summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-09-26activate the two key sequences for undo again; ok art henningTheo de Raadt
2002-09-26syncTheo de Raadt
2002-09-26document extended antispoofHenning Brauer
some help nick@ and frantzen@ ok theo
2002-09-26Incomplete section 4 mi manual page cleanup.Miod Vallat
- make configuration lines match GENERIC files - more Xr (hopefully usefule Xr) - never mention intro(4) on non-physical devices (i.e. protocols), always mention it for physical devices - random text style and quoting fixes - drivers ported from FreeBSD did mention rc.conf instead of hostname.if as the place to put mediaopt - some .Tn UNIX -> .Ox replacements - etc, etc... reviewd in part by deraadt@ (until he got bored of this)
2002-09-26Attempt to make these match the current state of the code.Miod Vallat
2002-09-26Install boca(4)Miod Vallat
2002-09-26Point to <sys/mtio.h> rather than contain an old version of it.Miod Vallat
2002-09-26show nodev,nosuid lines; openbsd@davidkrause.comTheo de Raadt
2002-09-25Document the flags option for usb. ok miod@ deraadt@Dale Rahn
2002-09-25Typo in XrMiod Vallat
2002-09-25better text for clause 3. pointed out by miod@.Federico G. Schwindt
2002-09-25Correct sfr(4) reference.Miod Vallat
2002-09-25Suggest disabling the sb driver in UKC rather than removing it fromMiod Vallat
the kernel, when it incorrectly matches an ess card.
2002-09-25Link to em(4) rather than gx(4) now.Miod Vallat
2002-09-25missing arg; peterw@ifost.org.auTheo de Raadt
2002-09-25typo; pilot@monkey.orgMarkus Friedl
2002-09-25remove rc5Markus Friedl
2002-09-25Try to minimize places where suid programs and devices can liveKenneth R Westerback
by implementing the rules: Only '/' is neither nodev nor nosuid. i.e. it can obviously *always* contain devices or setuid programs. Every other mounted filesystem is nodev. If the user chooses to mount /dev as a separate filesystem, then on the user's head be it. The only directories that install puts suid binaries into (as of 3.2) are: /sbin /usr/bin /usr/sbin /usr/libexec /usr/libexec/auth /usr/X11R6/bin and ports and users can do who knows what to /usr/local and sub directories thereof. So try to ensure that only filesystems that are mounted at or above these directories can contain suid programs. In the case of /usr/libexec, give blanket permission for subdirectories. Note that if *all* the above are split into separate filesystems the install process will attempt a couple of cross-device links when installing base32.tgz, and fail. ok deraadt@.
2002-09-25sync LoginGraceTime with defaultMarkus Friedl
2002-09-25Psycho made jason schizo (or the reverse)Miod Vallat
2002-09-25- "resposne" is used without initialization, so zero-fillJun-ichiro itojun Hagino
- sendto(2) performed with osockaddr, so avoid that - reject anything other than AF_INET based on patch from xs@kittenz.org. deraadt/millert ok
2002-09-25#if NVLAN > 0 around vlan portions of codeNathan Binkert
2002-09-24typoTheo de Raadt
2002-09-24fix english; krw okTheo de Raadt
2002-09-24syncTheo de Raadt
2002-09-24tweak the example $HOME/.ssh/rc script to not show on any cmdline theTodd T. Fries
sensitive data it handles. This fixes bug # 402 as reported by kolya@mit.edu (Nickolai Zeldovich). ok markus@ and stevesk@
2002-09-24sizeof(structure) not sizeof(structure *); pointed out by dvamsi@yahoo.com.Jason Wright
2002-09-24syncNathan Binkert
2002-09-24typoNathan Binkert
2002-09-24make this more like othersTheo de Raadt
2002-09-24Get rid of gx(4) and use em(4) since it supports more cards and works betterNathan Binkert
overall.
2002-09-24Manpage for em(4). Intel gigabit ethernet driverNathan Binkert
2002-09-24Driver for Intel PRO/1000 gigabit ethernet adapters.Nathan Binkert
This driver should work with all current models of gigabit ethernet adapters. Driver written by Intel Ported from FreeBSD by Henric Jungheim <henric@attbi.com> bus_dma and endian support by me.
2002-09-24Don't use constants for the output parameter, use the iparam count as a ↵Jason Wright
pointer to the first result location.
2002-09-24Allocate vis_user on the stack instead of using malloc(). ThisTodd C. Miller
way we don't have to worry about malloc() failure. Also closes a memory leak since vis_user was never free()d. Lack of malloc() checking pointed out by Peter Werner.
2002-09-24only call kerberos code for authctxt->validMarkus Friedl
2002-09-24anotherHenning Brauer
2002-09-24sync with the update in namesNathan Binkert
2002-09-24syncNathan Binkert
2002-09-24Add a few intel gigabit device models and update names so they're more correctNathan Binkert
ok deraadt
2002-09-24Rejig addel()/rmel() to keep items on a single line, with blanksKenneth R Westerback
separating items. This allows a compaction of the displayed lines for device selection. Customize the device selection routine so the actual device type is shown (disk or CD-ROM). Rename ask_fordev to ask_which so the invocations (with device type) read better.
2002-09-24Restore pentium_microtime, testing by henning@, millert@. ok deraadt@Thomas Nordin
2002-09-23never send a beck to do a man's jobTheo de Raadt
2002-09-23<deraadt> someone please fix the fstab(5) exampleBob Beck
2002-09-23better "ifconfig ipv6addr deprecated" flag handling. sync w/kameJun-ichiro itojun Hagino
2002-09-23correct length of PADN option before jumbo payload option. sync w/kameJun-ichiro itojun Hagino
deraadt ok
2002-09-23m6stat is a static variable (ip6_mroute.c). sync w/kameJun-ichiro itojun Hagino
2002-09-23only call auth_krb5 if kerberos is enabled; ok deraadt@Markus Friedl
2002-09-23pull in fix from openssl-0.9.7-stable-SNAP-20020921:Markus Friedl
*) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller]
2002-09-23change get_peer_ipaddr() and get_local_ipaddr() to not return NULL forKevin Steves
non-sockets; fixes a problem passing NULL to snprintf(). ok markus@