Commit Graph

404 Commits

Author SHA1 Message Date
elad 5e2e282f9c Add support for per-user /tmp.
Enabled via per_user_tmp in /etc/rc.conf (default off).

See security(8) and rc.conf(5) for more details.

Lots of input from thorpej@ & christos@, thanks!
2007-02-04 08:19:26 +00:00
cbiere 13b350466e Fixed string truncation bug in flags_to_string(): SAPPEND() uses
sizeof(string) but string is a pointer to a malloc()ed buffer.
2007-01-16 17:34:02 +00:00
elad 7e90974e98 Consistent license. 2007-01-09 14:04:44 +00:00
wiz f77162e1ea Fix typo. 2006-12-23 09:55:47 +00:00
wiz 1073e35f2d Use more macros. Fix section in Xr. 2006-12-23 09:54:11 +00:00
wiz 73188ad828 Quote - when used as minus; uppercase Dt argument; remove dot at end
of SEE ALSO; new sentence, new line.
2006-12-23 07:29:10 +00:00
wiz 57551caad9 Remove trailing whitespace. 2006-12-23 07:26:09 +00:00
christos af4b090320 From Anon Ymous:
- add __unused
- remove __GNUC__ hack
2006-12-20 16:47:13 +00:00
he 0a97c3f688 Complete the move of string_to_flags() and flags_to_string() from the
bin/ls sources to libutil:
 o Bump libutil minor version number
 o Fix uses to include <util.h> to pick up the function definitions
 o Fix most uses of flags_to_string() to release the now-malloc()ed result
2006-12-14 20:09:35 +00:00
christos 33d6b113f2 moved string_to_flags and flags_to_string from ls to libutil. 2006-12-14 19:18:01 +00:00
dyoung a26b3af0e0 Render the format %% as %. 2006-12-09 20:18:43 +00:00
christos 61261c8531 rename getdate to parsedate to avoid conflict with posix function 2006-11-20 20:33:02 +00:00
christos a5486efb24 constify 2006-11-17 22:44:16 +00:00
christos ba26b607a4 add getdate. 2006-11-17 22:10:23 +00:00
christos 8c97c569de include ecalloc() from our anonymous user. 2006-10-20 17:40:39 +00:00
christos 284c960b4d typo from our anonymous user. 2006-10-20 17:40:18 +00:00
christos 40c48e4f33 prevent empty else. 2006-10-15 19:34:51 +00:00
christos ebed6f0b8c add volatile to prevent gcc clobbering. 2006-10-15 19:33:52 +00:00
christos 2979ced6e8 - Instead of wondering if to syslog an error, do so, but in the called
function.
- use snprintf instead of sprintf.
2006-10-15 19:33:03 +00:00
christos e7acb44bcf Allow escaping of the separators using a double backslash 2006-10-14 18:53:11 +00:00
pooka 34a6a097c3 add util.h to SYNOPSIS 2006-10-06 15:31:20 +00:00
christos 5863dc6ef1 Coverity CID 4159: Don't memset() needlessly. 2006-09-27 16:20:03 +00:00
wiz 8d8d8f2ebd Slight wording improvement, sort SEE ALSO, remove trailing dot in SEE ALSO. 2006-09-02 23:43:47 +00:00
christos ec0bdc9542 make this compilable as a tool. 2006-08-28 20:46:26 +00:00
christos 568f6f6f30 Only use __RCSID if we have it. 2006-08-26 23:17:43 +00:00
christos 6e90deb9cb Efun source. 2006-08-26 18:11:45 +00:00
christos e72710e561 Add efun(3) 2006-08-26 18:11:12 +00:00
drochner f5015685d4 mention error return value, like getrawpartition(3) 2006-05-26 12:36:59 +00:00
wiz cb3fc8886b \- is a minus. 2006-05-25 10:56:08 +00:00
christos dc46554fdb Document that this can fail. 2006-05-25 00:41:24 +00:00
elad 2675cb7714 Allow explicit length by checking it only if we have a length above 0. 2006-04-01 14:51:17 +00:00
elad f77bbf7c65 set all fields to -1 after allocation, this makes it easier to write
policies.
2006-03-30 18:11:17 +00:00
wiz c2cc4b2716 Consistently use .Va for errno. Quote "-" for PostScript output. 2006-03-23 19:31:37 +00:00
wiz c2f9369ee7 Remove trailing whitespace, add 'and' in enumeration. 2006-03-23 19:30:27 +00:00
elad d7e635e034 plug leaks, coverity cids 1618, 1619. 2006-03-20 17:32:17 +00:00
elad 2b9c10de57 Set errno on failure, and man-page updates. 2006-03-19 22:58:21 +00:00
christos a3f80bb48f - Don't trash error number returned by the handler; return it instead.
- Add default cases and return EINVAL
- Don't check for NULL arguments and return EFAULT. Let it core-dump instead.
  (or add DIAGASSERT)
- Coverity CID 799: Don't dereference m and n if they are known to be NULL.
  Bail out sooner with EINVAL.
2006-03-19 22:18:25 +00:00
christos b3044379df Clarify errno's returned by those functions. 2006-03-19 21:56:04 +00:00
christos 6b99850ef0 Coverity CID 1209: Avoid negative close. While I am there fix bugs (open
returning 0 is ok). Reorganize code to factor out common parts, cleanup
syscall checking and error code return.
2006-03-19 21:55:37 +00:00
wiz bade1adbc5 Fix typo. 2006-02-24 21:07:29 +00:00
wiz 8b9018d2d9 Mark up NULL (with Dv). 2006-02-24 21:06:50 +00:00
elad bca69c49bf needs assert.h to compile. 2006-02-19 23:13:14 +00:00
elad f0dd749f9b add _DIAGASSERT as requested by mrg@. 2006-02-19 20:46:29 +00:00
elad 5cd336ae07 When loading a policy with an "nclasses" option, always set the min/max
values for the various character classes to allow any number, just in
case. Also note about that in the man-page.

This makes it easier to use the "nclasses" option.

Note that alternatively we could just memset() to 0xff when doing the
load, but that might lead to more unexpected behavior.
2006-02-18 16:45:01 +00:00
elad cf6eceb4e7 Don't expose struct pw_policy and use pw_policy_t, use malloc, man-page
fixups.

As discussed on source-changes@.

Okay yamt@, thorpej@.
2006-02-18 16:32:45 +00:00
elad 378a5a27de Some stuff that's been sitting in my tree for too long...
Improve the pw_policy(3) API by splitting it to two functions, one to load
the policy from /etc/passwd.conf and another to test passwords against the
policy.

Some bug fixes, more consistent code, and man-page updates.

Minor for libutil bumped.
2006-02-18 10:52:48 +00:00
christos 349633b5fa make setuserenv and setuserpath take an environment setting function and
an environment pointer and expose them.
bump version.
2005-12-20 21:32:20 +00:00
elad 02197be174 Lint warnings. 2005-09-17 01:51:21 +00:00
elad 769541972d Rename struct pw_policy -> struct pw_policy_handler. 2005-09-16 22:38:48 +00:00
elad 44b5bc7c94 Add pw_policy.3.
From Hisashi T Fujinaka, thanks!
2005-09-14 18:45:40 +00:00
elad 8d6270e665 Introduce pw_policy(3), an easily extendable way of defining password
policies and enforcing them in programs.

Man-page written with much help and tips from David Maxwell, Hubert
Feyrer, and Thomas Klausner.

This bumps libutil minor to 7.

XXX: Need default policy to go in /etc/passwd.conf, and integration
     into local/yp/PAM password changing code.

PR/10206.
2005-09-14 11:36:52 +00:00
christos 3ff3472e11 Use the re-entrant getgr*_r functions. From John Nemeth. 2005-09-14 02:12:34 +00:00
wiz e315aa9a2a Avoid duplicate if. 2005-09-10 21:55:35 +00:00
elad 232f61fabb Lint warnings. 2005-08-27 16:55:59 +00:00
elad 75beed7e53 Make this compile without warnings. 2005-08-19 10:10:08 +00:00
elad dd3453b45c Make pw_getconf(3) set errno so we have indication on what went wrong.
Document possible errno values in the manpage.
2005-08-18 21:07:23 +00:00
wiz 98fcd5ac03 Fix capso in Dd argument. 2005-05-16 18:49:24 +00:00
thorpej f2b0a44663 u_short -> uint16_t 2005-05-15 21:01:34 +00:00
wiz 0bb532e823 Bump date for previous; add commas to make
sentences more readable.
2005-04-13 23:08:03 +00:00
drochner 1a771b22ec Allow for a login.conf file without an explicite "default" class
definition.
The login.conf(5) manpage states that the "default" class is used
*if it exists*.
2005-04-13 20:32:42 +00:00
atatat a9321bb19a Add the 'A' and 'P' format specifiers which use getaddrinfo(3) to turn
numbers into names (if possible).  Also add the '?' format modifier
that elides the "N/A" if that's what you would normally get.
2005-04-09 02:05:47 +00:00
mycroft ebfdf0c012 If TIOCPTMGET fails, close /dev/ptm. 2005-01-19 01:54:09 +00:00
christos 163d05f57d PR/28792: FUKAUMI Naoki: passwd: Couldn't generate salt: Invalid argument
I broke the case where /etc/passwd.conf was empty.
2005-01-15 03:07:56 +00:00
dyoung 4d24861fc9 For consistency of sockaddr_snprintf(3) with snprintf(3) and
snprintb(3), do not count the terminating NUL in the return value.
Update the regression tests to match.  Approved by christos@.
2005-01-13 00:44:25 +00:00
christos 4c3e77eff3 add pw_getpwconf(), bump. 2005-01-12 03:34:33 +00:00
christos ca7489bf5c Avoid spinning if writing to a pty returns 0. This happened to me when
I had a pty with a suspended sshd (why?).
2005-01-08 06:43:16 +00:00
christos f1a325d103 Unbreak setuserpath(); from Nick Hudson. 2004-12-20 18:42:03 +00:00
wiz ff7ab08a15 Mmm, API changes without date bumps... bump date for constification. 2004-12-11 16:50:56 +00:00
christos a5c1a01ed9 WARNS=3; fix cast-qual issues. 2004-12-11 06:41:15 +00:00
christos 70756f97e8 Constify; the api was completely broken before. 2004-12-11 06:40:42 +00:00
peter 192aae95b5 Add missing LIBRARY section.
ok wiz@
2004-12-01 00:06:46 +00:00
christos 5a55e0c902 Don't give write privileges at all if the tty group is missing. 2004-11-25 02:49:46 +00:00
christos db5d4e2d6a I really want to kill the hard-coding of _TTY_GID. Set the group to the
primary group of the user if the group tty does not exist.
2004-11-24 22:17:19 +00:00
christos 6845cdfbb8 fix the header. 2004-11-21 03:04:14 +00:00
wiz 7a3b0ef281 Formatting fixes, and a typo fix. 2004-11-20 23:29:33 +00:00
christos 1fe49f768f Add a manual page. 2004-11-20 03:06:09 +00:00
christos 09ad64e21f check for getnameinfo error correctly; thanks to Peter Postma. 2004-11-19 22:05:23 +00:00
christos eb6484700a Add sockaddr_snprintf; XXX: Needs a man page. 2004-11-19 21:37:19 +00:00
dsl ece723d1ec Add if_media.c, functions for converting media to/from strings.
(from ifconfig.c)
2004-11-11 20:36:28 +00:00
christos d07f9e79e8 - don't complain if the pty is of the form pts/n
- fix off by one error in iovlen bounds checking
- print the function name in the error message and make the
  error messages consistent
- knf
2004-11-10 17:00:41 +00:00
christos 2611d5a68f KNF; Simplify some logic, so that lines don't wrap. Explain why we
break, continue, or return from the tty scanning loops.
2004-09-18 20:14:22 +00:00
yamt 2936303c19 openpty: just check errors of syscalls,
instead of checking permission beforehand in userland.
2004-09-18 16:44:38 +00:00
wiz 245c7e5202 New sentence, new line. 2004-08-04 15:07:37 +00:00
thorpej 7c161da819 - Rename pw_copy() to pw_copyx(), make it return a success/failure code,
and add "errbuf" and "errbufsz" parameters so that errors can be handled
  gracefully, rather than simply exiting the process.
- Add a pw_copy() wrapper around pw_copyx() to preserve old behavior for
  apps that use it.
- Bump shlib version to 7.4.
2004-08-03 23:29:04 +00:00
christos 92cd5ee20c Don't allow openpty to succeed if the caller is non-superuser.
XXX: we cross-reference ptm 4 which does not exist (yet)
2004-06-18 02:42:57 +00:00
christos f099fa154d use the pty multiplexor if it exists. 2004-05-27 03:12:48 +00:00
lukem 2ebcc58148 sbsize should be parsed as R_CSIZE so that suffixes work correctly.
Fix from Christian Biere in PR [lib/25504].

(XXX: the R_CSIZE parsing should be changed to using strsuftollx(3))
2004-05-09 23:28:11 +00:00
christos dea77b1806 sprinkle const 2004-04-23 15:23:26 +00:00
matt d07ed6425d Add sbsize login capability. 2004-04-18 18:21:43 +00:00
wiz f343a3e8ab Use pid_t for pids. From Jeff Ito in PR 24854. 2004-03-29 11:52:39 +00:00
wiz f05e6f1a3a occured -> occurred. From Peter Postma. 2004-02-24 15:12:51 +00:00
lukem 171d653219 Overhaul how `build.sh tools' are used:
*	Rename "config.h" to "nbtool_config.h" and
	HAVE_CONFIG_H to HAVE_NBTOOL_CONFIG_H.
	This makes in more obvious in the source when we're using
	tools/compat/config.h versus "standard autoconf" config.h

    *	Consistently move the inclusion of nbtool_config.h to before
    	<sys/cdefs.h> so that the former can provide __RCSID() (et al),
    	and there's no need to protect those macros any more.

These changes should make it easier to "tool-ify" a program by adding:
	#if HAVE_NBTOOL_CONFIG_H
	#include "nbtool_config.h"
	#endif
to the top of the source files (for the general case).
2003-10-27 00:12:41 +00:00
christos 5028fe3e04 delint pointer casts. 2003-10-25 07:31:27 +00:00
christos ad96bb0dec remove unused variable 2003-10-25 07:31:12 +00:00
fvdl bada5458de Don't use NULL to compare against an int. 2003-10-21 00:55:05 +00:00
fvdl 03831599c1 The last argument to sysctl is a size_t, not a pointer; don't pass NULL. 2003-10-21 00:47:46 +00:00
itojun c469f0373f initialize 'res' to NULL 2003-09-08 20:54:48 +00:00
itojun 0676396691 plug possible memory leak. from openbsd 2003-09-08 16:19:40 +00:00
agc eb7c1594f1 Move UCB-licensed code from 4-clause to 3-clause licence.
Patches provided by Joel Baker in PR 22280, verified by myself.
2003-08-07 16:42:00 +00:00
salo 99410184e7 netbsd.org->NetBSD.org 2003-07-26 19:24:24 +00:00