Commit Graph

827 Commits

Author SHA1 Message Date
christos
0e59802be5 Fail closed for NetBSD. If /etc/pam.d and /etc/pam.conf are missing, then
return PAM_SYSTEM_ERR. This is done by checking that chains have at least
one member.
2005-01-12 01:38:23 +00:00
lukem
c6f2cec0b0 include <isc/net.h> so that -UWANT_IPV6 compiles correctly. 2005-01-10 02:14:46 +00:00
lukem
a546e7bfc2 Fix compilation with -UUSE_INET6 2005-01-10 02:08:51 +00:00
christos
edd9734813 Fix debugging compilation. 2005-01-08 07:58:02 +00:00
martti
4ce4e7d229 Fixed ifdef logic 2005-01-04 12:36:02 +00:00
thorpej
a6336417c1 openpam_dynamic(): If the pathname provided is not an absolute pathname,
prepend PAM_SOPREFIX to the name before dlopen()'ing it.  On NetBSD, define
PAM_SOPREFIX as "/usr/lib/security/".
2005-01-03 17:21:48 +00:00
christos
36dcc3119d more size_t casts 2004-12-30 16:22:45 +00:00
martti
92ee66b8a1 Note also src/regress/sys/kern/ipf 2004-12-30 13:12:01 +00:00
darrenr
32b2d1458b undo this last change, it did match fil.c - bad me. 2004-12-30 12:07:07 +00:00
martti
34a5ffc74e Use src/sys/dist/ipf/netinet instead of src/sys/netinet 2004-12-30 10:09:32 +00:00
darrenr
760d20de7a the bitmask array in this file should be the same as the one in fil.c if
rules with v6hdr options are going to match packets.  this sorts the array
by incrementing value of the v6 option.
2004-12-30 08:29:09 +00:00
christos
28b908ca06 add size_t casts to silence up lint where size_t is unsigned long. 2004-12-30 02:25:51 +00:00
yamt
bc7b47989b a bug fix from OPENBSD_3_6.
> revision 1.2.2.1
> date: 2004/12/17 02:51:35;  author: brad;  state: Exp;  lines: +2 -2
> MFC:
> Fix by frantzen@
>
> &&/|| inversion would try to merge IP addresses with non-addresses into a
> single table causing a ruleset load error and eventually a double-free.
>
> ok deraadt@ mcbride@ henning@ frantzen@ dhartmei@
2004-12-19 10:27:46 +00:00
darrenr
f314fbb0f1 Expand out an unused byte to give each NAT rule a protocol version field,
allowing rules to be set to match only ipv4/ipv6. And so ipnat must be updated
to actually set this field correctly but to keep things working for old
versions of ipnat (that will set this to 0), make the ioctl handler "update"
the 0 to a 4 to keep things working when people just upgrade kernels.  This
forces NAT rule matching to be limited to ipv4 only, here forward, fixing
kern/28662
2004-12-16 17:01:02 +00:00
yamt
db6316d151 fix a merge botch. pointed by Pavel Cahyna. 2004-12-16 02:08:29 +00:00
pooka
47d5603068 don't build magic and doc in toolbuild => makes build work again 2004-12-14 16:56:56 +00:00
pooka
0127e87a6e regen with AM_MAINTAINER_MODE enabled to get rid of autoconfusion
rebuild mania
2004-12-14 16:08:01 +00:00
pooka
0e5822b090 seems like AM_MAINTAINER_MODE was disabled for this release;
re-enable it to avoid ./configure rebuild hell
2004-12-14 15:56:10 +00:00
pooka
8d312437e8 wage holy war on autoconf to attempt to make the toolbuild work
After receiving the magic 10-line incantation from Christos for
re-building the autoconf stuff, attempt to do so.  This might fix
the problem, or might not.  That is why this stuff is so fun.
2004-12-13 23:57:44 +00:00
pooka
f5200852b4 python has wriggled itself in here, yank it out to make the toolbuild work. 2004-12-13 10:43:39 +00:00
pooka
ebbb05cb75 munge conflicts 2004-12-13 10:35:03 +00:00
pooka
16e0e52b61 file 4.12
+ assorted bug fixes
+ switch to 2-clause license
2004-12-13 10:24:25 +00:00
christos
c7df97ab82 Another linted comment about empty macro decl. 2004-12-12 19:44:46 +00:00
christos
980de1e92d s/__function__/__func__/ 2004-12-12 08:29:56 +00:00
christos
80184d2e85 Add a linted comment for an unused variable 2004-12-12 08:16:41 +00:00
christos
a97ddb0609 s/__FUNCTION__/__function__/ 2004-12-12 08:06:42 +00:00
christos
a2078b09d1 - link set NetBSD changes from thorpej
- lint silencing comments
2004-12-12 06:19:35 +00:00
christos
78a16257c7 Lint silencing comments 2004-12-12 06:18:52 +00:00
christos
3c33f5d161 - unsigned char casts for ctype macros.
- lint silencing comments.
2004-12-12 06:18:17 +00:00
christos
d316c2d956 Don't look in /usr/local for pam configuration files. NetBSD does not
have them. XXX: maybe look in /usr/pkgsrc?
Unsigned char casts for ctype macros.
2004-12-12 06:17:31 +00:00
christos
e9803b264c prevent double-free by setting variable to NULL after it has been freed.
Avoids problem when shared library is not found during configuration.
2004-12-12 06:15:58 +00:00
christos
fe57a1b812 NetBSD specific link set changes. 2004-12-12 06:14:58 +00:00
christos
3c39f8e35c - add LINTED comments.
- prevent alarm of negative numbers.
- size_t lint casts
- avoid shadowing of variables.
2004-12-12 06:14:06 +00:00
christos
dead717d6a size_t cast for lint 2004-12-12 06:12:26 +00:00
christos
b73b054f62 import openpam "eelgrass" released on 20040210 2004-12-12 06:07:19 +00:00
christos
d1f40c5512 Make bpf use the cloning device 2004-12-01 23:51:36 +00:00
christos
f63af1b624 Use the cloning device if that is available 2004-12-01 23:49:27 +00:00
christos
9ab78e153b use /dev/bpf 2004-12-01 23:45:12 +00:00
christos
e9e8578a0e fix configure too. 2004-12-01 23:26:13 +00:00
christos
4d31f227c2 only mention /dev/bpf 2004-12-01 23:24:38 +00:00
christos
aad48c44a7 One bpf is enough. 2004-12-01 23:23:39 +00:00
christos
be07a6cfdb One bpf is enough 2004-12-01 23:22:42 +00:00
jmc
496146dda9 Work around the fact opaque_t gets defined by sys/properties.h and could be
pulled in via MD includes from sys/param.h.
2004-11-28 11:15:26 +00:00
wiz
b81f308085 Fix typo in formatting. 2004-11-27 23:23:26 +00:00
christos
ccc24aa67e fix merge botches. 2004-11-27 01:39:50 +00:00
christos
763bdaa346 Resolve conflicts. 2004-11-27 01:24:35 +00:00
christos
f8d5cae651 from 20040916 from ftp.am-utils.org 2004-11-27 01:00:29 +00:00
peter
f7da5a456d Apply a patch from the OPENBSD_3_6 branch, ok itojun.
MFC:
Fix by dhartmei@

do not assume entries in pf_timeouts[] are ordererd like PFTM_* in pfvar.h
reported by Alexey E. Suslikov
2004-11-21 18:01:14 +00:00
darrenr
f3736130c9 Fix a regression from 3.4 behaviour where the destination of a redirect rule
could be either a hostname or an IP address (now it can only be an IP#)
2004-11-21 03:44:59 +00:00
wiz
c1c81c7612 Sort options in usage, add missing "]" (OpenBSD v1.38). 2004-11-19 20:52:10 +00:00