- Copy stable/10 (r259064) to releng/10.0 as part of the
10.0-RELEASE cycle.
- Update __FreeBSD_version [1]
- Set branch name to -RC1

[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so
start releng/10.0 at '100' so the branch is started with
a value ending in zero.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

- Do not bail out if stat(2) fails with ENOENT in the spool directory. This
happens if another atrm process removes a job while we're scanning through
the directory.
- While at it, optimize a bit the directory scanning, so that we quit looping
as soon as all jobs specified in argv have been dealt with.

Approved by: cognet

- Switch order of setting real uid and gid. If we set uid first, then we
don't have enough privileges to set gid.

This looks like a long standing bug, just recently revealed by r241852.

Approved by: cognet

Check the return error of set[ug]id. While this can never fail in the
current version of FreeBSD, this isn't guarenteed by the API. Custom
security modules, or future implementations of the setuid and setgid
may fail.

PR: bin/172289
PR: bin/172290
PR: bin/172291
Submittud by: Erik Cederstrand <erik@cederstrand.dk>
Discussed by: freebsd-security
Approved by: cperciva
MFC after: 1 week

More -Wmissing-variable-declarations fixes.

In addition to adding `static' where possible:

- bin/date: Move `retval' into extern.h to make it visible to date.c.
- bin/ed: Move globally used variables into ed.h.
- sbin/camcontrol: Move `verbose' into camcontrol.h and fix shadow warnings.
- usr.bin/calendar: Remove unneeded variables.
- usr.bin/chat: Make `line' local instead of global.
- usr.bin/elfdump: Comment out unneeded function.
- usr.bin/rlogin: Use _Noreturn instead of __dead2.
- usr.bin/tset: Pull `Ospeed' into extern.h.
- usr.sbin/mfiutil: Put global variables in mfiutil.h.
- usr.sbin/pkg: Remove unused `os_corres'.
- usr.sbin/quotaon, usr.sbin/repquota: Remove unused `qfname'.

Allow time offsets to be negative, e.g. `at 1530 - 15 minutes`.

This is useful if you have been given some time for some event in some
format and you want your computer to do something to prepare for it.
Without having to do time arithmetic in a shellscript.

The syntax matches what the at(1) usually used on Linux supports.

Partially revert r227233.

The privs.h header is not only used by at(1), it's also used by
atrun(8). Just let the code the way it used to be (for now).

Reported by: kwm, tinderbox
Hat to: me

Add missing static keywords to at(1).

While there, tidy up the privs.h part, where at.c has to #define to
declare some globals. Also group static and non-static global variables
in at.c.

Build at(1) with NO_WFORMAT instead of WARNS=1.

Close file and directory descriptors

MFC after: 3 days

Remove stale references to utmp(5) and its corresponding filenames.

I removed utmp and its manpage, but not other manpages referring to it.

Build usr.bin/ with WARNS=6 by default.

Also add some missing $FreeBSD$ to keep svn happy.

ANSIfy various tools in usr.bin/.

Most of these tools properly build at WARNS=6, except for their K&R
function declarations. Fix this, so we can bump WARNS as well.

Use NULL instead of 0 for the return value of fopen().

Approved by: re (kensmith)

While revision 1.26 fixed the code to really subtract 3600 due to
daylight-saving, this was actually wrong because mktime() already does that for
us.

Don't throw away the adjusted `runtimer' value.

Sort sections.

Explain the format of the at.allow and at.deny files in detail.

PR: 35942
Submitted by: Gary W. Swearingen <swear@blarg.net>

The .Nm utility.

mdoc(7) police:

Revert to using the .Tn POSIX and .Tn ANSI instead of \*[Px] and \*[Ai]
strings; using these strings is unsafe in troff mode, as they include a
change in a font size.

Approved by: re

mdoc(7) police: Removed redundant .Ns calls.

- Use MAXLOGNAME - 1 instead of UT_NAMESIZE.
- Do not pretend there is something like '/etc/utmp'.

mdoc(7) police: lint.

Add the SUSv3 -l option to at. This is an alias for atq. Allow job ids
to be specified on the command line for which information should be reported.

Submitted by: Joe Halpin <joe.halpin@attbi.com>
Reviewed by: mike

Change whtespace indent in format string to fit new output form of
timestamp.

Reviewed by: markm

Document the fact that at(1) is run through cron(8) and that this affects
the granularity of the at queue runs.

Submitted by: mux

mdoc(7) police: markup fixes.

#include <sys/time.h> instead of depending on namespace pollution in
<sys/stat.h> for the declaration of struct timeval (sys/stat.h> only
needs timespecs even when its POSIX support is not turned on, so it
shouldn't declare timevals).

Fixed some #include messes.

Remove leaf node WARNS?=2 (that mainly I added). This should
help the GCC3 transition and CURRENT in general.

o Remove the -V [version number] option, since our version of at(1) no
longer resembles the original.
o Remove references to `you' in the manual.

Submitted by: Joe Halpin <joe.halpin@attbi.com>

Fix a typo introduced in the previous delta. The mistake was mine
rather than the submitter's.

Implement the POSIX 1003.1-2001 -r and -t options in at(1). Fix some
minor issues in the rest of the source and manual.

Submitted by: Joe Halpin <joe.halpin@attbi.com>
Obtained from: touch(1) (partially)
MFC after: 1 month

- Add 4-digit year variants in the manpage, since at(1) already
understands them.

PR: docs/32843
Submitted by: Gerald Pfeifer <pfeifer@dbai.tuwien.ac.at>

Style improvements recommended by Bruce as a follow up to some
of the recent WARNS commits. The idea is:

1) FreeBSD id tags should follow vendor tags.
2) Vendor tags should not be compiled (though copyrights probably should).
3) There should be no blank line between including cdefs and __FBSDIF.

Use __FBSDID()

WARNS=2 fixup.

Allow an ``at now'' specification.

PR: 32242
Submitted by: Alan E <alane@geeksrus.net>
MFC after: 3 weeks

mdoc(7) police: kill whitespace at EOL and HSB.

Use .Nm to correctly display the program name.

PR: docs/32086
Submitted by: setantae@submonkey.net
MFC After: 2 days

Set BINOWN=root explicitly for setuid root binaries.

This is not "useless", as one may have non-default
setting for BINOWN in make.conf, and we still want
these to be installed setuid root in this case.

SECURITY.

Fixed macros for temporarily relinquishing and restoring setuid/setgid
privileges so that they never change the real user and group IDs of
the calling process.

The setre[ug]id() calls are still used in the REDUCE_PERM macro (with
the r[ug]id arguments of -1) so that the call changes the saved user
and group IDs of the process to that specified.

Also, the panic() and perr() functions had insufficient privileges to
delete the problematic file under /var/at.

Remove some unsafe function calls from the signal handlers.

Obtained from: OpenBSD
Reviewed by: audit
MFC after: 2 weeks

An empty at.deny doesn't mean everyone can use at.

PR: 29549
Submitted by: swear@aa.net

Expland `mymalloc' with malloc + error checking.

mdoc(7) police: removed HISTORY info from the .Os call.

MAN[1-9] -> MAN.

Don't use MANDEPEND and MANSRC.

mdoc(7) police: split punctuation characters + misc fixes.

Prepare for mdoc(7)NG.

mdoc(7) police: removed history info from the .Os FreeBSD call.

Y2K fix. at(1) would die with 'garbled time' when assign_date() was
pased a year > 99. This change fixes the conversion of 2-digit years
into tm_year format.

This change is differs from the OpenBSD fix because of differences
in our assign_date().

PR: 15872
Reported by: "Crist J. Clark" <cjclark@home.com>
Submitted by: "Sergey N. Voronkov" <serg@dor.zaural.ru>
Obtained from: OpenBSD

Typo

Change the usage of the .Nm macro in the NAME section to be
consistent with the rest of the system.

Correct use of .Nm, .Em, .Ev
Add rcsid. Use errx instead of fprintf + exit.
Various spelling fixes.

$Id$ -> $FreeBSD$

1. Add support for months and years in relative time spec (now + 1 year)

2. Rip out dateadd() and re-do the plus operator handler to use mktime()
instead (per wollman).

Reviewed by: wollman

Various man page cleanup:

- Sort xrefs
- Be consistent with section names as outlines in mdoc(7).
- Other misc mdoc cleanup.

PR: doc/13144
Submitted by: Alexey M. Zelkin <phantom@cris.net>

(1) Don't perror() when at.deny doesn't exist, that's an accepted behavior.

(2) Die when there is a problem opening at.allow other then it not existing.
An error other then it not existing might be a trick to somehow
circumvent system security.

Mostly Reviewed By: msmith

More egcs warning fixes:
o main returns int not void
o use return 0 at end of main when needed
o use braces to avoid potentially ambiguous else
o don't default to type int
o #ifdef 0 -> #if 0

Reviewed by: obrien and chuckr

Clean up some .Os macro uses: quotes are not needed, multiple arguments
don't really work if the first one isn't "FreeBSD", and "FreeBSD-Experimental"
isn't an OS name.

Eliminate compiler warnings from -Wall

atq ignored locale info when printing dates. Is the other call to
setlocale() just in the wrong place?

PR: 8300

Remove useless `BINOWN=root' now that it is the default.

Typo fix: garbeld -> garbled

PR: 7784
Submitted by: Kris Kennaway <kkennawa@physics.adelaide.edu.au>

Year is sometimes set to -1 when assign_date() is called. Check for -1
before Y2K processing.

PR: 7524

Recognize long month names in addition to short ones.

PR: bin/7228
Submitted by: Archie Cobbs <archie@whistle.com>

$@ is deprecated, use ${.TARGET} instead. Ditto for other single character
$n.
PR: conf/3273

Fix a bunch of spelling errors.

PR: 6856
Submitted by: Josh Gilliam <josh@quick.net>

Permit double digit year values to be used in the next millenium.

.Sh AUTHOR -> .Sh AUTHORS. Use .An/.Aq.

Revert part of previous commit. I didn't see rcsid string in the middle of
the file. Put includes in alphabetical order.

Use err(3).
Simplification: if(a == 12) a -= 12 -> if(a == 12) a = 0.

compare return value from getopt against -1 rather than EOF, per the final
posix standard on the topic.

Back out MAXLOGNAME fix, Bruce points that copyinstr require NUL

Fix MAXLOGNAME usage, the code has wrong assumption that it must be
NULL terminated

Revert $FreeBSD$ to $Id$

Fix for hard-coded length of login name.

Submitted by: Philippe Charnier <charnier@xp11.frmug.org>

Closes #PR bin/2755

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Fix botches in the handling of "AM" and "PM":
12:xx PM is 12:xx, not 24:xx.
12:xx AM is 00:xx, not 12:xx.

Use ${ECHO} instead of `echo' so that `make -s' is fairly quiet.

making <page>.1 from <page>.man

recording cvs-1.6 file death

Add setlocale LC_TIME

Describe the correct default situation for the various permission
options.

Submitted by: sgk@troutmask.apl.washington.edu (Steven G. Kargl)

Upgrade to 2.9

Make parsetime.c more consistent by using the (already declared) enum
type instead of int all over the place. (Cosmetic, enhances
debugging.)

Point out that a date specification _must_ follow the time of day
spec, in the man page. This clarifies the last point PR # of bin/483:
"at doesn't seem to ..." (the remainder has already been fixed with
version 1.3 of parsetime.c).

Remove trailing whitespace.

Remove setre* hacks, we have working thing now

Fight over non-working setruid

Upgrade.

Fix off by one error in calculation of `mday' (months start at 1).
Jan 31 gave Jan 30, often for next year.

Changed reference from NetBSD to FreeBSD

Added at/atrm/atq/batch from Linux as hacked by Chris Demetriou.