Commit Graph

1961 Commits

Author SHA1 Message Date
Bruce Evans
378817d2ee Made this work for non-root again. The security fixes in rev.1.11
were equivalent to disabling its setgid'ness, since the default
kernel was not distinguished from a user-specified kernel.
1996-10-25 15:36:42 +00:00
Bill Paul
4451976029 Add support for handling the YP_SECURE and YP_INTERDOMAIN keys from
any maps that may have them. If the YP_SECURE key is present, ypserv
will only allow access to the map from clients on reserved ports.
If the YP_INTERDOMAIN key is present, the server will do DNS lookups
for hostnames that it can't find in hosts.byname or hosts.byaddr.
This is the same as the -d flag (which is retained for backwards
compatibility) but it can be set on a per-map/per-domain basis.

Also modified /var/yp/Makefile to add YP_INTERDOMAIN to the hosts.*
maps and YP_SECURE to master.passwd.* maps by default.
1996-10-24 18:58:26 +00:00
Bill Paul
21c2d66cd6 Add -b and -s flags for adding YP_INTERDOMAIN and YP_SECURE entries to
map databases. Also document said flags in the man page.

Adding YP_INTERDOMAIN to a map causes ypserv(8) to do a DNS lookup
when a yp_match() on the map fails. (This affects only the hosts.by*
maps; for all other maps it's ignored.) The YP_SECURE entry causes
ypserv(8) to restrict access to the map so that only clients making
requests from reserved ports can get at it.

Our ypserv doesn't currently support these features so they're silently
ignored for the moment, but this will change. :)
1996-10-24 14:52:50 +00:00
Peter Wemm
0ee48eaae9 Untangle NEWDB/NDBM options.
Enable praliases.c to not use NDBM.
1996-10-24 14:04:03 +00:00
Peter Wemm
42e9eb2671 missed this praliases.8 <-> praliases.0 change 1996-10-24 05:20:52 +00:00
Peter Wemm
82c2534fd0 Fold sendmail-8.8.2 changes into files that have been touched.
(^!&@$#&^! delete !!@^@^ trailing !@^&#$!& whitespace!!!)
1996-10-24 05:07:25 +00:00
Peter Wemm
3b50ea913d This commit was generated by cvs2svn to compensate for changes in r19146,
which included commits to RCS files with non-trunk default branches.
1996-10-24 04:51:14 +00:00
Peter Wemm
606a993469 Import sendmail-8.8.2 onto the vendor branch
Obtained from: Eric Allman <eric@sendmail.org>
1996-10-24 04:51:14 +00:00
Wolfram Schneider
88f04d6fce fix FAQ URL. Note for Jordan: don't merge this change into 2.1.6! 1996-10-23 22:28:56 +00:00
Bill Paul
323a8537ab Add extra sanity checking to the in-place update routine. Sometimes you
find two users with the same UID (i.e. root and toor), but yp_mkdb(8)
forbits duplicate keys, so only one of them will end up in the *.byuid
maps (probably toor, since it comes after root in the template file).
If I asked rpc.yppasswdd(8) to change toor's password, it would update
the *.byname maps correctly, but incorrectly modify root's entry in
the *.byuid maps since the only matching record with UID=0 in those
maps belongs to root.

To fix this, we check that both the name and UID are correct before trying
to write new entries to the maps.
1996-10-23 21:46:17 +00:00
Julian Elischer
36be1f6be9 Reviewed by: various (mailing list feedback)
Submitted by:	whistle communications

move the socket from /dev to /var/run by default
TRANSITIONALLY make syslog add a symlink..
I PROMISE I'll remove that as soon as I have the makefiles etc fixed as well.
1996-10-23 20:17:57 +00:00
Bill Paul
746c49fb53 In ypxfr_callback(), the failure to create an RPC CLIENT * handle for
the callback is a fatal error for this function; return immediatlely if
this happens. Also make the "failed to establish callback handle" error
mesaage print the IP address of the target callback host.
1996-10-23 15:49:22 +00:00
Bill Paul
511db384cf Make error messages more informative. 1996-10-23 15:42:37 +00:00
Marc G. Fournier
334dac624a Fixes:
>Description:
        pppd failes to set control terminal if -detach option is given.

Submitted by: enami@ba2.so-net.or.jp
1996-10-22 21:41:43 +00:00
Stefan Eßer
eca55dceed Add pciconf. 1996-10-22 20:58:14 +00:00
Stefan Eßer
d5ee39ef58 Initial version of the user land code for the PCI config register
access functions. Written by Garrett Wollman and modified by me to
better match my view of the (PCI) world.

Submitted by:	wollman
1996-10-22 20:27:47 +00:00
Bill Paul
df4ddde70b Two small changes that were in my development sources at home
but never made it here for some reason:

- 'u' option was missing from getopt string
- Use daemon() to become daemonic.
1996-10-22 14:58:10 +00:00
Marc G. Fournier
8c78c8f41c Fixes:
If timed is running when system clock is changed by date command,
improper wtmp entry is made.  According to wtmp(5), two entries, one
with "|" as ut_line field and one with "{" for ut_line, should be
recorded, but, one with "|" and one with "}" are made.

Closes: PR#bin/1182

Submitted by:	 Masafumi NAKANE <masafumi@tky007.tth.expo96.ad.jp>
1996-10-22 05:13:42 +00:00
Bill Paul
b87efe4572 Since rpc.yppasswdd(8) also supports adding entries to the
/var/yp/master.passwd template file and it uses the same kind of code
as chpass(1), it may also be vulnerable to the bug from PR #1519.
May as well deal with it since I'm in the area. (yppasswdd in -stable
doesn't do additions, therefore it shouldn't be have this problem.)
1996-10-22 03:53:06 +00:00
Bill Paul
8839484b47 Begin closing out PR #1519 (this requires a change to chpass too,
and both changes need to be pulled into the stable branch). The
problem here is that when pwd_mkdb creates /etc/passwd, it turns
empty UID and GID fields into zeroes. To fix this, we check the
_PWF_UID and _PWF_GID bits in the pw_fields flag: if the bits
are not set, we print an empty field instead of a zero. This way,
you don't get zeroes in the UID or GID fields unless you explicit
want them.
1996-10-22 03:18:11 +00:00
Paul Traina
7903651566 Fix a YTK bug. 1996-10-20 17:55:36 +00:00
Joerg Wunsch
64e529ea5f Make pstat -s (aka. sswapinfo) print ``[NFS]'' as opposed to
``/dev/??'' for NFS swap.

I had a hard time to figure out whether it's possible to print the
actual mounted swap file, but i failed to get any information.  If
anybody knows how to get ``192.168.0.1:/swap.192.168.0.3'' instead,
please step forward!
1996-10-20 12:54:55 +00:00
Jordan K. Hubbard
07eece26e8 Make changes suggested in PR#1825, closing it. Removes default local
hack behavior better than previous commit.
Submitted-By: Peter Childs <pjchilds@imforei.apana.org.au>
1996-10-18 03:47:53 +00:00
Jordan K. Hubbard
1d3a9347a0 Turn LOCALHACK off by default (whoops!)
Noticed-By: Atsushi Murai <amurai@spec.co.jp>
1996-10-18 01:44:45 +00:00
Jordan K. Hubbard
11fcd0ba76 Don't casually blow away FTP site settings now that it's easy for user
to override them.
1996-10-14 21:50:38 +00:00
Jordan K. Hubbard
e738250b89 Remove the now-unusable ports configuration code. Swapping CDs is bogus. 1996-10-14 21:32:39 +00:00
Jordan K. Hubbard
82d4f7288d Fix PR#1557 - chained package dependencies using URLs didn't work. 1996-10-14 19:41:44 +00:00
Søren Schmidt
b08563169e Fixed the security leek I introduced the other day, now
shell command is only executabel from command files, not
from the commandline.
1996-10-13 15:05:14 +00:00
Jordan K. Hubbard
d2322fc6ac Be less draconian about distribution extraction errors - still write
/etc file changes out.
1996-10-12 23:48:33 +00:00
Eric L. Hernes
b14765b3ed Get the pysical address for id_maddr when opening an -incore kernel.
This fixes the kernel panic when propagating userconfig changes to
arbitrary kernels.

Remove obsoleted `#include <tcl.h>' added a few <stdio.h> where
necessary.

Fix getting scsi bus information from an -incore kernel.

Turned on SAVE_USERCONFIG by default.
1996-10-12 20:23:26 +00:00
Jordan K. Hubbard
0383bc6a90 Some cosmetic tweaks, attempt to fix package wait problem by checking
for error return as well (not sure if this is it, but it's one possible
explanation).
1996-10-12 19:30:26 +00:00
Jordan K. Hubbard
b0cdb3ce11 1. Room to calculate MD5 for CHAP negotiation is shorter than
required. a core is not dumped at first connecting time and
   dumped at second or third time. (patch I)
2. A routine for "show route" refers out of allocated space.
   Values pointed by "lp" should be read as CHAR, I think.
   there is also no free() for disallocation. (patch II)

Here is also a patch for an improvement: In current imprementation,
even if PPP connection is disconnected by time out, prompt of
interactive mode does not change from "PPP>" to "ppp>" to
indicate the disconnection on a terminal.
So I modified the code to do that. (patch III)

Submitted-By: NAKAMURA Motonori <motonori@econ.kyoto-u.ac.jp>
1996-10-12 16:20:34 +00:00
Garrett Wollman
cdee44e4cb De-cruftify.
Use the link MIB interface rather than groveling around in kmem.
(No longer works on dead kernels, big deal.)
1996-10-11 18:47:10 +00:00
Søren Schmidt
45768c728b Allow shell commands in all modes.
Old behavior can be had with define SHELL_ONLY_INTERACTIVELY
1996-10-10 11:27:35 +00:00
Jordan K. Hubbard
04f11c618f Ahem. It might be nice if I included /usr/src/contrib in with the other
src dists.  This alone is a good reason to re-roll the SNAP before putting
it on CD.
1996-10-10 09:22:37 +00:00
Paul Traina
46fc8e68b8 Enable NIS support 1996-10-09 20:34:09 +00:00
Jordan K. Hubbard
b11806da8c DTRT if ESC is hit in a Yes/No dialog.
Noticed-by: jfieber
1996-10-09 09:53:41 +00:00
Søren Schmidt
3d451fd3ea Add the feature to use MYADDR & HISADDR macroes as arguments to
a shell escape.
1996-10-07 10:01:17 +00:00
Jordan K. Hubbard
9f202f0cde Properly include prototypes.
Submitted-by: "Daniel O'Callaghan" <danny@panda.hilink.com.au>
1996-10-07 04:21:09 +00:00
Jordan K. Hubbard
fa79187367 Add passwdauth to list of vars.
Submitted-by: Peter Childs <pjchilds@imforei.apana.org.au>
1996-10-06 19:39:08 +00:00
Jordan K. Hubbard
7bea4afad3 Sigh. There are still some weird boundry cases (argh!). Turn
off SAVE_USERCONFIG again until Eric comes back from his trip.
1996-10-06 16:31:12 +00:00
Jordan K. Hubbard
ae58bac757 Detect the zero-chunks case properly, now that I've reversed the order
of the distribution probes over ftp.

Properly #ifdef the SAVE_USERCONFIG code.
1996-10-06 14:45:57 +00:00
Jordan K. Hubbard
d8e55738a0 Add support for the Evil Microsoft ppp extentions. Yes, they did it
on their own without even attempting to get concensus in the IETF, but
there are also lots of Win95/NT boxes out there.

CLoses PR#1494
Submitted-By: Peter Childs <pjchilds@imforei.apana.org.au>
1996-10-06 13:32:37 +00:00
Jordan K. Hubbard
b9403756ad Correctly re-adjust current slice # when slices are deleted.
Beautify the code a little.
1996-10-06 11:40:31 +00:00
Jordan K. Hubbard
1f3a0ea7fd Turn SAVE_USERCONFIG on again - I found the bug. 1996-10-06 03:20:12 +00:00
Jordan K. Hubbard
48addbfd79 Better PKG_TMPDIR handling. 1996-10-06 03:18:55 +00:00
Jordan K. Hubbard
60e7f875ed Be more paranoid about clearing the FTP path when we have the slightest
reason to doubt its authenticity.
1996-10-06 02:10:54 +00:00
Wolfram Schneider
e83201b43a delete doubled words, e.g.: "the the" -> "the" 1996-10-05 22:27:30 +00:00
Jordan K. Hubbard
f5e8e60f1f Make the save_userconfig() stuff conditional and turned off by default
(for now - still a few more wrinkles here).  Add more debugging code
and some cosmetic tweaks.
1996-10-05 16:33:05 +00:00
Peter Wemm
4ed8e95bc0 syslogd has always bugged me with it's async startup at boot time.
For me, more often than not, the backgrounded syslogd daemon is not
yet ready to process log messages before other things (such as named)
want to log a heap of them.  It seems that it's the O_SYNC writes of
the stuff coming in from /dev/klog that's the slowdown.

Anyway, instead of using the libc daemon, roll a modified version.  This
one has a timeout.  The child will wait for either the timeout to expire
or the child process to signal it to let it know that it's "ready" and
the /dev/log socket is set up and active, so it's safe to continue the
boot.  It adds a small fraction of a second pause to the boot time, but on
the other hand the overall boot time is *quicker* since the disk is not
being thrashed while the log messages are getting written out synchronously
one by one while other daemons are loading in parallel.

The timeout is in case the child segfaults or something before becoming
fully operational.
1996-10-05 15:20:51 +00:00