Darren Tucker
0646ca6be8
- (dtucker) [openbsd-compat/bsd-cygwin_util.c] Fix implict declaration
...
warnings for binary_open and binary_close. Patch from Corinna Vinschen.
2006-09-01 19:29:01 +10:00
Damien Miller
607aede26c
- (djm) [includes.h monitor.c openbsd-compat/bindresvport.c]
...
[openbsd-compat/rresvport.c] Some more headers: netinet/in.h
sys/socket.h and unistd.h in various places
2006-09-01 15:48:19 +10:00
Damien Miller
ded319cca2
- (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]
...
[auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c]
[auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c]
[cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c]
[dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
[kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c]
[md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c]
[scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c]
[ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c]
[sshconnect1.c sshconnect2.c sshd.c rc4.diff]
[openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c]
[openbsd-compat/port-linux.c openbsd-compat/port-solaris.c]
[openbsd-compat/port-uw.c]
Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h;
compile problems reported by rac AT tenzing.org
2006-09-01 15:38:36 +10:00
Darren Tucker
288cbbd59e
- (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege
...
while setting up the ssh service account. Patch from Corinna Vinschen.
2006-08-31 11:28:49 +10:00
Damien Miller
1b06dc30ad
- (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ]
...
[platform.c platform.h sshd.c openbsd-compat/Makefile.in]
[openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c]
[openbsd-compat/port-solaris.h] Add support for Solaris process
contracts, enabled with --use-solaris-contracts. Patch from Chad
Mynhier, tweaked by dtucker@ and myself; ok dtucker@
2006-08-31 03:24:41 +10:00
Darren Tucker
26d4e19caa
- (dtucker) [auth.c openbsd-compat/port-aix.c] Bug #1207 : always call
...
loginsuccess on AIX immediately after authentication to clear the failed
login count. Previously this would only happen when an interactive
session starts (ie when a pty is allocated) but this means that accounts
that have primarily non-interactive sessions (eg scp's) may gradually
accumulate enough failures to lock out an account. This change may have
a side effect of creating two audit records, one with a tty of "ssh"
corresponding to the authentication and one with the allocated pty per
interactive session.
2006-08-30 22:33:09 +10:00
Damien Miller
8ff1da81ec
- (djm) [openbsd-compat/xcrypt.c] needs unistd.h
2006-08-30 17:52:03 +10:00
Damien Miller
6ba5740941
- djm@cvs.openbsd.org 2006/08/30 00:14:37
...
[version.h]
crank to 4.4
2006-08-30 11:09:01 +10:00
Damien Miller
2125887a94
- dtucker@cvs.openbsd.org 2006/08/30 00:06:51
...
[sshconnect2.c]
Fix regression where SSH2 banner is printed at loglevels ERROR and FATAL
where previously it weren't. bz #1221 , found by Dean Kopesky, ok djm@
2006-08-30 11:08:33 +10:00
Damien Miller
76758b6423
- dtucker@cvs.openbsd.org 2006/08/29 12:02:30
...
[gss-genr.c]
Work around a problem in Heimdal that occurs when KRB5CCNAME file is
missing, by checking whether or not kerberos allocated us a context
before attempting to free it. Patch from Simon Wilkinson, tested by
biorn@, ok djm@
2006-08-30 11:08:04 +10:00
Damien Miller
d5fe0baa73
- djm@cvs.openbsd.org 2006/08/29 10:40:19
...
[channels.c session.c]
normalise some inconsistent (but harmless) NULL pointer checks
spotted by the Stanford SATURN tool, via Isil Dillig;
ok markus@ deraadt@
2006-08-30 11:07:39 +10:00
Damien Miller
5d43d49014
- dtucker@cvs.openbsd.org 2006/08/21 08:15:57
...
[sshd.8]
Add more detail about what permissions are and aren't accepted for
authorized_keys files. Corrections jmc@, ok djm@, "looks good" jmc@
2006-08-30 11:07:00 +10:00
Damien Miller
b594f38bae
- (djm) OpenBSD CVS Sync
...
- dtucker@cvs.openbsd.org 2006/08/21 08:14:01
[sshd_config.5]
Document HostbasedUsesNameFromPacketOnly. Corrections from jmc@,
ok jmc@ djm@
2006-08-30 11:06:34 +10:00
Darren Tucker
9162028887
- (dtucker) [openbsd-compat/xmmap.c] Move #define HAVE_MMAP to prevent
...
unused variable warning when we have a broken or missing mmap(2).
Now with 100% more diff!
2006-08-24 19:58:36 +10:00
Darren Tucker
e83a83c7be
- (dtucker) [openbsd-compat/xmmap.c] Move #define HAVE_MMAP to prevent
...
unused variable warning when we have a broken or missing mmap(2).
2006-08-24 19:55:41 +10:00
Darren Tucker
c1abe8e3e8
- (dtucker) [openbsd-compat/rresvport.c] Include <stdlib.h> for malloc.
2006-08-24 19:53:40 +10:00
Darren Tucker
f80f5ec81b
- (dtucker) [openbsd-compat/bsd-openpty.c] Include for ioctl(2).
2006-08-24 19:52:30 +10:00
Darren Tucker
450d2af2a3
- (dtucker) [openbsd-compat/bsd-misc.c] Include <sys/select.h> for select(2)
...
on POSIX systems.
2006-08-24 19:45:33 +10:00
Darren Tucker
e086955531
- (dtucker) [openbsd-compat/bsd-misc.c] Add includes needed for select(2) on
...
older systems.
2006-08-24 19:43:16 +10:00
Darren Tucker
fe408b4826
- (dtucker) [openbsd-compat/basename.c] Include errno.h.
2006-08-24 19:41:03 +10:00
Darren Tucker
12259d9680
- (dtucker) [Makefile.in] Bug #1177 : fix incorrect path for sshrc in
...
Makefile. Patch from santhi.amirta at gmail, ok djm.
2006-08-22 22:24:10 +10:00
Darren Tucker
0eb810015f
- (dtucker) [configure.ac] Remove errant "-".
2006-08-20 21:43:19 +10:00
Darren Tucker
639bbe8bfe
- (dtucker) [configure.ac] Bug #1181 : Explicitly test to see if OpenSSL
...
(0.9.8a and presumably newer) requires -ldl to successfully link.
2006-08-20 20:17:53 +10:00
Darren Tucker
3e6bde483d
- (dtucker) [configure.ac] Relocate --with-pam parts in preparation for
...
fixing bug #1181 . No changes yet.
2006-08-20 20:03:50 +10:00
Darren Tucker
4ba387337c
- (dtucker) [configure.ac] Save $LIBS during PAM library tests and restore
...
afterward. Removes the need to mangle $LIBS later to remove -lpam and -ldl.
2006-08-20 19:55:02 +10:00
Darren Tucker
aa1517ca1e
- (dtucker) [log.c] Move ifdef to prevent unused variable warning.
2006-08-20 17:55:54 +10:00
Darren Tucker
f0625699df
- (dtucker) [openbsd-compat/regress/Makefile.in] Add $(EXEEXT) and add a
...
single rule for the test progs.
2006-08-19 19:12:14 +10:00
Damien Miller
deccaa7d0f
- (djm) OpenBSD CVS Sync
...
- djm@cvs.openbsd.org 2006/08/18 22:41:29
[gss-genr.c]
GSSAPI error code should be 0 and not -1; from simon@sxw.org.uk
2006-08-19 08:50:57 +10:00
Damien Miller
bb59814cd6
- (djm) Disable sigdie() for platforms that cannot safely syslog inside
...
a signal handler (basically all of them, excepting OpenBSD);
ok dtucker@
2006-08-19 08:38:23 +10:00
Damien Miller
3d2d6e90e4
- djm@cvs.openbsd.org 2006/08/18 14:40:34
...
[gss-genr.c ssh-gss.h]
constify host argument to match the rest of the GSSAPI functions and
unbreak compilation with -Werror
2006-08-19 00:46:43 +10:00
Damien Miller
a1cb9f334b
- djm@cvs.openbsd.org 2006/08/18 13:54:54
...
[gss-genr.c ssh-gss.h sshconnect2.c]
bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.uk
ok markus@
2006-08-19 00:33:34 +10:00
Damien Miller
bdf00ca0bd
- djm@cvs.openbsd.org 2006/08/18 10:27:16
...
[misc.h]
reorder so prototypes are sorted by the files they refer to; no
binary change
2006-08-19 00:33:05 +10:00
Damien Miller
3f8123c804
- markus@cvs.openbsd.org 2006/08/18 09:15:20
...
[auth.h session.c sshd.c]
delay authentication related cleanups until we're authenticated and
all alarms have been cancelled; ok deraadt
2006-08-19 00:32:46 +10:00
Damien Miller
99a648e592
- deraadt@cvs.openbsd.org 2006/08/18 09:13:26
...
[log.c log.h sshd.c]
make signal handler termination path shorter; risky code pointed out by
mark dowd; ok djm markus
2006-08-19 00:32:20 +10:00
Damien Miller
a1f6840a4f
- djm@cvs.openbsd.org 2006/08/16 11:47:15
...
[sshd.c]
factor inetd connection, TCP listen and main TCP accept loop out of
main() into separate functions to improve readability; ok markus@
2006-08-19 00:31:39 +10:00
Damien Miller
565ca3f600
- dtucker@cvs.openbsd.org 2006/08/14 12:40:25
...
[servconf.c servconf.h sshd_config.5]
Add ability to match groups to Match keyword in sshd_config. Feedback
djm@, stevesk@, ok stevesk@.
2006-08-19 00:23:15 +10:00
Damien Miller
1c89ce0749
- miod@cvs.openbsd.org 2006/08/12 20:46:46
...
[monitor.c monitor_wrap.c]
Revert previous include file ordering change, for ssh to compile under
gcc2 (or until openssl include files are cleaned of parameter names
in function prototypes)
2006-08-19 00:22:40 +10:00
Damien Miller
63b94128cb
- (djm) OpenBSD CVS Sync
...
- stevesk@cvs.openbsd.org 2006/08/06 01:13:32
[compress.c monitor.c monitor_wrap.c]
"zlib.h" can be <zlib.h>; ok djm@ markus@
2006-08-19 00:21:46 +10:00
Darren Tucker
637c80aa6f
- (dtucker) [openbsd-compat/regress/Makefile.in] Use implicit rules for the
...
test progs instead; they work better than what we have.
2006-08-18 20:56:18 +10:00
Darren Tucker
ec4e4daa6c
- (dtucker) [openbsd-compat/regress/snprintftest.c] Newline on error.
2006-08-18 20:09:32 +10:00
Darren Tucker
43d3ccdbdd
- (dtucker) [openbsd-compat/bsd-closefrom.c] Comment out rcsid.
2006-08-18 19:49:58 +10:00
Darren Tucker
d018b2e9c8
- (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Resync with
...
closefrom.c from sudo.
2006-08-18 18:51:20 +10:00
Darren Tucker
c889ffdbc6
- (dtucker) [openbsd-compat/regress/{Makefile.in,closefromtest.c}] Regress
...
test for closefrom() in compat code.
2006-08-17 19:40:35 +10:00
Darren Tucker
3083bc2b52
- (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Use F_CLOSEM fcntl
...
for closefrom() on AIX. Pointed out by William Ahern.
2006-08-17 19:35:49 +10:00
Darren Tucker
e6b641a9a1
- (dtucker) [openbsd-compat/fake-rfc2553.c openbsd-compat/setproctitle.c]
...
Include stdlib.h for malloc and friends.
2006-08-17 18:55:27 +10:00
Damien Miller
56799c3f2a
- (djm) [audit-bsm.c] Sprinkle in some headers
2006-08-16 11:40:45 +10:00
Darren Tucker
533418138f
- (dtucker) [LICENCE] Add Reyk to the list for the compat dir.
2006-08-15 18:21:32 +10:00
Damien Miller
0e5143e88e
- (djm) [openbsd-compat/bsd-getpeereid.c] Add some headers to quiet warnings
...
on Solaris 10
2006-08-07 11:26:36 +10:00
Darren Tucker
f78fb54412
- (dtucker) [openbsd-compat/{bsd-asprintf.c,bsd-openpty.c,bsd-snprintf.c,
...
glob.c}] Include stdlib.h for malloc and friends in compat code.
2006-08-06 21:25:24 +10:00
Darren Tucker
32ab2ae3f3
- (dtucker) [defines.h] With the includes.h changes we no longer get the
...
name clash on "YES" so we can remove the workaround for it.
2006-08-06 21:23:27 +10:00