tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-31 01:35:11 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,665 Commits 6 Branches 22 Tags
Commit Graph

12665 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
djm@openbsd.org
1339800fef upstream: Use new limits@openssh.com protocol extension to let the 
client select good limits based on what the server supports. Split the
download and upload buffer sizes to allow them to be chosen independently.

In practice (and assuming upgraded sftp/sftp-server at each end), this
increases the download buffer 32->64KiB and the upload buffer
32->255KiB.

Patches from Mike Frysinger; ok dtucker@

OpenBSD-Commit-ID: ebd61c80d85b951b794164acc4b2f2fd8e88606c
 2021-04-01 09:20:57 +11:00
djm@openbsd.org
6653c61202 upstream: do not advertise protocol extensions that have been 
disallowed by the command-line options (e.g. -p/-P/-R); ok dtucker@

OpenBSD-Commit-ID: 3a8a76b3f5131741aca4b41bfab8d101c9926205
 2021-04-01 09:19:36 +11:00
bagajjal
5bcc5aa4d0
remove setting the console title (#494) 2021-03-31 11:43:49 -07:00
vthiebaut10
794bf53f49
Check if Powershell is running in admin mode before running script (#493) 2021-03-30 14:01:43 -07:00
vthiebaut10
bbb500a639
FixUserFilePermissions fixes permissions for administrators_authorized_keys (#492) 2021-03-29 17:19:37 -07:00
Damien Miller
71241fc05d gnome-ssh-askpass3 is a valid target here 2021-03-29 15:14:25 +11:00
Brian Katyl
78b646b0de
Adds support for system account lookup (#478) 2021-03-26 17:13:19 -07:00
Brian Katyl
6e76ad9e1e
Add support for AuthorizedKeysCommand and AuthorizedPrincipalsCommand to run as System (#479) 2021-03-26 17:12:55 -07:00
vthiebaut10
9a60244ef6
Increase verbosity level for bad file permission (#489) 2021-03-26 17:12:13 -07:00
bagajjal
54824dd72e
Administrator non en-us OS. (#488) 2021-03-25 14:25:42 -07:00
bagajjal
2539e60536
fix HKEY_LOCAL_MACHINE\SOFTWARE\OpenSSH registry permissions (#484) 2021-03-22 19:17:33 -07:00
djm@openbsd.org
8a9520836e upstream: return non-zero exit status when killed by signal; bz#3281 ok 
dtucker@

OpenBSD-Commit-ID: 117b31cf3c807993077b596bd730c24da9e9b816
 2021-03-19 13:24:56 +11:00
djm@openbsd.org
1269b8a686 upstream: increase maximum SSH2_FXP_READ to match the maximum 
packet size. Also handle zero-length reads that are borderline nonsensical
but not explicitly banned by the spec. Based on patch from Mike Frysinger,
feedback deraadt@ ok dtucker@

OpenBSD-Commit-ID: 4e67d60d81bde7b84a742b4ee5a34001bdf80d9c
 2021-03-19 13:20:32 +11:00
djm@openbsd.org
860b676044 upstream: don't let logging clobber errno before use 
OpenBSD-Commit-ID: ce6cca370005c270c277c51c111bb6911e1680ec
 2021-03-19 13:20:32 +11:00
Darren Tucker
5ca8a92165 Only call dh_set_moduli_file if using OpenSSL. 
Fixes link failure when configuring --without-openssl since dh.c is not
linked in.
 2021-03-13 14:40:43 +11:00
Darren Tucker
867a7dcf00 Don't install moduli during tests. 
Now that we have TEST_SSH_MODULI_FILE pointing to the moduli in the
soure directory we don't need to install the file to prevent warnings
about it being missing.
 2021-03-13 13:52:53 +11:00
Darren Tucker
0c054538fc Point TEST_SSH_MODULI_FILE at our own moduli. 
This will allow the test to run without requiring a moduli file
installed at the configured default path.
 2021-03-13 13:51:26 +11:00
jsg@openbsd.org
4d48219c72 upstream: spelling 
OpenBSD-Commit-ID: 478bc3db04f62f1048ed6e1765400f3ab325e60f
 2021-03-13 13:14:13 +11:00
dtucker@openbsd.org
88057eb6df upstream: Add ModuliFile keyword to sshd_config to specify the 
location of the "moduli" file containing the groups for DH-GEX.  This will
allow us to run tests against arbitrary moduli files without having to
install them. ok djm@

OpenBSD-Commit-ID: 8df99d60b14ecaaa28f3469d01fc7f56bff49f66
 2021-03-13 13:14:13 +11:00
djm@openbsd.org
f07519a2af upstream: pwcopy() struct passwd that we're going to reuse across a 
bunch of library calls; bz3273 ok dtucker@

OpenBSD-Commit-ID: b6eafa977b2e44607b1b121f5de855107809b762
 2021-03-13 13:09:54 +11:00
dtucker@openbsd.org
69d6d4b0c8 upstream: Import regenerated moduli file. 
OpenBSD-Commit-ID: 7ac6c252d2a5be8fbad4c66d9d35db507c9dac5b
 2021-03-13 13:09:28 +11:00
djm@openbsd.org
e5895e8ecf upstream: no need to reset buffer after send_msg() as that is done 
for us; patch from Mike Frysinger

OpenBSD-Commit-ID: 565516495ff8362a38231e0f1a087b8ae66da59c
 2021-03-13 13:06:10 +11:00
dtucker@openbsd.org
721948e674 upstream: Add TEST_SSH_MODULI_FILE variable to allow overriding of the 
moduli file used during the test run.

OpenBSD-Regress-ID: be10f785263120edb64fc87db0e0d6570a10220a
 2021-03-13 13:02:51 +11:00
Darren Tucker
82fef71e20 Allow (but return EACCES) fstatat64 in sandbox. 
This is apparently used in some configurations of OpenSSL when glibc
has getrandom().  bz#3276, patch from Kris Karas, ok djm@
 2021-03-12 15:58:57 +11:00
Darren Tucker
1cd67ee15c Move generic includes outside of ifdef. 
This ensures that the macros in log.h are defined in the case where
either of --with-solaris-projects or --with-solaris-privs are used
without --with-solaris-contracts.  bz#3278.
 2021-03-12 13:16:10 +11:00
bagajjal
65625c685a
Check systemwide ssh config file permissions (#483) 2021-03-11 16:49:29 -08:00
Darren Tucker
2421a567a8 Import regenerated moduli file. 2021-03-10 17:44:16 +11:00
millert@openbsd.org
e99080c05d upstream: Fix PRINT macro, the suffix param to sshlog() was missing. 
Also remove redundant __func__ prefix from PRINT calls as the macro already
adds __FILE__, __func__ and __LINE__.  From Christos Zoulas. OK dtucker@

OpenBSD-Commit-ID: 01fdfa9c5541151b5461d9d7d6ca186a3413d949
 2021-03-10 10:14:26 +11:00
bagajjal
1a1a2ac5f1
administrators authorized keys file can have read permissions for other users. (#481) 2021-03-09 10:02:51 -08:00
bagajjal
bc7adf5a84
Allow users to configure custom shell arguments (#480) 2021-03-03 18:05:25 -08:00
djm@openbsd.org
160db17fc6 upstream: don't sshbuf_get_u32() into an enum; reported by goetze 
AT dovetail.com via bz3269

OpenBSD-Commit-ID: 99a30a8f1df9bd72be54e21eee5c56a0f050921a
 2021-03-04 09:43:28 +11:00
sthen@openbsd.org
cffd033817 upstream: typo in other_hostkeys_message() display output, ok djm 
OpenBSD-Commit-ID: 276f58afc97b6f5826e0be58380b737603dbf5f5
 2021-03-04 09:43:28 +11:00
djm@openbsd.org
7fe141b96b upstream: needs FILE*; from Mike Frysinger 
OpenBSD-Commit-ID: dddb3aa9cb5792eeeaa37a1af67b5a3f25ded41d
 2021-03-03 19:43:59 +11:00
Damien Miller
d2afd717e6 update depend 2021-03-02 21:31:47 +11:00
Damien Miller
f0c4eddf7c update relnotes URL 2021-03-02 21:30:14 +11:00
Damien Miller
67a8bb7fe6 update RPM spec version numbers 2021-03-02 21:29:54 +11:00
djm@openbsd.org
0a4b23b11b upstream: openssh-8.5 
OpenBSD-Commit-ID: 185e85d60fe042b8f8fa1ef29d4ef637bdf397d6
 2021-03-02 16:43:01 +11:00
Darren Tucker
de3866383b Only upload config logs if configure fails. 2021-03-01 21:13:24 +11:00
dtucker@openbsd.org
85ff2a564c upstream: Add %k to list of keywords. From 
=?UTF-8?q?=20Eero=20H=C3=A4kkinenvia=20bz#3267?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

OpenBSD-Commit-ID: 9c87f39a048cee2a7d1c8bab951b2f716256865e
 2021-03-01 10:20:42 +11:00
dtucker@openbsd.org
e774bac359 upstream: Do not try to reset signal handler for signal 0 in 
subprocess. Prevents spurious debug message.  ok djm@

OpenBSD-Commit-ID: 7f9785e292dcf304457566ad4637effd27ad1d46
 2021-02-28 13:01:20 +11:00
djm@openbsd.org
351c5dbbd7 upstream: fix alphabetic ordering of options; spotted by Iain Morgan 
OpenBSD-Commit-ID: f955fec617d74af0feb5b275831a9fee813d7ad5
 2021-02-28 10:54:19 +11:00
Darren Tucker
0d1c9dbe57 zlib is now optional. 2021-02-27 12:26:08 +11:00
Jeffrey H. Johnson
b7c6ee7b43 Fix punctuatio and typo in README.md. 
Some very minor fixes, missing 's' and punctuation.
 2021-02-27 12:26:08 +11:00
Damien Miller
6248b86074 Revert "ssh: optional bind interface if bind address specified." 
This reverts commit 5a878a71a3528c2626aa1d331934fd964782d41c.

Apologies - I accidentally pushed this.
 2021-02-26 16:45:50 +11:00
Damien Miller
493339a940 detech BSD libc hash functions in libbsd / libmd 
Some Linux distributions are shipping the BSD-style hashing functions
(e.g. SHA256Update) in libbsd and/or libmd. Detect this situation to
avoid header/replacement clashes later. ok dtucker@
 2021-02-26 15:46:47 +11:00
Dmitrii Turlupov
5a878a71a3 ssh: optional bind interface if bind address specified. 
Allows the -b and -B options to be used together.
For example, when the interface is in the VRF.
 2021-02-26 15:46:47 +11:00
djm@openbsd.org
1fe4d70df9 upstream: remove this KEX fuzzer; it's awkward to use and doesn't play 
nice with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it
but me.

OpenBSD-Regress-ID: cad919522b3ce90c147c95abaf81b0492ac296c9
 2021-02-26 15:23:42 +11:00
Darren Tucker
24a3a67bd7 Remove macos-11.00 PAM test target too. 
These are failing apparently due to some kind of infrastructure problem,
making it look like every commit is busted.
 2021-02-26 11:50:37 +11:00
djm@openbsd.org
473201783f upstream: a bit more debugging behind #ifdef DEBUG_SK 
OpenBSD-Commit-ID: d9fbce14945721061cb322f0084c2165d33d1993
 2021-02-26 11:18:26 +11:00
Darren Tucker
fd9fa76a34 Remove macos-11.0 from the test target list. 
It has been consistently failing for the past few days with a github
actions internal error.
 2021-02-26 01:15:10 +11:00