summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* Add IPv6 support to pppctl by using getaddrinfo() and trying each addresstjr2003-12-071-89/+115
| | | | | | | it returns. This allows it to connect to the server side again, which has been listening on IPv6 addresses exclusively for more than 2 years. PR: 59369
* Fix our kernel support for Basic Block Profiling to work with GCC33.phk2003-12-032-13/+69
| | | | Approved by: re@
* Reconnect ipfstat, ipnat, and ipftest to the build now that if_xnamebrooks2003-12-021-1/+2
| | | | | | support is enabled. Approved by: re (scottl)
* Replace the KDE and GNOME 2 desktops with KDE (Lite Edition) and GNOME 2marcus2003-12-024-8/+8
| | | | | | | | (Lite Edition) respectively. These "lite" packages are streamlined to provide users with the core essentials for each desktop and to fit on the release disc 1. Approved by: re (scottl)
* Spell SSHd as sshd.rwatson2003-12-012-2/+2
| | | | | Requested by: jhb Approved by: re (jhb)
* The new "spec against spec" comparison code was yet another timephk2003-11-301-7/+22
| | | | | | | victim of the special sort order employed where files come before directories and alphabetic inside these two groups. Approved by: re@
* Add a Securelevel sub-menu to the Security configuration menu,rwatson2003-11-297-0/+190
| | | | | | | | | | | | | permitting the administrator to select a securelevel top operate at. Include a helpfile summarizing some of the information from init(8). This allows for explicit configuration of securelevels, which was previously implicit in Security Profile selection. Currently, there are no checkboxes for the active securelevel, because sysinstall's facilities for deriving "current settings" from rc.conf may use only one variable, not two, and I opted for the simplest approach at this point. Approved by: re (scottl)
* Cosmetic fix: a message was mixed with a dialog box border line.olgeni2003-11-281-1/+1
| | | | Approved by: re (rwatson)
* Remove security profiles from sysinstall. Currently, security profilerwatson2003-11-289-188/+10
| | | | | | | | | | | | | | | | | selection is used to drive two configuration parameters: (1) Default enable/disable for sshd (2) Default enable/disable for securelevels Replace this with an explicit choice to enable/disable sshd. A follow-up commit will add a configuration option to the Security post-install configuration menu to set the securelevel in rc.conf explicitly. This should reduce the level of foot-shooting associated with accidental enabling of securelevels, make the nature and implications of the securelevel configuration options more explicit, as well as make the choice to enable/disable sshd more explicit. Approved by: re (scottl)
* - Drop down to one snapshots FTP site since that's all we have nowkensmith2003-11-242-32/+40
| | | | | | | - Adjust names of IPv6 FTP hosts a bit - Sync list of FTP sites with reality Approved by: rwatson (re@)
* Add Greek keymaps to sysinstall.jhb2003-11-204-10/+18
| | | | | | PR: bin/59078 Submitted by: Panagiotis Astithas <past@noc.ntua.gr> Approved by: re (rwatson)
* A variety of content cleanups:rwatson2003-11-201-22/+70
| | | | | | | | | | | | | | | | | | | | | | | (1) Document the notion of using jail(8) to run "virtual servers" or just to constrain specific applications. If only running specific applications, some configuration steps are unnecessary (such as editing rc.conf). (2) Add some more subsection headers to break up the bigger chunks of text. (3) Clarify the problems associated with applications binding all IP addresses in the host, and attempt to be more specific about potential application problems. Document how to force sshd to bind the the right socket. (4) Suggest that in a jailed application scenario, you might want to have the host syslogd listen on the socket in the jail, rather than running syslogd in the jail. (5) Catch another reference to /stand/sysinstall. Approved by: re (bmah implicitly)
* No need to copy sysinstall into a jail with -CURRENT, since inrwatson2003-11-201-10/+2
| | | | | | -CURRENT, we have /usr/sbin/sysinstall. Approved by: re (bmah implicitly)
* Off by one error in malloc.phk2003-11-191-1/+1
| | | | Approved by: re@
* Catch up with the latest in device naming.obrien2003-11-181-5/+5
|
* * Auto-detect what device to use if none is specifiedeivind2003-11-172-18/+33
| | | | | * Replace references to mcd0 with acd0 (doc only) * Remove references to the "c" partition (doc only - code was already fixed)
* __FBSDID; remove duplicate <ctype.h>; try to reduce style inconsistencies.des2003-11-171-46/+43
|
* Sort includes, and remove superfluous <sys/types.h>des2003-11-171-15/+15
|
* Instead of blindly loading the ums module and bailing out if that fails,des2003-11-171-2/+38
| | | | | | | | check if it's already loaded or compiled into the kernel, and only try to load it if it isn't. PR: bin/59368 Submitted by: Jens Rehsack <rehsack@liwing.de>
* Remove the BUGS section introduced in rev 1.11 now that the problemdas2003-11-171-15/+0
| | | | has been addressed.
* Reimplement nologin(8) as a C program. This allows us to staticallydas2003-11-173-40/+29
| | | | | | | link it at low cost and avoid environment poisoning attacks associated with LD_LIBRARY_PATH. Suggested by: rwatson
* Document nologin(8) as being insecure in conjunction with a dynamicdas2003-11-171-0/+15
| | | | root and suggest alternatives.
* logerror is used in syslogd to log errors from syslogd itself. Itdwmalone2003-11-161-0/+6
| | | | | | | | | | | | is possible for an error to occur while trying to log an error, and this can result in infinite recursion (or at least until we run out of stack). Rather than this, we ignore requests to log an error while logging an error. PR: 51253 MFC after: 2 weeks
* Remove an argument to printf that is unused.dwmalone2003-11-161-1/+1
|
* Remove an annoying printf that somehow leaked into rev 1.21.njl2003-11-161-1/+0
|
* Make this WARNS 2 clean, and fix up the manual page:trhodes2003-11-1512-32/+59
| | | | | | | | | | | | | Avoid implicit function calls by adding the proper include files. Use const char copyright. Fix some fprint formatting. In the manual page: Use the .Pa macro for filenames and locations. Kill hard setence breaks. Make use of the .Tn and .Dq macros. Add some to text to the otherwise blank HISTORY section (taken from CVS).
* Replace all uses of the old netgraph constants NG_*LEN by the newharti2003-11-157-68/+68
| | | | | | constants NG_*SIZ that include the trailing NUL byte. This change is mostly mechanical except for the replacement of a couple of snprintf() and sprintf() calls with strlcpy.
* - poll(2) support.ume2003-11-1410-757/+439
| | | | | | | | | | | | | - simplify by strdup. - set ai_protocol in hints to TCP. - g/c FAITH_NS (no description, not maintained for years) - warn if connection from IPv4 mapped is reached. - IPV6_V6ONLY if possible. - unifdef -UFAITH4. - drop rsh/rlogin support. - deal with negative return value from wait3. Obtained from: KAME
* - need_trigger/idx should be u_int, not ssize_t.ume2003-11-141-30/+34
| | | | | | | | | | | - realloc pedant. - set sin6_scope_id before sending (link-local/multicast) packets - removed an incorrect comment - don't age non-gateway host routes. - not remove global addresses on loopback interface from routing table by route aging. Obtained from: KAME
* - interface minimum MTU = 1280 in IPv6.ume2003-11-141-8/+3
| | | | | | - simplify. Obtained from: KAME
* our netstat is installed in /usr/bin.ume2003-11-141-1/+1
|
* Fixed spurious syntax errors for including files that don't begin withbde2003-11-141-3/+4
| | | | | | | | | | a SEMICOLON token (a newline or semicolon, or one of these preceded by a comment and/or whitespace). The input stream was switched too early and the parser was expecting a SEMICOLON in the included file instead of after the filename in the include directive. Submitted by: Stefan Farfeleder <stefan@fafoe.narf.at> Kept alive by: Adam C. Migus <adam@migus.org>
* If the name of the mouse device starts with "/dev/ums", try to load thedes2003-11-131-2/+15
| | | | | | | | | | ums module, and allow for up to five attempts to open the device, with two-second pauses in between, to allow time for USB controllers and devices to probe and attach. My Gigabyte P4 Titan 848P motherboard has a total of 15 ports on four hubs hanging off four controllers, and needs at least half of that ten-second allowance to get ready. MFC after: 7 days
* - make command line argument parsing POSIX compliant. comment fromume2003-11-132-182/+281
| | | | | | | | | | | | | deraadt NOTE: -I needs to take an arg (there's no way we can take no arg/an arg with a single option) - sscanf overrun - no variable name on prototype. - u_int32_t may not be u_long. - skipped non-host route when printing neighbor cache entries. - valid and preferred lifetimes are unsigned. - wording. Obtained from: KAME
* Fix a bug relating to the "files before directories" sort order whenphk2003-11-131-0/+51
| | | | comparing two spec files.
* Add an empty definition of the MIBS variable so that the makefile doesharti2003-11-131-0/+1
| | | | | | not try to use a MIBS definition from the environment. Submitted by: Joe Marcus Clarke <marcus@marcuscom.com>
* Whitespace cleanup.des2003-11-131-378/+376
|
* - setsockopt/sysctl takes int, not u_long.ume2003-11-122-90/+149
| | | | | | | | | | | | | | - be more picky about argument parsing - like ERANGE. - use u_long for args, not to lose accuracy/prevent overflow. - socklen_t audit. - Add -I (use icmp) option. - warn if multiple addresses are present for dest. - no need to pass tz. - type pedant. check -p range. - grab hlim from sysctl. - typo in port number setting. Obtained from: KAME
* The snmp_netgraph module depends on libnetgraph. So add a dependency andharti2003-11-121-0/+3
| | | | | | add libnetgraph to the list of prebuilt libraries in the main Makefile. Reviewed by: ru
* Get rid of the old constants which did not include the trailing NULharti2003-11-123-4/+4
| | | | and use the new constants which do.
* - Add a note that there are two MIB variables that have per-jailkensmith2003-11-111-0/+8
| | | | | | | settings. Reviewed by: rwatson Approved by: blackend (mentor)
* Fix few typosemax2003-11-113-7/+7
| | | | | Reviewed by: imp, julian, ru Approved by: imp (mentor)
* Ignore case when comparing CHAP/CHAP81 responsesbrian2003-11-101-7/+12
| | | | PR: 31771
* Correct the include path so that the include files are foundharti2003-11-102-5/+7
| | | | with include "...".
* Fix the build by adjusting the include directives. The problem washarti2003-11-102-4/+6
| | | | | that the sources use "..." includes to get at include files that later on reside in an include sub-directory.
* enable aes-xcbc-mac and aes-ctr, again.ume2003-11-101-3/+3
|
* Link the SNMP daemon for NgATM to the build.harti2003-11-101-0/+1
|
* Add the build infrastructure for the SNMP daemon that is the baseharti2003-11-108-0/+202
| | | | for the NgATM ILMI daemon and for the tree parsing helper program.
* Add build infrastructure for libbsnmp and the modules. Add theharti2003-11-109-0/+2735
| | | | netgraph module for the SNMP daemon.
* Increase MAXDEV up to 10.simokawa2003-11-091-1/+1
|
OpenPOWER on IntegriCloud