summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-05-16ignore non-existent cases where '$if' evaluates to '*'.Todd T. Fries
From André Lucas <andre@ae-35.com>, fixes pr # 2658. 'Looks good' from miod@, millert@, and krw@.
2002-05-16name the registers ignoring the calling conventionsMichael Shalayeff
2002-05-16more clarify and cleanup; ok jakob@Kevin Steves
2002-05-16show net.inet.tcp.ecn optionTheo de Raadt
2002-05-16put TCP_ECN into the kernelTheo de Raadt
2002-05-16Update for new S/Key file formatTodd C. Miller
2002-05-16Add missing chown(2) call.Todd C. Miller
2002-05-16Xr skeyinfo(1)Todd C. Miller
2002-05-16Add skey(5)Todd C. Miller
2002-05-16Replace skeykeys entry with proper skey entry. Pointed out by mickey@Todd C. Miller
2002-05-16Revert to using the S/Key database directly (instead of BSD auth)Todd C. Miller
so we can get real error messages. This means the -a option is history but it wasn't very useful anyway.
2002-05-16Check for disabled /etc/skey directory (mode 0000). This is neededTodd C. Miller
because some things (such as login) run as uid 0 and directory modes won't restrict root.
2002-05-16Add missing prototypes for functions in libc/posix1e.Dale Rahn
2002-05-16Normalize the exponent too. This allows exponents with bit lengths differentJason Wright
from base/modulus to work on 5805.
2002-05-16syncNiels Provos
2002-05-16add systrace device okay fries@Niels Provos
2002-05-16systrace facility, used to enforce and generate policies for system callsNiels Provos
okay deraadt@
2002-05-16fix for a timer latch bug on the cyrix mediagx and gxm cpus.Michael Shalayeff
based on freebsd pr#6630, netbsd pr#8654, openbsd pr#1492 . does not affect other cpu models (cyrix or not). asked by markus@ and testing.
2002-05-16more register defnsJason Wright
2002-05-16#ifdef DEBUG some verbose output, may be moved to a -v flag later perhapsJakob Schlyter
2002-05-16No more /etc/skeykeys; brad@Todd C. Miller
2002-05-16Remove some unused includesbrian
2002-05-16Handle MS-CHAPv2 authentication correctly via the RADIUS server (if it'sbrian
configured). This doesn't yet work with MPPE. More to follow.
2002-05-16display the ECN related statistics.Kenjiro Cho
it is a bit verbose and will be cleaned up once we figure out which counters are more useful than others.
2002-05-16add an entry for TCP_ECN.Kenjiro Cho
2002-05-16bring in ECN support from KAME.Kenjiro Cho
it consists of - ECN support in TCP - tunnel-egress and fragment reassembly rules in layer-3 not to lose congestion info at tunnel-egress and fragment reassembly to enable ECN in TCP, build a kernel with TCP_ECN, and then, turn it on by "sysctl -w net.inet.tcp.ecn=1". ok deraadt@
2002-05-16Xref netstart(8) instead of rc(8) now, PR #2657Miod Vallat
2002-05-16syncTheo de Raadt
2002-05-16Add a an argument to db_printsym that specifies the printf functionArtur Grabowski
we'll use for printing the information. miod@ ok
2002-05-16missed a few moreTheo de Raadt
2002-05-16handle some more pods (there are still missing ones I bet)Theo de Raadt
2002-05-16Add a few useful xrefs.Miod Vallat
2002-05-16KNFTheo de Raadt
2002-05-16- mimic pw_error() behavior from libutil when name is NULL.Federico G. Schwindt
- while i'm here some style, as well as spaces/tabs removal. deraadt@ ok
2002-05-16clarify protocol useTheo de Raadt
2002-05-16bit more KNFTheo de Raadt
2002-05-16various KNF, and mark some issuesTheo de Raadt
2002-05-16add support for SNTP & split out RFC868 time support. ok deraadt@Jakob Schlyter
2002-05-16remove non-POSIX stuff; miod okTheo de Raadt
2002-05-16KNFTheo de Raadt
2002-05-16Since now /var/run/apmdev socket will be root:operator.Mike Pechkin
Idea from form@. millert@ ok
2002-05-16make this static tooTheo de Raadt
2002-05-16syncTheo de Raadt
2002-05-16Fix a long standing problem on vax: on "arithmetic fault" exceptions,Miod Vallat
we schedule a SIGFPE signal delivery to the faulting process. However, arithmetic faults come in two flavors: "traps" that are "regular" exceptions, and "faults" that are restartable exceptions. In the "fault" case, the frame pc points to the faulting instruction, instead of the next instruction, in case we could save the world by tweaking memory and make the instruction not fault again when restarted. In practice, this led to processes blocked in a SIGFPE loop madness. To avoid this, add a skip_opcode() routine to compute the address of the next opcode, effectively skipping the offending instruction ; this routine is a very stripped-down db_disasm(). While there, enhance the ddb disassembler to correctly recognize and disassemble two-byte opcodes. ok hugh@, deraadt@
2002-05-16more french onesMatthieu Herrb
2002-05-16No longer needs to be setuid root.Todd C. Miller
2002-05-16Change S/Key stuff from using a flat file (/etc/skeykeys) to a directoryTodd C. Miller
where each user gets their own file, which is owned by that user. An old S/Key database may be converted by running "skeyinit -C" as root. Programs that need to access the S/Key database no longer need to be setuid root. They must now be setgid auth instead.
2002-05-16Re-enable RNG on the 5601 (it needs to be disabled on some 5805 variants,Jason Wright
but I'm not sure which revisions yet).
2002-05-16o Bump the version numberbrian
o Tidy up includes o Fix macros in auth.h o Insist on context for ``set mru'' in MP mode o Usage -> usage o Don't intialise after processing config requests o Show FSM values for ConfigAcks o Make ident output prettier o Fix some Id keywords o Handle RADIUS pool address 255.255.255.254 o Support RADIUS Session-Timeout attributes o Support RADIUS Reply-Message attributes o Support RADIUS CHAP-Error attributes o Store RADIUS Filter-Id attributes o Provide a NAS-Port-Type attribute to RADIUS servers o Provide a better NAS-Port attribute to RADIUS servers o Support MS-CHAP with RADIUS o Improve FSM decode functions o Support an OCTETSIN variable o Support an OCTETSOUT variable o Support an PACKETSIN variable o Support an PACKETSOUT variable o Support an IPOCTETSIN variable o Support an IPOCTETSOUT variable o Support an IPPACKETSIN variable o Support an IPPACKETSOUT variable o Support an IPV6OCTETSIN variable o Support an IPV6OCTETSOUT variable o Support an IPV6PACKETSIN variable o Support an IPV6PACKETSOUT variable o Support a SOCKNAME variable
2002-05-16sprinkle some splassert(IPL_BIO) in some functions that are commented as ↵Artur Grabowski
"should be called at splbio()"