David Nugent [Sat, 10 May 1997 19:00:58 +0000 (19:00 +0000)]
login_getclass() -> login_getpwclass().
Updated (incorrect) entry for bash [-v].
Remove unused support for long rlim_t.
Added "bash2" to bash style ulimit handling.
David Nugent [Sat, 10 May 1997 18:55:38 +0000 (18:55 +0000)]
Summary of login.conf support changes:
o Incorporated BSDI code and enhancements, better logging for error
checking (which has been shown to be a problem, and is therefore
justified, imho); also some minor things we were missing, including
better quad_t math, which checks for under/overflows.
o setusercontext() now allows user resource limit overrides, but
does this AFTER dropping root privs, to restrict the user to
droping hard limits and set soft limits within the kernel's
allowed user limits.
o umask() only set once, and only if requested.
o add _secure_path(), and use in login.conf to guard against
symlinks etc. and non-root owned or non-user owned files being
used. Derived from BSDI contributed code.
o revamped authentication code to BSDI's latest api, which
includes deleting authenticate() and adding auth_check()
and a few other functions. This is still marked as depecated
in BSDI, but is included for completeness. No other source
in the tree uses this anyway, so it is now bracketed with
#ifdef LOGIN_CAP_AUTH which is by default not defined. Only
auth_checknologin() and auth_cat() are actually used in
module login_auth.c.
o AUTH_NONE definition removed (collided with other includes
in the tree). [bde]
o BSDI's login_getclass() now accepts a char *classname
parameter rather than struct passwd *pwd. We now do likewise,
but added login_getpwclass() for (sort of) backwards
compatiblity, namely because we handle root as a special
case for the default class. This will require quite a few
changes elsewhere in the source tree.
o We no longer pretend to support rlim_t as a long type.
o Revised code formatting to be more bsd-ish style.
Peter Wemm [Sat, 10 May 1997 17:14:53 +0000 (17:14 +0000)]
Clean up some more. Move parsing of sysctl iflist data into a single
place rather than updating the main loop's index variables from within
a subroutine and other revolting things like that. Move some more
globals into local variables.
Doug Rabson [Sat, 10 May 1997 16:59:36 +0000 (16:59 +0000)]
Implement a separate control for write gathering on NFSv3. This is turned
off for NFSv3 by default since write gathering seems to reduce performance
for NFSv3 by up to 60%.
Peter Wemm [Sat, 10 May 1997 14:47:35 +0000 (14:47 +0000)]
Grumble.. My last patchup here didn't quite work either. I hate this
program and it's use of global variables. Somehow, I managed to miss the
most obvious case.. "ifconfig ed0 10.0.0.1" failed (no "inet")
Peter Wemm [Sat, 10 May 1997 12:00:03 +0000 (12:00 +0000)]
Fixes from Bruce:
Serious:
- An important timevalfix() in settime[ofday]() was lost.
Not so serious:
- There was a race initializing `delta' in the check for setting the
time backwards.
- The `#ifdef notyet' check for setting the time more than a day forwards
was back to front.
[[I deleted the code, it's useless because of iteration - Peter]]
- The timespec was not checked for validity in clock_settime().
- The timespec was not fully checked for validity in nanotime(). The
check in itimerfix() is too late, since the conversion from a timespec
to a timeval may overflow.
- A garbage timeval was checked in settimeofday() for the (uap->tv == NULL
&& uap->tzp != NULL) case. I added the broken check this some time ago.
Cosmetic:
- The "inadvertantly (sic) sleeping forever" test always failed. hzto()
always returns >= 1.
- The style wasn't very KNFish. (I only changed new code.)
John Hay [Sat, 10 May 1997 10:01:32 +0000 (10:01 +0000)]
Use the MAC address of an interface for the host part of an IPX address
and not the MAC address of the first interface for every IPX address.
This is more inline with the way others like Novell do it.
Originally Submitted by: "Serge A. Babkin" <babkin@hq.icb.chel.su>
John Hay [Sat, 10 May 1997 09:58:58 +0000 (09:58 +0000)]
Mega IPX commit.
Use the MAC address of an interface for the host part of an IPX address
and not the MAC address of the first interface for every IPX address.
This is more inline with the way others like Novell do it.
Mostly Submitted by: "Serge A. Babkin" <babkin@hq.icb.chel.su>
Take out the error messages (the ip icmp equivalent) with #ifdef IPXERRORMSGS.
This is bogus and as far as I could figure out IPX don't have anything like
it. This is a leftover from its XNS heritage. If nobody complains, I will
take it out completely in a few weeks.
Add some more ipxstat statistics counters.
Make ipxprintfs a sysctl variable and off by default.
Add IPX Netbios "routing" support. This is off by default and can be
switched on with a sysctl knob.
General code cleanup to at least use the same style throughout the IPX
code, but also be more style(9) conformant. Also make a lot of functions
static.
If I don't get any complaints I'll bring all of this over to the 2.2 tree
in a few weeks.
Joerg Wunsch [Sat, 10 May 1997 09:09:42 +0000 (09:09 +0000)]
Add a DDB command `show buffer', to display a struct buf. It's impossible
to display everything, so i've chosen a small subset. Add more to this as
you think seems useful.
Bruce Evans [Sat, 10 May 1997 06:53:40 +0000 (06:53 +0000)]
Use `mk' files in share/mk (relative to the top level of the source
tree) instead of the system default ones in /usr/share/mk. This
only works for makes run from the top level, and a few not too out
of date system makefiles must be present to start up. Bootstraps
from can still be done from scratch by giving the path to an up to
date share/mk on the command line.
Removed bootstrap `mk' target and use of it. The bootstrap didn't
actually work for the non-null DESTDIR case.
John Fieber [Sat, 10 May 1997 01:25:50 +0000 (01:25 +0000)]
1) Remove latex support.
2) Remove -ssi option, the -hdr and -ftr options are a more
flexible solution.
3) Make docbook support work better.
4) Document docbook support.
5) Add an -e option to specify encoding for generated HTML files,
eg -e EUC-JP adds an appropriate <META> tag in the <HEAD> element.
Doug Rabson [Fri, 9 May 1997 13:18:42 +0000 (13:18 +0000)]
Prevent a mapped root which appears on the server as e.g. nobody from
accessing files which it shouldn't be able to. This required a better
approximation of VOP_ACCESS for NFSv2 (NFSv3 already has an ACCESS rpc
which is a better solution) and adding a call to VOP_ACCESS from VOP_LOOKUP.
PR: kern/876, kern/2635
Submitted by: David Malone <dwmalone@maths.tcd.ie> (for kern/2635)
Add:
Hauppauge Wincast/TV boards (PCI)
STB TV PCI
Intel Smart Video Recorder III
To list of supported devices.
Submitted by: Randall Hopper <rhh@ct.picker.com>
Merge the en version changes made in 1.237 -> 1.240.
While at it, did some tabs <-> spaces conversion to match the JP version
to the EN version so that patch generated by cvs diff handbook/contrib.sgml
can be often reused to update the JP version.
Peter Wemm [Thu, 8 May 1997 14:16:25 +0000 (14:16 +0000)]
Implementation of posix-style clock_* and nanosleep syscalls as implemented
in NetBSD. The core of settimeofday() is moved to a seperate static
function settime() which both clock_settime() and settimeofday() call.
Note that I picked up the securelevel > 1 check from NetBSD that prevents
the clock being set backwards in high securelevel mode (this was a hole
that allowed resetting of inode access timestamps to arbitary values)
Obtained from: mostly from NetBSD, but the settime() function is from
our gettimeofday(), some tweaks by me.
Peter Wemm [Thu, 8 May 1997 14:04:37 +0000 (14:04 +0000)]
Define entries for the posix-style clock/timer syscalls including
nanosleep(). Also, note some syscall conflicts with other systems and
indicate slots tagged for use with other syscalls some day.