Relax the limitation of what is an acceptable unicast IP.

Remove the IN_BADCLASS() check which filters out the experimental IPv4
address space. Now there are no more experiments in IPv4 and so there

Relax the limitation of what is an acceptable unicast IP.

Remove the IN_BADCLASS() check which filters out the experimental IPv4
address space. Now there are no more experiments in IPv4 and so there
is less reason for these network daemons to deny such an IP.
Everything still disallows multicast IPs (224/4) and loopback (127/8)
a few also disallow 0/8 but this is not consistent.

In any case using 240/4 in production is a really bad idea but it is
not up to this software to prevent you from being a fool.

OK deraadt@ tb@

show more ...

Use explicit_bzero to erase secrets

from Scott Cheloa, ok tb@

use crypt_checkpass to simplify password checking logic.

remove pam and shadow code that's not used. ok deraadt jca

need to use shadow passwd function here, reminded by sthen

Use pread/pwrite instead separate lseek+read/write for lastlog.
Cast to off_t before multiplication to avoid truncation on ILP32

ok kettenis@ mmcc@

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_N

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

show more ...

remove networks(5) support; it wasn't even documented to exist;
"just go ahead" deraadt@

Delete unused variables, from Michael W Bombardieri.

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(th

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

show more ...

realloc fixes; ok deraadt millert

small fix to compile. spot by marc@

string cleaning; ok millert

strlcpy and snprintf; various people ok

intial -> initial;

the great intial witch hunt, as prompted by tdeval@

os-aix-dso.c: ok henning@
ab.C: ok drahn@

Paul Mackerras and the Australian National University have worked things
out, and as a result, Paul now owns copyright on all these files, with the
proper terms.

use inet_aton() instead of inet_addr(); millert ok

license update of CMU parts. due to communication with wcw+@andrew.cmu.edu,
pushed for by tygs@netcologne.de. Apparently we also now known how to talk
to the lawyers there, if we were so mad. Note

license update of CMU parts. due to communication with wcw+@andrew.cmu.edu,
pushed for by tygs@netcologne.de. Apparently we also now known how to talk
to the lawyers there, if we were so mad. Note that a few other copyright
issues in pppd still remain, so this does not close this story.

show more ...

Manual cleanup of remaining userland __P use (excluding packages maintained outside the tree)

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be don

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

show more ...

remove extraneous braces

use strlcpy vs strncpy+a[len-1]='\0'

Fine, I'm convinced -- don't set the mask to ~0.

Force mask to ~0 only if hostname (kudos to james@squish.net)

uid_t and gid_t, and use %u