o no longer install passwd.conf (but it is used if it exists and the
needed info is not in login.conf)
o added passwordtime and minpasswordlen login.conf variables
Needed for cap_mkdb to really DRT when given several input files or
an output file with a different name from the input file.
cvs: ----------------------------------------------------------------------
"options edns0" in /etc/resolv.conf will enable the behavior. no behavior
change if you don't have the line. see resolv.conf(5) for more details.
EDNS0 is useful for avoiding TCP DNS queries/replies on larger DNS responses.
also, draft-ietf-dnsext-message-size-* plans to mandate EDNS0 support for DNS
clients that support IPv6 transport.
with two swapctl invocations.
Swap on block devices is enabled before fscking filesystems, swap on
files is enabled after all filesystems (including remote) are mounted.
licence in a way that makes ipf not free according to the rules we
established over 5 years ago, at www.openbsd.org/goals.html (and those
same basic rules govern the other *BSD projects too). Specifically,
Darren says that modified versions are not permitted. But software
which OpenBSD uses and redistributes must be free to all (be they
people or companies), for any purpose they wish to use it, including
modification, use, peeing on, or even integration into baby mulching
machines or atomic bombs to be dropped on Australia. Furthermore, we
know of a number of companies using ipf with modification like us, who
are now in the same situation, and we hope that some of them will work
with us to fill this gap that now exists in OpenBSD (temporarily, we
hope).
to #ifndef __cplusplus. It turns out there is code outside of libm
that wants to use this. I suppose that's why it is in math.h instead
of math_private.h ;-)
things like rm can't remove files with ridiculously long path names
that were created by some script kiddie trying in vain to exploit
something. Previously, the length was effectively constrained to
USHRT_MAX due to one of the internal structs. Also, nuke FTS_CHDIRROOT
since it never worked correctly and hasn't been documented for a
long time.
- remove extra subshells;
- use exec on terminal commands, avoiding dangling shells that don't
control anything.
More correct:
- use && some more;
- remove `-' in front of includes, so that failures WILL fail...
Okay millert@, deraadt@
deraadt