summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* you have to use 'install' subcommand instead of '-c' optionume2003-12-261-1/+1
| | | | Obtained from: KAME
* when no source-address-selection policy is installed, not scanume2003-12-261-1/+5
| | | | | | the sysctl MIB, as it leads to an unnecessary sysctl error. Obtained from: KAME
* o Actually add -x option: probeonly assigment was missedmaxim2003-12-261-0/+3
| | | | | | | | in rev. 1.15 pccardd.c. Reported by: osa OK'ed by: imp MFC after: 2 weeks
* Correct a typo in the text.wpaul2003-12-231-9/+2
| | | | | Remove BUGS section since the bug it describes has been fixed. Spell Matt Dodd's name correctly. (Oops.)
* Fix a case of undefined behavior due to overlapping buf objects inschweikh2003-12-231-2/+3
| | | | | | | | snprintf (buf, size, fmt, buf, etc). This only works by chance with our libc, but fails (with a truncated string) on e.g. glibc. Okayed by: sobomax MFC after: 1 week
* fixed a bug that 'ip6addrctl delete' command does not worksuz2003-12-221-1/+1
| | | | obtained from: KAME
* Teach the Fixit environment how to deal with a dynamic root. Symlinkscottl2003-12-212-12/+12
| | | | | | | | /libexec to /mnt2/libexec, and execute /mnt2/rescue/ldconfig to add the /mnt2/lib and /mnt2/usr/lib library directories. Thanks to John Baldwin for working to track this down. Submitted by: jhb
* - Add new FTP mirror site in Turkey (first/only one).kensmith2003-12-212-0/+6
| | | | Approved by: murray (re@)
* Do an update mount operation to mount the mfsroot as read/write ratherjhb2003-12-202-2/+12
| | | | | than read/only when sysinstall is running as init. This fixes several install issues.
* Fix uncontrolled access to the buffer in rfcomm_sppd(1).emax2003-12-191-2/+2
| | | | | | | | Fix typo in hcsecd(8) man page. Submitted by: Guido Falsi <mad@madpilot.net> Reviewed by: imp (mentor) Approved by: imp (mentor)
* Make ndiscvt(8) emit the binary image array as inline assembly code ratherwpaul2003-12-181-8/+16
| | | | | | | | | | | | | | | | | | | than a char array. Emitting the data as a big char array works fine in the typical case, where a .sys file may be ~50K in size. Unfortunately, some .sys files can be several hundred Kbytes in size, or even several megabytes in size. One extreme case is the Intel centrino wireless driver, which is 2.4MB. This causes us to emit an ndis_driver_data.h file that's on the order of 15MB in size, and gcc consumes enormous amounts of virtual memory while trying to compile it. On my laptop, with 128MB of RAM and 256MB of swap space, gcc consumed all available VM and crashed without being able to compile if_ndis.o. By emitting the array as assembler, we bypass the C compiler and consume much less memory. I was able to easily test compile if_ndis.ko with the centrino driver on my laptop after this change. This is merely a convenience, and should not have any operational effect on the NDISulator itself.
* Grrrr. Remove -g flag that snuck in.wpaul2003-12-181-1/+1
|
* Deal with the duplicate sysctl leaf problem. A .inf file may containwpaul2003-12-182-33/+27
| | | | | | | | | | | | | | | | | | definitions for more than one device (usually differentiated by the PCI subvendor/subdevice ID). Each device also has its own tree of registry keys. In some cases, each device has the same keys, but sometimes each device has a unique tree but with overlap. Originally, I just had ndiscvt(8) dump out all the keys it could find, and we would try to apply them to every device we could find. Now, each key has an index number that matches it to a device in the device ID list. This lets us create just the keys that apply to a particular device. I also added an extra field to the device list to hold the subvendor and subdevice ID. Some devices are generic, i.e. there is no subsystem definition. If we have a device that doesn't match a specific subsystem value and we have a generic entry, we use the generic entry.
* Install 100dpi fonts by default when installing X11: fun as using 75dpirwatson2003-12-171-1/+1
| | | | | fonts on a 100dpi display is, the jaggies just aren't worth it. DPMI auto-configures higher DPIs on many modern displays now.
* Correct truncation detection after use of snprintf: The case wherenectar2003-12-172-5/+5
| | | | exactly one character was truncated was not detected.
* o grammar fixesbrueffer2003-12-171-7/+7
| | | | | | | o wordsmithing o s/isochronus/isochronous/ MFC after: 5 days
* Re-linewrap help file on securelevels in sysinstall: sysinstall isrwatson2003-12-161-24/+26
| | | | | | | | mostly used on 80x25 displays, and the actual window is about ten characters narrower than that, resulting in the need for horizontal scrolling. No functional change. RELENG_5_2 candidate.
* Once upon a time, DEVFS was optional, major numbers where static, and /devscottl2003-12-161-22/+1
| | | | | | | | | | | needed to be statically populated with device nodes. The first two are no longer true, which makes the third pretty moot. In fact, we don't seem to put device node bits into the distribution archives at all anymore. So..... remove the god-aweful nasty hack that force unmounted devfs during installation so that static device nodes could land in /dev. Now that the vnode cleaner handles this case better this isn't strictly needed, but axeing code in sysinstall is almost always benficial. Thanks to Don Lewis for pointing out this attribute of sysinstall.
* Provide a way to deal with rc.conf which may already be populated in certaintrhodes2003-12-132-0/+4
| | | | cases.
* Support yet another variant of WinXP .INF files.wpaul2003-12-131-5/+11
|
* Attempt to handle WinXP .INF files. Also, in dump_regvals(), handlewpaul2003-12-121-9/+36
| | | | | | | | | | | | the case where there's an entry in the manufacturer's device list but no corresponding installation section (and hence no AddReg assignments), i.e. if dev = find_assign(sname, "AddReg"); returns NULL, then don't try to dereference dev. There is a fundamental problem with the handling of .INF files that contain definitions for multiple devices: right now we dump all the AddReg sections that we find, but don't distinguish what device they belong to. This often results in duplicate keys.
* Fix handling of .INF files with more than one PCI ID defined.wpaul2003-12-111-2/+3
|
* Fix getopt() string so -o works.wpaul2003-12-111-1/+1
|
* Grrr. Put the right .PATH statements in the right Makefiles.wpaul2003-12-111-1/+1
|
* Commit the ndiscvt(8) utility too. (Missed it in the last import.)wpaul2003-12-117-0/+1138
|
* Commit the first cut of Project Evil, also known as the NDISulator.wpaul2003-12-111-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Yes, it's what you think it is. Yes, you should run away now. This is a special compatibility module for allowing Windows NDIS miniport network drivers to be used with FreeBSD/x86. This provides _binary_ NDIS compatibility (not source): you can run NDIS driver code, but you can't build it. There are three main parts: sys/compat/ndis: the NDIS compat API, which provides binary compatibility functions for many routines in NDIS.SYS, HAL.dll and ntoskrnl.exe in Windows (these are the three modules that most NDIS miniport drivers use). The compat module also contains a small PE relocator/dynalinker which relocates the Windows .SYS image and then patches in our native routines. sys/dev/if_ndis: the if_ndis driver wrapper. This module makes use of the ndis compat API and can be compiled with a specially prepared binary image file (ndis_driver_data.h) containing the Windows .SYS image and registry key information parsed out of the accompanying .INF file. Once if_ndis.ko is built, it can be loaded and unloaded just like a native FreeBSD kenrel module. usr.sbin/ndiscvt: a special utility that converts foo.sys and foo.inf into an ndis_driver_data.h file that can be compiled into if_ndis.o. Contains an .inf file parser graciously provided by Matt Dodd (and mercilessly hacked upon by me) that strips out device ID info and registry key info from a .INF file and packages it up with a binary image array. The ndiscvt(8) utility also does some manipulation of the segments within the .sys file to make life easier for the kernel loader. (Doing the manipulation here saves the kernel code from having to move things around later, which would waste memory.) ndiscvt is only built for the i386 arch. Only files.i386 has been updated, and none of this is turned on in GENERIC. It should probably work on pc98. I have no idea about amd64 or ia64 at this point. This is still a work in progress. I estimate it's about %85 done, but I want it under CVS control so I can track subsequent changes. It has been tested with exactly three drivers: the LinkSys LNE100TX v4 driver (Lne100v4.sys), the sample Intel 82559 driver from the Windows DDK (e100bex.sys) and the Broadcom BCM43xx wireless driver (bcmwl5.sys). It still needs to have a net80211 stuff added to it. To use it, you would do something like this: # cd /sys/modules/ndis # make; make load # cd /sys/modules/if_ndis # ndiscvt -i /path/to/foo.inf -s /path/to/foo.sys -o ndis_driver_data.h # make; make load # sysctl -a | grep ndis All registry keys are mapped to sysctl nodes. Sometimes drivers refer to registry keys that aren't mentioned in foo.inf. If this happens, the NDIS API module creates sysctl nodes for these keys on the fly so you can tweak them. An example usage of the Broadcom wireless driver would be: # sysctl hw.ndis0.EnableAutoConnect=1 # sysctl hw.ndis0.SSID="MY_SSID" # sysctl hw.ndis0.NetworkType=0 (0 for bss, 1 for adhoc) # ifconfig ndis0 <my ipaddr> netmask 0xffffff00 up Things to be done: - get rid of debug messages - add in ndis80211 support - defer transmissions until after a status update with NDIS_STATUS_CONNECTED occurs - Create smarter lookaside list support - Split off if_ndis_pci.c and if_ndis_pccard.c attachments - Make sure PCMCIA support works - Fix ndiscvt to properly parse PCMCIA device IDs from INF files - write ndisapi.9 man page PR: Submitted by: Reviewed by: Approved by: Obtained from: MFC after:
* Add just enough of i386/include/pcvt_ioctl.h to amd64/include/pcvt_ioctl.hobrien2003-12-101-0/+1
| | | | | | such that 'ispcvt' can build. Unforunately 'ispcvt' is needed in order for /etc/rc.d/syscons to run. This fixes the bug where I could not get my keymap effective at boot.
* Add IPv6 support to pppctl by using getaddrinfo() and trying each addresstjr2003-12-071-89/+115
| | | | | | | it returns. This allows it to connect to the server side again, which has been listening on IPv6 addresses exclusively for more than 2 years. PR: 59369
* Fix our kernel support for Basic Block Profiling to work with GCC33.phk2003-12-032-13/+69
| | | | Approved by: re@
* Reconnect ipfstat, ipnat, and ipftest to the build now that if_xnamebrooks2003-12-021-1/+2
| | | | | | support is enabled. Approved by: re (scottl)
* Replace the KDE and GNOME 2 desktops with KDE (Lite Edition) and GNOME 2marcus2003-12-024-8/+8
| | | | | | | | (Lite Edition) respectively. These "lite" packages are streamlined to provide users with the core essentials for each desktop and to fit on the release disc 1. Approved by: re (scottl)
* Spell SSHd as sshd.rwatson2003-12-012-2/+2
| | | | | Requested by: jhb Approved by: re (jhb)
* The new "spec against spec" comparison code was yet another timephk2003-11-301-7/+22
| | | | | | | victim of the special sort order employed where files come before directories and alphabetic inside these two groups. Approved by: re@
* Add a Securelevel sub-menu to the Security configuration menu,rwatson2003-11-297-0/+190
| | | | | | | | | | | | | permitting the administrator to select a securelevel top operate at. Include a helpfile summarizing some of the information from init(8). This allows for explicit configuration of securelevels, which was previously implicit in Security Profile selection. Currently, there are no checkboxes for the active securelevel, because sysinstall's facilities for deriving "current settings" from rc.conf may use only one variable, not two, and I opted for the simplest approach at this point. Approved by: re (scottl)
* Cosmetic fix: a message was mixed with a dialog box border line.olgeni2003-11-281-1/+1
| | | | Approved by: re (rwatson)
* Remove security profiles from sysinstall. Currently, security profilerwatson2003-11-289-188/+10
| | | | | | | | | | | | | | | | | selection is used to drive two configuration parameters: (1) Default enable/disable for sshd (2) Default enable/disable for securelevels Replace this with an explicit choice to enable/disable sshd. A follow-up commit will add a configuration option to the Security post-install configuration menu to set the securelevel in rc.conf explicitly. This should reduce the level of foot-shooting associated with accidental enabling of securelevels, make the nature and implications of the securelevel configuration options more explicit, as well as make the choice to enable/disable sshd more explicit. Approved by: re (scottl)
* - Drop down to one snapshots FTP site since that's all we have nowkensmith2003-11-242-32/+40
| | | | | | | - Adjust names of IPv6 FTP hosts a bit - Sync list of FTP sites with reality Approved by: rwatson (re@)
* Add Greek keymaps to sysinstall.jhb2003-11-204-10/+18
| | | | | | PR: bin/59078 Submitted by: Panagiotis Astithas <past@noc.ntua.gr> Approved by: re (rwatson)
* A variety of content cleanups:rwatson2003-11-201-22/+70
| | | | | | | | | | | | | | | | | | | | | | | (1) Document the notion of using jail(8) to run "virtual servers" or just to constrain specific applications. If only running specific applications, some configuration steps are unnecessary (such as editing rc.conf). (2) Add some more subsection headers to break up the bigger chunks of text. (3) Clarify the problems associated with applications binding all IP addresses in the host, and attempt to be more specific about potential application problems. Document how to force sshd to bind the the right socket. (4) Suggest that in a jailed application scenario, you might want to have the host syslogd listen on the socket in the jail, rather than running syslogd in the jail. (5) Catch another reference to /stand/sysinstall. Approved by: re (bmah implicitly)
* No need to copy sysinstall into a jail with -CURRENT, since inrwatson2003-11-201-10/+2
| | | | | | -CURRENT, we have /usr/sbin/sysinstall. Approved by: re (bmah implicitly)
* Off by one error in malloc.phk2003-11-191-1/+1
| | | | Approved by: re@
* Catch up with the latest in device naming.obrien2003-11-181-5/+5
|
* * Auto-detect what device to use if none is specifiedeivind2003-11-172-18/+33
| | | | | * Replace references to mcd0 with acd0 (doc only) * Remove references to the "c" partition (doc only - code was already fixed)
* __FBSDID; remove duplicate <ctype.h>; try to reduce style inconsistencies.des2003-11-171-46/+43
|
* Sort includes, and remove superfluous <sys/types.h>des2003-11-171-15/+15
|
* Instead of blindly loading the ums module and bailing out if that fails,des2003-11-171-2/+38
| | | | | | | | check if it's already loaded or compiled into the kernel, and only try to load it if it isn't. PR: bin/59368 Submitted by: Jens Rehsack <rehsack@liwing.de>
* Remove the BUGS section introduced in rev 1.11 now that the problemdas2003-11-171-15/+0
| | | | has been addressed.
* Reimplement nologin(8) as a C program. This allows us to staticallydas2003-11-173-40/+29
| | | | | | | link it at low cost and avoid environment poisoning attacks associated with LD_LIBRARY_PATH. Suggested by: rwatson
* Document nologin(8) as being insecure in conjunction with a dynamicdas2003-11-171-0/+15
| | | | root and suggest alternatives.
* logerror is used in syslogd to log errors from syslogd itself. Itdwmalone2003-11-161-0/+6
| | | | | | | | | | | | is possible for an error to occur while trying to log an error, and this can result in infinite recursion (or at least until we run out of stack). Rather than this, we ignore requests to log an error while logging an error. PR: 51253 MFC after: 2 weeks
OpenPOWER on IntegriCloud