Commit Graph

69386 Commits

Author SHA1 Message Date
brian
153455a7d2 Cross reference the NETWORK ADDRESS TRANSLATION section when describing
the -nat flag.

Requested by:	eivind
2002-01-23 21:11:33 +00:00
bmah
02ac2bee7d New release note: smmsp/mailnull users.
Reviewed by:	gshapiro
2002-01-23 18:49:43 +00:00
des
452f2b5db1 Add a PAM module that provides an account management component for checking
either PAM_RHOST or PAM_TTY against /etc/login.access.o

This uncovers a problem with PAM_RHOST, in that if we always set it, there
is no way to distinguish between a user logging in locally and a user
logging in using 'ssh localhost'.  This will be fixed by first making sure
that all PAM modules can handle PAM_RHOST being unset (which is currently
not the case), and then modifying su(1) and login(1) to not set it for
local logins.

Sponsored by:	DARPA, NAI Labs
2002-01-23 17:42:16 +00:00
des
b917ad33e0 Add an AUTHORS section crediting ThinkSec, DARPA and NAI Labs.
Sponsored by:	DARPA, NAI Labs
2002-01-23 17:16:00 +00:00
ru
c9d8bf8608 Add pam_ssh support to the static PAM library, libpam.a:
- Spam /usr/lib some more by making libssh a standard library.
- Tweak ${LIBPAM} and ${MINUSLPAM}.
- Garbage collect unused libssh_pic.a.
- Add fake -lz dependency to secure/ makefiles needed for
  dynamic linkage with -lssh.

Reviewed by:	des, markm
Approved by:	markm
2002-01-23 15:54:17 +00:00
des
e64688fcfb Base the comparison on UIDs, not on user names.
Sponsored by:	DARPA, NAI Labs
2002-01-23 15:16:01 +00:00
ru
5307ecb83c Make libssh.so useable (undefined reference to IPv4or6).
Reviewed by:	des, markm
Approved by:	markm
2002-01-23 15:06:47 +00:00
keramida
1c07280aca dhclient-script.conf lives in /etc and not /sbin.
PR:		docs/32008
Submitted by:	John E Hein <jhein@timing.com>
Approved by:	obrien
2002-01-23 13:56:41 +00:00
des
963c88787c Add local/share/java/classes, local/share/sgml, local/share/xml
Approved by:	ru, silence on -ports
MFC after:	1 week
2002-01-23 13:02:16 +00:00
ru
0d2b999d27 The sixth argument to the NET_RT_IFLIST sysctl is actually 0 for
all interfaces, and ifnet.if_index value for a single interface.
2002-01-23 12:48:08 +00:00
sobomax
baadf3178a CG hard sentence breaks.
Submitted by:	ru
2002-01-23 09:35:55 +00:00
alfred
53eeef7678 in fget() return EINVAL when the descriptor requested is negative. 2002-01-23 08:40:35 +00:00
alfred
e44d80bb31 Remove holdfp() prototype now that the function no longer exists 2002-01-23 08:28:55 +00:00
alfred
3c1f87916d forced commit, Previous revision also removed the holdfp() function
from the kernel.
2002-01-23 08:28:15 +00:00
alfred
8ea3c5cdda make pread use fget_read instead of holdfp. 2002-01-23 08:22:59 +00:00
mjacob
f481b3ebda Roll to latest production level firmware.
MFC after:	1 day
2002-01-23 06:42:54 +00:00
cg
e75ea781e8 improve sndstat output of feederchains so it can be understood without
reading the feeder sourcecode
2002-01-23 06:02:15 +00:00
cg
cf26ea42fd print warnings if a pcm*.buffersize hint is out of range or a non-power-of-2 2002-01-23 05:49:41 +00:00
cg
90da3073ce fix some comments accidentally hit by search/replace several revisions ago 2002-01-23 05:41:35 +00:00
cg
f83c1aa29b set the speeds the right way round for recording using the rate feeder 2002-01-23 05:35:12 +00:00
cg
505a32c5da add more error checking in chn_init() and chn_reset() 2002-01-23 05:21:27 +00:00
cg
3b2958fa78 make the feederchain builder work for recording. this has not been tested
extensively as none of my testboxes have speakers or an audio source at
present, but the chains built look correct and reading /dev/audio (ulaw,
translated from signed 16 bit little-endian) gives values within the
expected range for silence.
2002-01-23 05:10:56 +00:00
cg
29512efb54 don't bother checking if an unsigned parameter is less than 0 in a KASSERT 2002-01-23 04:50:51 +00:00
cg
a9336f5354 add more error checking to open of /dev/dsp* and /dev/audio* - if the
default format for the chosen subdevice cannot be obtained return an error
instead of returning success with an indeteterminate format selected.

note that this should never happen once the feederchain builder works for
recording.
2002-01-23 04:44:03 +00:00
cg
b75a033f75 don't allow mmap beyond the end of the buffer
Submitted by:	Philippe Anel <philippe.anel@noos.fr> (partially)
2002-01-23 04:32:18 +00:00
cg
2009b47628 remove modules no longer built 2002-01-23 03:43:16 +00:00
cg
9115c831ba consolidate bits that don't need to be seperate modules into the modules
that want them
2002-01-23 03:32:36 +00:00
mckusick
35edc11259 Add a stub for softdep_request_cleanup() so that compilation without
SOFTUPDATES option works properly.

Submitted by:	Benno Rice <benno@jeamland.net>
2002-01-23 02:18:56 +00:00
wes
58bf98842e Add missing destroy_dev().
Submitted by:	Maxime Henrion <mux@sneakerz.org>
Reviewed by:	msmith@
MFC after:	3 weeks
2002-01-23 01:11:52 +00:00
kuriyama
fa5b53e158 MFen (1.264 --> 1.265).
Refine translation (by y-koga@jp).
2002-01-23 00:46:49 +00:00
dg
ef8f790f5d Undo the work-around for the sendfile bug where nbytes needed the hdr/trl
size added to it in order for it to work properly when nbytes != 0.

Reviewed by:	alfred
MFC after:	3 days
2002-01-22 23:35:09 +00:00
iedowse
388c7f4272 The mode of files created by ctm_rmail was always 0600, even if the
umask was less restrictive. This was caused by the use of mkstemp()
which internally passes a mode of 0600 to open(). Fix this by
explicitly chmod'ing the files to (0666 & ~umask).

PR:		bin/16119
Submitted by:	Sascha Blank <blank@uni-trier.de>
2002-01-22 22:54:52 +00:00
archie
8a9a43ad04 Add ngctl "write" command.
MFC after:	1 week
2002-01-22 22:01:25 +00:00
green
bd3618d51e Remove bogus _POSIX_ACL_PATH_MAX definition. 2002-01-22 21:33:12 +00:00
schweikh
ad98feaaba Fix a typo and fix indenting for struct sockaddr to match other structs.
No content changes.
MFC after:	3 weeks
2002-01-22 21:26:15 +00:00
sobomax
e0c3aed12e Don't use `you'.
Submitted by:	ru
2002-01-22 21:11:18 +00:00
ache
e854bbe7d4 Restore C99 standard conformance information, isblank() _is_ in final
standard document

Pointed by: "Jacques A. Vidrine" <n@nectar.cc>
2002-01-22 20:14:35 +00:00
charnier
0292afe82d Show arguments of command line options
Reviewed by:	ru
2002-01-22 19:49:48 +00:00
jlemon
a7b593e6c9 The ENDPTS_EQ macro was comparing the one of the fports to itself. Fix.
Submitted by: emy@boostworks.com
2002-01-22 17:54:28 +00:00
jlemon
864702ba0c Initialize the sysctl_ctx list early, which avoids a panic in case other
allocatiosn fail and fxp_release() is called.
2002-01-22 17:51:44 +00:00
dg
82e60e977e Null commit - the previous log message should have read:
Fixed bug in calculation of amount of file sent when nbytes !=0 and
  headers or trailers are supplied. Reported by Vladislav Shabanov
  <vs@rambler-co.ru>.
2002-01-22 17:38:58 +00:00
markm
e2a2029185 Use the proper type (gid_t) for (group)->gr_gid to be orthogonal
with uid_t usage and (user)->pw_uid.

PR:		3242
2002-01-22 17:32:53 +00:00
dg
83a72ec01c Fixed bug in calculation of amount of file to send when nbytes !=0 and
headers or trailers are supplied. Reported by Vladislav Shabanov
<vs@rambler-co.ru>.

PR:		33771
Submitted by:	Maxim Konovalov <maxim@macomnet.ru>
MFC after:	3 days
2002-01-22 17:32:10 +00:00
ume
fab7c109cf Do not taint ::/124 for localhost reverse table. 2002-01-22 17:22:41 +00:00
ru
566f6c5250 Reincarnate SETUID code in man(1), not compiled in by default.
The code will be fixed for all known security vulnerabilities,
and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for
those who still want it installed setuid for whatever reasons.
2002-01-22 15:15:38 +00:00
ru
bcc3786333 Revert revision 1.57 -- ache@ axed /var/spool/uucp in BSD.var.dist,v 1.55. 2002-01-22 14:55:25 +00:00
ru
c03187444b Fix the description of the O_NONBLOCK flag to match reality.
Prodded by:	Maxim Konovalov <maxim@macomnet.ru>
Obtained from:	BSD/OS
2002-01-22 14:18:55 +00:00
ru
5fcc558004 Fix a typo I made in revision 1.5.
Submitted by:	trevor
2002-01-22 12:38:43 +00:00
phk
cbd45b6c66 In certain cases sbuf_printf() and sbuf_vprintf() could mistakely
make extendable sbufs as overflowed.

Approved by:	des
2002-01-22 11:22:55 +00:00
joerg
069b88ab0a Mention that a minimal version of camcontrol(8) is now available in the
installation environment (currently only for i386 releases).
2002-01-22 11:13:43 +00:00