Age | Commit message (Collapse) | Author |
|
From André Lucas <andre@ae-35.com>, fixes pr # 2658.
'Looks good' from miod@, millert@, and krw@.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
so we can get real error messages. This means the -a option is history
but it wasn't very useful anyway.
|
|
because some things (such as login) run as uid 0 and directory modes
won't restrict root.
|
|
|
|
from base/modulus to work on 5805.
|
|
|
|
|
|
okay deraadt@
|
|
based on freebsd pr#6630, netbsd pr#8654, openbsd pr#1492 .
does not affect other cpu models (cyrix or not).
asked by markus@ and testing.
|
|
|
|
|
|
|
|
|
|
configured).
This doesn't yet work with MPPE. More to follow.
|
|
it is a bit verbose and will be cleaned up once we figure out which
counters are more useful than others.
|
|
|
|
it consists of
- ECN support in TCP
- tunnel-egress and fragment reassembly rules in layer-3 not to lose
congestion info at tunnel-egress and fragment reassembly
to enable ECN in TCP, build a kernel with TCP_ECN, and then,
turn it on by "sysctl -w net.inet.tcp.ecn=1".
ok deraadt@
|
|
|
|
|
|
we'll use for printing the information.
miod@ ok
|
|
|
|
|
|
|
|
|
|
- while i'm here some style, as well as spaces/tabs removal.
deraadt@ ok
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Idea from form@.
millert@ ok
|
|
|
|
|
|
we schedule a SIGFPE signal delivery to the faulting process.
However, arithmetic faults come in two flavors: "traps" that are "regular"
exceptions, and "faults" that are restartable exceptions.
In the "fault" case, the frame pc points to the faulting instruction, instead
of the next instruction, in case we could save the world by tweaking memory
and make the instruction not fault again when restarted.
In practice, this led to processes blocked in a SIGFPE loop madness.
To avoid this, add a skip_opcode() routine to compute the address of the
next opcode, effectively skipping the offending instruction ; this routine
is a very stripped-down db_disasm().
While there, enhance the ddb disassembler to correctly recognize and
disassemble two-byte opcodes.
ok hugh@, deraadt@
|
|
|
|
|
|
where each user gets their own file, which is owned by that user.
An old S/Key database may be converted by running "skeyinit -C" as root.
Programs that need to access the S/Key database no longer need to be
setuid root. They must now be setgid auth instead.
|
|
but I'm not sure which revisions yet).
|
|
o Tidy up includes
o Fix macros in auth.h
o Insist on context for ``set mru'' in MP mode
o Usage -> usage
o Don't intialise after processing config requests
o Show FSM values for ConfigAcks
o Make ident output prettier
o Fix some Id keywords
o Handle RADIUS pool address 255.255.255.254
o Support RADIUS Session-Timeout attributes
o Support RADIUS Reply-Message attributes
o Support RADIUS CHAP-Error attributes
o Store RADIUS Filter-Id attributes
o Provide a NAS-Port-Type attribute to RADIUS servers
o Provide a better NAS-Port attribute to RADIUS servers
o Support MS-CHAP with RADIUS
o Improve FSM decode functions
o Support an OCTETSIN variable
o Support an OCTETSOUT variable
o Support an PACKETSIN variable
o Support an PACKETSOUT variable
o Support an IPOCTETSIN variable
o Support an IPOCTETSOUT variable
o Support an IPPACKETSIN variable
o Support an IPPACKETSOUT variable
o Support an IPV6OCTETSIN variable
o Support an IPV6OCTETSOUT variable
o Support an IPV6PACKETSIN variable
o Support an IPV6PACKETSOUT variable
o Support a SOCKNAME variable
|
|
"should be called at splbio()"
|