Commit Graph

3813 Commits

Author SHA1 Message Date
itojun 55108de1d4 remove debug printf(). 2000-07-16 08:13:34 +00:00
itojun aa16ae57f1 fatal typo: need listen(tcp6sock). 2000-07-16 08:11:34 +00:00
itojun 06ee23e6b3 sync with latest kame.
- remove obsolete non-advanced-api support.
- if a routing entry exists for aggregate prefix (-A), do not overwrite
  the routing entry (exit with error).
2000-07-15 04:55:40 +00:00
mason 662fbfe2f1 Removed redundant / extra prototypes. 2000-07-12 22:36:12 +00:00
ad a90951c0f1 Xr newsyslog. 2000-07-11 12:43:50 +00:00
itojun 608c7038b1 sync with latest kame. wording and .Nm/.Xr clearifications. 2000-07-10 08:58:31 +00:00
mellon 803abd7fc5 Actually fix a bug I thought I'd alread fixed 2000-07-09 07:04:10 +00:00
itojun f85b415274 sync with more recent kame.
- fix memory leak with realloc()
- warn if we see packets with junk outside of IPv6 prefix length
- cosmetic
2000-07-09 03:06:18 +00:00
mellon f1157334e4 Oops, fix one more conflict. 2000-07-08 20:53:57 +00:00
mellon d1340e80d6 Fix conflicts in latest import. 2000-07-08 20:52:11 +00:00
mellon f1127576c6 Latest revision of the ISC DHCP Distribution, with many bug fixes. 2000-07-08 20:40:10 +00:00
itojun b44d184dec permit square-bracket notation (as in RFC2732) for the first element
in inetd.conf.  otherwise, we'll have (minor) problem putting IPv6 address in.
sync with kame.

[::1]:ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -ll
2000-07-08 01:55:24 +00:00
itojun bbef2fbaac errx?/warnx? audit. do not pass variable alone, use %s. idea from openbsd 2000-07-07 15:10:32 +00:00
itojun 7bf16d3ecc explicitly check if the address family is supported, by using socket(2). 2000-07-07 14:56:45 +00:00
enami 2fffbc9c4c No space is allowed between owner and optional :group. 2000-07-07 13:21:32 +00:00
itojun fed1a1bf38 warnx?/errx? audit (don't pass variable alone). from openbsd. 2000-07-07 12:22:32 +00:00
itojun 7ebfc079d9 syslog() audit - do not use it with a variable alone. from openbsd 2000-07-07 11:39:41 +00:00
hubertf 0379a1727a remove/hide some debugging code 2000-07-06 16:06:36 +00:00
itojun 19a4d0910c sync with sys/netinet/icmp6.h change (no bitfield for router renumber).
more logging.  improve error handling/garbage collection.  sync with kame.
2000-07-06 12:37:56 +00:00
enami 3268786888 - Process all passed option rather than ignoring silently except the first one.
- Centerize the check whether an interface is specified.
- Print maximum data length.
- Swap wi_type and wi_code in struct wi_table so that wi_type matches with
  wi_type in wi_req.
2000-07-06 03:37:26 +00:00
itojun 4941865cd4 setproctitle fix. from openbsd 2000-07-05 22:21:15 +00:00
hubertf 7ca7a7f658 Only calculate MD5 checksum for plain files.
As a side effect, fixes handlink of links to dirs.
2000-07-05 20:18:16 +00:00
hubertf 2b35b3d322 * Move comment around a bit
* Document some return code
2000-07-05 20:17:04 +00:00
itojun 31431ac193 always use %s for setproctitle. from openbsd-current 2000-07-05 17:59:58 +00:00
msaitoh f6f00e2615 remove extra period in SEE ALL section 2000-07-05 15:45:28 +00:00
itojun 358c3cf8dc more change on getaddrinfo error handling.
XXX enami, I admit it is not a good thing to check the error code from
getaddrinfo.  it is sometimes mandatory, however.  gai_strerror message
can be too generic in some cases.  we can't really extend getaddrinfo,
as it was not invented by kame (see RFC2553)
2000-07-05 12:43:06 +00:00
matt 3ab02a8704 More #include <stdlib.h> string, etc. cleanup 2000-07-04 20:27:35 +00:00
thorpej 6851dd879b Update ifconfig example to show that the interface has to be created. 2000-07-04 20:08:32 +00:00
itojun e9bf9cf7a1 allow faithd(8) to be invoked via inetd(8), just like tcpd (of tcp_wrappers).
sync with kame.

benefits: allows us to access-control inbound traffic by using hosts.allow(5).
possible drawbacks: inetd mode has no chance for multi-connection-per-single-
process enhancement.  current faithd(8) needs 1 process per 1 connection
anyways.
2000-07-04 13:28:13 +00:00
itojun 798ee6865c add faithd(8) support. with "faith/tcp6" protocol specification,
it will open a socket with setsockopt(IPV6_FAITH).
2000-07-04 13:25:39 +00:00
itojun 9282955dca emit more friendly message on nonexistent service name.
From: enami
2000-07-04 09:33:55 +00:00
enami e9aaacc880 If the line wasn't for the client we are looking for, skip it.
While I'm here, I indented the continuation line properly.
2000-07-04 08:18:44 +00:00
itojun 0b740ef377 beautify SYNOPSIS section with .Bk - .Ek pair.
correctly describe "no option" behavior (show 802.11 setting).
add comment about statistics update delay (-o).

TODO: should put \n after sentences
2000-07-04 05:20:03 +00:00
itojun 0f20cdad3f check for mux service by ISMUX(), not by != NORM_TYPE
(the assumption can bite us if we extend se_type to have more cases).
2000-07-03 23:40:59 +00:00
itojun ee1989a0d1 remove duplicated ipsec setup code. we always call setup() on
socket reinitialization (like SIGHUP).
sync with kame.
2000-07-03 23:37:17 +00:00
enami 6412403c8a Fix few typos. 2000-07-03 10:16:10 +00:00
enami 8ab9946e10 Substitute the cross reference to portmap(8) with rpcbind(8). 2000-07-03 10:06:24 +00:00
itojun 1f62fd302f add more security notice about relaying rsh/rlogin taffic. (sync with kame) 2000-07-03 08:37:20 +00:00
enami d985c8daa6 Don't hardcode like "[ -v 1|2|3|4 ]". 2000-07-03 08:31:22 +00:00
enami 511d11787c Use .Ar macro for the flag arguments. 2000-07-03 05:21:19 +00:00
itojun f244aa6821 correct usage of route(8) in example. 2000-07-02 09:17:30 +00:00
jwise ea7e9f5176 Fix minor thinko in previous. Make sure we close and keep closed all
sockets in the situation where all of the following are true:

	* /etc/syslogd.conf contained forwarding actions when we were
	  started up or when we last received a HUP

	* /etc/syslogd.conf has had all forwarding actions removed

	* we are running with -s

and we receive a HUP.
2000-07-02 02:15:34 +00:00
augustss 826490bf58 Indicate that the device argument is not mandatory. 2000-07-02 00:55:47 +00:00
itojun a847ca3ad6 be more careful about arg to errx?/warnx? (do not pass variable directly,
it may contain "%").  from openbsd, via kame.
2000-06-30 18:58:42 +00:00
jwise 37b8137c99 Remove caveat about behavior of `syslogd -s' when forwarding rules are
present -- this behavior has been fixed.
2000-06-30 18:52:24 +00:00
jwise 9b22831fbc Fix opening/closing of sockets when receiving a HUP, and /etc/syslog.conf
has been changed from having forwarding actions to having none, or vice versa.
2000-06-30 18:45:04 +00:00
jwise ccb04760be Improve behavior of `syslogd -s'.
Even if we are forwarding, don't bind to udp/514 if running with `-s'.
2000-06-30 18:22:54 +00:00
jwise 20abf1785a Back out and redo previous at Bill Sommerfeld's <sommerfeld@netbsd.org>
request:

	instead of the -S flag, fix the -s flag to not open a socket
	if there are no forwarding rules in /etc/syslog.conf

The behavior of syslogd when -s is specified and there are forwarding rules
should still be made cleaner.
2000-06-30 18:03:50 +00:00
thorpej 0ef2c35ee6 gifconfig(8) is obsolete; functionality has been added to
ifconfig(8).
2000-06-30 18:02:32 +00:00
jwise 3258a51b03 1.) bring usage text up to date, and clarify description of `-s' option
in man page and comments -- for some time it has no longer prevents
    an inet socket from being opened, just caused it to be ignored

2.) Fix this problem with `-s' -- syslogd always opens an inet socket, even if
    -s is specified and it has nowhere to send to.  This socket is then
    shutdown(), but there is no way to not have this socket open.

    Users setting up paranoid installations can now specify `-S' which
    prevents any non-unix-domain sockets from being opened, even if
    forwarding is specified in /etc/syslogd.conf.

    As per the previous fix, this is not made the default for `-s', as it
    also prevents syslogd from forwarding log messages.

3.) document the above in the man page and usage.

Justification:  in light of the possibility of future DoS attacks, or the
desire to set up a machine which is relatively uninformative in the face
of port scans, users may quite legitimately want to control what sockets
are open on their machine.  Telling such users that they cannot run
syslogd is non-ideal.
2000-06-30 17:32:43 +00:00
itojun 7f153848ab use %s with syslog, to prevent abuse. from: deraadt (sync with kame) 2000-06-29 01:24:11 +00:00
onoe cb94bf1d45 Update the description of available channel for Japan.
The regulations has been changed to adopt 802.11b since Oct. 99.
For 11Mbps NICs sold in Japan, all DS channels (1..14) are available.
2000-06-28 10:07:05 +00:00
thorpej c1b4b34401 Add support for globbing when matching the host name in the
bootparams(5) file, a'la Solaris.  This is extremely useful
for configuring Jumpstart servers.

From Dan Mercer <dmercer@zembu.com>.
2000-06-28 01:30:56 +00:00
thorpej 3a1d089614 Add some extra instrumentation in the `debug' case. 2000-06-27 20:32:28 +00:00
ragge ca2ae6b635 Need special tweaking for VAX8200 etc... 2000-06-27 18:57:41 +00:00
briggs 72e9fc0fb5 If both SMALL and NSUPDATE are defined, undefine NSUPDATE. The NSUPDATE
option pulls in a set of symbols that increases the size of dhclient
with functionality that is not required for installation media.
This was discussed with Ted Lemon, and the patch is being submitted to him
for inclusion in his source tree.
2000-06-26 12:33:14 +00:00
perseant 4e02de35d3 use -s option to shorten the list of SEGUSEs printed as well as whole segments 2000-06-25 21:36:16 +00:00
mellon cb94aaa4bf Delete some debugging statements that got included accidentally. 2000-06-24 19:05:50 +00:00
mellon 61f43e2b27 Allocate command line interface using interface_allocate (pr#10378) 2000-06-24 16:21:02 +00:00
mellon 770dd9d3d3 Merge latest version, fix conflicts. 2000-06-24 06:57:05 +00:00
mellon 11e02a2cec Merge latest version, fix conflicts. 2000-06-24 06:50:01 +00:00
mellon cbcf186604 3.0b2 as of June 23 - fixes two important glitches. 2000-06-24 06:38:26 +00:00
sommerfeld 88930abce1 Add support for the documented, but unimplemented, -a flag. 2000-06-24 04:15:49 +00:00
thorpej 3cf08199ac If the `device' argument is not specified, attempt to open /dev/sysmon. 2000-06-24 00:41:10 +00:00
thorpej df83a2a3cd Add MK... variables to enable/disable various aspects of building
crypto support into the system.  See share/mk/bsd.README for more
a full description.
2000-06-23 06:01:10 +00:00
fvdl a17451fec8 Plug memory leak in error case (would have happened very rarely). 2000-06-22 13:55:18 +00:00
fvdl 1cccef0253 Make sure to free the netconfig entry in addrmerge(). 2000-06-22 10:59:55 +00:00
fvdl d797839afc Make sure that freeing the temporary buffer always happens; previous
commit would still result in a leak.
2000-06-22 10:57:38 +00:00
fvdl bcec83b93a Plug a few memory leaks. 2000-06-22 08:09:26 +00:00
enami cfaeffad70 - Fix .Nd usage; no need to supply hyphen explicitly and the description is
short enough to put on the same line.
- Kill the comma at the end of SEE ALSO list.
- Remove empty line in the source.
- Break line at the end of statement in the source for better output (in other
  words, let the roff to format it).
2000-06-21 03:19:05 +00:00
enami bc066a6ce1 Avoid null pointer dereference; the `addrp' is NULL if a mount point
is default exported.
2000-06-21 02:48:31 +00:00
itojun f42e218016 sync with more recent kame code.
accept scoped address notation.
2000-06-20 22:23:01 +00:00
fvdl ce3461b310 Oops, previous should not have been committed. 2000-06-20 13:56:43 +00:00
fvdl 6806083e5d Free buffer used in xdrmem_create. 2000-06-20 13:55:11 +00:00
thorpej e7d6b96938 Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so.  Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.
2000-06-20 06:00:24 +00:00
hubertf 25ad63a22f Tell people how to make the system re-read this file after changing it
Fixes PR 10398 by John Refling <refling@comet.lbl.gov>.
2000-06-20 00:54:04 +00:00
fvdl 95e20d99e4 Don't try to push v6 addresses into the kernel when they're not supported. 2000-06-19 23:44:16 +00:00
hubertf 65162fd077 be sure to set pkgdbp to NULL after closing the db. 2000-06-19 13:28:06 +00:00
hubertf f9aaf0a4e5 Allocate space & copy a string returned by a function that'll clobber it on
next call.
2000-06-19 00:55:11 +00:00
mrg e1f4b1c95e use ${MAKE} not make 2000-06-18 10:11:25 +00:00
hubertf 74056630be remove stale debugging code 2000-06-18 01:31:23 +00:00
hubertf e5b91ee82e * shuffle variable names in findbestmatchingname_fn() around
a bit, to make them more descriptive
 * in findbestmatchingname_fn, fix a bug where a null pointer wasn't
   caught (I wonder why we didn't actually hit that case...)
 * Bugfix in findbestmatchingname_fn: when comparing, strip off any
   trailing ".tgz", as this will give wrong results. "1.9.8.tgz" was
   found to be greater than "1.9.8.1".
2000-06-18 01:29:30 +00:00
hubertf 7aed2e5cfb use /var/tmp consistently. (XXX need to re-visit if we ever
put pkg_add on a install floppy)
2000-06-18 01:29:17 +00:00
tron 1b5dabcf75 Update prototype for "extract_plist()". 2000-06-17 11:30:49 +00:00
thorpej fa7f67b26e Fixup Heimdal Kerberos usr.sbin bits. 2000-06-17 00:04:36 +00:00
thorpej 4863d0af58 Import Heimdal Kerberos 5 usr.sbin bits, from cryptosrc-intl. 2000-06-16 23:59:32 +00:00
sjg 7bd1e30c61 extract_plist() should inform caller when it aborts extract 2000-06-16 23:49:17 +00:00
sjg cc95d19ae1 avoid possible overflow of exit status 2000-06-16 23:48:23 +00:00
hannken a2c3edb415 Fix bad registration of mountd/tcp/v3 on port of mountd/udp/v3. 2000-06-16 11:34:55 +00:00
cgd db755e7c76 sweep of my licenses (userland files w/o only my copyright) for
consistency.  (no functional changes)
2000-06-14 17:24:02 +00:00
itojun 80a16c051d typo 2000-06-14 16:06:43 +00:00
itojun 59996dbc2b clarify tcp4/tcp6 interaction. 2000-06-14 15:57:26 +00:00
tron a3b6375d9a Add comment to prevent further bogus commits. 2000-06-14 11:15:58 +00:00
explorer 7dca1ce955 Ok, back out previous change. It seems wrong that 'rm -rf /usr/include/*' doesn't DTRT... 2000-06-14 06:54:20 +00:00
cgd d220ca5ba3 fix up NetBSD RCS Ids to match the standard, and the leading comment as
to match as well.  No functional changes.
2000-06-14 06:48:47 +00:00
explorer 4d23eb7241 Use %lu since BOOTPARAMVERS is defined as ((u_long)1) 2000-06-14 06:27:25 +00:00
perseant 37318e5a65 Assorted changes/fixes to dumplfs:
Add flags "-b" and "-I" to dumplfs, to allow the user to specify the
location of the superblock and Ifile inode, respectively.

Don't print "corrupt segment header" any more for leftover slivers of
space too close to the next segment to write a partial-segment.  In the
event that there was no such sliver, the segment still ends; recognize
this and print out the segment number, and superblock if asked.

Document all the flags in the man page.

Print the partial-segment write flags (SS_DIROP, SS_CONT).

Make the "-a" flag output look slightly better.

Change all hex numbers to lowercase, instead of having some upper and
some lower.
2000-06-14 01:55:37 +00:00
mellon 5ec30b76db Fix a paste-o (thanks to Frederick Bruckman for investigating this) 2000-06-13 15:39:07 +00:00
mellon 45362f7ad8 Register the host type. 2000-06-13 15:37:16 +00:00
itojun 11a42bf1f4 move setkey(8) from usr.sbin to sbin, to enable us to initialize
IPsec manual key before /usr mount..
(based on "don't use cvsmove" discussion i have seen, I did not use cvsmove)
2000-06-13 15:15:21 +00:00