Update man.cgi URL.

This commit is contained in:
Wolfram Schneider 1997-09-28 09:24:40 +00:00
parent 29e6e1fbbb
commit 56f2129c34
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/www/; revision=2011
15 changed files with 145 additions and 145 deletions

View file

@ -24,7 +24,7 @@
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
# SUCH DAMAGE. # SUCH DAMAGE.
# #
# $Id: ports.cgi,v 1.1 1997-09-19 16:47:40 wosch Exp $ # $Id: ports.cgi,v 1.2 1997-09-28 09:24:39 wosch Exp $
# #
# ports.cgi - search engine for FreeBSD ports # ports.cgi - search engine for FreeBSD ports
# o search for a port by name or description # o search for a port by name or description
@ -526,7 +526,7 @@ as database for all operation. INDEX,v will be updated by hand
by the portsmeister.<p> by the portsmeister.<p>
You may also search the You may also search the
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+Ports">ports manual pages</a>.<p> <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+Ports">ports manual pages</a>.<p>
Get the <a href ="source">Source</a> of this script.<p> Get the <a href ="source">Source</a> of this script.<p>

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-07-09 14:20:44 $"> <!ENTITY date "$Date: 1997-09-28 09:24:31 $">
<!ENTITY title "FreeBSD Documentation Project"> <!ENTITY title "FreeBSD Documentation Project">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: docproj.sgml,v 1.8 1997-07-09 14:20:44 eivind Exp $ --> <!-- $Id: docproj.sgml,v 1.9 1997-09-28 09:24:31 wosch Exp $ -->
<html> <html>
&header; &header;
@ -107,7 +107,7 @@
documentation, the preferred method is <em>context documentation, the preferred method is <em>context
diff</em> relative to the text as it appears in diff</em> relative to the text as it appears in
FreeBSD-current. (see the <code><a FreeBSD-current. (see the <code><a
href="http://www.de.freebsd.org/de/cgi/man.cgi?diff(1)">diff(1)</a> href="http://www.freebsd.org/cgi/man.cgi?diff(1)">diff(1)</a>
</code> manual page </code> manual page
for details on generating a context diff). The for details on generating a context diff). The
FreeBSD-current text for the handbook can be found in:</p> FreeBSD-current text for the handbook can be found in:</p>

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-21 11:05:17 $"> <!ENTITY date "$Date: 1997-09-28 09:24:31 $">
<!ENTITY title "Documentation"> <!ENTITY title "Documentation">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: docs.sgml,v 1.30 1997-09-21 11:05:17 wosch Exp $ --> <!-- $Id: docs.sgml,v 1.31 1997-09-28 09:24:31 wosch Exp $ -->
<html> <html>
&header; &header;
@ -71,53 +71,53 @@ translation</a> of the handbook (EUC encoding).</p>
to FreeBSD.</p> to FreeBSD.</p>
<a name="man"></a> <a name="man"></a>
<h2><a href="http://www.de.freebsd.org/de/cgi/man.cgi"> <h2><a href="http://www.freebsd.org/cgi/man.cgi">
Manual Pages</a></h2> Manual Pages</a></h2>
<dl> <dl>
<dt><strong>FreeBSD</strong></dt> <dt><strong>FreeBSD</strong></dt>
<dd>For release: <dd>For release:
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+1.0-RELEASE">1.0</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+1.0-RELEASE">1.0</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+1.1-RELEASE">1.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+1.1-RELEASE">1.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+1.1.5.1-RELEASE">1.1.5.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+1.1.5.1-RELEASE">1.1.5.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.0-RELEASE">2.0</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.0-RELEASE">2.0</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.0.5-RELEASE">2.0.5</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.0.5-RELEASE">2.0.5</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.0-RELEASE">2.1.0</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.0-RELEASE">2.1.0</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.5-RELEASE">2.1.5</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.5-RELEASE">2.1.5</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.6.1-RELEASE">2.1.6.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.6.1-RELEASE">2.1.6.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.7.1-RELEASE">2.1.7.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.7.1-RELEASE">2.1.7.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.2.1-RELEASE">2.2.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.2.1-RELEASE">2.2.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.2.2-RELEASE">2.2.2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.2.2-RELEASE">2.2.2</a>,
<a <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+3.0-current">3.0-current</a>, href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+3.0-current">3.0-current</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+Ports">Ports</a>. <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+Ports">Ports</a>.
</dd> </dd>
<dt><strong>Other Systems</strong></dt> <dt><strong>Other Systems</strong></dt>
<dd> <dd>
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=v7">Unix Seventh Edition (V7)</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=v7">Unix Seventh Edition (V7)</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.8BSD">2.8BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.8BSD">2.8BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.9BSD">2.9.1BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.9BSD">2.9.1BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.10BSD">2.10BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.10BSD">2.10BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.11BSD">2.11BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.11BSD">2.11BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=4.3BSD+Reno">4.3BSD Reno</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=4.3BSD+Reno">4.3BSD Reno</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=NET%2F2">NET/2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=NET%2F2">NET/2</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=386BSD+0.1">386BSD 0.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=386BSD+0.1">386BSD 0.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=4.4BSD+Lite2">4.4BSD Lite2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=4.4BSD+Lite2">4.4BSD Lite2</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=linux">Linux Slackware</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=linux">Linux Slackware</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=NetBSD">NetBSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=NetBSD">NetBSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=OpenBSD">OpenBSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=OpenBSD">OpenBSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=plan9">Plan 9</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=plan9">Plan 9</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=sunos4">SunOS 4.x</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=sunos4">SunOS 4.x</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=sunos5">SunOS 5.x</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=sunos5">SunOS 5.x</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=ultrix">ULTRIX 4.2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=ultrix">ULTRIX 4.2</a>,
and and
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=XFree86">XFree86</a>. <a href="http://www.freebsd.org/cgi/man.cgi?manpath=XFree86">XFree86</a>.
</dd> </dd>
</dl> </dl>
<!-- <!--
<form action="http://www.de.freebsd.org/de/cgi/man.cgi" method="GET"> <form action="http://www.freebsd.org/cgi/man.cgi" method="GET">
Manual Page Search for: Manual Page Search for:
<input type="hidden" name="proto" value="1.0"> <input type="hidden" name="proto" value="1.0">
<input type="hidden" name="apropos" value="0"> <input type="hidden" name="apropos" value="0">

View file

@ -1,10 +1,10 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY base CDATA "../.."> <!ENTITY base CDATA "../..">
<!ENTITY date "$Date: 1997-07-05 23:04:44 $"> <!ENTITY date "$Date: 1997-09-28 09:24:40 $">
<!ENTITY title "FreeBSD 2.2 Release Notes"> <!ENTITY title "FreeBSD 2.2 Release Notes">
<!ENTITY % includes SYSTEM "../../includes.sgml"> %includes; <!ENTITY % includes SYSTEM "../../includes.sgml"> %includes;
]> ]>
<!-- $Id: notes.sgml,v 1.2 1997-07-05 23:04:44 wosch Exp $ --> <!-- $Id: notes.sgml,v 1.3 1997-09-28 09:24:40 wosch Exp $ -->
<html> <html>
&header; &header;
@ -43,7 +43,7 @@ in 2.2.
The number of EISA slots to probe is now a fully supported option, The number of EISA slots to probe is now a fully supported option,
including the ability to save the value from a UserConfig session including the ability to save the value from a UserConfig session
with with
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?dset(8)">dset(8)</a>. <a href="http://www.freebsd.org/cgi/man.cgi?dset(8)">dset(8)</a>.
This helps owners of HP NetServer LC machines to This helps owners of HP NetServer LC machines to
install the system on their hardware. install the system on their hardware.
@ -77,7 +77,7 @@ driver, eliminating many of the previously existing problems with
their mutual interaction. their mutual interaction.
Syscons now supports cut & paste in textmode using the Syscons now supports cut & paste in textmode using the
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?moused(8)">moused(8)</a> <a href="http://www.freebsd.org/cgi/man.cgi?moused(8)">moused(8)</a>
utility. utility.
2.2 is the first release that includes full CD-R support for the 2.2 is the first release that includes full CD-R support for the
@ -155,10 +155,10 @@ from the old -D Makefile kludges, towards a system of "opt_foo.h"
kernel include files, allowing Makefile dependencies to work again. kernel include files, allowing Makefile dependencies to work again.
We expect the old hack that blows the entire compile directory away We expect the old hack that blows the entire compile directory away
on each run of on each run of
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?config(8)">config(8)</a> <a href="http://www.freebsd.org/cgi/man.cgi?config(8)">config(8)</a>
to go away anytime soon. Unless you're changing to go away anytime soon. Unless you're changing
weird options, you might now consider using the -n option to weird options, you might now consider using the -n option to
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?config(8)">config(8)</a>, <a href="http://www.freebsd.org/cgi/man.cgi?config(8)">config(8)</a>,
or setting the env variable NO_CONFIG_CLOBBER, if CPU time is costly for or setting the env variable NO_CONFIG_CLOBBER, if CPU time is costly for
you. See also the comments in the handbook about how it works. you. See also the comments in the handbook about how it works.

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-20 08:15:58 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "Search"> <!ENTITY title "Search">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: search.sgml,v 1.17 1997-09-20 08:15:58 wosch Exp $ --> <!-- $Id: search.sgml,v 1.18 1997-09-28 09:24:32 wosch Exp $ -->
<html> <html>
&header; &header;
@ -12,7 +12,7 @@
<ul> <ul>
<li><a href="http://www.freebsd.org/cgi/query-pr-summary.cgi?query"> <li><a href="http://www.freebsd.org/cgi/query-pr-summary.cgi?query">
GNATS Problem Reports (Bugs) database</a> GNATS Problem Reports (Bugs) database</a>
<li><a href="http://www.de.freebsd.org/de/cgi/man.cgi">Manual Pages</a> <li><a href="http://www.freebsd.org/cgi/man.cgi">Manual Pages</a>
<li><a href="http://www.freebsd.org/cgi/ports.cgi"> <li><a href="http://www.freebsd.org/cgi/ports.cgi">
Ports Changes</a> Ports Changes</a>
<li><a href="http://minnie.cs.adfa.oz.au/FreeBSD-srctree/FreeBSD.html"> <li><a href="http://minnie.cs.adfa.oz.au/FreeBSD-srctree/FreeBSD.html">

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-07-05 23:02:47 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "FreeBSD Security Guide"> <!ENTITY title "FreeBSD Security Guide">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: security.sgml,v 1.5 1997-07-05 23:02:47 wosch Exp $ --> <!-- $Id: security.sgml,v 1.6 1997-09-28 09:24:32 wosch Exp $ -->
<HTML> <HTML>
<HEAD> <HEAD>
@ -15,7 +15,7 @@
<H1>FreeBSD Security Guide</H1> <H1>FreeBSD Security Guide</H1>
<em>Last Updated: $Date: 1997-07-05 23:02:47 $ </em> <em>Last Updated: $Date: 1997-09-28 09:24:32 $ </em>
<P>This guide attempts to document some of the tips and tricks used by <P>This guide attempts to document some of the tips and tricks used by
many FreeBSD security experts for securing systems and writing secure many FreeBSD security experts for securing systems and writing secure
@ -53,20 +53,20 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><UL> <P><UL>
<LI><A NAME="#rule1_1"></A> <LI><A NAME="#rule1_1"></A>
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?strcpy(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?strcpy(3)">
strcpy(3)</a> and <a strcpy(3)</a> and <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?sprintf(3)"> href="http://www.freebsd.org/cgi/man.cgi?sprintf(3)">
sprintf(3)</a> calls from sprintf(3)</a> calls from
unbounded data. Use unbounded data. Use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?strncpy(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?strncpy(3)">
strncpy(3)</a> and strncpy(3)</a> and
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?snprintf(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?snprintf(3)">
snprintf(3)</a> when the length is known snprintf(3)</a> when the length is known
(or implement some other form of bounds-checking when it's not). (or implement some other form of bounds-checking when it's not).
In fact, never use In fact, never use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?gets(3)">gets(3)</a> <a href="http://www.freebsd.org/cgi/man.cgi?gets(3)">gets(3)</a>
or or
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?sprintf(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?sprintf(3)">
sprintf(3)</a>, period. sprintf(3)</a>, period.
<P><LI><A NAME="#rule1_2"></A>Watch for strvis(3) and getenv(3) abuse. <P><LI><A NAME="#rule1_2"></A>Watch for strvis(3) and getenv(3) abuse.
@ -78,21 +78,21 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
be paranoid! be paranoid!
<P><LI>Every time you see an <P><LI>Every time you see an
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?open(2)">open(2)</a> <a href="http://www.freebsd.org/cgi/man.cgi?open(2)">open(2)</a>
or or
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?stat(2)">stat(2)</a> <a href="http://www.freebsd.org/cgi/man.cgi?stat(2)">stat(2)</a>
call, ask yourself, "What call, ask yourself, "What
if it's a symbolic link?" if it's a symbolic link?"
<P><LI><A NAME="#rule1_3"></A>All uses of <P><LI><A NAME="#rule1_3"></A>All uses of
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?mktemp(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?mktemp(3)">
mktemp(3)</a>, <a mktemp(3)</a>, <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?tempnam(3)"> href="http://www.freebsd.org/cgi/man.cgi?tempnam(3)">
tempnam</a>, <a tempnam</a>, <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?mkstemp(3)"> href="http://www.freebsd.org/cgi/man.cgi?mkstemp(3)">
mkstemp(3)</a>, mkstemp(3)</a>,
etc.; make sure that they use etc.; make sure that they use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?mkstemp(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?mkstemp(3)">
mkstemp(3)</a> instead. Also look for races in mkstemp(3)</a> instead. Also look for races in
/tmp in general, being aware that there are very few things can be atomic /tmp in general, being aware that there are very few things can be atomic
in /tmp: in /tmp:
@ -100,7 +100,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<LI>Creating a directory. This will either succeed or fail. <LI>Creating a directory. This will either succeed or fail.
<LI>Opening a file O_CREAT | O_EXCL <LI>Opening a file O_CREAT | O_EXCL
</UL> </UL>
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?mkstemp(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?mkstemp(3)">
mkstemp(3)</a> properly handles this for you, so all temp files should mkstemp(3)</a> properly handles this for you, so all temp files should
use mkstemp to guarantee there's no race and that the permissions use mkstemp to guarantee there's no race and that the permissions
are right. are right.
@ -127,7 +127,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><LI><A NAME="#rule1_8"></A>Don't just grep for the usual suspects <P><LI><A NAME="#rule1_8"></A>Don't just grep for the usual suspects
in programs which run at elevated privs. Look line by line for possible in programs which run at elevated privs. Look line by line for possible
overflows in these cases since there are a lot more ways than overflows in these cases since there are a lot more ways than
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?strcpy(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?strcpy(3)">
strcpy(3)</a> strcpy(3)</a>
and friends to cause buffer overflows. and friends to cause buffer overflows.
@ -138,7 +138,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><LI><A NAME="#rule2"></A>Do uid management. So drop privs as soon as possible, <P><LI><A NAME="#rule2"></A>Do uid management. So drop privs as soon as possible,
and really drop them. Switching between euid and uid is not enough. Use and really drop them. Switching between euid and uid is not enough. Use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?setuid">setuid()</a> <a href="http://www.freebsd.org/cgi/man.cgi?setuid">setuid()</a>
when you can. when you can.
<P><LI><A NAME="#rule3"></A>Never display configuration file contents on errors. <P><LI><A NAME="#rule3"></A>Never display configuration file contents on errors.
@ -161,7 +161,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><LI><A NAME="#rule4_3"></A>When sending changes around for review, always <P><LI><A NAME="#rule4_3"></A>When sending changes around for review, always
use context or unidiff format diffs which may be easily fed to use context or unidiff format diffs which may be easily fed to
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?patch(1)">patch(1)</a>. <a href="http://www.freebsd.org/cgi/man.cgi?patch(1)">patch(1)</a>.
Do not simply send whole files! Diffs are much easier to read and apply to Do not simply send whole files! Diffs are much easier to read and apply to
local sources (especially those in which multiple, simultaneous changes local sources (especially those in which multiple, simultaneous changes
may be taking place). All changes should be relative to 3.0-current may be taking place). All changes should be relative to 3.0-current
@ -190,7 +190,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
sufficiently reentrant to make this safe. sufficiently reentrant to make this safe.
<P><LI><A NAME="#rule6"></A>Pay special attention to <P><LI><A NAME="#rule6"></A>Pay special attention to
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?realloc(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?realloc(3)">
realloc(3)</a> usage - more realloc(3)</a> usage - more
often than not, it's not done correctly. often than not, it's not done correctly.

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-26 11:33:10 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "Support"> <!ENTITY title "Support">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: support.sgml,v 1.33 1997-09-26 11:33:10 stb Exp $ --> <!-- $Id: support.sgml,v 1.34 1997-09-28 09:24:32 wosch Exp $ -->
<html> <html>
&header; &header;
@ -114,7 +114,7 @@
<h2><a <h2><a
href="http://www.freebsd.org/cgi/cvsweb.cgi">CVS Repository</a></h2> href="http://www.freebsd.org/cgi/cvsweb.cgi">CVS Repository</a></h2>
<p><a href="http://www.de.freebsd.org/de/cgi/man.cgi?cvs">CVS</a> <p><a href="http://www.freebsd.org/cgi/man.cgi?cvs">CVS</a>
(the Concurrent Version System) is the tool we use for (the Concurrent Version System) is the tool we use for
keeping our sources under control. Every change (with keeping our sources under control. Every change (with
accompanying log message explaining its purpose) from accompanying log message explaining its purpose) from

View file

@ -24,7 +24,7 @@
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
# SUCH DAMAGE. # SUCH DAMAGE.
# #
# $Id: ports.cgi,v 1.1 1997-09-19 16:47:40 wosch Exp $ # $Id: ports.cgi,v 1.2 1997-09-28 09:24:39 wosch Exp $
# #
# ports.cgi - search engine for FreeBSD ports # ports.cgi - search engine for FreeBSD ports
# o search for a port by name or description # o search for a port by name or description
@ -526,7 +526,7 @@ as database for all operation. INDEX,v will be updated by hand
by the portsmeister.<p> by the portsmeister.<p>
You may also search the You may also search the
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+Ports">ports manual pages</a>.<p> <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+Ports">ports manual pages</a>.<p>
Get the <a href ="source">Source</a> of this script.<p> Get the <a href ="source">Source</a> of this script.<p>

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-07-09 14:20:44 $"> <!ENTITY date "$Date: 1997-09-28 09:24:31 $">
<!ENTITY title "FreeBSD Documentation Project"> <!ENTITY title "FreeBSD Documentation Project">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: docproj.sgml,v 1.8 1997-07-09 14:20:44 eivind Exp $ --> <!-- $Id: docproj.sgml,v 1.9 1997-09-28 09:24:31 wosch Exp $ -->
<html> <html>
&header; &header;
@ -107,7 +107,7 @@
documentation, the preferred method is <em>context documentation, the preferred method is <em>context
diff</em> relative to the text as it appears in diff</em> relative to the text as it appears in
FreeBSD-current. (see the <code><a FreeBSD-current. (see the <code><a
href="http://www.de.freebsd.org/de/cgi/man.cgi?diff(1)">diff(1)</a> href="http://www.freebsd.org/cgi/man.cgi?diff(1)">diff(1)</a>
</code> manual page </code> manual page
for details on generating a context diff). The for details on generating a context diff). The
FreeBSD-current text for the handbook can be found in:</p> FreeBSD-current text for the handbook can be found in:</p>

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-21 11:05:17 $"> <!ENTITY date "$Date: 1997-09-28 09:24:31 $">
<!ENTITY title "Documentation"> <!ENTITY title "Documentation">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: docs.sgml,v 1.30 1997-09-21 11:05:17 wosch Exp $ --> <!-- $Id: docs.sgml,v 1.31 1997-09-28 09:24:31 wosch Exp $ -->
<html> <html>
&header; &header;
@ -71,53 +71,53 @@ translation</a> of the handbook (EUC encoding).</p>
to FreeBSD.</p> to FreeBSD.</p>
<a name="man"></a> <a name="man"></a>
<h2><a href="http://www.de.freebsd.org/de/cgi/man.cgi"> <h2><a href="http://www.freebsd.org/cgi/man.cgi">
Manual Pages</a></h2> Manual Pages</a></h2>
<dl> <dl>
<dt><strong>FreeBSD</strong></dt> <dt><strong>FreeBSD</strong></dt>
<dd>For release: <dd>For release:
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+1.0-RELEASE">1.0</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+1.0-RELEASE">1.0</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+1.1-RELEASE">1.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+1.1-RELEASE">1.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+1.1.5.1-RELEASE">1.1.5.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+1.1.5.1-RELEASE">1.1.5.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.0-RELEASE">2.0</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.0-RELEASE">2.0</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.0.5-RELEASE">2.0.5</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.0.5-RELEASE">2.0.5</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.0-RELEASE">2.1.0</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.0-RELEASE">2.1.0</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.5-RELEASE">2.1.5</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.5-RELEASE">2.1.5</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.6.1-RELEASE">2.1.6.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.6.1-RELEASE">2.1.6.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.1.7.1-RELEASE">2.1.7.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.1.7.1-RELEASE">2.1.7.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.2.1-RELEASE">2.2.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.2.1-RELEASE">2.2.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+2.2.2-RELEASE">2.2.2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+2.2.2-RELEASE">2.2.2</a>,
<a <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+3.0-current">3.0-current</a>, href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+3.0-current">3.0-current</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=FreeBSD+Ports">Ports</a>. <a href="http://www.freebsd.org/cgi/man.cgi?manpath=FreeBSD+Ports">Ports</a>.
</dd> </dd>
<dt><strong>Other Systems</strong></dt> <dt><strong>Other Systems</strong></dt>
<dd> <dd>
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=v7">Unix Seventh Edition (V7)</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=v7">Unix Seventh Edition (V7)</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.8BSD">2.8BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.8BSD">2.8BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.9BSD">2.9.1BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.9BSD">2.9.1BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.10BSD">2.10BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.10BSD">2.10BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=2.11BSD">2.11BSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=2.11BSD">2.11BSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=4.3BSD+Reno">4.3BSD Reno</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=4.3BSD+Reno">4.3BSD Reno</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=NET%2F2">NET/2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=NET%2F2">NET/2</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=386BSD+0.1">386BSD 0.1</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=386BSD+0.1">386BSD 0.1</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=4.4BSD+Lite2">4.4BSD Lite2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=4.4BSD+Lite2">4.4BSD Lite2</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=linux">Linux Slackware</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=linux">Linux Slackware</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=NetBSD">NetBSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=NetBSD">NetBSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=OpenBSD">OpenBSD</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=OpenBSD">OpenBSD</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=plan9">Plan 9</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=plan9">Plan 9</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=sunos4">SunOS 4.x</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=sunos4">SunOS 4.x</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=sunos5">SunOS 5.x</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=sunos5">SunOS 5.x</a>,
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=ultrix">ULTRIX 4.2</a>, <a href="http://www.freebsd.org/cgi/man.cgi?manpath=ultrix">ULTRIX 4.2</a>,
and and
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?manpath=XFree86">XFree86</a>. <a href="http://www.freebsd.org/cgi/man.cgi?manpath=XFree86">XFree86</a>.
</dd> </dd>
</dl> </dl>
<!-- <!--
<form action="http://www.de.freebsd.org/de/cgi/man.cgi" method="GET"> <form action="http://www.freebsd.org/cgi/man.cgi" method="GET">
Manual Page Search for: Manual Page Search for:
<input type="hidden" name="proto" value="1.0"> <input type="hidden" name="proto" value="1.0">
<input type="hidden" name="apropos" value="0"> <input type="hidden" name="apropos" value="0">

View file

@ -1,10 +1,10 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY base CDATA "../.."> <!ENTITY base CDATA "../..">
<!ENTITY date "$Date: 1997-07-05 23:04:44 $"> <!ENTITY date "$Date: 1997-09-28 09:24:40 $">
<!ENTITY title "FreeBSD 2.2 Release Notes"> <!ENTITY title "FreeBSD 2.2 Release Notes">
<!ENTITY % includes SYSTEM "../../includes.sgml"> %includes; <!ENTITY % includes SYSTEM "../../includes.sgml"> %includes;
]> ]>
<!-- $Id: notes.sgml,v 1.2 1997-07-05 23:04:44 wosch Exp $ --> <!-- $Id: notes.sgml,v 1.3 1997-09-28 09:24:40 wosch Exp $ -->
<html> <html>
&header; &header;
@ -43,7 +43,7 @@ in 2.2.
The number of EISA slots to probe is now a fully supported option, The number of EISA slots to probe is now a fully supported option,
including the ability to save the value from a UserConfig session including the ability to save the value from a UserConfig session
with with
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?dset(8)">dset(8)</a>. <a href="http://www.freebsd.org/cgi/man.cgi?dset(8)">dset(8)</a>.
This helps owners of HP NetServer LC machines to This helps owners of HP NetServer LC machines to
install the system on their hardware. install the system on their hardware.
@ -77,7 +77,7 @@ driver, eliminating many of the previously existing problems with
their mutual interaction. their mutual interaction.
Syscons now supports cut & paste in textmode using the Syscons now supports cut & paste in textmode using the
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?moused(8)">moused(8)</a> <a href="http://www.freebsd.org/cgi/man.cgi?moused(8)">moused(8)</a>
utility. utility.
2.2 is the first release that includes full CD-R support for the 2.2 is the first release that includes full CD-R support for the
@ -155,10 +155,10 @@ from the old -D Makefile kludges, towards a system of "opt_foo.h"
kernel include files, allowing Makefile dependencies to work again. kernel include files, allowing Makefile dependencies to work again.
We expect the old hack that blows the entire compile directory away We expect the old hack that blows the entire compile directory away
on each run of on each run of
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?config(8)">config(8)</a> <a href="http://www.freebsd.org/cgi/man.cgi?config(8)">config(8)</a>
to go away anytime soon. Unless you're changing to go away anytime soon. Unless you're changing
weird options, you might now consider using the -n option to weird options, you might now consider using the -n option to
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?config(8)">config(8)</a>, <a href="http://www.freebsd.org/cgi/man.cgi?config(8)">config(8)</a>,
or setting the env variable NO_CONFIG_CLOBBER, if CPU time is costly for or setting the env variable NO_CONFIG_CLOBBER, if CPU time is costly for
you. See also the comments in the handbook about how it works. you. See also the comments in the handbook about how it works.

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-20 08:15:58 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "Search"> <!ENTITY title "Search">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: search.sgml,v 1.17 1997-09-20 08:15:58 wosch Exp $ --> <!-- $Id: search.sgml,v 1.18 1997-09-28 09:24:32 wosch Exp $ -->
<html> <html>
&header; &header;
@ -12,7 +12,7 @@
<ul> <ul>
<li><a href="http://www.freebsd.org/cgi/query-pr-summary.cgi?query"> <li><a href="http://www.freebsd.org/cgi/query-pr-summary.cgi?query">
GNATS Problem Reports (Bugs) database</a> GNATS Problem Reports (Bugs) database</a>
<li><a href="http://www.de.freebsd.org/de/cgi/man.cgi">Manual Pages</a> <li><a href="http://www.freebsd.org/cgi/man.cgi">Manual Pages</a>
<li><a href="http://www.freebsd.org/cgi/ports.cgi"> <li><a href="http://www.freebsd.org/cgi/ports.cgi">
Ports Changes</a> Ports Changes</a>
<li><a href="http://minnie.cs.adfa.oz.au/FreeBSD-srctree/FreeBSD.html"> <li><a href="http://minnie.cs.adfa.oz.au/FreeBSD-srctree/FreeBSD.html">

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-07-05 23:02:47 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "FreeBSD Security Guide"> <!ENTITY title "FreeBSD Security Guide">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: security.sgml,v 1.5 1997-07-05 23:02:47 wosch Exp $ --> <!-- $Id: security.sgml,v 1.6 1997-09-28 09:24:32 wosch Exp $ -->
<HTML> <HTML>
<HEAD> <HEAD>
@ -15,7 +15,7 @@
<H1>FreeBSD Security Guide</H1> <H1>FreeBSD Security Guide</H1>
<em>Last Updated: $Date: 1997-07-05 23:02:47 $ </em> <em>Last Updated: $Date: 1997-09-28 09:24:32 $ </em>
<P>This guide attempts to document some of the tips and tricks used by <P>This guide attempts to document some of the tips and tricks used by
many FreeBSD security experts for securing systems and writing secure many FreeBSD security experts for securing systems and writing secure
@ -53,20 +53,20 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><UL> <P><UL>
<LI><A NAME="#rule1_1"></A> <LI><A NAME="#rule1_1"></A>
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?strcpy(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?strcpy(3)">
strcpy(3)</a> and <a strcpy(3)</a> and <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?sprintf(3)"> href="http://www.freebsd.org/cgi/man.cgi?sprintf(3)">
sprintf(3)</a> calls from sprintf(3)</a> calls from
unbounded data. Use unbounded data. Use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?strncpy(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?strncpy(3)">
strncpy(3)</a> and strncpy(3)</a> and
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?snprintf(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?snprintf(3)">
snprintf(3)</a> when the length is known snprintf(3)</a> when the length is known
(or implement some other form of bounds-checking when it's not). (or implement some other form of bounds-checking when it's not).
In fact, never use In fact, never use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?gets(3)">gets(3)</a> <a href="http://www.freebsd.org/cgi/man.cgi?gets(3)">gets(3)</a>
or or
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?sprintf(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?sprintf(3)">
sprintf(3)</a>, period. sprintf(3)</a>, period.
<P><LI><A NAME="#rule1_2"></A>Watch for strvis(3) and getenv(3) abuse. <P><LI><A NAME="#rule1_2"></A>Watch for strvis(3) and getenv(3) abuse.
@ -78,21 +78,21 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
be paranoid! be paranoid!
<P><LI>Every time you see an <P><LI>Every time you see an
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?open(2)">open(2)</a> <a href="http://www.freebsd.org/cgi/man.cgi?open(2)">open(2)</a>
or or
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?stat(2)">stat(2)</a> <a href="http://www.freebsd.org/cgi/man.cgi?stat(2)">stat(2)</a>
call, ask yourself, "What call, ask yourself, "What
if it's a symbolic link?" if it's a symbolic link?"
<P><LI><A NAME="#rule1_3"></A>All uses of <P><LI><A NAME="#rule1_3"></A>All uses of
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?mktemp(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?mktemp(3)">
mktemp(3)</a>, <a mktemp(3)</a>, <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?tempnam(3)"> href="http://www.freebsd.org/cgi/man.cgi?tempnam(3)">
tempnam</a>, <a tempnam</a>, <a
href="http://www.de.freebsd.org/de/cgi/man.cgi?mkstemp(3)"> href="http://www.freebsd.org/cgi/man.cgi?mkstemp(3)">
mkstemp(3)</a>, mkstemp(3)</a>,
etc.; make sure that they use etc.; make sure that they use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?mkstemp(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?mkstemp(3)">
mkstemp(3)</a> instead. Also look for races in mkstemp(3)</a> instead. Also look for races in
/tmp in general, being aware that there are very few things can be atomic /tmp in general, being aware that there are very few things can be atomic
in /tmp: in /tmp:
@ -100,7 +100,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<LI>Creating a directory. This will either succeed or fail. <LI>Creating a directory. This will either succeed or fail.
<LI>Opening a file O_CREAT | O_EXCL <LI>Opening a file O_CREAT | O_EXCL
</UL> </UL>
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?mkstemp(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?mkstemp(3)">
mkstemp(3)</a> properly handles this for you, so all temp files should mkstemp(3)</a> properly handles this for you, so all temp files should
use mkstemp to guarantee there's no race and that the permissions use mkstemp to guarantee there's no race and that the permissions
are right. are right.
@ -127,7 +127,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><LI><A NAME="#rule1_8"></A>Don't just grep for the usual suspects <P><LI><A NAME="#rule1_8"></A>Don't just grep for the usual suspects
in programs which run at elevated privs. Look line by line for possible in programs which run at elevated privs. Look line by line for possible
overflows in these cases since there are a lot more ways than overflows in these cases since there are a lot more ways than
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?strcpy(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?strcpy(3)">
strcpy(3)</a> strcpy(3)</a>
and friends to cause buffer overflows. and friends to cause buffer overflows.
@ -138,7 +138,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><LI><A NAME="#rule2"></A>Do uid management. So drop privs as soon as possible, <P><LI><A NAME="#rule2"></A>Do uid management. So drop privs as soon as possible,
and really drop them. Switching between euid and uid is not enough. Use and really drop them. Switching between euid and uid is not enough. Use
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?setuid">setuid()</a> <a href="http://www.freebsd.org/cgi/man.cgi?setuid">setuid()</a>
when you can. when you can.
<P><LI><A NAME="#rule3"></A>Never display configuration file contents on errors. <P><LI><A NAME="#rule3"></A>Never display configuration file contents on errors.
@ -161,7 +161,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
<P><LI><A NAME="#rule4_3"></A>When sending changes around for review, always <P><LI><A NAME="#rule4_3"></A>When sending changes around for review, always
use context or unidiff format diffs which may be easily fed to use context or unidiff format diffs which may be easily fed to
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?patch(1)">patch(1)</a>. <a href="http://www.freebsd.org/cgi/man.cgi?patch(1)">patch(1)</a>.
Do not simply send whole files! Diffs are much easier to read and apply to Do not simply send whole files! Diffs are much easier to read and apply to
local sources (especially those in which multiple, simultaneous changes local sources (especially those in which multiple, simultaneous changes
may be taking place). All changes should be relative to 3.0-current may be taking place). All changes should be relative to 3.0-current
@ -190,7 +190,7 @@ FreeBSD Security Officers</a> if you have changes you'd like to see here.
sufficiently reentrant to make this safe. sufficiently reentrant to make this safe.
<P><LI><A NAME="#rule6"></A>Pay special attention to <P><LI><A NAME="#rule6"></A>Pay special attention to
<a href="http://www.de.freebsd.org/de/cgi/man.cgi?realloc(3)"> <a href="http://www.freebsd.org/cgi/man.cgi?realloc(3)">
realloc(3)</a> usage - more realloc(3)</a> usage - more
often than not, it's not done correctly. often than not, it's not done correctly.

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-26 11:33:10 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "Support"> <!ENTITY title "Support">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: support.sgml,v 1.33 1997-09-26 11:33:10 stb Exp $ --> <!-- $Id: support.sgml,v 1.34 1997-09-28 09:24:32 wosch Exp $ -->
<html> <html>
&header; &header;
@ -114,7 +114,7 @@
<h2><a <h2><a
href="http://www.freebsd.org/cgi/cvsweb.cgi">CVS Repository</a></h2> href="http://www.freebsd.org/cgi/cvsweb.cgi">CVS Repository</a></h2>
<p><a href="http://www.de.freebsd.org/de/cgi/man.cgi?cvs">CVS</a> <p><a href="http://www.freebsd.org/cgi/man.cgi?cvs">CVS</a>
(the Concurrent Version System) is the tool we use for (the Concurrent Version System) is the tool we use for
keeping our sources under control. Every change (with keeping our sources under control. Every change (with
accompanying log message explaining its purpose) from accompanying log message explaining its purpose) from

View file

@ -1,9 +1,9 @@
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [ <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN" [
<!ENTITY date "$Date: 1997-09-26 11:33:10 $"> <!ENTITY date "$Date: 1997-09-28 09:24:32 $">
<!ENTITY title "Support"> <!ENTITY title "Support">
<!ENTITY % includes SYSTEM "includes.sgml"> %includes; <!ENTITY % includes SYSTEM "includes.sgml"> %includes;
]> ]>
<!-- $Id: usergroups.sgml,v 1.33 1997-09-26 11:33:10 stb Exp $ --> <!-- $Id: usergroups.sgml,v 1.34 1997-09-28 09:24:32 wosch Exp $ -->
<html> <html>
&header; &header;
@ -114,7 +114,7 @@
<h2><a <h2><a
href="http://www.freebsd.org/cgi/cvsweb.cgi">CVS Repository</a></h2> href="http://www.freebsd.org/cgi/cvsweb.cgi">CVS Repository</a></h2>
<p><a href="http://www.de.freebsd.org/de/cgi/man.cgi?cvs">CVS</a> <p><a href="http://www.freebsd.org/cgi/man.cgi?cvs">CVS</a>
(the Concurrent Version System) is the tool we use for (the Concurrent Version System) is the tool we use for
keeping our sources under control. Every change (with keeping our sources under control. Every change (with
accompanying log message explaining its purpose) from accompanying log message explaining its purpose) from