Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
37449d45b0
NetBSD/usr.sbin
History
explorer 37449d45b0 Fix the get-a-shell hole, even if we are not currently open to that attack. 
(1.2 release is, however, and this should be pulled up and released ASAP)

The previous version (1.11) checked into current limits the duration of
setuid-root periods much more than the 1.2 released version does, so the
attacker DID get a shell, but it was not a root shell.
1996-10-25 22:07:53 +00:00
..
ac - kill the -c hack. It does not work properly with virtual consoles anyway. 1996-09-26 19:06:37 +00:00
accton specify man pages the new way. 1994-12-22 11:31:31 +00:00
amd <machine/endian.h> -> <sys/types.h> 1996-10-13 01:15:03 +00:00
apm Copyright has been assigned to The NetBSD Foundation 1996-09-25 00:53:45 +00:00
apmd Copyright has been assigned to The NetBSD Foundation 1996-09-25 00:53:45 +00:00
arp needs string.h 1995-04-24 13:25:18 +00:00
bad144 Eliminate extra `/' when prefixing the device name with _PATH_DEV. 1995-06-10 21:01:08 +00:00
bootp Correct pathname of bootpd and bootpgw. 1996-09-27 01:38:55 +00:00
bootpd Correct pathname of bootpd and bootpgw. 1996-09-27 01:38:55 +00:00
bootpef specify man pages the new way. 1994-12-22 11:32:57 +00:00
bootpgw specify man pages the new way. 1994-12-22 11:32:57 +00:00
bootptest specify man pages the new way. 1994-12-22 11:32:57 +00:00
catman specify man pages the new way. 1994-12-22 11:32:57 +00:00
chown Remove chownerr() function completely and use warn() instead. 1995-06-03 07:01:19 +00:00
chroot specify man pages the new way. 1994-12-22 11:32:57 +00:00
config Don't canonicalize relative paths to the source tree any more; libkern 1996-09-23 05:04:23 +00:00
config.old Add the `ac' device (auto-changer) to the isscsidev() macro. (I can't 1996-06-10 02:32:20 +00:00
cron Patch from Mike Pritchard to use `-t' option to sendmail, and prevent 1995-04-14 19:49:32 +00:00
dbsym specify man pages the new way. 1994-12-22 11:32:57 +00:00
dev_mkdb Merge with 4.4-Lite, and use libc err(3) and warn(3). 1995-01-30 21:12:41 +00:00
dhcpd | -> } in manual page; closes pr bin/2858; mailed patch to author 1996-10-18 17:10:52 +00:00
diskpart don't use gets(). pr#2254 1996-05-21 13:00:31 +00:00
dumpfs Avoid arithmetic overflow (Tor Egge; PR#1768). 1996-01-09 21:23:36 +00:00
dumplfs Make this compile with -Werror. 1995-12-14 22:30:45 +00:00
edquota Use an integer instead of a char to store the getopt() return value in 1996-03-30 23:42:33 +00:00
eeprom Discard setgid privileges if we don't need them. 1996-09-27 02:39:46 +00:00
gettable header, for protos 1994-12-23 16:46:17 +00:00
grfconfig print also the wrong mode number 1996-05-19 09:02:44 +00:00
grfinfo
gspa Add to DPADD for each library in LDADD; Reported by Mike Long <mike.long@analog.com> in PR #2301. 1996-04-08 21:03:06 +00:00
hilinfo
htable header, for protos 1994-12-23 16:46:17 +00:00
inetd Always swap most of the fields when updating a config file entry; otherwise 1996-02-22 11:14:41 +00:00
iostat Kb' means kilobits, Mb' means megabits. Since we're talking about bytes, 1996-10-25 18:21:57 +00:00
iteconfig Sync "iteconfig -h" output with reality and man page. 1996-06-04 16:27:56 +00:00
kgmon be safe with types 1994-12-23 16:45:33 +00:00
kvm_mkdb Create only /var/db/kvm.db, and only create it if it doesn't 1996-10-12 00:51:44 +00:00
lpr Fix the get-a-shell hole, even if we are not currently open to that attack. 1996-10-25 22:07:53 +00:00
map-mbone Update to mrouted 3.8. 1995-12-10 10:57:11 +00:00
mdconfig Helper program for "user RAM" mode supported by sys/dev/ramdisk.c 1995-10-08 22:40:41 +00:00
mdsetimage rdsetimage, a program to set kernel RAM disk images. 1996-10-04 00:18:55 +00:00
mountd u_long -> u_int32_t when dealing with address lists returned by the resolver. 1996-10-07 22:33:15 +00:00
mrinfo Update to mrouted 3.8. 1995-12-10 10:57:11 +00:00
mrouted fix a call to localtime() so that it works if time_t != long. 1995-12-19 03:33:06 +00:00
mtrace Change a rogue RCS id to new-style 1995-12-16 20:11:45 +00:00
mtree Add a missing "break;", pointed out by Chris Demetriou. 1996-09-05 23:29:22 +00:00
named Use ${INSTALL}. 1996-10-18 05:55:26 +00:00
netgroup_mkdb RCSid police and a small bug fix in util.c... 1996-10-04 05:15:27 +00:00
nfsd Clear the sin_zero fields explicitly. 1996-09-16 17:22:04 +00:00
nfsiod Sync with Lite2. 1996-02-20 16:06:55 +00:00
portmap second argument to xdr_long must be a "long *", which means that the 1996-05-01 18:10:26 +00:00
pppd fix PR #2623: read the idle time from the kernel to determine whether 1996-10-16 00:15:51 +00:00
pstat recognize MNT_NOCOREDUMP and print the 'nocoredump' flag for file 1996-10-23 22:50:05 +00:00
pwd_mkdb Updated to use new password file functions in libutil. 1996-05-15 23:19:09 +00:00
quot Fix PR 2462 1996-05-24 12:51:23 +00:00
quotacheck Update for newer preen interface. 1996-09-28 19:20:44 +00:00
quotaon Misc cleanups. 1996-09-28 19:06:07 +00:00
rarpd Be pedantic, main() returns int in C. 1996-03-21 17:56:15 +00:00
rbootd If __FreeBSD__, don't swap the length field in the 802.3 header. 1996-02-01 21:27:46 +00:00
rdate Add proper punctuation; Reported by Mike Long <mike.long@analog.com> in PR #2300. 1996-04-08 20:55:17 +00:00
rdconfig Helper program for "user RAM" mode supported by sys/dev/ramdisk.c 1995-10-08 22:40:41 +00:00
rdsetimage rdsetimage, a program to set kernel RAM disk images. 1996-10-04 00:18:55 +00:00
repquota Use an integer instead of a char to store the getopt() return value in 1996-03-30 23:49:48 +00:00
rmt Add missing #include. 1995-04-13 02:07:23 +00:00
rpc.bootparamd If gethostbyaddr() fails, use inet_ntoa() to turn the IP address into 1996-10-14 19:28:09 +00:00
rpc.pcnfsd Correct the "Vulnerabilities" announced in CERT advisory CA-96.08. 1996-04-25 01:00:12 +00:00
rpc.yppasswdd Fix the type in the description. -a => -m 1996-10-23 04:58:50 +00:00
rwhod Fix some potential buffer overflow problems. 1996-09-07 21:05:37 +00:00
sa Use an integer instead of a char to store the getopt() return value in 1996-03-30 23:51:42 +00:00
screenblank Use sigemptyset() rather than frobbing the sa_mask directly. 1996-06-23 22:08:43 +00:00
sendmail Don't need to define our own INSTALL variable. 1996-10-18 06:31:29 +00:00
sliplogin Reference the new sl(4) page 1996-08-10 21:26:42 +00:00
slstats Reference the new sl(4) page 1996-08-10 21:26:42 +00:00
spray RCS id police. 1996-08-30 20:03:54 +00:00
sup/source Use a better fix for vsnprintf on svr4. Apparently, svr4 stdio does not 1996-09-30 04:19:55 +00:00
sysctl Document the new autonice sysctls 1996-07-17 21:38:46 +00:00
syslogd Fix PR/2371, a spelling error and missing -s from the description. 1996-05-06 16:36:44 +00:00
tcpdump fix where tcpdump lives 1996-09-18 02:48:58 +00:00
timed use fixed-size types where appropriate, to make timed work on 64-bit 1996-04-06 01:53:29 +00:00
traceroute Add a -l flag, which displays the ttl of the returned packet. 1996-09-27 01:34:51 +00:00
trpt Fix dangling 'The'; From Mike Long <mike.long@analog.com> 1996-02-05 06:11:16 +00:00
trsp specify man pages the new way. 1994-12-22 11:43:15 +00:00
update specify man pages the new way. 1994-12-22 11:43:15 +00:00
videomode update copyright 1995-10-09 13:52:49 +00:00
vipw Updated to use new password file functions in libutil. 1996-05-15 23:19:09 +00:00
vnconfig Add RCS ids. 1995-12-30 18:14:01 +00:00
ypbind Change name of ypservers file to /var/yp/binding/domain.ypservers. 1996-10-02 05:55:05 +00:00
yppoll RCS id police. 1996-05-13 02:43:35 +00:00
ypserv Use ${INSTALL}. 1996-10-18 06:32:14 +00:00
ypset General cleanup 1996-06-18 20:32:25 +00:00
zdump .include <bsd.prog.mk> 1995-03-11 01:14:25 +00:00
zic .include <bsd.prog.mk> 1995-03-11 01:14:25 +00:00
Makefile Always clean apm/apmd. Fixes PR #2854, from Dave Huang <khym@bga.com>. 1996-10-18 07:08:56 +00:00
Makefile.inc