Commit Graph

2388 Commits

Author SHA1 Message Date
Tim Rice cc25206d31 [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH) 2002-07-07 13:30:45 -07:00
Tim Rice b66e292912 [contrib/cygwin/ssh-host-config] double slash corrction
from vinschen@redhat.com
2002-07-05 16:22:32 -07:00
Tim Rice e958ed3624 [configure.ac] AIX 4.2.1 has authenticate() in libs.
Reported by Darren Tucker <dtucker@zip.com.au>
2002-07-05 07:12:33 -07:00
Ben Lindstrom d00a1a1a03 - (bal) One too many nulls in ports-aix.c 2002-07-04 19:33:49 +00:00
Ben Lindstrom 604de56009 - (bal) glob.c defines TILDE and AIX also defines it. #undef it first.
bug #265
2002-07-04 18:20:51 +00:00
Ben Lindstrom 92ea0eadbe - (bal) Limit data to TTY for AIX only (Newer versions can't handle the
faster data rate)  Bug #124
2002-07-04 18:11:09 +00:00
Ben Lindstrom 51b2488aad - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess. 2002-07-04 03:08:40 +00:00
Ben Lindstrom ee3a8e4abc - (bal) Missed Makefile.in change. keysign needs readconf.o 2002-07-04 03:07:15 +00:00
Ben Lindstrom e06eb68226 - (bal) Failed password attempts don't increment counter on AIX. Bug #145 2002-07-04 00:27:21 +00:00
Ben Lindstrom 5d35a2f582 - markus@cvs.openbsd.org 2002/07/03 14:21:05
[ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
     re-enable ssh-keysign's sbit, but make ssh-keysign read
     /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
     globally. based on discussions with deraadt, itojun and sommerfeld;
     ok itojun@
2002-07-04 00:19:40 +00:00
Ben Lindstrom 43ce2c86a8 - markus@cvs.openbsd.org 2002/07/03 09:55:38
[ssh-keysign.c]
     use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
     in order to avoid a possible Kocher timing attack pointed out by Charles
     Hannum; ok provos@
2002-07-04 00:17:33 +00:00
Ben Lindstrom 343010ad50 - markus@cvs.openbsd.org 2002/07/01 19:48:46
[sshconnect2.c]
     for compression=yes, we fallback to no-compression if the server does
     not support compression, vice versa for compression=no. ok mouring@
2002-07-04 00:16:25 +00:00
Ben Lindstrom fd2aacedab - deraadt@cvs.openbsd.org 2002/07/01 16:15:25
[msg.c]
     %u
2002-07-04 00:15:22 +00:00
Ben Lindstrom a962c2fb35 - deraadt@cvs.openbsd.org 2002/06/30 21:59:45
[auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
      monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
      sshconnect2.c sshd.c]
     minor KNF
2002-07-04 00:14:17 +00:00
Ben Lindstrom 5a9d0eaba6 - deraadt@cvs.openbsd.org 2002/06/30 21:54:16
[auth2.c session.c sshd.c]
     lint asks that we use names that do not overlap
2002-07-04 00:12:53 +00:00
Ben Lindstrom 810af968b8 - deraadt@cvs.openbsd.org 2002/06/28 23:05:06
[sshd.c]
     gidset[2] -> gidset[1]; markus ok
2002-07-04 00:11:40 +00:00
Ben Lindstrom fbbfa8422f - deraadt@cvs.openbsd.org 2002/06/28 10:08:25
[sshd.c]
     range check -u option at invocation
2002-07-04 00:10:34 +00:00
Ben Lindstrom b1bdc5a6ad - deraadt@cvs.openbsd.org 2002/06/28 01:50:37
[monitor_wrap.c]
     use ssize_t
2002-07-04 00:09:26 +00:00
Ben Lindstrom a79616278e - millert@cvs.openbsd.org 2002/06/28 01:49:31
[monitor_mm.c]
     tree(3) wants an int return value for its compare functions and
     the difference between two pointers is not an int.  Just do the
     safest thing and store the result in a long and then return 0,
     -1, or 1 based on that result.
2002-07-04 00:08:23 +00:00
Ben Lindstrom edd098b196 - stevesk@cvs.openbsd.org 2002/06/27 19:49:08
[ssh-keyscan.c]
     use convtime(); ok markus@
2002-07-04 00:07:13 +00:00
Ben Lindstrom eec16fcb27 - deraadt@cvs.openbsd.org 2002/06/27 10:35:47
[auth2-none.c monitor.c sftp-client.c]
     use xfree()
2002-07-04 00:06:15 +00:00
Ben Lindstrom 35a2cb9b41 - deraadt@cvs.openbsd.org 2002/06/27 09:08:00
[monitor.c]
     improve mm_zalloc check; markus ok
2002-07-04 00:05:06 +00:00
Ben Lindstrom 04f9af7dfc - markus@cvs.openbsd.org 2002/06/27 08:49:44
[dh.c ssh-keyscan.c sshconnect.c]
     more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
2002-07-04 00:03:56 +00:00
Ben Lindstrom 723e29aa20 - (bal) minor correction to utimes() replacement. Patch by
onoe@sm.sony.co.jp
2002-07-03 23:50:00 +00:00
Ben Lindstrom 6dbf3001ec - (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com 2002-07-03 23:33:19 +00:00
Damien Miller 23fe57c51c - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &
friends consistently. Spotted by Solar Designer <solar@openwall.com>
2002-07-02 17:08:23 +10:00
Ben Lindstrom de07cbf1ed - (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style
clean up while I'm near it.
2002-06-28 16:48:11 +00:00
Ben Lindstrom 68e8311321 - (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported.
Bug #303
2002-06-28 00:37:33 +00:00
Ben Lindstrom dd21fe9ca0 - (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise
have issues of our fixes not propogating right (ie bcopy instead of
   memmove).  OK tim
2002-06-27 18:23:20 +00:00
Ben Lindstrom 596273516c - (bal) Cygwin uid0 fix by vinschen@redhat.com 2002-06-27 18:02:21 +00:00
Kevin Steves bdf3e89f1a 20020628
- (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
   options should contain default value.  from solar.
2002-06-27 16:59:50 +00:00
Ben Lindstrom fe275982e3 - markus@cvs.openbsd.org 2002/06/26 22:27:32
[ssh-keysign.c]
     bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
2002-06-27 00:25:07 +00:00
Ben Lindstrom 085124998d - deraadt@cvs.openbsd.org 2002/06/26 15:00:32
[monitor_wrap.c]
     more %u
2002-06-27 00:23:02 +00:00
Ben Lindstrom 3390749e4b - markus@cvs.openbsd.org 2002/06/26 14:51:33
[ssh-add.c]
     fix exit code for -X/-x
2002-06-27 00:21:59 +00:00
Ben Lindstrom d5bf46e4c0 - deraadt@cvs.openbsd.org 2002/06/26 14:50:04
[monitor_fdpass.c]
     use ssize_t for recvmsg() and sendmsg() return
2002-06-27 00:21:03 +00:00
Ben Lindstrom d5502180cd - deraadt@cvs.openbsd.org 2002/06/26 14:49:36
[monitor.c]
     correct %u
2002-06-27 00:12:57 +00:00
Tim Rice a8959ae2b7 [contrib/caldera/openssh.spec] remove 2 configure options I put in by mistake 2002-06-26 11:05:32 -07:00
Damien Miller 3e36f9f4ff - (djm) Release 3.4p1 2002-06-26 23:59:10 +10:00
Damien Miller fb7fd9580c - markus@cvs.openbsd.org 2002/06/26 13:55:37
[auth2-chall.c]
     make sure # of response matches # of queries, fixes int overflow;
     from ISS
2002-06-26 23:58:39 +10:00
Damien Miller 7868202d56 - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS 2002-06-26 23:57:59 +10:00
Damien Miller d4b11d62e9 - (djm) Update spec files for release 2002-06-26 23:57:12 +10:00
Damien Miller 990070a8c5 - deraadt@cvs.openbsd.org 2002/06/26 13:49:26
[session.c]
     disclose less information from environment files; based on input
     from djm, and dschultz@uclink.Berkeley.EDU
2002-06-26 23:51:06 +10:00
Damien Miller 530a754d38 - deraadt@cvs.openbsd.org 2002/06/26 13:20:57
[monitor.c]
     be careful in mm_zalloc
2002-06-26 23:27:11 +10:00
Damien Miller 136d4418e3 - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai
<nalin@redhat.com>
2002-06-26 23:05:16 +10:00
Damien Miller f49035a0bb - (djm) Require krb5 devel for RPM build w/ KrbV 2002-06-26 19:42:52 +10:00
Damien Miller a0796cad4a - markus@cvs.openbsd.org 2002/06/26 08:58:26
[session.c]
     limit # of env vars to 1000; ok deraadt/djm
2002-06-26 19:15:07 +10:00
Damien Miller 9403aa2f79 - markus@cvs.openbsd.org 2002/06/26 08:55:02
[channels.c]
     limit # of channels to 10000
2002-06-26 19:14:43 +10:00
Damien Miller 468cd716a5 - markus@cvs.openbsd.org 2002/06/26 08:54:18
[buffer.c]
     limit append to 1MB and buffers to 10MB
2002-06-26 19:14:25 +10:00
Damien Miller aa15137c15 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2002/06/26 08:53:12
     [bufaux.c]
     limit size of BNs to 8KB; ok provos/deraadt
2002-06-26 19:14:08 +10:00
Damien Miller f18cd162d3 - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@ 2002-06-26 19:12:59 +10:00
Tim Rice 6de3dfd929 [contrib/caldera/openssh.spec] add support for privsep 2002-06-25 19:28:55 -07:00
Kevin Steves 40b011c7fe - (stevesk) [README.privsep] more for sshd pseudo-account. 2002-06-26 00:43:57 +00:00
Ben Lindstrom 4e3c631b70 - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP,
but it all damned lies.
2002-06-26 00:29:02 +00:00
Tim Rice e04ee923d9 UnixWare tip is no longer needed. 2002-06-25 17:25:47 -07:00
Ben Lindstrom a95fd3f8ad - (bal) added back in error check for mmap(). I screwed up, Pointed
out by stevesk@
2002-06-26 00:22:57 +00:00
Tim Rice 2b3897c3cc [Makefile.in] fix test on installing ssh-rand-helper.8 2002-06-25 16:45:42 -07:00
Ben Lindstrom 5223727672 - (bal) Updated AIX package build. Patch by dtucker@zip.com.au 2002-06-25 23:38:47 +00:00
Ben Lindstrom fbcc3f71f2 - markus@cvs.openbsd.org 2002/06/25 18:51:04
[sshd.c]
     lightweight do_setusercontext after chroot()
2002-06-25 23:24:18 +00:00
Ben Lindstrom 6398a0ef12 - markus@cvs.openbsd.org 2002/06/25 16:22:42
[authfd.c]
     unnecessary cast
2002-06-25 23:22:54 +00:00
Ben Lindstrom c2df3ec0c0 - deraadt@cvs.openbsd.org 2002/06/24 17:57:20
[sftp-server.c sshpty.c]
     explicit (u_int) for uid and gid
2002-06-25 23:21:41 +00:00
Ben Lindstrom 9b4139742f - itojun@cvs.openbsd.org 2002/06/24 15:49:22
[msg.c]
     printf type pedant
2002-06-25 23:20:18 +00:00
Ben Lindstrom c5a7f4fdf9 - markus@cvs.openbsd.org 2002/06/24 14:55:38
[authfile.c kex.c ssh-agent.c]
     cat to (void) when output from buffer_get_X is ignored
2002-06-25 23:19:13 +00:00
Ben Lindstrom 4fed2be856 - markus@cvs.openbsd.org 2002/06/24 14:33:27
[channels.c channels.h clientloop.c serverloop.c]
     move channel counter to u_int
2002-06-25 23:17:36 +00:00
Ben Lindstrom b48057b7dc - markus@cvs.openbsd.org 2002/06/24 13:12:23
[ssh-agent.1]
     the socket name contains ssh-agent's ppid; via mpech@ from form@
2002-06-25 23:16:31 +00:00
Ben Lindstrom daa2179bd0 - markus@cvs.openbsd.org 2002/06/23 21:34:07
[channels.c]
     tcode is u_int
2002-06-25 23:15:30 +00:00
Kevin Steves cfae58c059 - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM 2002-06-25 22:43:19 +00:00
Tim Rice 8eff319298 [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus
for Cygwin, Cray, & SCO
2002-06-25 15:35:15 -07:00
Ben Lindstrom b129be657c 20020626
- (bal) moved aix_usrinfo() and noted not setting real TTY.  Patch by
   dtucker@zip.com.au
2002-06-25 17:12:26 +00:00
Tim Rice 78688d7a45 Sync with Caldera 2002-06-25 10:07:25 -07:00
Ben Lindstrom 6b0c96ab59 - (bal) if mmap() is substandard, don't allow compression on server side.
Post 'event' we will add more options.
2002-06-25 03:22:03 +00:00
Ben Lindstrom aa83b984ca - (bal) Started list of PrivSep issues in TODO 2002-06-25 02:28:22 +00:00
Damien Miller d3f6ad2cc0 - (djm) Create privsep directory and warn if privsep user is missing
during make install
2002-06-25 10:24:47 +10:00
Kevin Steves d48663602d - (stevesk) [README.privsep] minor updates 2002-06-24 16:49:22 +00:00
Kevin Steves 34f0d8f404 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh 2002-06-24 16:26:49 +00:00
Ben Lindstrom 3f58474214 - deraadt@cvs.openbsd.org 2002/06/23 21:10:02
[packet.c]
     packet_get_int() returns unsigned for reason & seqnr
2002-06-23 21:49:25 +00:00
Ben Lindstrom a9d2c89fc5 - deraadt@cvs.openbsd.org 2002/06/23 21:06:41
[channels.c channels.h session.c session.h]
     display, screen, row, col, xpixel, ypixel are u_int; markus ok
  - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
    xpixel are u_int.
2002-06-23 21:48:28 +00:00
Ben Lindstrom 8ada5d0d0d - deraadt@cvs.openbsd.org 2002/06/23 21:06:13
[sshpty.c]
     KNF
2002-06-23 21:42:50 +00:00
Ben Lindstrom e23f4a3d28 - deraadt@cvs.openbsd.org 2002/06/23 20:39:45
[session.c]
     compression_level is u_int
2002-06-23 21:40:16 +00:00
Ben Lindstrom 822b634099 - deraadt@cvs.openbsd.org 2002/06/23 10:29:52
[ssh-agent.c sshd.c]
     some minor KNF and %u
2002-06-23 21:38:49 +00:00
Ben Lindstrom e135363422 - deraadt@cvs.openbsd.org 2002/06/23 09:46:51
[bufaux.c servconf.c]
     minor KNF.  things the fingers do while you read
2002-06-23 21:29:23 +00:00
Ben Lindstrom 58d3b7224f - deraadt@cvs.openbsd.org 2002/06/23 09:39:55
[ssh-keygen.c]
     u_int stuff
2002-06-23 21:28:13 +00:00
Ben Lindstrom b1f483f472 - deraadt@cvs.openbsd.org 2002/06/23 09:30:14
[sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
      sftp.c]
     bunch of u_int vs int stuff
2002-06-23 21:27:18 +00:00
Ben Lindstrom 5c3855210e - deraadt@cvs.openbsd.org 2002/06/23 03:30:58
[scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
      sshpty.c]
     various KNF and %d for unsigned
2002-06-23 21:23:20 +00:00
Ben Lindstrom 836f0e9d9a - deraadt@cvs.openbsd.org 2002/06/23 03:26:19
[cipher.c key.c]
     KNF
2002-06-23 21:21:30 +00:00
Ben Lindstrom 2953d0fb4e - deraadt@cvs.openbsd.org 2002/06/23 03:25:50
[tildexpand.c]
     KNF
2002-06-23 21:20:34 +00:00
Ben Lindstrom e1c0912cb6 - stevesk@cvs.openbsd.org 2002/06/22 23:09:51
[monitor.c]
     save auth method before monitor_reset_key_state(); bugzilla bug #284;
     ok provos@
2002-06-23 00:38:24 +00:00
Ben Lindstrom 57f08005d3 - stevesk@cvs.openbsd.org 2002/06/22 20:05:27
[sshd.c]
     don't call setsid() if debugging or run from inetd; no "Operation not
     permitted" errors now; ok millert@ markus@
2002-06-23 00:37:10 +00:00
Ben Lindstrom 959de99aa0 - stevesk@cvs.openbsd.org 2002/06/22 16:45:29
[ssh-agent.1 sshd.8 sshd_config.5]
     use process ID vs. pid/PID/process identifier
2002-06-23 00:35:25 +00:00
Ben Lindstrom c06bf70b41 - stevesk@cvs.openbsd.org 2002/06/22 16:41:57
[scp.1]
     typo
2002-06-23 00:34:37 +00:00
Ben Lindstrom 2dfacb3d40 - stevesk@cvs.openbsd.org 2002/06/22 16:40:19
[sshd.c]
     check /var/empty owner mode; ok provos@
2002-06-23 00:33:47 +00:00
Ben Lindstrom 624e3f2065 - stevesk@cvs.openbsd.org 2002/06/22 16:32:54
[sshd.8]
     add /var/empty in FILES section
2002-06-23 00:32:57 +00:00
Ben Lindstrom c001cd3577 - naddy@cvs.openbsd.org 2002/06/22 11:51:39
[ssh.1]
     typo
2002-06-23 00:32:11 +00:00
Ben Lindstrom bf69e3b95d - stevesk@cvs.openbsd.org 2002/06/22 02:40:23
[ssh.1]
     section 5 not 4 for ssh_config
2002-06-23 00:31:24 +00:00
Ben Lindstrom 5590aa5b1f - OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2002/06/22 02:00:29
     [ssh.h]
     correct comment
2002-06-23 00:30:30 +00:00
Ben Lindstrom 883844dc07 - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au 2002-06-23 00:20:50 +00:00
Ben Lindstrom 1a1b851775 - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset. 2002-06-23 00:18:15 +00:00
Kevin Steves 90d5de7670 - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX. 2002-06-22 18:51:48 +00:00
Ben Lindstrom ee9ac35fc2 - (bal) getopt now can be staticly compiled on those platforms missing
optreset.  Patch by binder@arago.de
2002-06-22 00:26:59 +00:00
Damien Miller f102bf6e50 - (djm) Release 3.3p1 2002-06-22 01:44:45 +10:00
Damien Miller 263d68fc56 - (djm) Update README.privsep; spotted by fries@ 2002-06-22 00:45:50 +10:00