Commit Graph

12134 Commits

Author SHA1 Message Date
Doug Barton
ac4cfa6dbb MFC r200743:
The service command is an easy interface to the rc.d system.
Its primary purpose is to start and stop services provided by
the rc.d scripts, however it can also be used to list the scripts
using various criteria.

MFC r200809, r200980, r201035, r201069, 201070:

Updates/fixes suggested after the initial introducition
2009-12-30 19:36:40 +00:00
Edwin Groothuis
dd1c9c3da4 MFC of r200832, tzdata2009t
zic:
- Fix URL / reference to Calendrical Calculations: Third Edition

libc/stdtime:
- Fix typo in tzfile.5 (no changes in our part)
2009-12-29 10:05:20 +00:00
Jamie Gritton
af4411db7e MFC r200449:
Don't free jail parameter values after printing them - jail_param_get
  expects them to be there for the next jail in the list.

PR:		bin/141359
2009-12-20 04:45:32 +00:00
Attilio Rao
acd3c01512 MFC r199804:
Avoid sshd, crond, inetd and syslogd to be killed in an high-pressure
swapping environment.

Sponsored by:	Sandvine Incorporated
2009-12-19 19:35:53 +00:00
Shteryana Shopova
49b7e6f580 MFC r200122
Make sure enough memory is allocated for a struct pft_entry when
refreshing the list of pf tables.
2009-12-12 20:26:11 +00:00
Andrew Thompson
a785df36d1 MFC r198833
Add more verbose output when dumping the configuration descriptor.
2009-12-09 23:14:53 +00:00
Colin Percival
0cd4e30efa Disable SSL renegotiation in order to protect against a serious
protocol flaw. [09:15]

Correctly handle failures from unsetenv resulting from a corrupt
environment in rtld-elf. [09:16]

Fix permissions in freebsd-update in order to prevent leakage of
sensitive files. [09:17]

Approved by:	so (cperciva)
Security:	FreeBSD-SA-09:15.ssl
Security:	FreeBSD-SA-09:16.rtld
Security:	FreeBSD-SA-09:17.freebsd-udpate
2009-12-03 09:18:40 +00:00
Jaakko Heinonen
1a225ffb6a MFC r197833:
When run() returns an error, print the error message also in
non-interactive mode. Previously error messages were printed only in
interactive mode.

PR:		bin/124517
Approved by:	trasz (mentor)
2009-11-11 19:50:52 +00:00
Xin LI
01e195f21d MFC r198846:
Set umask to 0x077 instead of the default.  This prevents non-root user
  from reading crashinfo output, which could contain some sensitive
  information.
2009-11-10 00:41:22 +00:00
Edwin Groothuis
cbd57efc02 MFC of 198831, tzcode2009q
- Cleanup unnecessary local variables in zdump.
- Fix man-page
2009-11-09 11:32:18 +00:00
Christian Brueffer
92eb005cae MFC: r198750
Expand DESCRIPTION and add a basic EXAMPLES section.
2009-11-08 12:08:42 +00:00
John Baldwin
2d7c21427d MFC 198586: Include the output of the ddb(4) capture buffer. 2009-11-04 16:05:09 +00:00
Ed Maste
7c064f68be MFC r198029:
Correct typo: thetime -> the time

PR:		docs/139447
Submitted by:	Guido Falsi  mad at madpilot dot net
2009-11-02 16:27:34 +00:00
Ed Schouten
f36e7051c7 MFC various commits back to stable/8:
SVN r197174:
  Make sure we never place the cursor outside the screen.

  For some vague reason, it may be possible that scp->cursor_pos exceeds
  scp->ysize * scp->xsize. This means that teken_set_cursor() may get
  called with an invalid position. Just ignore the old cursor position in
  this case.

  Reported by:  Paul B. Mahol <onemda gmail com>

SVN r198213:
  Make lock devices work properly.

  It turned out I did add the code to use the init state devices to set
  the termios structure when opening the device, but it seems I totally
  forgot to add the bits required to force the actual locking of flags
  through the lock state devices.

  Reported by:	ru

SVN r198215, r198217:
  Fix a typo in the jail(8) manpage.

  Submitted by: Jille Timmermans <jille quis cx>

SVN r198216:
  Fix qouting in a comment, to make it look more consistent

  Submitted by: Jille Timmermans <jille quis cx>

SVN r198223:
  Properly set the low watermarks when reducing the baud rate.

  Now that buffers are deallocated lazily, we should not use
  tty*q_getsize() to obtain the buffer size to calculate the low
  watermarks. Doing this may cause the watermark to be placed outside the
  typical buffer size.

  This caused some regressions after my previous commit to the TTY code,
  which allows pseudo-devices to resize the buffers as well.

  Reported by:  yongari, dougb
2009-11-01 10:30:30 +00:00
John Baldwin
9f6aba26bf MFC 196555:
- Use the headers from ACPI-CA to define various constants and structures
  for table layouts, etc. rather than homerolling our own structures and
  constants in acpidump.h.
- Verify the extended checksum on the RSDP.
- Handle new ACPI 3.0 fields in MADT including X2APIC entries and
  UIDs for local SAPICs.
- Add handling for new ACPI 3.0 flags in the FADT.
2009-10-29 14:40:21 +00:00
John Baldwin
dce196cf9c MFC: Remove spurious README and an old version of the manpage. 2009-10-28 21:08:20 +00:00
Jilles Tjoelker
815fc7356d MFC r197625: Fix using lp(1) without the new -t option after r194171.
Approved by:	re (kib)
2009-10-06 21:23:49 +00:00
Hajimu UMEMOTO
43ea76c98d MFC r196475:
- Add AS lookup functionality to traceroute6(8) as well.
 - Support for IPv6 transport for AS lookup.
 - Introduce $RA_SERVER to set whois server.
 - Support for 4 byte ASN.
 - ANSIfy function declaration in as.c.

Approved by:	re (kib)
2009-09-13 11:34:33 +00:00
Bjoern A. Zeeb
e0adffb3d5 MFC r196866:
In the NEXTADDR macro use SA_SIZE() rather than directly using
  sizeof(), as introduced in r186119, for advancing the current
  position into the buffer.
  See comment in net/route.h for a description of the difference.
  This makes ndp -s work again.

   Reviewed by:	qingli

Approved by:	re (kib)
2009-09-05 17:29:08 +00:00
Brian Somers
6d2e2db1a9 MFC r196530: Document that ppp handles pipe(2) descriptors specially in
-direct mode.

Approved by:	re (kib)
2009-08-29 04:15:37 +00:00
Brian Somers
61a651a452 MFC: When ``ppp -direct'' is invoked by a program that uses pipe(2) to
create stdin and stdout, don't blindly try to use stdin as a bi-directional
     channel.  Instead, detect the pipe and set up a special exec handler
     that indirects write() calls through stdout.

     This fixes the problem where ``set device "!ssh -e none host ppp
     -direct label"'' no longer works with an openssh-5.2 server side as
     that version of openssh ignores the USE_PIPES config setting and
     *always* uses pipes (rather than socketpair) for stdin/stdout channels.

Approved by:	re (kib)
2009-08-27 07:07:38 +00:00
Brian Somers
ff550a99bd MFC: When realloc()ing device memory for transfer to another ppp process,
don't continue to use the realloc()d pointer - it might have changed!

     Remove some stray diagnostics while I'm here.

Approved by:	re (kib)
2009-08-27 07:05:46 +00:00
Sam Leffler
f9906ce770 MFC r196472:
Enable _DIRENT_HAVE_D_TYPE so wpa_cli scans directories properly
  for it's unix domain socket.  Before this change wpa_cli would take
  the first file in the directory that was not "." or "..".

Approved by:	re (rwatson)
2009-08-23 16:21:49 +00:00
Simon L. B. Nielsen
452e49d601 MFC 196392:
Add support for backing up the old kernel when installing a new kernel
  using freebsd-update.  This applies to using freebsd-update in "upgrade
  mode" and normal freebsd-update on a security branch.

  The backup kernel will be written to /boot/kernel.old, if the directory
  does not exist, or the directory was created by freebsd-update in a
  previous backup.  Otherwise freebsd-update will generate a new directory
  name for use by the backup.  By default symbol files are not backed up
  to save diskspace and avoid filling up the root partition.

  This feature is fully configurable in the freebsd-update config file,
  but defaults to enabled.

  Reviewed by:	cperciva

Approved by:	re (kib)
2009-08-19 21:01:32 +00:00
Scott Long
53e7499383 Merge mptutil
Approved by:	re
2009-08-17 07:30:08 +00:00
Scott Long
42eeb00e0b Merge mfiutil
Approved by:	re
2009-08-17 07:25:12 +00:00
Rink Springer
1e2c2ea509 MFC r196272
Prevent sysinstall from needlessly waiting for confirmation when using an USB
device in non-interactive mode.

If there are no USB devices, sysinstall gives an error messages, and if there
is >1, it'll ask which one is to be used. This change allows a non-interactive
install from USB media to succeed without any user interaction if there is
exactly one USB disk device in the system it can use.

Submitted by: Daniel O'Connor < doconnorat gsoft dot com dot au >
Reviewed by:  randi
Approved by:  re (rwatson)
2009-08-16 10:25:58 +00:00
Giorgos Keramidas
ae131b7499 MFC 196254 - iostat: add a bit of space between tty in/out columns
The columns for tty input and output may bump against each other
if the tty output needs more than 5 columns.  Add a bit of space
that pushes everything 1 column to the right, but also avoids the
problem.

Approved by:	re (rwatson)
2009-08-15 18:03:34 +00:00
Stanislav Sedov
81fda6adf0 - Merge r196244:
Avoid overflowing the swap size counters in human-readable mode
    by introducing the new CONVERT_BLOCKS macro which operates on
    sizes already converted to number of blocks.  With this macro
    it is not longer needed to perform needless multiplica

Approved by:	re (kib)
2009-08-15 15:12:46 +00:00
Remko Lodder
c5047621f0 Remove bogus char cast.
PR:		118014
 Submitted by:	Gardner Bell <gbell72 at rogers dot com>
 Approved by:	re (rwatson), imp (mentor, implicit)
 MFC after:	immediate

Approved by:	re (rwatson), imp (mentor, implicit)
2009-08-14 19:30:59 +00:00
Colin Percival
a429f76be7 Merge r196213 to stable/8.
Approved by:	re (rwatson)
2009-08-14 13:26:50 +00:00
John Baldwin
badf1a61b3 MFC 196147: Fix references to the kernel distributions to use the correct
names (uppercase).

Approved by:	re (rwatson, kib)
2009-08-12 14:40:21 +00:00
Bjoern A. Zeeb
290d3c9f72 MFC r196137:
Do not truncate IPv6 addresses when printing them in the
  jls -av 7.x multi-IP jail backward compat output.

  Reported by:  ed
  Tested by:    ed
  Reviewed by:  rwatson

Approved by:  re
2009-08-12 12:31:29 +00:00
Colin Percival
6bf0cb8a79 Merge r196128 to stable/8.
Approved by:	re (rwatson)
2009-08-12 12:00:22 +00:00
Ken Smith
357327a0c2 Prepare for 8.0 package set, adjust for 8-stable, acknowledge 9-current
is coming.

Approved by:	re (implicit)
2009-08-12 07:37:18 +00:00
Jamie Gritton
843c277bfa Handle kernels that don't have IPv6 by not sending an "ip6.addr"
parameter unless a (numeric) IPv6 address is given.  Even the default
binaries built with -DINET6 will work with IPv6-less kernels.  With an
eye to the future, similarly handle the possibility of an IPv4-less kernel.

Approved by:	re (kib), bz (mentor)
2009-07-31 14:30:06 +00:00
Robert Watson
b2beb67f92 Style tweak.
Approved by:	re (kib)
MFC after:	3 days
2009-07-30 09:51:04 +00:00
John Baldwin
a0333ad155 Parse the System Resource Affinity Table ('SRAT') used to describe affinity
relationships between CPUs and memory.

Reviewed by:	jkim
Approved by:	re (kib)
MFC after:	1 week
2009-07-29 19:07:24 +00:00
Jamie Gritton
7cbf72137f Some jail parameters (in particular, "ip4" and "ip6" for IP address
restrictions) were found to be inadequately described by a boolean.
Define a new parameter type with three values (disable, new, inherit)
to handle these and future cases.

Approved by:	re (kib), bz (mentor)
Discussed with:	rwatson
2009-07-25 14:48:57 +00:00
Edward Tomasz Napierala
ea665f1079 Change the name displayed in sysinstall(8) from 'Wizard Mode'
to 'Expert Mode', to make it less confusing to new users, to whom
a 'wizard' is a set of simple dialogs with the 'next >>>' button.

Approved by:	re (kensmith)
2009-07-25 08:36:28 +00:00
Ken Smith
1e237f59b5 It is believed the last of the base system that could have an issue with
IDs larger than 16-bits has been updated so adjust sysinstall to allow
IDs up to the current system-wide size of 32-bits.

Approved by:	re (kib)
2009-07-22 22:13:42 +00:00
Colin Percival
90ad51e897 Remove the "dedicated disk mode" partitioning option from sysinstall, in
both the disk partitioning screen (the 'F' key) and via install.cfg (the
VAR_DEDICATED_DISK option).  This functionality is currently broken in 8.x
due to libdisk and geom generating different partition names; this commit
merely acts to help steer users away from the breakage.

Submitted by:	randi
Approved by:	re (kensmith)
2009-07-22 03:50:54 +00:00
Brian Somers
8e41399c8f Don't get stuck in an infinite loop comparing (short++ <= maxshort)
PR:		136893
Submitted by:	Aragon Gouveia - aragon at phat dot za dot net (mostly)
Approved by:	re (kib)
MFC after:	3 weeks
2009-07-19 19:01:30 +00:00
Ken Smith
3ca3047aee Bump the version of all non-symbol-versioned shared libraries in
preparation for 8.0-RELEASE.  Add the previous version of those
libraries to ObsoleteFiles.inc and bump __FreeBSD_Version.

Reviewed by:    kib
Approved by:    re (rwatson)
2009-07-19 17:25:24 +00:00
Sam Leffler
412c439591 add mesh support
Submitted by:	rpaulo
Approved by:	re (kib)
2009-07-17 21:11:08 +00:00
Ken Smith
8222d1e2f7 Correct the name of the Mongolian Documentation package.
Approved by:	re (kib)
2009-07-16 20:19:36 +00:00
Sam Leffler
4365f62b1e fix Jouni's email address
Approved by:	re (blanket)
2009-07-12 19:58:52 +00:00
Jamie Gritton
4d4d887907 Give a more expected behavior to -[hns] options, defaulting to all
parameters instead of ignoring the options and giving the old-style
default output.

Approved by:	re (kib), bz (mentor)
2009-07-08 15:57:22 +00:00
Jamie Gritton
f9bc4dcb56 Fix a typo in the examples.
Approved by:	re (kib), bz (mentor)
2009-07-08 15:46:29 +00:00
Colin Percival
71b38b3c12 Add support for using a livefs from a USB disk.
Submitted by:	randi
Approved by:	re (kensmith)
2009-07-08 06:07:51 +00:00