Add missing decls

libc: Reintroduce getentropy.

This was introduced two years ago when the getrandom/getentropy API
question was still open, and removed because the discussion was
ongoing. Now getentropy is more widely adopted and soon to be in
POSIX. So reintroduce the symbol into libc since we'll be keeping it
anyway. Discussion of details of the semantics, as interpreted by
NetBSD, is ongoing, but the symbol needs to get in before the
netbsd-10 branch. The draft POSIX text is
(https://www.opengroup.org/austin/docs/austin_1110.pdf):

SYNOPSIS
#include <unistd.h>

int getentropy(void *buffer, size_t length);

DESCRIPTION
The getentropy() function shall write length bytes of data
starting at the location pointed to by buffer. The output
shall be unpredictable high quality random data, generated by
a cryptographically secure pseudo-random number
generator. The maximum permitted value for the length
argument is given by the {GETENTROPY_MAX} symbolic constant
defined in <limits.h>.

RETURN VALUES
Upon successful completion, getentropy() shall return 0;
otherwise, -1 shall be retunred and errno set to indicate the
error.

ERRORS
The getentropy() function shall fail if:

[EINVAL] The value of length is greater than
{GETENTROPY_MAX}.

The getentropy() function may fail if:

[ENOSYS] The system does not provide the necessary
source of entropy.

RATIONALE
The getentropy() function is not a cancellation point.

Minor changes from the previous introduction of getentropy into libc:

- Return EINVAL, not EIO, on buflen > 256.
- Define GETENTROPY_MAX in limits.h.

The declaration of getentropy in unistd.h and definition of
GETENTROPY_MAX in limits.h are currently conditional on
_NETBSD_SOURCE. When the next revision of POSIX is finalized, we can
expose them also under _POSIX_C_SOURCE > 20yymmL as usual -- and this
can be done as a pullup without breaking existing compiled programs.

fix typos in comments.

Correct typo in previous.

Add __null_sentinel

remove getentropy bits

Add ACL support for FFS. From FreeBSD.

Add getentropy() to libc - a simple wrapper to access the kernel CSPRNG.

Posted to tech-userlevel@ a week ago and reviewed by riastradh@.

GETENTROPY(3) Library Functions Manual GETENTROPY(3)

NAME
getentropy - fill a buffer with high quality random data

LIBRARY
Standard C Library (libc, -lc)

SYNOPSIS
#include <unistd.h>

int
getentropy(void *buf, size_t buflen);

DESCRIPTION
The getentropy() function fills a buffer with high quality random data,
suitable for seeding cryptographically secure psuedorandom number
generators.

getentropy() is only intended for seeding random number generators and is
not intended for use by regular code which simply needs secure random
data. For this purpose, please use arc4random(3).

The maximum value for buflen is 256 bytes.

IMPLEMENTATION NOTES
getentropy() reads from the sysctl(7) variable kern.arandom.

RETURN VALUES
The getentropy() function returns 0 on success, and -1 if an error
occurred.

ERRORS
getentropy() will succeed unless:

[EFAULT] The buf argument points to an invalid memory address.

[EIO] Too many bytes were requested.

SEE ALSO
arc4random(3), rnd(4)

STANDARDS
The getentropy() function is non-standard.

HISTORY
The getentropy() function first appeared in OpenBSD 5.6, then in
FreeBSD 12.0, and NetBSD 10.

Add getsid(2) to the XOPEN namespace (again)

Expose getsid(2) to POSIX >= 2008

one fexecve declaration should be enough.

Remove the _INCOMPLETE_XOPEN_C063 stuff.

Declare fexecve

more type protection macro lossage.

PR standards/53525: move getsubopt() to stdlib.h

branches: 1.149.2; 1.149.4;
fix typo

detect duplicate declaration of pthread_atfork() in pthread.h

PR 51287 Ralf Nolden: posix_fallocate belongs in <fcntl.h>

Use generic types in the profil(2) function prototype (<unistd.h>)

Put fseeko, ftello, pread, and pwrite in the POSIX 2001 namespace.
Ok christos, apb, martin

PR/49684: Pierre Pronchery: readlinkat(2) return type is wrong.

add execvpe, execlpe (reviewed by phone)

branches: 1.142.2;
Add userlevel manifestations of posix_fallocate and fdiscard, in
unistd.h and libc, and add a man page.

Allow wiggle room in the man page for implementations of fallocate
that either (a) don't fully unwind on failure, leaving new blocks
allocated without changing the file size, or (b) create only in-memory
transient reservations that disappear when crashing or rebooting.

Also, add crossreference to fdiscard from ftruncate(2), and remove the
old BUGS entry from there that called for a generalized version that
allows discarding ranges of a file: that's what fdiscard is.

add mkostemp{s,} mkstemps from FreeBSD

branches: 1.140.2;
PR/4891: Wiz: readlink moved from xopen to base at issue 5.

Follow OpenGroup online specification[1], move
fchmodat/mkdirat/mkfifoat/mknodat prototypes to <sys.stat.h>.

[1] http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/sys_stat.h.html

Remove #if defined(_KERNEL) around a userlevel function.

Check for _NETBSD_SOURCE being defined wherever we check for
_INCOMPLETE_XOPEN_C063 so that we expose the new POSIX extended API set
recently added.

Add most system calls for POSIX extended API set, part 2, with test cases:
faccessat(2), fchmodat(2), fchownat(2), fstatat(2), mkdirat(2), mkfifoat(2),
mknodat(2), linkat(2), readlinkat(2), symlinkat(2), renameat(2), unlinkat(2),
utimensat(2), openat(2).

Also implement O_SEARCH for openat(2)

Still missing:
- some flags for openat(2)
- fexecve(2) implementation

branches: 1.135.2;
bin/46703: BSD r-commands use wrong source address for stderr
http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=46703
Bump libc minor for the addition of rresvport_af_addr()

new flag.

add more options.

add timeout to getpassfd.

add GETPASS_ECHO_STAR

add getpassfd

add getpass_r

branches: 1.128.2;
Add __returns_twice for the attribute of the same name. This makes the
attribute explicit based on the functions GCC gives it too.

branches: 1.127.2;
First stage of support for Extended API set 2. Most of the think is
unimplemented, except enough of linkat(2) to hardlink to a symlink.

Everything new in headers is guarded #ifdef _INCOMPLETE_XOPEN_C063 since
some software (e.g.: xcvs in our own tree) will assume they can use openat(2)
when AT_FDCWD is defined. _INCOMPLETE_XOPEN_C063 will go away once support
will be completed.

* Arrange for interfaces that create new file descriptors to be able to
set close-on-exec on creation (http://udrepper.livejournal.com/20407.html).

- Add F_DUPFD_CLOEXEC to fcntl(2).
- Add MSG_CMSG_CLOEXEC to recvmsg(2) for unix file descriptor passing.
- Add dup3(2) syscall with a flags argument for O_CLOEXEC, O_NONBLOCK.
- Add pipe2(2) syscall with a flags argument for O_CLOEXEC, O_NONBLOCK.
- Add flags SOCK_CLOEXEC, SOCK_NONBLOCK to the socket type parameter
for socket(2) and socketpair(2).
- Add new paccept(2) syscall that takes an additional sigset_t to alter
the sigmask temporarily and a flags argument to set SOCK_CLOEXEC,
SOCK_NONBLOCK.
- Add new mode character 'e' to fopen(3) and popen(3) to open pipes
and file descriptors for close on exec.
- Add new kqueue1(2) syscall with a new flags argument to open the
kqueue file descriptor with O_CLOEXEC, O_NONBLOCK.

* Fix the system calls that take socklen_t arguments to actually do so.

* Don't include userland header files (signal.h) from system header files
(rump_syscallargs.h).

* Bump libc version for the new syscalls.

Re-do ssp hijacking by defining inline functions and using the weak libc
symbols to do the indirection for unistd.h instead of #define tricks.
Fixes compilation for things that define struct { ssize_t read(int fd, ...); }.

The signal number argument in psignal is int not unsigned int.
Add psiginfo.

change size_t to ssize_t for POSIX compliance.

PR/43172: Jukka Ruohonen: swab(3) lacks restrict-keyword

branches: 1.121.2;
Declare strsignal(3) in <string.h>, per POSIX-2008, and adjust
documentation accordingly.

Fixes PR standards/41325 from Perry E. Metzger.

merge christos-time_t

Change the second argument of getlogin_r() from int to size_t, per POSIX.

branches: 1.118.4; 1.118.6;
SUS says that pthread_atfork() must also be in unistd.h

Add getlogin_r. Manual page changes mostly lifted from FreeBSD.

branches: 1.116.2; 1.116.4;
Remove clause 3 and 4 from TNF licenses

branches: 1.115.2;
everyone else assumes that defining "_XOPEN_SOURCE" means XPG4.2,
so remove comparisions against the numerical values "3" or "4"

change some __attribute__s to __keywords

branches: 1.113.2;
Add a new socket option for unix domain sockets: LOCAL_PEEREID, to make
it possible to get the pid, euid and egid of the process at the remote
end at the time it did bind() or connect().

Add a new libc function, getpeereid() to easily get at the euid and egid.
As a consequence, bump libc's minor number.

Document the LOCAL_PEEREID socket option in unix(4).

Based on contribution by Arne H. Juul, minor modifications by myself.

branches: 1.112.2;
Do not include SSP files unless _FORTIFY_SOURCE > 0.

Match usage of FORTIFY_SOURCE on other platforms by not requiring special
include path: the normal header files now include the "SSP" ones (which one
should note are not really named right: SSP and FORTIFY_SOURCE are independent
features).

Disable USE_SSP on targets where the compiler doesn't support it at all
(mips, alpha) or it's known broken (sh3). But enable FORTIFY_SOURCE,
without SSP, on those platforms -- tested on mipsel.

branches: 1.110.4; 1.110.6;
u_intN_t -> uintN_t

Remove leading __ from __(const|inline|signed|volatile) -- it is obsolete.

Move ttyname_r() to the 1003.1c-1995 section.

ttyname_r returns int.

Add getenv_r and ttyname_r

compat code reorg

PR/30503: Nicolas Joly: swapctl(2) prototype does not match corresponding
syscall

Remove the compatibility select() prototype. Going back to Lite2 select(2)
has also mandated <sys/time.h> to be included, which is now sufficient
for the prototype and all related declarations; thus the local duplicate
of the prototype can be removed. Approved by Christos.

Provide select() and pselect() prototypes in <sys/select.h>, per
1003.1-2001, and leave the select() prototype in <unistd.h> for
compatibility. To allow for transition, reorganization of this is
deferred until netbsd-3 gets branched.

de-__P -- the hack is long since useless. Discussed with christos,
matt, kleink, others. Approved by christos.

Implement getgroupmembership(3). This is similar to getgrouplist(3), except
that the "int maxgroups" and "int *ngroups" parameters are separated into
two separate parameters which makes it possible to call multiple nsswitch
back-ends and have the results correctly merged.
getgrouplist(3) is now implemented using getgroupmembership(3).

Proposed on tech-userlevel on December 1, 2004.

Move declaration of closefrom(3) to local extensions.

implement closefrom(3).

While I'm at it: add restrict qualifiers to readlink(2).

POSIX-2001: Change readlink(2)'s return type from int to ssize_t.

Userland portion of fsync_range(2), written by Bill Studenmund, and
contributed by Wasabi Systems, Inc.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22270, verified by myself.

Do not give names to the parameters in function prototypes (those names
reduces the usefulness of the gcc -Wshadow flag).

Add a new feature-test macro, _NETBSD_SOURCE. If this is defined
by the application, all NetBSD interfaces are made visible, even
if some other feature-test macro (like _POSIX_C_SOURCE) is defined.
<sys/featuretest.h> defined _NETBSD_SOURCE if none of _ANSI_SOURCE,
_POSIX_C_SOURCE and _XOPEN_SOURCE is defined, so as to preserve
existing behaviour.

This has two major advantages:
+ Programs that require non-POSIX facilities but define _POSIX_C_SOURCE
can trivially be overruled by putting -D_NETBSD_SOURCE in their CFLAGS.
+ It makes most of the #ifs simpler, in that they're all now ORs of the
various macros, rather than having checks for (!defined(_ANSI_SOURCE) ||
!defined(_POSIX_C_SOURCE) || !defined(_XOPEN_SOURCE)) all over the place.

I've tried not to change the semantics of the headers in any case where
_NETBSD_SOURCE wasn't defined, but there were some places where the
current semantics were clearly mad, and retaining them was harder than
correcting them. In particular, I've mostly normalised things so that
_ANSI_SOURCE gets you the smallest set of stuff, then _POSIX_C_SOURCE,
_XOPEN_SOURCE and _NETBSD_SOURCE in that order.

Tested by building for vax, encouraged by thorpej, and uncontested in
tech-userlevel for a week.

Well, _The_ Open Group.

Use the real TOG specification name for references.

seteuid() and setegid() were adopted in IEEE Std 1003.1-2001 + X/Open
portability guide issue 6, adjust headers to expose the function
prototypes with appropriate _POSIX_C_SOURCE/_XOPEN_SOURCE defines
fixes standards/21136 by MAEKAWA Masahide

Remove variable name from prototype.
Reported by John Heasley on current-users on 29 July 2001.

Avoid trad. cpp recursion in intptr_t definition.

branches: 1.86.2;
protect against multiple declarations.

Define intptr_t and uintptr_t via <machine/int_types.h>.

New syscall issetugid.

backout previous. the definition of struct option caused too many namespace
collisions. Instead, define getopt_long in getopt.h and getopt in unistd.h
where it belongs.

Add getopt.h and collect all the getopt related stuff here.
Make unistd.h include <getopt.h> to get the getopt stuff.
This adds support for getopt_long from Dieter Baron and Thomas Klausner.

add IPv6 support to rcmd() and friends.
rcmd() and iruserok(): unchanged
ruserok(): became address family independent
rcmd_af(), iruesrok_sa(): address family independent

Move <null.h> to <sys/null.h> for the purpose of avoiding conflicts due to
std C headers including it, and a kernel module written in C++ would benfit
as well.

For the benefit of G++'s null pointer constant implementation, #define NULL
as __null with egcs 1.0 (GCC 2.90) and above. As several headers are affected
by this change, move the definition into a new header file, <null.h>, to ease
maintenance.

Change the declaration of the argv argument to getopt(3) from "char * const *"
(as originally declared in System V) to "char * const []", as was done in
1003.2 and subsequently propagated into XPG4.
From Andrew Cagney in PR lib/8930.

branches: 1.77.4;
XSH5: change function signature to `void *sbrk(intptr_t)'.

Move IPv6-related declarations into the implementation-defined domain.

define IPv6 library functions and structures, as defined in
RFC2292 and RFC2553.
define internal state structure for IPv6-transport resolver.

Commits for source code will follow.

#ifdef __STDC__ -> #if __STDC__

branches: 1.73.2;
move __getcwd prototypes to libc-private header file.

XXX duplicate the prototype in getcwd regression test (which needs to
call the syscall directly for reasonably complete testing).

Add fchroot, getcwd

brk(2) actually returns an int indicating success (0) or failure (-1). Also,
change its argument to void *. (Both XSH5).

G/C orphaned unwhiteout() prototype.

Change the type of sys_siglist and sys_signame from const char *const [] to
const char *const *, and rename them to __sys_siglist14 and __sys_signame14.
This will prevent the size of the exported symbol from changing when more
signals are added to the list.

getpgid() is XPG4.2, actually.

add a prototype for getpgid (missing for years!)

__Namespace__ __protection__.

Sprinkle in some __attribute__((noreturn))s.

Slight rearrangement.

If __AUDIT__ is defined, remove some traditional interfaces: gets, sprintf,
vsprintf, tempnam, mktemp, getwd.

Mark more functions returning internal buffers for const auditing.

Make many of the new consts dependent on a new `__AUDIT__' flag, to avoid
breaking third party software. *sigh*

KNF nit.

const poisoning.

Addendum to previous change: since pread()'s and pwrite()'s first official
appearance was in X/Open CAE Spec Issue 5 Version 2, add a section for that
and move the prototypes there.

Prototype pread(2) and pwrite(2) if !defined(_POSIX_C_SOURCE).

Add a prototype for fdatasync(2).

* Reorganize name space protection.
* Remove mknod() prototype; it's located in <sys/stat.h> (XPG4.2).
* Remove re_comp() and re_exec() prototypes; their location is <re_comp.h>
(XPG4.2).
* Move setkey() prototype to <stdlib.h> (XPG4).
* Move mkstemp(), mktemp(), ttyslot() and valloc() prototypes to <stdlib.h>
(XPG4.2).
Assign copyright to TNF.

Make the rename() prototype available to XPG Issue <=3 applications only; the
canonical header for the prototype has been <stdio.h> for quite a while.

Change the type of the `namelen' argument of gethostname(), getdomainname(),
sethostname(), setdomainname() from int to size_t. The former change was
made due to an X/Open XNS5 requirement, the latter three were made for
consistency.

Per X/Open CAE Spec Issue 5 Version 2, change the buffer size argument of
readlink() from type `int' to type `size_t'. This isn't an ABI change, since
the calling convention of our only LP64 platform (the Alpha) already promotes
this argument to a `long'.

This may not be the final action on this matter; readlink() still returns
an `int', which may change in a future revision of the standard.

Prototype getsid().

If standards-compliance is requested by defining the preprocessor symbols
_POSIX_SOURCE or _XOPEN_SOURCE at compile time, use __RENAME() to call
__posix_chown(), __posix_fchown(), __posix_lchown() and __posix_rename()
instead of their NetBSD counterparts in order to remove the requirement of
linking against libposix.

merge lite-2

Per XPG4, move the prototype of swab() from <string.h> to <unistd.h>.

Update for __vfork14().

Add lockf(), an alternate interface to perform advisory record locking;
per XPG4.2.

Per XPG4.2, use useconds_t for as argument and return type of ualarm().

Per XPG4.2, change usleep() to take an useconds_t as its argument, and return
an int.

Per XPG4.2, move mknod() prototype from <unistd.h> to <sys/stat.h>.

branches: 1.42.2;
move setmode and strsignal to unistd.h

proto lchown() only if !_POSIX_SOURCE

Declare prototype of lchown(2).

Backout addition of user_from_uid and group_from_gid; they exist in pwd.h
and grp.h [pointed by cgd]

Add user_from_uid and group_from_gid

Add missing swapon prototype and mark it obsolete.

Common sense dictates that the `basegid' paramater of initgroups(3) should
be of type gid_t, and not int.

oops, forgot to commit this. prototype swapctl() in place of swapon().

Add missing prototype for getgrouplist as mentioned in the man page.

branches: 1.33.2;
__syscall() should return quad_t, not int; what was i thinking?

sethostid returns int not void, also add prototype for __syscall that
matches manual page.

Don't prototype poll(2) here. SysV requires poll.h to be included.

Prototype poll(2).

update for new reboot(2).

Declare setre[ug]id() to take [ug]id_t args. No functional difference.

Change iuserok() to take u_int32_t. Some netgroup fixes (partially
from OpenBSD and Theo).

branches: 1.26.4;
change definition of profil() to make it 64-bit friendly. This has
no practical consequence on 32-bit systems. old prototype was
int profil(char *, int, int, int), and new one is int profile(char *,
size_t, u_long, u_int). the size_t is the size of the buffer,
and the u_long is the 'starting offset'. (I changed the last int
to u_int, because it's treated as a u_int everywhere, and isn't
logically a signed value.)

Make definitions of psignal() and sys_siglist match signal.h.

Add prototypes for undelete(2).

proto for iruserok.

new RCS ID format.

better attributes.

NFS changes.

kill *chflags protos

add new getopt(3) extern variable optreset

Last weekend's uid_t & gid_t changes allow us to change the uid & gid
arguments to fchown from ints to a uid_t and a gid_t.

Last weekend's gid_t changes allow us to change the gidset argument of
getgroups() and setgroups() from a int ptr to a gid_t ptr.

match 4.4's definitions for sys_siglist and sys_signame

vfork() return type pid_t. reported by Peter Galbavy.
Also, whoever did the re-indenting in this file needs to be shot;
things shouldn't be indented by "tab-space"...

Add `const's to sys_siglist and sys_signame decls.

Change prototypes of alarm and sleep to use "unsigned" instead of "u_int".
"u_int" is not defined by <sys/types.h> in a strict POSIX environment.

Declare getopt(), getsubopt() and their external variables.
Still work to be done to handle all the combinations of _POSIX_SOURCE, and
_POSIX2_SOURCE, etc. to allow the user to select a strictly conforming
compilation environment, but this change allows us to transition
getopt() out of <stdlib.h>.

POSIX.1 says that ssize_t is defined in <sys/types.h>.

Provide prototype for POSIX.2 function confstr().

Add prototypes for getdomainname() and setdomainname(); the man page
instructs the user to include unistd.h, but it didn't provide a
declaration.

Add __dead qualifier to _exit(), as it never returns.

Add declaration of sys_signame[].

Add RCS identifiers.

Update fnmatch to be more posix complient (from keith bostic)

getpgrp actually takes void. ask the IEEE...

fix bad prototype for getpgrp()

branches: 1.1.1;
Initial revision

libc: Reintroduce getentropy.

This was introduced two years ago when the getrandom/getentropy API
question was still open, and removed because the discussion was
ongoing. Now getentropy is more widely adopted and soon to be in
POSIX. So reintroduce the symbol into libc since we'll be keeping it
anyway. Discussion of details of the semantics, as interpreted by
NetBSD, is ongoing, but the symbol needs to get in before the
netbsd-10 branch. The draft POSIX text is
(https://www.opengroup.org/austin/docs/austin_1110.pdf):

SYNOPSIS
#include <unistd.h>

int getentropy(void *buffer, size_t length);

DESCRIPTION
The getentropy() function shall write length bytes of data
starting at the location pointed to by buffer. The output
shall be unpredictable high quality random data, generated by
a cryptographically secure pseudo-random number
generator. The maximum permitted value for the length
argument is given by the {GETENTROPY_MAX} symbolic constant
defined in <limits.h>.

RETURN VALUES
Upon successful completion, getentropy() shall return 0;
otherwise, -1 shall be retunred and errno set to indicate the
error.

ERRORS
The getentropy() function shall fail if:

[EINVAL] The value of length is greater than
{GETENTROPY_MAX}.

The getentropy() function may fail if:

[ENOSYS] The system does not provide the necessary
source of entropy.

RATIONALE
The getentropy() function is not a cancellation point.

Minor changes from the previous introduction of getentropy into libc:

- Return EINVAL, not EIO, on buflen > 256.
- Define GETENTROPY_MAX in limits.h.

The declaration of getentropy in unistd.h and definition of
GETENTROPY_MAX in limits.h are currently conditional on
_NETBSD_SOURCE. When the next revision of POSIX is finalized, we can
expose them also under _POSIX_C_SOURCE > 20yymmL as usual -- and this
can be done as a pullup without breaking existing compiled programs.

fix typos in comments.

Correct typo in previous.

Add __null_sentinel

remove getentropy bits

Add ACL support for FFS. From FreeBSD.

Add getentropy() to libc - a simple wrapper to access the kernel CSPRNG.

Posted to tech-userlevel@ a week ago and reviewed by riastradh@.

GETENTROPY(3) Library Functions Manual GETENTROPY(3)

NAME
getentropy - fill a buffer with high quality random data

LIBRARY
Standard C Library (libc, -lc)

SYNOPSIS
#include <unistd.h>

int
getentropy(void *buf, size_t buflen);

DESCRIPTION
The getentropy() function fills a buffer with high quality random data,
suitable for seeding cryptographically secure psuedorandom number
generators.

getentropy() is only intended for seeding random number generators and is
not intended for use by regular code which simply needs secure random
data. For this purpose, please use arc4random(3).

The maximum value for buflen is 256 bytes.

IMPLEMENTATION NOTES
getentropy() reads from the sysctl(7) variable kern.arandom.

RETURN VALUES
The getentropy() function returns 0 on success, and -1 if an error
occurred.

ERRORS
getentropy() will succeed unless:

[EFAULT] The buf argument points to an invalid memory address.

[EIO] Too many bytes were requested.

SEE ALSO
arc4random(3), rnd(4)

STANDARDS
The getentropy() function is non-standard.

HISTORY
The getentropy() function first appeared in OpenBSD 5.6, then in
FreeBSD 12.0, and NetBSD 10.

Add getsid(2) to the XOPEN namespace (again)

Expose getsid(2) to POSIX >= 2008

one fexecve declaration should be enough.

Remove the _INCOMPLETE_XOPEN_C063 stuff.

Declare fexecve

more type protection macro lossage.

PR standards/53525: move getsubopt() to stdlib.h

branches: 1.149.2; 1.149.4;
fix typo

detect duplicate declaration of pthread_atfork() in pthread.h

PR 51287 Ralf Nolden: posix_fallocate belongs in <fcntl.h>

Use generic types in the profil(2) function prototype (<unistd.h>)

Put fseeko, ftello, pread, and pwrite in the POSIX 2001 namespace.
Ok christos, apb, martin

PR/49684: Pierre Pronchery: readlinkat(2) return type is wrong.

add execvpe, execlpe (reviewed by phone)

branches: 1.142.2;
Add userlevel manifestations of posix_fallocate and fdiscard, in
unistd.h and libc, and add a man page.

Allow wiggle room in the man page for implementations of fallocate
that either (a) don't fully unwind on failure, leaving new blocks
allocated without changing the file size, or (b) create only in-memory
transient reservations that disappear when crashing or rebooting.

Also, add crossreference to fdiscard from ftruncate(2), and remove the
old BUGS entry from there that called for a generalized version that
allows discarding ranges of a file: that's what fdiscard is.

add mkostemp{s,} mkstemps from FreeBSD

branches: 1.140.2;
PR/4891: Wiz: readlink moved from xopen to base at issue 5.

Follow OpenGroup online specification[1], move
fchmodat/mkdirat/mkfifoat/mknodat prototypes to <sys.stat.h>.

[1] http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/sys_stat.h.html

Remove #if defined(_KERNEL) around a userlevel function.

Check for _NETBSD_SOURCE being defined wherever we check for
_INCOMPLETE_XOPEN_C063 so that we expose the new POSIX extended API set
recently added.

Add most system calls for POSIX extended API set, part 2, with test cases:
faccessat(2), fchmodat(2), fchownat(2), fstatat(2), mkdirat(2), mkfifoat(2),
mknodat(2), linkat(2), readlinkat(2), symlinkat(2), renameat(2), unlinkat(2),
utimensat(2), openat(2).

Also implement O_SEARCH for openat(2)

Still missing:
- some flags for openat(2)
- fexecve(2) implementation

branches: 1.135.2;
bin/46703: BSD r-commands use wrong source address for stderr
http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=46703
Bump libc minor for the addition of rresvport_af_addr()

new flag.

add more options.

add timeout to getpassfd.

add GETPASS_ECHO_STAR

add getpassfd

add getpass_r

branches: 1.128.2;
Add __returns_twice for the attribute of the same name. This makes the
attribute explicit based on the functions GCC gives it too.

branches: 1.127.2;
First stage of support for Extended API set 2. Most of the think is
unimplemented, except enough of linkat(2) to hardlink to a symlink.

Everything new in headers is guarded #ifdef _INCOMPLETE_XOPEN_C063 since
some software (e.g.: xcvs in our own tree) will assume they can use openat(2)
when AT_FDCWD is defined. _INCOMPLETE_XOPEN_C063 will go away once support
will be completed.

* Arrange for interfaces that create new file descriptors to be able to
set close-on-exec on creation (http://udrepper.livejournal.com/20407.html).

- Add F_DUPFD_CLOEXEC to fcntl(2).
- Add MSG_CMSG_CLOEXEC to recvmsg(2) for unix file descriptor passing.
- Add dup3(2) syscall with a flags argument for O_CLOEXEC, O_NONBLOCK.
- Add pipe2(2) syscall with a flags argument for O_CLOEXEC, O_NONBLOCK.
- Add flags SOCK_CLOEXEC, SOCK_NONBLOCK to the socket type parameter
for socket(2) and socketpair(2).
- Add new paccept(2) syscall that takes an additional sigset_t to alter
the sigmask temporarily and a flags argument to set SOCK_CLOEXEC,
SOCK_NONBLOCK.
- Add new mode character 'e' to fopen(3) and popen(3) to open pipes
and file descriptors for close on exec.
- Add new kqueue1(2) syscall with a new flags argument to open the
kqueue file descriptor with O_CLOEXEC, O_NONBLOCK.

* Fix the system calls that take socklen_t arguments to actually do so.

* Don't include userland header files (signal.h) from system header files
(rump_syscallargs.h).

* Bump libc version for the new syscalls.

Re-do ssp hijacking by defining inline functions and using the weak libc
symbols to do the indirection for unistd.h instead of #define tricks.
Fixes compilation for things that define struct { ssize_t read(int fd, ...); }.

The signal number argument in psignal is int not unsigned int.
Add psiginfo.

change size_t to ssize_t for POSIX compliance.

PR/43172: Jukka Ruohonen: swab(3) lacks restrict-keyword

branches: 1.121.2;
Declare strsignal(3) in <string.h>, per POSIX-2008, and adjust
documentation accordingly.

Fixes PR standards/41325 from Perry E. Metzger.

merge christos-time_t

Change the second argument of getlogin_r() from int to size_t, per POSIX.

branches: 1.118.4; 1.118.6;
SUS says that pthread_atfork() must also be in unistd.h

Add getlogin_r. Manual page changes mostly lifted from FreeBSD.

branches: 1.116.2; 1.116.4;
Remove clause 3 and 4 from TNF licenses

branches: 1.115.2;
everyone else assumes that defining "_XOPEN_SOURCE" means XPG4.2,
so remove comparisions against the numerical values "3" or "4"

change some __attribute__s to __keywords

branches: 1.113.2;
Add a new socket option for unix domain sockets: LOCAL_PEEREID, to make
it possible to get the pid, euid and egid of the process at the remote
end at the time it did bind() or connect().

Add a new libc function, getpeereid() to easily get at the euid and egid.
As a consequence, bump libc's minor number.

Document the LOCAL_PEEREID socket option in unix(4).

Based on contribution by Arne H. Juul, minor modifications by myself.

branches: 1.112.2;
Do not include SSP files unless _FORTIFY_SOURCE > 0.

Match usage of FORTIFY_SOURCE on other platforms by not requiring special
include path: the normal header files now include the "SSP" ones (which one
should note are not really named right: SSP and FORTIFY_SOURCE are independent
features).

Disable USE_SSP on targets where the compiler doesn't support it at all
(mips, alpha) or it's known broken (sh3). But enable FORTIFY_SOURCE,
without SSP, on those platforms -- tested on mipsel.

branches: 1.110.4; 1.110.6;
u_intN_t -> uintN_t

Remove leading __ from __(const|inline|signed|volatile) -- it is obsolete.

Move ttyname_r() to the 1003.1c-1995 section.

ttyname_r returns int.

Add getenv_r and ttyname_r

compat code reorg

PR/30503: Nicolas Joly: swapctl(2) prototype does not match corresponding
syscall

Remove the compatibility select() prototype. Going back to Lite2 select(2)
has also mandated <sys/time.h> to be included, which is now sufficient
for the prototype and all related declarations; thus the local duplicate
of the prototype can be removed. Approved by Christos.

Provide select() and pselect() prototypes in <sys/select.h>, per
1003.1-2001, and leave the select() prototype in <unistd.h> for
compatibility. To allow for transition, reorganization of this is
deferred until netbsd-3 gets branched.

de-__P -- the hack is long since useless. Discussed with christos,
matt, kleink, others. Approved by christos.

Implement getgroupmembership(3). This is similar to getgrouplist(3), except
that the "int maxgroups" and "int *ngroups" parameters are separated into
two separate parameters which makes it possible to call multiple nsswitch
back-ends and have the results correctly merged.
getgrouplist(3) is now implemented using getgroupmembership(3).

Proposed on tech-userlevel on December 1, 2004.

Move declaration of closefrom(3) to local extensions.

implement closefrom(3).

While I'm at it: add restrict qualifiers to readlink(2).

POSIX-2001: Change readlink(2)'s return type from int to ssize_t.

Userland portion of fsync_range(2), written by Bill Studenmund, and
contributed by Wasabi Systems, Inc.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22270, verified by myself.

Do not give names to the parameters in function prototypes (those names
reduces the usefulness of the gcc -Wshadow flag).

Add a new feature-test macro, _NETBSD_SOURCE. If this is defined
by the application, all NetBSD interfaces are made visible, even
if some other feature-test macro (like _POSIX_C_SOURCE) is defined.
<sys/featuretest.h> defined _NETBSD_SOURCE if none of _ANSI_SOURCE,
_POSIX_C_SOURCE and _XOPEN_SOURCE is defined, so as to preserve
existing behaviour.

This has two major advantages:
+ Programs that require non-POSIX facilities but define _POSIX_C_SOURCE
can trivially be overruled by putting -D_NETBSD_SOURCE in their CFLAGS.
+ It makes most of the #ifs simpler, in that they're all now ORs of the
various macros, rather than having checks for (!defined(_ANSI_SOURCE) ||
!defined(_POSIX_C_SOURCE) || !defined(_XOPEN_SOURCE)) all over the place.

I've tried not to change the semantics of the headers in any case where
_NETBSD_SOURCE wasn't defined, but there were some places where the
current semantics were clearly mad, and retaining them was harder than
correcting them. In particular, I've mostly normalised things so that
_ANSI_SOURCE gets you the smallest set of stuff, then _POSIX_C_SOURCE,
_XOPEN_SOURCE and _NETBSD_SOURCE in that order.

Tested by building for vax, encouraged by thorpej, and uncontested in
tech-userlevel for a week.

Well, _The_ Open Group.

Use the real TOG specification name for references.

seteuid() and setegid() were adopted in IEEE Std 1003.1-2001 + X/Open
portability guide issue 6, adjust headers to expose the function
prototypes with appropriate _POSIX_C_SOURCE/_XOPEN_SOURCE defines
fixes standards/21136 by MAEKAWA Masahide

Remove variable name from prototype.
Reported by John Heasley on current-users on 29 July 2001.

Avoid trad. cpp recursion in intptr_t definition.

branches: 1.86.2;
protect against multiple declarations.

Define intptr_t and uintptr_t via <machine/int_types.h>.

New syscall issetugid.

backout previous. the definition of struct option caused too many namespace
collisions. Instead, define getopt_long in getopt.h and getopt in unistd.h
where it belongs.

Add getopt.h and collect all the getopt related stuff here.
Make unistd.h include <getopt.h> to get the getopt stuff.
This adds support for getopt_long from Dieter Baron and Thomas Klausner.

add IPv6 support to rcmd() and friends.
rcmd() and iruserok(): unchanged
ruserok(): became address family independent
rcmd_af(), iruesrok_sa(): address family independent

Move <null.h> to <sys/null.h> for the purpose of avoiding conflicts due to
std C headers including it, and a kernel module written in C++ would benfit
as well.

For the benefit of G++'s null pointer constant implementation, #define NULL
as __null with egcs 1.0 (GCC 2.90) and above. As several headers are affected
by this change, move the definition into a new header file, <null.h>, to ease
maintenance.

Change the declaration of the argv argument to getopt(3) from "char * const *"
(as originally declared in System V) to "char * const []", as was done in
1003.2 and subsequently propagated into XPG4.
From Andrew Cagney in PR lib/8930.

branches: 1.77.4;
XSH5: change function signature to `void *sbrk(intptr_t)'.

Move IPv6-related declarations into the implementation-defined domain.

define IPv6 library functions and structures, as defined in
RFC2292 and RFC2553.
define internal state structure for IPv6-transport resolver.

Commits for source code will follow.

#ifdef __STDC__ -> #if __STDC__

branches: 1.73.2;
move __getcwd prototypes to libc-private header file.

XXX duplicate the prototype in getcwd regression test (which needs to
call the syscall directly for reasonably complete testing).

Add fchroot, getcwd

brk(2) actually returns an int indicating success (0) or failure (-1). Also,
change its argument to void *. (Both XSH5).

G/C orphaned unwhiteout() prototype.

Change the type of sys_siglist and sys_signame from const char *const [] to
const char *const *, and rename them to __sys_siglist14 and __sys_signame14.
This will prevent the size of the exported symbol from changing when more
signals are added to the list.

getpgid() is XPG4.2, actually.

add a prototype for getpgid (missing for years!)

__Namespace__ __protection__.

Sprinkle in some __attribute__((noreturn))s.

Slight rearrangement.

If __AUDIT__ is defined, remove some traditional interfaces: gets, sprintf,
vsprintf, tempnam, mktemp, getwd.

Mark more functions returning internal buffers for const auditing.

Make many of the new consts dependent on a new `__AUDIT__' flag, to avoid
breaking third party software. *sigh*

KNF nit.

const poisoning.

Addendum to previous change: since pread()'s and pwrite()'s first official
appearance was in X/Open CAE Spec Issue 5 Version 2, add a section for that
and move the prototypes there.

Prototype pread(2) and pwrite(2) if !defined(_POSIX_C_SOURCE).

Add a prototype for fdatasync(2).

* Reorganize name space protection.
* Remove mknod() prototype; it's located in <sys/stat.h> (XPG4.2).
* Remove re_comp() and re_exec() prototypes; their location is <re_comp.h>
(XPG4.2).
* Move setkey() prototype to <stdlib.h> (XPG4).
* Move mkstemp(), mktemp(), ttyslot() and valloc() prototypes to <stdlib.h>
(XPG4.2).
Assign copyright to TNF.

Make the rename() prototype available to XPG Issue <=3 applications only; the
canonical header for the prototype has been <stdio.h> for quite a while.

Change the type of the `namelen' argument of gethostname(), getdomainname(),
sethostname(), setdomainname() from int to size_t. The former change was
made due to an X/Open XNS5 requirement, the latter three were made for
consistency.

Per X/Open CAE Spec Issue 5 Version 2, change the buffer size argument of
readlink() from type `int' to type `size_t'. This isn't an ABI change, since
the calling convention of our only LP64 platform (the Alpha) already promotes
this argument to a `long'.

This may not be the final action on this matter; readlink() still returns
an `int', which may change in a future revision of the standard.

Prototype getsid().

If standards-compliance is requested by defining the preprocessor symbols
_POSIX_SOURCE or _XOPEN_SOURCE at compile time, use __RENAME() to call
__posix_chown(), __posix_fchown(), __posix_lchown() and __posix_rename()
instead of their NetBSD counterparts in order to remove the requirement of
linking against libposix.

merge lite-2

Per XPG4, move the prototype of swab() from <string.h> to <unistd.h>.

Update for __vfork14().

Add lockf(), an alternate interface to perform advisory record locking;
per XPG4.2.

Per XPG4.2, use useconds_t for as argument and return type of ualarm().

Per XPG4.2, change usleep() to take an useconds_t as its argument, and return
an int.

Per XPG4.2, move mknod() prototype from <unistd.h> to <sys/stat.h>.

branches: 1.42.2;
move setmode and strsignal to unistd.h

proto lchown() only if !_POSIX_SOURCE

Declare prototype of lchown(2).

Backout addition of user_from_uid and group_from_gid; they exist in pwd.h
and grp.h [pointed by cgd]

Add user_from_uid and group_from_gid

Add missing swapon prototype and mark it obsolete.

Common sense dictates that the `basegid' paramater of initgroups(3) should
be of type gid_t, and not int.

oops, forgot to commit this. prototype swapctl() in place of swapon().

Add missing prototype for getgrouplist as mentioned in the man page.

branches: 1.33.2;
__syscall() should return quad_t, not int; what was i thinking?

sethostid returns int not void, also add prototype for __syscall that
matches manual page.

Don't prototype poll(2) here. SysV requires poll.h to be included.

Prototype poll(2).

update for new reboot(2).

Declare setre[ug]id() to take [ug]id_t args. No functional difference.

Change iuserok() to take u_int32_t. Some netgroup fixes (partially
from OpenBSD and Theo).

branches: 1.26.4;
change definition of profil() to make it 64-bit friendly. This has
no practical consequence on 32-bit systems. old prototype was
int profil(char *, int, int, int), and new one is int profile(char *,
size_t, u_long, u_int). the size_t is the size of the buffer,
and the u_long is the 'starting offset'. (I changed the last int
to u_int, because it's treated as a u_int everywhere, and isn't
logically a signed value.)

Make definitions of psignal() and sys_siglist match signal.h.

Add prototypes for undelete(2).

proto for iruserok.

new RCS ID format.

better attributes.

NFS changes.

kill *chflags protos

add new getopt(3) extern variable optreset

Last weekend's uid_t & gid_t changes allow us to change the uid & gid
arguments to fchown from ints to a uid_t and a gid_t.

Last weekend's gid_t changes allow us to change the gidset argument of
getgroups() and setgroups() from a int ptr to a gid_t ptr.

match 4.4's definitions for sys_siglist and sys_signame

vfork() return type pid_t. reported by Peter Galbavy.
Also, whoever did the re-indenting in this file needs to be shot;
things shouldn't be indented by "tab-space"...

Add `const's to sys_siglist and sys_signame decls.

Change prototypes of alarm and sleep to use "unsigned" instead of "u_int".
"u_int" is not defined by <sys/types.h> in a strict POSIX environment.

Declare getopt(), getsubopt() and their external variables.
Still work to be done to handle all the combinations of _POSIX_SOURCE, and
_POSIX2_SOURCE, etc. to allow the user to select a strictly conforming
compilation environment, but this change allows us to transition
getopt() out of <stdlib.h>.

POSIX.1 says that ssize_t is defined in <sys/types.h>.

Provide prototype for POSIX.2 function confstr().

Add prototypes for getdomainname() and setdomainname(); the man page
instructs the user to include unistd.h, but it didn't provide a
declaration.

Add __dead qualifier to _exit(), as it never returns.

Add declaration of sys_signame[].

Add RCS identifiers.

Update fnmatch to be more posix complient (from keith bostic)

getpgrp actually takes void. ask the IEEE...

fix bad prototype for getpgrp()

branches: 1.1.1;
Initial revision

fix typos in comments.

Correct typo in previous.

Add __null_sentinel

remove getentropy bits

Add ACL support for FFS. From FreeBSD.

Add getentropy() to libc - a simple wrapper to access the kernel CSPRNG.

Posted to tech-userlevel@ a week ago and reviewed by riastradh@.

GETENTROPY(3) Library Functions Manual GETENTROPY(3)

NAME
getentropy - fill a buffer with high quality random data

LIBRARY
Standard C Library (libc, -lc)

SYNOPSIS
#include <unistd.h>

int
getentropy(void *buf, size_t buflen);

DESCRIPTION
The getentropy() function fills a buffer with high quality random data,
suitable for seeding cryptographically secure psuedorandom number
generators.

getentropy() is only intended for seeding random number generators and is
not intended for use by regular code which simply needs secure random
data. For this purpose, please use arc4random(3).

The maximum value for buflen is 256 bytes.

IMPLEMENTATION NOTES
getentropy() reads from the sysctl(7) variable kern.arandom.

RETURN VALUES
The getentropy() function returns 0 on success, and -1 if an error
occurred.

ERRORS
getentropy() will succeed unless:

[EFAULT] The buf argument points to an invalid memory address.

[EIO] Too many bytes were requested.

SEE ALSO
arc4random(3), rnd(4)

STANDARDS
The getentropy() function is non-standard.

HISTORY
The getentropy() function first appeared in OpenBSD 5.6, then in
FreeBSD 12.0, and NetBSD 10.

Add getsid(2) to the XOPEN namespace (again)

Expose getsid(2) to POSIX >= 2008

one fexecve declaration should be enough.

Remove the _INCOMPLETE_XOPEN_C063 stuff.

Declare fexecve

more type protection macro lossage.

PR standards/53525: move getsubopt() to stdlib.h

branches: 1.149.2; 1.149.4;
fix typo

detect duplicate declaration of pthread_atfork() in pthread.h

PR 51287 Ralf Nolden: posix_fallocate belongs in <fcntl.h>

Use generic types in the profil(2) function prototype (<unistd.h>)

Put fseeko, ftello, pread, and pwrite in the POSIX 2001 namespace.
Ok christos, apb, martin

PR/49684: Pierre Pronchery: readlinkat(2) return type is wrong.

add execvpe, execlpe (reviewed by phone)

branches: 1.142.2;
Add userlevel manifestations of posix_fallocate and fdiscard, in
unistd.h and libc, and add a man page.

Allow wiggle room in the man page for implementations of fallocate
that either (a) don't fully unwind on failure, leaving new blocks
allocated without changing the file size, or (b) create only in-memory
transient reservations that disappear when crashing or rebooting.

Also, add crossreference to fdiscard from ftruncate(2), and remove the
old BUGS entry from there that called for a generalized version that
allows discarding ranges of a file: that's what fdiscard is.

add mkostemp{s,} mkstemps from FreeBSD

branches: 1.140.2;
PR/4891: Wiz: readlink moved from xopen to base at issue 5.

Follow OpenGroup online specification[1], move
fchmodat/mkdirat/mkfifoat/mknodat prototypes to <sys.stat.h>.

[1] http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/sys_stat.h.html

Remove #if defined(_KERNEL) around a userlevel function.

Check for _NETBSD_SOURCE being defined wherever we check for
_INCOMPLETE_XOPEN_C063 so that we expose the new POSIX extended API set
recently added.

Add most system calls for POSIX extended API set, part 2, with test cases:
faccessat(2), fchmodat(2), fchownat(2), fstatat(2), mkdirat(2), mkfifoat(2),
mknodat(2), linkat(2), readlinkat(2), symlinkat(2), renameat(2), unlinkat(2),
utimensat(2), openat(2).

Also implement O_SEARCH for openat(2)

Still missing:
- some flags for openat(2)
- fexecve(2) implementation

branches: 1.135.2;
bin/46703: BSD r-commands use wrong source address for stderr
http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=46703
Bump libc minor for the addition of rresvport_af_addr()

new flag.

add more options.

add timeout to getpassfd.

add GETPASS_ECHO_STAR

add getpassfd

add getpass_r

branches: 1.128.2;
Add __returns_twice for the attribute of the same name. This makes the
attribute explicit based on the functions GCC gives it too.

branches: 1.127.2;
First stage of support for Extended API set 2. Most of the think is
unimplemented, except enough of linkat(2) to hardlink to a symlink.

Everything new in headers is guarded #ifdef _INCOMPLETE_XOPEN_C063 since
some software (e.g.: xcvs in our own tree) will assume they can use openat(2)
when AT_FDCWD is defined. _INCOMPLETE_XOPEN_C063 will go away once support
will be completed.

* Arrange for interfaces that create new file descriptors to be able to
set close-on-exec on creation (http://udrepper.livejournal.com/20407.html).

- Add F_DUPFD_CLOEXEC to fcntl(2).
- Add MSG_CMSG_CLOEXEC to recvmsg(2) for unix file descriptor passing.
- Add dup3(2) syscall with a flags argument for O_CLOEXEC, O_NONBLOCK.
- Add pipe2(2) syscall with a flags argument for O_CLOEXEC, O_NONBLOCK.
- Add flags SOCK_CLOEXEC, SOCK_NONBLOCK to the socket type parameter
for socket(2) and socketpair(2).
- Add new paccept(2) syscall that takes an additional sigset_t to alter
the sigmask temporarily and a flags argument to set SOCK_CLOEXEC,
SOCK_NONBLOCK.
- Add new mode character 'e' to fopen(3) and popen(3) to open pipes
and file descriptors for close on exec.
- Add new kqueue1(2) syscall with a new flags argument to open the
kqueue file descriptor with O_CLOEXEC, O_NONBLOCK.

* Fix the system calls that take socklen_t arguments to actually do so.

* Don't include userland header files (signal.h) from system header files
(rump_syscallargs.h).

* Bump libc version for the new syscalls.

Re-do ssp hijacking by defining inline functions and using the weak libc
symbols to do the indirection for unistd.h instead of #define tricks.
Fixes compilation for things that define struct { ssize_t read(int fd, ...); }.

The signal number argument in psignal is int not unsigned int.
Add psiginfo.

change size_t to ssize_t for POSIX compliance.

PR/43172: Jukka Ruohonen: swab(3) lacks restrict-keyword

branches: 1.121.2;
Declare strsignal(3) in <string.h>, per POSIX-2008, and adjust
documentation accordingly.

Fixes PR standards/41325 from Perry E. Metzger.

merge christos-time_t

Change the second argument of getlogin_r() from int to size_t, per POSIX.

branches: 1.118.4; 1.118.6;
SUS says that pthread_atfork() must also be in unistd.h

Add getlogin_r. Manual page changes mostly lifted from FreeBSD.

branches: 1.116.2; 1.116.4;
Remove clause 3 and 4 from TNF licenses

branches: 1.115.2;
everyone else assumes that defining "_XOPEN_SOURCE" means XPG4.2,
so remove comparisions against the numerical values "3" or "4"

change some __attribute__s to __keywords

branches: 1.113.2;
Add a new socket option for unix domain sockets: LOCAL_PEEREID, to make
it possible to get the pid, euid and egid of the process at the remote
end at the time it did bind() or connect().

Add a new libc function, getpeereid() to easily get at the euid and egid.
As a consequence, bump libc's minor number.

Document the LOCAL_PEEREID socket option in unix(4).

Based on contribution by Arne H. Juul, minor modifications by myself.

branches: 1.112.2;
Do not include SSP files unless _FORTIFY_SOURCE > 0.

Match usage of FORTIFY_SOURCE on other platforms by not requiring special
include path: the normal header files now include the "SSP" ones (which one
should note are not really named right: SSP and FORTIFY_SOURCE are independent
features).

Disable USE_SSP on targets where the compiler doesn't support it at all
(mips, alpha) or it's known broken (sh3). But enable FORTIFY_SOURCE,
without SSP, on those platforms -- tested on mipsel.

branches: 1.110.4; 1.110.6;
u_intN_t -> uintN_t

Remove leading __ from __(const|inline|signed|volatile) -- it is obsolete.

Move ttyname_r() to the 1003.1c-1995 section.

ttyname_r returns int.

Add getenv_r and ttyname_r

compat code reorg

PR/30503: Nicolas Joly: swapctl(2) prototype does not match corresponding
syscall

Remove the compatibility select() prototype. Going back to Lite2 select(2)
has also mandated <sys/time.h> to be included, which is now sufficient
for the prototype and all related declarations; thus the local duplicate
of the prototype can be removed. Approved by Christos.

Provide select() and pselect() prototypes in <sys/select.h>, per
1003.1-2001, and leave the select() prototype in <unistd.h> for
compatibility. To allow for transition, reorganization of this is
deferred until netbsd-3 gets branched.

de-__P -- the hack is long since useless. Discussed with christos,
matt, kleink, others. Approved by christos.

Implement getgroupmembership(3). This is similar to getgrouplist(3), except
that the "int maxgroups" and "int *ngroups" parameters are separated into
two separate parameters which makes it possible to call multiple nsswitch
back-ends and have the results correctly merged.
getgrouplist(3) is now implemented using getgroupmembership(3).

Proposed on tech-userlevel on December 1, 2004.

Move declaration of closefrom(3) to local extensions.

implement closefrom(3).

While I'm at it: add restrict qualifiers to readlink(2).

POSIX-2001: Change readlink(2)'s return type from int to ssize_t.

Userland portion of fsync_range(2), written by Bill Studenmund, and
contributed by Wasabi Systems, Inc.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22270, verified by myself.

Do not give names to the parameters in function prototypes (those names
reduces the usefulness of the gcc -Wshadow flag).

Add a new feature-test macro, _NETBSD_SOURCE. If this is defined
by the application, all NetBSD interfaces are made visible, even
if some other feature-test macro (like _POSIX_C_SOURCE) is defined.
<sys/featuretest.h> defined _NETBSD_SOURCE if none of _ANSI_SOURCE,
_POSIX_C_SOURCE and _XOPEN_SOURCE is defined, so as to preserve
existing behaviour.

This has two major advantages:
+ Programs that require non-POSIX facilities but define _POSIX_C_SOURCE
can trivially be overruled by putting -D_NETBSD_SOURCE in their CFLAGS.
+ It makes most of the #ifs simpler, in that they're all now ORs of the
various macros, rather than having checks for (!defined(_ANSI_SOURCE) ||
!defined(_POSIX_C_SOURCE) || !defined(_XOPEN_SOURCE)) all over the place.

I've tried not to change the semantics of the headers in any case where
_NETBSD_SOURCE wasn't defined, but there were some places where the
current semantics were clearly mad, and retaining them was harder than
correcting them. In particular, I've mostly normalised things so that
_ANSI_SOURCE gets you the smallest set of stuff, then _POSIX_C_SOURCE,
_XOPEN_SOURCE and _NETBSD_SOURCE in that order.

Tested by building for vax, encouraged by thorpej, and uncontested in
tech-userlevel for a week.

Well, _The_ Open Group.

Use the real TOG specification name for references.

seteuid() and setegid() were adopted in IEEE Std 1003.1-2001 + X/Open
portability guide issue 6, adjust headers to expose the function
prototypes with appropriate _POSIX_C_SOURCE/_XOPEN_SOURCE defines
fixes standards/21136 by MAEKAWA Masahide

Remove variable name from prototype.
Reported by John Heasley on current-users on 29 July 2001.

Avoid trad. cpp recursion in intptr_t definition.

branches: 1.86.2;
protect against multiple declarations.

Define intptr_t and uintptr_t via <machine/int_types.h>.

New syscall issetugid.

backout previous. the definition of struct option caused too many namespace
collisions. Instead, define getopt_long in getopt.h and getopt in unistd.h
where it belongs.

Add getopt.h and collect all the getopt related stuff here.
Make unistd.h include <getopt.h> to get the getopt stuff.
This adds support for getopt_long from Dieter Baron and Thomas Klausner.

add IPv6 support to rcmd() and friends.
rcmd() and iruserok(): unchanged
ruserok(): became address family independent
rcmd_af(), iruesrok_sa(): address family independent

Move <null.h> to <sys/null.h> for the purpose of avoiding conflicts due to
std C headers including it, and a kernel module written in C++ would benfit
as well.

For the benefit of G++'s null pointer constant implementation, #define NULL
as __null with egcs 1.0 (GCC 2.90) and above. As several headers are affected
by this change, move the definition into a new header file, <null.h>, to ease
maintenance.

Change the declaration of the argv argument to getopt(3) from "char * const *"
(as originally declared in System V) to "char * const []", as was done in
1003.2 and subsequently propagated into XPG4.
From Andrew Cagney in PR lib/8930.

branches: 1.77.4;
XSH5: change function signature to `void *sbrk(intptr_t)'.

Move IPv6-related declarations into the implementation-defined domain.

define IPv6 library functions and structures, as defined in
RFC2292 and RFC2553.
define internal state structure for IPv6-transport resolver.

Commits for source code will follow.

#ifdef __STDC__ -> #if __STDC__

branches: 1.73.2;
move __getcwd prototypes to libc-private header file.

XXX duplicate the prototype in getcwd regression test (which needs to
call the syscall directly for reasonably complete testing).

Add fchroot, getcwd

brk(2) actually returns an int indicating success (0) or failure (-1). Also,
change its argument to void *. (Both XSH5).

G/C orphaned unwhiteout() prototype.

Change the type of sys_siglist and sys_signame from const char *const [] to
const char *const *, and rename them to __sys_siglist14 and __sys_signame14.
This will prevent the size of the exported symbol from changing when more
signals are added to the list.

getpgid() is XPG4.2, actually.

add a prototype for getpgid (missing for years!)

__Namespace__ __protection__.

Sprinkle in some __attribute__((noreturn))s.

Slight rearrangement.

If __AUDIT__ is defined, remove some traditional interfaces: gets, sprintf,
vsprintf, tempnam, mktemp, getwd.

Mark more functions returning internal buffers for const auditing.

Make many of the new consts dependent on a new `__AUDIT__' flag, to avoid
breaking third party software. *sigh*

KNF nit.

const poisoning.

Addendum to previous change: since pread()'s and pwrite()'s first official
appearance was in X/Open CAE Spec Issue 5 Version 2, add a section for that
and move the prototypes there.

Prototype pread(2) and pwrite(2) if !defined(_POSIX_C_SOURCE).

Add a prototype for fdatasync(2).

* Reorganize name space protection.
* Remove mknod() prototype; it's located in <sys/stat.h> (XPG4.2).
* Remove re_comp() and re_exec() prototypes; their location is <re_comp.h>
(XPG4.2).
* Move setkey() prototype to <stdlib.h> (XPG4).
* Move mkstemp(), mktemp(), ttyslot() and valloc() prototypes to <stdlib.h>
(XPG4.2).
Assign copyright to TNF.

Make the rename() prototype available to XPG Issue <=3 applications only; the
canonical header for the prototype has been <stdio.h> for quite a while.

Change the type of the `namelen' argument of gethostname(), getdomainname(),
sethostname(), setdomainname() from int to size_t. The former change was
made due to an X/Open XNS5 requirement, the latter three were made for
consistency.

Per X/Open CAE Spec Issue 5 Version 2, change the buffer size argument of
readlink() from type `int' to type `size_t'. This isn't an ABI change, since
the calling convention of our only LP64 platform (the Alpha) already promotes
this argument to a `long'.

This may not be the final action on this matter; readlink() still returns
an `int', which may change in a future revision of the standard.

Prototype getsid().