FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F4.5.0_cvs 2002-02-04T19:23:45Z 2002-02-04T19:23:45Z cvs2svn cvs2svn@FreeBSD.org 2002-02-04T19:23:45Z urn:sha1:7ca1cecc77997d9e8c4faef8b7015619c9d9c21d 'RELENG_4_5_0_RELEASE'. This commit was manufactured to restore the state of the 4.5-RELEASE image. Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs. 1999-08-28T01:35:59Z Peter Wemm peter@FreeBSD.org 1999-08-28T01:35:59Z urn:sha1:97d92980a96a50750844f420cc225ddf918f0699 1998-07-15T11:56:28Z Dag-Erling Smørgrav des@FreeBSD.org 1998-07-15T11:56:28Z urn:sha1:19111ad38160beefc83ac2e956bebf6a3ba695af 1997-10-29T07:25:05Z Philippe Charnier charnier@FreeBSD.org 1997-10-29T07:25:05Z urn:sha1:988345234d99a627568e5af317ec20f67f39552b 1997-02-22T16:15:28Z Peter Wemm peter@FreeBSD.org 1997-02-22T16:15:28Z urn:sha1:476602a9d0b9041b42a108349dc58a4ca6bf4223 1997-01-14T07:20:47Z Jordan K. Hubbard jkh@FreeBSD.org 1997-01-14T07:20:47Z urn:sha1:1130b656e5fe4c2d1ba299e024d1b40eaeebd380 This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise. 1997-01-06T06:27:55Z Bill Paul wpaul@FreeBSD.org 1997-01-06T06:27:55Z urn:sha1:cb73ffc8b7709c026871cb29fe96f642bce2fd63 slashes in map names but doesn't return failure if it finds them. Add missing return(1) to fix this. 1996-10-24T18:58:26Z Bill Paul wpaul@FreeBSD.org 1996-10-24T18:58:26Z urn:sha1:4451976029159d285d7682f0740d07cb10cb94c1 any maps that may have them. If the YP_SECURE key is present, ypserv will only allow access to the map from clients on reserved ports. If the YP_INTERDOMAIN key is present, the server will do DNS lookups for hostnames that it can't find in hosts.byname or hosts.byaddr. This is the same as the -d flag (which is retained for backwards compatibility) but it can be set on a per-map/per-domain basis. Also modified /var/yp/Makefile to add YP_INTERDOMAIN to the hosts.* maps and YP_SECURE to master.passwd.* maps by default. 1996-09-30T22:27:00Z Bill Paul wpaul@FreeBSD.org 1996-09-30T22:27:00Z urn:sha1:42c703633d422d510ee2b84ee278c23c794ef170 have it check to see that it doesn't contain any '/' characters. This prevents possible silliness like ypcat "../../../kernel". We already test the domain name for this in yp_validdomain(), and ypserv itself tests the map name in yp_open_db(), but it doesn't hurt to be paranoid and test for it in the generic access routine too. rpc.ypxfrd does not test the map name for slashes, but it does call yp_access() with the map name, so this removes a potential vulnerability from there. Also make the tests for IPPORT_RESERVED a little more selective: make sure it trips when map == master.passwd.*, prog == YPPROC and proc == YPPROC_XFR, and prog == YPXFRD_FREEBSD_PROG and proc == YPXFRD_GETMAP. Also use IPPORT_RESERVED instead of hard-coded value. 1996-06-05T02:01:31Z Bill Paul wpaul@FreeBSD.org 1996-06-05T02:01:31Z urn:sha1:b3e932340dfea2508fbbc4f8fa226b922970c073 - Add a 'pushpw' target that only yppushes the various passwd maps and sends a YPPROC_CLEAR to the local ypserv. This will be used by rpc.yppasswdd once I merge in the in-place update changes. yp_access.c: - Make the yp_access() function print RPC program and procedure numbers that it doesn't know about in literal form. This will allow it to work with other prgrams that it doesn't know about, like rpc.ypxfrd I'm going to import shortly. yp_dblookup.c: - Take out the __inline keywords. They weren't really helping me anyway. - Somehow I broke yp_next() when DB_CACHE wasn't #defined. Fix it. - Also fix potential case where yp_next() might loop forever; make sure it checks the return values of all the (dbp->seq)()/R_NEXT calls that it does as well as comparing keys.