master
Delete obsolete /* ARGSUSED */ lint comments.
man pages: add missing commas between subordinate and main clauses
There is no call to setpassent(1) or to getpwent(), so endpwent() is not required. Strangely, this pattern of calling endpwent() after getpwuid() or getpwnam() has become quite common, and I have a bunch of mop-up diffs coming. Discussed with millert.
gettytab's dx flag is supposed to set decctlq, which is the opposite of ixany, but was setting ixany instead.
Some of architectures do not us the stack protector (for example, retguard or hppa with reverse stack). So they do not call __stack_smash_handler(), and do not call sendsyslog(2). On those architectures, we can onditionally remove the syscall stub (which also removes it from the pinsyscalls table), and the stack protector handler. ok miod
remove BACK_CHANNEL define, unused since YP bits removed in rev 1.20
Use <fcntl.h> instead of <sys/file.h> for open() and friends. Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup.
remove duplicate include feedback tb@
fix an accidental NULL deref introduced last year, found by patrick. rewrite the code with a goto so this never happens again. ok patrick millert
Since libcrypto is used to calc message authenticator, use libcrypto md5 also in other places instead libc md5.
ensure that sensitive data is zeroed out from mem.
spelling fixes; from paul tagliamonte
Clarify man page
remove prototypes with no matching function and externs with no var partly checked by millert@
explain config format a bit better; OK tedu
When system calls indicate an error they return -1, not some arbitrary value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.
Support setting the new variable PASSWDSKIP in /etc/daily.local to prevent security(8) from complaining about specific accounts that have no password, typically used for services like anoncvs and gotd.
Allow pfIfTable to have more than 64 entries. Taken from pfctl_table.c r1.85 by sashan@
allow fetching lists from https:// URLs too
ctime(3) and ctime_r(3) can fail when timestamps are way off. Add missing error checks to all calls under libexec/
Change the error reporting pattern throughout the tree when unveil fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion.
gmtime(3) / locatime(3) can fail when timestamps are way off.
update tradcpp to 0.5.3
Hook up snmpd_metrics
using COPTS is probably better than CFLAGS