Rename variable names for consistency
mechnical changes: ncas to ca_tree, ncas_hist to nca_hist_tree, tree to
ca_tree, and needle to nca_hist_needle.
OK tb@
x11/xfce4-screensaver: set _permit_setugid to S_ISGID in ask-pass.c
matches setgid auth mode set by pkg/PLIST, and should account for future
restrictions on setgid/setuid usage. Totally untested for now.
For any binary linked against libc, compare the file setuid/setgid bits
against the internal global variable _permit_setugid.
If either bit is set in the file mode, but the same bit is not set in
the variable, generate a syslog message, output the same to stderr.
It looks like this: /usr/bin/x: not supposed to be setuid, aborting
It does not abort yet because some packages need the correct variable
to be added. Soon, soon, soon...
AuxInfo[ELF_AUX_ENTRIES] is filled based upon a collection of MI and
MD enums. Addition of a new auxval without increasing ELF_AUX_ENTRIES
happened twice to me, and the failure mode is way too subtle. Add
KASSERT() for every enum storage into the array, which the compiler
completely eliminates if it notices the number of array stores is
<= the array size.
ok kettenis
update to freerdp-3.32.2
upstream says "Regression, bugfix and security release. We've been
under close scrutiny by various security researchers. Addressing their
findings we've hardened the code base considerably against malicious
client and/or server messages"