summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-09-25Suggest disabling the sb driver in UKC rather than removing it fromMiod Vallat
the kernel, when it incorrectly matches an ess card.
2002-09-25Link to em(4) rather than gx(4) now.Miod Vallat
2002-09-25missing arg; peterw@ifost.org.auTheo de Raadt
2002-09-25typo; pilot@monkey.orgMarkus Friedl
2002-09-25remove rc5Markus Friedl
2002-09-25Try to minimize places where suid programs and devices can liveKenneth R Westerback
by implementing the rules: Only '/' is neither nodev nor nosuid. i.e. it can obviously *always* contain devices or setuid programs. Every other mounted filesystem is nodev. If the user chooses to mount /dev as a separate filesystem, then on the user's head be it. The only directories that install puts suid binaries into (as of 3.2) are: /sbin /usr/bin /usr/sbin /usr/libexec /usr/libexec/auth /usr/X11R6/bin and ports and users can do who knows what to /usr/local and sub directories thereof. So try to ensure that only filesystems that are mounted at or above these directories can contain suid programs. In the case of /usr/libexec, give blanket permission for subdirectories. Note that if *all* the above are split into separate filesystems the install process will attempt a couple of cross-device links when installing base32.tgz, and fail. ok deraadt@.
2002-09-25sync LoginGraceTime with defaultMarkus Friedl
2002-09-25Psycho made jason schizo (or the reverse)Miod Vallat
2002-09-25- "resposne" is used without initialization, so zero-fillJun-ichiro itojun Hagino
- sendto(2) performed with osockaddr, so avoid that - reject anything other than AF_INET based on patch from xs@kittenz.org. deraadt/millert ok
2002-09-25#if NVLAN > 0 around vlan portions of codeNathan Binkert
2002-09-24typoTheo de Raadt
2002-09-24fix english; krw okTheo de Raadt
2002-09-24syncTheo de Raadt
2002-09-24tweak the example $HOME/.ssh/rc script to not show on any cmdline theTodd T. Fries
sensitive data it handles. This fixes bug # 402 as reported by kolya@mit.edu (Nickolai Zeldovich). ok markus@ and stevesk@
2002-09-24sizeof(structure) not sizeof(structure *); pointed out by dvamsi@yahoo.com.Jason Wright
2002-09-24syncNathan Binkert
2002-09-24typoNathan Binkert
2002-09-24make this more like othersTheo de Raadt
2002-09-24Get rid of gx(4) and use em(4) since it supports more cards and works betterNathan Binkert
overall.
2002-09-24Manpage for em(4). Intel gigabit ethernet driverNathan Binkert
2002-09-24Driver for Intel PRO/1000 gigabit ethernet adapters.Nathan Binkert
This driver should work with all current models of gigabit ethernet adapters. Driver written by Intel Ported from FreeBSD by Henric Jungheim <henric@attbi.com> bus_dma and endian support by me.
2002-09-24Don't use constants for the output parameter, use the iparam count as a ↵Jason Wright
pointer to the first result location.
2002-09-24Allocate vis_user on the stack instead of using malloc(). ThisTodd C. Miller
way we don't have to worry about malloc() failure. Also closes a memory leak since vis_user was never free()d. Lack of malloc() checking pointed out by Peter Werner.
2002-09-24only call kerberos code for authctxt->validMarkus Friedl
2002-09-24anotherHenning Brauer
2002-09-24sync with the update in namesNathan Binkert
2002-09-24syncNathan Binkert
2002-09-24Add a few intel gigabit device models and update names so they're more correctNathan Binkert
ok deraadt
2002-09-24Rejig addel()/rmel() to keep items on a single line, with blanksKenneth R Westerback
separating items. This allows a compaction of the displayed lines for device selection. Customize the device selection routine so the actual device type is shown (disk or CD-ROM). Rename ask_fordev to ask_which so the invocations (with device type) read better.
2002-09-24Restore pentium_microtime, testing by henning@, millert@. ok deraadt@Thomas Nordin
2002-09-23never send a beck to do a man's jobTheo de Raadt
2002-09-23<deraadt> someone please fix the fstab(5) exampleBob Beck
2002-09-23better "ifconfig ipv6addr deprecated" flag handling. sync w/kameJun-ichiro itojun Hagino
2002-09-23correct length of PADN option before jumbo payload option. sync w/kameJun-ichiro itojun Hagino
deraadt ok
2002-09-23m6stat is a static variable (ip6_mroute.c). sync w/kameJun-ichiro itojun Hagino
2002-09-23only call auth_krb5 if kerberos is enabled; ok deraadt@Markus Friedl
2002-09-23pull in fix from openssl-0.9.7-stable-SNAP-20020921:Markus Friedl
*) Don't impose a 16-byte length minimum on session IDs in ssl/s3_clnt.c (the SSL 3.0 and TLS 1.0 specifications allow any length up to 32 bytes). [Bodo Moeller]
2002-09-23change get_peer_ipaddr() and get_local_ipaddr() to not return NULL forKevin Steves
non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
2002-09-23Fix console determination; based on discussion in port-sparc64@netbsdJason Wright
2002-09-23remove generated crunch conf; ok deraadt@Markus Friedl
2002-09-23Get the wsdisplay capabilities from rasops, rather than attempting toMiod Vallat
guess them at compile-time. Plus this makes cgtwelve a bit more clean. ok fgs@ deraadt@
2002-09-23Fix the extra cursor image remaining in the upper left corner of theMiod Vallat
screen after it has been cleared. ok fgs@ deraadt@
2002-09-23Add /dev/X0 entry for use by xdm; matthieu@Todd C. Miller
As requested by deraadt@
2002-09-23correctly dump radix_node; henric@attbi.comTheo de Raadt
2002-09-23parisc level 0x10 is just an overclocked 0xeMichael Shalayeff
2002-09-23openssh will be 3.5, right?Theo de Raadt
2002-09-23syncTheo de Raadt
2002-09-23another amd usb; henric@attbi.comTheo de Raadt
2002-09-23MSCP based local storage now supported. Also reword some stuff.Hugh Graham
2002-09-23Add 4000 700A and the couple tested QBUS/MSCP cards.Hugh Graham