Commit Graph

62013 Commits

Author SHA1 Message Date
guido
931817b0a3 Get rid of useless bcopy (the next statement was equivalent) 2001-07-09 19:00:08 +00:00
markm
b93e321e4a Clean up (and in some cases write) the PAM mudules, using
o The new options-processing API
o The new DEBUG-logging API

Add man(1) pages for ALL modules. MDOC-Police welcome
to check this.

Audit, clean up while I'm here.
2001-07-09 18:20:51 +00:00
markm
88481e2817 Bump the major number. The libraries API has changed incompatibly. 2001-07-09 18:16:33 +00:00
markm
ce40061f63 Almost completely rewrite the PAM module options processing
routines, and provide a more extended API for doing this.

Provide an API for debug logging.

Audit and clean up the code.
2001-07-09 18:14:43 +00:00
markm
c1b5c1af3a Add the WANT_INSECURE_OPIE frob which is useful for debugging and
over secure (encrypted) links.

Add a MLINK for skey(4) to opie(4) to assist in the transition.
2001-07-09 18:08:16 +00:00
wpaul
81a7e9e870 Apply patch supplied by Jonathan Chen: use the correct arguments to
pci_enable_io(). We need to use SYS_RES_IOPORT/SYS_RES_MEMORY instead
of PCIM_CMD_PORTEN/PCIM_CMD_MEMEN.
2001-07-09 17:58:42 +00:00
markm
b4bc00b9ce Axe S/Key. OPIE is the legal successor. 2001-07-09 17:52:34 +00:00
markm
efb73b1f49 Axe S/Key. OPIE is the true and faithful successor. 2001-07-09 17:49:34 +00:00
markm
bee2af690e Remove S/Key. PAM can do its job. Well, not quite - there is an issue
with the conversation function and challenges which needs to be
revisited, so in the interim a hack is introduced to provide
an OPIE challenge (which is random if OPIE does not apply)
at all non-anonymnous logins.
2001-07-09 17:46:24 +00:00
markm
a9dda789d3 Remove the S/Key key-handling apps, which are no longer needed, as
they are replaced by opiepasswd, opieinfo and opiekey.
2001-07-09 17:40:57 +00:00
markm
c87069e257 Provide a WANT_INSECURE_OPIE compile-time option, which is useful if
you encrypt all traffic routinely, and is also useful for debugging.

Also, (properly) set SUID bit on relevant apps - opieinfo and
opiepasswd, which need it to mess with /etc/opiekeys.
2001-07-09 17:37:52 +00:00
markm
bfb9179af7 Goodbye S/Key, Hello OPIE.
I believe I have done due dilligence on this, but I'd appreciate
decent test scenarios and sucess (or failure) reports.
2001-07-09 17:34:22 +00:00
imp
a332eabf73 Note that spls are noops 2001-07-09 16:06:06 +00:00
bmah
3de174e90b Better support for multi-lingual release documentation. We now support
language-dependant SGML catalogs (in ${LANG_CODE}/share/sgml) and also
use a default.dsl stylesheet similar to what the rest of the DocProj
documents use.

Requested by:	hrs, Alex Kapranoff <kapr@acm.org>
Reviewed by:	hrs, dd
MFC after:	2 days
2001-07-09 16:01:38 +00:00
ru
ae06dbeeb4 mdoc(7) police: eliminate -ww warnings. 2001-07-09 15:54:36 +00:00
ru
c37301bb0a mdoc(7) police: eliminate -ww warnings. 2001-07-09 15:46:02 +00:00
obrien
f06cb30488 Fix disordering. 2001-07-09 11:06:47 +00:00
obrien
b1bc5000f3 Add fsck_msdosfs 2001-07-09 11:06:21 +00:00
obrien
3cf13f2864 Style tweaks. 2001-07-09 10:38:15 +00:00
obrien
ac9263d315 Add fsck_msdosfs.
Obtained from:	NetBSD
2001-07-09 10:35:18 +00:00
dd
978810079e mdoc(7) police: remove extraneous .Pp before and/or after .Sh. 2001-07-09 09:54:33 +00:00
brian
34ad3e29c4 Fix the type of the NULL arg to execl()
Idea from: Theo de Raadt <deraadt@openbsd.org>
2001-07-09 09:24:06 +00:00
brian
6ee865329e Fix the type of the last arg to execl()
Obtained from: OpenBSD
2001-07-09 08:17:47 +00:00
alfred
7e91164e44 Link in manpages for vfs_busy, vfs_mount, vfs_unbusy, and vinvalbuf. 2001-07-09 07:15:51 +00:00
alfred
4bef9ffc2d Document kernel API for vfs_busy(), vfs_mount(), vfs_unbusy(), and
vinvalbuf().

Submitted by: Chad David <davidc@acns.ab.ca>
2001-07-09 06:47:10 +00:00
obrien
734c642db4 It is just stupid to have to do ``<ESC>!rm -f %'' to write a file you own.
So lets stop that nonsense and allow `w!' to do something useful.

Submitted by:	green
2001-07-09 04:11:33 +00:00
des
9eec4758aa Fix missing newline and terminator at the end of the vm.zone sysctl. 2001-07-09 03:37:33 +00:00
dillon
c3a83303af Add manual page and usage for dump -D (supplied by Dima Dorfman) (will also
be MFC'd)

Submitted by: Dima Dorfman <dima@unixfreak.org>
2001-07-09 03:06:56 +00:00
brian
fe94ef0dfa Staticise the OpenBSD SHA1_End() function 2001-07-09 00:45:57 +00:00
brian
cc66846f9a Stay (backwards-)compatible with OpenBSD's groff 2001-07-09 00:13:49 +00:00
brian
f031961551 Add a ``nat proto'' command -- similar to natd(8)'s -redirect_proto switch.
MFC after: 3 weeks
2001-07-09 00:07:56 +00:00
iedowse
14f57d5c88 Oops, remove a `mouse_move_delayed++' that shouldn't have been
added in the previous commit; this variable is already incremented
in the previous `if' condition.
2001-07-08 21:16:20 +00:00
joerg
68ba8962d1 Another large patchset from Bruce.
Despite of a few cosmetic things like adding ``irritating silly
parentheses'' around all return values, this mainly improves FDC reset
handling by no longer gratuitously resetting the FDC all the time
(which causes it to lose the notion of the current track) but only in
case of errors, and it sanitizes the block and offset calculations in
fdstrategy() and fdstate().  Some additional cleanup added by me, in
particular the large switch in fdstate() now always uses return to
break out, and no branch falls off the end of the switch statement
anymore.  Per Bruce's suggestion, removed M_NOWAIT from the malloc()s
to simplify things.

Submitted by:	bde (mostly)
2001-07-08 20:50:20 +00:00
iedowse
b33afafe92 The state machine for 3-button emulation defers some button events
until a 20ms select(2) timeout occurs, but if there is a continuous
stream of movement events, button events can be delayed indefinitely
because the select never has to wait long enough for a timeout.
The delay and mouse event reordering that result are very noticable
and sometimes quite frustrating when dragging windows etc. in X.

Add a simple mechanism that avoids this re-ordering. While a button
event is deferred, we discard up to 3 movement events to allow for
mouse jitter. If more movement events occur, then we immediately
timeout the deferred button event and let the movement proceed.
This change only affects the 3-button emulation case.
2001-07-08 20:23:59 +00:00
dillon
bdd938c41a Oops, forgot to add 'D' to the option morphing block. 2001-07-08 19:48:37 +00:00
dillon
65db8431d4 Add a -D option to dump, allowing the path for the /etc/dumpdates file to be
changed, so independant entities backing up the same thing to different
media can be made not to trip over each other.

MFC after: 3 days
2001-07-08 19:45:20 +00:00
ume
6d8a12ed01 soopt_mcopyout() frees mbuf if error occurs, and DOES NOT free it if it is
successful.
This part was lacked during merge.

Obtained from:	KAME
MFC after:	1 week
2001-07-08 18:06:03 +00:00
wpaul
0b7f36995c Do not set the MODE_1000 bit unless we actually have a gigabit link.
Previously, I had the MODE_1000 bit in the global config register set
unconditionally, which was wrong: we have to turn it off if we have
a 10/100 link. This is now handled in the nge_miibus_statchg() routine.

Discovered by: Nathan Binkert <binkertn@eecs.umich.edu>

(Note: this commit is being done from JFK airport. :P )
2001-07-08 16:24:01 +00:00
des
757dd1764a Handle shemeless, hostless URLs correctly. 2001-07-08 15:59:15 +00:00
des
51ccda8fba Fix an embarassing if-test-reversal bug that broke scheme guessing. 2001-07-08 15:17:26 +00:00
julian
a123d88d46 Small whitespace fix.
BDE'd by: BDE
2001-07-08 04:58:29 +00:00
julian
3fbdfc8f01 A set of changes to reduce the number of include files the kernel
takes from /usr/include. I cannot check them on alpha.. (will try beast)

Briefly looked at by: Warner Losh <imp@harmony.village.org>
2001-07-08 04:56:07 +00:00
julian
40d8a883c8 Turn on nullmodem (nmdm(4)) man page. 2001-07-08 04:36:52 +00:00
julian
2dc288133b Add a brief manpage (cribbed form pty.4) about the null-modem
driver (nmdm(4)).
2001-07-08 04:35:21 +00:00
julian
d800bef932 turn on the null-modem device.
(I've been using it with vmware for over a year now.)
2001-07-08 04:17:26 +00:00
silby
8878184942 Temporary feature: Runtime tuneable tcp initial sequence number
generation scheme.  Users may now select between the currently used
OpenBSD algorithm and the older random positive increment method.

While the OpenBSD algorithm is more secure, it also breaks TIME_WAIT
handling; this is causing trouble for an increasing number of folks.

To switch between generation schemes, one sets the sysctl
net.inet.tcp.tcp_seq_genscheme.  0 = random positive increments,
1 = the OpenBSD algorithm.  1 is still the default.

Once a secure _and_ compatible algorithm is implemented, this sysctl
will be removed.

Reviewed by: jlemon
Tested by: numerous subscribers of -net
2001-07-08 02:20:47 +00:00
dd
79687241ee Fill paragraphs after previous commit. 2001-07-08 01:04:10 +00:00
dd
a3ef97dce7 Note that options should be listed in NOTES, not LINT, although LINT
is generated from NOTES.  Also correct a bogus path;
<machine>/conf/options.<machine> doesn't exist.
2001-07-08 01:02:37 +00:00
msmith
b86dafec1b Ha! This time, I remembered the ACPI module. Update the sources list
to reflect recent changes in the code.
2001-07-07 23:36:13 +00:00
msmith
a7515ddfea Nuke the ACPI APIC driver. The ACPI CA infrastructure it depended on
is gone, and it's not coming back, and the whole driver needed to be
rethrought to deal with a major chicken-and-egg consideration.
2001-07-07 22:23:56 +00:00