Commit Graph

1888 Commits

Author SHA1 Message Date
Paul Traina
673e960089 Fix potential buffer overrun 1996-10-01 03:41:28 +00:00
Bill Paul
42c703633d Close a potential security hole: if yp_access() is passed a map name,
have it check to see that it doesn't contain any '/' characters. This
prevents possible silliness like ypcat "../../../kernel". We already
test the domain name for this in yp_validdomain(), and ypserv itself
tests the map name in yp_open_db(), but it doesn't hurt to be paranoid
and test for it in the generic access routine too. rpc.ypxfrd does not
test the map name for slashes, but it does call yp_access() with the
map name, so this removes a potential vulnerability from there.

Also make the tests for IPPORT_RESERVED a little more selective: make
sure it trips when map == master.passwd.*, prog == YPPROC and proc ==
YPPROC_XFR, and prog == YPXFRD_FREEBSD_PROG and proc == YPXFRD_GETMAP.
Also use IPPORT_RESERVED instead of hard-coded value.
1996-09-30 22:27:00 +00:00
Bill Fenner
7b5698c217 Grab traceroute out of src/contrib/traceroute 1996-09-30 19:49:54 +00:00
Jordan K. Hubbard
468892768e Make this more usable from shell scripts and such by adding a non-interactive
flag and some checking to see if it's even reasonable to ask for confirmation
at all.
1996-09-30 03:10:30 +00:00
Bruce Evans
5d98ce7598 Include <fcntl.h> so that this doesn't depend on the KERNEL version
of <sys/file.h> including <sys/fcntl.h>.  Only the !KERNEL version
of <sys/file.h> will do that when I unspam the kernel headers.
1996-09-29 19:25:10 +00:00
Bruce Evans
3b72a1cdd4 Close files up to getdtablesize(), instead of up to NOFILE.
lpd was one of 3 programs in /usr/src that (mis)used NOFILE.
1996-09-29 19:12:55 +00:00
Jordan K. Hubbard
36122d2d57 Correct a minor misspelling.
Noticed-by: der
1996-09-29 10:03:30 +00:00
Bruce Evans
750f8dc963 Removed references to pathconf-related variables that were never handled
by sysctl and never can be in their documented form (kern.name_max would
have to become fs.filesystemname.name_max, etc.).

Added missing references to user.stream_max and user.tzname_max.  These
seem to misnamed.  <sys/sysconf.h> says that they correspond to POSIX2
names, but the sysconf names don't have POSIX2 or "posix2" like all the
other POSIX2 names.
1996-09-28 14:43:03 +00:00
Bruce Evans
552690d2b1 Moved getdtablesize() out of a loop. 1996-09-28 11:25:47 +00:00
Paul Traina
3d08ec926a Add info field.
Closes pr docs/1679.
1996-09-27 20:31:26 +00:00
Paul Traina
c8de1e0212 Rate limit the "xxx bytes read from" message to a maximum of one per
chunk or one per second, whichever is less.  Outputting this message once every
couple of K was really crazy on a 9600bps serial console.
1996-09-26 22:12:07 +00:00
Paul Traina
41b018dd0b If we're running through the FTP setup dialog the *first* time, skip
the FTP path if we've already configured one (this allows preconfigured ftp
servers).
1996-09-26 22:07:32 +00:00
Paul Traina
09bef27f97 If we're unable to open /dev/ttyv0, assume that we're on a single tty system
and use /dev/console.

I really think the proper test is to determine which device has been configured
to be the console (remember the RB_SERIAL flag?) and use it instead of always
trying to open /dev/ttyv0 first.
1996-09-26 21:07:11 +00:00
Paul Traina
5319e113eb If /install.cfg exists on the local floppy (or if LOAD_CONFIG_FILE is defined
and the user inserts a floppy), read the config file to pre-define variables
for a custom installation.

[Note: I fixed one bug in LOAD_CONFIG_FILE code, but it's still not perfect.]
1996-09-26 21:03:35 +00:00
Bruce Evans
4523edce8b Really eliminated includes of the "temporary" backwards compatibility
header <sys/dir.h> in applications.  My previous sweep didn't find the
places that included it without needing it.
1996-09-24 08:43:04 +00:00
Bruce Evans
0c8ea4d48c Eliminated includes of the "temporary" backwards compatibility header
<sys/dir.h> in applications.  Maintained existing (inadequate) ifdefs
for dir.h vs dirent.h in libdialog, amd and rarpd, but didn't add any
new ones.
1996-09-24 08:08:11 +00:00
Wolfram Schneider
e0e5145ce6 add missing comma(s) in .Xr macros 1996-09-23 22:24:39 +00:00
Andrey A. Chernov
a59b44944e Fix one byte buffer overflow
Submitted by: Eric Allman <eric@sendmail.org>
1996-09-22 14:57:00 +00:00
Jordan K. Hubbard
3e8947d7aa Remove some gratutious screen saves. 1996-09-22 00:48:55 +00:00
Andrey A. Chernov
c0eb19c55f Fix & expansion (from pw_gecos field), sizeof buf used when
buf is pointer, not array, buflen must be used instead.
Charlie & from root name was expanded to junk as result.
1996-09-21 23:37:35 +00:00
Wolfram Schneider
374fc79d70 fix .Xr macro 1996-09-21 15:08:10 +00:00
Nate Williams
2514dd6975 ts_sec -> tv_sec
ts_nsec -> tv_nsec

Pointed out by:	bde
1996-09-20 04:13:44 +00:00
Peter Wemm
1aa04dd1f3 aarghh! what is it with this CVSROOT/val-tags regexp anyway? how
many times do I have to do this to get it right? :-]
1996-09-19 08:41:49 +00:00
Peter Wemm
4a55d8c7ca Merge import conflicts 1996-09-19 03:12:11 +00:00
Peter Wemm
e700373f31 This commit was generated by cvs2svn to compensate for changes in r18366,
which included commits to RCS files with non-trunk default branches.
1996-09-19 03:01:32 +00:00
Peter Wemm
5160fa301b Import of sendmail-8.7.6 1996-09-19 03:01:32 +00:00
Jordan K. Hubbard
932fd2b2c2 Don't call copySelf() when upgrading. 1996-09-18 18:40:37 +00:00
Wolfram Schneider
d45496e5c4 warn if reach group line limit (>200 users, >1024 bytes per line)
close PR#1595

suggested by: Seppo Kallio <kallio@beeblebrox.cc.jyu.fi
1996-09-17 19:34:56 +00:00
Garrett Wollman
1c7ee7bf52 Delete old routed(8). 1996-09-16 16:56:00 +00:00
Garrett Wollman
322bab890f Disable build of old routed. 1996-09-16 16:53:54 +00:00
Jordan K. Hubbard
4f68a706f2 Remove some bogosities I introduced with the init file hack (not serious,
just bogus).  Also turn off by default - whoops!
1996-09-15 23:55:23 +00:00
Bill Paul
616b87f978 Toss the mkaliases script into the attic and remove its install
target from the Makefile. We don't need it anymore, and it was
broken anyway.
1996-09-15 00:39:20 +00:00
Wolfram Schneider
896f207c80 Do not backup master.passwd if pwd_mkdb returned an error. This
was to paranoid, pwd_mkdb(8) is carefully enough to not
corrupt master.passwd on failure.

Submitted by: joerg
1996-09-14 23:22:23 +00:00
Bruce Evans
eaa86f9d7f Don't use __dead or __pure in user code. They were obfuscations
for gcc >= 2.5 and no-ops for gcc >= 2.6.  Converted to use __dead2
or __pure2 where it wasn't already done, except in math.h where use
of __pure was mostly wrong.
1996-09-14 03:00:32 +00:00
Jordan K. Hubbard
79b69435d9 Make passwords no longer echo or display. Because of this, we now also
ask for matching confirmation.  I'm sure there is a clever direct-from-perl
ioctl way of putting the terminal into noecho mode, but I don't feel like
learning perl so I just used system.  [yes, I'll put stty on the installation
boot floppy as necessary]
1996-09-11 08:36:54 +00:00
Peter Wemm
a77d162973 Argh! there's no need for moused to be setuid-root! Now that it
works from startup, and works with XFree86 via /dev/sysmouse, it should
be started at boot and left running.

Pointed out by: Sujal Patel <smpatel@umiacs.umd.edu>
1996-09-10 19:17:25 +00:00
Peter Wemm
13379e47c1 gut and overhaul moused, it was simply not working for me on any mouse
I could find.  This change does the following:
  - s/usage()/break;/ in handling the -s switch.
  - use err/warn instead of fprintf(stderr, ... strerror()); exit(1);
  - implement Hitachi PUMA HitTablet support from the XFree86 code,
    whatever the hell that is. :-)
  - correctly implement baud rate setting, too much was cut from the
    XFree86 code, the critical parts were a sweep over all likely
    mouse powerup baud rates to switch it to the reqested rate.
  - logitech support was busted (at least on mine, which is autosensing
    and runs in either mmseries or logitech mode depending on the handshake
    code at startup.  Among other things, you talk to it at 1200, then
    switch to the target baud later.

Some remaining problems..  samplerate setting is missing, but I've not
found where this is meant to be set yet.  I presume this is resolution
setting of some kind.
1996-09-10 18:20:46 +00:00
Peter Wemm
73b2606378 personal (ie: with the crontab command) cron tabs were broken by the
last change. :-(
ie: /var/cron/log would report: .. cron[206]: (usage) CAN'T OPEN (%s/%s)
1996-09-10 03:38:20 +00:00
Bill Fenner
83fa788e4d Change strcpy() to strncpy() in several places, and give gethostname()
the real buffer size.  Note that the strncpy(domain, ...) doesn't need to
be a strncpy(), since it is copying from itself to itself, but belts
and suspenders don't hurt and this is not time-critical code.

Fixes the half of PR bin/1581 that wasn't fixed in rev 1.7

Submitted by:	Karl <karl@codebase.mcs.net>
1996-09-10 00:50:13 +00:00
Søren Schmidt
a41cbc45be Fix for the problem that moused hangs if it is started from /etc/rc
Introduces the /dev/consolectl device for controlling various
console related things (given syscons is used).
1996-09-09 18:47:47 +00:00
Jordan K. Hubbard
2252262f79 Doh! Actually read the patch I applied and see what it was *trying* to do,
then make it do that.
Error-of-my-ways-pointed-out-by: Bob Willcox <bob@luke.pmr.com>
1996-09-09 15:32:26 +00:00
Paul Traina
30aaae26c6 Fix some buffer overflow problems... 1996-09-08 23:50:23 +00:00
Jordan K. Hubbard
60b522b0a6 Various minor improvements. 1996-09-08 01:39:25 +00:00
Peter Wemm
0c5936ed24 Add dequeue script for the record. 1996-09-07 21:09:41 +00:00
Peter Wemm
6dd18c1490 make it slightly less verbose while creating queue entries.. 1996-09-07 21:06:19 +00:00
Peter Wemm
a64c504c01 make the "-l logfile" option actually do something.. 1996-09-07 20:41:09 +00:00
Peter Wemm
0ef88e5a1f After queueing deltas, send out an initial two mails since that will cover
99.9% of the cases at with out delay as before.
1996-09-07 19:50:48 +00:00
Peter Wemm
955892a940 fts_children() returns NULL if there are no files. If there was a failure
then errno != 0.
1996-09-07 19:46:29 +00:00
Peter Wemm
47a5bd3f21 - resync with configs running on freefall
- add ctm_conf.gnats from freefall
- add support for doing both the immediate mailout and the queued mailout.
- use "sendmail -odq -t" rather than "sendamil -t" to make it queue to
  the mailqueue rather than immediately begin transmission. This allows
  us to take advantage of our ordered dequeueing system without blowing
  WC's T1 to hell with a 50 part mailout in parallel.
- bump the max ctm size from 3MB to 10MB....  This is mainly for the fast
  list.
1996-09-07 18:48:52 +00:00
Peter Wemm
90ff799227 When looking for "group daemon" (since that's what's in mtree), make sure
we actually look for the *group* and not the user's gid.  user daemon
has traditionally been group 31 (guest).

Also clear out the groups vector so that it doesn't inherit the groups
of the invoking user (ever run rwhod by hand before?)  Unfortunately, we
can't empty the supplemental groups list because the !&@^#! egid is stored
in there! :-(
1996-09-07 01:43:08 +00:00