| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
MAC labels are set if MAC is enabled and configured for the user
logging in.
Note that lukemftpd is not considered a supported application when
MAC is enabled, as it does not use the standard system interfaces for
managing user contexts; if lukemftpd is used with labeled MAC policies,
it will not properly give up privileges when switching to the user
account.
Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=105877
|
| |
|
|
| |
Notes:
svn path=/head/; revision=105847
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
than the LOMAC-specific interfaces for listing MAC labels. This permits
ls to view MAC labels in a manner similar to getfmac, when ls is used
with the -l argument. Next generation LOMAC will use the MAC Framework
so should "just" work with this and other policies. Not the prettiest
code in the world, but then, neither is ls(1).
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=105832
|
| |
|
|
|
|
|
| |
Reviewed by: peter
Notes:
svn path=/head/; revision=105753
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
before referencing object's DAG. This makes it possible for
C++ exceptions to work across shared libraries and brings
us closer to the search order used by Solaris/Linux.
Reviewed by: jdp
Approved by: obrien
MFC after: 1 month
Notes:
svn path=/head/; revision=105492
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
even if there was no error occured (when trying to dlopen(3) object that
already linked into executable which does dlopen(3) call). This is more
proper fix for `ldd /usr/lib/libc.so' problem, because the new behaviour
conforms to documentation.
Remove workaround from ldd.c (rev.1.32).
PR: 35099
Submitted by: Nathan Hawkins <utsl@quic.net>
MFC after: 1 week
Notes:
svn path=/head/; revision=105439
|
| |
|
|
|
|
|
| |
MFC after: 3 days
Notes:
svn path=/head/; revision=105041
|
| |
|
|
|
|
|
| |
MFC after: 3 days
Notes:
svn path=/head/; revision=105040
|
| |
|
|
|
|
|
| |
MFC after: 2 weeks
Notes:
svn path=/head/; revision=105039
|
| |
|
|
| |
Notes:
svn path=/head/; revision=104954
|
| |
|
|
| |
Notes:
svn path=/head/; revision=104742
|
| |
|
|
|
|
|
| |
Reviewed by: jake, mike
Notes:
svn path=/head/; revision=104724
|
| |
|
|
| |
Notes:
svn path=/head/; revision=104385
|
| |
|
|
|
|
|
| |
with another function by the same name in a system header.
Notes:
svn path=/head/; revision=104384
|
| |
|
|
| |
Notes:
svn path=/head/; revision=104376
|
| |
|
|
| |
Notes:
svn path=/head/; revision=103949
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
under way to move the remnants of the a.out toolchain to ports. As the
comment in src/Makefile said, this stuff is deprecated and one should not
expect this to remain beyond 4.0-REL. It has already lasted WAY beyond
that.
Notable exceptions:
gcc - I have not touched the a.out generation stuff there.
ldd/ldconfig - still have some code to interface with a.out rtld.
old as/ld/etc - I have not removed these yet, pending their move to ports.
some includes - necessary for ldd/ldconfig for now.
Tested on: i386 (extensively), alpha
Notes:
svn path=/head/; revision=103436
|
| |
|
|
|
|
|
| |
crashing.
Notes:
svn path=/head/; revision=103315
|
| |
|
|
|
|
|
|
| |
PR: 40717
Submitted by: Andrew <andrew@ugh.net.au>
Notes:
svn path=/head/; revision=102604
|
| |
|
|
| |
Notes:
svn path=/head/; revision=102566
|
| |
|
|
|
|
|
|
| |
Submitted by: maxim
MFC after: 5 days
Notes:
svn path=/head/; revision=102565
|
| |
|
|
| |
Notes:
svn path=/head/; revision=102474
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
o Don't free(3) memory occupied by host structures
already in the host list.
o Set hrp->hostinfo to NULL if a host record has to stay in
the host list, but is to be ignored. Selecthost() knows that.
o Reduce the pollution with excessive NULL checks.
o Close a couple of memory leaks.
MFC after: 1 week
Notes:
svn path=/head/; revision=102473
|
| |
|
|
|
|
|
|
| |
Submitted by: kris
MFC after: 3 days
Notes:
svn path=/head/; revision=102469
|
| |
|
|
| |
Notes:
svn path=/head/; revision=102411
|
| |
|
|
|
|
|
|
| |
Submitted by: maxim
MFC after: 1 week
Notes:
svn path=/head/; revision=102311
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
for the DT_IA64_PLT_RESERVE dynamic table entry. When a shared object
does not have any PLT relocations, the linker apparently doesn't find
it necessary to actually reserve the space for the BOR (Bind On
Reference) entries as pointed to by the DTE. As a result, relocatable
data in the PLT was overwritten, causing some unexpected control flow
with annoyingly predictable outcome: coredump.
To reproduce:
% echo 'int main() { return 0; }' > foo.c
% cc -o foo foo.c -lxpg4
Notes:
svn path=/head/; revision=102249
|
| |
|
|
|
|
|
| |
Reviewed by: jdp
Notes:
svn path=/head/; revision=102235
|
| |
|
|
|
|
|
|
|
|
|
|
| |
o check getaddrinfo(3) return value, not result pointer
o getaddrinfo(3) returns int, not pointer
o don't leak memory allocated for hostnames and hostinfo structures
o initialize pointers that will be checked for NULL somewhere
MFC after: 1 week
Notes:
svn path=/head/; revision=102183
|
| |
|
|
|
|
|
|
|
| |
This relocation creates a function descriptor at the specified
address and is commonly used for C++ to create virtual function
tables.
Notes:
svn path=/head/; revision=102155
|
| |
|
|
|
|
|
| |
pollution in <kvm.h>.
Notes:
svn path=/head/; revision=102069
|
| |
|
|
| |
Notes:
svn path=/head/; revision=101960
|
| |
|
|
| |
Notes:
svn path=/head/; revision=101828
|
| |
|
|
|
|
|
| |
MFC after: 3 days
Notes:
svn path=/head/; revision=101809
|
| |
|
|
|
|
|
|
|
|
| |
want it for some other service-running program.
Approved by: markm
MFC after: 1 week
Notes:
svn path=/head/; revision=101808
|
| |
|
|
|
|
|
|
|
|
|
| |
o PORT takes six byte values, not five.
o TYPE argument is mandatory.
Submitted by: demon (the 1st part)
MFC after: 3 days
Notes:
svn path=/head/; revision=101806
|
| |
|
|
| |
Notes:
svn path=/head/; revision=101785
|
| |
|
|
| |
Notes:
svn path=/head/; revision=101783
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
(I skipped those in contrib/, gnu/ and crypto/)
While I was at it, fixed a lot more found by ispell that I
could identify with certainty to be errors. All of these
were in comments or text, not in actual code.
Suggested by: bde
MFC after: 3 days
Notes:
svn path=/head/; revision=101677
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
o Remove the race between stat(2) & fopen(3) when creating
a unique file.
o Improve bound checking when generating a unique name from
a given pathname.
o Ignore REST marker on APPE. No RFC specifies this case,
but the idea of resuming APPE's implies this.
o By default, deny upload resumes and appends by anonymous users.
Previously these commands were translated to STOU silently,
which led to broken files on server without any notification
to the user.
o Add an option, -m, to allow anonymous users to modify
existing files (e.g., to resume uploads) if filesystem
permissions permit.
Portions obrainded from: OpenBSD
MFC after: 3 weeks
Notes:
svn path=/head/; revision=101537
|
| |
|
|
|
|
|
|
|
|
|
| |
objects' reference counts. This function is called by the atexit
mechanism at program shutdown. I don't think the locking is necessary
here. It caused OpenOffice builds to hang more often than not.
Credit to Martin Blapp and Matt Dillon for helping to diagnose this
problem and for testing the fix.
Notes:
svn path=/head/; revision=101532
|
| |
|
|
|
|
|
|
|
|
|
| |
2) Remove unneeded "if not NULL" props from "pathstring",
which will never be NULL by the lexer design.
Inspired by: OpenBSD
MFC after: 1 week
Notes:
svn path=/head/; revision=101395
|
| |
|
|
|
|
|
|
|
|
|
| |
glob(3) will return at least one pathname unless
a system error has occured. It's not a "not found"
error otherwise.
MFC after: 3 days
Notes:
svn path=/head/; revision=101380
|
| |
|
|
|
|
|
|
|
|
|
| |
for NULL. The "pathname" rule may return NULL
on a glob(3) error.
Obtained from: OpenBSD
MFC after: 1 week
Notes:
svn path=/head/; revision=101379
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Earlier, a decimal number (e.g., 890) could be passed
for mode, leading to dangerous permissions set:
-1, that is, 07777.
Obtained from: OpenBSD
MFC after: 1 week
Notes:
svn path=/head/; revision=101378
|
| |
|
|
|
|
|
|
|
| |
requests against large files will be denied.
MFC after: 10 days
Notes:
svn path=/head/; revision=101376
|
| |
|
|
|
|
|
|
|
|
|
| |
This eliminates an opportunity for DoS attack.
Pointed out by: maxim
Inspired by: lukemftpd, OpenBSD
MFC after: 2 weeks
Notes:
svn path=/head/; revision=101034
|
| |
|
|
|
|
|
|
|
| |
to a successful MKD command.
MFC after: 1 week
Notes:
svn path=/head/; revision=100878
|
| |
|
|
|
|
|
|
|
|
| |
(as it was intended initially)
and document it in the manpage.
MFC after: 2 weeks
Notes:
svn path=/head/; revision=100720
|
| |
|
|
|
|
|
|
|
| |
(which has been there at least since 4.4BSD-Lite!)
MFC after: 2 weeks
Notes:
svn path=/head/; revision=100719
|