Update to version 4.0.4.28, and switch to shrubbery.net version which

appears to be maintained and where contributions are being integrated.

Particularly, this fixes a SEGV crash on LP64 (amd64).

Upstream changes since 4.0.4a in reverse chronological order:

F4.0.4.28
  - Fix buffer length argument to ntop() - Muhammad Muquit
  - Fix two missing free()s
  - Fix segfault from incorrect pointer returned from value().  Reported
    here:
    http://www.shrubbery.net/pipermail/tac_plus/2014-January/001384.html
  - update autoconf bits for autoconf 2.69
  - put tac_plus daemon in sbin, where it ought to be
  - fix hdr->datalength handling in dump_nas_pak()
  - add -m option to specify the client listen queue max and increase
    the default to 64 if the O/S does not define SOMAXCONN
  - fix config.h include syntax - David M. Syzdek
  - added -U and -Q flags to allow runtime setuid/setgid change - from
    from Robert Drake with some alteration
  - Make implicit time_t conversions explicit in expire.c - from David M.
    Syzdek
  - initialize newsockfd in main() - from David M. Syzdek
  - recent changes in autoconf are causing the + of the package name to
    become -, so just drop it from the tarball name.

F4.0.4.27
  - add "port" to clarify log messages of default_fn.c
  - use program name (filename) instead of hard-coded "tac_plus" for
    name given to PAM
  - change socket binding to allow an IPv6 address with the -B argument
  - bind v4 and v6 sockets if system claims its has addresses for the AFs
  - fix command authorization debug message logic for match/no match -
    reported by Dereck Chan

F4.0.4.26
  - add optional securid support via aceclient library - Matt Addison
  - use localtime instead of gmtime for log messages so that the timezone
    is inheritted.
  - allow file authentication for PAP authorization

F4.0.4.25
  - add -m (md5) option to tac_pwd.  XXX could use better salt generation
  - use random() in tac_pwd if available and generate 4 bytes of salt for
    md5.
  - sprintf -> snprintf - Robert Swiecki
  - more pkt size checking in acct.c, authen.c, author.c - Robert Swiecki
  - free(pak) in start_session() not in account(), for consistency

F4.0.4.24
  - allow PAM for pap authentication - Jeroen Nijhof
  - replace home-grown vprintf in report() with vsnprintf - Robert Swiecki
  - dont use report in signal handler, since report uses syslog which uses
    malloc - Robert Swiecki
  - use volatile sig_atomic_t 'reinitialize' variable - Robert Swiecki
  - use snprintf in get_authen_continue() and send_authen_error() and
    check return - Robert Swiecki
  - make snprintf buffers of get_authen_continue() and send_authen_error()
    at least NI_MAXHOST bytes - Robert Swiecki

F4.0.4.23
  - fix build on netbsd
  - update PAM includes for OSX - YiJia Zhang

F4.0.4.22
  - check of regexec() return value inverted - from Ignas Kazlauskas

F4.0.4.21
  - do_auth.py - better Nexus support, better AV replacement, and only
    send roles to Nexus - from Daniel Schmidt
  - fix bug in checking the return value of regexec() for login and enable
    ACLs.
  - do_auth.py - better Nexus support, better AV replacement, and only

F4.0.4.20
  - remove stupid error message about running as root
  - Drop the private regex library in favor of libc's.  A system w/o a
    regex is one I dont care about.
  - finally remove config parsing for 'default authorization = permit'
  - apply ACLs to pap, chap, arap and ms-chap authentication too
  - change accounting log time format to match syslog
  - do_auth.py fix from Daniel Schmidt
  - import fdes from David G. Koontz (1991) for ARAP/MSCHAP_DES
  - move MSCHAP define to autoconf; --enable-mschap
  - use the fdes code for ARAP_DES and MSCHAP_DES.  NOTE: I have no way to
    test this.  lmk if it does not work.
  - increase NAC address array size.  affects the format of the tacacs
    wholog file (TACPLUS_WHOLOGFILE); existing file should be removed.
  - add comments to tac_plus.conf.5 about cipher algorithms in
    password_spec
  - do_auth.py - Fixed reression, Support for replacing av pairs - from
    Daniel Schmidt

F4.0.4.19
  - offer $ip to before/after authorization scripts
  - wtmp and accounting files do not need to be mutually exclusive
  - add authorization script example - from Daniel Schmidt
  - add partial support for single-connection mode
  - convert select()s to poll()s

F4.0.4.18
  - Fix missing printf argument in debug output
  - Add "enable = nopassword" to users, groups and hosts.

F4.0.4.17
  - Move REARMSIGNAL definition to autoconf
  - Move REAPCHILD definition to autoconf and check if SIG_IGN works
  - Move SIGCHLD handling to apply to all daemon personalities - partly
    from John Payne

F4.0.4.16
  - Few innocuous changes from or inspired by FreeBSD ports
  - Deal with max-session finger format difference in a way that does not
    require knowing which IOS is being fingered.
  - The header encryption field is really a flags field which includes
    a single-session option (which we'd like to support)
  - Check return of write() for interrupts when writing arguments to
    external scripts.
  - -G was not remaining in foreground - From Nathan Schrenk
  - Do not attempt to remove the pidfile if the pidfilebuf was truncated
    or we could not open the file.
  - Add 'accounting syslog;' configuration knob - mostly from Mark Ellzey
    Thomas
  - Notes about PAM - from Aaron Scarisbrick
  - Allow PAM debug message with tac_plus password debugging option - from
    Aaron Scarisbrick
  - Allow \'s within quoted words in tac_plus.conf - from Jesse Zbikowski
  - Allow 'file' <password_spec> for host and user enable - part from
    Jeff Gehlbach via Daniel Schmidt
  - Fix possible buffer overflow for arap - noted by Oren Nechushtan

F4.0.4.15
  - Check data lengths in debugging functions - reported by Antonin
    Vitecek
  - Fix syslog facility selection - from Timo Vanoni & Josef Voggesser
  - Add -G/foreground option
  - Deal with missing socklen_t

F4.0.4.14
  - Add notes about PAM to the user guide and tac_plus.conf(5)
  - Log login failures with the username, NAS address and NAS tty -
    requested by Andi Bauer
  - ACLs were not applied through the default authentication
    (ie: user=DEFAULT) path - reported by Robert Lister

F4.0.4.13
  - Rename convert.pl to tac_convert and install it
  - install users_guide

F4.0.4.12
  - Fix typo in usage message - from Georg Schwarz
  - Various tac_plus.conf.5 fixes - from Georg Schwarz
  - escape the escape backslash of the ACL examples - from Georg Schwarz
  - Fix a LP64 bug where VALUE (union v) consisting of pointer was
    intialized like an int - reported by brad dreisbach

F4.0.4.11
  - Fix OS X and build problems and do not prototype errno - from
    Georg Schwarz

F4.0.4.10
  - Fix PAM for linux, which does not offer PAM_AUTHOK for pam_set_item()
    and requires a pam_conv function even with PAM_SILENT - reported and
    tested by Stefan Oettl

F4.0.4.9
  - clean-up bogus nopasswd_str protoypes that gcc4 did not like

F4.0.4.8
  - if -B is used, add the bind address in the PID filename - from
    Ian Dickinson
  - "acl" is an AV pair for service exec.  Within service attribute
    parsing, do not parse "acl" as the acl (or connection ACL) keyword.
    This is a hack; the parser is rather lame - noted by Bryce Kahle
  - fix md4 for LP64
  - do not accept skey keywords unless compiled with skey support
  - fix skey enable password type - bit from Ed Ravin
  - skey prompt ("challenge") is "S/Key challenge", not "Password"
  - make "daemon" the default syslog facility and add a syslog config
    statement
  - add support for user authentication via PAM

F4.0.4.7
  - make configure option --with-skey work
  - raise a few logs from INFO to NOTICE, to allow syslogd filtering of
    some rather noisey logs
  - add ACL checking for authorization, for the case where tacacs is only
    used for authorization.

F4.0.4.6
  - fix a few compiler warnings
  - add -e and -h options to tac_pwd
  - include crypt.h if it exists (solaris)
  - make configure options --with-{user,group}id work

F4.0.4.5
  - use C99 stdint.h for int types
  - linux's libwrap needs libnsl
  - variable index in md5.c conflicts with index()

F4.0.4.4
  - added more autoconf stuff
  - fix-up tac_plus.8 manpage - still need to do autoconf-time option
    replacement
  - fix-up tac_plus.conf manpage - incomplete
  - fix-up tac_plus help message
  - whitespace and formatting nits
  - port host clause (minus type keyword) from devrim seral's tac_plus v9
    (http://www.gazi.edu.tr/tacacs/) at user request
  - changed user-specific enable password handling such that it if one
    is specified for the user, the daemon does not check the host-specific
    or global enable password.
  - make TACPLUS_ACCTFILE, TACPLUS_PIDFILE, and TACPLUS_LOGFILE autoconf
    knobs filling in pathsl.h and appopriate bits in manpages
  - separated the frequently asked questions portion of the user_guide
    into the file FAQ
  - OR successive -d (debug) options
  - fix md5 for LP64

F4.0.4.3
  - comment out the unnecessary lex and yacc tests from autoconf

F4.0.4.2
  - partial autoconf setup - much more to be done
  - compile option IGN_HUP (ignore HUP signal) is history
  - rename generated_password -> tac_pwd and add manpage
  - rename tac_plus.1 -> tac_plus.8
  - add tac_plus.confg.5
  - add -h option to display usage info

F4.0.4.1
  - {log,pid}file permissions fixes       - partically from ian freislich
  - add bind address (-B) option - partically from ian freislich
  - fix pidfile removal on exit

Changes from release F4.0.3 to F4.0.4
  - merge F4.0.4 changes from disaster.com

12 files changed, 16 insertions, 252 deletions

diff --git a/net/tacacs/Makefile b/net/tacacs/Makefile
index fbce9f4ae9f..ad9e79feefa 100644
--- a/net/tacacs/Makefile
+++ b/net/tacacs/Makefile
@@ -1,29 +1,28 @@
-# $NetBSD: Makefile,v 1.12 2013/12/23 11:57:05 wiz Exp $
+# $NetBSD: Makefile,v 1.13 2015/02/13 22:36:00 he Exp $
 
-DISTNAME=	tac_plus.F4.0.4.alpha
-PKGNAME=	tacacs-4.0.4a
+VERSION=	4.0.4.28
+DISTNAME=	tacacs-F${VERSION}
+PKGNAME=	tacacs-${VERSION}
 CATEGORIES=	net security
-MASTER_SITES=	ftp://ftpeng.cisco.com/pub/tacacs/
-#		ftp://ftp.shrubbery.net/pub/tac_plus/
-EXTRACT_SUFX=	.tar.Z
+MASTER_SITES+=	ftp://ftp.shrubbery.net/pub/tac_plus/
 
 MAINTAINER=	pkgsrc-users@NetBSD.org
 HOMEPAGE=	http://www.shrubbery.net/tac_plus/
 COMMENT=	Cisco authentication, authorization, and accounting protocol daemon
 LICENSE=	cisco-license
 
-BUILD_TARGET=	tac_plus
+GNU_CONFIGURE=	yes
+USE_LIBTOOL=	yes
+USE_TOOLS+=	perl
+
+#CONFIGURE_ARGS+=--enable-debug
 
 .include "../../mk/bsd.prefs.mk"
 .if ${OPSYS} == "SunOS"
 MAKE_FLAGS+=	OS=-DSOLARIS OSLIBS="-lsocket -lnsl"
 .endif
 
-INSTALLATION_DIRS=	${PKGMANDIR}/man8 sbin share/doc/tacacs
-
-do-install:
-	${INSTALL_PROGRAM} ${WRKSRC}/tac_plus ${DESTDIR}${PREFIX}/sbin
-	${INSTALL_MAN} ${WRKSRC}/tac_plus.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man8/tac_plus.8
-	${INSTALL_DATA} ${WRKSRC}/users_guide ${DESTDIR}${PREFIX}/share/doc/tacacs
+INSTALLATION_DIRS=	${PKGMANDIR}/man8 sbin
+INSTALLATION_DIRS+=	share/doc/tacacs/users_guide
 
 .include "../../mk/bsd.pkg.mk"
diff --git a/net/tacacs/distinfo b/net/tacacs/distinfo
index a2364441895..887607b8218 100644
--- a/net/tacacs/distinfo
+++ b/net/tacacs/distinfo
@@ -1,15 +1,5 @@
-$NetBSD: distinfo,v 1.6 2013/01/11 00:03:30 joerg Exp $
+$NetBSD: distinfo,v 1.7 2015/02/13 22:36:00 he Exp $
 
-SHA1 (tac_plus.F4.0.4.alpha.tar.Z) = 23ccb0b7db6909bd45dcf6762ef32917d3465dd6
-RMD160 (tac_plus.F4.0.4.alpha.tar.Z) = 733fbac017cfd2efcd7b5e80e1747bdd0c6fd60e
-Size (tac_plus.F4.0.4.alpha.tar.Z) = 193771 bytes
-SHA1 (patch-aa) = daaf8f737441d17b1339bb1c6b7f865a95f706bc
-SHA1 (patch-ab) = f8e08d64045348ba034c277c790a55c16d4afac1
-SHA1 (patch-ac) = 11ea986ede6d2a277747cd9abc3bdcade1bf1e7a
-SHA1 (patch-ad) = 9cfabd64567a29f825edc487ddeb2d173a3e883f
-SHA1 (patch-ae) = 67305db0c6dd64b33c00b8dc5dbb3c40fa50e094
-SHA1 (patch-af) = 82c68318bb9290a9ebf7c31baa8d7983b24c6827
-SHA1 (patch-dump.c) = 05a5989f26857f7724c1c81f9f76c8a56eb00d7a
-SHA1 (patch-maxsess.c) = 5f62897318d85ea416091b1a13c771cf7c693a51
-SHA1 (patch-packet.c) = 1cda78ae1084332f012c7ed41f5210a4b57f4f3c
-SHA1 (patch-utils.c) = c1a190fba6b15bd10d0b0f4c62c3802e7c924d8f
+SHA1 (tacacs-F4.0.4.28.tar.gz) = 7ceb93ed743096dd9755dccf7405f9b1d70188a3
+RMD160 (tacacs-F4.0.4.28.tar.gz) = 1336eee599a47068b657c333da66517f5620a144
+Size (tacacs-F4.0.4.28.tar.gz) = 530049 bytes
diff --git a/net/tacacs/patches/patch-aa b/net/tacacs/patches/patch-aa
deleted file mode 100644
index d4eed86cb79..00000000000
--- a/net/tacacs/patches/patch-aa
+++ /dev/null
@@ -1,51 +0,0 @@
-$NetBSD: patch-aa,v 1.1.1.1 2000/10/15 17:26:42 rh Exp $
-
---- Makefile.orig	Sun Jun 18 19:26:54 2000
-+++ Makefile
-@@ -19,7 +19,7 @@
- # LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
- # FOR A PARTICULAR PURPOSE. 
- 
--CC = gcc
-+# CC = gcc
- 
- # For AIX
- # See /usr/lpp/bos/bsdport on your system for details of how to define bsdcc
-@@ -33,8 +33,12 @@
- # OS=-DMIPS
- 
- # For Solaris (SUNOS 5.3, 5.4, 5.5, 5.6) uncomment the following two lines
--OS=-DSOLARIS
--OSLIBS=-lsocket -lnsl
-+#OS=-DSOLARIS
-+#OSLIBS=-lsocket -lnsl
-+
-+# For NetBSD
-+OS=-DNETBSD
-+OSLIBS=-lcrypt
- 
- # For FreeBSD
- # OS=-DFREEBSD
-@@ -65,11 +69,11 @@
- 
- # Definitions for SKEY functionality
- # DEFINES = -DSKEY
--# LIBS = ../crimelab/skey/src/libskey.a
-+# LIBS = -lskey
- # INCLUDES = -I../crimelab/skey/src
- 
- # Debugging flags
--DEBUG = -g
-+DEBUG =
- 
- # Enforce a limit on maximum sessions per user. See the user's guide
- # for more information.
-@@ -85,7 +89,7 @@
- # possible), containing its process id. Uncomment and modify the
- # following line to change this filename
- 
--# PIDFILE = -DTAC_PLUS_PIDFILE=\"/var/run/tac_plus.pid\" 
-+PIDFILE = -DTAC_PLUS_PIDFILE=\"/var/run/tac_plus.pid\" 
- 
- #
- # End of customisable section of Makefile
diff --git a/net/tacacs/patches/patch-ab b/net/tacacs/patches/patch-ab
deleted file mode 100644
index 97d62b1521b..00000000000
--- a/net/tacacs/patches/patch-ab
+++ /dev/null
@@ -1,43 +0,0 @@
-$NetBSD: patch-ab,v 1.3 2013/01/11 00:03:30 joerg Exp $
-
---- tac_plus.h.orig	2000-06-18 17:26:54.000000000 +0000
-+++ tac_plus.h
-@@ -74,11 +74,13 @@
- /*
-  * System definitions. 
-  */
-+#include <stdlib.h>
- 
- #ifdef NETBSD
- #define STDLIB_MALLOC
- #define NO_PWAGE
- #define CONST_SYSERRLIST
-+#define HAVE_SYSERR_PROTO
- #define VOIDSIG
- #endif
- 
-@@ -689,12 +691,13 @@ extern void parser_init();
- extern void set_expiration_status();
- 
- /* miscellaneous */
-+#ifndef HAVE_SYSERR_PROTO
- #ifdef CONST_SYSERRLIST
- extern const char *const sys_errlist[];
- #else
- extern char *sys_errlist[];
- #endif
--extern int errno;
-+#endif
- extern int sendauth_fn();
- extern int sendpass_fn();
- extern int enable_fn();
-@@ -734,3 +737,9 @@ extern struct timeval started_at;
- extern char *logfile;
- extern char *wtmpfile;
- extern int wtmpfd;
-+
-+void dump_nas_pak(u_char *);
-+void dump_tacacs_pak(u_char *pak);
-+void tac_exit(int status);
-+void send_error_reply(int type, char *msg);
-+void loguser(struct acct_rec *rec);
diff --git a/net/tacacs/patches/patch-ac b/net/tacacs/patches/patch-ac
deleted file mode 100644
index 69e0f48eacb..00000000000
--- a/net/tacacs/patches/patch-ac
+++ /dev/null
@@ -1,22 +0,0 @@
-$NetBSD: patch-ac,v 1.1.1.1 2000/10/15 17:26:42 rh Exp $
-
---- tac_plus.1.orig	Tue Oct  3 17:20:17 2000
-+++ tac_plus.1
-@@ -32,7 +32,7 @@
- authorisation and accounting.
- .LP
- On startup, tac_plus creates the file
--.B /etc/tac_plus.pid ,
-+.B /var/run/tac_plus.pid ,
- if possible, containing its process id.
- .LP
- .SH ARGUMENTS and OPTIONS
-@@ -212,7 +212,7 @@
- .B /var/tmp/tac_plus.log
- Contains debugging output when -d is in effect.
- .TP
--.B /etc/tac_plus.pid  or /etc/tac_plus.pid.port
-+.B /var/run/tac_plus.pid  or /var/run/tac_plus.pid.port
- contains the process id of the currently running daemon.  The port
- number is appended to the filename only if the port being used is not
- the default one of 49.
diff --git a/net/tacacs/patches/patch-ad b/net/tacacs/patches/patch-ad
deleted file mode 100644
index 80d5077e92c..00000000000
--- a/net/tacacs/patches/patch-ad
+++ /dev/null
@@ -1,15 +0,0 @@
-$NetBSD: patch-ad,v 1.1 2005/12/18 19:23:04 joerg Exp $
-
---- do_acct.c.orig	2005-12-18 19:15:09.000000000 +0000
-+++ do_acct.c
-@@ -20,6 +20,10 @@
- 
- #include "tac_plus.h"
- 
-+#if defined(__DragonFly__) && !defined(O_SYNC)
-+#define O_SYNC O_FSYNC
-+#endif
-+
- static int acctfd = 0;
- 
- /* Make a acct entry into the accounting file for accounting. 
diff --git a/net/tacacs/patches/patch-ae b/net/tacacs/patches/patch-ae
deleted file mode 100644
index 46dc768e3ed..00000000000
--- a/net/tacacs/patches/patch-ae
+++ /dev/null
@@ -1,13 +0,0 @@
-$NetBSD: patch-ae,v 1.1 2005/12/18 19:23:04 joerg Exp $
-
---- report.c.orig	2005-12-18 19:16:18.000000000 +0000
-+++ report.c
-@@ -143,8 +143,6 @@ va_dcl				/* no terminating semi-colon *
- 
- 
-     if (console) {
--	extern int errno;
--	
- 	if (!ostream)
- 	    ostream = fopen("/dev/console", "w");
- 
diff --git a/net/tacacs/patches/patch-af b/net/tacacs/patches/patch-af
deleted file mode 100644
index 4df137ae88c..00000000000
--- a/net/tacacs/patches/patch-af
+++ /dev/null
@@ -1,14 +0,0 @@
-$NetBSD: patch-af,v 1.1 2007/09/23 16:25:01 obache Exp $
-
---- parse.h.orig	2000-06-18 17:26:54.000000000 +0000
-+++ parse.h
-@@ -18,9 +18,6 @@
-    FITNESS FOR A PARTICULAR PURPOSE.
- */
- 
--/* Dummy password, if nopasswd is specified */
--extern char *nopasswd_str;
--
- /* Keywords & values */
- 
- #define S_eof             99
diff --git a/net/tacacs/patches/patch-dump.c b/net/tacacs/patches/patch-dump.c
deleted file mode 100644
index d3b9613a8ae..00000000000
--- a/net/tacacs/patches/patch-dump.c
+++ /dev/null
@@ -1,24 +0,0 @@
-$NetBSD: patch-dump.c,v 1.1 2013/01/11 00:03:30 joerg Exp $
-
---- dump.c.orig	2013-01-10 22:32:13.000000000 +0000
-+++ dump.c
-@@ -119,8 +119,7 @@ u_char *pak;
- 
- 
- /* Dump packets originated by a NAS */
--dump_nas_pak(pak)
--u_char *pak;
-+void dump_nas_pak(u_char *pak)
- {
-     struct authen_start *start;
-     struct authen_cont *cont;
-@@ -377,8 +376,7 @@ u_char *pak;
- 
- /* Dump packets originated by Tacacsd  */
- 
--dump_tacacs_pak(pak)
--u_char *pak;
-+void dump_tacacs_pak(u_char *pak)
- {
-     struct authen_reply *authen;
-     struct author_reply *author;
diff --git a/net/tacacs/patches/patch-maxsess.c b/net/tacacs/patches/patch-maxsess.c
deleted file mode 100644
index 8e52bb0f078..00000000000
--- a/net/tacacs/patches/patch-maxsess.c
+++ /dev/null
@@ -1,14 +0,0 @@
-$NetBSD: patch-maxsess.c,v 1.1 2013/01/11 00:03:30 joerg Exp $
-
---- maxsess.c.orig	2013-01-10 22:38:52.000000000 +0000
-+++ maxsess.c
-@@ -220,8 +220,7 @@ struct identity *idp;
-  * Given a start or a stop accounting record, update the file of
-  * records which tracks who's logged on and where.
-  */
--loguser(rec)
--struct acct_rec *rec;
-+void loguser(struct acct_rec *rec)
- {
-     struct identity *idp;
-     int i;
diff --git a/net/tacacs/patches/patch-packet.c b/net/tacacs/patches/patch-packet.c
deleted file mode 100644
index b28177c3d64..00000000000
--- a/net/tacacs/patches/patch-packet.c
+++ /dev/null
@@ -1,15 +0,0 @@
-$NetBSD: patch-packet.c,v 1.1 2013/01/11 00:03:30 joerg Exp $
-
---- packet.c.orig	2013-01-10 22:38:16.000000000 +0000
-+++ packet.c
-@@ -520,9 +520,7 @@ u_char *pak;
-     return (0);
- }
- 
--send_error_reply(type, msg)
--int type;
--char *msg;
-+void send_error_reply(int type, char *msg)
- {
-     switch (type) {
-     case TAC_PLUS_AUTHEN:
diff --git a/net/tacacs/patches/patch-utils.c b/net/tacacs/patches/patch-utils.c
deleted file mode 100644
index 481de8447d8..00000000000
--- a/net/tacacs/patches/patch-utils.c
+++ /dev/null
@@ -1,14 +0,0 @@
-$NetBSD: patch-utils.c,v 1.1 2013/01/11 00:03:30 joerg Exp $
-
---- utils.c.orig	2013-01-10 22:38:34.000000000 +0000
-+++ utils.c
-@@ -71,8 +71,7 @@ int size;
-     return (p);
- }
- 
--tac_exit(status)
--int status;
-+void tac_exit(int status)
- {
-     if (debug & DEBUG_FORK_FLAG)
- 	report(LOG_DEBUG, "exit status=%d", status);