summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Collapse)Author
2011-04-09implement one last check that Andrew overlookedIngo Schwarze
2011-04-09implementation of the remaining checks;Ingo Schwarze
heavily based on code written by Andrew Fresh, but with considerable tweaking, mainly for simplicity; lightly tested - there are probably still bugs, but auditing and fixing it in the tree will be easier than with floating diffs
2011-04-08Do not use NULL in integer comparison.Theo de Raadt
2011-04-06Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0'Miod Vallat
for chars.
2011-03-30style cleanup:Ingo Schwarze
* include the colon into $check_title, where needed * always use the same style for stat calls * and a few minor points
2011-03-26umask and path checks;Ingo Schwarze
heavily based on code written by Andrew Fresh; tweaked in team-work
2011-03-25home directory checks;Ingo Schwarze
large parts from a submission by Andrew Fresh <andrew at afresh1 dot com>
2011-03-24fix "german" typo; from <markus dot lude at gmx dot de>Ingo Schwarze
2011-03-23Work in progress to replace /etc/security, not yet linked to the build.Ingo Schwarze
Main design goals: 1. Safely handle untrusted file names and file content. 2. Output compatibility with current security(8) to please people parsing the output with scripts (except when improving functionality right away saves considerable implementation effort). Substantial functional enhancements are for later. Prodding to do this in Perl by deraadt@. Using some feedback from espie@. Agree to put this in now and at this place even though only about one third of the functionality is ready, to complete it in the tree: beck@ espie@ millert@ deraadt@
2011-03-19fix rdr-to example (requires direction); from James TurnerOkan Demirmen
ok jmc@
2011-03-18actually set and use whiteexp in the new -W option.Okan Demirmen
my goof noticed by Boudewijn Dijkstra. ok beck@
2011-03-12excessive / at the end of a .PATH; ok guenther drahnTheo de Raadt
2011-03-04add -W flag (whiteexp), as opposed to pulling in a hardcoded defaultOkan Demirmen
value from spamd/grey.c; mostly from ohauer@gmx.de in PR/6142. ok beck@
2011-03-03repair arguments passed to pfctl; PR 6142, ok beckTheo de Raadt
2011-03-02zap trailing whitespace;Jason McIntyre
2011-02-22shut up unless -v, and a few minor enhancements.Marc Espie
okay miod@
2011-02-09Set SO_KEEPALIVE on sockets. OK miod@. Also tested by landry@Todd C. Miller
"Makes sense" markus@ and "i don't see a reason not to" henning@
2011-01-26placeholder for future changes, as discussed with miod@Marc Espie
2011-01-10Back out rev 1.2 and use mkstemp(), not mktemp(). OK deraadt@Todd C. Miller
2010-12-13rename() is the atomic operation, unlink() is just there to createMarc Espie
races between ldconfig and ld.so (simple commit, hours of bug hunt...) okay kettenis@, deraad@, miod@
2010-12-12Allocate a full C compiler-style stack frame that includes space for 6Mark Kettenis
extended word argument slots required by the ABI. Apparently gcc4 uses them in cases where gcc3 didn't. Fixes segmentation faults with gcc4 because the space for the slots was colliding with the space for dl_data that we allocated on the stack. ok miod@, drahn@
2010-12-07Make the preload error distinct from the normal error.Dale Rahn
ok espie@
2010-11-16Fix error message when ld.so ends up loading a different than expectedDale Rahn
library, but other library needs the one loaded. mostly ok kurt@
2010-11-11Remove commented out references to old kerberosIV libraries we do notMiod Vallat
ship since ages. ok deraadt@ millert@
2010-10-30fix a 10 year old bug in the memory allocator, which affected only sparc.Theo de Raadt
sparc has 4 byte long, but needs 8 byte alignment. recently the DIR struct was changed to contain some off_t, which needs 8 byte alignment. turns out the allocator calculated the bias for alignment, and then subtracted out it's private linkage storage afterwards. on hppa this worked because a 8-byte object can be loaded at a 4-byte boundary; on all other architectures the situation was either 4/4 or 8/8. thanks for a bit of help from drahn
2010-10-29more nroff removal, with tweaks from (and ok) schwarze;Jason McIntyre
2010-10-28Change basep parameter of getdirentries() to be off_t *, not long *Todd C. Miller
so it works correctly with large offsets (and matches other systems). This requires adding a new getdirentries syscall, with the old one renamed to ogetdirentries. All in-tree consumers of getdirentries() have been updated. Bump libc and libpthread major numbers. OK and with deraadt@
2010-10-27Fix comment; no binary change. OK deraadt@Todd C. Miller
2010-10-27repair ;;Theo de Raadt
2010-10-25Search loaded libs first and add support for SONAME matching. ok drahn@Kurt Miller
2010-10-25give a different error message for empty files, as they are obviously wrongMarc Espie
2010-10-15Switch the remaining users of libdes in src to libcrypto,Jonathan Gray
telnet portion partially from the latest heimdal. ok mikeb@
2010-10-13The heimdal code switched to using DES from libcrypto when 0.7.2Jonathan Gray
was imported over four years ago, so we don't need to link libdes for kerberos anymore. ok mikeb@ deraadt@
2010-10-06do not pass GREY entries to pf's spamd-white table if already TRAPPED.Stephan A. Rickauer
Fixes pr/6467. (from boudewijn at indes dot com) - ok beck@
2010-09-11Fix lazy binding issue by making sure the second argument to _dl_find_symbol()Mark Kettenis
always points to a pointer that is initialized to NULL. Consistently use NULL instead of mixing NULL and 0 to make the pattern more obvious. Fixes nm(1) crashes that happen when you pass it multiple object files on the command line. ok miod@
2010-09-03add EXIT STATUS for /usr/libexec;Jason McIntyre
2010-09-01Oracle has re-licensed sunrpc under a three-clause BSD license.Todd C. Miller
Update our sources appropriately. OK deraadt@ jsg@
2010-08-30Add missing network service name from /var/log/ftpd entries.lum
ok and suggestion from jmc@ ok tobias@
2010-08-27In revision 1.14 of ftpd.c the ident variable was removed from its only ↵lum
meaningful usage when a snprintf call was removed, rendering ident useless. Time to remove remaining code. ok tobias@
2010-08-11Make _dl_searchnum signed as originally intended.Dale Rahn
Pointed out by patrick keshish.
2010-08-01Properly reset states when a login phase is interrupted by another one.Tobias Stoeckmann
Prevents ftpd from letting regular users logging in during anonymous-only mode (-A). ok millert, ray
2010-07-30Don't set "success" flags before error checks.Ray Lai
Add check for login_getclass() failure, pointed out by tobias. OK tobias
2010-07-13handle Tm, like in tiff2psMarc Espie
2010-07-13work around a strange problem in locality of @_ by copying stuff.Marc Espie
okay millert@
2010-07-09don't print directly, use an interface that's similar enough to pkg_addMarc Espie
print framework so that we'll be able to integrate with it better. ok millert@
2010-07-02Add Makefile.inc for hppa64 to aid in building cross tools.Joel Sing
ok drahn@ kettenis@
2010-07-01When generating grpsym lists, avoid duplicates without searching theDale Rahn
already generated list. Speeds up startup on deeply nested dlopen binaries. ok guenther@, tested by ckuethe@ and ajacoutot@
2010-06-18Prevent a segmentation fault on ftpd_popen error (memory, file descriptor,Tobias Stoeckmann
pipe ...) during status command. ok millert
2010-06-13Adjust FTP reply codes (in error conditions) to conform to RFC 959.Tobias Stoeckmann
ok millert, schwarze
2010-06-07Fix a comment typoPhilip Guenthe