Fix ftpd privilege escalation via ftpchroot.Approved by: soApproved by: re (implicit for releng/12.2)Security: FreeBSD-SA-20:30.ftpdSecurity: CVE-2020-7468
Move ftpusers to libexec/ftpd/Thsi helps with pkgbase by switching to CONFS so that ftpusers will beproperly tagged as a config file.Approved by: will (mentor)Differential Revision: https://rev
Move ftpusers to libexec/ftpd/Thsi helps with pkgbase by switching to CONFS so that ftpusers will beproperly tagged as a config file.Approved by: will (mentor)Differential Revision: https://reviews.freebsd.org/D16787
show more ...
Use strlcpy().MFC after: 2 weeks
General further adoption of SPDX licensing ID tags.Mainly focus on files that use BSD 3-Clause license.The Software Package Data Exchange (SPDX) group provides a specificationto make it easier f
General further adoption of SPDX licensing ID tags.Mainly focus on files that use BSD 3-Clause license.The Software Package Data Exchange (SPDX) group provides a specificationto make it easier for automated tools to detect and summarize well knownopensource licenses. We are gradually adopting the specification, notingthat the tags are considered only advisory and do not, in any way,superceed or replace the license texts.Special thanks to Wind River for providing access to "The Duke ofHighlander" tool: an older (2014) run over FreeBSD tree was useful as astarting point.
DIRDEPS_BUILD: Update dependencies.Sponsored by: Dell EMC Isilon
ftpd(8): fix user context handling.Apply authenticated user context after update of wtmp(5) at start of session,so that ftpd process is not killed by kernel with SIGXFSZ when user has"filesize" l
ftpd(8): fix user context handling.Apply authenticated user context after update of wtmp(5) at start of session,so that ftpd process is not killed by kernel with SIGXFSZ when user has"filesize" limit lower than size of system wtmp file. Same appliesto session finalization: revert to super-user context before update of wtmp.If ftpd hits limit while writing a file at user request,do not get killed with SIGXFSZ instantly but apparently ignore the signal,process error and report it to the user, and continue with the session.PR: 143570Approved by: avg (mentor), mav (mentor)MFC after: 1 week
Improve blacklist support before upgrading libblacklistThe locally declared enum of blacklistd actions needs to behidden when the soon to be committed changes to libblacklistare brought into the
Improve blacklist support before upgrading libblacklistThe locally declared enum of blacklistd actions needs to behidden when the soon to be committed changes to libblacklistare brought into the tree. Fix the type of the "msg" parameterto match the library.There should be no functional changes.MFC after: 3 daysSponsored by: The FreeBSD Foundation
libexec: normalize paths using SRCTOP-relative paths or :H when possibleThis simplifies make logic/outputMFC after: 1 monthSponsored by: Dell EMC Isilon
Fix build when WITHOUT_BLACKLIST=yes is specifiedPR: 214409Submitted by: matthewReported by: matteoMFC after: 3 daysSponsored by: The FreeBSD Foundation
Revisit blacklistd support in ftpdEnhance blacklistd support to not log anything by default,unless blacklistd support is enabled on the command line.Document new flag in man page, cleanup patches
Revisit blacklistd support in ftpdEnhance blacklistd support to not log anything by default,unless blacklistd support is enabled on the command line.Document new flag in man page, cleanup patches to be lessintrusive in code.Reported by: Rick AdamsReviewed by: cem, emasteMFC after: 1 weekSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D8374
DIRDEPS_BUILD: Update dependenciesApproved by: re (gjb)Sponsored by: EMC / Isilon Storage Division
Update blacklist support in ftpd to clarify fd usageThe ftp daemon dups the control socket to stdin and uses that fdthroughout the code. Clarify this usage slightly by changing fromexplicit use
Update blacklist support in ftpd to clarify fd usageThe ftp daemon dups the control socket to stdin and uses that fdthroughout the code. Clarify this usage slightly by changing fromexplicit use of "0" for the fd to a variable, to make it clear whatthe zero represents in the non-blacklist code. Make theblacklist_notify routine use STDIN_FILENO so as to have less of a"magic number" feel to the code.Reviewed by: cemSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D6716
Add blacklist support to ftpdReviewed by: rpauloApproved by: rpauloRelnotes: YESSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D6703
Declare line[] in the outermost scope of retrieve() instead ofdeclaring it in an inner scope and then using it via a pointerin the outer scope.Reported by: CoverityCID: 605895
Rename getline with get_line to avoid collision with getline(3)When getline(3) in 2009 was added a _WITH_GETLINE guard has also been added.This rename is made in preparation for the removal of thi
Rename getline with get_line to avoid collision with getline(3)When getline(3) in 2009 was added a _WITH_GETLINE guard has also been added.This rename is made in preparation for the removal of this guard
libexec: minor spelling fixes in comments.No functional change.
ftpd: replace malloc + memset 0 with calloc.It is faster and usually safer.Use NULL instead of zero for the pointer.
DIRDEPS_BUILD: Regenerate without local dependencies.These are no longer needed after the recent 'beforebuild: depend' changesand hooking DIRDEPS_BUILD into a subset of FAST_DEPEND which supports
DIRDEPS_BUILD: Regenerate without local dependencies.These are no longer needed after the recent 'beforebuild: depend' changesand hooking DIRDEPS_BUILD into a subset of FAST_DEPEND which supportsskipping 'make depend'.Sponsored by: EMC / Isilon Storage Division
Upgrade libxo to 0.4.5.Local changes incorporated by 0.4.5: r284340Local changes retained: r276260, r282117Obtained from: https://github.com/Juniper/libxo
Needs libxo
Fix typo when deregistering the VLAN unconfig event handlerSubmitted by: Masao Uebayashi <[email protected]>MFC after: 3 days
dirdeps.mk now sets DEP_RELDIR
Fix a lock up where we enter swapper() with interrupts disabled.In smp_rendezvous_cpus we expect to wait for all cpus to entersmp_rendezvous_action. If we call this holding a proc lock swapper may
Fix a lock up where we enter swapper() with interrupts disabled.In smp_rendezvous_cpus we expect to wait for all cpus to entersmp_rendezvous_action. If we call this holding a proc lock swapper mayattempt to also lock it, however as interrupts are disabled the cpu neverhandles the ipi. Because smp_rendezvous_action waits for all signaledcpus before contining it may get caught waiting for the cpu running swapperas the proc mutex will be unlocked after smp_rendezvous_cpus finishes.The fix is to enable interrupts in the configure stage as we should bedoing.MFC after: 1 week
Updated dependencies
12345678910>>...16