Commit Graph

58788 Commits

Author SHA1 Message Date
jedgar
10d702b26e - Correct off-by-one error and buffer underflow from previous fix
- int -> unsigned char fixes

Submitted by:	ache, dillon, Mark Andrews, et.al. (on -security)
2001-04-06 14:15:38 +00:00
jhb
f6457b3b85 Axe the per-cpu variable witness_spin_check as it was replaced by the
per-cpu spinlocks list.
2001-04-06 07:20:27 +00:00
billf
4062f7d719 pipe/queue are the only consumers of flow_id, so only set it in those cases 2001-04-06 06:52:25 +00:00
green
f48416a46d Label the OpenSSH section, then add a small explanation for the existence
of the non-typo "csshd" service.

Prodded by:	markm
Reviewed by:	markm, dwhite, rwatson
2001-04-06 05:52:53 +00:00
gad
51f5cfe2c5 Make sure the euid is restored in an obscure error situation.
Submitted by:	J Wunsch <j@ida.interface-business.de> in freebsd-audit
2001-04-06 02:14:39 +00:00
brian
658db5529c It's possible to kldload netgraph (as well as the other ng_* bits),
so do it if required.
2001-04-05 22:53:35 +00:00
obrien
38d0dc1d2e Don't need to preload the vn' KLD anymore as we use md' for release
building.
2001-04-05 22:36:41 +00:00
obrien
e935cae51b Bump the default / size up another 10MB to 120MB.
Requested by:	jhb
2001-04-05 21:34:47 +00:00
obrien
16c480d908 Remove -Wall. It breaks compiling with non-gcc compilers. 2001-04-05 20:52:33 +00:00
obrien
4633be3343 Rev 1.10 actually only tested booting from floppies. Thus that is all
that was fixed.

There are other problems why the current sources for the Alpha `cdboot'
do not produce a working loader.  Because we use the 4.0-RELEASE `cdboot'
binary, it will not get these fixes at the current time.  Thus CD booting
on certain AlphaServer boxes is still broken.
2001-04-05 20:45:25 +00:00
ume
1146fadc84 IPv6 support for skeyaccess(3). You can specify IPv6 address
using `internet' keyword into /etc/skey.access.

Not Objected to by:	-audit and -net
2001-04-05 19:56:54 +00:00
ume
0a208899c9 - correct logic of per-address input packet counts for lo0
- reject packets to fe80::xxxx%lo0 (xxxx != 1)

Submitted by:	JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
2001-04-05 19:45:02 +00:00
bmah
36a2fbc481 New release notes: ata(4) configure options are now loader tunables,
isp(4) target mode support (submitted by mjacob).

Update hardware lists from isp(4) manpage, fix typos.
2001-04-05 18:12:50 +00:00
iedowse
467415a2ba Add IPv6 support to showmount(8). This replaces IPv4-specific code
with calls to the new protocol-independent clnt_*_create functions
provided by ti-rpc. Martin submitted a more complex patch to achieve
this, but it turns out that clnt_create() does everything we need.

Reviewed by:	Martin Blapp <mb@imp.ch>
2001-04-05 17:18:36 +00:00
imp
c4564f1eed Soften the dire warnings about this code. Things are kinda working
now and it does compile :-).  There are still some issues, but it is a
good time to soften the warning.
2001-04-05 17:00:46 +00:00
sos
5c21464a92 More error handling cleanups. 2001-04-05 15:45:53 +00:00
nsayer
66051d03dc Reactivate SRA.
Make handling of SIGINT and SIGQUIT follow SIGTSTP in TerminalNewMode().
This allows people to break out of SRA authentication if they wish to.
2001-04-05 14:09:15 +00:00
joe
938fa0f26b Fix a few bugs in BSDPAN:
* Fix a bug which prevented the second invocation of overloaded
  subs governed by SelfLoader from functioning.

* Fix a bug with XS modules.  MakeMaker determines where the xsubpp
  preprocessor is located by adding "ExtUtils" string to the Perl's
  system path.  At the same time, BSDPAN has to fool MakeMaker into
  thinking that the Perl's system path is elsewhere.  Now we
  `reverse-adjust' the notion of the Perl's system path for a
  moment, so xsubpp utility is found.

This should fix the breakage with some p5- ports.

Reported by:	vanilla
Submitted by:	Anton Berezin <tobez@tobez.org>
2001-04-05 13:59:51 +00:00
jedgar
911e6f337b Remove the recently-depricated LIBPOSIX1E 2001-04-05 12:11:02 +00:00
sos
ca499f9265 On burners that return faulty ready on fixate, wait for the
expected fixate time before returning.

Dont print error messages to the console on READ_TOC on
a blank media.
2001-04-05 11:17:33 +00:00
sos
a49e25eb97 Add new flag ATPR_F_QUIET to atapi_request.
Cleanup error handling.
2001-04-05 11:15:24 +00:00
sos
e7caecea74 Correct the sysctl names to match the tuneables.
Proberly flush the tag queue on detach.
2001-04-05 11:13:07 +00:00
dfr
00380e60a1 Don't call prom_open() multiple times. This confuses some versions of SRM
and makes it impossible to boot from floppy and CD on some AlphaServer
platforms.

Detective work by: Michael Richards <michael@fastmail.ca>
2001-04-05 10:28:52 +00:00
alfred
41cfa4f5b7 test should be for == 0, not < 0 2001-04-05 09:47:07 +00:00
mpp
d86e393136 We don't use the "pseudo-device" configuration option any longer,
so update the example to use the correct definition.

Add an example for documenting kernel compile options, along with
a small example of how to reference them in the main text of the
man page (I.e. the .Dv macro).

Inspired-by:  a brief exchange I saw in in the commit messages mail
2001-04-05 09:37:55 +00:00
alfred
5b73c24bc3 WI_TIMEOUT is 65536
65536 * 10msec == 10 minutes 55 seconds == hung machine

Instead wait for the busy bits for a max of ~2 seconds (200 * 10msec)
2001-04-05 09:25:37 +00:00
ru
0c3a8e26a5 Record -lposix1e death. 2001-04-05 07:59:19 +00:00
ru
d6b63f2f95 mdoc(7) police: add missing LIBRARY section. 2001-04-05 07:51:48 +00:00
ru
7b9e583005 Unbreak world.
Submitted by:	jhay
2001-04-05 07:47:06 +00:00
ru
919d82acc4 Record -lposix1e merge with -lc. 2001-04-05 07:42:56 +00:00
bde
1e9f669d37 Fixed some printf format errors (don't assume that ntohl() returns u_long). 2001-04-05 07:37:55 +00:00
ru
cee592a2fd mdoc(7) police rev 1.11: convert descriptions and cross-references
for the ACL editing library functions to the plain tagged list.
2001-04-05 07:35:59 +00:00
alfred
280521082d Don't leak resources:
Don't leak iospace when irq allocation fails.  (call wi_free())

Call bus_release_resource() with the correct "rid" obtained from
bus_alloc_resource() that's saved in the softc instead of a hardcoded
0.
2001-04-05 06:56:10 +00:00
rwatson
c124492b00 o Rather than arbitrarily construct a credential in the nfs_statfs()
VFS operation, make use of the calling process's credential.  This
  solution may not be ideal (there are a number of other possible
  proposals, including making use of the proc0 credential, adding a
  credential argument to the VFSOP, and switching from a hard-coded
  ucred to a hard-coded nfscred), it is simple and appears to
  work.  The arguments against using simply crget() are fairly
  strong: it is the only place in the code (other than a nearly
  identical invocation in ncp) where crget() is invoked, other than
  in the process credential creation code; as ucred becomes extensible,
  this use of crget() without appropriate context results in less and
  less meaningful credential data.  The implementation here will
  probably be tweaked as a result of experimentation and further
  exploration of the requirements.  In the mean-time, it allows
  progress to be made in ucred expansion for new security models without
  causing a crash every time df is used on an NFS mounted file system.

  This code has been interop tested against FreeBSD and Solaris NFS
  servers.  While using the process credentials should not introduce
  interop problems, please let me know if any turn out to exist.

Reviewed by:	freebsd-arch
2001-04-05 06:12:38 +00:00
bmilekic
cd9ec299e3 Change a couple of M_WAITOKs used in M_PREPEND() to M_TRYWAITs, which
is what they should be. As the returned mbuf is already checked for
failure of M_PREPEND even in the wait case, nothing more to be done
here.
2001-04-05 04:20:48 +00:00
bmilekic
4276114c64 Various style fixes.
Also place the macros under #ifdef _KERNEL. Equally hide the internal
structures such as the freelist structs which include condition variables.

Reviewed by: bde
Mostly suggested by: bde
2001-04-05 03:55:27 +00:00
obrien
785e958fa3 Default the UTC question to "yes" on the Alpha. 2001-04-05 02:46:40 +00:00
obrien
5ab71ff51c This builds fine with -Wall. 2001-04-05 02:46:21 +00:00
brian
6359851d32 When we change the interface MTU, run through the routing table and tweak
all route MTUs too.
2001-04-05 02:23:48 +00:00
jedgar
fa88e7e9b2 - Add descriptions and cross-references for the ACL editing library
functions.
- Place the acl_dup() description in alphabetical order.
- Move the POSIX.1e descriptions under the ENVIRONMENT section to the
  STANDARDS section.

Reviewed by:	rwatson
Obtained from:	TrustedBSD Project
2001-04-05 01:48:07 +00:00
jedgar
c2d1320be6 Install the acl_create_entry.3 man page 2001-04-05 01:36:54 +00:00
bmah
3e6614e5ef New release note: Fix for ntpd(8) vulnerability.
Correction:  fetch(1) recently gained a -U option, not ftp(1) (pointed
out by des).
2001-04-05 01:36:39 +00:00
dd
1a2e942922 Make it clear that commands within labels must be indented to be
recognized.

PR:		26293
Reviewed by:	brian
2001-04-05 01:25:42 +00:00
dd
216efc2f77 Document the extattr_(get|set|delete)_fd calls, and add a note warning
people that these calls are likely to change in the future.

Reviewed by:	rwatson
2001-04-05 01:24:05 +00:00
gad
08f68aa797 Fix bpf devices so select() recognizes that they are always writable.
PR:		9355
Submitted by:	Bruce Evans <bde@zeta.org.au>
Reviewed by:	Garrett Rooney <rooneg@electricjellyfish.net>  (see pr :-)
2001-04-04 23:27:35 +00:00
phk
e1c6e50d72 Fix a potential ROOT-exploit in NTPD.
PR:		26358
Reviewed by:	dima
2001-04-04 23:07:22 +00:00
ken
d5dead3970 Don't allow immediate values of 0 for operations that can take either an
immediate value or the accumulator.  0 is the chip's internal
representation for the accumulator, and so 0 is an invalid immediate value
when the accumulator can also be specified as an argument.

Submitted by:	gibbs
2001-04-04 22:50:57 +00:00
mjacob
44f132def7 Redo a lot of the target mode infrastructure to be cognizant of Dual Bus
cards like the 1280 && the 12160. Cleanup isp_target_putback_atio.
Make sure bus and correct tag ids and firmware handles get propagated
as needed.
2001-04-04 21:58:29 +00:00
alfred
7892febf24 call a watchdog timeout like it is. 2001-04-04 21:56:25 +00:00
mjacob
7738652948 Roll platform minor.
Change target mode state definitions to be aware of 'channel' (for the
dualbus 1280/12160 cards).
2001-04-04 21:56:15 +00:00