deraadt
922be3177e
move a few more...
10 years ago
deraadt
a9853850aa
Place the first example into the /etc/examples directory, removing it
from the regular view. There will be many more soon.
Idea discussed for days with robert and ajacoutot
10 years ago
halex
71a03a2812
make dump support DUIDs for command line arguments and /etc/dumpdates (using
the new shiny -U switch)
dumpdates part originating from, and discussed with, Maximilian Fillinger
seems reasonable to krw@, "get it in" deraadt@
10 years ago
tedu
5bee4066ca
i'm a dumbdumb. fix build.
10 years ago
tedu
447cee822e
move all the feature settings to a common header.
probably ok beck jsing miod
10 years ago
schwarze
c401bdcc6b
Remove some duplicate directories.
This doesn't change the directory structure being defined.
ok deraadt@
10 years ago
deraadt
dea4f4f3ef
take the directories specified by BSD.local.dist, and add them into
4.4BSD.dist. The base set grows by a tiny amount, but we no longer
need to run chroot'd dynamic mtree from the installer.
ok espie halex schwarze
10 years ago
beck
2e9cadcb9c
Make sure we leave OPENSSL_NO_PSK in the conf files so things
can know...
ok jsing@
10 years ago
schwarze
6568bdd73e
Remove unused files.
Even though occasional commits did happen to these files, they still
specify directories like /usr/share/man/cat4/tahoe, /usr/include/pascal,
/usr/X11R4 and so on, so calling them "maintained" would seem a bold claim.
ok sthen@ henning@
10 years ago
schwarze
153370a16a
Trim down comments to those that are actually helpful for reading the file,
that is, only leave those after multiple .. and before multiple dir names.
While here, fix two comments that were actually wrong
and garbage collect one /set instruction that had no effect.
Saves 415 lines, which is 35% of the file.
ok sthen@ henning@
10 years ago
kettenis
78bf858a52
Add locking for __cxa_finalize() as it modifies the page permissions of the
__atexit tables and touches global variables. From Srinavasa Nagaraju
through Android/Elliott Hughes.
ok tedu@, guenther@
10 years ago
tedu
ae7f8bb30d
better document perils of setuid getenv and xr with issetugid
ok deraadt
10 years ago
tedu
beacb71783
as noted by google/android via kettenis, atexit handlers can install new
handlers. if this happens, restart the loop.
ok kettenis matthew millert miod
10 years ago
jasper
8533fe6f16
more missing rcs ids
"sure" deraadt@
10 years ago
jasper
66be215796
add rcs ids
ok deraadt@
10 years ago
espie
c31be0d10f
likewise for X, locate directory
10 years ago
espie
b30e570d12
do locatedb as part of the build process
"works for me" deraadt@
10 years ago
tedu
705f1bf46e
reduce obvious dependency on global g_pool by moving to local aliases
ok otto
10 years ago
naddy
33c9c303eb
rephrase the stpcpy() warning
new wording agreed by at least kettenis@ millert@ otto@
10 years ago
beck
97abe91297
Clean up after arc4random u_int32_t uint32_t change
ok jsing@
10 years ago
bcook
165f09edc7
changes to improve portability
ok beck@ deraadt@ jsing@ guenther@
10 years ago
reyk
7c7cb59da8
Update the default relayd.conf with the new filtering grammar.
OK benno@
10 years ago
halex
ebec654dde
I hate eval. Apart from when it's really needed.
Eval'ing constant expressions is not such a case.
"...fine with me" krw@
10 years ago
ajacoutot
a64ae366b4
Add a daemon_timeout variable for rc_wait().
It represents the maximum time in seconds to wait for the start, stop
and reload actions to return. Defaults to "30".
No default behavior is changed.
ok beck@ sthen@ jasper@ giovanni@
10 years ago
bcook
a3816c6eb6
remove unused variables getentropy for OS X
ok beck@
10 years ago
ajacoutot
1c92814c6f
White spaces.
10 years ago
miod
32c03af696
RSA_NULL used to be a compile option allowing the RSA interfaces to be
compiled-in, with nonfunctional code, to be able to cope with the RSA
patent.
However, we don't use this option, and the RSA patent has expired more than 10
years ago, so just drop this piece.
10 years ago
tedu
aeeeab9ec4
update _POSIX2_FORT_RUN, so that sysconf(_SC_2_FORT_RUN) remains correct.
because you care. reminded by matthew.
10 years ago
miod
892a9183d4
Remove undocumented _des_crypt() interface and its companion header file,
which had never been installed, so it's unlikely something ever used this
in the last 15~20 years.
ok deraadt@ jsing@ beck@
10 years ago
beck
91875b6d33
getentropy for osx and solaris. will be needed for a portable release
10 years ago
beck
b7e16f9d19
fix oops, accidental delete.. darn copying of files between machines
10 years ago
beck
8de43bf12f
j should be an int, like repeat
10 years ago
beck
287fe24a2f
unbreak last commit - but same intent, make re-seed less expensive
10 years ago
deraadt
bc5b290d46
repeat calls to getentrypy() with the same pid likely indicate reseeds.
Since we assume the PRNG above is doing "something old, something new"
folding, shortcut and do fewer repeats through the timing loop.
ok beck
10 years ago
sthen
b4ab69d3a0
don't clear tmux session sockets in daily(8)'s tmp cleanup, from Rafael Zalamena
ok schwarze@
10 years ago
deraadt
1a1b9e989b
sys/types.h rather than sys/param.h, where applicable. avoid overreach.
10 years ago
deraadt
d1fde0ca73
sort includes much more sensibly
10 years ago
deraadt
55d6095cc3
limits.h rather than sys/param.h
10 years ago
deraadt
b3e0f519ff
re-init and init code paths are now more shared, so the getpid()-based
portable code path must handle that; with brent cook
10 years ago
deraadt
df559b50e4
extra evil spaces snuck in over the last while
10 years ago
otto
08ecfcb5b8
Move to a smaller rbytes buffer and skip a random part. Not to
improve the random stream itself (it doesn't), but to introduce
noise in the arc4random calling pattern. Thanks to matthew@ who
pointed out bias in a previous diff, ok deraadt@ matthew@
10 years ago
deraadt
b6b255face
Add back an #ifndef MAP_INHERIT_ZERO chunk to support the old getpid()
mechanism, to aid in portability to other systems as requested.
ok matthew
10 years ago
deraadt
0dedf80951
fix HD() misuse; from brent cook
10 years ago
beck
344e312a56
AT_BASE returns us the *address* of the start of ld.so, so
use the address, not what it points to (which is always the same)
ok deraadt@
10 years ago
beck
aed4dc98fb
get the page of data at AT_SYSINFO_EHDR
ok deraadt@
10 years ago
beck
802d41544e
comment fixes from theo
10 years ago
beck
eaa7e91438
Possibly obtain a little bit of entropy from addresses returned
by getauxval if we have it.
ok deraadt@
10 years ago
beck
839b9ab79f
O_NOFOLLOW would be very nice to have here if the version of linux
we are running supports it.
from enh@google.com
10 years ago
sthen
20511ac3a4
ensure rc.d/nsd uses a correct exit code as per rc.subr(8); reported by
Ben Lovett, simpler diff from aja@
10 years ago
deraadt
db13a3eef8
document why we explicit_bzero
10 years ago