d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
69,200 Commits 6 Branches 133 Tags 2.6 GiB
53f3167d07
Commit Graph

69200 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dag-Erling Smørgrav
53f3167d07 Add a PAM module that provides an account management component for checking 
either PAM_RHOST or PAM_TTY against /etc/login.access.o

This uncovers a problem with PAM_RHOST, in that if we always set it, there
is no way to distinguish between a user logging in locally and a user
logging in using 'ssh localhost'.  This will be fixed by first making sure
that all PAM modules can handle PAM_RHOST being unset (which is currently
not the case), and then modifying su(1) and login(1) to not set it for
local logins.

Sponsored by:	DARPA, NAI Labs
 2002-01-23 17:42:16 +00:00
Dag-Erling Smørgrav
774a10071d Add an AUTHORS section crediting ThinkSec, DARPA and NAI Labs. 
Sponsored by:	DARPA, NAI Labs
 2002-01-23 17:16:00 +00:00
Ruslan Ermilov
0509dca0c3 Add pam_ssh support to the static PAM library, libpam.a: 
- Spam /usr/lib some more by making libssh a standard library.
- Tweak ${LIBPAM} and ${MINUSLPAM}.
- Garbage collect unused libssh_pic.a.
- Add fake -lz dependency to secure/ makefiles needed for
  dynamic linkage with -lssh.

Reviewed by:	des, markm
Approved by:	markm
 2002-01-23 15:54:17 +00:00
Dag-Erling Smørgrav
b6b756b58b Base the comparison on UIDs, not on user names. 
Sponsored by:	DARPA, NAI Labs
 2002-01-23 15:16:01 +00:00
Ruslan Ermilov
fd4ca9e02d Make libssh.so useable (undefined reference to IPv4or6). 
Reviewed by:	des, markm
Approved by:	markm
 2002-01-23 15:06:47 +00:00
Giorgos Keramidas
0063afffd5 dhclient-script.conf lives in /etc and not /sbin. 
PR:		docs/32008
Submitted by:	John E Hein <jhein@timing.com>
Approved by:	obrien
 2002-01-23 13:56:41 +00:00
Dag-Erling Smørgrav
c84317d7ad Add local/share/java/classes, local/share/sgml, local/share/xml 
Approved by:	ru, silence on -ports
MFC after:	1 week
 2002-01-23 13:02:16 +00:00
Ruslan Ermilov
0e65089b79 The sixth argument to the NET_RT_IFLIST sysctl is actually 0 for 
all interfaces, and ifnet.if_index value for a single interface.
 2002-01-23 12:48:08 +00:00
Maxim Sobolev
21367f05ab CG hard sentence breaks. 
Submitted by:	ru
 2002-01-23 09:35:55 +00:00
Alfred Perlstein
095f670d4e in fget() return EINVAL when the descriptor requested is negative. 2002-01-23 08:40:35 +00:00
Alfred Perlstein
b9a999ddbf Remove holdfp() prototype now that the function no longer exists 2002-01-23 08:28:55 +00:00
Alfred Perlstein
54e588636b forced commit, Previous revision also removed the holdfp() function 
from the kernel.
 2002-01-23 08:28:15 +00:00
Alfred Perlstein
97fa4397d3 make pread use fget_read instead of holdfp. 2002-01-23 08:22:59 +00:00
Matt Jacob
d9f1ea7b2b Roll to latest production level firmware. 
MFC after:	1 day
 2002-01-23 06:42:54 +00:00
Cameron Grant
4c68642adb improve sndstat output of feederchains so it can be understood without 
reading the feeder sourcecode
 2002-01-23 06:02:15 +00:00
Cameron Grant
4e60be3473 print warnings if a pcm*.buffersize hint is out of range or a non-power-of-2 2002-01-23 05:49:41 +00:00
Cameron Grant
23bc171b29 fix some comments accidentally hit by search/replace several revisions ago 2002-01-23 05:41:35 +00:00
Cameron Grant
0dd4f3508e set the speeds the right way round for recording using the rate feeder 2002-01-23 05:35:12 +00:00
Cameron Grant
1e59d53c22 add more error checking in chn_init() and chn_reset() 2002-01-23 05:21:27 +00:00
Cameron Grant
79e6a82b48 make the feederchain builder work for recording. this has not been tested 
extensively as none of my testboxes have speakers or an audio source at
present, but the chains built look correct and reading /dev/audio (ulaw,
translated from signed 16 bit little-endian) gives values within the
expected range for silence.
 2002-01-23 05:10:56 +00:00
Cameron Grant
f6126456ef don't bother checking if an unsigned parameter is less than 0 in a KASSERT 2002-01-23 04:50:51 +00:00
Cameron Grant
095159ecd1 add more error checking to open of /dev/dsp* and /dev/audio* - if the 
default format for the chosen subdevice cannot be obtained return an error
instead of returning success with an indeteterminate format selected.

note that this should never happen once the feederchain builder works for
recording.
 2002-01-23 04:44:03 +00:00
Cameron Grant
1c72c53f4e don't allow mmap beyond the end of the buffer 
Submitted by:	Philippe Anel <philippe.anel@noos.fr> (partially)
 2002-01-23 04:32:18 +00:00
Cameron Grant
0b9030a00f remove modules no longer built 2002-01-23 03:43:16 +00:00
Cameron Grant
9480149ab0 consolidate bits that don't need to be seperate modules into the modules 
that want them
 2002-01-23 03:32:36 +00:00
Kirk McKusick
7b60855308 Add a stub for softdep_request_cleanup() so that compilation without 
SOFTUPDATES option works properly.

Submitted by:	Benno Rice <benno@jeamland.net>
 2002-01-23 02:18:56 +00:00
Wes Peters
ce6d929bb5 Add missing destroy_dev(). 
Submitted by:	Maxime Henrion <mux@sneakerz.org>
Reviewed by:	msmith@
MFC after:	3 weeks
 2002-01-23 01:11:52 +00:00
Jun Kuriyama
a8131f63ea MFen (1.264 --> 1.265). 
Refine translation (by y-koga@jp).
 2002-01-23 00:46:49 +00:00
David Greenman
2e4bf827e5 Undo the work-around for the sendfile bug where nbytes needed the hdr/trl 
size added to it in order for it to work properly when nbytes != 0.

Reviewed by:	alfred
MFC after:	3 days
 2002-01-22 23:35:09 +00:00
Ian Dowse
673158816b The mode of files created by ctm_rmail was always 0600, even if the 
umask was less restrictive. This was caused by the use of mkstemp()
which internally passes a mode of 0600 to open(). Fix this by
explicitly chmod'ing the files to (0666 & ~umask).

PR:		bin/16119
Submitted by:	Sascha Blank <blank@uni-trier.de>
 2002-01-22 22:54:52 +00:00
Archie Cobbs
be44fce4fa Add ngctl "write" command. 
MFC after:	1 week
 2002-01-22 22:01:25 +00:00
Brian Feldman
87e55280fa Remove bogus _POSIX_ACL_PATH_MAX definition. 2002-01-22 21:33:12 +00:00
Jens Schweikhardt
8f2087fb45 Fix a typo and fix indenting for struct sockaddr to match other structs. 
No content changes.
MFC after:	3 weeks
 2002-01-22 21:26:15 +00:00
Maxim Sobolev
65ab9c78a3 Don't use `you'. 
Submitted by:	ru
 2002-01-22 21:11:18 +00:00
Andrey A. Chernov
ff7448f849 Restore C99 standard conformance information, isblank() _is_ in final 
standard document

Pointed by: "Jacques A. Vidrine" <n@nectar.cc>
 2002-01-22 20:14:35 +00:00
Philippe Charnier
57906e00c6 Show arguments of command line options 
Reviewed by:	ru
 2002-01-22 19:49:48 +00:00
Jonathan Lemon
d9b7cc1c8d The ENDPTS_EQ macro was comparing the one of the fports to itself. Fix. 
Submitted by: emy@boostworks.com
 2002-01-22 17:54:28 +00:00
Jonathan Lemon
a1a9c8f7e6 Initialize the sysctl_ctx list early, which avoids a panic in case other 
allocatiosn fail and fxp_release() is called.
 2002-01-22 17:51:44 +00:00
David Greenman
81c9105585 Null commit - the previous log message should have read: 
Fixed bug in calculation of amount of file sent when nbytes !=0 and
  headers or trailers are supplied. Reported by Vladislav Shabanov
  <vs@rambler-co.ru>.
 2002-01-22 17:38:58 +00:00
Mark Murray
5567b258eb Use the proper type (gid_t) for (group)->gr_gid to be orthogonal 
with uid_t usage and (user)->pw_uid.

PR:		3242
 2002-01-22 17:32:53 +00:00
David Greenman
7228268aaa Fixed bug in calculation of amount of file to send when nbytes !=0 and 
headers or trailers are supplied. Reported by Vladislav Shabanov
<vs@rambler-co.ru>.

PR:		33771
Submitted by:	Maxim Konovalov <maxim@macomnet.ru>
MFC after:	3 days
 2002-01-22 17:32:10 +00:00
Hajimu UMEMOTO
fc50a44458 Do not taint ::/124 for localhost reverse table. 2002-01-22 17:22:41 +00:00
Ruslan Ermilov
322628519e Reincarnate SETUID code in man(1), not compiled in by default. 
The code will be fixed for all known security vulnerabilities,
and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for
those who still want it installed setuid for whatever reasons.
 2002-01-22 15:15:38 +00:00
Ruslan Ermilov
93dee74a5d Revert revision 1.57 -- ache@ axed /var/spool/uucp in BSD.var.dist,v 1.55. 2002-01-22 14:55:25 +00:00
Ruslan Ermilov
0dc5e09ec6 Fix the description of the O_NONBLOCK flag to match reality. 
Prodded by:	Maxim Konovalov <maxim@macomnet.ru>
Obtained from:	BSD/OS
 2002-01-22 14:18:55 +00:00
Ruslan Ermilov
0c7f152b7b Fix a typo I made in revision 1.5. 
Submitted by:	trevor
 2002-01-22 12:38:43 +00:00
Poul-Henning Kamp
1a25c86b3b In certain cases sbuf_printf() and sbuf_vprintf() could mistakely 
make extendable sbufs as overflowed.

Approved by:	des
 2002-01-22 11:22:55 +00:00
Joerg Wunsch
7109d65231 Mention that a minimal version of camcontrol(8) is now available in the 
installation environment (currently only for i386 releases).
 2002-01-22 11:13:43 +00:00
Giorgos Keramidas
686c8fdcab Tiny style change. Whitespace only change. 
Use tab after #define ENOTSUP.

Reviewed by:	mike
 2002-01-22 10:44:40 +00:00
Ruslan Ermilov
6dd5958b99 Finish cleanup in chroot.c CSRG revision 5.6 by Keith Bostic 
(never installed setuid, so don't need to reset the uid).

PR:		bin/34159
 2002-01-22 10:44:02 +00:00