Commit graph

67612 commits

Author SHA1 Message Date
Dag-Erling Smørgrav a45af0e2b0 We need pam_client.h from libpamc. This unbreaks world
Pointed out by:	jhay
Pointy hat to:	des
2001-12-06 12:35:18 +00:00
Ruslan Ermilov aa70e98b87 -lcipher is an installable library. 2001-12-06 10:50:23 +00:00
Crist J. Clark 68f1d5a354 Protect the '*' in pppoed_provider (the default) from metacharacter
expansion in the rc-scripts.

PR:		32552
Submitted by:	Gleb Smirnoff <glebius@rinet.ru>
Approved by:	ru
Obtained from:	ru
MFC after:	1 day
2001-12-06 09:34:44 +00:00
John Baldwin b69cb6342c Just to be pedantic and more aesthetically pleasing, move the secure/
top-level subdirectory prior to share/ so that the top-level directories
are processed in alphabetical order.
2001-12-06 07:44:47 +00:00
Warner Losh 4e152a90ee The pccard/cardbus power interface should depend on having pccard or
cardbus in the kernel, not on all the bridges that implement it.
Note: this is NEWCARD only, so we don't want it for the 'card' case,
unlike card_if.m, which is both NEWCARD and OLDCARD.
2001-12-06 06:40:18 +00:00
Wes Peters f61a2ede84 New, improved, more Posix-compliant strerror_r implementation,
complete with documentation.

Reviewed by:	mike@ gad@
MFC after:	1 week
2001-12-06 04:53:31 +00:00
David E. O'Brien 5a31fd21e9 Upgrade to Binutils 2.11.2. 2001-12-06 03:10:42 +00:00
Giorgos Keramidas c602ea21d7 Make a bit more clear the types of characters that -B option will
print in octal.

Reviewed by:	roam, silence on -doc
2001-12-06 00:30:53 +00:00
John Baldwin d860ec7a2b Trim yet another duplicate fortune. 2001-12-05 22:40:44 +00:00
John Baldwin ae4385c3b1 Properly sort the last two fortunes alphabetically. 2001-12-05 22:39:00 +00:00
John Baldwin 6d8773a960 Add a short commentary on libdialog by jkh. 2001-12-05 22:13:53 +00:00
John Baldwin 01ad25b722 Remove an incorrect duplicate Douglas Adam quote and properly format and
the correct duplicate.  Both versions also attributed the quote to the
wrong book.
2001-12-05 22:09:39 +00:00
John Baldwin b2b286f559 Fix a typo and add a missing period. 2001-12-05 21:36:14 +00:00
Dag-Erling Smørgrav 426ae370f4 Awright, egg on my face. I should have taken more time with this. The
conversion script generated the wrong format, so the configuration files
didn't actually work.  Good thing I hadn't thrown the switch yet...

Sponsored by:	DARPA, NAI Labs (but the f***ups are all mine)
2001-12-05 21:26:00 +00:00
Dag-Erling Smørgrav 722b228aba Oops! Previous commit used tabs instead of spaces. 2001-12-05 21:11:24 +00:00
Dag-Erling Smørgrav e878ebd0ce Add /etc/pam.d.
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:10:01 +00:00
John Baldwin bc584bd7b6 Remove some duplicate fortunes. 2001-12-05 21:06:30 +00:00
Dag-Erling Smørgrav 23c103b894 pam.d-style configuration, auto-generated from pam.conf.
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:06:21 +00:00
Dag-Erling Smørgrav 378eca6a16 Forced commit to note that previous commit was
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:04:34 +00:00
Dag-Erling Smørgrav 2191f95faf Short README for /etc/pam.d, mostly extracted from the comments in pam.conf. 2001-12-05 20:59:38 +00:00
Dag-Erling Smørgrav 179281f9bf Perl script that splits pam.conf into separate files suitable for pam.d.
Sponsored by:	DARPA, NAI Labs
2001-12-05 20:58:39 +00:00
David E. O'Brien 016298551c Files in subdirectories of directories that have the nodump flag set
are sometimes incorrectly being dumped.

The problem arises because the subdirectory only gets its entry
cleared from usedinomap if it is also present in dumpinomap, and it is
the absence of a directory in usedinomap that internally indicates
that the directory is under the effects of UF_NODUMP (either directly
or inherited).

PR:		32414
Submitted by:	David C Lawrence <tale@dd.org>
2001-12-05 20:42:52 +00:00
Robert Watson 65bbadfbbc o Make kern.security.bsd.suser_enabled TUNABLE.
Requested by:	green
2001-12-05 18:49:20 +00:00
Ruslan Ermilov 47891de1a5 Fixed remotely exploitable DoS in arpresolve().
Easily exploitable by flood pinging the target
host over an interface with the IFF_NOARP flag
set (all you need to know is the target host's
MAC address).

MFC after:	0 days
2001-12-05 18:13:34 +00:00
Robert Watson 959f4950f5 o Whitespace sync to GENERIC 2001-12-05 18:08:23 +00:00
Dag-Erling Smørgrav 87316434d1 Define PAM_READ_BOTH_CONFS. We can now have both /etc/pam.d and
/etc/pam.conf.

Sponsored by:	DARPA, NAI Labs
2001-12-05 17:06:16 +00:00
Dag-Erling Smørgrav 0fbda1fc58 Fix a bug that made PAM fail if /etc/pam.d/ existed but was empty.
Sponsored by:	DARPA, NAI Labs
2001-12-05 17:05:15 +00:00
Andrey A. Chernov 8ede26d773 Clarify ' ' space issue 2001-12-05 16:33:11 +00:00
Dag-Erling Smørgrav f6abb36383 Clean up namespace pollution by prepending underscores to argument names in
function prototypes (or, in a few cases, removing argument names altogether).

Sponsored by:	DARPA, NAI Labs
2001-12-05 16:31:34 +00:00
Dag-Erling Smørgrav bda74fe925 Install the correct version of pam_misc.h.
Sponsored by:	DARPA, NAI Labs
2001-12-05 16:27:41 +00:00
Dag-Erling Smørgrav 1c04976ad1 This file isn't used; it's an older version of include/security/pam_misc.h.
Sponsored by:	DARPA, NAI Labs
2001-12-05 16:14:43 +00:00
Maxim Sobolev 46f32e5e98 Add missed capital GHE letter.
PR:		28571
Submitted by:	Alexey Klimov <kao@wiuu.kiev.ua>
2001-12-05 16:09:10 +00:00
Dag-Erling Smørgrav 8d3978c115 Add dummy functions for all module types. These dummies return PAM_IGNORE
rather than PAM_SUCCESS, so you'll get a failure if you list dummies but
no real modules for a particular module chain.

Sponsored by:	DARPA, NAI Labs
2001-12-05 16:06:35 +00:00
Dag-Erling Smørgrav d5a8dd3fb5 Connect the man page to the build.
Sponsored by:	DARPA, NAI Labs
2001-12-05 16:02:50 +00:00
Dag-Erling Smørgrav e2c8459e85 Add a pam_self authentication module that succeeds if and only if the local
and remote user names are the same.

Sponsored by:	DARPA, NAI Labs
2001-12-05 15:55:14 +00:00
Guido van Rooij 9a0ad4c91a Fix initialisation of struct nat entry, to solve a panic that occurs
when reloading a nat table after reboot

Submitted by:	Arjan de Vet <devet@devet.org>
Reviewed by:	IP Filter mailing list
MFC after:	3 days
2001-12-05 10:46:24 +00:00
Guido van Rooij 3068bdba98 Fix resume for HP Omnibook 500's.
MFC after:	1 week
2001-12-05 10:36:32 +00:00
Guido van Rooij 7145906dd6 Add suspend/resume hooks to this driver; necessary to overcome
problems on HP Omnibook 500.

MFC after:	1 week
2001-12-05 10:34:07 +00:00
John Hay 8c992b7f0d Note sis(4) VLAN support.
MFC after:	7 days
2001-12-05 09:34:49 +00:00
John Hay 16cba1662f Add VLAN support.
MFC after:	7 days
2001-12-05 09:34:28 +00:00
Warner Losh 9bab8c59e9 kernel/burncd in sync! 2001-12-05 09:21:51 +00:00
Warner Losh e57d8b01a5 Warn about PROCFS stuff.
Submitted by: des
2001-12-05 09:18:08 +00:00
Warner Losh c74f37cea7 Moved to dev/joy 2001-12-05 09:10:47 +00:00
Warner Losh c067c1d163 Move joy from isa to dev/joy. 2001-12-05 09:10:20 +00:00
Warner Losh 7345fbcb38 Use new location for joy, plus list its new bus front ends. 2001-12-05 09:09:48 +00:00
Warner Losh 6aed731b38 Split joystick driver into ISA and PC Card front ends.
Similar code was submitted in PR 5559 by Takeshi OHASHI-san, but the
PC Card system has changed much since then, so this is a fresh
implementation.

PR:	i386/5559
Submitted by: Takeshi OHASHI
2001-12-05 09:08:23 +00:00
Warner Losh 3b289629db Implement prism2 detection from NetBSD. This mostly obsoletes the
prism2 flag in pccard.conf, but I'm leaving it place for the moment in
case the small sample of PrismII cards that I've tried is not
representative.

MFC After: 30 days
Obtained from: NetBSD
2001-12-05 08:57:36 +00:00
Dag-Erling Smørgrav 023fe50302 Bruce says the links are not needed. 2001-12-05 08:50:51 +00:00
Hajimu UMEMOTO 8d6337d059 Newer SA is prefered for a out-bound packet than old one
when net.key.prefered_oldsa is set to zero.

Obtained from:	KAME
MFC after:	1 week
2001-12-05 05:40:49 +00:00
David E. O'Brien 3d7f57bc69 An extra #ifdef crept in with rev 1.38. 2001-12-05 04:16:33 +00:00