Commit Graph

33236 Commits

Author SHA1 Message Date
John Polstra
3da08d4af1 Add libpam to the "includes" and "libraries" targets.
Build the ordered list of libraries in a variable "_libs" before
building any of them.  This eliminates a little bit of duplicated
code.  More importantly, it makes it easier to include or exclude
libraries with .if constructs, because the list can be built in
multiple steps using "+=".
1998-11-18 01:59:39 +00:00
John Polstra
a0a4fbec88 Add LIBPAM, LIBRADIUS, and LIBTACPLUS. 1998-11-18 01:53:56 +00:00
John Polstra
ae5fd90c74 Add the directory "/usr/include/security", which is where the PAM
header files go.  I am not too happy about the name.  But if we are
to have any hope of being able to use 3rd party PAM modules, we'll
have to live with it.
1998-11-18 01:51:25 +00:00
John Polstra
9a10bb17e1 Build structure for contribified Linux-PAM, plus some home-grown
modules for FreeBSD's standard authentication methods.  Although
the Linux-PAM modules are present in the contrib tree, we don't
use any of them.

The main library "libpam" is composed of sources taken from three
places.  First are the standard Linux-PAM libpam sources from the
contrib tree.  Second are the Linux-PAM "libpam_misc" sources, also
from the contrib tree.  In Linux these form a separate library.
But as Mike Smith pointed out to me, that seems pointless, so I
have combined them into the libpam library.  Third are some additional
sources from the "src/lib/libpam" tree with some common functions
that make it easier to write modules.  Those I wrote myself.

This work has been donated to FreeBSD by Juniper Networks, Inc.
1998-11-18 01:44:37 +00:00
John Polstra
41058e060e Eliminate a setreuid() call that doesn't make sense for FreeBSD.
We don't use this module, but still I don't want to leave this call
in the code.
1998-11-18 01:24:34 +00:00
John Polstra
06b963fe1a Fix #includes for FreeBSD. 1998-11-18 01:22:46 +00:00
John Polstra
0c6b630e95 Don't call openlog() and closelog(). Assume that the application
takes care of that.
1998-11-18 01:21:46 +00:00
John Polstra
4adeb82df8 s/Linux-PAM/PAM/g 1998-11-18 01:20:54 +00:00
John Polstra
8999aed3f1 This commit was generated by cvs2svn to compensate for changes in r41220,
which included commits to RCS files with non-trunk default branches.
1998-11-18 01:16:21 +00:00
John Polstra
fff5887d38 Initial import of virgin Linux-PAM 0.65, slightly stripped down. 1998-11-18 01:16:21 +00:00
John Polstra
4f7c48c192 Initial revision 1998-11-18 01:16:19 +00:00
John Polstra
851ee3c484 For ELF, create a symbolic link libfoo.so -> libfoo.so.NNN in the
object tree too.  This makes it possible to link against a shared
library that hasn't been installed yet.
1998-11-18 00:48:11 +00:00
John Polstra
c271ea0e09 Note the requirement that libcrypt be built before libkrb. 1998-11-18 00:40:38 +00:00
John Polstra
d8ae4a279f Add an explicit dependency on libcrypt so that shared library
linkage works properly.
1998-11-18 00:40:07 +00:00
Doug Rabson
73c8631124 Remove stale references to ih_next and ih_prev.
Pointed out by: Roman V. Palagin <romanp@wuppy.rcs.ru>
1998-11-17 10:53:37 +00:00
Doug Rabson
b0a6dfad26 Definitions for alpha specific device resources. 1998-11-17 10:40:33 +00:00
Doug Rabson
9b0e7f94af Definitions for alpha specific system calls. 1998-11-17 10:40:07 +00:00
Kirk McKusick
96334b8fc8 Because buffers may be tossed and recreated at will under the new VM
system, the mapping from logical to physical block number may be lost.
Hence we have to check for a reconstituted buffer and redo the call to
VOP_BMAP if the physical block number has been lost.
1998-11-17 00:31:12 +00:00
Jean-Marc Zucconi
9ba91dd44b Add an emply MAIN__() function. This avoid an unresolved reference error
during link phase when using fortran subroutines with non-fortran 'main()'.
1998-11-16 23:51:14 +00:00
Robert V. Baron
b3a2ec1e44 A few bug fixes for Robert Watson 1998-11-16 19:48:26 +00:00
Doug Rabson
7a94149e37 Make the previous fix more portable.
Requested by: bde
1998-11-16 08:27:36 +00:00
KATO Takenori
d969b47c9c Sync with sys/i386/isa/wd.c revision up to 1.180. 1998-11-16 08:13:54 +00:00
KATO Takenori
258591400a Sync with sys/i386/conf/options.i386 revision 1.92. 1998-11-16 08:11:58 +00:00
KATO Takenori
22276a9a88 Sync with sys/i386/conf/Makefile.i386 revision 1.129. 1998-11-16 08:09:16 +00:00
Jacques Vidrine
8d05cc8419 vmunix -> kernel
PR:		port/8543
Submitted by:	jkb@best.com
1998-11-16 04:25:03 +00:00
Jacques Vidrine
90d1ac3b67 Update to reflect reality.
PR:		kern/8629
1998-11-16 03:49:39 +00:00
Jordan K. Hubbard
ff6301aaf3 put hosts before bind. 1998-11-16 02:02:30 +00:00
Kenneth D. Merry
93a6df25e8 Update tcopy for CAM. (/dev/rst0 -> /dev/rsa0)
PR:		i386/8688
Submitted by:	Bill Trost <trost@cloud.rain.com>
1998-11-16 00:05:46 +00:00
Kenneth D. Merry
d9e371b995 Now that the wd driver is fixed (Thanks Bruce!), re-enable the
devstat_end_transaction error message that gets printed whenever the
busy count is < 0.

This will help catch drivers that improperly implement devstat(9) support.
1998-11-15 23:57:22 +00:00
Andrzej Bialecki
122d2c5921 Update ssh version number. It's only informational, anyway.
Submitted by:	jkh
1998-11-15 23:30:26 +00:00
Andrzej Bialecki
10639dcf77 Use console instead of ttyv0 - it didn't work with serial console... 1998-11-15 23:26:32 +00:00
Kenneth D. Merry
b735c71405 Use snprintf to make sure we don't overflow a buffer. 1998-11-15 23:17:39 +00:00
Kenneth D. Merry
2327ec3a76 Fix an error message. (it was using an uninitialized variable)
Reported by:	dan@math.berkeley.edu (Dan Strick)
1998-11-15 23:12:42 +00:00
Guido van Rooij
d285db5598 The below patch helps to reduce the leakage of internal socket information
when a TCP "stealth" scan is directed at a *BSD box by ensuring the window
is 0 for all RST packets generated through tcp_respond()
Reviewed by:	Don Lewis <Don.Lewis@tsc.tdk.com>
Obtained from:	Bugtraq (from: Darren Reed <avalon@COOMBS.ANU.EDU.AU>)
1998-11-15 21:35:09 +00:00
Mike Smith
ad6d02135b Reimplement the NFS ACCESS RPC cache as an "accelerator" rather than a true
cache.  If the cached result lets us say "yes", then go with that.  If
we're not sure, or we think the answer might be "no", go to the wire to be
certain.    This avoids all of the possible false veto cases, and allows us
to key the cached value with just the UID for which the cached value holds,
reducing the bloat of the nfsnode structure from 104 bytes to just 12 bytes.

Since the "yes" case is by far the most common, this should still provide
a substantial performance improvement.  Also default the cache to on, with
a conservative timeout (2 seconds).  This improves performance if NFS is
loaded as a KLD module, as there's not (yet) code to parse an option out
of the module arguments to set it, and sysctl doesn't work (yet) for OIDs
in modules.

The 'accelerator' mode was suggested by Bjoern Groenvall (bg@sics.se)

Feedback on this would be appreciated as testing has been necessarily
limited by Comdex, and it would be valuable to have this in 2.2.8.
1998-11-15 20:36:18 +00:00
Mike Smith
cda43ef612 Implement the nfs_access_cache variable, allowing us to set the timeout for
the NFS client's ACCESS cache.
1998-11-15 20:30:04 +00:00
Mike Smith
3acd0a4cb3 Document the new nfs_access_cache variable. 1998-11-15 20:29:27 +00:00
Eivind Eklund
340fe9ae67 Make it possible to adjust the IDE probe delay from kernel config files. 1998-11-15 20:08:50 +00:00
Eivind Eklund
34e7656caa Depend on __FreeBSD_version instead of __FreeBSD__ 1998-11-15 19:30:48 +00:00
Doug Rabson
08b6a4cbee * Add hooks to allow the X server to access I/O ports and memory.
* Update drivers to the latest version of the bus interface.

The ISA drivers' use of the new resource api is minimal.  Garrett has
some much cleaner drivers which should be more easily shared between
i386 and alpha.  This has only been tested on cia based machines.  It
should work on lca and apecs but I might have broken something.
1998-11-15 18:25:17 +00:00
Doug Rabson
128d4f3960 Build subr_rman.c by default. 1998-11-15 18:16:23 +00:00
Doug Rabson
225b9157e6 Don't include link_elf.c twice in the link. 1998-11-15 18:15:06 +00:00
Doug Rabson
921433915d A couple of minor sanity checks.
Submitted by: Nick Hibma <nick.hibma@jrc.it>
1998-11-15 18:11:21 +00:00
Doug Rabson
48a39a495a Fix printf format errors on alpha. 1998-11-15 18:10:14 +00:00
Doug Rabson
2f2dcad41b * Change 'struct resource' to 'struct config_resource'.
* Bump config version.
1998-11-15 18:07:35 +00:00
David Greenman
efac52b4ab In sendfile(2), check against sb_lowat when filling the socket buffer,
rather than 0.
1998-11-15 16:55:09 +00:00
Bruce Evans
b54e74eb87 Fixed a misspelling of boolean true as MNT_WAIT. 1998-11-15 15:46:33 +00:00
Bruce Evans
c25ded316f Finished updating module event handlers to be compatible with
modeventhand_t.
1998-11-15 15:33:52 +00:00
Andrey A. Chernov
a0f25b5561 Prevent MakeMaker to produce /usr/local/local/bin path for
INSTALLSCRIPT and INSTALLBIN: it broke ports
1998-11-15 15:26:12 +00:00
Bruce Evans
a9ef8bf740 Don't generate module event handlers of the wrong (old) type.
Fixed some pedantic syntax errors (an extra semicolon in each
SYSUNINIT() expansion).
1998-11-15 15:25:56 +00:00