Fix some more programs for newer byaccs.
ftpd(8): Exit during authentication if an error occurs after chroot().Taken-from: FreeBSDSecurity: CVE-2020-7468
Remove OPIE remains.
Adjust numerous manual pages, scripts and Makefiles for the utmp removal.Also remove /var/run/utmp and /var/log/lastlog via 'make upgrade'. Keepany /var/log/wtmp and /var/log/wtmp.* files in case
Adjust numerous manual pages, scripts and Makefiles for the utmp removal.Also remove /var/run/utmp and /var/log/lastlog via 'make upgrade'. Keepany /var/log/wtmp and /var/log/wtmp.* files in case the user wants toconvert them with wtmpcvt(1).
show more ...
ftpd(8): Add utmpx support from FreeBSD. Drop utmp support.
ftpd(8): No need to specify WFORMAT=0 explicitly in the Makefile.
ftpd.8: Adjust for recent opie(4) removal.
ftpd(8): Decouple from libmd.Reimplement site command "md5" using LibreSSL MD5 API.
ftpd(8): Add OPIE checks to conditionally disable it.
ftpd(8): Use libutil's pidfile(3) implementation.This unbreaks buildworld.Reported-by: zrj
ftpd(8): Revert a Makefile change that was not meant to be pushed.
Add __attribute__((__noreturn__)) to various function prototypes in libexec/.This general cleanup is useful in various ways. It helps the compileroptimize better and it also helps later GCCs detec
Add __attribute__((__noreturn__)) to various function prototypes in libexec/.This general cleanup is useful in various ways. It helps the compileroptimize better and it also helps later GCCs detect better when to give-Wimplicit-fallthrough warnings and when not.Found-with: -Wsuggest-attribute=noreturn
world: Attempt to fix NOSHARED MINUSLPAM handling. * Add missing LIBYPCLNT as a dependency. TODO: NO_NIS handling. * Add missing LIBSSH (only needed in case of pam_ssh module). * Add missing LIBR
world: Attempt to fix NOSHARED MINUSLPAM handling. * Add missing LIBYPCLNT as a dependency. TODO: NO_NIS handling. * Add missing LIBSSH (only needed in case of pam_ssh module). * Add missing LIBRECRYPTO too. * Introduce LDFLAGSPAM helper for priv libs.Now NOSHARED=yes buildworld is possible and it is usable. Dynamic .so librariesare still built, just not used during linking of executables (with exceptions).There should be no issues building standard buildworld over static one.Keep in mind that static built utilities like su(1), login(1) will still try todlopen() the shared pam modules (and fail with sorry "Service unavailable")followed by fallback case of loading static modules through openpam_static().Because of that syslog and console will get spammed on any login attempts with:_ login: in try_dlopen(): /usr/lib/security/pam_opie.so.2: Service unavailable_ login: in try_dlopen(): /usr/lib/security/pam_unix.so.2: Service unavailable..._ su: in try_dlopen(): /usr/lib/security/pam_rootok.so.2: Service unavailable_ su: in try_dlopen(): /usr/lib/security/pam_self.so.2: Service unavailableBecause libpam.a can still be linked in dynamic exec, not disabling warnings.Currently used OpenPAM Micrampelis is quite stale (at the moment newest releaseis Resedacea). Also with OpenSSH update there might be an API issue.Please report any breakages on master.
Restore WARNS in ftpd, it was just for testing.
ftpd(8): Remove weird line with just '#'.
ssl: Unhook internal usage of include/openssl/.Redirect all cases to include priv to take needed openssl headers andremove mistakenly added copying of private base LibreSSL headers back topublic
ssl: Unhook internal usage of include/openssl/.Redirect all cases to include priv to take needed openssl headers andremove mistakenly added copying of private base LibreSSL headers back topublic dir used previously by OpenSSL headers.After this make upgrade REMOVE_OPENSSL_FILES=yes should work as initiallyintended.It is still not clear if LIBMD places also miss the libprivate_crypto.For now just to prevent conflicts with base vs dports ssl libs and headers.
Rename getline with get_line to avoid collision with getline(3).Just as it was recently done over at FreeBSD.While there, perform some style changes too (could not resist that).Only readline() ->
Rename getline with get_line to avoid collision with getline(3).Just as it was recently done over at FreeBSD.While there, perform some style changes too (could not resist that).Only readline() -> read_line() functional change was intended.
Remove advertising header from lib/ and libexec/Correct BSD License clause numbering from 1-2-4 to 1-2-3.
In userland, fix printf(-like) calls without literal format and no args.I.e., silence gcc's -Wformat-security warnings (in non-contrib code).
Correct BSD License clause numbering from 1-2-4 to 1-2-3.Apparently everyone's doing it:http://svnweb.freebsd.org/base?view=revision&revision=251069Submitted-by: "Eitan Adler" <lists at eitanadl
Correct BSD License clause numbering from 1-2-4 to 1-2-3.Apparently everyone's doing it:http://svnweb.freebsd.org/base?view=revision&revision=251069Submitted-by: "Eitan Adler" <lists at eitanadler.com>
Remove advertising header from man pages.By: Eitan Adler <lists@eitanadler.com>
Remove advertising clause from all that isn't contrib or userland bin.By: Eitan Adler <lists@eitanadler.com>
Ansify some function definitions that were previously overlooked.
ftpd(8): Remove OLD_SETPROCTITLE related dead code.
Sweep-fix comparing pointers with 0 (and assigning 0 to pointers).For better readability, don't compare pointers with 0 or assign 0to them. Use NULL instead.The change was done with coccinelle.
12