4916205 libcmd should not use file operation routines from C library

6234782 Kerberos and GSSAPI should not use fopen
6259671 vold won't be killed by TERM signal when several removable devices are managed
6386770 pam_authenticate can fail if open files are >= 255 and the soft fd limit is greater than 256
6414401 Remove shadow stdio implementation obsoleted by PSARC 2006/162
6414404 __rpc_openchild never called and not exported by library
6416815 ON needs to be hardened against the 32-bit fopen/255 problem

--HG--
rename : usr/src/lib/libnsl/common/nsl_stdio_prv.c => deleted_files/usr/src/lib/libnsl/common/nsl_stdio_prv.c
rename : usr/src/lib/libnsl/include/nsl_stdio_prv.h => deleted_files/usr/src/lib/libnsl/include/nsl_stdio_prv.h
rename : usr/src/lib/libnsl/rpc/openchild.c => deleted_files/usr/src/lib/libnsl/rpc/openchild.c
rename : usr/src/lib/libnsl/rpc/xdr_stdio_prv.c => deleted_files/usr/src/lib/libnsl/rpc/xdr_stdio_prv.c
rename : usr/src/lib/libresolv2/req.flg => deleted_files/usr/src/lib/libresolv2/req.flg
rename : usr/src/lib/nsswitch/compat/req.flg => deleted_files/usr/src/lib/nsswitch/compat/req.flg
rename : usr/src/lib/nsswitch/files/req.flg => deleted_files/usr/src/lib/nsswitch/files/req.flg
rename : usr/src/lib/nsswitch/req.flg => deleted_files/usr/src/lib/nsswitch/req.flg
rename : usr/src/lib/nsswitch/user/req.flg => deleted_files/usr/src/lib/nsswitch/user/req.flg

3 files changed, 12 insertions, 14 deletions

diff --git a/usr/src/lib/pam_modules/authtok_check/fascist.c b/usr/src/lib/pam_modules/authtok_check/fascist.c
index e68e74ed60..5e8a6d1637 100644
--- a/usr/src/lib/pam_modules/authtok_check/fascist.c
+++ b/usr/src/lib/pam_modules/authtok_check/fascist.c
@@ -1,5 +1,5 @@
 /*
- * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
+ * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
  */
 
@@ -441,7 +441,7 @@ DictCheck(char *password, char *path)
 	PWDICT *pwp;
 	int r;
 
-	if ((pwp = PWOpen(path, "r")) == NULL)
+	if ((pwp = PWOpen(path, "rF")) == NULL)
 		return (DATABASE_OPEN_FAIL);
 
 	r = FascistLook(pwp, password);
diff --git a/usr/src/lib/pam_modules/authtok_check/packer.c b/usr/src/lib/pam_modules/authtok_check/packer.c
index 491e3f75fd..1c34f86bca 100644
--- a/usr/src/lib/pam_modules/authtok_check/packer.c
+++ b/usr/src/lib/pam_modules/authtok_check/packer.c
@@ -2,9 +2,8 @@
  * CDDL HEADER START
  *
  * The contents of this file are subject to the terms of the
- * Common Development and Distribution License, Version 1.0 only
- * (the "License").  You may not use this file except in compliance
- * with the License.
+ * Common Development and Distribution License (the "License").
+ * You may not use this file except in compliance with the License.
  *
  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  * or http://www.opensolaris.org/os/licensing.
@@ -20,7 +19,7 @@
  * CDDL HEADER END
  */
 /*
- * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
+ * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
  */
 
@@ -99,7 +98,7 @@ writeout(void)
 	}
 	(void) unlink(tmpname);
 
-	if ((tmpfp[tmpfp_idx] = fdopen(fd, "w+")) == NULL) {
+	if ((tmpfp[tmpfp_idx] = fdopen(fd, "w+F")) == NULL) {
 		syslog(LOG_ERR, MODNAME ": fdopen failed: %s",
 		    strerror(errno));
 		(void) close(fd);
@@ -360,7 +359,7 @@ packer(char *list, char *path)
 		return (-1);
 	}
 
-	if (!(pwp = PWOpen(path, "w")))
+	if (!(pwp = PWOpen(path, "wF")))
 		return (-1);
 
 	fname = strtok(listcopy, " \t,");
diff --git a/usr/src/lib/pam_modules/dial_auth/dial_auth.c b/usr/src/lib/pam_modules/dial_auth/dial_auth.c
index b82cfdff0c..0ae0554086 100644
--- a/usr/src/lib/pam_modules/dial_auth/dial_auth.c
+++ b/usr/src/lib/pam_modules/dial_auth/dial_auth.c
@@ -2,9 +2,8 @@
  * CDDL HEADER START
  *
  * The contents of this file are subject to the terms of the
- * Common Development and Distribution License, Version 1.0 only
- * (the "License").  You may not use this file except in compliance
- * with the License.
+ * Common Development and Distribution License (the "License").
+ * You may not use this file except in compliance with the License.
  *
  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  * or http://www.opensolaris.org/os/licensing.
@@ -20,7 +19,7 @@
  * CDDL HEADER END
  */
 /*
- * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
+ * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
  */
 
@@ -99,7 +98,7 @@ pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, const char **argv)
 	if (getpwnam_r(user, &pwd, pwd_buffer, sizeof (pwd_buffer)) == NULL)
 		return (PAM_USER_UNKNOWN);
 
-	if ((fp = fopen(DIAL_FILE, "r")) == NULL)
+	if ((fp = fopen(DIAL_FILE, "rF")) == NULL)
 		return (PAM_IGNORE);
 
 	while ((p1 = fgets(line, sizeof (line), fp)) != NULL) {
@@ -112,7 +111,7 @@ pam_sm_authenticate(pam_handle_t *pamh, int flags, int argc, const char **argv)
 
 	(void) fclose(fp);
 
-	if ((fp = fopen(DPASS_FILE, "r")) == NULL) {
+	if ((fp = fopen(DPASS_FILE, "rF")) == NULL) {
 		syslog(LOG_ERR, "pam_dial_auth: %s without %s, returning %s.",
 		    DIAL_FILE, DPASS_FILE,
 		    pam_strerror(pamh, PAM_SYSTEM_ERR));