| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
members to 64bit types. Assign new syscall numbers for (almost
all) the syscalls that involve the affected types, including anything
with time_t, timeval, itimerval, timespec, rusage, dirent, stat,
or kevent arguments. Add a d_off member to struct dirent and replace
getdirentries() with getdents(), thus immensely simplifying and
accelerating telldir/seekdir. Build perl with -DBIG_TIME.
Bump the major on every single base library: the compat bits included
here are only good enough to make the transition; the T32 compat
option will be burned as soon as we've reached the new world are
are happy with the snapshots for all architectures.
DANGER: ABI incompatibility. Updating to this kernel requires extra
work or you won't be able to login: install a snapshot instead.
Much assistance in fixing userland issues from deraadt@ and tedu@
and build assistance from todd@ and otto@
|
|
already open fd. Will be used to make separate challenge/response
invocations of login_skey keep the record locked. Also properly
escape minus signs in man page. OK henning@ jmc@
|
|
To build you must:
cd /usr/src && make obj && make includes
cd lib/libc && make depend && make && NOMAN=1 sudo make install
cd /usr/src && make build
|
|
now build libraries with propolice enabled. Without this, existing
binaries (such as ports/packages) that link with any system library
other than libc will fail with an undefined symbol of "___guard"
(__guard on ELF).
Pointed out by markus@ and discussed with deraadt@
|
|
where each user gets their own file, which is owned by that user.
An old S/Key database may be converted by running "skeyinit -C" as root.
Programs that need to access the S/Key database no longer need to be
setuid root. They must now be setgid auth instead.
|
|
|
|
before. A new general rule has been formed:
When you change a library to *use* a new API of another library
(which may there only have given need to a minor number crank), you
must crank the *major*.
The specific scenario that was seen this time was:
I libc 16 started without the SHA interface
II libskey 0 did obviously not use it
III installation of libc 16 and libskey 0
IV software installed that uses libskey
V libc 16 got SHA added, minor number update
VI libskey 0 was changed to use it
VII libc was cranked to 17 for other reasons
VIII installation of libc 17 and newer libskey 0
IX use of the software installed in IV fails!
This is due to the fact that the libskey using software searches for the most
current libskey 0, which uses the SHA interface, and the most current libc 16
which was the old one installed in III, which does not provide SHA, and thus
gets two incompatible libraries linked with it. Crash!
One could argue that people should install all library versions that is made
available, but that is really not feasible. One have to recognize that people
may build their systems at arbitrary points in time and then go on to install
software they know work at their lib revision levels. A later build should
not break this software, that may only be available in binary versions.
|
|
|
|
Add skeygetnext() for iterating over the key file.
|
|
|
|
|
|
|
|
|
|
|
|
|
guenther
millert
marc
niklas
deraadt