d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
67,598 Commits 6 Branches 133 Tags 2.6 GiB
722b228aba
Commit Graph

67598 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dag-Erling Smørgrav
722b228aba Oops! Previous commit used tabs instead of spaces. 2001-12-05 21:11:24 +00:00
Dag-Erling Smørgrav
e878ebd0ce Add /etc/pam.d. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 21:10:01 +00:00
John Baldwin
bc584bd7b6 Remove some duplicate fortunes. 2001-12-05 21:06:30 +00:00
Dag-Erling Smørgrav
23c103b894 pam.d-style configuration, auto-generated from pam.conf. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 21:06:21 +00:00
Dag-Erling Smørgrav
378eca6a16 Forced commit to note that previous commit was 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 21:04:34 +00:00
Dag-Erling Smørgrav
2191f95faf Short README for /etc/pam.d, mostly extracted from the comments in pam.conf. 2001-12-05 20:59:38 +00:00
Dag-Erling Smørgrav
179281f9bf Perl script that splits pam.conf into separate files suitable for pam.d. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 20:58:39 +00:00
David E. O'Brien
016298551c Files in subdirectories of directories that have the nodump flag set 
are sometimes incorrectly being dumped.

The problem arises because the subdirectory only gets its entry
cleared from usedinomap if it is also present in dumpinomap, and it is
the absence of a directory in usedinomap that internally indicates
that the directory is under the effects of UF_NODUMP (either directly
or inherited).

PR:		32414
Submitted by:	David C Lawrence <tale@dd.org>
 2001-12-05 20:42:52 +00:00
Robert Watson
65bbadfbbc o Make kern.security.bsd.suser_enabled TUNABLE. 
Requested by:	green
 2001-12-05 18:49:20 +00:00
Ruslan Ermilov
47891de1a5 Fixed remotely exploitable DoS in arpresolve(). 
Easily exploitable by flood pinging the target
host over an interface with the IFF_NOARP flag
set (all you need to know is the target host's
MAC address).

MFC after:	0 days
 2001-12-05 18:13:34 +00:00
Robert Watson
959f4950f5 o Whitespace sync to GENERIC 2001-12-05 18:08:23 +00:00
Dag-Erling Smørgrav
87316434d1 Define PAM_READ_BOTH_CONFS. We can now have both /etc/pam.d and 
/etc/pam.conf.

Sponsored by:	DARPA, NAI Labs
 2001-12-05 17:06:16 +00:00
Dag-Erling Smørgrav
0fbda1fc58 Fix a bug that made PAM fail if /etc/pam.d/ existed but was empty. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 17:05:15 +00:00
Andrey A. Chernov
8ede26d773 Clarify ' ' space issue 2001-12-05 16:33:11 +00:00
Dag-Erling Smørgrav
f6abb36383 Clean up namespace pollution by prepending underscores to argument names in 
function prototypes (or, in a few cases, removing argument names altogether).

Sponsored by:	DARPA, NAI Labs
 2001-12-05 16:31:34 +00:00
Dag-Erling Smørgrav
bda74fe925 Install the correct version of pam_misc.h. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 16:27:41 +00:00
Dag-Erling Smørgrav
1c04976ad1 This file isn't used; it's an older version of include/security/pam_misc.h. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 16:14:43 +00:00
Maxim Sobolev
46f32e5e98 Add missed capital GHE letter. 
PR:		28571
Submitted by:	Alexey Klimov <kao@wiuu.kiev.ua>
 2001-12-05 16:09:10 +00:00
Dag-Erling Smørgrav
8d3978c115 Add dummy functions for all module types. These dummies return PAM_IGNORE 
rather than PAM_SUCCESS, so you'll get a failure if you list dummies but
no real modules for a particular module chain.

Sponsored by:	DARPA, NAI Labs
 2001-12-05 16:06:35 +00:00
Dag-Erling Smørgrav
d5a8dd3fb5 Connect the man page to the build. 
Sponsored by:	DARPA, NAI Labs
 2001-12-05 16:02:50 +00:00
Dag-Erling Smørgrav
e2c8459e85 Add a pam_self authentication module that succeeds if and only if the local 
and remote user names are the same.

Sponsored by:	DARPA, NAI Labs
 2001-12-05 15:55:14 +00:00
Guido van Rooij
9a0ad4c91a Fix initialisation of struct nat entry, to solve a panic that occurs 
when reloading a nat table after reboot

Submitted by:	Arjan de Vet <devet@devet.org>
Reviewed by:	IP Filter mailing list
MFC after:	3 days
 2001-12-05 10:46:24 +00:00
Guido van Rooij
3068bdba98 Fix resume for HP Omnibook 500's. 
MFC after:	1 week
 2001-12-05 10:36:32 +00:00
Guido van Rooij
7145906dd6 Add suspend/resume hooks to this driver; necessary to overcome 
problems on HP Omnibook 500.

MFC after:	1 week
 2001-12-05 10:34:07 +00:00
John Hay
8c992b7f0d Note sis(4) VLAN support. 
MFC after:	7 days
 2001-12-05 09:34:49 +00:00
John Hay
16cba1662f Add VLAN support. 
MFC after:	7 days
 2001-12-05 09:34:28 +00:00
Warner Losh
9bab8c59e9 kernel/burncd in sync! 2001-12-05 09:21:51 +00:00
Warner Losh
e57d8b01a5 Warn about PROCFS stuff. 
Submitted by: des
 2001-12-05 09:18:08 +00:00
Warner Losh
c74f37cea7 Moved to dev/joy 2001-12-05 09:10:47 +00:00
Warner Losh
c067c1d163 Move joy from isa to dev/joy. 2001-12-05 09:10:20 +00:00
Warner Losh
7345fbcb38 Use new location for joy, plus list its new bus front ends. 2001-12-05 09:09:48 +00:00
Warner Losh
6aed731b38 Split joystick driver into ISA and PC Card front ends. 
Similar code was submitted in PR 5559 by Takeshi OHASHI-san, but the
PC Card system has changed much since then, so this is a fresh
implementation.

PR:	i386/5559
Submitted by: Takeshi OHASHI
 2001-12-05 09:08:23 +00:00
Warner Losh
3b289629db Implement prism2 detection from NetBSD. This mostly obsoletes the 
prism2 flag in pccard.conf, but I'm leaving it place for the moment in
case the small sample of PrismII cards that I've tried is not
representative.

MFC After: 30 days
Obtained from: NetBSD
 2001-12-05 08:57:36 +00:00
Dag-Erling Smørgrav
023fe50302 Bruce says the links are not needed. 2001-12-05 08:50:51 +00:00
Hajimu UMEMOTO
8d6337d059 Newer SA is prefered for a out-bound packet than old one 
when net.key.prefered_oldsa is set to zero.

Obtained from:	KAME
MFC after:	1 week
 2001-12-05 05:40:49 +00:00
David E. O'Brien
3d7f57bc69 An extra #ifdef crept in with rev 1.38. 2001-12-05 04:16:33 +00:00
Kenneth D. Merry
8a8e67f308 Fix breakage in 'camcontrol defects' introduced in rev 1.34 (the new error 
recovery code) back in March, 2001.

In effect, this brain-o would cause 'camcontrol defects' to always return
an error.

Pointed out by:	joerg
Tested by:	mdodd
 2001-12-05 03:41:40 +00:00
John Polstra
9d981897e4 Fix speling errur. 2001-12-05 02:55:23 +00:00
Mike Barcroft
0db65eda3e Move the WARNS attribute down so that it also applies to the 
RELEASE_CRUNCH case.
 2001-12-05 02:29:23 +00:00
Garance A Drosehn
7cf2c478e4 Move the checks for '/' a little sooner in the code which receives files 
for a remote print job.  This change comes from OpenBSD (who got it from
Sebastian Krahmer of SuSE).  In OpenBSD this avoids a tiny theoretical
security issue, but that security issue does not exist in FreeBSD's lpr
due to the changes which added 'ctl_renametf()' just before 4.4-release.
This change is still worth doing in our version, but it isn't fixing a
security issue.

MFC after:	4 days
 2001-12-05 02:07:20 +00:00
Kirk McKusick
dd58224e31 Update pathnames for creation of tags file. 2001-12-05 01:23:21 +00:00
Søren Schmidt
2ad690c708 Add the ability to write VCD/SVCD disc's. 
It is still nessesary to supply the tracks as individual files, burncd
can't read .cue files yet, but now the infrastructure to do it is
present we just need a .cue file parser (hint hint)...
 2001-12-04 21:48:56 +00:00
Søren Schmidt
90e0a15606 Add entries to allow setting the CD type on cue sheets 2001-12-04 21:40:41 +00:00
Søren Schmidt
bc48b9d025 Allow setting the CD type on cue sheets 2001-12-04 21:39:34 +00:00
David E. O'Brien
1bd6873376 Turn back on fmtcheck's attribute checks, guarded for non-GCC compilers. 
Submitted by:	bde
 2001-12-04 21:30:23 +00:00
Bruce A. Mah
e25076d79c Reword "OpenSSH UseLogin yes" item, with cross-reference to 
security advisory.
 2001-12-04 17:27:32 +00:00
Bruce A. Mah
29bec00a2d Back out the part of the previous commit that dealt with network device 
polling (it isn't in CURRENT yet, as pointed out by rwatson).

New release note:  TCP stalls fixed.
 2001-12-04 17:20:33 +00:00
Ian Dowse
eec7ff8aa6 When VOP_SYMLINK fails, the value of *vpp is junk, so we must NULL 
out nd.ni_vp to prevent the resource cleanup code at the end of
nfsrv_symlink from trying to vrele it. This fixes a "vrele: negative
ref cnt" panic that can occur when a symlink is attempted on an NFS
filesystem with no free space. Found locally, but the symptoms
correspond to those in the PR referenced below.

PR:		kern/26878
MFC after:	3 days
 2001-12-04 16:53:42 +00:00
Ruslan Ermilov
830a9d770e mdoc(7) police: section 1 and 8 manpages document their exit 
codes under the DIAGNOSTICS section, not RETURN VALUES, which
is for section 2, 3, and 9 manpages.
 2001-12-04 16:17:35 +00:00
Ruslan Ermilov
dd98d57b45 mdoc(7) police: markup the previous delta. 2001-12-04 16:09:27 +00:00