Commit Graph

57 Commits

Author SHA1 Message Date
mrg 077acf5088 remove unsafe calls to strcpy(), strcat(), and sprintf(). some KNF. 1996-12-09 09:57:40 +00:00
explorer 37449d45b0 Fix the get-a-shell hole, even if we are not currently open to that attack.
(1.2 release is, however, and this should be pulled up and released ASAP)

The previous version (1.11) checked into current limits the duration of
setuid-root periods much more than the 1.2 released version does, so the
attacker DID get a shell, but it was not a root shell.
1996-10-25 22:07:53 +00:00
perry d8e1329af8 close out pr 2771, which added a -s ("secure") flag to lpd -- makes
lpd run in a mode where the it listens only to the local unix domain
socket and not to the network. Changes are similar but not identical
to the supplied patches.
1996-09-21 15:57:21 +00:00
explorer 66917416dd Fix printing over non-root-exported NFS at least.
The problem here is setuid(euid) is used far too much.  Since I removed
many of these calls, and added no new ones, I do not think this weakens
security.  In fact, it quite likely improves it quite a bit, since
access() is called as the real userid, and the file is opened for printing
as the real userid rather than the (setuid-root) effective one.
1996-08-10 20:09:19 +00:00
jtc d7eb41bd8e Changed to not use a compiled in table of baud rates. Evidently
there are some PC/Mac oriented devices that use non-standard speeds,
furthermore that's just not the way we do things anymore.

"Bad" baud rates are no longer caught with their own error message,
but the condition will still be diagnosed when the tcsetattr() fails.
1996-06-30 23:55:49 +00:00
pk fee478451f `/dev/printer' => `/var/run/printer' (PR#2552).
Also, change `.Os 4.2' => `.Os 4.4' (this man page is from 4.4 lite), and
for now, refer to the "BSD 4.3 Line printer manual", because that is what
we now have in lpr/SMM.doc (SMM.doc needs updating too).
1996-06-16 22:36:59 +00:00
jtc 678bd1b2eb Use XS, not XC, flags when setting tty flags.
From Brook Milligan <brook@trillium.nmsu.edu>.
1996-04-30 00:07:00 +00:00
mrg d28f8743af Stylistic changes. 1996-04-24 14:54:06 +00:00
jtc cac62b2d65 Be pedantic, main() returns int in C. 1996-03-21 17:56:15 +00:00
hpeyerl 8c4481f80c More descriptive message for printer status. Addresses PR #509. 1996-01-14 17:25:21 +00:00
pk 3cf040d518 Fix typo (Noriyuki Soda; PR#1926). 1996-01-13 23:18:15 +00:00
jtc 21908ddbd5 merge in changes from 1.1 release branch 1995-11-28 19:43:04 +00:00
pk a29aff2565 Id -> NetBSD 1995-11-15 22:55:41 +00:00
pk f54b84516b Add RCSIDs 1995-11-15 22:48:07 +00:00
pk b965d4ffe4 Add RCSIDs 1995-11-15 22:27:27 +00:00
pk f93236c806 Add RCSIDs. 1995-11-15 22:23:06 +00:00
pk 0e9c04fab0 Fix garbled lines (from Thomas Eberhardt; PR#1756).
Add RCSId.
1995-11-15 22:20:33 +00:00
mycroft 49d5e89682 Update from kernel source. 1995-10-05 08:58:21 +00:00
mycroft 1e1d370eec Fix typos. 1995-10-05 08:23:18 +00:00
mycroft 2347ccba1b Fix various parity and character size bugs from the termios transition. 1995-10-05 08:20:20 +00:00
mycroft fde6ad0815 Fix a couple of things broken in the termios transition. 1995-10-05 08:01:29 +00:00
mycroft dfd0b8b273 Fix type errors. 1995-10-05 07:47:32 +00:00
mycroft 0231229adc Fix typo in previous. 1995-10-05 07:42:30 +00:00
mycroft 780c7fbe39 Change to use SET(), CLR(), and ISSET() macros. 1995-10-05 07:39:39 +00:00
hpeyerl 8e41ca8016 -- convert sgtty to termios. From: Scott Bartram <scottb@iis.net>
-- Use seteuid() to only give lpr, lprm, lpq and lpc root when they
   need it from matthew green <mrg@mame.mu.oz.au>
1995-10-03 15:02:17 +00:00
jtc a0e044841b Use consistant style of quotes; PR #1194 1995-07-07 22:26:11 +00:00
mycroft abd8200176 Reset group list before execing child, as pointed out by Mike Pritchard. 1995-04-14 19:23:43 +00:00
cgd d8806814a6 specify man pages the new way. 1994-12-22 11:32:57 +00:00
pk d88e845b42 Correct character array declaration (bug-report bin608). 1994-12-11 16:07:22 +00:00
cgd 138fcd8327 deal with new share/doc strategy 1994-06-30 05:33:30 +00:00
cgd 5b029eb9a8 update for new doc-make/install strategy 1994-06-25 05:57:47 +00:00
cgd 3e603ff386 clean up that import. no rcsids yet. 1994-05-18 01:26:07 +00:00
mycroft fc871868c1 Clean up deleted files. 1994-05-18 01:26:05 +00:00
cgd f881d1d4fe clean up that import. no rcsids yet. 1994-05-18 01:25:37 +00:00
mycroft 2f2adba37a Clean up deleted files. 1994-05-18 01:25:36 +00:00
cgd 2847add277 clean up that import. no rcsids yet. 1994-05-18 01:25:21 +00:00
mycroft ec7c1628df Clean up deleted files. 1994-05-18 01:25:20 +00:00
cgd 9c7878f37d clean up that import. no rcsids yet. 1994-05-18 01:25:17 +00:00
cgd 64c78025ff lpr from 4.4-Lite 1994-05-18 01:12:10 +00:00
cgd 73a5ffdf98 need unistd.h 1994-05-18 00:54:02 +00:00
cgd 725ed31e82 copyright foo 1994-05-17 04:13:48 +00:00
cgd 44570762a9 header file foo 1994-04-21 18:53:47 +00:00
cgd ea2217de0a off_t exp. 1994-03-27 09:13:06 +00:00
cgd d3c09b81a7 fix from John F. Woods <jfw@ksr.com>: don't clobber page width specified
in printcap file.
1994-03-07 05:38:21 +00:00
cgd 080c5b9220 Fix for symlink-related security hole. from comp.security.unix. 1994-03-07 04:07:52 +00:00
cgd 5b823d2a09 don't need -lutil 1994-01-28 00:52:03 +00:00
jtc 2a4121e39d Fix spelling errors 1994-01-14 16:22:25 +00:00
jtc 3ccb82400b Upgraded to use <dirent.h>. 1993-12-08 00:47:01 +00:00
cgd d29e38973e bzero structs before using; fix from theo 1993-11-10 04:36:04 +00:00
mycroft e9d867ef50 Add RCS identifiers. 1993-08-01 17:54:45 +00:00