Date: Mon, 21 Jan 2008 20:12:53 GMT From: John Birrell <jb@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 133810 for review Message-ID: <200801212012.m0LKCrmR090097@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=133810 Change 133810 by jb@jb_freebsd1 on 2008/01/21 20:12:48 IFC Affected files ... .. //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/Makefile#3 integrate .. //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/faq/Makefile#1 branch .. //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/faq/book.sgml#1 branch .. //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/handbook/virtualization/chapter.sgml#3 integrate .. //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/handbook/x11/chapter.sgml#3 integrate .. //depot/projects/dtrace/doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml#19 integrate .. //depot/projects/dtrace/doc/en_US.ISO8859-1/books/handbook/x11/chapter.sgml#10 integrate .. //depot/projects/dtrace/doc/mn_MN.UTF-8/books/handbook/security/chapter.sgml#4 integrate .. //depot/projects/dtrace/doc/mn_MN.UTF-8/books/handbook/x11/chapter.sgml#3 integrate .. //depot/projects/dtrace/ports/GIDs#14 integrate .. //depot/projects/dtrace/ports/MOVED#63 integrate .. //depot/projects/dtrace/ports/Mk/bsd.php.mk#12 integrate .. //depot/projects/dtrace/ports/UIDs#17 integrate .. //depot/projects/dtrace/ports/UPDATING#47 integrate .. //depot/projects/dtrace/src/Makefile.inc1#37 integrate .. //depot/projects/dtrace/src/etc/defaults/rc.conf#26 integrate .. //depot/projects/dtrace/src/etc/rc.firewall#8 integrate .. //depot/projects/dtrace/src/lib/msun/src/k_rem_pio2.c#4 integrate .. //depot/projects/dtrace/src/lib/msun/src/k_rem_pio2f.c#4 delete .. //depot/projects/dtrace/src/lib/msun/src/math_private.h#6 integrate .. //depot/projects/dtrace/src/lib/msun/src/s_exp2.c#5 integrate .. //depot/projects/dtrace/src/lib/msun/src/s_exp2f.c#5 integrate .. //depot/projects/dtrace/src/lib/msun/src/s_log1pf.c#5 integrate .. //depot/projects/dtrace/src/release/doc/share/misc/dev.archlist.txt#15 integrate .. //depot/projects/dtrace/src/release/fixit.profile#5 integrate .. //depot/projects/dtrace/src/sbin/ipfw/ipfw2.c#15 integrate .. //depot/projects/dtrace/src/share/man/man4/axe.4#5 integrate .. //depot/projects/dtrace/src/share/man/man4/sf.4#5 integrate .. //depot/projects/dtrace/src/share/man/man4/vlan.4#8 integrate .. //depot/projects/dtrace/src/sys/compat/freebsd32/freebsd32_proto.h#19 integrate .. //depot/projects/dtrace/src/sys/compat/freebsd32/freebsd32_syscall.h#19 integrate .. //depot/projects/dtrace/src/sys/compat/freebsd32/freebsd32_syscalls.c#19 integrate .. //depot/projects/dtrace/src/sys/compat/freebsd32/freebsd32_sysent.c#19 integrate .. //depot/projects/dtrace/src/sys/compat/freebsd32/syscalls.master#19 integrate .. //depot/projects/dtrace/src/sys/conf/files#66 integrate .. //depot/projects/dtrace/src/sys/dev/cxgb/cxgb_sge.c#7 integrate .. //depot/projects/dtrace/src/sys/dev/cxgb/sys/cxgb_support.c#4 integrate .. //depot/projects/dtrace/src/sys/dev/sf/if_sf.c#1 branch .. //depot/projects/dtrace/src/sys/dev/sf/if_sfreg.h#1 branch .. //depot/projects/dtrace/src/sys/dev/sf/starfire_rx.h#1 branch .. //depot/projects/dtrace/src/sys/dev/sf/starfire_tx.h#1 branch .. //depot/projects/dtrace/src/sys/kern/init_sysent.c#19 integrate .. //depot/projects/dtrace/src/sys/kern/kern_descrip.c#19 integrate .. //depot/projects/dtrace/src/sys/kern/syscalls.c#18 integrate .. //depot/projects/dtrace/src/sys/kern/syscalls.master#17 integrate .. //depot/projects/dtrace/src/sys/kern/systrace_args.c#14 integrate .. //depot/projects/dtrace/src/sys/modules/sf/Makefile#4 integrate .. //depot/projects/dtrace/src/sys/netinet6/in6_src.c#11 integrate .. //depot/projects/dtrace/src/sys/pci/amdsmb.c#7 integrate .. //depot/projects/dtrace/src/sys/pci/if_sf.c#7 delete .. //depot/projects/dtrace/src/sys/pci/if_sfreg.h#6 delete .. //depot/projects/dtrace/src/sys/pci/nfsmb.c#10 integrate .. //depot/projects/dtrace/src/sys/sparc64/conf/GENERIC#17 integrate .. //depot/projects/dtrace/src/sys/sys/signal.h#6 integrate .. //depot/projects/dtrace/src/sys/sys/syscall.h#18 integrate .. //depot/projects/dtrace/src/sys/sys/syscall.mk#18 integrate .. //depot/projects/dtrace/src/sys/sys/sysproto.h#18 integrate .. //depot/projects/dtrace/src/sys/sys/user.h#7 integrate .. //depot/projects/dtrace/src/tools/build/Makefile#4 integrate .. //depot/projects/dtrace/src/usr.bin/procstat/procstat_files.c#3 integrate .. //depot/projects/dtrace/www/en/security/security.sgml#12 integrate .. //depot/projects/dtrace/www/share/sgml/events.xml#19 integrate Differences ... ==== //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/Makefile#3 (text+ko) ==== @@ -1,11 +1,12 @@ -# $FreeBSD: doc/el_GR.ISO8859-7/books/Makefile,v 1.2 2008/01/14 14:19:43 keramida Exp $ +# $FreeBSD: doc/el_GR.ISO8859-7/books/Makefile,v 1.3 2008/01/20 23:05:16 keramida Exp $ # # %SOURCE% en_US.ISO8859-1/books/Makefile -# %SRCID% 1.1 +# %SRCID% 1.14 -SUBDIR = handbook +SUBDIR = faq +SUBDIR+= handbook -ROOT_SYMLINKS= handbook +ROOT_SYMLINKS= faq handbook DOC_PREFIX?= ${.CURDIR}/../.. .include "${DOC_PREFIX}/share/mk/doc.project.mk" ==== //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/handbook/virtualization/chapter.sgml#3 (text+ko) ==== @@ -4,7 +4,7 @@ The FreeBSD Greek Documentation Project - $FreeBSD: doc/el_GR.ISO8859-7/books/handbook/virtualization/chapter.sgml,v 1.3 2008/01/14 22:42:25 keramida Exp $ + $FreeBSD: doc/el_GR.ISO8859-7/books/handbook/virtualization/chapter.sgml,v 1.4 2008/01/20 22:53:02 keramida Exp $ %SOURCE% en_US.ISO8859-1/books/handbook/virtualization/chapter.sgml %SRCID% 1.11 @@ -82,7 +82,7 @@ <sect1 id="virtualization-guest"> - <title> &os; </title> + <title> &os; </title> <sect2 id="virtualization-guest-parallels"> <title> Parallels MacOS</title> ==== //depot/projects/dtrace/doc/el_GR.ISO8859-7/books/handbook/x11/chapter.sgml#3 (text+ko) ==== @@ -4,10 +4,10 @@ The FreeBSD Greek Documentation Project - $FreeBSD: doc/el_GR.ISO8859-7/books/handbook/x11/chapter.sgml,v 1.2 2008/01/14 14:19:47 keramida Exp $ + $FreeBSD: doc/el_GR.ISO8859-7/books/handbook/x11/chapter.sgml,v 1.3 2008/01/20 22:57:42 keramida Exp $ - %SOURCE% en_US.ISO8859-1/books/handbook/x11/chapter.sgml - %SRCID% 1.1 + %SOURCE% en_US.ISO8859-1/books/handbook/x11/chapter.sgml + %SRCID% 1.184 --> @@ -26,54 +26,53 @@ </authorgroup> </chapterinfo> - <title> X Windows</title> + <title> X Window</title> <sect1 id="x11-synopsis"> <title></title> - <para> FreeBSD X11 - . X11 + <para> FreeBSD X11 + . X11 X Window <application>&xorg;</application> - <application>&xfree86;</application>. &os; - &os; 5.2.1-RELEASE - - <application>&xfree86;</application>, X11 server - The &xfree86; Project, Inc. &os; 5.3-RELEASE, - X11 - <application>&xorg;</application>, X11 server - X.Org Foundation - &os;. X servers &os;. - </para> + <application>&xfree86;</application>. &os; + &os; 5.2.1-RELEASE + <application>&xfree86;</application>, + X11 server &xfree86; Project, Inc. + &os; 5.3-RELEASE , + X11 <application>&xorg;</application>, + X11 server X.Org Foundation + &os;. + X servers &os;.</para> - <para> - X11 <application>&xorg;</application>. - <application>&xfree86;</application> - (.. &os; - <application>&xfree86;</application> X11), - - &os; Handbook <ulink - url="http://docs.FreeBSD.org/doc/"></ulink>.</para>; + <para> X11 + &xorg.version; <application>&xorg;</application> + &xorg.version;. + <application>&xfree86;</application> (.. + &os; <application>&xfree86;</application> + X11), + &os; + <ulink url="http://docs.FreeBSD.org/doc/"></ulink>.</para>; <para> - X11, <ulink - url="http://www.x.org/">&xorg;</ulink>.</para>; + X11, + <ulink url="http://www.x.org/">&xorg;</ulink>.</para>; <para> , :</para> <itemizedlist> <listitem> - <para> X Windows, + <para> X Window, .</para> </listitem> <listitem> - <para> X11.</para> + <para> X11.</para> </listitem> <listitem> - <para> - window managers.</para> + <para> window + managers.</para> </listitem> <listitem> @@ -81,85 +80,94 @@ </listitem> <listitem> - <para> logins - (<application>XDM</application>).</para> + <para> (login) + ((<application>XDM</application>).</para> </listitem> </itemizedlist> <para> , :</para> <itemizedlist> - <listitem><para> - (<xref linkend="ports">).</para></listitem> + <listitem> + <para> + (<xref linkend="ports">).</para> + </listitem> </itemizedlist> </sect1> <sect1 id="x-understanding"> - <title>Understanding X</title> + <title> X11</title> - <para>Using X for the first time can be somewhat of a shock to someone - familiar with other graphical environments, such as µsoft.windows; or - &macos;.</para> + <para> X11 + , + µsoft.windows; &macos;.</para> - <para>While it is not necessary to understand all of the details of various - X components and how they interact, some basic knowledge makes - it possible to take advantage of X's strengths.</para> + <para>, + X11 . + , , + X11 .</para> <sect2> - <title>Why X?</title> + <title> X11 ;</title> - <para>X is not the first window system written for &unix;, but it is the - most popular of them. X's original development team had worked on another - window system prior to writing X. That system's name was - <quote>W</quote> (for <quote>Window</quote>). X was just the next - letter in the Roman alphabet.</para> + <para> X + &unix;, . + X X. + <quote>W</quote> ( + <quote>window</quote>). X + .</para> - <para>X can be called <quote>X</quote>, <quote>X Window System</quote>, - <quote>X11</quote>, and a number of other terms. You may find - that using the term <quote>X Windows</quote> to describe X11 - can be offensive to some people; for a bit more insight on - this, see &man.X.7;.</para> + <para> X + <quote>X</quote>, <quote>X Window + System</quote>, <quote>X11</quote>, + . : + <quote>X Windows</quote>. + , manpage &man.X.7;.</para> </sect2> <sect2> - <title>The X Client/Server Model</title> + <title> / X11</title> + + <para> X11 + , + <quote>-</quote>.</para> - <para>X was designed from the beginning to be network-centric, and - adopts a <quote>client-server</quote> model.</para> - <para>In the X model, the - <quote>X server</quote> runs on the computer that has the keyboard, - monitor, and mouse attached. The server's responsibility includes tasks such as managing - the display, handling input from the keyboard and mouse, and so on. - Each X application (such as <application>XTerm</application>, or - <application>&netscape;</application>) is a <quote>client</quote>. A - client sends messages to the server such as <quote>Please draw a - window at these coordinates</quote>, and the server sends back - messages such as <quote>The user just clicked on the OK - button</quote>.</para> + <para> X11, <quote> X</quote> + , + . X + , , , + . X (.. <application>XTerm</application> + <application>&netscape;</application>) + <quote></quote>. + <quote> + </quote>, + <quote> OK</quote>.</para> - <para>In a home or small - office environment, the X server and the X clients commonly run on - the same computer. However, it is perfectly possible to run the X - server on a less powerful desktop computer, and run X applications - (the clients) on, say, the powerful and expensive machine that serves - the office. In this scenario the communication between the X client - and server takes place over the network.</para> + <para> , X + . , + X + , X ( ) , + , . + X + .</para> - <para>This confuses some people, because the X terminology is - exactly backward to what they expect. They expect the <quote>X - server</quote> to be the big powerful machine down the hall, and - the <quote>X client</quote> to be the machine on their desk.</para> + <para> , X + . + <quote> X</quote> + <quote> X</quote> + .</para> - <para>It is important to remember that the X server is the machine with the monitor and - keyboard, and the X clients are the programs that display the - windows.</para> + <para> X + , X + .</para> - <para>There is nothing in the protocol that forces the client and - server machines to be running the same operating system, or even to - be running on the same type of computer. It is certainly possible to - run an X server on µsoft.windows; or Apple's &macos;, and there are - various free and commercial applications available that do exactly - that.</para> + <para> + + , . + X + µsoft.windows; &macos; Apple, + . + </para> </sect2> <sect2> @@ -1152,7 +1160,7 @@ <title>Xaccess</title> <para>The protocol for connecting to - <application>XDM</application> controlled displays is called + <application>XDM</application>-controlled displays is called the X Display Manager Connection Protocol (XDMCP). This file is a ruleset for controlling XDMCP connections from remote machines. It is ignored unless the <filename>xdm-config</filename> @@ -1163,7 +1171,7 @@ <sect3> <title>Xresources</title> <para>This is an application-defaults file for the display - chooser and the login screens. This is where the appearance + chooser and login screens. In it, the appearance of the login program can be modified. The format is identical to the app-defaults file described in the X11 documentation.</para> @@ -1218,7 +1226,7 @@ <title>Running a Network Display Server</title> <para>In order for other clients to connect to the display - server, edit the access control rules, and enable the connection + server, you must edit the access control rules and enable the connection listener. By default these are set to conservative values. To make <application>XDM</application> listen for connections, first comment out a line in the <filename>xdm-config</filename> @@ -1231,9 +1239,9 @@ <para>and then restart <application>XDM</application>. Remember that comments in app-defaults files begin with a <quote>!</quote> character, not the usual <quote>#</quote>. More strict - access controls may be desired. Look at the example + access controls may be desired — look at the example entries in <filename>Xaccess</filename>, and refer to the - &man.xdm.1; manual page.</para> + &man.xdm.1; manual page for further information.</para> </sect2> <sect2> @@ -1433,7 +1441,7 @@ </listitem> <listitem> - <para>Centralized consisted dialog driven desktop + <para>Centralized, consistent, dialog-driven desktop configuration</para> </listitem> @@ -1444,13 +1452,13 @@ </itemizedlist> <para><application>KDE</application> comes with a web browser called - <application>Konqueror</application>, which represents + <application>Konqueror</application>, which is a solid competitor to other existing web browsers on &unix; systems. More information on <application>KDE</application> can be found on the <ulink url="http://www.kde.org/">KDE website</ulink>. For FreeBSD specific information and resources on <application>KDE</application>, consult - the <ulink url="http://freebsd.kde.org/">FreeBSD-KDE + the <ulink url="http://freebsd.kde.org/">KDE on FreeBSD team</ulink>'s website.</para> </sect3> @@ -1559,7 +1567,7 @@ <listitem> <para>Fully configurable via mouse, with drag and - drop, etc </para> + drop, etc. </para> </listitem> <listitem> @@ -1569,8 +1577,7 @@ <listitem> <para>Integrated window manager, file manager, sound manager, - <application>GNOME</application> compliance module, and other - things</para> + <application>GNOME</application> compliance module, and more</para> </listitem> <listitem> @@ -1625,12 +1632,13 @@ </chapter> <!-- - Local Variables: - mode: sgml - sgml-declaration: "../chapter.decl" - sgml-indent-data: t - sgml-omittag: nil - sgml-always-quote-attributes: t - sgml-parent-document: ("../book.sgml" "part" "chapter") - End: + Local Variables: + mode: sgml + fill-column: 78 + sgml-declaration: "../chapter.decl" + sgml-indent-data: t + sgml-omittag: nil + sgml-always-quote-attributes: t + sgml-parent-document: ("../book.sgml" "part" "chapter") + End: --> ==== //depot/projects/dtrace/doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml#19 (text+ko) ==== @@ -1,7 +1,7 @@ <!-- The FreeBSD Documentation Project - $FreeBSD: doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml,v 1.316 2007/10/23 07:03:34 dougb Exp $ + $FreeBSD: doc/en_US.ISO8859-1/books/handbook/security/chapter.sgml,v 1.317 2008/01/20 19:24:18 trhodes Exp $ --> <chapter id="security"> @@ -368,24 +368,19 @@ the <groupname>wheel</groupname> mechanism is better than having nothing at all, it is not necessarily the safest option.</para> - <!-- XXX: - This will need updating depending on the outcome of PR bin/71147. - Personally I know what I'd like to see, which puts this in definite - need of a rewrite, but we'll have to wait and see. ceri@ - --> + <para>To lock an account completely, the &man.pw.8; command should + be used:</para> + + <screen>&prompt.root;<userinput>pw lock <replaceable>staff</replaceable></userinput></screen> - <para>An indirect way to secure staff accounts, and ultimately - <username>root</username> access is to use an alternative - login access method and - do what is known as <quote>starring</quote> out the encrypted - password for the staff accounts. Using the &man.vipw.8; - command, one can replace each instance of an encrypted password - with a single <quote><literal>*</literal></quote> character. - This command will update the <filename>/etc/master.passwd</filename> - file and user/password database to disable password-authenticated - logins.</para> + <para>This will prevent the user from logging in using any + mechanism, including &man.ssh.1;.</para> - <para>A staff account entry such as:</para> + <para>Another method of blocking access to accounts would be to + replace the encrypted password with a single + <quote><literal>*</literal></quote> character. This character + would never match the encrypted password and thus block user + access. For example, the following staff account:</para> <programlisting>foobar:R9DT/Fa1/LV9U:1000:1000::0:0:Foo Bar:/home/foobar:/usr/local/bin/tcsh</programlisting> @@ -393,29 +388,13 @@ <programlisting>foobar:*:1000:1000::0:0:Foo Bar:/home/foobar:/usr/local/bin/tcsh</programlisting> - <para>This change will prevent normal logins from occurring, - since the encrypted password will never match - <quote><literal>*</literal></quote>. With this done, - staff members must use - another mechanism to authenticate themselves such as - &man.kerberos.1; or &man.ssh.1; using a public/private key - pair. When using something like Kerberos, one generally must - secure the machines which run the Kerberos servers and your - desktop workstation. When using a public/private key pair - with ssh, one must generally secure - the machine used to login <emphasis>from</emphasis> (typically - one's workstation). An additional layer of protection can be - added to the key pair by password protecting the key pair when - creating it with &man.ssh-keygen.1;. Being able to - <quote>star</quote> out the passwords for staff accounts also - guarantees that staff members can only login through secure - access methods that you have set up. This forces all staff - members to use secure, encrypted connections for all of their - sessions, which closes an important hole used by many - intruders: sniffing the network from an unrelated, - less secure machine.</para> + <para>This will prevent the <username>foobar</username> user + from logging in using conventional methods. This method for + access restriction is flawed on sites using + <application>Kerberos</application> or in situations where the + user has set up keys with &man.ssh.1;.</para> - <para>The more indirect security mechanisms also assume that you are + <para>These security mechanisms also assume that you are logging in from a more restrictive server to a less restrictive server. For example, if your main box is running all sorts of servers, your workstation should not be running any. In order for ==== //depot/projects/dtrace/doc/en_US.ISO8859-1/books/handbook/x11/chapter.sgml#10 (text+ko) ==== @@ -1,7 +1,7 @@ <!-- The FreeBSD Documentation Project - $FreeBSD: doc/en_US.ISO8859-1/books/handbook/x11/chapter.sgml,v 1.185 2008/01/09 19:43:05 blackend Exp $ + $FreeBSD: doc/en_US.ISO8859-1/books/handbook/x11/chapter.sgml,v 1.186 2008/01/20 23:10:40 keramida Exp $ --> <chapter id="x11"> @@ -122,7 +122,10 @@ <para>In the X model, the <quote>X server</quote> runs on the computer that has the keyboard, monitor, and mouse attached. The server's responsibility includes tasks such as managing - the display, handling input from the keyboard and mouse, and so on. + the display, handling input from the keyboard and mouse, and other + input or output devices (i.e. a <quote>tablet</quote> can be used as + an input device, and a video projector may be an alternative output + device). Each X application (such as <application>XTerm</application>, or <application>&netscape;</application>) is a <quote>client</quote>. A client sends messages to the server such as <quote>Please draw a ==== //depot/projects/dtrace/doc/mn_MN.UTF-8/books/handbook/security/chapter.sgml#4 (text+ko) ==== @@ -1,9 +1,9 @@ <!-- The FreeBSD Mongolian Documentation Project - Original revision 1.316 + Original revision 1.317 - $FreeBSD: doc/mn_MN.UTF-8/books/handbook/security/chapter.sgml,v 1.8 2007/11/20 14:53:04 keramida Exp $ + $FreeBSD: doc/mn_MN.UTF-8/books/handbook/security/chapter.sgml,v 1.9 2008/01/21 14:45:04 keramida Exp $ --> <chapter id="security"> @@ -363,22 +363,19 @@ байхаас илүү боловч энэ нь заавал ч үгүй хамгийн аюулгүй сонголт бас биш юм.</para> - <!-- XXX: - This will need updating depending on the outcome of PR bin/71147. - Personally I know what I'd like to see, which puts this in definite - need of a rewrite, but we'll have to wait and see. ceri@ - --> + <para>Бүртгэлийг бүрэн түгжихийн тулд &man.pw.8; тушаалыг ашиглах + хэрэгтэй:</para> + + <screen>&prompt.root;<userinput>pw lock <replaceable>staff</replaceable></userinput></screen> - <para>Staff бүртгэлүүд болон эцсийн эцэст <username>root</username> хандалтыг - шууд бусаар аюулгүй болгохын тулд өөр нэвтрэх хандалтын аргыг ашиглаж - staff бүртгэлүүдийн шифрлэсэн нууц үгийг <quote>од болгож</quote> - өгдөг. &man.vipw.8; тушаалыг ашиглан шифрлэсэн нууц үг бүрийг ганц - <quote><literal>*</literal></quote> тэмдэгтээр сольж өгч болно. - Энэ тушаал нь <filename>/etc/master.passwd</filename> файл болон - хэрэглэгч/нууц үгийн мэдээллийн баазыг нууц үгээр шалгагдан нэвтрэх нэвтрэлтүүдийг - хаан шинэчлэх болно.</para> + <para>Энэ нь &man.ssh.1;-ийг оролцуулаад хэрэглэгчийг ямар ч + арга ашиглан нэвтрэн орохыг хориглоно.</para> - <para>Иймэрхүү staff бүртгэлийн эрхийг:</para> + <para>Бүртгэлүүдэд хандахыг хориглох өөр нэг арга бол + нууцлагдсан нууц үгийг ганц <quote><literal>*</literal></quote> + тэмдэгтээр солих явдал юм. Энэ тэмдэгт нь нууцлагдсан + нууц үгтэй хэзээ ч таарахгүй бөгөөд хэрэглэгчийн + хандалтыг хаах болно. Жишээ нь доор дурдсан staff бүртгэлийг:</para> <programlisting>foobar:R9DT/Fa1/LV9U:1000:1000::0:0:Foo Bar:/home/foobar:/usr/local/bin/tcsh</programlisting> @@ -386,26 +383,13 @@ <programlisting>foobar:*:1000:1000::0:0:Foo Bar:/home/foobar:/usr/local/bin/tcsh</programlisting> - <para>Шифрлэсэн нууц үг <quote><literal>*</literal></quote> - тэмдэгттэй хэзээ ч таарахгүй болохоор энэ өөрчлөлт нь ердийн нэвтрэлтүүдийг - болиулдаг. Ийм болсон staff-ийн гишүүд &man.kerberos.1; эсвэл - нийтийн/хувийн түлхүүр хослолыг ашиглан &man.ssh.1; зэрэг өөрсдийгөө - таниулан нэвтрэх өөр арга хэрэглэх шаардлагатай. Kerberos-той адилыг - ашиглаж байгаа үед ерөнхийдөө Kerberos сервер ажиллаж байгаа машинууд болон - өөрийн ширээний ажлын компьютерийг аюулгүй болгох шаардлагатай. - Нийтийн/хувийн түлхүүр хослолыг ssh-тэй ашиглаж байгаа үед ерөнхийдөө - нэвтрэлтийг <emphasis>эхлүүлж</emphasis> байгаа машиныг (ихэвчлэн - хэрэглэгчийн ажлын компьютер) аюулгүй болгох шаардлагатай. &man.ssh-keygen.1;-р - түлхүүр хослолыг үүсгэх үедээ түлхүүр хослолыг хамгаалан нэмэлт давхарга - хамгаалалт хийж өгч болох юм. Staff бүртгэлүүдийн нууц үгүүдийг - <quote>од болгох</quote> боломж нь бас staff-ийн гишүүд зөвхөн - таны тохируулсан аюулгүй хандалтын аргуудаар дамжин нэвтрэхийг - баталгаажуулдаг. Энэ нь бүх staff-ийн гишүүдэд аюулгүй, шифрлэгдсэн - холболтуудыг тэдгээрийн бүх сессүүдэд хүчээр ашиглуулдаг бөгөөд энэ нь олон - халдагчдын ашиглаж байсан хамааралгүй, аюулгүй биш машинаас сүлжээг - шиншлэх ноцтой цоорхойг хаадаг.</para> + <para>Энэ нь <username>foobar</username> хэрэглэгчийг ердийн + аргууд ашиглан нэвтрэн орох боломжийг хаадаг. Энэ хандалт + хязгаарлах арга нь <application>Kerberos</application> ашиглаж + байгаа сайтууд эсвэл хэрэглэгч &man.ssh.1; ашиглан түлхүүрүүд + тохируулсан тохиолдлууд зэрэгт ажилладаггүй.</para> - <para>Арай илүү шууд бус аюулгүй байдлын арга замууд нь бас таныг илүү хязгаарласан + <para>Эдгээр аюулгүй байдлын арга замууд нь бас таныг илүү хязгаарласан серверээс арай бага хязгаарласан машин уруу нэвтрэн орж байна гэж тооцдог. Жишээ нь хэрэв таны гол хайрцаг чинь бүх л төрлийн серверүүд ажиллуулж байвал таны ажлын компьютер чинь ямрыг ч ажиллуулах ёсгүй. Өөрийн компьютерийг ==== //depot/projects/dtrace/doc/mn_MN.UTF-8/books/handbook/x11/chapter.sgml#3 (text+ko) ==== @@ -1,9 +1,9 @@ <!-- The FreeBSD Mongolian Documentation Project - Original revision 1.185 + Original revision 1.186 - $FreeBSD: doc/mn_MN.UTF-8/books/handbook/x11/chapter.sgml,v 1.7 2008/01/10 19:36:15 keramida Exp $ + $FreeBSD: doc/mn_MN.UTF-8/books/handbook/x11/chapter.sgml,v 1.8 2008/01/21 14:45:05 keramida Exp $ --> <chapter id="x11"> @@ -125,10 +125,13 @@ <para>X загварт <quote>X сервер</quote> нь хулгана, гар, дэлгэцтэй ажилладаг. Энэ үед - серверийн үүрэг бол гар болон хулганаас оруулсан мэдээллийг - хүлээж аван зохицуулах зэрэг дэлгэц дээрх үйлдлүүдийг хариуцаж - ажиллаж байдаг. X програм болгон (<application>XTerm</application> - эсвэл <application>&netscape;</application> гэх мэт) уг серверийн + серверийн үүрэг бол дэлгэцийг удирдах, гар ба хулгана болон + бусад оролт эсвэл гаралтын төхөөрөмжүүдээс (жишээ нь <quote>tablet</quote> нь + оролтын төхөөрөмж маягаар ашиглагдаж видео проектор нь + гаралтын төхөөрөмж байж болох юм) мэдээллийг хүлээж аван + зохицуулах үйлдлүүдийг хариуцаж ажиллаж байдаг. + X програм болгон (<application>XTerm</application> + эсвэл <application>&netscape;</application> гэх мэт) уг серверийн <quote>үйлчлүүлэгч</quote> нь юм. Үйлчлүүлэгч нь сервер уруу жишээлбэл <quote>энэ байрлалд цонх зурна уу</quote> гэх мэтийн хүсэлт илгээж болдог байхад серверээс үйлчлүүлэгч рүү жишээлбэл ==== //depot/projects/dtrace/ports/GIDs#14 (text+ko) ==== @@ -1,4 +1,4 @@ -$FreeBSD: ports/GIDs,v 1.48 2008/01/11 15:46:29 rafan Exp $ +$FreeBSD: ports/GIDs,v 1.49 2008/01/20 23:04:50 kuriyama Exp $ # Please keep this file sorted by GID! smmsp:*:25: bind:*:53: @@ -118,3 +118,4 @@ netdisco:*:840: bacula:*:910: iserv:*:911: +_relayd:*:913: ==== //depot/projects/dtrace/ports/MOVED#63 (text+ko) ==== @@ -1,7 +1,7 @@ # # MOVED - a list of (recently) moved or removed ports # -# $FreeBSD: ports/MOVED,v 1.1529 2008/01/18 21:19:47 beech Exp $ +# $FreeBSD: ports/MOVED,v 1.1532 2008/01/21 11:36:15 miwi Exp $ # # Each entry consists of a single line containing the following four # fields in the order named, separated with the pipe (`|') character: @@ -3355,3 +3355,5 @@ audio/akode-plugins-polypaudio||2008-01-01|Polypaudio is obsolete in favor of pulseaudio audio/teknap|net-p2p/teknap|2008-01-09|moved to net-p2p category net/freeradius-devel|net/freeradius2|2008-01-18|Development version no longer necessary +devel/p5-gearmand|devel/p5-Gearman-Server|2008-01-20|Replaced by p5-Gearman-Server +database/mysqltoolkit|database/maatkit|2008-01-21|project was renamed ==== //depot/projects/dtrace/ports/Mk/bsd.php.mk#12 (text+ko) ==== @@ -7,7 +7,7 @@ # Please send all suggested changes to the maintainer instead of committing # them to CVS yourself. # -# $FreeBSD: ports/Mk/bsd.php.mk,v 1.44 2007/12/27 06:52:45 ale Exp $ +# $FreeBSD: ports/Mk/bsd.php.mk,v 1.45 2008/01/21 07:19:24 ale Exp $ # # Adding 'USE_PHP=yes' to a port includes this Makefile after bsd.ports.pre.mk. # If the port requires a predefined set of PHP extensions, they can be @@ -37,9 +37,10 @@ _PHPMKINCLUDED= yes -.if exists(${LOCALBASE}/etc/php.conf) -.include "${LOCALBASE}/etc/php.conf" -PHP_EXT_DIR!= ${LOCALBASE}/bin/php-config --extension-dir | ${SED} -ne 's,^${LOCALBASE}/lib/php/\(.*\),\1,p' +PHPBASE?= ${LOCALBASE} +.if exists(${PHPBASE}/etc/php.conf) +.include "${PHPBASE}/etc/php.conf" +PHP_EXT_DIR!= ${PHPBASE}/bin/php-config --extension-dir | ${SED} -ne 's,^${PHPBASE}/lib/php/\(.*\),\1,p' .else DEFAULT_PHP_VER?= 5 @@ -138,18 +139,18 @@ PHP_PORT= ${PORTSDIR}/lang/php${PHP_VER} .if defined(USE_PHP_BUILD) -BUILD_DEPENDS+= ${LOCALBASE}/include/php/main/php.h:${PHP_PORT} +BUILD_DEPENDS+= ${PHPBASE}/include/php/main/php.h:${PHP_PORT} .endif -RUN_DEPENDS+= ${LOCALBASE}/include/php/main/php.h:${PHP_PORT} +RUN_DEPENDS+= ${PHPBASE}/include/php/main/php.h:${PHP_PORT} PLIST_SUB+= PHP_EXT_DIR=${PHP_EXT_DIR} SUB_LIST+= PHP_EXT_DIR=${PHP_EXT_DIR} .if defined(USE_PHPIZE) || defined(USE_PHPEXT) -BUILD_DEPENDS+= phpize:${PHP_PORT} -GNU_CONFIGURE= YES +BUILD_DEPENDS+= ${PHPBASE}/bin/phpize:${PHP_PORT} +GNU_CONFIGURE= yes USE_AUTOTOOLS+= autoconf:261:env -CONFIGURE_ARGS+=--with-php-config=${LOCALBASE}/bin/php-config +CONFIGURE_ARGS+=--with-php-config=${PHPBASE}/bin/php-config configure-message: phpize-message do-phpize @@ -157,7 +158,7 @@ @${ECHO_MSG} "===> PHPizing for ${PKGNAME}" do-phpize: - @(cd ${WRKSRC}; ${SETENV} ${SCRIPTS_ENV} ${LOCALBASE}/bin/phpize) + @(cd ${WRKSRC}; ${SETENV} ${SCRIPTS_ENV} ${PHPBASE}/bin/phpize) .endif .if defined(USE_PHPEXT) @@ -336,9 +337,9 @@ . if ${_USE_PHP_VER${PHP_VER}:M${extension}} != "" . if ${PHP_EXT_INC:M${extension}} == "" . if defined(USE_PHP_BUILD) -BUILD_DEPENDS+= ${LOCALBASE}/lib/php/${PHP_EXT_DIR}/${extension}.so:${PORTSDIR}/${${extension}_DEPENDS} +BUILD_DEPENDS+= ${PHPBASE}/lib/php/${PHP_EXT_DIR}/${extension}.so:${PORTSDIR}/${${extension}_DEPENDS} . endif -RUN_DEPENDS+= ${LOCALBASE}/lib/php/${PHP_EXT_DIR}/${extension}.so:${PORTSDIR}/${${extension}_DEPENDS} +RUN_DEPENDS+= ${PHPBASE}/lib/php/${PHP_EXT_DIR}/${extension}.so:${PORTSDIR}/${${extension}_DEPENDS} . endif . else isyes= ${extension} ==== //depot/projects/dtrace/ports/UIDs#17 (text+ko) ==== @@ -1,4 +1,4 @@ -$FreeBSD: ports/UIDs,v 1.54 2008/01/19 11:47:16 edwin Exp $ +$FreeBSD: ports/UIDs,v 1.56 2008/01/21 10:58:19 miwi Exp $ # Please keep this file sorted by UID! smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin @@ -100,6 +100,7 @@ prelude:*:281:281:Prelude user:/nonexistent:/usr/sbin/nologin _sphinx:*:312:312:Sphinxsearch Owner:/nonexistent:/usr/sbin/nologin dkfilter:*:325:325:DK Filter Owner:/nonexistent:/usr/sbin/nologin +_pma:*:336:80:phpMyAdmin Owner:/nonexistent:/sbin/nologin wildfire:*:340:340:Wildfire Daemon:/nonexistent:/usr/sbin/nologin stunnel:*:341:341:Stunnel Daemon:/nonexistent:/usr/sbin/nologin _iodined:*:353:353:Iodine Daemon:/nonexistent:/usr/sbin/nologin @@ -127,3 +128,4 @@ bacula:*:910:910:Bacula Daemon:/var/db/bacula:/usr/sbin/nologin iserv:*:911:911:Iserv Daemon:/nonexistent:/usr/sbin/nologin _sj3:*:912:912:SJ3 Daemon:/nonexistent:/usr/sbin/nologin +_relayd:*:913:913:Relay Daemon:/var/empty:/usr/sbin/nologin ==== //depot/projects/dtrace/ports/UPDATING#47 (text+ko) ==== @@ -6,6 +6,24 @@ time you update your ports collection, before attempting any port upgrades. +20080120: + AFFECTS: users of www/apache20 + AUTHOR: clement@FreeBSD.org + + BDB framework provided by bsd.database.mk is now used by www/apache20 + port. WITH_BERKELEYDB knob is deprecated in favor of WITH_BDB and + WITH_BDB_VER/WITH_BDB_BASE, see documentation for more details. + ('make show-options'). + +20080120: + AFFECTS: users of www/apache22 + AUTHOR: clement@FreeBSD.org + + BDB framework provided by bsd.database.mk is now used by www/apache22 + port. WITH_BERKELEYDB knob is deprecated in favor of WITH_BDB and + WITH_BDB_VER/WITH_BDB_BASE, see documentation for more details. + ('make show-options'). + 20080118: AFFECTS: users of net/freeradius AUTHOR: David Wood <david@wood2.org.uk> @@ -5987,4 +6005,4 @@ 2) Update all p5-* modules. portupgrade -f p5-\* -$FreeBSD: ports/UPDATING,v 1.575 2008/01/18 21:46:50 beech Exp $ +$FreeBSD: ports/UPDATING,v 1.578 2008/01/20 15:00:32 clement Exp $ ==== //depot/projects/dtrace/src/Makefile.inc1#37 (text+ko) ==== @@ -1,5 +1,5 @@ # -# $FreeBSD: src/Makefile.inc1,v 1.592 2008/01/16 15:05:49 brueffer Exp $ +# $FreeBSD: src/Makefile.inc1,v 1.593 2008/01/21 18:44:54 obrien Exp $ # # Make command line options: # -DNO_CLEANDIR run ${MAKE} clean, instead of ${MAKE} cleandir @@ -861,10 +861,6 @@ # legacy: Build compatibility shims for the next three targets # legacy: -.if ${BOOTSTRAPPING} < 503000 - @echo "ERROR: Source upgrades from versions prior to 5.3 not supported."; \ - false -.endif .for _tool in tools/build ${_+_}@${ECHODIR} "===> ${_tool} (obj,includes,depend,all,install)"; \ cd ${.CURDIR}/${_tool}; \ @@ -891,26 +887,6 @@ .endif .endif -.if ${BOOTSTRAPPING} < 600029 -_texinfo= gnu/usr.bin/texinfo -.endif - -.if ${BOOTSTRAPPING} < 600015 -_cap_mkdb= usr.bin/cap_mkdb -.endif - -.if ${BOOTSTRAPPING} < 600018 -_colldef= usr.bin/colldef -.endif - -.if ${BOOTSTRAPPING} < 600017 -_gencat= usr.bin/gencat -.endif - -.if ${BOOTSTRAPPING} < 600016 -_mklocale= usr.bin/mklocale -.endif - .if ${BOOTSTRAPPING} < 700018 _gensnmptree= usr.sbin/bsnmpd/gensnmptree .endif @@ -920,10 +896,6 @@ _crunchgen= usr.sbin/crunch/crunchgen .endif -.if ${BOOTSTRAPPING} < 600020 -_pwd_mkdb= usr.sbin/pwd_mkdb -.endif - .if ${MK_CDDL} != "no" _dtrace_tools= cddl/usr.bin/sgsmsg cddl/lib/libctf lib/libelf \ lib/libdwarf cddl/usr.bin/ctfconvert cddl/usr.bin/ctfmerge ==== //depot/projects/dtrace/src/etc/defaults/rc.conf#26 (text+ko) ==== @@ -15,7 +15,7 @@ # For a more detailed explanation of all the rc.conf variables, please # refer to the rc.conf(5) manual page. # -# $FreeBSD: src/etc/defaults/rc.conf,v 1.322 2008/01/12 20:52:30 maxim Exp $ +# $FreeBSD: src/etc/defaults/rc.conf,v 1.323 2008/01/21 04:41:18 rafan Exp $ ############################################################## ### Important initial Boot-time options #################### @@ -119,6 +119,9 @@ firewall_nologports="135-139,445 1026,1027 1433,1434" # List of TCP/UDP ports # for which denied incoming packets are not # logged. +firewall_nat_enable="NO" # Enable kernel NAT (if firewall_enable == YES) +firewall_nat_interface="" # Public interface or IPaddress to use +firewall_nat_flags="" # Additional configuration parameters ip_portrange_first="NO" # Set first dynamically allocated port ip_portrange_last="NO" # Set last dynamically allocated port ike_enable="NO" # Enable IKE daemon (usually racoon or isakmpd) ==== //depot/projects/dtrace/src/etc/rc.firewall#8 (text+ko) ==== @@ -23,7 +23,7 @@ # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF # SUCH DAMAGE. # -# $FreeBSD: src/etc/rc.firewall,v 1.53 2008/01/12 19:02:09 maxim Exp $ +# $FreeBSD: src/etc/rc.firewall,v 1.54 2008/01/21 04:41:17 rafan Exp $ # # @@ -131,7 +131,13 @@ case ${firewall_nat_enable} in [Yy][Ee][Ss]) if [ -n "${firewall_nat_interface}" ]; then - ${fwcmd} nat 123 config if ${firewall_nat_interface} log + if echo "${firewall_nat_interface}" | \ + grep -q -E '^[0-9]+(\.[0-9]+){0,3}$'; then + firewall_nat_flags="ip ${firewall_nat_interface} ${firewall_nat_flags}" + else + firewall_nat_flags="if ${firewall_nat_interface} ${firewall_nat_flags}" + fi + ${fwcmd} nat 123 config log ${firewall_nat_flags} ${fwcmd} add 50 nat 123 ip4 from any to any via ${firewall_nat_interface} fi ;; ==== //depot/projects/dtrace/src/lib/msun/src/k_rem_pio2.c#4 (text+ko) ==== @@ -11,9 +11,8 @@ * ==================================================== */ -#ifndef lint -static char rcsid[] = "$FreeBSD: src/lib/msun/src/k_rem_pio2.c,v 1.7 2005/02/04 18:26:06 das Exp $"; -#endif +#include <sys/cdefs.h> +__FBSDID("$FreeBSD: src/lib/msun/src/k_rem_pio2.c,v 1.9 2008/01/20 04:09:44 bde Exp $"); /* * __kernel_rem_pio2(x,y,e0,nx,prec,ipio2) @@ -131,6 +130,8 @@ * to produce the hexadecimal values shown. */ +#include <float.h> + #include "math.h" #include "math_private.h" @@ -277,6 +278,7 @@ case 2: fw = 0.0; for (i=jz;i>=0;i--) fw += fq[i]; + STRICT_ASSIGN(double,fw,fw); y[0] = (ih==0)? fw: -fw; fw = fq[0]-fw; for (i=1;i<=jz;i++) fw += fq[i]; ==== //depot/projects/dtrace/src/lib/msun/src/math_private.h#6 (text+ko) ==== @@ -11,7 +11,7 @@ /* * from: @(#)fdlibm.h 5.1 93/09/24 - * $FreeBSD: src/lib/msun/src/math_private.h,v 1.22 2008/01/17 17:02:11 bde Exp $ + * $FreeBSD: src/lib/msun/src/math_private.h,v 1.23 2008/01/19 22:05:14 bde Exp $ */ #ifndef _MATH_PRIVATE_H_ @@ -164,8 +164,12 @@ #define STRICT_ASSIGN(type, lval, rval) do { \ >>> TRUNCATED FOR MAIL (1000 lines) <<<
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200801212012.m0LKCrmR090097>