7766 Commits

Author SHA1 Message Date
rwatson
cb32ac9593 Update license. 2002-02-10 06:14:03 +00:00
rwatson
31155c8524 Teach getextattr to query the EA size and allocate appropriate sized
buffers before reading the memory.  Arguably, the failure modes here
are poor, but we can now read >2k EAs.  Also, update the copyrights
and licenses while I'm here.
2002-02-10 06:13:14 +00:00
rwatson
8055280c8a Update userland tools to reflect extattr API changes.
Note that getextattr has not yet been updated to dynamically allocate
a read buffer, although that can now be done.

Obtained from:	TrustedBSD Project
Sponsored by:	NAI Labs
2002-02-10 04:48:26 +00:00
rwatson
5445e82ad4 o No longer mount /proc by default on newly installed systems. Almost
all facilities that previously relied on /proc have been rewritten
  to use ptrace().  procfs has presented a substantial security
  hazard for years, with several user->root compromises in the last
  few years.  Procfs will continue to be available but will require
  administrator intervention to use.

Reviewed by:	scottl, jedgar, mike, tmm
2002-02-10 01:34:04 +00:00
brian
7a2afc75f2 Reword the ``Please remove the FreeBSD fixit CDROM now.'' to
``Please remove the FreeBSD fixit CDROM/DVD now.''.

MFC after: 2 weeks
2002-02-08 13:42:35 +00:00
ru
a051ad011b FreeBSD 4.1 bootstrapping aid (HALT and PDWN are not defined there). 2002-02-08 09:37:12 +00:00
markm
bc43ca23fc Sort out the documentation WRT TCP_WRAPPERs, which is now enabled. 2002-02-06 20:48:03 +00:00
markm
5396b38d3d Fix an inconsistency between what FreeBSD NIS and AMD think the
AMD map name should be.
2002-02-06 20:42:36 +00:00
markm
5351d0d669 Enable TCP_WRAPPERs for the NIS server. The protection afforded is
not massive, but usable.
2002-02-06 20:39:36 +00:00
alfred
6a036e317e Readded the svc_create() and the registering of the local transport,
now it is fixed. This should get us a working keyserv again, since
it depends on local transport for key exchange.

Since we do not have any KEYFILE name hardcoded anymore, set the
umask that way that the keyserver socket can be created with with
the appropriate permissions.

Re-add the accidently removed signal(SIGPIPE, SIG_IGN); to the code
which makes sense to avoid SIGPIPE when a disconnect on rpc socket
occurs.

Submitted by: mbr
2002-02-06 19:15:34 +00:00
des
d7b064e238 ANSIfy and remove some dead code.
Sponsored by:	DARPA, NAI Labs
2002-02-06 15:26:07 +00:00
des
0f2cb9b020 Apply the following mechanical transformations in preparation for
ansification and constification:

    s{\s+__P\((\(.*?\))\)}{$1}g;
    s{\(\s+}{\(}g;
    s{\s+\)}{\)}g;
    s{\s+,}{,}g;
    s{(\s+)(for|if|switch|while)\(}{$1$2 \(}g;
    s{return ([^\(].*?);}{return ($1);}g;
    s{([\w\)])([!=+/\*-]?=)([\w\(+-])}{$1 $2 $3}g;
    s{\s+$}{\n};g

Also add $FreeBSD$ where needed.

MFC after:	1 week
2002-02-06 13:30:31 +00:00
ru
2e1fdce679 Do a bit more of prototype cleanup. 2002-02-06 07:34:17 +00:00
bbraun
580cee0675 Make cron actually build without defining LOGIN_CAP.
Reviewed by: jkh
2002-02-06 02:00:07 +00:00
alfred
903f014bc1 Fix the breakage in rpc.yppasswd. Readded the svc_create() and
the registering of the "unix" transport, now it is fixed.

Everywhere, rq_cred is taken to look what authentification we have.
We can not be sure that transp>xp_verf.oa_flavor is also filled in.
This seems to be the same for all sun source. they take the flavor
of rq_cred, instead of transp.

Submitted by: mbr
2002-02-05 18:51:13 +00:00
alfred
3968616240 tab in pw_mkdb's arg for style. 2002-02-05 18:27:06 +00:00
alfred
f1181282a2 Constify things to unbreak world.
Submitted by: David Wolfskill <david@catwhisker.org>
2002-02-05 18:25:59 +00:00
roam
6a18ede7cd Fix -F with logfiles rotated on time only.
Approved by:	silence on -audit
MFC after:	1 month
2002-02-05 09:33:07 +00:00
des
3f7a9ec821 ANSIfy and constify.
Sponsored by:	DARPA, NAI Labs
2002-02-05 06:49:11 +00:00
jkh
26055e4dcc Stop saying that "express" mode is for impatient people. It's
really for impatient and EXPERT people who know sysinstall
backwards and forwards.

MFC after:	1 week
2002-01-30 01:34:16 +00:00
murray
80a5862e46 Fix a signal 11 error that occurs if you try to use the 'T' option on
an existing FreeBSD partition.

Reported by:	Brent Cook <busterb@mail.utexas.edu>
2002-01-29 22:35:40 +00:00
murray
96cd8b4b8c The huge dependency lists of some of our packages has brought
attention to the sub-optimal way that we deal with package
dependencies.  Traditionally, for each package in an INDEX that the
user wants to add, we check all of the dependencies first even if the
package is already installed.  With some GNOME packages, this can
cause package_extract to be called for 50 different dependencies when
we know the top level package is already installed.

The new behavior is to not check dependencies for packages that are
already installed.  This fixes a bug where sysinstall gets itself into
a CPU intensive loop when trying to install sawfish gnome with the
most recent ports/INDEX.  There is a bug somewhere in the ports INDEX,
but with over 6,400 ports we need to be a little more forgiving here.
2002-01-29 21:41:08 +00:00
cjc
b3b56d609a Put a complete set of pppd(8) sample configuration files in
/usr/share/examples/pppd.

Update pppd(8) documentation to reflect this, usr.sbin/pppd/pppd.8.

Remove the out-of-place pppd(8) configuration files in etc/ppp,
ppp.shells.sample and ppp.deny.

Make the appropriate changes to the build process, etc/Makefile and
etc/mtree/BSD.usr.mtree, so it all works.

The files from etc/ppp, ppp.shells.sample and ppp.deny, were moved
with a repo copy. Note it in the logs with a forced commit to these
two.

Submitted by:	Maxim Konovalov <maxim@macomnet.ru> provided the new samples.
2002-01-29 00:23:35 +00:00
yar
0355f3828e Keep similar things together: Check for too long usernames
inside the function that verifies username validity.
2002-01-28 17:59:09 +00:00
yar
261a4fd963 Disallow adding duplicate roots, toors, or other users w/uid 0.
Previously, a truth check instead if defined() check erroneously
allowed that.

PR:		bin/8745
2002-01-28 17:30:12 +00:00
yar
a2c8c06218 Implement a flexible way of letting some unusual characters
into usernames: Make the regular expression to check usernames
against configurable.

PR:		bin/22860 bin/31049
Reviewed by:	sheldonh
2002-01-28 17:03:13 +00:00
yar
35ba356060 Remove the newly added -force option because it made adduser(8)
less robust to possible errors of the user/admin while adduser(8)
had been intended to minimize their possibility.
An alternative way of introducing strange symbols into usernames
to be committed really soon.
2002-01-28 16:37:35 +00:00
joe
3311f87be6 Merge from NetBSD.
uhub.c:     revision 1.37
    usb.4:      revision 1.30
    usb.c:      revision 1.38
    usb.h:      revision 1.40
    usb_port.h: revision 1.21
    usb_subr.c: revision 1.65
    usbdi.h:    revision 1.40

Split the attach/detach events up into device, driver and controller
attach and detach events.

The commit message from NetBSD was:
        date: 2000/02/02 07:34:00;  author: augustss;  state: Exp;
        Change the USB event mechanism to include more information
        about devices and drivers.  Partly from FreeBSD.

Also rework usbd to take these new event types into account.
2002-01-28 01:03:19 +00:00
murray
291ad4fb60 Update the number of ports available. 2002-01-26 15:56:54 +00:00
steve
010923f35d Don't bogusly look for inexact matches because a package contains a '-'
for packages like sawfish-gnome for instance.

Reviewed by:	murray, sobomax
2002-01-25 05:10:00 +00:00
brian
2cd83c2da4 Detect if a udp socket on STDIN_FILENO is connected by calling
getpeername() and don't set PASSIVE mode if it's is.
2002-01-23 23:36:35 +00:00
brian
153455a7d2 Cross reference the NETWORK ADDRESS TRANSLATION section when describing
the -nat flag.

Requested by:	eivind
2002-01-23 21:11:33 +00:00
iedowse
388c7f4272 The mode of files created by ctm_rmail was always 0600, even if the
umask was less restrictive. This was caused by the use of mkstemp()
which internally passes a mode of 0600 to open(). Fix this by
explicitly chmod'ing the files to (0666 & ~umask).

PR:		bin/16119
Submitted by:	Sascha Blank <blank@uni-trier.de>
2002-01-22 22:54:52 +00:00
archie
8a9a43ad04 Add ngctl "write" command.
MFC after:	1 week
2002-01-22 22:01:25 +00:00
ru
6a27e3b05c Finish cleanup in chroot.c CSRG revision 5.6 by Keith Bostic
(never installed setuid, so don't need to reset the uid).

PR:		bin/34159
2002-01-22 10:44:02 +00:00
roberto
cf6abdc2e0 Correct typos and macro usage.
PR:		33179, 33181, 33295
Submitted by:	Norihiro Kumagai <kumagai@attbi.com>
Reviewed by:	sheldonh (MAINTAINER)
MFC after:	2 days
2002-01-21 20:12:02 +00:00
iedowse
cf51333427 Add `-h' to the chown command so that symbolic links copied from
the skeleton directory are chown'd to the new user.

PR:		bin/10601
Submitted by:	Adrian Filipi-Martin <adrian2ubergeeks.com@gosub.cstone.net>
MFC after:	1 month
2002-01-20 17:05:07 +00:00
dillon
c3dbbbabdf I've been meaning to do this for a while. Add an underscore to the
time_to_xxx() and xxx_to_time() functions.  e.g. _time_to_xxx()
instead of time_to_xxx(), to make it more obvious that these are
stopgap functions & placemarkers and not meant to create a defacto
standard.  They will eventually be replaced when a real standard
comes out of committee.
2002-01-19 23:20:02 +00:00
sobomax
8c0a609962 Pass `-9' flag to gzip(1), so that package is compressed using maximum
compression. Usually this gives gives extra 1-1.5%.

MFC after:	1 day
2002-01-17 10:51:39 +00:00
alfred
2b493fd00c Fix boundry condition in lock management:
Alfred, I took a look at retry_blockingfilelocklist() and the
 solution seemed  simple enough. Please correct me if I am wrong.
 It seems said routine doesn't  take into account boundary conditions
 when putting back file_lock entries into the blocked lock-list.
 Specifically, it fails when the file_lock being put back is the
 last element in the list, and when it is the only element in the
 list.  I've included a patch below.

 Basically, it introduces another variable: pfl, which keeps track
 of the list  item before ifl. That way if nfl is NULL, ifl gets
 inserted after pfl. If pfl  is also NULL, then it gets inserted
 at the head of the list (since it was the  only element in the
 list).

Submitted by: Mike Makonnen <mike_makonnen@yahoo.com>
Tested by: Thomas Quinot <thomas@cuivre.fr.eu.org>
2002-01-17 00:12:05 +00:00
ru
1b66cb96c7 Document the -x debugging option.
PR:		docs/33784
Submitted by:	Mike Makonnen <mike_makonnen@yahoo.com>
2002-01-16 14:12:02 +00:00
brian
c6d68beab8 socket()s first argument should be a protocol family rather than an
address family.
2002-01-16 14:03:52 +00:00
brian
414245183e socket's first argument is an address family, not a protocol family. 2002-01-16 13:15:47 +00:00
arr
1ae1e4e3f2 - Attempt to help declutter kern. sysctl by moving security out from
beneath it.

Reviewed by: rwatson
2002-01-16 06:55:30 +00:00
keramida
5768c2f3d4 Add pkg_update to the SEE_ALSO manpage of pkg_create.
PR:		docs/33666
Submitted by:	Tom Rhodes <darklogik@pittgoth.com>
2002-01-15 14:39:31 +00:00
jhay
ae3d441af0 Compilers are very picky about matching opeining and closing brackets. 2002-01-15 05:43:37 +00:00
ambrisko
31a631189c Make man page and usage statement match reality submitted by Ruslan,
Clean up "n to m" type options with "n-m" and some other improvements
suggested by Ruslan.

Change -C option to report the transmit key "4" if in "Home" mode.

Submitted by:	ru
Approved by:	imp, ru
2002-01-15 04:31:08 +00:00
green
576dbf9ef4 Unbreak installation for the CD-ROM and possiblhy other media types.
Obtained from:	LOMAC project
Sponsored by:	DARPA, NAI Labs
2002-01-14 19:42:11 +00:00
ru
7aa3bf6364 yp(4) -> yp(8).
PR:		docs/30797
2002-01-14 16:59:03 +00:00
sheldonh
944533ef9d Revert rev 1.316 now that the bootstrap issues with filesystems using
block sizees larger than 8192 bytes have been resolved, as per the
following deltas:

	rev 1.34	src/sys/boot/i386/boot2/boot2.c
	rev 1.5		src/sys/boot/alpha/boot1/sys.c
2002-01-14 09:16:56 +00:00