Commit Graph

61815 Commits

Author SHA1 Message Date
Mark Murray
c3a080c527 Almost completely rewrite the PAM module options processing
routines, and provide a more extended API for doing this.

Provide an API for debug logging.

Audit and clean up the code.
2001-07-09 18:14:43 +00:00
Mark Murray
1ba0449fc5 Add the WANT_INSECURE_OPIE frob which is useful for debugging and
over secure (encrypted) links.

Add a MLINK for skey(4) to opie(4) to assist in the transition.
2001-07-09 18:08:16 +00:00
Bill Paul
75ff968cd5 Apply patch supplied by Jonathan Chen: use the correct arguments to
pci_enable_io(). We need to use SYS_RES_IOPORT/SYS_RES_MEMORY instead
of PCIM_CMD_PORTEN/PCIM_CMD_MEMEN.
2001-07-09 17:58:42 +00:00
Mark Murray
ccdee0d9f4 Axe S/Key. OPIE is the legal successor. 2001-07-09 17:52:34 +00:00
Mark Murray
132463cacb Axe S/Key. OPIE is the true and faithful successor. 2001-07-09 17:49:34 +00:00
Mark Murray
fa1746c93c Remove S/Key. PAM can do its job. Well, not quite - there is an issue
with the conversation function and challenges which needs to be
revisited, so in the interim a hack is introduced to provide
an OPIE challenge (which is random if OPIE does not apply)
at all non-anonymnous logins.
2001-07-09 17:46:24 +00:00
Mark Murray
8509234471 Remove the S/Key key-handling apps, which are no longer needed, as
they are replaced by opiepasswd, opieinfo and opiekey.
2001-07-09 17:40:57 +00:00
Mark Murray
875afe974f Provide a WANT_INSECURE_OPIE compile-time option, which is useful if
you encrypt all traffic routinely, and is also useful for debugging.

Also, (properly) set SUID bit on relevant apps - opieinfo and
opiepasswd, which need it to mess with /etc/opiekeys.
2001-07-09 17:37:52 +00:00
Mark Murray
20934175ae Goodbye S/Key, Hello OPIE.
I believe I have done due dilligence on this, but I'd appreciate
decent test scenarios and sucess (or failure) reports.
2001-07-09 17:34:22 +00:00
Warner Losh
66abd14823 Note that spls are noops 2001-07-09 16:06:06 +00:00
Bruce A. Mah
a2ddea9863 Better support for multi-lingual release documentation. We now support
language-dependant SGML catalogs (in ${LANG_CODE}/share/sgml) and also
use a default.dsl stylesheet similar to what the rest of the DocProj
documents use.

Requested by:	hrs, Alex Kapranoff <kapr@acm.org>
Reviewed by:	hrs, dd
MFC after:	2 days
2001-07-09 16:01:38 +00:00
Ruslan Ermilov
e25e8ab41c mdoc(7) police: eliminate -ww warnings. 2001-07-09 15:54:36 +00:00
Ruslan Ermilov
42dadc4a58 mdoc(7) police: eliminate -ww warnings. 2001-07-09 15:46:02 +00:00
David E. O'Brien
863f7db9bb Fix disordering. 2001-07-09 11:06:47 +00:00
David E. O'Brien
4879cc0787 Add fsck_msdosfs 2001-07-09 11:06:21 +00:00
David E. O'Brien
0120256800 Style tweaks. 2001-07-09 10:38:15 +00:00
David E. O'Brien
0121b42aca Add fsck_msdosfs.
Obtained from:	NetBSD
2001-07-09 10:35:18 +00:00
Dima Dorfman
70d51341bf mdoc(7) police: remove extraneous .Pp before and/or after .Sh. 2001-07-09 09:54:33 +00:00
Brian Somers
7bc6d0158f Fix the type of the NULL arg to execl()
Idea from: Theo de Raadt <deraadt@openbsd.org>
2001-07-09 09:24:06 +00:00
Brian Somers
b5b15b9e7f Fix the type of the last arg to execl()
Obtained from: OpenBSD
2001-07-09 08:17:47 +00:00
Alfred Perlstein
ffe734e3a2 Link in manpages for vfs_busy, vfs_mount, vfs_unbusy, and vinvalbuf. 2001-07-09 07:15:51 +00:00
Alfred Perlstein
8981fef84c Document kernel API for vfs_busy(), vfs_mount(), vfs_unbusy(), and
vinvalbuf().

Submitted by: Chad David <davidc@acns.ab.ca>
2001-07-09 06:47:10 +00:00
David E. O'Brien
fbd7787b32 It is just stupid to have to do ``<ESC>!rm -f %'' to write a file you own.
So lets stop that nonsense and allow `w!' to do something useful.

Submitted by:	green
2001-07-09 04:11:33 +00:00
Dag-Erling Smørgrav
bf3009895e Fix missing newline and terminator at the end of the vm.zone sysctl. 2001-07-09 03:37:33 +00:00
Matthew Dillon
988d64c256 Add manual page and usage for dump -D (supplied by Dima Dorfman) (will also
be MFC'd)

Submitted by: Dima Dorfman <dima@unixfreak.org>
2001-07-09 03:06:56 +00:00
Brian Somers
543b7124d2 Staticise the OpenBSD SHA1_End() function 2001-07-09 00:45:57 +00:00
Brian Somers
4016f9e0c4 Stay (backwards-)compatible with OpenBSD's groff 2001-07-09 00:13:49 +00:00
Brian Somers
8829899405 Add a ``nat proto'' command -- similar to natd(8)'s -redirect_proto switch.
MFC after: 3 weeks
2001-07-09 00:07:56 +00:00
Ian Dowse
a9b238fa8e Oops, remove a `mouse_move_delayed++' that shouldn't have been
added in the previous commit; this variable is already incremented
in the previous `if' condition.
2001-07-08 21:16:20 +00:00
Joerg Wunsch
fb35bd37f2 Another large patchset from Bruce.
Despite of a few cosmetic things like adding ``irritating silly
parentheses'' around all return values, this mainly improves FDC reset
handling by no longer gratuitously resetting the FDC all the time
(which causes it to lose the notion of the current track) but only in
case of errors, and it sanitizes the block and offset calculations in
fdstrategy() and fdstate().  Some additional cleanup added by me, in
particular the large switch in fdstate() now always uses return to
break out, and no branch falls off the end of the switch statement
anymore.  Per Bruce's suggestion, removed M_NOWAIT from the malloc()s
to simplify things.

Submitted by:	bde (mostly)
2001-07-08 20:50:20 +00:00
Ian Dowse
70ccc8d82e The state machine for 3-button emulation defers some button events
until a 20ms select(2) timeout occurs, but if there is a continuous
stream of movement events, button events can be delayed indefinitely
because the select never has to wait long enough for a timeout.
The delay and mouse event reordering that result are very noticable
and sometimes quite frustrating when dragging windows etc. in X.

Add a simple mechanism that avoids this re-ordering. While a button
event is deferred, we discard up to 3 movement events to allow for
mouse jitter. If more movement events occur, then we immediately
timeout the deferred button event and let the movement proceed.
This change only affects the 3-button emulation case.
2001-07-08 20:23:59 +00:00
Matthew Dillon
cedae1f478 Oops, forgot to add 'D' to the option morphing block. 2001-07-08 19:48:37 +00:00
Matthew Dillon
3860f7810d Add a -D option to dump, allowing the path for the /etc/dumpdates file to be
changed, so independant entities backing up the same thing to different
media can be made not to trip over each other.

MFC after: 3 days
2001-07-08 19:45:20 +00:00
Hajimu UMEMOTO
89349143ab soopt_mcopyout() frees mbuf if error occurs, and DOES NOT free it if it is
successful.
This part was lacked during merge.

Obtained from:	KAME
MFC after:	1 week
2001-07-08 18:06:03 +00:00
Bill Paul
2ce0498bd7 Do not set the MODE_1000 bit unless we actually have a gigabit link.
Previously, I had the MODE_1000 bit in the global config register set
unconditionally, which was wrong: we have to turn it off if we have
a 10/100 link. This is now handled in the nge_miibus_statchg() routine.

Discovered by: Nathan Binkert <binkertn@eecs.umich.edu>

(Note: this commit is being done from JFK airport. :P )
2001-07-08 16:24:01 +00:00
Dag-Erling Smørgrav
ab39353eef Handle shemeless, hostless URLs correctly. 2001-07-08 15:59:15 +00:00
Dag-Erling Smørgrav
74bd3d7698 Fix an embarassing if-test-reversal bug that broke scheme guessing. 2001-07-08 15:17:26 +00:00
Julian Elischer
50bc553e3c Small whitespace fix.
BDE'd by: BDE
2001-07-08 04:58:29 +00:00
Julian Elischer
0b1ae8097d A set of changes to reduce the number of include files the kernel
takes from /usr/include. I cannot check them on alpha.. (will try beast)

Briefly looked at by: Warner Losh <imp@harmony.village.org>
2001-07-08 04:56:07 +00:00
Julian Elischer
a7ed41d61f Turn on nullmodem (nmdm(4)) man page. 2001-07-08 04:36:52 +00:00
Julian Elischer
1b57ee4d22 Add a brief manpage (cribbed form pty.4) about the null-modem
driver (nmdm(4)).
2001-07-08 04:35:21 +00:00
Julian Elischer
8ff09ab3a9 turn on the null-modem device.
(I've been using it with vmware for over a year now.)
2001-07-08 04:17:26 +00:00
Mike Silbersack
2d610a5028 Temporary feature: Runtime tuneable tcp initial sequence number
generation scheme.  Users may now select between the currently used
OpenBSD algorithm and the older random positive increment method.

While the OpenBSD algorithm is more secure, it also breaks TIME_WAIT
handling; this is causing trouble for an increasing number of folks.

To switch between generation schemes, one sets the sysctl
net.inet.tcp.tcp_seq_genscheme.  0 = random positive increments,
1 = the OpenBSD algorithm.  1 is still the default.

Once a secure _and_ compatible algorithm is implemented, this sysctl
will be removed.

Reviewed by: jlemon
Tested by: numerous subscribers of -net
2001-07-08 02:20:47 +00:00
Dima Dorfman
4718c85a24 Fill paragraphs after previous commit. 2001-07-08 01:04:10 +00:00
Dima Dorfman
86bbbaba40 Note that options should be listed in NOTES, not LINT, although LINT
is generated from NOTES.  Also correct a bogus path;
<machine>/conf/options.<machine> doesn't exist.
2001-07-08 01:02:37 +00:00
Mike Smith
55ec04d9bc Ha! This time, I remembered the ACPI module. Update the sources list
to reflect recent changes in the code.
2001-07-07 23:36:13 +00:00
Mike Smith
83ac9b3bab Nuke the ACPI APIC driver. The ACPI CA infrastructure it depended on
is gone, and it's not coming back, and the whole driver needed to be
rethrought to deal with a major chicken-and-egg consideration.
2001-07-07 22:23:56 +00:00
Mike Smith
815e9365a2 Nuke the ACPI APIC driver. The ACPI CA infrastructure it depended on
is gone, and it's not coming back, and the whole driver needed to be
rethrought to deal with a major chicken-and-egg consideration.
2001-07-07 22:18:30 +00:00
Nick Sayer
dada46cb22 The Netgear card works for me under 'wi'. 2001-07-07 20:38:44 +00:00
Hajimu UMEMOTO
3efe99eb71 The m_free call in the ip6_fw_ctl_ptr == NULL case apparently
tries to free uninitialized mbuf.
This was my mistake during recent KAME merge.  This part is for
*BSD other than FreeBSD.

Submitted by:	Alexander N. Kabaev <ak03@gte.com>
2001-07-07 19:58:45 +00:00