Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-04-09 | implement one last check that Andrew overlooked | Ingo Schwarze | |
2011-04-09 | implementation of the remaining checks; | Ingo Schwarze | |
heavily based on code written by Andrew Fresh, but with considerable tweaking, mainly for simplicity; lightly tested - there are probably still bugs, but auditing and fixing it in the tree will be easier than with floating diffs | |||
2011-04-08 | Do not use NULL in integer comparison. | Theo de Raadt | |
2011-04-06 | Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0' | Miod Vallat | |
for chars. | |||
2011-03-30 | style cleanup: | Ingo Schwarze | |
* include the colon into $check_title, where needed * always use the same style for stat calls * and a few minor points | |||
2011-03-26 | umask and path checks; | Ingo Schwarze | |
heavily based on code written by Andrew Fresh; tweaked in team-work | |||
2011-03-25 | home directory checks; | Ingo Schwarze | |
large parts from a submission by Andrew Fresh <andrew at afresh1 dot com> | |||
2011-03-24 | fix "german" typo; from <markus dot lude at gmx dot de> | Ingo Schwarze | |
2011-03-23 | Work in progress to replace /etc/security, not yet linked to the build. | Ingo Schwarze | |
Main design goals: 1. Safely handle untrusted file names and file content. 2. Output compatibility with current security(8) to please people parsing the output with scripts (except when improving functionality right away saves considerable implementation effort). Substantial functional enhancements are for later. Prodding to do this in Perl by deraadt@. Using some feedback from espie@. Agree to put this in now and at this place even though only about one third of the functionality is ready, to complete it in the tree: beck@ espie@ millert@ deraadt@ | |||
2011-03-19 | fix rdr-to example (requires direction); from James Turner | Okan Demirmen | |
ok jmc@ | |||
2011-03-18 | actually set and use whiteexp in the new -W option. | Okan Demirmen | |
my goof noticed by Boudewijn Dijkstra. ok beck@ | |||
2011-03-12 | excessive / at the end of a .PATH; ok guenther drahn | Theo de Raadt | |
2011-03-04 | add -W flag (whiteexp), as opposed to pulling in a hardcoded default | Okan Demirmen | |
value from spamd/grey.c; mostly from ohauer@gmx.de in PR/6142. ok beck@ | |||
2011-03-03 | repair arguments passed to pfctl; PR 6142, ok beck | Theo de Raadt | |
2011-03-02 | zap trailing whitespace; | Jason McIntyre | |
2011-02-22 | shut up unless -v, and a few minor enhancements. | Marc Espie | |
okay miod@ | |||
2011-02-09 | Set SO_KEEPALIVE on sockets. OK miod@. Also tested by landry@ | Todd C. Miller | |
"Makes sense" markus@ and "i don't see a reason not to" henning@ | |||
2011-01-26 | placeholder for future changes, as discussed with miod@ | Marc Espie | |
2011-01-10 | Back out rev 1.2 and use mkstemp(), not mktemp(). OK deraadt@ | Todd C. Miller | |
2010-12-13 | rename() is the atomic operation, unlink() is just there to create | Marc Espie | |
races between ldconfig and ld.so (simple commit, hours of bug hunt...) okay kettenis@, deraad@, miod@ | |||
2010-12-12 | Allocate a full C compiler-style stack frame that includes space for 6 | Mark Kettenis | |
extended word argument slots required by the ABI. Apparently gcc4 uses them in cases where gcc3 didn't. Fixes segmentation faults with gcc4 because the space for the slots was colliding with the space for dl_data that we allocated on the stack. ok miod@, drahn@ | |||
2010-12-07 | Make the preload error distinct from the normal error. | Dale Rahn | |
ok espie@ | |||
2010-11-16 | Fix error message when ld.so ends up loading a different than expected | Dale Rahn | |
library, but other library needs the one loaded. mostly ok kurt@ | |||
2010-11-11 | Remove commented out references to old kerberosIV libraries we do not | Miod Vallat | |
ship since ages. ok deraadt@ millert@ | |||
2010-10-30 | fix a 10 year old bug in the memory allocator, which affected only sparc. | Theo de Raadt | |
sparc has 4 byte long, but needs 8 byte alignment. recently the DIR struct was changed to contain some off_t, which needs 8 byte alignment. turns out the allocator calculated the bias for alignment, and then subtracted out it's private linkage storage afterwards. on hppa this worked because a 8-byte object can be loaded at a 4-byte boundary; on all other architectures the situation was either 4/4 or 8/8. thanks for a bit of help from drahn | |||
2010-10-29 | more nroff removal, with tweaks from (and ok) schwarze; | Jason McIntyre | |
2010-10-28 | Change basep parameter of getdirentries() to be off_t *, not long * | Todd C. Miller | |
so it works correctly with large offsets (and matches other systems). This requires adding a new getdirentries syscall, with the old one renamed to ogetdirentries. All in-tree consumers of getdirentries() have been updated. Bump libc and libpthread major numbers. OK and with deraadt@ | |||
2010-10-27 | Fix comment; no binary change. OK deraadt@ | Todd C. Miller | |
2010-10-27 | repair ;; | Theo de Raadt | |
2010-10-25 | Search loaded libs first and add support for SONAME matching. ok drahn@ | Kurt Miller | |
2010-10-25 | give a different error message for empty files, as they are obviously wrong | Marc Espie | |
2010-10-15 | Switch the remaining users of libdes in src to libcrypto, | Jonathan Gray | |
telnet portion partially from the latest heimdal. ok mikeb@ | |||
2010-10-13 | The heimdal code switched to using DES from libcrypto when 0.7.2 | Jonathan Gray | |
was imported over four years ago, so we don't need to link libdes for kerberos anymore. ok mikeb@ deraadt@ | |||
2010-10-06 | do not pass GREY entries to pf's spamd-white table if already TRAPPED. | Stephan A. Rickauer | |
Fixes pr/6467. (from boudewijn at indes dot com) - ok beck@ | |||
2010-09-11 | Fix lazy binding issue by making sure the second argument to _dl_find_symbol() | Mark Kettenis | |
always points to a pointer that is initialized to NULL. Consistently use NULL instead of mixing NULL and 0 to make the pattern more obvious. Fixes nm(1) crashes that happen when you pass it multiple object files on the command line. ok miod@ | |||
2010-09-03 | add EXIT STATUS for /usr/libexec; | Jason McIntyre | |
2010-09-01 | Oracle has re-licensed sunrpc under a three-clause BSD license. | Todd C. Miller | |
Update our sources appropriately. OK deraadt@ jsg@ | |||
2010-08-30 | Add missing network service name from /var/log/ftpd entries. | lum | |
ok and suggestion from jmc@ ok tobias@ | |||
2010-08-27 | In revision 1.14 of ftpd.c the ident variable was removed from its only ↵ | lum | |
meaningful usage when a snprintf call was removed, rendering ident useless. Time to remove remaining code. ok tobias@ | |||
2010-08-11 | Make _dl_searchnum signed as originally intended. | Dale Rahn | |
Pointed out by patrick keshish. | |||
2010-08-01 | Properly reset states when a login phase is interrupted by another one. | Tobias Stoeckmann | |
Prevents ftpd from letting regular users logging in during anonymous-only mode (-A). ok millert, ray | |||
2010-07-30 | Don't set "success" flags before error checks. | Ray Lai | |
Add check for login_getclass() failure, pointed out by tobias. OK tobias | |||
2010-07-13 | handle Tm, like in tiff2ps | Marc Espie | |
2010-07-13 | work around a strange problem in locality of @_ by copying stuff. | Marc Espie | |
okay millert@ | |||
2010-07-09 | don't print directly, use an interface that's similar enough to pkg_add | Marc Espie | |
print framework so that we'll be able to integrate with it better. ok millert@ | |||
2010-07-02 | Add Makefile.inc for hppa64 to aid in building cross tools. | Joel Sing | |
ok drahn@ kettenis@ | |||
2010-07-01 | When generating grpsym lists, avoid duplicates without searching the | Dale Rahn | |
already generated list. Speeds up startup on deeply nested dlopen binaries. ok guenther@, tested by ckuethe@ and ajacoutot@ | |||
2010-06-18 | Prevent a segmentation fault on ftpd_popen error (memory, file descriptor, | Tobias Stoeckmann | |
pipe ...) during status command. ok millert | |||
2010-06-13 | Adjust FTP reply codes (in error conditions) to conform to RFC 959. | Tobias Stoeckmann | |
ok millert, schwarze | |||
2010-06-07 | Fix a comment typo | Philip Guenthe | |