History log of /freebsd-head/contrib/tcp_wrappers/tcpd.h
Revision Date Author Comments
f4710006d6643a9aa5d4ce2fc8a5cd53db0c9115 06-Jan-2017 dim <dim@FreeBSD.org> After r311459, some ports can break, because a few of the newly added
prototypes in <tcpd.h> use FILE. Pull in a minimal forward declaration
of FILE from <stdio.h> to minimize impact. Sorry for the breakage.

Reported by: Shawn Webb <shawn.webb@hardenedbsd.org>
X-MFC-With: r311459
9b17e47c8bc5fd37c567217504c8879e3068132a 05-Jan-2017 dim <dim@FreeBSD.org> Also remove unnecessary extern keywords from tcpd.h.

Noticed by: kib
X-MFC-With: r311459
a171adba840770639c0baac2e3b3d6e9e41f7ce5 05-Jan-2017 dim <dim@FreeBSD.org> Put proper prototypes in tcpd.h

Clang 4.0.0 complains about tcpd.h's not-really-prototypes, e.g.:

/usr/include/tcpd.h:75:24: error: this function declaration is not a prototype [-Werror,-Wstrict-prototypes]
extern int hosts_access(); /* access control */
^

To fix this, turn these declarations into real prototypes. While here,
garbage collect the incompatible rfc931() function from scaffold.c, as
it is never used.

Reviewed by: emaste
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D9052
00d578928eca75be320b36d37543a7e2a4f9fbdb 27-May-2016 grehan <grehan@FreeBSD.org> Create branch for bhyve graphics import.
de8bceaa35fdc8a8ada24202faa1616ebb051314 17-Jan-2015 pfg <pfg@FreeBSD.org> MFC r272947, r272950:

tcpd: complete function prototypes.
tcpd.h: add prototype for hosts_ctl

This clears up at least a build issues on mysql-server
ports. While here also replace some spaces with tabs
in our headers.

PR: 32808
PR: 42336
42209922ff3dc9d65e9ddb3ef6f1da42e818ccf0 11-Oct-2014 pfg <pfg@FreeBSD.org> tcpd.h: add prototype for hosts_ctl

According the hosts_access(3) man page the hosts_ctl() prototype
should be in tcpd.h. For now, follow other declarations and don't
add the arguments in the prototype.

Reference:
https://www.illumos.org/issues/4385

PR: 32808
MFC after: 2 weeks
0a516f07e6fa759f5faaa95cad402274eb34c189 11-Oct-2014 pfg <pfg@FreeBSD.org> tcpd: complete function prototypes.

This clears up at least a build issues on mysql-server
ports. While here also replace some spaces with tabs
in our headers.

PR: 42336
MFC after: 2 weeks
eb1a5f8de9f7ea602c373a710f531abbf81141c4 21-Feb-2014 gjb <gjb@FreeBSD.org> Move ^/user/gjb/hacking/release-embedded up one directory, and remove
^/user/gjb/hacking since this is likely to be merged to head/ soon.

Sponsored by: The FreeBSD Foundation
6b01bbf146ab195243a8e7d43bb11f8835c76af8 27-Dec-2013 gjb <gjb@FreeBSD.org> Copy head@r259933 -> user/gjb/hacking/release-embedded for initial
inclusion of (at least) arm builds with the release.

Sponsored by: The FreeBSD Foundation
09f9c897d33c41618ada06fbbcf1a9b3812dee53 19-Oct-2010 jamie <jamie@FreeBSD.org> A new jail(8) with a configuration file, to replace the work currently done
by /etc/rc.d/jail.
f1216d1f0ade038907195fc114b7e630623b402c 19-Mar-2010 delphij <delphij@FreeBSD.org> Create a custom branch where I will be able to do the merge.
19b6af98ec71398e77874582eb84ec5310c7156f 22-Nov-2008 dfr <dfr@FreeBSD.org> Clone Kip's Xen on stable/6 tree so that I can work on improving FreeBSD/amd64
performance in Xen's HVM mode.
cf5320822f93810742e3d4a1ac8202db8482e633 19-Oct-2008 lulf <lulf@FreeBSD.org> - Import the HEAD csup code which is the basis for the cvsmode work.
b42951578188c5aab5c9f8cbcde4a743f8092cdc 02-Apr-2000 cvs2svn <cvs2svn@FreeBSD.org> This commit was manufactured by cvs2svn to create branch 'ALSA'.
225d233deb08e4006d8cabd0a6572f76d729f90d 03-Feb-2000 shin <shin@FreeBSD.org> Missing tcp_wrapper IPv6 support seemed to be a bug, so commit it.

Now when tcp_wrapper is enabled by inetd -wW,
several accesses which should be permitted are refused only for IPv6,
if hostname is used to decide the host to be allowed.
IPv6 users will be just upset.

About security related concern.
-All extensions are wrapped by #ifdef INET6, so people can completely
disable the extension by recompile libwrap without INET6 option.
-Access via IPv6 is not enabled by default.
People need to enable IPv6 access by changing /etc/inetd.conf at first,
by adding tcp6 and/or tcp46 entries.
-The base of patches are from KAME package and are actually daily used
for more than a year in several Japanese IPv6 environments.
-Patches are reviewed by markm.

Approved by: jkh

Submitted by: Hajimu UMEMOTO <ume@mahoroba.org>
Reviewed by: markm
Obtained from: KAME project
06c148304a969b7ab848c2ae00bc474c2f6b87b6 14-Mar-1999 markm <markm@FreeBSD.org> Clean import of TCP-wrappers by Wietse Venema.
Rest of build to follow.