summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2002-07-10use arc4random() from libc instead of reading /dev/arandom; allows chroot; ↵Markus Friedl
ok henning@
2002-07-09make mod_alias work inside the chroot.Henning Brauer
2002-07-09detect memory failure; cloderTheo de Raadt
2002-07-09o Add _PATH_CRON_PID which is built up from PIDDIR and PIDFILE via stringTodd C. Miller
concatenation at compile time rather than run time. o Some minor cosmetic changes to simplify diffing.
2002-07-09o Rename clean_turds() in crontab.c to die() and just _exit(ERROR_EXIT)Todd C. Miller
instead of resetting the signal handler to SIG_DFL and redelivering. o Use kill(2) instead of raise(3) (which is just a wrapper)
2002-07-09I am getting sick of telling people to use the style of the code they changeTheo de Raadt
2002-07-09apache chroot and privilege drop.Henning Brauer
httpd will chroot itself into ServerRoot (/var/www) and drop root privileges now. This is enabled by default. Make sure to read httpd(8). help deraadt@ ssl mutex fixes beck@ "commit" deraadt@
2002-07-09mandoc, and doc the upcoming -u optionTheo de Raadt
2002-07-09We already did a closelog(); no need for it here.Todd C. Miller
2002-07-08minor cosmetic change to reduce diffsTodd C. Miller
2002-07-08Merge in some changes from Paul Vixie's tree; most are cosmeticTodd C. Miller
o ANSI function headers o return (foo) not return foo o add -oi to sendmail flags o update email address in man pages o make some strings const o completely remove globbing cruft from popen.c o whitespace changes o add DOW_STAR to flags for "monthly", "weekly", and "daily" cron entries
2002-07-08ANSITheo de Raadt
2002-07-08don't install Apache bench.Brad Smith
-- Idea from: Chad Loder <cloder@acm.org> via PR 2800 Ok'd by: deraadt@
2002-07-08actual signals; seb@todesplanet.deTheo de Raadt
2002-07-07enviroment -> environmentJan-Uwe Finck
2002-07-04Back out the previous revisionbrian
Objected to by: Andre Oppermann <oppermann@pipeline.ch> After Andre's objection, I've re-examined rfc 2759 and noted that it says that the domain name shouldn't be used when generating the NT-Response field. So it looks like the bug is in freeradius rather than in ppp.
2002-07-04support non-"objdir" build. From: David Krause <openbsd@davidkrause.com>Jun-ichiro itojun Hagino
2002-07-04correct udp-from-broadcast check. from <andre@ae-35.com>Jun-ichiro itojun Hagino
2002-07-04minor KNFTheo de Raadt
2002-07-04Fix off by one error found by aaron@; my fixTodd C. Miller
2002-07-03missing or incorrect checks for malloc failure; cloder@acm.orgTheo de Raadt
2002-07-03ansiTheo de Raadt
2002-07-03If we've given a domain name prefix as the authentication name, stripbrian
it off before passing it on to the RADIUS server for authentication.
2002-07-02Check malloc() return value; Chad LoderTodd C. Miller
2002-07-02Remove whitespace at eolbrian
2002-07-02Don't trust the MPPE key lengths passed back from the RADIUS server.brian
Instead, use the correct values based on the number of bits actually negotiated.
2002-07-02Remove some misleading/wrong diagnosticsbrian
2002-07-01license update of CMU parts. due to communication with wcw+@andrew.cmu.edu,Theo de Raadt
pushed for by tygs@netcologne.de. Apparently we also now known how to talk to the lawyers there, if we were so mad. Note that a few other copyright issues in pppd still remain, so this does not close this story.
2002-07-01Fix a FreeBSD specific latency problem.brian
2002-07-01typobrian
2002-07-01Don't allow the use of MPPE with RADIUS unless the RADIUS server has providedbrian
keys.
2002-07-01Handle mis-formatted messages from RADIATOR (now fixed in RADIATOR)brian
2002-07-01Spellingbrian
2002-07-01typo.Brad Smith
-- PR 2781
2002-07-01Add a call to tzset() so we don't need /etc/localtime in the chroot jail.Todd C. Miller
2002-06-29IPPROTO_ICMP will not change in our life; itojun okTheo de Raadt
2002-06-29make -I and -P exclusive; constrain -p and -P to their respective maximums;Theo de Raadt
itojun ok
2002-06-29check -p out of range. sync w/kame, hint from deraadtJun-ichiro itojun Hagino
2002-06-29ansiTheo de Raadt
2002-06-28minor KNFTheo de Raadt
2002-06-28Don't use SignalBundle if it's not setbrian
Submitted by: Federico G. Schwindt <fgsch@olimpo.com.br>
2002-06-27Document why it's static.Artur Grabowski
2002-06-27%d/%u mixupJun-ichiro itojun Hagino
2002-06-27boundary check in IPv4/v6 mapped address case (affects dig(1)).Jun-ichiro itojun Hagino
from jimpa@tla.se
2002-06-26correct bad practice in the code - it uses two changing variablesJun-ichiro itojun Hagino
to manage buffer (buf and buflen). we eliminate buflen and use fixed point (ep) as the ending pointer. this fix is NOT critical.
2002-06-26avoid remote buffer overrun on hostbuf[]. From: Joost Pol <joost@pine.nl>Jun-ichiro itojun Hagino
correct bad practice in the code - it uses two changing variables to manage buffer (buf and buflen). we eliminate buflen and use fixed point (ep) as the ending pointer. this fix is critical.
2002-06-25Minor fixes, including duplicate and missing words; Brian PooleTodd C. Miller
2002-06-25hooks for options.Henning Brauer
we don't support setting pf options via authpf, but need the hooks here, too. ok dhartmei@, kjell@
2002-06-24Fix more example rulesDaniel Hartmeier
2002-06-24When the man page contains such obvious stupid TRIVIAL bugs as thisTheo de Raadt
which I am fixing, it makes me wonder why the hell is the shown example not something that someone has actually TRIED? Is it not possible people are yammering so much about it on the mailing lists about problems because the people who wrote this don't even check if the man page is CORRECT? But No! Instead of fixing it, the they get email replies on the damned mailing list, and 8 hours later, someone ELSE pipes up with another problem! Why don't you lame asses take responsibility for the problem at hand, CHECK IF THE MAN PAGE IS RIGHT, and instead of replying to the people who post, instead JUST FIX THE DOCUMENTATION PROBLEMS? Or should I remove authpf before you get the idea?