Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
136,478 Commits 606 Branches 0 Tags 3.1 GiB
d1ca0533bf
Commit Graph

10151 Commits

Author SHA1 Message Date
christos
d1ca0533bf make sure ty_class is cleared on each entry. 2005-05-14 15:43:47 +00:00
manu
6add206c2f - Fix a double free 
- For acquire messages, when NAT-T is in use, consider null port as a
  wildcard and use IKE port
 2005-05-13 14:09:44 +00:00
christos
182beb15f2 PR/30215: Kouichirou Hiratsuka: /bin/sh dumps core with tabcomplete 
Don't core-dump when trying to complete an empty line; instead assume ./
 2005-05-12 15:48:40 +00:00
jmc
2c8974a914 Fix fallout from vm_anon changes 2005-05-11 17:41:52 +00:00
manu
a5a80e2b4d Update sample config file to higher security settings 2005-05-10 10:22:03 +00:00
dsl
2e685ade80 Use getpwuid_r(getuid(), ...) to expand ~/.... 
Don't replace ~xyz with /home/xyz when expanding ~
 2005-05-09 20:10:33 +00:00
manu
873e8e21a9 More NAT-T fixes for the situation where racoon acts as a VPN client 
Flush SA and generated SP on DPD timeout and deletion payloads
 2005-05-08 08:57:26 +00:00
perry
478944b35b Change HISTORY. It traces execve only back to 4.2BSD, and it is a 
touch older than that. (Surprisingly, though, it doesn't appear to
have been in v6.)
 2005-05-07 17:29:19 +00:00
dsl
6ddc453ece gdb directly calls filename_completion_function() 2005-05-07 16:28:32 +00:00
dsl
76a1f02b41 Make everything that uses makelist depend on Makefile - that way the 
created files pick up new entries.
 2005-05-07 16:22:59 +00:00
dsl
41a59814ed Separate out the filename completion functions from the readline() code. 
Pass in loads of parameters instead of relying on shed-loads of global
variables to modify the behaviour.
The filename completion code can now be enabled by code that uses el_gets().
(eg /bin/sh)
 2005-05-07 16:01:25 +00:00
perry
d2b93fe0e9 cross reference script.7 2005-05-07 02:38:41 +00:00
perry
d11d9afc47 cross reference script(7) 2005-05-07 02:32:35 +00:00
lukem
d26858bb0f Allow this to compile if MKSTATICLIB=no. 
More of PR 29968 from Jukka Salmi.
 2005-05-07 00:23:01 +00:00
jmc
ff69cd3f50 The __used__ change doesn't work on 2.95/vax. Put an #ifdef back in for vax and 
reverted it to __unused__ as it was before
 2005-05-06 19:32:30 +00:00
rearnsha
dd7174bb3e On ARMv5 reduce the value to the LSB before using CLZ. Otherwise we'll 
calculate the position of the MSB not the LSB.
 2005-05-06 09:50:25 +00:00
lukem
0d885c3aa4 Don't perform a check for "secure" tty for root logins when using PAM; 
that is what we provide pam_securetty(8) for.

Fix the -DNOPAM build option by allowing it to compile
(even though we don't use this source file when USE_PAM=no).
 2005-05-05 23:21:58 +00:00
lukem
f4ee085480 PAM may change the user name during the authentication process; 
ensure that we deal with this so that SRA authenticated logins
will pass the changed user name to login(1).
 2005-05-05 22:43:56 +00:00
lukem
94b84ac8a2 Fix the check for insecure root logins in rootterm(): 
- It was originally referring to a bogus version of `line'.
  (problem solved by using 'extern char *line' instead of 'extern char line[]')
- It wasn't stripping the leading "/dev/" off `line' before calling getttynam(3)
 2005-05-05 02:20:45 +00:00
manu
8bf053b3f3 on phase 2 acquire, lookup phase 2 by (src, dst, policy id) so that 
multiple SA can be used in transport mode

While I'm there, patch ipsec-tools ChangeLog to reflect the changes we
took from ipsec-tools-0_6-branch
 2005-05-03 21:08:47 +00:00
matt
57947b7b48 Make longjmp on vax not use sigreturn. Instead it rewrites the 
jmp_buf into one compatible with __longjmp14 and relies on that
to change that into a ucontext_t suitable for setcontext(2).
 2005-05-03 04:37:33 +00:00
matt
cedcd39661 Don't cast x to double, it already is one. 2005-05-03 04:18:32 +00:00
martin
3fcf13a5a0 Fix some typos. From Christian Brueffer in PR lib/30109. 2005-05-01 16:36:47 +00:00
christos
340e17eb3b Don't attempt to delete a NULL key. Can happen if we were the only key 
in a 64K page. Thanks to Juergen Hannken-Illjes for the test.
 2005-04-27 23:11:29 +00:00
yamt
4882631e1a correct size to malloc. 2005-04-27 09:51:52 +00:00
yamt
c67c589db3 remove unnecessary #include. 2005-04-27 09:50:26 +00:00
manu
10802677c9 Bug fixes from the ipsec-tools 0.6 branch: 
- Fix NAT-T problems that prevented multiple peers behind the same NAT
  to talk to the same machine outside the NAT. This also require kernel
  fixes (already committed eralier)
- Fix a LP64 bug
- Fix NAT-T RFC conformance bugs (missing non ESP marker in packets)
- Add a -p option to setkey to display ports that could be used for ESP
  over UDP when printing policies
 2005-04-27 05:19:49 +00:00
matt
ae59c445be Remove CPPFLAGS 2005-04-25 17:21:31 +00:00
matt
51ba88ed0f Add ${DESTDIR}/usr/include/krb5 to CPPFLAGS so <parse_units.h> can be found. 2005-04-25 15:43:34 +00:00
matt
bb1ca526b7 Don't cast the lvalue; cast the rhs instead. 2005-04-25 15:42:46 +00:00
tshiozak
7204e681ae make sure to set errno to EINVAL if _citrus_iconv_open() returns ENOENT. 2005-04-25 13:42:04 +00:00
yamt
8c79aa408b s!/var/run/nologin!/etc/nologin!g to match with the code. 2005-04-25 10:24:06 +00:00
matt
35f4d7fe23 Terminate the arglist with a NULL instead of 0. (Shuts up gcc4.x) 2005-04-25 01:06:03 +00:00
christos
631ccd6107 Revert the previous patch. It is not worth it optimizing the code to avoid 
compiler errors because it makes it gratutiously different.
 2005-04-24 23:29:06 +00:00
christos
19139351d0 Simplify the code and avoid a compiler issue with -O6 on sparc64: 
Error: Illegal operands: There are only 32 single precision f registers; [0-31]
 2005-04-24 19:33:52 +00:00
christos
950f51e55c Remove unused, -- just used is enough. From uwe. 2005-04-24 18:18:52 +00:00
christos
d066f8aee0 Add a __used__ attribute next to the __unused__ attribute, because we don't 
want the optimizer to get rid of the whole code erroneously (which happens
with -O6 on sparc64).
 2005-04-24 18:15:52 +00:00
wiz
4878707c24 Oops, openssl_errstr(1), not (3). 2005-04-24 00:13:50 +00:00
wiz
d3e15626be Add openssl_errstr(1). 2005-04-24 00:12:07 +00:00
wiz
e19d039592 regen (sync with 0.9.7g). 2005-04-24 00:10:02 +00:00
christos
c20fe9e615 add new files. 2005-04-23 20:32:17 +00:00
christos
d3444e8124 Update for 4.0, bump version. 2005-04-23 16:53:47 +00:00
simonb
546f9b44cd Branch to a local symbol instead of a global symbol. 2005-04-22 06:59:00 +00:00
simonb
0cbe508fbc Use the same function name in the LEAF() and END() directives. 2005-04-22 06:58:01 +00:00
jmc
9de49396cd Don't use 'm4' here. Use $TOOL_M4 instead. 2005-04-20 18:26:11 +00:00
nathanw
5f7a108732 Avoid passing along a timespec with a negative number of seconds if 
the current time plus the caller-supplied time to sleep wraps the
time_t. Instead, sleep until INT_MAX.
 2005-04-19 16:38:57 +00:00
rillig
1990d26431 Converted all arguments for the <ctype.h> functions to (unsigned char). 
Fixes PR 21165. Approved by christos.
 2005-04-19 16:33:53 +00:00
christos
b4073cddaf Fix getgrnam -> getgrnam_r 2005-04-19 13:04:38 +00:00
christos
e640241b82 fix getgrnam -> getgrnam_r and add a forgotten getpwnam -> gepwnam_r 
From john nemeth
 2005-04-19 13:04:19 +00:00
wiz
d82b36f1ee Add a comma for readability. 2005-04-19 10:00:50 +00:00