tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,184 Commits 6 Branches 20 Tags 99 MiB
Commit Graph

2789 Commits

Author SHA1 Message Date
Damien Miller 02e16ad95f - (djm) Bug #460: Filling utmp[x]->ut_addr_v6 if present. Patch from 
cjwatson@debian.org
 2003-01-03 14:42:27 +11:00
Damien Miller 8aff5cbed7 - (djm) Bug #461: ssh-copy-id fails with no arguments. Patch from 
cjwatson@debian.org
 2003-01-03 14:34:06 +11:00
Kevin Steves 678ee51ff3 - (stevesk) [session.c sshlogin.c sshlogin.h] complete portable 
parts of pass addrlen with sockaddr * fix.
    from Hajimu UMEMOTO <ume@FreeBSD.org>
 2003-01-01 23:43:55 +00:00
Ben Lindstrom 1b96cfb975 - (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since 
we already did s/msg_send/ssh_msg_send/
 2002-12-23 02:58:17 +00:00
Ben Lindstrom 40b9503563 - markus@cvs.openbsd.org 2002/12/13 15:20:52 
[scp.c]
     1) include stalling time in total time
     2) truncate filenames to 45 instead of 20 characters
     3) print rate instead of progress bar, no more stars
     4) scale output to tty width
     based on a patch from Niels; ok fries@ lebel@ fgs@ millert@
 2002-12-23 02:53:08 +00:00
Ben Lindstrom 1d568f9fce - markus@cvs.openbsd.org 2002/12/13 10:03:15 
[channels.c misc.c sshconnect2.c]
     cleanup debug messages, more useful information for the client user.
 2002-12-23 02:44:36 +00:00
Ben Lindstrom faa1ea8c20 - markus@cvs.openbsd.org 2002/12/10 19:47:14 
[packet.c]
     static
 2002-12-23 02:42:52 +00:00
Ben Lindstrom a743398d04 - markus@cvs.openbsd.org 2002/12/10 19:26:50 
[packet.c]
     move tos handling to packet_set_tos; ok provos/henning/deraadt
 2002-12-23 02:41:41 +00:00
Ben Lindstrom 46767607e2 - markus@cvs.openbsd.org 2002/12/10 08:56:00 
[session.c]
     Make sure $SHELL points to the shell from the password file, even if shell
     is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
 2002-12-23 02:26:08 +00:00
Ben Lindstrom b9fa691819 - millert@cvs.openbsd.org 2002/12/09 16:50:30 
[ssh.c]
     Avoid setting optind to 0 as GNU getopt treats that like we do optreset.
     markus@ OK
 2002-12-23 02:24:54 +00:00
Ben Lindstrom d576781829 - djm@cvs.openbsd.org 2002/12/06 05:20:02 
[sftp.1]
     Fix cut'n'paste error, spotted by matthias.riese@b-novative.de; ok deraadt@
 2002-12-23 02:23:37 +00:00
Ben Lindstrom 418e078378 - markus@cvs.openbsd.org 2002/12/05 11:08:35 
[scp.c]
     use roundup() similar to rcp/util.c and avoid problems with strange
     filesystem block sizes, noted by tjr@freebsd.org; ok djm@
 2002-12-23 02:22:09 +00:00
Ben Lindstrom 611797ed15 - stevesk@cvs.openbsd.org 2002/12/04 04:36:47 
[session.c]
     remove xauth entries before add; PR 2994 from janjaap@stack.nl.
     ok markus@
 2002-12-23 02:15:57 +00:00
Ben Lindstrom c276c1208e - markus@cvs.openbsd.org 2002/11/27 17:53:35 
[scp.c sftp.c ssh.c]
     allow usernames with embedded '@', e.g. scp user@vhost@realhost:file /tmp;
     http://bugzilla.mindrot.org/show_bug.cgi?id=447; ok mouring@, millert@
 2002-12-23 02:14:51 +00:00
Ben Lindstrom acaac975ca - stevesk@cvs.openbsd.org 2002/11/26 02:38:54 
[canohost.c]
     KNF, comment and error message repair; ok markus@
 2002-12-23 02:13:37 +00:00
Ben Lindstrom 9394d2fc0a - stevesk@cvs.openbsd.org 2002/11/26 02:35:30 
[ssh-keygen.1]
     remove outdated statement; ok markus@ deraadt@
 2002-12-23 02:11:54 +00:00
Ben Lindstrom e7ee7fe602 - wcobb@cvs.openbsd.org 2002/11/26 00:45:03 
[scp.c ssh-keygen.c]
     Remove unnecessary fflush(stderr) calls, stderr is unbuffered by default.
     ok markus@
 2002-12-23 02:11:02 +00:00
Ben Lindstrom 2594d9a06b - stevesk@cvs.openbsd.org 2002/11/24 21:46:24 
[ssh-keysign.8]
     typo: "the the"
 2002-12-23 02:09:59 +00:00
Ben Lindstrom 604dc72890 - markus@cvs.openbsd.org 2002/11/21 23:04:33 
[ssh.c]
     debug->debug2
 2002-12-23 02:08:57 +00:00
Ben Lindstrom 93576d9538 - deraadt@cvs.openbsd.org 2002/11/21 23:03:51 
[auth-krb5.c auth1.c hostfile.h monitor_wrap.c sftp-client.c sftp-int.c ssh-add.c ssh-rsa.c
      sshconnect.c]
     KNF
 2002-12-23 02:06:19 +00:00
Ben Lindstrom 064496feaa - markus@cvs.openbsd.org 2002/11/21 22:45:31 
[cipher.c kex.c packet.c sshconnect.c sshconnect2.c]
     debug->debug2, unify debug messages
 2002-12-23 02:04:22 +00:00
Ben Lindstrom 1f53083fc4 - markus@cvs.openbsd.org 2002/11/21 22:22:50 
[dh.c]
     debug->debug2
 2002-12-23 02:03:02 +00:00
Ben Lindstrom f49dbff61d - markus@cvs.openbsd.org 2002/11/18 16:43:44 
[clientloop.c]
     don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
     e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
 2002-12-23 02:01:55 +00:00
Ben Lindstrom 44adb8fed9 - fgsch@cvs.openbsd.org 2002/11/15 10:03:09 
[authfile.c]
     lseek(2) may return -1 when getting the public/private key lenght.
     Simplify the code and check for errors using fstat(2).

     Problem reported by Mauricio Sanchez, markus@ ok.
 2002-12-23 02:00:23 +00:00
Damien Miller ab1c12a11c - (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org 2002-12-05 20:59:33 +11:00
Tim Rice 1c9e688548 [configure.ac] fix STDPATH test for IRIX. First reported by advax@triumf.ca. 
This type of solution tested by <herb@sgi.com>
 2002-11-22 13:29:01 -08:00
Tim Rice be2396458e [configure.ac] remove unused variables no_libsocket and no_libnsl 2002-11-13 15:55:55 -08:00
Tim Rice 748fcf9881 [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is not world writable. 2002-11-13 15:50:04 -08:00
Ben Lindstrom f5397c081d - (bal) AIX does not log login attempts for unknown users (bug #432). 
patch by dtucker@zip.com.au
 2002-11-09 16:11:10 +00:00
Ben Lindstrom 224313cdae - (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c 
ntsec now default if cygwin version beginning w/ version 56.  Patch
   by Corinna Vinschen <vinschen@redhat.com>
 2002-11-09 15:59:27 +00:00
Ben Lindstrom 007eb912ea - markus@cvs.openbsd.org 2002/11/07 22:35:38 
[scp.c]
     check exit status from ssh, and exit(1) if ssh fails; bug#369;
     binder@arago.de
 2002-11-09 15:54:08 +00:00
Ben Lindstrom b6df73b06a - markus@cvs.openbsd.org 2002/11/07 22:08:07 
[readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
     we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
     because HostbasedAuthentication might be enabled based on the
     target host and ssh-keysign(8) does not know the remote hostname
     and not trust ssh(1) about the hostname, so we add a new option
     EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
 2002-11-09 15:52:31 +00:00
Ben Lindstrom c2faa4a504 - markus@cvs.openbsd.org 2002/11/07 16:28:47 
[sshd.c]
     log to stderr if -ie is given, bug #414, prj@po.cwru.edu
 2002-11-09 15:50:03 +00:00
Ben Lindstrom 8e879cf691 - markus@cvs.openbsd.org 2002/11/05 20:10:37 
[sftp-client.c]
     typo; GaryF@livevault.com
 2002-11-09 15:48:49 +00:00
Ben Lindstrom 41ee2b0d77 - markus@cvs.openbsd.org 2002/11/05 19:45:20 
[monitor.c]
     handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
 2002-11-09 15:47:47 +00:00
Ben Lindstrom 9bda7ae4c6 - markus@cvs.openbsd.org 2002/11/04 10:09:51 
[packet.c]
     log before send disconnect; ok djm@
 2002-11-09 15:46:24 +00:00
Ben Lindstrom 485075e8fa - markus@cvs.openbsd.org 2002/11/04 10:07:53 
[auth.c]
     don't compare against pw_home if realpath fails for pw_home (seen
     on AFS); ok djm@
 2002-11-09 15:45:12 +00:00
Ben Lindstrom ee844912c9 - markus@cvs.openbsd.org 2002/10/23 10:40:16 
[bufaux.c]
     %u for u_int
 2002-11-09 15:43:23 +00:00
Ben Lindstrom 0cc2a47674 - markus@cvs.openbsd.org 2002/10/23 10:32:13 
[packet.c]
     use %u for u_int
 2002-11-09 15:41:39 +00:00
Ben Lindstrom 0851381bf7 - itojun@cvs.openbsd.org 2002/10/16 14:31:48 
[sftp-common.c]
     64bit pedant.  %llu is "unsigned long long".  markus ok
 2002-11-09 15:40:34 +00:00
Damien Miller 885929cd31 fix changelog 2002-10-21 20:26:16 +10:00
Damien Miller 7b3f58cbcd - (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from 
dirk.meyer@dinoex.sub.org
 2002-10-21 10:50:25 +10:00
Damien Miller 5a5da88c59 - (djm) Kill ssh-rand-helper children on timeout, patch from 
dtucker@zip.com.au
 2002-10-21 10:13:35 +10:00
Ben Lindstrom 3e0064781b - (bal) More advanced strsep test by Darren Tucker <dtucker@zip.com.au> 2002-10-16 00:24:03 +00:00
Ben Lindstrom 97e38d8667 20021015 
- (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
 2002-10-16 00:13:52 +00:00
Tim Rice 94f628f0ab [contrib/caldera/openssh.spec] make ssh-agent setgid nobody 2002-10-15 13:16:55 -07:00
Ben Lindstrom dc3c757f57 - (bal) Disable post-authentication Privsep for OSF/1. It conflicts with 
SIA.
 2002-10-04 23:54:54 +00:00
Damien Miller 901119beab - (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2 2002-10-04 11:10:04 +10:00
Damien Miller 510d51300e - (djm) Bump RPM spec version numbers 2002-10-03 11:56:58 +10:00
Damien Miller 7156fc7da6 - markus@cvs.openbsd.org 2002/10/01 13:24:50 
[version.h]
     OpenSSH 3.5
 2002-10-03 11:55:37 +10:00
Damien Miller af9de38c43 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2002/10/01 20:34:12
     [ssh-agent.c]
     allow root to access the agent, since there is no protection from root.
 2002-10-03 11:54:35 +10:00
Damien Miller d8769625fb - stevesk@cvs.openbsd.org 2002/09/27 15:46:21 
[ssh.1]
     clarify compression level protocol 1 only; ok markus@ deraadt@
 2002-09-30 12:00:55 +10:00
Damien Miller e9264973ad - (djm) OpenBSD CVS Sync 
- mickey@cvs.openbsd.org 2002/09/27 10:42:09
     [compat.c compat.h sshd.c]
     add a generic match for a prober, such as sie big brother;
     idea from stevesk@; markus@ ok
 2002-09-30 11:59:21 +10:00
Damien Miller 50f6123eef - (djm) Tidy contrib/, add Makefile for GNOME passphrase dialogs, tweak README 2002-09-30 10:40:39 +10:00
Damien Miller d94e549ea8 - markus@cvs.openbsd.org 2002/09/26 11:38:43 
[auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h]
     krb4 + privsep; ok dugsong@, deraadt@
 2002-09-27 13:25:58 +10:00
Damien Miller d27a76de65 - markus@cvs.openbsd.org 2002/09/25 15:19:02 
[sshd.c]
     typo; pilot@monkey.org
 2002-09-27 13:22:31 +10:00
Damien Miller d681d2602c - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2002/09/25 11:17:16
     [sshd_config]
     sync LoginGraceTime with default
 2002-09-27 13:21:57 +10:00
Tim Rice 81ed518b9b Cray fixes (bug 367) based on patch from Wendy Palm @ cray. 
This does not include the deattack.c fixes.
 2002-09-25 17:38:46 -07:00
Ben Lindstrom 164725f40e l) Fix issue where successfull login does not clear failure counts 
in AIX.  Patch by dtucker@zip.com.au ok by djm
 2002-09-25 23:14:14 +00:00
Damien Miller dcbb6c2dc9 - todd@cvs.openbsd.org 2002/09/24 20:59:44 
[sshd.8]
     tweak the example $HOME/.ssh/rc script to not show on any cmdline the
     sensitive data it handles. This fixes bug # 402 as reported by
     kolya@mit.edu (Nickolai Zeldovich).
     ok markus@ and stevesk@
 2002-09-25 12:20:52 +10:00
Damien Miller ef73f50a12 - markus@cvs.openbsd.org 2002/09/24 08:46:04 
[monitor.c]
     only call kerberos code for authctxt->valid
 2002-09-25 12:20:17 +10:00
Damien Miller 7db40c9e2e - markus@cvs.openbsd.org 2002/09/23 22:11:05 
[monitor.c]
     only call auth_krb5 if kerberos is enabled; ok deraadt@
 2002-09-25 12:19:39 +10:00
Damien Miller b2f844dc51 - (djm) OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2002/09/23 20:46:27
     [canohost.c]
     change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
     non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
 2002-09-25 12:19:08 +10:00
Tim Rice 2c961cecb0 [configure.ac] s/return/exit/ patch by dtucker@zip.com.au 
From autoconf guidelines:
   "Test programs should exit, not return, from main, because on some
    systems (old Suns, at least) the argument to return in main is ignored."
 2002-09-23 16:54:10 -07:00
Damien Miller 6f0a188857 - stevesk@cvs.openbsd.org 2002/09/20 18:41:29 
[auth.c]
     log illegal user here for missing privsep case (ssh2).
     this is executed in the monitor. ok markus@
 2002-09-22 01:26:51 +10:00
Damien Miller 16aed05578 - stevesk@cvs.openbsd.org 2002/09/19 16:03:15 
[serverloop.c]
     log IP address also; ok markus@
 2002-09-22 01:26:27 +10:00
Damien Miller 2138d152b2 - markus@cvs.openbsd.org 2002/09/19 15:51:23 
[ssh-add.c]
     typo; cd@kalkatraz.de
 2002-09-22 01:26:00 +10:00
Damien Miller a0e4559d72 - (djm) OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2002/09/19 14:53:14
     [compat.c]
 2002-09-22 01:25:35 +10:00
Damien Miller 8c4e18a6ec - djm@cvs.openbsd.org 2002/09/19 01:58:18 
[ssh.c sshconnect.c]
     bugzilla.mindrot.org #223 - ProxyCommands don't exit.
     Patch from dtucker@zip.com.au; ok markus@
 2002-09-19 12:05:02 +10:00
Damien Miller 9b037b837a - itojun@cvs.openbsd.org 2002/09/17 07:47:02 
[channels.c]
     don't quit while creating X11 listening socket.
     http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
     got from portable.  markus ok
 2002-09-19 11:54:54 +10:00
Damien Miller 86247e2798 - stevesk@cvs.openbsd.org 2002/09/16 22:03:13 
[sshd.8]
     reference moduli(5) in FILES /etc/moduli.
 2002-09-19 11:51:53 +10:00
Damien Miller 101c4a7bc9 - stevesk@cvs.openbsd.org 2002/09/16 20:12:11 
[sshd_config.5]
     more details on X11Forwarding security issues and threats; ok markus@
 2002-09-19 11:51:21 +10:00
Damien Miller a6eb2b7f8e - stevesk@cvs.openbsd.org 2002/09/16 19:55:33 
[session.c]
     log when _PATH_NOLOGIN exists; ok markus@
 2002-09-19 11:50:48 +10:00
Damien Miller e1383cee9d - stevesk@cvs.openbsd.org 2002/09/13 19:23:09 
[channels.c sshconnect.c sshd.c]
     remove use of SO_LINGER, it should not be needed. error check
     SO_REUSEADDR. fixup comments. ok markus@
 2002-09-19 11:49:37 +10:00
Damien Miller f37e246f85 - stevesk@cvs.openbsd.org 2002/09/12 19:50:36 
[session.c ssh.1]
     add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384.  ok markus@
 2002-09-19 11:47:55 +10:00
Damien Miller db30b12d7b - (djm) OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2002/09/12 19:11:52
     [ssh-agent.c]
     %u for uid print; ok markus@
 2002-09-19 11:46:58 +10:00
Damien Miller 10f3085137 - (djm) Made GNOME askpass programs return non-zero if cancel button is 
pressed.
 2002-09-12 14:49:00 +10:00
Damien Miller 1d87176749 trim from 3.3p1 back (look in CVS for the full changelog) 2002-09-12 10:45:32 +10:00
Damien Miller 9b481510bb - (djm) Sync sys/tree.h with OpenBSD -current. Rename tree.h and 
fake-queue.h to sys-tree.h and sys-queue.h
 2002-09-12 10:43:29 +10:00
Damien Miller 622accfdb7 - djm@cvs.openbsd.org 2002/09/12 00:13:06 
[sftp-int.c]
     zap unused var introduced in last commit
 2002-09-12 10:34:13 +10:00
Damien Miller 771721fa31 - (djm) Added getpeereid() replacement. Properly implemented for systems 
with SO_PEERCRED support. Faked for systems which lack it.
 2002-09-12 10:32:59 +10:00
Damien Miller e1a4981707 - djm@cvs.openbsd.org 2002/09/11 22:41:50 
[sftp.1 sftp-client.c sftp-client.h sftp-common.c sftp-common.h]
     [sftp-glob.c sftp-glob.h sftp-int.c sftp-server.c]
     support for short/long listings and globbing in "ls"; ok markus@
 2002-09-12 09:54:25 +10:00
Damien Miller 789e95dbe9 - stevesk@cvs.openbsd.org 2002/09/11 18:27:26 
[authfd.c authfd.h ssh.c]
     don't connect to agent to test for presence if we've previously
     connected; ok markus@
 2002-09-12 09:52:46 +10:00
Damien Miller b5fdfaae13 - stevesk@cvs.openbsd.org 2002/09/11 17:55:03 
[ssh.1]
     add agent and X11 forwarding warning text from ssh_config.5; ok markus@
 2002-09-12 09:52:03 +10:00
Damien Miller 538f1819d8 - markus@cvs.openbsd.org 2002/09/10 20:24:47 
[ssh-agent.c]
     check the euid of the connecting process with getpeereid(2);
     ok provos deraadt stevesk
 2002-09-12 09:51:10 +10:00
Damien Miller a10f56151b - markus@cvs.openbsd.org 2002/09/09 14:54:15 
[channels.c kex.h key.c monitor.c monitor_wrap.c radix.c uuencode.c]
     signed vs unsigned from -pedantic; ok henning@
 2002-09-12 09:49:15 +10:00
Damien Miller 25162f2518 - itojun@cvs.openbsd.org 2002/09/09 06:48:06 
[auth1.c auth.h auth-krb5.c monitor.c monitor.h]
     [monitor_wrap.c monitor_wrap.h]
     kerberos support for privsep.  confirmed to work by lha@stacken.kth.se
     patch from markus
 2002-09-12 09:47:29 +10:00
Damien Miller 4d53d39b07 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2002/09/08 20:24:08
     [hostfile.h]
     no comma at end of enumerator list
 2002-09-12 09:43:56 +10:00
Damien Miller 71eb0c1550 - (djm) Sync openbsd-compat with OpenBSD -current 2002-09-11 10:29:11 +10:00
Damien Miller c34e03e471 - (djm) Bug #138: Make protocol 1 blowfish work with old OpenSSL. 
Patch from Robert Halubek <rob@adso.com.pl>
 2002-09-10 22:26:17 +10:00
Damien Miller e9994cb4d7 - (djm) Bug #365: Read /.ssh/environment properly under CygWin. 
Patch from Mark Bradshaw <bradshaw@staff.crosswalk.com>
 2002-09-10 21:43:53 +10:00
Damien Miller 005d4560ed - (djm) Add support for building gtk2 password requestor from Redhat beta 2002-09-05 16:53:20 +10:00
Damien Miller 44d5b60336 - (djm) Add gnome-ssh-askpass2.c (gtk2) by merge with patch from 
Nalin Dahyabhai <nalin@redhat.com>
 2002-09-05 16:46:24 +10:00
Damien Miller 539983800d - (djm) Merge openssh-TODO.patch from Redhat (null) beta 2002-09-05 16:32:02 +10:00
Damien Miller c13486300d - (djm) OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2002/09/04 18:52:42
     [servconf.c sshd.8 sshd_config.5]
     default LoginGraceTime to 2m; 1m may be too short for slow systems.
     ok markus@
 2002-09-05 14:35:14 +10:00
Damien Miller fc93d4bd31 - (djm) Patch from itojun@ for Darwin OS: test getaddrinfo, reorder libcrypt 2002-09-04 23:26:29 +10:00
Damien Miller 6b09792a55 - (djm) Fix Redhat RPM build dependancy test 2002-09-04 17:19:04 +10:00
Damien Miller 05913badf3 - stevesk@cvs.openbsd.org 2002/08/29 22:54:10 
[ssh_config.5 sshd_config.5]
     state XAuthLocation is a full pathname
 2002-09-04 16:51:03 +10:00
Damien Miller 50b9a60082 - stevesk@cvs.openbsd.org 2002/08/29 19:49:42 
[ssh.c]
     shrink initial privilege bracket for setuid case; ok markus@
 2002-09-04 16:50:06 +10:00
Damien Miller 9b1dacdf2c - stevesk@cvs.openbsd.org 2002/08/29 16:09:02 
[ssh_config.5]
     more on UsePrivilegedPort and setuid root; ok markus@
 2002-09-04 16:47:35 +10:00
Damien Miller 147bba3453 - stevesk@cvs.openbsd.org 2002/08/29 16:02:54 
[ssh.1 ssh.c]
     deprecate -P as UsePrivilegedPort defaults to no now; ok markus@
 2002-09-04 16:46:06 +10:00
Damien Miller ebc2306629 - stevesk@cvs.openbsd.org 2002/08/29 15:57:25 
[monitor.c session.c sshlogin.c sshlogin.h]
     pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
     NOTE: there are also p-specific parts to this patch. ok markus@
 2002-09-04 16:45:09 +10:00
Damien Miller af65304a3c - stevesk@cvs.openbsd.org 2002/08/27 17:18:40 
[ssh_config.5]
     some warning text for ForwardAgent and ForwardX11; ok markus@
 2002-09-04 16:40:37 +10:00
Damien Miller f7c2391d83 - stevesk@cvs.openbsd.org 2002/08/27 17:13:56 
[ssh-rsa.c]
     RSA_public_decrypt() returns -1 on error so len must be signed;
     ok markus@
 2002-09-04 16:39:48 +10:00
Damien Miller 5a80bba86f - markus@cvs.openbsd.org 2002/08/22 21:45:41 
[session.c]
     send signal name (not signal number) in "exit-signal" message; noticed
     by galb@vandyke.com
 2002-09-04 16:39:02 +10:00
Damien Miller de6f2de8ad - markus@cvs.openbsd.org 2002/08/22 21:33:58 
[auth1.c auth2.c]
     auth_root_allowed() is handled by the monitor in the privsep case,
     so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325
 2002-09-04 16:37:26 +10:00
Damien Miller 061d5b144f - stevesk@cvs.openbsd.org 2002/08/22 20:57:19 
[ssh-agent.c]
     shutdown(SHUT_RDWR) not needed before close here; ok markus@
 2002-09-04 16:33:31 +10:00
Damien Miller 066928648b - stevesk@cvs.openbsd.org 2002/08/22 19:38:42 
[clientloop.c]
     format with current EscapeChar; bugzilla #388 from wknox@mitre.org.
     ok markus@
 2002-09-04 16:32:10 +10:00
Damien Miller 58f3486c74 - stevesk@cvs.openbsd.org 2002/08/22 19:27:53 
[ssh-agent.c]
     use common close function; ok markus@
 2002-09-04 16:31:21 +10:00
Damien Miller 4efdfff6ba - stevesk@cvs.openbsd.org 2002/08/21 20:10:28 
[ssh-agent.c]
     raise listen backlog; ok markus@
 2002-09-04 16:28:18 +10:00
Damien Miller f771ab75f0 - stevesk@cvs.openbsd.org 2002/08/21 19:38:06 
[servconf.c sshd.8 sshd_config sshd_config.5]
     change LoginGraceTime default to 1 minute; ok mouring@ markus@
 2002-09-04 16:25:52 +10:00
Damien Miller b83df8d505 - espie@cvs.openbsd.org 2002/08/21 11:20:59 
[sshd.8]
     `RSA' updated to refer to `public key', where it matters.
     okay markus@
 2002-09-04 16:24:55 +10:00
Damien Miller 6cffb9a8cd - markus@cvs.openbsd.org 2002/08/12 10:46:35 
[ssh-agent.c]
     make ssh-agent setgid, disallow ptrace.
     (note: change not yet made in Makefile)
 2002-09-04 16:20:26 +10:00
Ben Lindstrom 3962119c8a - (bal) [defines.h] Some platforms don't have SIZE_T_MAX. So assign 
it to ULONG_MAX.
 2002-08-21 02:54:11 +00:00
Ben Lindstrom 479b476af6 - stevesk@cvs.openbsd.org 2002/08/17 23:55:01 
[ssh_config.5]
     ordered list here
 2002-08-20 19:04:51 +00:00
Ben Lindstrom 3541f18e10 - stevesk@cvs.openbsd.org 2002/08/17 23:07:14 
[ssh.1]
     ForwardAgent has defaulted to no for over 2 years; be more clear here.
 2002-08-20 19:03:20 +00:00
Ben Lindstrom bd9bf38b00 - stevesk@cvs.openbsd.org 2002/08/12 17:30:35 
[ssh.1 sshd.8 sshd_config.5]
     more PermitUserEnvironment; ok markus@
 2002-08-20 18:54:20 +00:00
Ben Lindstrom 15b6120e63 - stevesk@cvs.openbsd.org 2002/08/09 17:41:12 
[sshd_config.5]
     proxy vs. fake display
 2002-08-20 18:44:24 +00:00
Ben Lindstrom 1f8cf4f4fb - stevesk@cvs.openbsd.org 2002/08/09 17:21:42 
[sshd_config.5]
     use Op for mdoc conformance; from esr@golux.thyrsus.com
     ok aaron@
 2002-08-20 18:43:27 +00:00
Ben Lindstrom d4ee3497ca - stevesk@cvs.openbsd.org 2002/08/08 23:54:52 
[auth.c]
     typo in comment
 2002-08-20 18:42:13 +00:00
Ben Lindstrom e143f61b6f - aaron@cvs.openbsd.org 2002/08/08 13:50:23 
[sshconnect1.c]
     Use & to test if bits are set, not &&; markus@ ok.
 2002-08-20 18:41:15 +00:00
Ben Lindstrom 0deb5d958a - markus@cvs.openbsd.org 2002/08/02 22:20:30 
[ssh-rsa.c]
     replace RSA_verify with our own version and avoid the OpenSSL ASN.1 parser
     for authentication; ok deraadt/djm
 2002-08-20 18:40:03 +00:00
Ben Lindstrom 0e50d846b3 - markus@cvs.openbsd.org 2002/08/02 21:23:41 
[ssh-rsa.c]
     diff is u_int (2x); ok deraadt/provos
 2002-08-20 18:39:14 +00:00
Ben Lindstrom dc7adf2670 - marc@cvs.openbsd.org 2002/08/02 16:00:07 
[ssh.1 sshd.8]
     note that .ssh/environment is only read when
     allowed (PermitUserEnvironment in sshd_config).
     OK markus@
 2002-08-20 18:38:02 +00:00
Ben Lindstrom 0a4f7542da - millert@cvs.openbsd.org 2002/08/02 14:43:15 
[monitor.c monitor_mm.c]
     Change mm_zalloc() sanity checks to be more in line with what
     we do in calloc() and add a check to monitor_mm.c.
     OK provos@ and markus@
 2002-08-20 18:36:25 +00:00
Tim Rice d730b78071 [configure.ac] Display OpenSSL header/library version. 
Patch by dtucker@zip.com.au
 2002-08-13 18:52:10 -07:00
Ben Lindstrom 5d860f02ca - markus@cvs.openbsd.org 2002/07/30 17:03:55 
[auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5]
     add PermitUserEnvironment (off by default!); from dot@dotat.at;
     ok provos, deraadt
 2002-08-01 01:28:38 +00:00
Ben Lindstrom 4b99be899c - markus@cvs.openbsd.org 2002/07/29 18:57:30 
[sshconnect.c]
     print file:line
 2002-08-01 01:26:29 +00:00
Ben Lindstrom 8d631e8515 - mouring@cvs.openbsd.org 2002/07/25 01:16:59 
[sftp.c]
     FallBackToRsh does not exist anywhere else.  Remove it from here.
     OK deraadt.
 2002-08-01 01:25:00 +00:00
Ben Lindstrom 3ed6640532 - markus@cvs.openbsd.org 2002/07/24 16:11:18 
[hostfile.c hostfile.h sshconnect.c]
     print out all known keys for a host if we get a unknown host key,
     see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4

     the ssharp mitm tool attacks users in a similar way, so i'd like to
     pointed out again:
        A MITM attack is always possible if the ssh client prints:
        The authenticity of host 'bla' can't be established.
     (protocol version 2 with pubkey authentication allows you to detect
     MITM attacks)
 2002-08-01 01:21:56 +00:00
Ben Lindstrom 18d2b5d399 - (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de 2002-07-30 19:32:07 +00:00
Kevin Steves 4bdb547ff4 - (stevesk) [ssh-rand-helper.c] RAND_bytes() and SHA1_Final() unsigned 
char arg.
 2002-07-28 20:42:23 +00:00
Kevin Steves e7dbdf7ff8 - (stevesk) [CREDITS] solar 2002-07-28 20:31:18 +00:00
Kevin Steves 6a998ebfa9 - (stevesk) [auth-pam.c] should use PAM_MSG_MEMBER(); from solar 2002-07-28 20:24:07 +00:00
Damien Miller a7609f548f - (djm) Latest config.guess and config.sub from ftp://ftp.gnu.org/gnu/config/ 2002-07-25 14:40:22 +10:00
Damien Miller 6d8d78827e - (djm) Remove some cruft from INSTALL 2002-07-25 14:36:24 +10:00
Ben Lindstrom 1fa330cf35 - stevesk@cvs.openbsd.org 2002/07/15 17:15:31 
[uidswap.c]
     little more debugging; ok markus@
 2002-07-23 21:29:49 +00:00
Ben Lindstrom 41daec7538 - stevesk@cvs.openbsd.org 2002/07/23 16:03:10 
[sshd.c]
     utmp_len is unsigned; display error consistent with other options.
     ok markus@
 2002-07-23 21:15:13 +00:00
Ben Lindstrom 7cea16bad5 - stevesk@cvs.openbsd.org 2002/07/22 17:32:56 
[monitor.c]
     u_int here; ok provos@
 2002-07-23 21:13:40 +00:00
Ben Lindstrom b9051ec9a4 - markus@cvs.openbsd.org 2002/07/22 11:03:06 
[session.c]
     fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors;
 2002-07-23 21:11:09 +00:00
Ben Lindstrom 3cc4450d54 - stevesk@cvs.openbsd.org 2002/07/21 18:34:43 
[auth-options.h]
     remove invalid comment
 2002-07-23 21:07:45 +00:00
Ben Lindstrom 218a07dfb4 - stevesk@cvs.openbsd.org 2002/07/21 18:32:20 
[auth-options.c]
     unneeded includes
 2002-07-23 21:06:45 +00:00
Ben Lindstrom 82ec9836b2 - (bal) sync ID w/ ssh-agent.c 2002-07-23 21:05:17 +00:00
Ben Lindstrom ee8d52d008 - stevesk@cvs.openbsd.org 2002/07/19 17:42:40 
[ssh.c]
     display a warning from ssh when XAuthLocation does not exist or xauth
     returned no authentication data. ok markus@
 2002-07-23 21:03:02 +00:00
Ben Lindstrom 264ee307a8 - markus@cvs.openbsd.org 2002/07/19 15:43:33 
[log.c log.h session.c sshd.c]
     remove fatal cleanups after fork; based on discussions with and code
     from solar.
 2002-07-23 21:01:56 +00:00
Ben Lindstrom 6f52b3e399 - (bal) [bsd-cray.c bsd-cray.h] Part 2 of Cray merger. 2002-07-23 21:00:17 +00:00
Kevin Steves 6fa740ba84 - (stevesk) [auth-pam.c] typo in comment 2002-07-23 00:51:53 +00:00
Kevin Steves 38b050a0f5 - (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be 
freed by the caller; add free_pam_environment() and use it.
 2002-07-23 00:44:07 +00:00
Ben Lindstrom 446d886fa5 - (bal) [monitor_mm.c openbsd-compat/xmmap.h] Move xmmap() defines 
into it's own header.
 2002-07-23 00:03:33 +00:00
Ben Lindstrom 762104ede0 - (bal) [configure.ac] Missing ;; from cray patch. 2002-07-23 00:00:05 +00:00
Ben Lindstrom 232ccf7754 - (bal) [configure.ac defines.h loginrec.c sshd.c sshpty.c] Partial sync 
with Cray (mostly #ifdef renaming).  Patch by wendyp@cray.com.
 2002-07-22 23:34:25 +00:00
Kevin Steves 066e1ab8a3 - (stevesk) [xmmap.c] missing prototype for fatal() 2002-07-22 16:20:29 +00:00
Ben Lindstrom beb5f3304b - (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk 2002-07-22 15:28:53 +00:00
Kevin Steves 287077eaf2 - (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h 2002-07-21 23:59:39 +00:00
Kevin Steves 21e04eb2be - (stevesk) [auth-pam.h] unneeded include 2002-07-21 23:20:07 +00:00
Kevin Steves 7ba4970498 - (stevesk) [auth-pam.h] license 2002-07-21 23:16:00 +00:00
Kevin Steves 3429a1bf60 - (stevesk) [auth-pam.c] cast to avoid initialization type mismatch 
warning on pam_conv struct conversation function.
 2002-07-21 22:49:47 +00:00
Kevin Steves 63007d42ee - (stevesk) [auth-pam.c] merge rest of solar's PAM patch; 
PAM_NEW_AUTHTOK_REQD remains in #if 0 for now.
 2002-07-21 17:57:01 +00:00
Kevin Steves 6cdecd0892 - (stevesk) [auth-pam.c] merge cosmetic changes from solar's 
openssh-3.4p1-owl-password-changing.diff
 2002-07-21 17:26:54 +00:00
Kevin Steves 3a8819102c - (stevesk) [ssh-keygen.c] bug #231: always init/seed_rng(). 2002-07-20 19:05:40 +00:00
Tim Rice f028f1e460 [configure.ac] test for libxnet on HP. Patch by dtucker@zip.com.au 2002-07-19 12:41:10 -07:00
Tim Rice f1a1001f0e [contrib/solaris/buildpkg.sh] create privsep user/group if needed. 
Patch by dtucker@zip.com.au
 2002-07-19 11:57:57 -07:00
Tim Rice eae876e8ae [includes.h] Bug 267 add stdint.h 2002-07-18 11:49:32 -07:00
Tim Rice 907881ec8e [configure.ac] Bug 267 rework int64_t test. 2002-07-18 11:44:50 -07:00
Tim Rice 76645849d3 [monitor_mm.c] add missing declaration for xmmap(). Reported 
by ayamura@ayamura.org
 2002-07-18 11:34:29 -07:00
Tim Rice b8b23047f8 [defines.h] Bug 313 patch by dirk.meyer@dinoex.sub.org 2002-07-18 09:31:51 -07:00
Tim Rice e22be3b11e [configure.ac] change how we do paths in AC_PATH_PROGS tests 
for autoconf 2.53. Based on a patch by jrj@purdue.edu
 2002-07-17 19:20:07 -07:00
Ben Lindstrom 2faabf3d79 - (bal) aixbff package updated by dtucker@zip.com.au 2002-07-18 01:04:50 +00:00
Tim Rice ffaf445371 [contrib/solaris/opensshd.in] Only kill sshd if .pid file found 2002-07-16 14:24:38 -07:00
Ben Lindstrom 104c3feb69 - (bal) Privsep user creation support in Solaris buildpkg.sh by 
dtucker@zip.com.au
 2002-07-15 18:49:20 +00:00
Ben Lindstrom 938b828566 - (bal) Remove unused tty defined in do_setusercontext() pointed out by 
dtucker@zip.com.au plus a a more KNF since I am near it.
 2002-07-15 17:58:34 +00:00
Ben Lindstrom c491b0def1 - markus@cvs.openbsd.org 2002/07/12 15:50:17 
[cipher.c]
     EVP_CIPH_CUSTOM_IV for our own rijndael
 2002-07-15 17:52:49 +00:00
Ben Lindstrom 728aa7e18c - itojun@cvs.openbsd.org 2002/07/12 13:29:09 
[sshconnect.c]
     print connect failure during debugging mode.
 2002-07-15 17:48:11 +00:00
Tim Rice 370e0bac16 [loginrec.c] Bug 348: add missing found = 1; to wtmpx_islogin() 
report by rodney@bond.net
 2002-07-14 15:50:51 -07:00
Tim Rice cdb82946b6 [loginrec.c] Bug 347: Fix typo (WTMPX_FILE) report by rodney@bond.net 2002-07-14 15:33:20 -07:00
Tim Rice a091159884 [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris. 
report by chris@by-design.net
 2002-07-14 14:43:57 -07:00
Tim Rice 40017b0e7a (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c 
openbsd-compat/Makefile.in] support compression on platforms that
  have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c
  Based on patch from nalin@redhat.com of code extracted from Owl's package
 2002-07-14 13:36:49 -07:00
Tim Rice 952101952f [Makefile.in] replace "id sshd" with "sshd -t" 2002-07-14 10:02:20 -07:00
Tim Rice 4796a291f1 [configure.ac] remove unused filepriv line 2002-07-12 18:11:24 -07:00
Tim Rice 1363b3c987 [Makefile.in] quiet down install-files: and check-user: 2002-07-12 09:04:06 -07:00
Ben Lindstrom 6f893880cc - deraadt@cvs.openbsd.org 2002/07/10 17:53:54 
[rijndael.c]
     use right sizeof in memcpy; markus ok
 2002-07-11 04:01:29 +00:00
Ben Lindstrom a6cd75c49e - itojun@cvs.openbsd.org 2002/07/10 10:28:15 
[sshconnect.c]
     bark if all connection attempt fails.
 2002-07-11 04:00:19 +00:00
Ben Lindstrom 9c44554a41 - stevesk@cvs.openbsd.org 2002/07/09 17:46:25 
[sshd_config.5]
     clarify no preference ordering in protocol list; ok markus@
 2002-07-11 03:59:18 +00:00
Ben Lindstrom ba8df7d76d - itojun@cvs.openbsd.org 2002/07/09 12:04:02 
[sshconnect.c]
     ed static function (less warnings)
 2002-07-11 03:58:11 +00:00
Ben Lindstrom e982773d2a - itojun@cvs.openbsd.org 2002/07/09 11:56:27 
[canohost.c]
     suppress log on reverse lookup failiure, as there's no real value in
     doing so.
     markus ok
 2002-07-11 03:56:46 +00:00
Ben Lindstrom efee05958c - itojun@cvs.openbsd.org 2002/07/09 11:56:50 
[sshconnect.c]
     silently try next address on connect(2).  markus ok
 2002-07-11 03:54:43 +00:00
Tim Rice 6827395b07 [contrib/cygwin/ssh-host-config] explicitely sets the permissions 
on /var/empty to 755	Patch by vinschen@redhat.com
 2002-07-10 07:40:11 -07:00
Ben Lindstrom 99a4e14fe0 - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms 
lacking that concept can share it. Patch by vinschen@redhat.com
 2002-07-09 14:06:40 +00:00
Tim Rice cbb9066d2d [configure.ac] fix libc89 utimes test. Mention default path for 
--with-privsep-path=
 2002-07-08 19:17:10 -07:00
Tim Rice 2d0bf3dcfd [Makefile.in] workaround for broken pakadd on some systems. 
With "ln -s ssh$(EXEEXT) $(DESTDIR)$(bindir)/slogin" you wild end up with
   lrwxrwxrwx    1 root     sys            4 Jul  8 18:43 slogin -> /ssh
after the package was installed.
 2002-07-08 19:10:05 -07:00
Tim Rice 88177245cb [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to 
work in a jumpstart environment. patch by kbrint@rufus.net
 2002-07-08 19:02:10 -07:00
Ben Lindstrom 5c98db50bf - (bal) Minor KNF on ssh-keyscan.c 
This is really from Theo's patch.  I missed it by looking at the wrong
function call.
 2002-07-07 22:25:29 +00:00
Ben Lindstrom 6a9fbc96c0 - stevesk@cvs.openbsd.org 2002/07/06 17:47:58 
[ssh-keyscan.c]
     unused variable
 2002-07-07 22:19:13 +00:00
Ben Lindstrom 965710f66e - deraadt@cvs.openbsd.org 2002/07/06 01:01:26 
[ssh-keyscan.c]
     KNF, realloc fix, and clean usage
 2002-07-07 22:17:22 +00:00
Ben Lindstrom 8e8ef2a3ff - deraadt@cvs.openbsd.org 2002/07/06 01:00:49 
[log.c]
     KNF
 2002-07-07 22:14:55 +00:00
Ben Lindstrom 2bf759cba5 - markus@cvs.openbsd.org 2002/07/04 10:41:47 
[key.c monitor_wrap.c ssh-dss.c ssh-rsa.c]
     don't allocate, copy, and discard if there is not interested in the data;
     ok deraadt@
 2002-07-07 22:13:31 +00:00
Ben Lindstrom 8b2eecdf9f - deraadt@cvs.openbsd.org 2002/07/04 08:12:15 
[channels.c packet.c]
     blah blah minor nothing as i read and re-read and re-read...
 2002-07-07 22:11:51 +00:00
Ben Lindstrom c51b924a80 - deraadt@cvs.openbsd.org 2002/07/04 04:15:33 
[key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c]
     patch memory leaks; grendel@zeitbombe.org
 2002-07-07 22:10:15 +00:00
Ben Lindstrom 8abe736dd7 - (bal) [realpath.c] Updated with OpenBSD tree. 2002-07-07 22:07:10 +00:00
Tim Rice e475a3cf3b [contrib/cygwin/ssh-host-config] sshd account creation fixes 
patch from vinschen@redhat.com
 2002-07-07 14:07:46 -07:00
Tim Rice 9dd30817ef [acconfig.h configure.ac sshd.c] s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/ 2002-07-07 13:43:36 -07:00
Tim Rice cc25206d31 [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH) 2002-07-07 13:30:45 -07:00
Tim Rice b66e292912 [contrib/cygwin/ssh-host-config] double slash corrction 
from vinschen@redhat.com
 2002-07-05 16:22:32 -07:00
Tim Rice e958ed3624 [configure.ac] AIX 4.2.1 has authenticate() in libs. 
Reported by Darren Tucker <dtucker@zip.com.au>
 2002-07-05 07:12:33 -07:00
Ben Lindstrom d00a1a1a03 - (bal) One too many nulls in ports-aix.c 2002-07-04 19:33:49 +00:00
Ben Lindstrom 604de56009 - (bal) glob.c defines TILDE and AIX also defines it. #undef it first. 
bug #265
 2002-07-04 18:20:51 +00:00
Ben Lindstrom 92ea0eadbe - (bal) Limit data to TTY for AIX only (Newer versions can't handle the 
faster data rate)  Bug #124
 2002-07-04 18:11:09 +00:00
Ben Lindstrom 51b2488aad - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess. 2002-07-04 03:08:40 +00:00
Ben Lindstrom ee3a8e4abc - (bal) Missed Makefile.in change. keysign needs readconf.o 2002-07-04 03:07:15 +00:00
Ben Lindstrom e06eb68226 - (bal) Failed password attempts don't increment counter on AIX. Bug #145 2002-07-04 00:27:21 +00:00
Ben Lindstrom 5d35a2f582 - markus@cvs.openbsd.org 2002/07/03 14:21:05 
[ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
     re-enable ssh-keysign's sbit, but make ssh-keysign read
     /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
     globally. based on discussions with deraadt, itojun and sommerfeld;
     ok itojun@
 2002-07-04 00:19:40 +00:00
Ben Lindstrom 43ce2c86a8 - markus@cvs.openbsd.org 2002/07/03 09:55:38 
[ssh-keysign.c]
     use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
     in order to avoid a possible Kocher timing attack pointed out by Charles
     Hannum; ok provos@
 2002-07-04 00:17:33 +00:00
Ben Lindstrom 343010ad50 - markus@cvs.openbsd.org 2002/07/01 19:48:46 
[sshconnect2.c]
     for compression=yes, we fallback to no-compression if the server does
     not support compression, vice versa for compression=no. ok mouring@
 2002-07-04 00:16:25 +00:00
Ben Lindstrom fd2aacedab - deraadt@cvs.openbsd.org 2002/07/01 16:15:25 
[msg.c]
     %u
 2002-07-04 00:15:22 +00:00
Ben Lindstrom a962c2fb35 - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 
[auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
      monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
      sshconnect2.c sshd.c]
     minor KNF
 2002-07-04 00:14:17 +00:00
Ben Lindstrom 5a9d0eaba6 - deraadt@cvs.openbsd.org 2002/06/30 21:54:16 
[auth2.c session.c sshd.c]
     lint asks that we use names that do not overlap
 2002-07-04 00:12:53 +00:00
Ben Lindstrom 810af968b8 - deraadt@cvs.openbsd.org 2002/06/28 23:05:06 
[sshd.c]
     gidset[2] -> gidset[1]; markus ok
 2002-07-04 00:11:40 +00:00
Ben Lindstrom fbbfa8422f - deraadt@cvs.openbsd.org 2002/06/28 10:08:25 
[sshd.c]
     range check -u option at invocation
 2002-07-04 00:10:34 +00:00
Ben Lindstrom b1bdc5a6ad - deraadt@cvs.openbsd.org 2002/06/28 01:50:37 
[monitor_wrap.c]
     use ssize_t
 2002-07-04 00:09:26 +00:00
Ben Lindstrom a79616278e - millert@cvs.openbsd.org 2002/06/28 01:49:31 
[monitor_mm.c]
     tree(3) wants an int return value for its compare functions and
     the difference between two pointers is not an int.  Just do the
     safest thing and store the result in a long and then return 0,
     -1, or 1 based on that result.
 2002-07-04 00:08:23 +00:00
Ben Lindstrom edd098b196 - stevesk@cvs.openbsd.org 2002/06/27 19:49:08 
[ssh-keyscan.c]
     use convtime(); ok markus@
 2002-07-04 00:07:13 +00:00
Ben Lindstrom eec16fcb27 - deraadt@cvs.openbsd.org 2002/06/27 10:35:47 
[auth2-none.c monitor.c sftp-client.c]
     use xfree()
 2002-07-04 00:06:15 +00:00
Ben Lindstrom 35a2cb9b41 - deraadt@cvs.openbsd.org 2002/06/27 09:08:00 
[monitor.c]
     improve mm_zalloc check; markus ok
 2002-07-04 00:05:06 +00:00
Ben Lindstrom 04f9af7dfc - markus@cvs.openbsd.org 2002/06/27 08:49:44 
[dh.c ssh-keyscan.c sshconnect.c]
     more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
 2002-07-04 00:03:56 +00:00
Ben Lindstrom 723e29aa20 - (bal) minor correction to utimes() replacement. Patch by 
onoe@sm.sony.co.jp
 2002-07-03 23:50:00 +00:00
Ben Lindstrom 6dbf3001ec - (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com 2002-07-03 23:33:19 +00:00
Damien Miller 23fe57c51c - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc & 
friends consistently. Spotted by Solar Designer <solar@openwall.com>
 2002-07-02 17:08:23 +10:00
Ben Lindstrom de07cbf1ed - (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style 
clean up while I'm near it.
 2002-06-28 16:48:11 +00:00
Ben Lindstrom 68e8311321 - (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported. 
Bug #303
 2002-06-28 00:37:33 +00:00
Ben Lindstrom dd21fe9ca0 - (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise 
have issues of our fixes not propogating right (ie bcopy instead of
   memmove).  OK tim
 2002-06-27 18:23:20 +00:00
Ben Lindstrom 596273516c - (bal) Cygwin uid0 fix by vinschen@redhat.com 2002-06-27 18:02:21 +00:00
Kevin Steves bdf3e89f1a 20020628 
- (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
   options should contain default value.  from solar.
 2002-06-27 16:59:50 +00:00
Ben Lindstrom fe275982e3 - markus@cvs.openbsd.org 2002/06/26 22:27:32 
[ssh-keysign.c]
     bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
 2002-06-27 00:25:07 +00:00
Ben Lindstrom 085124998d - deraadt@cvs.openbsd.org 2002/06/26 15:00:32 
[monitor_wrap.c]
     more %u
 2002-06-27 00:23:02 +00:00
Ben Lindstrom 3390749e4b - markus@cvs.openbsd.org 2002/06/26 14:51:33 
[ssh-add.c]
     fix exit code for -X/-x
 2002-06-27 00:21:59 +00:00
Ben Lindstrom d5bf46e4c0 - deraadt@cvs.openbsd.org 2002/06/26 14:50:04 
[monitor_fdpass.c]
     use ssize_t for recvmsg() and sendmsg() return
 2002-06-27 00:21:03 +00:00
Ben Lindstrom d5502180cd - deraadt@cvs.openbsd.org 2002/06/26 14:49:36 
[monitor.c]
     correct %u
 2002-06-27 00:12:57 +00:00
Tim Rice a8959ae2b7 [contrib/caldera/openssh.spec] remove 2 configure options I put in by mistake 2002-06-26 11:05:32 -07:00
Damien Miller 3e36f9f4ff - (djm) Release 3.4p1 2002-06-26 23:59:10 +10:00
Damien Miller fb7fd9580c - markus@cvs.openbsd.org 2002/06/26 13:55:37 
[auth2-chall.c]
     make sure # of response matches # of queries, fixes int overflow;
     from ISS
 2002-06-26 23:58:39 +10:00
Damien Miller 7868202d56 - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS 2002-06-26 23:57:59 +10:00
Damien Miller d4b11d62e9 - (djm) Update spec files for release 2002-06-26 23:57:12 +10:00
Damien Miller 990070a8c5 - deraadt@cvs.openbsd.org 2002/06/26 13:49:26 
[session.c]
     disclose less information from environment files; based on input
     from djm, and dschultz@uclink.Berkeley.EDU
 2002-06-26 23:51:06 +10:00
Damien Miller 530a754d38 - deraadt@cvs.openbsd.org 2002/06/26 13:20:57 
[monitor.c]
     be careful in mm_zalloc
 2002-06-26 23:27:11 +10:00
Damien Miller 136d4418e3 - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai 
<nalin@redhat.com>
 2002-06-26 23:05:16 +10:00
Damien Miller f49035a0bb - (djm) Require krb5 devel for RPM build w/ KrbV 2002-06-26 19:42:52 +10:00
Damien Miller a0796cad4a - markus@cvs.openbsd.org 2002/06/26 08:58:26 
[session.c]
     limit # of env vars to 1000; ok deraadt/djm
 2002-06-26 19:15:07 +10:00
Damien Miller 9403aa2f79 - markus@cvs.openbsd.org 2002/06/26 08:55:02 
[channels.c]
     limit # of channels to 10000
 2002-06-26 19:14:43 +10:00
Damien Miller 468cd716a5 - markus@cvs.openbsd.org 2002/06/26 08:54:18 
[buffer.c]
     limit append to 1MB and buffers to 10MB
 2002-06-26 19:14:25 +10:00
Damien Miller aa15137c15 - (djm) OpenBSD CVS Sync 
- markus@cvs.openbsd.org 2002/06/26 08:53:12
     [bufaux.c]
     limit size of BNs to 8KB; ok provos/deraadt
 2002-06-26 19:14:08 +10:00
Damien Miller f18cd162d3 - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@ 2002-06-26 19:12:59 +10:00
Tim Rice 6de3dfd929 [contrib/caldera/openssh.spec] add support for privsep 2002-06-25 19:28:55 -07:00
Kevin Steves 40b011c7fe - (stevesk) [README.privsep] more for sshd pseudo-account. 2002-06-26 00:43:57 +00:00
Ben Lindstrom 4e3c631b70 - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP, 
but it all damned lies.
 2002-06-26 00:29:02 +00:00
Tim Rice e04ee923d9 UnixWare tip is no longer needed. 2002-06-25 17:25:47 -07:00
Ben Lindstrom a95fd3f8ad - (bal) added back in error check for mmap(). I screwed up, Pointed 
out by stevesk@
 2002-06-26 00:22:57 +00:00
Tim Rice 2b3897c3cc [Makefile.in] fix test on installing ssh-rand-helper.8 2002-06-25 16:45:42 -07:00
Ben Lindstrom 5223727672 - (bal) Updated AIX package build. Patch by dtucker@zip.com.au 2002-06-25 23:38:47 +00:00
Ben Lindstrom fbcc3f71f2 - markus@cvs.openbsd.org 2002/06/25 18:51:04 
[sshd.c]
     lightweight do_setusercontext after chroot()
 2002-06-25 23:24:18 +00:00
Ben Lindstrom 6398a0ef12 - markus@cvs.openbsd.org 2002/06/25 16:22:42 
[authfd.c]
     unnecessary cast
 2002-06-25 23:22:54 +00:00
Ben Lindstrom c2df3ec0c0 - deraadt@cvs.openbsd.org 2002/06/24 17:57:20 
[sftp-server.c sshpty.c]
     explicit (u_int) for uid and gid
 2002-06-25 23:21:41 +00:00
Ben Lindstrom 9b4139742f - itojun@cvs.openbsd.org 2002/06/24 15:49:22 
[msg.c]
     printf type pedant
 2002-06-25 23:20:18 +00:00
Ben Lindstrom c5a7f4fdf9 - markus@cvs.openbsd.org 2002/06/24 14:55:38 
[authfile.c kex.c ssh-agent.c]
     cat to (void) when output from buffer_get_X is ignored
 2002-06-25 23:19:13 +00:00
Ben Lindstrom 4fed2be856 - markus@cvs.openbsd.org 2002/06/24 14:33:27 
[channels.c channels.h clientloop.c serverloop.c]
     move channel counter to u_int
 2002-06-25 23:17:36 +00:00
Ben Lindstrom b48057b7dc - markus@cvs.openbsd.org 2002/06/24 13:12:23 
[ssh-agent.1]
     the socket name contains ssh-agent's ppid; via mpech@ from form@
 2002-06-25 23:16:31 +00:00
Ben Lindstrom daa2179bd0 - markus@cvs.openbsd.org 2002/06/23 21:34:07 
[channels.c]
     tcode is u_int
 2002-06-25 23:15:30 +00:00
Kevin Steves cfae58c059 - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM 2002-06-25 22:43:19 +00:00
Tim Rice 8eff319298 [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus 
for Cygwin, Cray, & SCO
 2002-06-25 15:35:15 -07:00
Ben Lindstrom b129be657c 20020626 
- (bal) moved aix_usrinfo() and noted not setting real TTY.  Patch by
   dtucker@zip.com.au
 2002-06-25 17:12:26 +00:00
Tim Rice 78688d7a45 Sync with Caldera 2002-06-25 10:07:25 -07:00
Ben Lindstrom 6b0c96ab59 - (bal) if mmap() is substandard, don't allow compression on server side. 
Post 'event' we will add more options.
 2002-06-25 03:22:03 +00:00
Ben Lindstrom aa83b984ca - (bal) Started list of PrivSep issues in TODO 2002-06-25 02:28:22 +00:00
Damien Miller d3f6ad2cc0 - (djm) Create privsep directory and warn if privsep user is missing 
during make install
 2002-06-25 10:24:47 +10:00
Kevin Steves d48663602d - (stevesk) [README.privsep] minor updates 2002-06-24 16:49:22 +00:00
Kevin Steves 34f0d8f404 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh 2002-06-24 16:26:49 +00:00
Ben Lindstrom 3f58474214 - deraadt@cvs.openbsd.org 2002/06/23 21:10:02 
[packet.c]
     packet_get_int() returns unsigned for reason & seqnr
 2002-06-23 21:49:25 +00:00
Ben Lindstrom a9d2c89fc5 - deraadt@cvs.openbsd.org 2002/06/23 21:06:41 
[channels.c channels.h session.c session.h]
     display, screen, row, col, xpixel, ypixel are u_int; markus ok
  - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
    xpixel are u_int.
 2002-06-23 21:48:28 +00:00
Ben Lindstrom 8ada5d0d0d - deraadt@cvs.openbsd.org 2002/06/23 21:06:13 
[sshpty.c]
     KNF
 2002-06-23 21:42:50 +00:00
Ben Lindstrom e23f4a3d28 - deraadt@cvs.openbsd.org 2002/06/23 20:39:45 
[session.c]
     compression_level is u_int
 2002-06-23 21:40:16 +00:00
Ben Lindstrom 822b634099 - deraadt@cvs.openbsd.org 2002/06/23 10:29:52 
[ssh-agent.c sshd.c]
     some minor KNF and %u
 2002-06-23 21:38:49 +00:00
Ben Lindstrom e135363422 - deraadt@cvs.openbsd.org 2002/06/23 09:46:51 
[bufaux.c servconf.c]
     minor KNF.  things the fingers do while you read
 2002-06-23 21:29:23 +00:00
Ben Lindstrom 58d3b7224f - deraadt@cvs.openbsd.org 2002/06/23 09:39:55 
[ssh-keygen.c]
     u_int stuff
 2002-06-23 21:28:13 +00:00
Ben Lindstrom b1f483f472 - deraadt@cvs.openbsd.org 2002/06/23 09:30:14 
[sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
      sftp.c]
     bunch of u_int vs int stuff
 2002-06-23 21:27:18 +00:00
Ben Lindstrom 5c3855210e - deraadt@cvs.openbsd.org 2002/06/23 03:30:58 
[scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
      sshpty.c]
     various KNF and %d for unsigned
 2002-06-23 21:23:20 +00:00
Ben Lindstrom 836f0e9d9a - deraadt@cvs.openbsd.org 2002/06/23 03:26:19 
[cipher.c key.c]
     KNF
 2002-06-23 21:21:30 +00:00
Ben Lindstrom 2953d0fb4e - deraadt@cvs.openbsd.org 2002/06/23 03:25:50 
[tildexpand.c]
     KNF
 2002-06-23 21:20:34 +00:00
Ben Lindstrom e1c0912cb6 - stevesk@cvs.openbsd.org 2002/06/22 23:09:51 
[monitor.c]
     save auth method before monitor_reset_key_state(); bugzilla bug #284;
     ok provos@
 2002-06-23 00:38:24 +00:00
Ben Lindstrom 57f08005d3 - stevesk@cvs.openbsd.org 2002/06/22 20:05:27 
[sshd.c]
     don't call setsid() if debugging or run from inetd; no "Operation not
     permitted" errors now; ok millert@ markus@
 2002-06-23 00:37:10 +00:00
Ben Lindstrom 959de99aa0 - stevesk@cvs.openbsd.org 2002/06/22 16:45:29 
[ssh-agent.1 sshd.8 sshd_config.5]
     use process ID vs. pid/PID/process identifier
 2002-06-23 00:35:25 +00:00
Ben Lindstrom c06bf70b41 - stevesk@cvs.openbsd.org 2002/06/22 16:41:57 
[scp.1]
     typo
 2002-06-23 00:34:37 +00:00
Ben Lindstrom 2dfacb3d40 - stevesk@cvs.openbsd.org 2002/06/22 16:40:19 
[sshd.c]
     check /var/empty owner mode; ok provos@
 2002-06-23 00:33:47 +00:00
Ben Lindstrom 624e3f2065 - stevesk@cvs.openbsd.org 2002/06/22 16:32:54 
[sshd.8]
     add /var/empty in FILES section
 2002-06-23 00:32:57 +00:00
Ben Lindstrom c001cd3577 - naddy@cvs.openbsd.org 2002/06/22 11:51:39 
[ssh.1]
     typo
 2002-06-23 00:32:11 +00:00
Ben Lindstrom bf69e3b95d - stevesk@cvs.openbsd.org 2002/06/22 02:40:23 
[ssh.1]
     section 5 not 4 for ssh_config
 2002-06-23 00:31:24 +00:00
Ben Lindstrom 5590aa5b1f - OpenBSD CVS Sync 
- stevesk@cvs.openbsd.org 2002/06/22 02:00:29
     [ssh.h]
     correct comment
 2002-06-23 00:30:30 +00:00
Ben Lindstrom 883844dc07 - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au 2002-06-23 00:20:50 +00:00
Ben Lindstrom 1a1b851775 - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset. 2002-06-23 00:18:15 +00:00
Kevin Steves 90d5de7670 - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX. 2002-06-22 18:51:48 +00:00
Ben Lindstrom ee9ac35fc2 - (bal) getopt now can be staticly compiled on those platforms missing 
optreset.  Patch by binder@arago.de
 2002-06-22 00:26:59 +00:00
Damien Miller f102bf6e50 - (djm) Release 3.3p1 2002-06-22 01:44:45 +10:00