giovanni
3b625a67be
Tell security(8) how to check npppd(8) configuration files
11 years ago
jmc
e21741f91f
correct path for op.me; from J??r??mie Courr??ges-Anglas
ok millert
11 years ago
deraadt
4154a395ca
the world has changed, and identd is now less important. turn it off by
default.
ok guenther millert
11 years ago
deraadt
4337331ee4
RAMDISKC wil be needed for alphabook1
11 years ago
sobrado
5b485617f6
comment out example code.
ok mikeb@
11 years ago
miod
a9366630a7
Add a commented out machdep.led_blink entry for DEC 3k systems.
11 years ago
guenther
d274f83381
Adds the (somewhat silly) _CS_V[67]_ENV and _CS_POSIX_V[67]_* defines
to <unistd.h> and confstr(3) per POSIX 1003.1-2008
Change confstr(_CS_PATH) to operate directly instead of calling sysctl(3)
ports build tested by espie@
11 years ago
guenther
7cc976045a
Add _POSIX_CLOCKRES_MIN and _POSIX2_CHARCLASS_NAME_MAX per POSIX 1003.1-2008
ports build tested by espie@
11 years ago
guenther
46fc691d3b
Fix typo that hid PASS_MAX, TMP_MAX, NL_NMAX, and _XOPEN_{IOV,NAME,PATH}_MAX
defines.
ok deraadt@ millert@
11 years ago
ajacoutot
c7e527023d
Add 106/tcp (pop3pw/poppasswd) to the unofficial services list.
ok sthen@ deraadt@
11 years ago
halex
2c9096e015
Add a 'block' rule prior to the state creating 'pass' rule. This
way, TCP packets of e.g. timed out states are blocked rather than
passed by the implicit default pass rule.
sthen@ benno@ phessler@ mikeb@ agrees
11 years ago
ajacoutot
3784399e83
regen
11 years ago
ajacoutot
f45502a471
Increase default number of ldoms to 8 (+ 8 virtual consoles and 16
virtual disks).
input and ok kettenis@
11 years ago
ajacoutot
c5f5ee0d92
There is no /usr/libexec/uucp/uucico in base; uucico (8) is provided by
the net/uccp package and is installed under /usr/local/. Since we don't
want a shell that default to /usr/local/..., use /sbin/nologin.
The uucp package will automatically change to the correct shell on
pkg_add / pkg_delete.
idea from and ok miod@
11 years ago
halex
e03b25c53f
Make sure new config is valid before SIGHUP'ing sshd, which would
otherwise just kill it.
ok ajacoutot@ djm@ pirofti@, quite some time ago
11 years ago
gilles
b8be040212
fix memleak in imsg_read() when hitting the fd reserve check
ok millert@, mikeb@, lteo@
11 years ago
phessler
128fa55f11
rev 1.318 made this MI parallel-make clean, however it inadvertantly
changed the build order.
Have release-sets depend on the kernels target, which restores the
order.
OK espie@
11 years ago
miod
c30e660aed
welcome to 5.3-BETA
11 years ago
yasuoka
98b8fc6c05
regen
12 years ago
yasuoka
55625a2334
Create /dev/pppx by default.
12 years ago
brad
75abb31084
Add support for POSIX.1-2008 functions dprintf(3) and vdprintf(3).
Feedback from millert@ guenther@
OK guenther@ man page bits OK jmc@
12 years ago
claudio
d42b8f001d
Give an example of how to increase the state limit. The 10k limit is too
small for production servers now that pf is on by default.
OK phessler@
12 years ago
gilles
e7c79ed63b
update smtpd.conf, map API gone and replaced with table API
12 years ago
ajacoutot
8ef813d63b
Do not allow stopping/restarting mountd using the rc.d(8) framework;
if there is need to send a SIGTERM to mountd(8), it should be done
manually as there is too much involved with RPC daemons to make it
automagic.
ok beck@
12 years ago
martynas
b74edb3b39
Don't pull <math.h> just because it can return HUGE_VAL in the
corner cases. OK millert@.
12 years ago
miod
0ec4ae37af
typo
12 years ago
deraadt
f46b14faba
backout atactl check; I had warned that this would try a lot of code
paths which are rarely tried. Problem reported by a few on the list.
12 years ago
gonzalo
2a04a9080d
sync; new IPv4 address for d.root-servers.net
Ok sthen@
12 years ago
schwarze
eb4ad4a3ee
Do not mail out diffs of the /etc/moduli file.
They are not interesting, but they are annoying during system upgrades.
ok sthen@ ajacoutot@ henning@ dtucker@
12 years ago
otto
09a0be7c23
Fix bug in random offset introduced in rev 1.143; random range was
expanded, but not enough due to precedence error. Spotted by Thorsten Glaser.
12 years ago
kettenis
91c79ef483
regen
12 years ago
kettenis
0168a455d6
Tweak to generate a better man page.
12 years ago
kettenis
9627172898
regen
12 years ago
kettenis
20fe1a4803
Make it easier to create more /dev/ldomN devices. As a bonus this stops
polluting ramdisks with devices that aren't needed there.
12 years ago
reyk
d1b4498645
Fix a purely theoretical NULL-pointer dereference in the case that we
would be able to receive multiple SCM_RIGHTS messages.
ok claudio@ gilles@
12 years ago
ajacoutot
f5caaea18e
Add a SMART check using atactl(8) against disks that support and have
SMART enabled.
Committing now so that it gets broader testing.
Man page bits will be added once we are confident there is no side
effect and this can stay.
inputs from sthen@ halex@ weerd@
ok deraadt@
12 years ago
kettenis
2257990f91
regen
12 years ago
kettenis
6a717f49f6
Add /dev/vdsp[0-7].
12 years ago
deraadt
f0e9631687
Remove excessive sys/cdefs.h inclusion
ok guenther millert kettenis
12 years ago
rpe
5fcaf72d6d
remove "Invalid interface name" message
requested by krw@
ok halex@
12 years ago
jmc
d90446f777
no need for .Pp before lists;
12 years ago
millert
3e820c77a4
Rewritten posix_openpt manual that doesn't include any of the POSIX
text. OK deraadt@
12 years ago
millert
f9cb15e68c
Use "path name" not "pathname".
12 years ago
mpi
ad4f1cd9b2
sync
12 years ago
mpi
9662039c95
Add agp node
12 years ago
millert
4606f10eb9
Simple emulation of POSIX pty APIs posix_openpt(), ptsname(),
grantpt() and unlockpt() using /dev/ptm. Man pages from FreeBSD.
OK kettenis@ deraadt@ beck@ ajacoutot@ naddy@
12 years ago
rpe
a78a8d94ea
use the more compact version of the check for ifconfig'able interfaces
from install.sub
with feedback from and ok halex
12 years ago
rpe
d83e309127
- remove isalphanumeric() and replace it with a shell pattern, that
tries a bit harder to identify invalid interface names and in
this case emit an error message.
- use [[ $1 == autoboot ]] to avoid a shell error message due to
possible spaces in first argument
- no change in functionality
discussed with krw and halex
ok ("I like this") krw
12 years ago
stsp
352d8c5bf0
Document a known bug in the DES crypt cipher implementation which we're
not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).
12 years ago
guenther
2ca690c613
Change scandir()'s 'select' argument from
int (*)(struct dirent *)
to
int (*)(const struct dirent *)
to match POSIX.
ok millert@, ports check by naddy@
12 years ago