Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							4f755cdc05 
							
						 
					 
					
						
						
							
							- pyr@cvs.openbsd.org 2008/05/07 05:49:37  
						
						... 
						
						
						
						[servconf.c servconf.h session.c sshd_config.5]
     Enable the AllowAgentForwarding option in sshd_config (global and match
     context), to specify if agents should be permitted on the server.
     As the man page states:
     ``Note that disabling Agent forwarding does not improve security
     unless users are also denied shell access, as they can always install
     their own forwarders.''
     ok djm@, ok and a mild frown markus@ 
						
						
					 
					
						2008-05-19 14:57:41 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							ff0dd88999 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/04/18 22:01:33  
						
						... 
						
						
						
						[session.c]
     remove unneccessary parentheses 
						
						
					 
					
						2008-05-19 14:55:02 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							95e80955f2 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/03/26 21:28:14  
						
						... 
						
						
						
						[auth-options.c auth-options.h session.c sshd.8]
     add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc 
						
						
					 
					
						2008-03-27 11:03:05 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							55360e1ceb 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/03/25 23:01:41  
						
						... 
						
						
						
						[session.c]
     last patch had backwards test; spotted by termim AT gmail.com 
						
						
					 
					
						2008-03-27 11:02:27 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a1b48ccf2d 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/03/25 11:58:02  
						
						... 
						
						
						
						[session.c sshd_config.5]
     ignore ~/.ssh/rc if a sshd_config ForceCommand is specified;
     from dtucker@ ok deraadt@ djm@ 
						
						
					 
					
						2008-03-27 11:02:02 +11:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							b8eb586412 
							
						 
					 
					
						
						
							
							- (dtucker) Cache selinux status earlier so we know if it's enabled after a  
						
						... 
						
						
						
						chroot.  Allows ChrootDirectory to work with selinux support compiled in
   but not enabled.  Using it with selinux enabled will require some selinux
   support inside the chroot.  "looks sane" djm@ 
						
						
					 
					
						2008-03-27 07:27:20 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a193900674 
							
						 
					 
					
						
						
							
							- (djm) [session.c] Relocate incorrectly-placed closefrom() that was causing  
						
						... 
						
						
						
						crashes when used with ChrootDirectory 
						
						
					 
					
						2008-03-15 17:27:58 +11:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							52358d6df3 
							
						 
					 
					
						
						
							
							- (dtucker) [auth-pam.c monitor.c session.c sshd.c] Bug  #926 : Move  
						
						... 
						
						
						
						pam_open_session and pam_close_session into the privsep monitor, which
   will ensure that pam_session_close is called as root.  Patch from Tomas
   Mraz. 
						
						
					 
					
						2008-03-11 22:58:25 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							7cb2b56b1c 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/02/22 05:58:56  
						
						... 
						
						
						
						[session.c]
     closefrom() call was too early, delay it until just before we execute
     the user's rc files (if any). 
						
						
					 
					
						2008-03-07 18:33:12 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							767087b8ec 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2008/02/20 15:25:26  
						
						... 
						
						
						
						[session.c]
     correct boolean encoding for coredump; der Mouse via dugsong 
						
						
					 
					
						2008-03-07 18:32:42 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							76e95daad1 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/02/13 22:38:17  
						
						... 
						
						
						
						[servconf.h session.c sshd.c]
     rekey arc4random and OpenSSL RNG in postauth child
     closefrom fds > 2 before shell/command execution
     ok markus@ 
						
						
					 
					
						2008-03-07 18:31:24 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							54e3773ccb 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/02/10 10:54:29  
						
						... 
						
						
						
						[servconf.c session.c]
     delay ~ expansion for ChrootDirectory so it expands to the logged-in user's
     home, rather than the user who starts sshd (probably root) 
						
						
					 
					
						2008-02-10 22:48:55 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							d8cb1f184f 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2008/02/08 23:24:07  
						
						... 
						
						
						
						[servconf.c servconf.h session.c sftp-server.c sftp.h sshd_config]
     [sshd_config.5]
     add sshd_config ChrootDirectory option to chroot(2) users to a directory
     and tweak internal sftp server to work with it (no special files in
     chroot required). ok markus@ 
						
						
					 
					
						2008-02-10 22:40:12 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							dfc24258a7 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2008/02/04 21:53:00  
						
						... 
						
						
						
						[session.c sftp-server.c sftp.h]
     link sftp-server into sshd; feedback and ok djm@ 
						
						
					 
					
						2008-02-10 22:29:40 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							14b017d6f2 
							
						 
					 
					
						
						
							
							- gilles@cvs.openbsd.org 2007/09/11 15:47:17  
						
						... 
						
						
						
						[session.c ssh-keygen.c sshlogin.c]
     use strcspn to properly overwrite '\n' in fgets returned buffer
     ok pyr@, ray@, millert@, moritz@, chl@ 
						
						
					 
					
						2007-09-17 16:09:15 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							6ef50134c2 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2007/08/23 02:55:51  
						
						... 
						
						
						
						[auth-passwd.c auth.c session.c]
     missed include bits from last commit
     NB. RCS ID sync only for portable 
						
						
					 
					
						2007-09-17 11:54:24 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							6572db28fd 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2007/08/23 02:49:43  
						
						... 
						
						
						
						[auth-passwd.c auth.c session.c]
     unifdef HAVE_LOGIN_CAP; ok deraadt@ millert@
     NB. RCS ID sync only for portable 
						
						
					 
					
						2007-09-17 11:52:59 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							9142e1c66d 
							
						 
					 
					
						
						
							
							- (dtucker) [session.c] Call PAM cleanup functions for unauthenticated  
						
						... 
						
						
						
						connections too.  Based on a patch from Sandro Wefel, with & ok djm@ 
						
						
					 
					
						2007-08-16 23:28:04 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							2d9636471b 
							
						 
					 
					
						
						
							
							- (dtucker) [session.c] Bug  #1339 : ensure that pam_setcred() is always  
						
						... 
						
						
						
						called with PAM_ESTABLISH_CRED at least once, which resolves a problem
   with pam_dhkeys.  Patch from David Leonard, ok djm@ 
						
						
					 
					
						2007-08-13 23:11:56 +10:00 
						 
				 
			
				
					
						
							
							
								Tim Rice 
							
						 
					 
					
						
						
						
						
							
						
						
							99203ec48b 
							
						 
					 
					
						
						
							
							20070326  
						
						... 
						
						
						
						- (tim) [auth.c configure.ac defines.h session.c openbsd-compat/port-uw.c
   openbsd-compat/port-uw.h openbsd-compat/xcrypt.c] Rework libiaf test/defines
   to account for IRIX having libiaf but not set_id(). Patch with & ok dtucker@ 
						
						
					 
					
						2007-03-26 09:35:28 -07:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							82a3d2bc6f 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2007/01/21 01:41:54  
						
						... 
						
						
						
						[auth-skey.c kex.c ssh-keygen.c session.c clientloop.c]
     spaces 
						
						
					 
					
						2007-02-19 22:10:25 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							990b1a80b5 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/10/09 23:36:11  
						
						... 
						
						
						
						[session.c]
     xmalloc -> xcalloc that was missed previously, from portable
     (NB. Id sync only for portable, obviously) 
						
						
					 
					
						2006-10-24 03:01:56 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							ded319cca2 
							
						 
					 
					
						
						
							
							- (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]  
						
						... 
						
						
						
						[auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c]
   [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c]
   [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c]
   [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
   [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c]
   [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c]
   [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c]
   [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c]
   [sshconnect1.c sshconnect2.c sshd.c rc4.diff]
   [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c]
   [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c]
   [openbsd-compat/port-uw.c]
   Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h;
   compile problems reported by rac AT tenzing.org 
						
						
					 
					
						2006-09-01 15:38:36 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							d5fe0baa73 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/08/29 10:40:19  
						
						... 
						
						
						
						[channels.c session.c]
     normalise some inconsistent (but harmless) NULL pointer checks
     spotted by the Stanford SATURN tool, via Isil Dillig;
     ok markus@ deraadt@ 
						
						
					 
					
						2006-08-30 11:07:39 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							3f8123c804 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2006/08/18 09:15:20  
						
						... 
						
						
						
						[auth.h session.c sshd.c]
     delay authentication related cleanups until we're authenticated and
     all alarms have been cancelled; ok deraadt 
						
						
					 
					
						2006-08-19 00:32:46 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							9ab00b44c1 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/08/04 20:46:05  
						
						... 
						
						
						
						[monitor.c session.c ssh-agent.c]
     spaces 
						
						
					 
					
						2006-08-05 12:40:11 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							d783435315 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/08/03 03:34:42  
						
						... 
						
						
						
						[OVERVIEW atomicio.c atomicio.h auth-bsdauth.c auth-chall.c auth-krb5.c]
     [auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
     [auth-rsa.c auth-skey.c auth.c auth.h auth1.c auth2-chall.c auth2-gss.c]
     [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c ]
     [auth2-pubkey.c auth2.c authfd.c authfd.h authfile.c bufaux.c bufbn.c]
     [buffer.c buffer.h canohost.c channels.c channels.h cipher-3des1.c]
     [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
     [compress.c deattack.c dh.c dispatch.c dns.c dns.h fatal.c groupaccess.c]
     [groupaccess.h gss-genr.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c]
     [kex.h kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c]
     [key.h log.c log.h mac.c match.c md-sha256.c misc.c misc.h moduli.c]
     [monitor.c monitor_fdpass.c monitor_mm.c monitor_mm.h monitor_wrap.c]
     [monitor_wrap.h msg.c nchan.c packet.c progressmeter.c readconf.c]
     [readconf.h readpass.c rsa.c scard.c scard.h scp.c servconf.c servconf.h]
     [serverloop.c session.c session.h sftp-client.c sftp-common.c]
     [sftp-common.h sftp-glob.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
     [ssh-dss.c ssh-gss.h ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rsa.c]
     [ssh.c ssh.h sshconnect.c sshconnect.h sshconnect1.c sshconnect2.c]
     [sshd.c sshlogin.c sshlogin.h sshpty.c sshpty.h sshtty.c ttymodes.c]
     [uidswap.c uidswap.h uuencode.c uuencode.h xmalloc.c xmalloc.h]
     [loginrec.c loginrec.h openbsd-compat/port-aix.c openbsd-compat/port-tun.h]
     almost entirely get rid of the culture of ".h files that include .h files"
     ok djm, sort of ok stevesk
     makes the pain stop in one easy step
     NB. portable commit contains everything *except* removing includes.h, as
     that will take a fair bit more work as we move headers that are required
     for portability workarounds to defines.h. (also, this step wasn't "easy") 
						
						
					 
					
						2006-08-05 12:39:39 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							a7a73ee35d 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/08/01 23:22:48  
						
						... 
						
						
						
						[auth-passwd.c auth-rhosts.c auth-rsa.c auth.c auth.h auth1.c]
     [auth2-chall.c auth2-pubkey.c authfile.c buffer.c canohost.c]
     [channels.c clientloop.c dh.c dns.c dns.h hostfile.c kex.c kexdhc.c]
     [kexgexc.c kexgexs.c key.c key.h log.c misc.c misc.h moduli.c]
     [monitor_wrap.c packet.c progressmeter.c readconf.c readpass.c scp.c]
     [servconf.c session.c sftp-client.c sftp-common.c sftp-server.c sftp.c]
     [ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c ssh.c sshconnect.c]
     [sshconnect1.c sshconnect2.c sshd.c sshlogin.c sshtty.c uuencode.c]
     [uuencode.h xmalloc.c]
     move #include <stdio.h> out of includes.h 
						
						
					 
					
						2006-08-05 11:37:59 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e7a1e5cf63 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/26 13:57:17  
						
						... 
						
						
						
						[authfd.c authfile.c dh.c canohost.c channels.c clientloop.c compat.c]
     [hostfile.c kex.c log.c misc.c moduli.c monitor.c packet.c readpass.c]
     [scp.c servconf.c session.c sftp-server.c sftp.c ssh-add.c ssh-agent.c]
     [ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh.c sshconnect.c]
     [sshconnect1.c sshd.c xmalloc.c]
     move #include <stdlib.h> out of includes.h 
						
						
					 
					
						2006-08-05 11:34:19 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							8dbffe7904 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/26 02:35:17  
						
						... 
						
						
						
						[atomicio.c auth.c dh.c authfile.c buffer.c clientloop.c kex.c]
     [groupaccess.c gss-genr.c kexgexs.c misc.c monitor.c monitor_mm.c]
     [packet.c scp.c serverloop.c session.c sftp-client.c sftp-common.c]
     [sftp-server.c sftp.c ssh-add.c ssh-agent.c ssh-keygen.c sshlogin.c]
     [uidswap.c xmalloc.c]
     move #include <sys/param.h> out of includes.h 
						
						
					 
					
						2006-08-05 11:02:17 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							ad5ecbf072 
							
						 
					 
					
						
						
							
							- (djm) [session.c]  
						
						... 
						
						
						
						fix compile error with -Werror -Wall: 'path' is only used in
   do_setup_env() if HAVE_LOGIN_CAP is not defined 
						
						
					 
					
						2006-07-24 15:03:06 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e3476ed03b 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/22 20:48:23  
						
						... 
						
						
						
						[atomicio.c auth-options.c auth-passwd.c auth-rhosts.c auth-rsa.c]
     [auth.c auth1.c auth2-chall.c auth2-hostbased.c auth2-passwd.c auth2.c]
     [authfd.c authfile.c bufaux.c bufbn.c buffer.c canohost.c channels.c]
     [cipher-3des1.c cipher-bf1.c cipher-ctr.c cipher.c clientloop.c]
     [compat.c deattack.c dh.c dns.c gss-genr.c gss-serv.c hostfile.c]
     [includes.h kex.c kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c log.c]
     [mac.c match.c md-sha256.c misc.c moduli.c monitor.c monitor_fdpass.c]
     [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c rsa.c]
     [progressmeter.c readconf.c readpass.c scp.c servconf.c serverloop.c]
     [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c sftp.c]
     [ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
     [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c sshconnect2.c]
     [sshd.c sshlogin.c sshpty.c ttymodes.c uidswap.c xmalloc.c]
     move #include <string.h> out of includes.h 
						
						
					 
					
						2006-07-24 14:13:33 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							1cdde6f536 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/20 15:26:15  
						
						... 
						
						
						
						[auth1.c serverloop.c session.c sshconnect2.c]
     missed some needed #include <unistd.h> when KERBEROS5=no; issue from
     massimo@cedoc.mo.it  
						
						
					 
					
						2006-07-24 14:07:35 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e275443f66 
							
						 
					 
					
						
						
							
							- dtucker@cvs.openbsd.org 2006/07/19 13:07:10  
						
						... 
						
						
						
						[servconf.c servconf.h session.c sshd.8 sshd_config sshd_config.5]
     Add ForceCommand keyword to sshd_config, equivalent to the "command="
     key option, man page entry and example in sshd_config.
     Feedback & ok djm@, man page corrections & ok jmc@ 
						
						
					 
					
						2006-07-24 14:06:47 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							3997249346 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/11 20:07:25  
						
						... 
						
						
						
						[scp.c auth.c monitor.c serverloop.c sftp-server.c sshpty.c readpass.c
     sshd.c monitor_wrap.c monitor_fdpass.c ssh-agent.c ttymodes.c atomicio.c
     includes.h session.c sshlogin.c monitor_mm.c packet.c sshconnect2.c
     sftp-client.c nchan.c clientloop.c sftp.c misc.c canohost.c channels.c
     ssh-keygen.c progressmeter.c uidswap.c msg.c readconf.c sshconnect.c]
     move #include <errno.h> out of includes.h; ok markus@ 
						
						
					 
					
						2006-07-12 22:22:46 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							e7d4b19f75 
							
						 
					 
					
						
						
							
							- markus@cvs.openbsd.org 2006/07/11 18:50:48  
						
						... 
						
						
						
						[clientloop.c ssh.1 ssh.c channels.c ssh_config.5 readconf.h session.c
     channels.h readconf.c]
     add ExitOnForwardFailure: terminate the connection if ssh(1)
     cannot set up all requested dynamic, local, and remote port
     forwardings. ok djm, dtucker, stevesk, jmc 
						
						
					 
					
						2006-07-12 22:17:10 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e33b60343b 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/08 21:48:53  
						
						... 
						
						
						
						[monitor.c session.c]
     missed these from last commit:
     move #include <sys/socket.h> out of includes.h 
						
						
					 
					
						2006-07-10 21:08:34 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							e3b60b524e 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/08 21:47:12  
						
						... 
						
						
						
						[authfd.c canohost.c clientloop.c dns.c dns.h includes.h]
     [monitor_fdpass.c nchan.c packet.c servconf.c sftp.c ssh-agent.c]
     [ssh-keyscan.c ssh.c sshconnect.h sshd.c sshlogin.h]
     move #include <sys/socket.h> out of includes.h 
						
						
					 
					
						2006-07-10 21:08:03 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							9f2abc47eb 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/06 16:03:53  
						
						... 
						
						
						
						[auth-options.c auth-options.h auth-passwd.c auth-rh-rsa.c]
     [auth-rhosts.c auth-rsa.c auth.c auth.h auth2-hostbased.c]
     [auth2-pubkey.c auth2.c includes.h misc.c misc.h monitor.c]
     [monitor_wrap.c monitor_wrap.h scp.c serverloop.c session.c]
     [session.h sftp-common.c ssh-add.c ssh-keygen.c ssh-keysign.c]
     [ssh.c sshconnect.c sshconnect.h sshd.c sshpty.c sshpty.h uidswap.c]
     [uidswap.h]
     move #include <pwd.h> out of includes.h; ok markus@ 
						
						
					 
					
						2006-07-10 20:53:08 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							917f9b6b6e 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/07/06 10:47:05  
						
						... 
						
						
						
						[servconf.c servconf.h session.c sshd_config.5]
     support arguments to Subsystem commands; ok markus@ 
						
						
					 
					
						2006-07-10 20:36:47 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							efc04e70b8 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/03 17:59:32  
						
						... 
						
						
						
						[channels.c includes.h]
     move #include <arpa/inet.h> out of includes.h; old ok djm@
     (portable needed session.c too) 
						
						
					 
					
						2006-07-10 20:26:27 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							427a1d57bb 
							
						 
					 
					
						
						
							
							- stevesk@cvs.openbsd.org 2006/07/02 22:45:59  
						
						... 
						
						
						
						[groupaccess.c groupaccess.h includes.h session.c sftp-common.c sshpty.c]
     move #include <grp.h> out of includes.h
     (portable needed uidswap.c too) 
						
						
					 
					
						2006-07-10 20:20:33 +10:00 
						 
				 
			
				
					
						
							
							
								Darren Tucker 
							
						 
					 
					
						
						
						
						
							
						
						
							d8093e49bf 
							
						 
					 
					
						
						
							
							- (dtucker) [auth-pam.c groupaccess.c monitor.c monitor_wrap.c scard-opensc.c  
						
						... 
						
						
						
						session.c ssh-rand-helper.c sshd.c openbsd-compat/bsd-cygwin_util.c
   openbsd-compat/setproctitle.c] Convert malloc(foo*bar) -> calloc(foo,bar)
   in Portable-only code; since calloc zeros, remove now-redundant memsets.
   Also add a couple of sanity checks.  With & ok djm@ 
						
						
					 
					
						2006-05-04 16:24:34 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							525a0b090f 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/04/20 21:53:44  
						
						... 
						
						
						
						[includes.h session.c sftp.c]
     Switch from using pipes to socketpairs for communication between
     sftp/scp and ssh, and between sshd and its subprocesses. This saves
     a file descriptor per session and apparently makes userland ppp over
     ssh work; ok markus@ deraadt@ (ID Sync only - portable makes this
     decision on a per-platform basis) 
						
						
					 
					
						2006-04-23 12:10:49 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							73b42d2bb0 
							
						 
					 
					
						
						
							
							- (djm) [Makefile.in configure.ac session.c sshpty.c]  
						
						... 
						
						
						
						[contrib/redhat/sshd.init openbsd-compat/Makefile.in]
   [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c]
   [openbsd-compat/port-linux.h] Add support for SELinux, setting
   the execution and TTY contexts. based on patch from Daniel Walsh,
   bz #880 ; ok dtucker@ 
						
						
					 
					
						2006-04-22 21:26:08 +10:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							57c30117c1 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/03/25 13:17:03  
						
						... 
						
						
						
						[atomicio.c auth-bsdauth.c auth-chall.c auth-options.c auth-passwd.c]
     [auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth-skey.c auth.c auth1.c]
     [auth2-chall.c auth2-hostbased.c auth2-kbdint.c auth2-none.c]
     [auth2-passwd.c auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c]
     [buffer.c canohost.c channels.c cipher-3des1.c cipher-bf1.c]
     [cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c compress.c]
     [deattack.c dh.c dispatch.c fatal.c groupaccess.c hostfile.c kex.c]
     [kexdh.c kexdhc.c kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c]
     [mac.c match.c md-sha256.c misc.c monitor.c monitor_fdpass.c]
     [monitor_mm.c monitor_wrap.c msg.c nchan.c packet.c progressmeter.c]
     [readconf.c readpass.c rsa.c scard.c scp.c servconf.c serverloop.c]
     [session.c sftp-client.c sftp-common.c sftp-glob.c sftp-server.c]
     [sftp.c ssh-add.c ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c]
     [ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
     [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
     [uidswap.c uuencode.c xmalloc.c]
     Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
     Theo nuked - our scripts to sync -portable need them in the files 
						
						
					 
					
						2006-03-26 14:24:48 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							36812092ec 
							
						 
					 
					
						
						
							
							- djm@cvs.openbsd.org 2006/03/25 01:13:23  
						
						... 
						
						
						
						[buffer.c channels.c deattack.c misc.c scp.c session.c sftp-client.c]
     [sftp-server.c ssh-agent.c ssh-rsa.c xmalloc.c xmalloc.h auth-pam.c]
     [uidswap.c]
     change OpenSSH's xrealloc() function from being xrealloc(p, new_size)
     to xrealloc(p, new_nmemb, new_itemsize).
     realloc is particularly prone to integer overflows because it is
     almost always allocating "n * size" bytes, so this is a far safer
     API; ok deraadt@ 
						
						
					 
					
						2006-03-26 14:22:47 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							9096740f6c 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/03/20 18:26:55  
						
						... 
						
						
						
						[channels.c monitor.c session.c session.h ssh-agent.c ssh-keygen.c]
     [ssh-rsa.c ssh.c sshlogin.c]
     annoying spacing fixes getting in the way of real diffs 
						
						
					 
					
						2006-03-26 14:07:26 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							c91e556d8a 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/03/19 18:53:12  
						
						... 
						
						
						
						[kex.c kex.h monitor.c myproposal.h session.c]
     spacing 
						
						
					 
					
						2006-03-26 13:58:55 +11:00 
						 
				 
			
				
					
						
							
							
								Damien Miller 
							
						 
					 
					
						
						
						
						
							
						
						
							b0fb6872ed 
							
						 
					 
					
						
						
							
							- deraadt@cvs.openbsd.org 2006/03/19 18:51:18  
						
						... 
						
						
						
						[atomicio.c auth-bsdauth.c auth-chall.c auth-krb5.c auth-options.c]
     [auth-pam.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c auth-rsa.c]
     [auth-shadow.c auth-skey.c auth.c auth1.c auth2-chall.c]
     [auth2-hostbased.c auth2-kbdint.c auth2-none.c auth2-passwd.c]
     [auth2-pubkey.c auth2.c authfd.c authfile.c bufaux.c buffer.c]
     [canohost.c channels.c cipher-3des1.c cipher-acss.c cipher-aes.c]
     [cipher-bf1.c cipher-ctr.c cipher.c cleanup.c clientloop.c compat.c]
     [compress.c deattack.c dh.c dispatch.c dns.c entropy.c fatal.c]
     [groupaccess.c hostfile.c includes.h kex.c kexdh.c kexdhc.c]
     [kexdhs.c kexgex.c kexgexc.c kexgexs.c key.c log.c loginrec.c]
     [loginrec.h logintest.c mac.c match.c md-sha256.c md5crypt.c misc.c]
     [monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c msg.c]
     [nchan.c packet.c progressmeter.c readconf.c readpass.c rsa.c]
     [scard.c scp.c servconf.c serverloop.c session.c sftp-client.c]
     [sftp-common.c sftp-glob.c sftp-server.c sftp.c ssh-add.c]
     [ssh-agent.c ssh-dss.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c]
     [ssh-rand-helper.c ssh-rsa.c ssh.c sshconnect.c sshconnect1.c]
     [sshconnect2.c sshd.c sshlogin.c sshpty.c sshtty.c ttymodes.c]
     [uidswap.c uuencode.c xmalloc.c openbsd-compat/bsd-arc4random.c]
     [openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-cygwin_util.c]
     [openbsd-compat/bsd-getpeereid.c openbsd-compat/bsd-misc.c]
     [openbsd-compat/bsd-nextstep.c openbsd-compat/bsd-snprintf.c]
     [openbsd-compat/bsd-waitpid.c openbsd-compat/fake-rfc2553.c]
     RCSID() can die 
						
						
					 
					
						2006-03-26 00:03:21 +11:00