multicast layer to support source-specificbms2007-06-121-5/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and protocol-independent host mode multicast. The code is written to accomodate IPv6, IGMPv3 and MLDv2 with only a little additional work. This change only pertains to FreeBSD's use as a multicast end-station and does not concern multicast routing; for an IGMPv3/MLDv2 router implementation, consider the XORP project. The work is based on Wilbert de Graaf's IGMPv3 code drop for FreeBSD 4.6, which is available at: http://www.kloosterhof.com/wilbert/igmpv3.html Summary * IPv4 multicast socket processing is now moved out of ip_output.c into a new module, in_mcast.c. * The in_mcast.c module implements the IPv4 legacy any-source API in terms of the protocol-independent source-specific API. * Source filters are lazy allocated as the common case does not use them. They are part of per inpcb state and are covered by the inpcb lock. * struct ip_mreqn is now supported to allow applications to specify multicast joins by interface index in the legacy IPv4 any-source API. * In UDP, an incoming multicast datagram only requires that the source port matches the 4-tuple if the socket was already bound by source port. An unbound socket SHOULD be able to receive multicasts sent from an ephemeral source port. * The UDP socket multicast filter mode defaults to exclusive, that is, sources present in the per-socket list will be blocked from delivery. * The RFC 3678 userland functions have been added to libc: setsourcefilter, getsourcefilter, setipv4sourcefilter, getipv4sourcefilter. * Definitions for IGMPv3 are merged but not yet used. * struct sockaddr_storage is now referenced from <netinet/in.h>. It is therefore defined there if not already declared in the same way as for the C99 types. * The RFC 1724 hack (specify 0.0.0.0/8 addresses to IP_MULTICAST_IF which are then interpreted as interface indexes) is now deprecated. * A patch for the Rhyolite.com routed in the FreeBSD base system is available in the -net archives. This only affects individuals running RIPv1 or RIPv2 via point-to-point and/or unnumbered interfaces. * Make IPv6 detach path similar to IPv4's in code flow; functionally same. * Bump __FreeBSD_version to 700048; see UPDATING. This work was financially supported by another FreeBSD committer. Obtained from: p4://bms_netdev Submitted by: Wilbert de Graaf (original work) Reviewed by: rwatson (locking), silence from fenner, net@ (but with encouragement)
* Delete description of non-existent options: "-4" and "-6".motoyuki2007-06-121-5/+1
| | | | | | | | | | ntpd's "-4" and "-6" options are described in the original documentation (contrib/ntp/html/ntpd.html). It may be original's doc bug. PR: docs/112642 Submitted by: Seth Hieronymus<shieronymus@speakeasy.net> Discussed with: ume MFC after: 1 week
* Create group ftp by default. This is gid 14 as this is the historicalceri2007-06-111-3/+3
| | | | | | | | | | | | id used by sysinstall when enabling anonymous FTP. Change the default group used by sysinstall for setting up anonymous FTP from operator to ftp; there is no reason to use operator and there are potential security issues when doing so. PR: 93284 Approved by: ru (mentor) Reviewed by: simon
* o add 11n knobsam2007-06-111-5/+11
| | | | o gcc42 stuff
* track net80211 changes to get scan results ioctlsam2007-06-111-5/+5
|
* Remove a comment I forgot to removematteo2007-06-091-1/+1
|
* Reset dc->paddr and dc->reset if we cannot read configuration ROM.simokawa2007-06-081-1/+1
|
* Clean up escape sequence handling and add support forsimokawa2007-06-082-24/+103
| | | | resetting target and suspending dconschat.
* Add heuristics for smooth reconnection.simokawa2007-06-071-4/+22
|
* "-b /boot/mbr" is redundant, /boot/mbr is the default boot code for fdisk(8).pav2007-06-071-2/+2
| | | | Pointed out by: ru
* - Revert previous revision, it was incorrectpav2007-06-061-8/+5
| | | | | | | | - Add an example using fdisk instead Pointed out by: ru Submitted by: Warren Block <wblock@wonkity.com> MFC after: 3 days
* Write to slice name instead of directly to the disk device.delphij2007-06-051-1/+1
| | | | | | | | This fixes writing boot code upon upgrade. PR: bin/61587 Submitted by: Nobuyuki Koganemaru <n-kogane syd.odn.ne.jp> MFC after: 1 month
* Update bmake glue for the BIND 9.4.1 import.dougb2007-06-027-15/+20
| | | | | This includes a return to building with threads, since one of the major focuses of the 9.4.x branch is to improve thread performance.
* Discard backlog on GDB port when connected.simokawa2007-05-311-0/+10
| | | | MFC after: 3 days
* Cleanup after previous commit.brueffer2007-05-251-3/+5
|
* Add a new option for ppp.conf: rad_port_id. It allows tonovel2007-05-254-12/+80
| | | | | | | | | | | | | | | change the way of what ppp submits to the RADIUS server as NAS-Port-Id. Possible options are: the PID of the process owning the corresponding interface, tun(4) interface number, interface index (as it would get returned by if_nametoindex(3)), or it's possible to keep the default behavior. Check the ppp(8) manual page for details. PR: bin/112764 Submitted by: novel (myself) Reviewed by: flz Approved by: flz MFC after: 1 month
* Set .PATH before referring to the corresponding sources.dds2007-05-221-2/+2
|
* Increase precision of time values in the process accountingdds2007-05-226-296/+406
| | | | | structure, while maintaining backward compatibility with legacy file and record formats.
* Add new x11-drivers category.flz2007-05-191-0/+1
| | | | | Reminded by: miwi MFC after: 3 days
* o Fix typo: firwalling -> firewalling.maxim2007-05-191-1/+1
| | | | | | PR: docs/112776 Submitted by: asmodai MFC after: 1 week
* Add -U and -P options that allow the specification of the per-userdds2007-05-185-7/+32
| | | | | | and per-process summary file location. These make the program more flexible, and also make it possible to write sane regression tests.
* Tighten IP address check, prevent '..' from being passeddelphij2007-05-171-5/+8
| | | | | | | from the check. Submitted by: Ren Zhen <bg1tpt gmail com> MFC after: 2 weeks
* Fix some problems that affect multiple file inclusion. Bruce foundimp2007-05-173-73/+26
| | | | | | | | | | | | | | this bug and submitted these patches to dunstan@. He sent them to me to test, and I discovered they were needed for the atmel kernel config files. Since we were playing with them in the terminal room after the developer's summit today, I thought I'd go ahead and commit them to allow those folks that now have atmel hardware (thanks Andre) a chance to try it out w/o my help. Since dunstan@ is asleep right now, risk stepping on his toes a little by going ahead and committing this change. Submitted by: dunstan@, bde@ Tested by: bde@
* Handle !INCLUDE_CONFIG_FILE entirely in the kernel. This should make somewkoszek2007-05-161-4/+4
| | | | | | | | developers happy, since it will let them to use old config(8) with newer kernels. Reviewed by: imp Approved by: imp
* Add some missing '${BASEDIR}/'s. Prior to this commit, FreeBSD Updatecperciva2007-05-161-3/+3
| | | | | | | | | operating with the "-b basedir" option would not correctly update files which had flags set or were hardlinked. Submitted by: Karsten Schmidt Pointy hat to: cperciva MFC after: 1 week
* o Re-indent long lines.maxim2007-05-141-6/+6
| | | | Style(9) wisdom from: bde
* Add `accept dns' to rfcomm-server examplepav2007-05-131-0/+1
| | | | | | | PR: docs/111320 Submitted by: James Flemer <jflemer@alum.rpi.edu> No objection: emax MFC after: 1 week
OpenPOWER on IntegriCloud