d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
23b2a82332
freebsd-skq/usr.sbin
History
wpaul c8132b2e31 Close a potential security hole: if yp_access() is passed a map name, 
have it check to see that it doesn't contain any '/' characters. This
prevents possible silliness like ypcat "../../../kernel". We already
test the domain name for this in yp_validdomain(), and ypserv itself
tests the map name in yp_open_db(), but it doesn't hurt to be paranoid
and test for it in the generic access routine too. rpc.ypxfrd does not
test the map name for slashes, but it does call yp_access() with the
map name, so this removes a potential vulnerability from there.

Also make the tests for IPPORT_RESERVED a little more selective: make
sure it trips when map == master.passwd.*, prog == YPPROC and proc ==
YPPROC_XFR, and prog == YPXFRD_FREEBSD_PROG and proc == YPXFRD_GETMAP.
Also use IPPORT_RESERVED instead of hard-coded value.
1996-09-30 22:27:00 +00:00
..
ac
accton
adduser warn if reach group line limit (>200 users, >1024 bytes per line) 1996-09-17 19:34:56 +00:00
amd Eliminated includes of the "temporary" backwards compatibility header 1996-09-24 08:08:11 +00:00
apm delete MANDIR=/usr/share/man/man, 1996-05-21 18:09:11 +00:00
apmconf
arp
bad144
bootparamd
cdcontrol Use the .Fx macro where appropriate. 1996-08-23 00:57:08 +00:00
chown [HISTORY] command appeared in Version 1 AT&T UNIX 1996-08-29 18:06:19 +00:00
chroot Use the .Bx macro where appropriate. 1996-08-23 20:36:11 +00:00
config Bugfix: all device counts >= 256 was broken, they truncated by % 255 1996-08-21 17:00:54 +00:00
cron personal (ie: with the crontab command) cron tabs were broken by the 1996-09-10 03:38:20 +00:00
crunch Enhance crunchgens understanding of our new /usr/obj/pwd strategy. 1996-08-04 20:38:53 +00:00
ctm fix .Xr macro 1996-09-21 15:08:10 +00:00
dev_mkdb
diskpart
edquota
fdcontrol
fdformat
fdwrite Make this more usable from shell scripts and such by adding a non-interactive 1996-09-30 03:10:30 +00:00
inetd Reviewed by: various 1996-08-09 22:20:24 +00:00
iostat Cosmetic fixes for drive names which are 4 chars long. 1996-06-11 16:18:58 +00:00
IPXrouted
kbdcontrol document values for option -r 1996-05-28 00:14:20 +00:00
kbdmap sync copyright with /usr/share/examples/etc/bsd-style-copyright 1996-08-27 20:04:45 +00:00
kernbb
keyadmin This is the `key' program from NRL's IPv6 distribution, heavily 1996-06-17 19:47:57 +00:00
kgmon
kvm_mkdb Use the .Bx macro where appropriate. 1996-08-23 20:36:11 +00:00
lpr Close files up to getdtablesize(), instead of up to NOFILE. 1996-09-29 19:12:55 +00:00
lptcontrol
manctl sync copyright with /usr/share/examples/etc/bsd-style-copyright 1996-08-27 20:04:45 +00:00
mixer
mkdosfs Use the .Fx macro where appropriate. 1996-08-23 00:57:08 +00:00
mount_portalfs Don't use __dead or __pure in user code. They were obfuscations 1996-09-14 03:00:32 +00:00
mountd Add one line fix to stop my old 'don't barf if you see the same 1996-08-29 14:20:57 +00:00
moused Argh! there's no need for moused to be setuid-root! Now that it 1996-09-10 19:17:25 +00:00
mrouted Bring in my changes for removing the pestilent obj links (unless you 1996-06-24 04:26:21 +00:00
mtree ts_sec -> tv_sec 1996-09-20 04:13:44 +00:00
named Removed unused `-I.'s from CFLAGS. 1996-09-04 22:25:35 +00:00
named.reload build bind-4.9.4-P1 named.reload in it's own directory 1996-08-29 21:47:33 +00:00
named.restart build bind-4.9.4-P1 named.restart in it's own directory 1996-08-29 21:48:19 +00:00
ncrcontrol Drop privileges if not using standard namelist or file. 1996-05-30 02:19:43 +00:00
ndc build bind-4.9.4-P1 ndc in it's own directory 1996-08-29 21:46:46 +00:00
newsyslog Doh! Actually read the patch I applied and see what it was *trying* to do, 1996-09-09 15:32:26 +00:00
nfsd Use the .Bx macro where appropriate. 1996-08-23 20:36:11 +00:00
nologin Now that we have a manpage, don't have the 'clean' target be a NO-OP. 1996-07-10 18:36:41 +00:00
nslookup Build bind-4.9.4-P1 nslookup 1996-08-29 21:40:09 +00:00
pccard add missing comma(s) in .Xr macros 1996-09-23 22:24:39 +00:00
pcvt Fixed DPADD. 1996-09-05 17:16:10 +00:00
pkg_install Clean up the english a little, having made the mistake of reading it. 1996-08-20 21:27:18 +00:00
portmap
ppp Moved getdtablesize() out of a loop. 1996-09-28 11:25:47 +00:00
pppd Removed bogus unused `-I..' and unnecessary override of BINDIR. Didn't 1996-09-04 22:43:20 +00:00
pppstats
pstat Include <fcntl.h> so that this doesn't depend on the KERNEL version 1996-09-29 19:25:10 +00:00
pwd_mkdb New option: [-c] 1996-08-19 16:03:15 +00:00
qcamcontrol Use the .Fx macro where appropriate. 1996-08-23 00:57:08 +00:00
quot
quotaon
rarpd Eliminated includes of the "temporary" backwards compatibility header 1996-09-24 08:08:11 +00:00
repquota
rmt ``make install'' should not install the symlink /usr/sbin/rmt -> /etc/rmt 1996-08-18 11:05:08 +00:00
rndcontrol Use the .Fx macro where appropriate. 1996-08-23 00:57:08 +00:00
rpc.lockd rpc.rstatd -> rpc.lockd typo 1996-08-16 09:44:40 +00:00
rpc.statd Add sm_inter.h to DPSRCS so that make depend is not required to build 1996-07-09 22:40:39 +00:00
rpc.yppasswdd Fixed DPADD. 1996-09-05 17:16:10 +00:00
rpc.ypxfrd Fixed DPADD. 1996-09-05 17:16:10 +00:00
rtprio Use the .Fx macro where appropriate. 1996-08-23 00:57:08 +00:00
rwhod When looking for "group daemon" (since that's what's in mtree), make sure 1996-09-07 01:43:08 +00:00
sa
sade Correct a minor misspelling. 1996-09-29 10:03:30 +00:00
sendmail add missing comma(s) in .Xr macros 1996-09-23 22:24:39 +00:00
sgsc
sicontrol
sliplogin
slstat Fixed DPADD. 1996-09-05 17:16:10 +00:00
spkrtest sync copyright with /usr/share/examples/etc/bsd-style-copyright 1996-08-27 20:04:45 +00:00
spray Fixed DPADD. 1996-09-05 17:16:10 +00:00
stallion
sup Really eliminated includes of the "temporary" backwards compatibility 1996-09-24 08:43:04 +00:00
sysctl Removed references to pathconf-related variables that were never handled 1996-09-28 14:43:03 +00:00
sysinstall Correct a minor misspelling. 1996-09-29 10:03:30 +00:00
syslogd Add info field. 1996-09-27 20:31:26 +00:00
tcpdump Fix typo in last commit...sigh 1996-08-21 21:39:44 +00:00
timed
traceroute Grab traceroute out of src/contrib/traceroute 1996-09-30 19:49:54 +00:00
trpt
tzsetup Removed unused `-I.'s from CFLAGS. 1996-09-04 22:25:35 +00:00
vidcontrol Fix typo. 1996-07-03 22:06:12 +00:00
vipw Implement incremental passwd database updates. This is done by ading a '-u' 1996-07-01 19:38:50 +00:00
vnconfig
watch Set ${DPADD}, use +=, add $Id$ 1996-09-02 23:38:58 +00:00
wormcontrol
xntpd Fixed DPADD. 1996-09-05 17:16:10 +00:00
xten add missing comma(s) in .Xr macros 1996-09-23 22:24:39 +00:00
yp_mkdb Add -I${.CURDIR}/../../libexec/ypxfr to CFLAGS so we can see ypxfr_extern.h. 1996-06-06 17:01:53 +00:00
ypbind
yppoll
yppush Ack! You can't strdup() a DB datum that is not null terminated, or you 1996-06-09 07:34:27 +00:00
ypserv Close a potential security hole: if yp_access() is passed a map name, 1996-09-30 22:27:00 +00:00
ypset
zic Merge from vendor branch. We are now completely up-to-date with 1996-07-18 19:59:09 +00:00
Makefile Disable build of old routed. 1996-09-16 16:53:54 +00:00
Makefile.inc