Commit Graph

1960 Commits

Author SHA1 Message Date
markm
1bcfc94e36 Use libcrypto instead of libdes. 2000-02-24 21:01:54 +00:00
shin
1c7bbb579d Security fixes. (Just same as sbin/ping and usr.sbin/traceroute)
-Open socket() at first and then setuid() to actual user.
  -Allow ping6 preload option only for root.

Approved by: jkh

Submitted by: Neil Blakey-Milner <nbm@mithrandr.moria.org>
2000-02-24 19:06:05 +00:00
shin
29d7018ad6 Add an scope index embedded IPv6 link local addr creation support, by route
command.
This is a workaround for some kernel interface which can't treat sin6_scope_id,
yet.
2000-02-23 18:00:33 +00:00
alfred
f2172c58ab Don't scare the users.
Kirk argees that the comment about corruption caused by switching the flags
on an already mounted manpage are bogus, it doesn't happen.

Ok by: mckusick
2000-02-22 01:40:43 +00:00
ken
73428f2e29 Fix 'camcontrol inquiry'. The inquiry data structure changes (increased to
256 bytes) caused it to break on many devices.

The SCSI spec says that for commands with 8-bit length fields, a value of 0
means 256 bytes.  As it turns out, many devices don't deal with that
properly.  Some interpret the 0 as 0, and return no data.  Others return
more than 256 bytes of data, and cause an overrun.

The fix is to tell the device we've only allocated SHORT_INQUIRY_LENGTH (36
bytes) of inquiry data, instead of sizeof(struct scsi_inquiry_data).

camcontrol.c:		Change inq_len in the call to scsi_inquiry() to
			SHORT_INQUIRY_LENGTH, and add a long comment
			explaining the reason for the change.

scsi_all.h:		Add a comment above the definitinon of
			SHORT_INQUIRY_LENGTH alerting people that it is
			both the initial probe inquiry length, and the
			minimum amount of data needed for scsi_print_inquiry()
			to function.

scsi_all.c:		Add a comment about SHORT_INQUIRY_LENGTH being the
			minimum amount of data needed for
			scsi_print_inquiry() to function.

Reviewed by:	gibbs
Approved by:	jkh
Reported by:	"John W. DeBoskey" <jwd@unx.sas.com>
2000-02-20 04:42:44 +00:00
alfred
a34d288bc9 detect deleted tty lines in /etc/ttys. 2000-02-19 20:28:45 +00:00
shin
98f78aba9d Change IPv6 scoped addr format again based on recent standard discussion.
Sorry for the flapping, but no change will be done for 4.0 anymore.
Official standard will be published around April or later.
If different format would be adopted at that time, then support for
the new format will be added to the succeeding FreeBSD 4.x.

Approved by: jkh
2000-02-19 16:10:16 +00:00
unfurl
e3f028acc0 Committed changes to restore(8) for previously undocumented -N option.
PR:		15600
Reviewed by:	jim
2000-02-17 02:15:18 +00:00
phk
12d9b60f3b With the kind permission of Marconi Communications (Formerly "Fore Communication"
include a copy of the 3.0.1 firmware for the PCA200E card in the fore_dnld
program.

There are various and subtle compatibility issues between the hfa driver and
the microcode, this version is belived to work best.

If a file is specified on the command line it will be used instead of the
embedded image.

Approved by:		jkh
2000-02-15 13:20:58 +00:00
luigi
83467efa87 Use correct field for dst_port when displaying masks on dynamic pipes. 2000-02-13 11:46:59 +00:00
ru
fe933b4c21 Add ata(4) support.
Approved by:	jkh
2000-02-11 11:25:23 +00:00
luigi
f6954f1a86 Support and document new stateful ipfw features.
Approved-by: jordan
2000-02-10 14:25:26 +00:00
shin
681d6b5c31 Support IPv6 scoped addr in ifconfig and route
IPv6 scoped addr display is not yet supported by ifconfig
   and route. Now almost of IPv6 apps support it, so its support
   in ifconfig and route is important to keep consisetncy, and
   to avoid user confusion.

Approved by: jkh
2000-02-10 03:03:09 +00:00
guido
25d7550dee Add ipl.4 manpage 2000-02-09 21:01:35 +00:00
chris
16bfae1d4d Repair incorrect ``first appeared in'' reference, which originally stated
that we supported an IPv6 firewall since version 2.0.  It now correctly
says `4.0'.
2000-02-09 19:54:14 +00:00
shin
a430a5bc00 ping -S option was missing from IPsec merge, so enable it again.
Approved by: jkh

Submitted by: Matthew Reimer <mreimer@vpop.net>
2000-02-08 05:07:50 +00:00
peter
e5f21c38e3 Don't use /dev/vinum/rsd/XXX for init as it doesn't exist any more.
Without this change, you cannot do the required init on a new raid5 volume.

Reviewed by:	grog
Approved by:	jkh
2000-02-06 02:40:22 +00:00
ken
d241516a4a Fix a couple of typos in the 'camcontrol negotiate' output.
Submitted by:	T-Om <tom@iki.fi>
Approved by:	jkh
2000-02-04 07:30:27 +00:00
kris
62fefaab02 Add Xref to camcontrol(8) (replacing previously-removed scsiformat(8)).
Submitted by:	joerg
2000-01-30 20:58:33 +00:00
luoqi
ab74d7daf1 Remove unused #include and prototype declaration. 2000-01-30 05:24:55 +00:00
luoqi
bf195fb99c Typo fix. While I am at it, remove the name translation from block to raw
device, they are equivalent now (or more accurately we no longer have block
devices).

Submitted by:	Gregory Sutter <gsutter@pobox.com>
2000-01-30 05:09:48 +00:00
shin
5a973d3065 Add ip6fw.
Yes it is almost code freeze, but as the result of many thought, now I
think this should be added before 4.0...

make world check, kernel build check is done.

Reviewed by: green
Obtained from: KAME project
2000-01-29 13:54:44 +00:00
bde
5041625e0c Changed setflags() to set_flags(). This fixes part of the world breakage
due to recently incremented namespace pollution in <unistd.h>.
2000-01-28 12:44:50 +00:00
sumikawa
348b00703f Fix return value check for inet_pton().
Obtained from:	KAME Project
2000-01-25 13:54:47 +00:00
ru
b1253d64a8 Now that kernel is capable of notifying user processes about
the interface MTU change (src/sys/net/if_sl.c,v 1.83), track
interface MTU with -dynamic option as well.

PR:		15494
2000-01-25 12:24:06 +00:00
mpp
0835d95d39 Fix various man pages to stop abusing the .Bx macro to generate
the strings "FreeBSD" and "NetBSD".  Use the .Fx or .Nx macro
instead.
2000-01-23 01:30:05 +00:00
mjacob
7320d04137 Do some intptr_t casting for alpha.
Reviewed by:	ken@freebsd.org
2000-01-21 23:19:30 +00:00
mjacob
0ecff9cf93 Specify the system directory for which we put in our include path
as a separate line so we can override it on the command line if
we need to.

Reviewed by:	ken@freebsd.org
2000-01-21 23:18:08 +00:00
jdp
a69d0d68b5 If a directory on the command line doesn't exist, warn about it
and proceed rather than quitting with a fatal error message.

PR:		bin/16056
Submitted by:	Philipp Mergenthaler <un1i@rz.uni-karlsruhe.de>
2000-01-21 02:15:27 +00:00
billf
7bb98afc93 Brucify:
add an upper limit to -t
	match the types of return values and the variables they are stuffed in
	make the man page and usage() a little more consistantly ugly
	less obfuscation.

Submitted by:	adrian, billf
2000-01-20 20:48:51 +00:00
kris
9861a8004b Fix insecure tempfile handling
Reviewed by:	audit@freebsd.org
2000-01-16 21:08:58 +00:00
mjacob
0e7adec54b use XPT_GDEV_STATS- XPT_GDEV_TYPE was deprecated a while back 2000-01-16 20:03:34 +00:00
mks
fa310f1eed Handle GetResponse errors correctly. 2000-01-15 19:51:44 +00:00
green
89bb6f8da7 This is another in Martin Blapp's N-series of mount-related cleanups :)
Changes are:
 - rpc.umntall is called at the right places now in /etc/rc*
 - rpc.umntall timeout has been lowered from two days (too high) to one
 - verbose messages in rpc.umntall have been clarified
 - kill double entries in /var/db/mounttab when rpc.umntall is invoked
 - ${early_nfs_mounts} has been removed from /etc/rc
 - patched mount(8) -p to print different pass/dump values for ufs filesystems.
   (last patch recieved from dan <bugg@bugg.strangled.net>)

Submitted by:	Martin Blapp <mbr@imp.ch>, dan <bugg@bugg.strangled.net>
2000-01-15 14:28:14 +00:00
bp
03a19e07ad More style fixes, both to code and man page.
Submitted by:	Philippe Charnier <charnier@xp11.frmug.org>
2000-01-15 09:06:37 +00:00
billf
ca5b317836 Add '-t X' which times out after pinging for X seconds.
Submitted by:	adrian
2000-01-14 23:40:38 +00:00
bde
42e0a0cec8 Adjust paths after repository copy. 2000-01-14 17:39:20 +00:00
peter
a01339bf77 Move sbin/i386/{mount_msdos,comcontrol} back to sbin, they are not
i386 specific.

Submitted by:	bde
2000-01-14 16:37:03 +00:00
bde
ac7bbd636a Removed yet another vestige of the ft driver. 2000-01-14 16:01:28 +00:00
dillon
2022498b1b Thresh-out the nfs manual page references a bit
Reviewed by: Julian Elischer <julian@elischer.org>
2000-01-13 21:47:21 +00:00
bde
688bb99b3f Unremoved used include of <sys/stat.h> (don't depend on pollution in
<sys/mount.h).  Broken in: previous commit.

Removed unused include of <nwfs/nwfs.h>.
2000-01-12 09:16:13 +00:00
bde
f91e1883f7 Backed out removal of vendor id and gratuitous change of tmpfile prefix
in previous commit.
2000-01-11 07:28:46 +00:00
peter
c1ef93f5ca Fix the use of an uninitialized variable in the previous commit.
Also, in addition to the previous log message, the last change had a fix
for the case where where f.mntfromname is a relative path like da0a.

Submitted by:	bde
2000-01-10 14:20:53 +00:00
phantom
f8fa9c2202 Add `.Nm rrestore' to NAME section. 2000-01-10 12:27:33 +00:00
phantom
11e2b2d434 Add .Nm fastboot' and .Nm fasthalt' to NAME section. 2000-01-10 12:24:47 +00:00
phantom
007e0ea746 Add `.Nm rdump' to NAME section. 2000-01-10 12:18:10 +00:00
kris
a6c95ea747 10 X's for mktemp(). This seems to be free from race conditions. 2000-01-10 09:33:37 +00:00
kris
ac11ce63fd 10 X's for mkstemp(), and don't redefine _PATH_TMP 2000-01-10 09:25:32 +00:00
peter
a5aad10b74 - Style/bde changes.
- Don't use realpath as stat does the right thing.
  - Only check ufs filesystems in getmntpt.
  - Dont' bother checking that the ufs-mounted-on
    device is a special file.  It *must* be a special
    file, or ufs wouldn't have mounted it.

Submitted by:	Paul Saab <ps@yahoo-inc.com>
2000-01-10 08:21:22 +00:00
peter
e29b764b39 - Forgot to nuke hotroot completely.
Submitted by:	Paul Saab <ps@yahoo-inc.com>
2000-01-10 08:18:18 +00:00