2003-01-24 00:34:52 +00:00
|
|
|
20030124
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- jmc@cvs.openbsd.org 2003/01/23 08:58:47
|
|
|
|
|
[sshd_config.5]
|
|
|
|
|
typos; ok millert@
|
|
|
|
|
|
2003-01-23 06:41:20 +00:00
|
|
|
20030123
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- djm@cvs.openbsd.org 2003/01/23 00:03:00
|
|
|
|
|
[auth1.c]
|
|
|
|
|
Don't log TIS auth response; "get rid of it" - markus@
|
|
|
|
|
|
2003-01-22 00:47:19 +00:00
|
|
|
20030122
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- marc@cvs.openbsd.org 2003/01/21 18:14:36
|
|
|
|
|
[ssh-agent.1 ssh-agent.c]
|
|
|
|
|
Add a -t life option to ssh-agent that set the default lifetime.
|
|
|
|
|
The default can still be overriden by using -t in ssh-add.
|
|
|
|
|
OK markus@
|
2003-01-22 04:42:26 +00:00
|
|
|
- (djm) Reorganise PAM & SIA password handling to eliminate some common code
|
2003-01-22 06:53:16 +00:00
|
|
|
- (djm) Sync regress with OpenBSD -current
|
2003-01-22 00:47:19 +00:00
|
|
|
|
2003-01-20 02:15:10 +00:00
|
|
|
20030120
|
|
|
|
|
- (djm) Fix compilation for NetBSD from dtucker@zip.com.au
|
2003-01-20 04:15:13 +00:00
|
|
|
- (tim) [progressmeter.c] make compilers without long long happy.
|
2003-01-20 04:20:24 +00:00
|
|
|
- (tim) [configure.ac] Add -belf to build ELF binaries on OpenServer 5 when
|
|
|
|
|
using cc. (gcc already did)
|
2003-01-20 02:15:10 +00:00
|
|
|
|
2003-01-18 05:24:06 +00:00
|
|
|
20030118
|
|
|
|
|
- (djm) Revert fix for Bug #442 for now.
|
|
|
|
|
|
2003-01-16 23:31:38 +00:00
|
|
|
20030117
|
|
|
|
|
- (djm) Bug #470: Detect strnvis, not strvis in configure.
|
|
|
|
|
From d_wllms@lanl.gov
|
|
|
|
|
|
2003-01-16 04:39:13 +00:00
|
|
|
20030116
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- djm@cvs.openbsd.org 2003/01/16 03:41:55
|
|
|
|
|
[sftp-int.c]
|
|
|
|
|
explicitly use first glob result
|
|
|
|
|
|
2003-01-14 11:22:11 +00:00
|
|
|
20030114
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- fgsch@cvs.openbsd.org 2003/01/10 23:23:24
|
|
|
|
|
[sftp-int.c]
|
|
|
|
|
typo; from Nils Nordman <nino at nforced dot com>.
|
2003-01-14 11:22:43 +00:00
|
|
|
- markus@cvs.openbsd.org 2003/01/11 18:29:43
|
|
|
|
|
[log.c]
|
|
|
|
|
set fatal_cleanups to NULL in fatal_remove_all_cleanups();
|
|
|
|
|
dtucker@zip.com.au
|
2003-01-14 11:23:23 +00:00
|
|
|
- markus@cvs.openbsd.org 2003/01/12 16:57:02
|
|
|
|
|
[progressmeter.c]
|
|
|
|
|
allow WARNINGS=yes; ok djm@
|
2003-01-14 11:24:05 +00:00
|
|
|
- djm@cvs.openbsd.org 2003/01/13 11:04:04
|
|
|
|
|
[sftp-int.c]
|
|
|
|
|
make cmds[] array static to avoid conflict with BSDI libc.
|
2003-01-14 11:24:19 +00:00
|
|
|
mindrot bug #466. Fix from mdev@idg.nl; ok markus@
|
2003-01-14 11:24:47 +00:00
|
|
|
- djm@cvs.openbsd.org 2003/01/14 10:58:00
|
|
|
|
|
[sftp-client.c sftp-int.c]
|
|
|
|
|
Don't try to upload or download non-regular files. Report from
|
|
|
|
|
apoloval@pantuflo.escet.urjc.es; ok markus@
|
2003-01-14 11:22:11 +00:00
|
|
|
|
|
|
|
|
20030113
|
2003-01-12 23:04:58 +00:00
|
|
|
- (djm) Rework openbsd-compat/setproctitle.c a bit: move emulation type
|
|
|
|
|
detection to configure.ac. Prompted by stevesk@
|
2003-01-13 05:55:22 +00:00
|
|
|
- (djm) Bug #467: Add a --disable-strip option to turn off stripping of
|
|
|
|
|
installed binaries. From mdev@idg.nl
|
2003-01-12 23:04:58 +00:00
|
|
|
|
2003-01-09 22:53:12 +00:00
|
|
|
20030110
|
|
|
|
|
- (djm) Enable new setproctitle emulation for Linux, AIX and HP/UX. More
|
|
|
|
|
systems may be added later.
|
2003-01-10 10:40:00 +00:00
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- djm@cvs.openbsd.org 2003/01/08 23:53:26
|
|
|
|
|
[sftp.1 sftp.c sftp-int.c sftp-int.h]
|
|
|
|
|
Cleanup error handling for batchmode
|
|
|
|
|
Allow blank lines and comments in input
|
|
|
|
|
Ability to suppress abort on error in batchmode ("-put blah")
|
|
|
|
|
Fixes mindrot bug #452; markus@ ok
|
2003-01-10 10:43:24 +00:00
|
|
|
- fgsch@cvs.openbsd.org 2003/01/10 08:19:07
|
2003-01-10 10:46:02 +00:00
|
|
|
[scp.c sftp.1 sftp.c sftp-client.c sftp-int.c progressmeter.c]
|
|
|
|
|
[progressmeter.h]
|
2003-01-10 10:43:24 +00:00
|
|
|
sftp progress meter support.
|
|
|
|
|
original diffs by Nils Nordman <nino at nforced dot com> via
|
|
|
|
|
markus@, merged to -current by me, djm@ ok.
|
2003-01-10 10:43:58 +00:00
|
|
|
- djm@cvs.openbsd.org 2003/01/10 08:48:15
|
|
|
|
|
[sftp-client.c]
|
|
|
|
|
Simplify and avoid redundancy in packet send and receive
|
|
|
|
|
functions; ok fgs@
|
2003-01-10 10:44:48 +00:00
|
|
|
- djm@cvs.openbsd.org 2003/01/10 10:29:35
|
|
|
|
|
[scp.c]
|
|
|
|
|
Don't ftruncate after write error, creating sparse files of
|
|
|
|
|
incorrect length
|
|
|
|
|
mindrot bug #403, reported by rusr@cup.hp.com; ok markus@
|
2003-01-10 10:45:12 +00:00
|
|
|
- djm@cvs.openbsd.org 2003/01/10 10:32:54
|
|
|
|
|
[channels.c]
|
|
|
|
|
hush socket() errors, except last. Fixes mindrot bug #408; ok markus@
|
2003-01-09 22:53:12 +00:00
|
|
|
|
2003-01-08 00:16:48 +00:00
|
|
|
20030108
|
|
|
|
|
- (djm) Sync openbsd-compat/ with OpenBSD -current
|
2003-01-08 01:37:03 +00:00
|
|
|
- (djm) Avoid redundant xstrdup/xfree in auth2-pam.c. From Solar via markus@
|
2003-01-08 03:04:09 +00:00
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2003/01/01 18:08:52
|
|
|
|
|
[channels.c]
|
|
|
|
|
move big output buffer messages to debug2
|
2003-01-08 03:04:53 +00:00
|
|
|
- djm@cvs.openbsd.org 2003/01/06 23:51:22
|
|
|
|
|
[sftp-client.c]
|
|
|
|
|
Fix "get -p" download to not add user-write perm. mindrot bug #426
|
|
|
|
|
reported by gfernandez@livevault.com; ok markus@
|
2003-01-08 03:05:23 +00:00
|
|
|
- fgsch@cvs.openbsd.org 2003/01/07 23:42:54
|
|
|
|
|
[sftp.1]
|
|
|
|
|
add version; from Nils Nordman <nino at nforced dot com> via markus@.
|
|
|
|
|
markus@ ok
|
2003-01-08 12:28:40 +00:00
|
|
|
- (djm) Update README to reflect AIX's status as a well supported platform.
|
|
|
|
|
From dtucker@zip.com.au
|
2003-01-09 01:22:59 +00:00
|
|
|
- (tim) [Makefile.in configure.ac] replace fixpath with sed script. Patch
|
2003-01-09 04:09:30 +00:00
|
|
|
by Mo DeJong.
|
2003-01-09 04:04:27 +00:00
|
|
|
- (tim) [auth.c] declare today at top of allowed_user() to keep
|
|
|
|
|
older compilers happy.
|
2003-01-09 04:09:30 +00:00
|
|
|
- (tim) [scp.c] make compilers without long long happy.
|
2003-01-08 00:16:48 +00:00
|
|
|
|
2003-01-06 23:51:23 +00:00
|
|
|
20030107
|
|
|
|
|
- (djm) Bug #401: Work around Linux breakage with IPv6 mapped addresses.
|
|
|
|
|
Based on fix from yoshfuji@linux-ipv6.org
|
2003-01-07 01:19:32 +00:00
|
|
|
- (djm) Bug #442: Check for and deny access to accounts with locked
|
|
|
|
|
passwords. Patch from dtucker@zip.com.au
|
2003-01-07 04:18:32 +00:00
|
|
|
- (djm) Bug #26: Use local mkstemp() rather than glibc's silly one. Fixes
|
|
|
|
|
Can't pass KRB4 TGT passing. Fix from: jan.iven@cern.ch
|
2003-01-07 05:15:20 +00:00
|
|
|
- (djm) Fix Bug #442 for PAM case
|
2003-01-07 05:46:58 +00:00
|
|
|
- (djm) Bug #110: bogus error messages in lastlog_get_entry(). Fix based
|
|
|
|
|
on one by peak@argo.troja.mff.cuni.cz
|
2003-01-07 06:04:18 +00:00
|
|
|
- (djm) Bug #111: Run syslog and stderr logging through strnvis to eliminate
|
|
|
|
|
nasties. Report from peak@argo.troja.mff.cuni.cz
|
2003-01-07 06:38:58 +00:00
|
|
|
- (djm) Bug #178: On AIX /etc/nologin wasnt't shown to users. Fix from
|
|
|
|
|
Ralf.Wenk@fh-karlsruhe.de and dtucker@zip.com.au
|
2003-01-07 12:55:59 +00:00
|
|
|
- (djm) Fix my fix of the fix for the Bug #442 for PAM case. Spotted by
|
|
|
|
|
dtucker@zip.com.au. Reorder for clarity too.
|
2003-01-06 23:51:23 +00:00
|
|
|
|
2003-01-03 03:34:06 +00:00
|
|
|
20030103
|
|
|
|
|
- (djm) Bug #461: ssh-copy-id fails with no arguments. Patch from
|
|
|
|
|
cjwatson@debian.org
|
2003-01-03 03:42:27 +00:00
|
|
|
- (djm) Bug #460: Filling utmp[x]->ut_addr_v6 if present. Patch from
|
|
|
|
|
cjwatson@debian.org
|
2003-01-03 03:52:53 +00:00
|
|
|
- (djm) Bug #446: Set LOGIN env var to pw_name on AIX. Patch from
|
|
|
|
|
mii@ornl.gov
|
|
|
|
|
|
2003-01-01 23:43:55 +00:00
|
|
|
20030101
|
|
|
|
|
- (stevesk) [session.c sshlogin.c sshlogin.h] complete portable
|
|
|
|
|
parts of pass addrlen with sockaddr * fix.
|
|
|
|
|
from Hajimu UMEMOTO <ume@FreeBSD.org>
|
|
|
|
|
|
2002-12-23 02:00:23 +00:00
|
|
|
20021222
|
|
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- fgsch@cvs.openbsd.org 2002/11/15 10:03:09
|
|
|
|
|
[authfile.c]
|
|
|
|
|
lseek(2) may return -1 when getting the public/private key lenght.
|
|
|
|
|
Simplify the code and check for errors using fstat(2).
|
|
|
|
|
|
|
|
|
|
Problem reported by Mauricio Sanchez, markus@ ok.
|
2002-12-23 02:01:55 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/18 16:43:44
|
|
|
|
|
[clientloop.c]
|
|
|
|
|
don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
|
|
|
|
|
e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
|
2002-12-23 02:03:02 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/21 22:22:50
|
|
|
|
|
[dh.c]
|
|
|
|
|
debug->debug2
|
2002-12-23 02:04:22 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/21 22:45:31
|
|
|
|
|
[cipher.c kex.c packet.c sshconnect.c sshconnect2.c]
|
|
|
|
|
debug->debug2, unify debug messages
|
2002-12-23 02:06:19 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/11/21 23:03:51
|
|
|
|
|
[auth-krb5.c auth1.c hostfile.h monitor_wrap.c sftp-client.c sftp-int.c ssh-add.c ssh-rsa.c
|
|
|
|
|
sshconnect.c]
|
|
|
|
|
KNF
|
2002-12-23 02:53:08 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/21 23:04:33
|
2002-12-23 02:08:57 +00:00
|
|
|
[ssh.c]
|
|
|
|
|
debug->debug2
|
2002-12-23 02:53:08 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/11/24 21:46:24
|
2002-12-23 02:09:59 +00:00
|
|
|
[ssh-keysign.8]
|
|
|
|
|
typo: "the the"
|
2002-12-23 02:11:02 +00:00
|
|
|
- wcobb@cvs.openbsd.org 2002/11/26 00:45:03
|
|
|
|
|
[scp.c ssh-keygen.c]
|
|
|
|
|
Remove unnecessary fflush(stderr) calls, stderr is unbuffered by default.
|
|
|
|
|
ok markus@
|
2002-12-23 02:53:08 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/11/26 02:35:30
|
2002-12-23 02:11:54 +00:00
|
|
|
[ssh-keygen.1]
|
|
|
|
|
remove outdated statement; ok markus@ deraadt@
|
2002-12-23 02:13:37 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/11/26 02:38:54
|
|
|
|
|
[canohost.c]
|
|
|
|
|
KNF, comment and error message repair; ok markus@
|
2002-12-23 02:14:51 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/27 17:53:35
|
|
|
|
|
[scp.c sftp.c ssh.c]
|
|
|
|
|
allow usernames with embedded '@', e.g. scp user@vhost@realhost:file /tmp;
|
|
|
|
|
http://bugzilla.mindrot.org/show_bug.cgi?id=447; ok mouring@, millert@
|
2002-12-23 02:15:57 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/12/04 04:36:47
|
|
|
|
|
[session.c]
|
|
|
|
|
remove xauth entries before add; PR 2994 from janjaap@stack.nl.
|
|
|
|
|
ok markus@
|
2002-12-23 02:22:09 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/12/05 11:08:35
|
|
|
|
|
[scp.c]
|
|
|
|
|
use roundup() similar to rcp/util.c and avoid problems with strange
|
|
|
|
|
filesystem block sizes, noted by tjr@freebsd.org; ok djm@
|
2002-12-23 02:53:08 +00:00
|
|
|
- djm@cvs.openbsd.org 2002/12/06 05:20:02
|
2002-12-23 02:23:37 +00:00
|
|
|
[sftp.1]
|
|
|
|
|
Fix cut'n'paste error, spotted by matthias.riese@b-novative.de; ok deraadt@
|
2002-12-23 02:24:54 +00:00
|
|
|
- millert@cvs.openbsd.org 2002/12/09 16:50:30
|
|
|
|
|
[ssh.c]
|
|
|
|
|
Avoid setting optind to 0 as GNU getopt treats that like we do optreset.
|
|
|
|
|
markus@ OK
|
2002-12-23 02:26:08 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/12/10 08:56:00
|
|
|
|
|
[session.c]
|
|
|
|
|
Make sure $SHELL points to the shell from the password file, even if shell
|
|
|
|
|
is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
|
2002-12-23 02:41:41 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/12/10 19:26:50
|
|
|
|
|
[packet.c]
|
|
|
|
|
move tos handling to packet_set_tos; ok provos/henning/deraadt
|
2002-12-23 02:42:52 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/12/10 19:47:14
|
|
|
|
|
[packet.c]
|
|
|
|
|
static
|
2002-12-23 02:44:36 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/12/13 10:03:15
|
|
|
|
|
[channels.c misc.c sshconnect2.c]
|
|
|
|
|
cleanup debug messages, more useful information for the client user.
|
2002-12-23 02:53:08 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/12/13 15:20:52
|
|
|
|
|
[scp.c]
|
|
|
|
|
1) include stalling time in total time
|
|
|
|
|
2) truncate filenames to 45 instead of 20 characters
|
|
|
|
|
3) print rate instead of progress bar, no more stars
|
|
|
|
|
4) scale output to tty width
|
|
|
|
|
based on a patch from Niels; ok fries@ lebel@ fgs@ millert@
|
2002-12-23 02:58:17 +00:00
|
|
|
- (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since
|
|
|
|
|
we already did s/msg_send/ssh_msg_send/
|
2002-12-23 02:00:23 +00:00
|
|
|
|
2002-12-05 09:59:33 +00:00
|
|
|
20021205
|
|
|
|
|
- (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org
|
|
|
|
|
|
2002-11-22 21:29:01 +00:00
|
|
|
20021122
|
|
|
|
|
- (tim) [configure.ac] fix STDPATH test for IRIX. First reported by
|
|
|
|
|
advax@triumf.ca. This type of solution tested by <herb@sgi.com>
|
|
|
|
|
|
2002-11-13 23:55:55 +00:00
|
|
|
20021113
|
|
|
|
|
- (tim) [configure.ac] remove unused variables no_libsocket and no_libnsl
|
|
|
|
|
|
2002-11-13 23:50:04 +00:00
|
|
|
20021111
|
|
|
|
|
- (tim) [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is
|
|
|
|
|
not world writable.
|
|
|
|
|
|
2002-11-09 15:40:34 +00:00
|
|
|
20021109
|
|
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- itojun@cvs.openbsd.org 2002/10/16 14:31:48
|
|
|
|
|
[sftp-common.c]
|
|
|
|
|
64bit pedant. %llu is "unsigned long long". markus ok
|
2002-11-09 15:41:39 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/10/23 10:32:13
|
|
|
|
|
[packet.c]
|
|
|
|
|
use %u for u_int
|
2002-11-09 15:43:23 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/10/23 10:40:16
|
|
|
|
|
[bufaux.c]
|
|
|
|
|
%u for u_int
|
2002-11-09 15:45:12 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/04 10:07:53
|
|
|
|
|
[auth.c]
|
|
|
|
|
don't compare against pw_home if realpath fails for pw_home (seen
|
|
|
|
|
on AFS); ok djm@
|
2002-11-09 15:46:24 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/04 10:09:51
|
|
|
|
|
[packet.c]
|
|
|
|
|
log before send disconnect; ok djm@
|
2002-11-09 15:47:47 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/05 19:45:20
|
|
|
|
|
[monitor.c]
|
|
|
|
|
handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
|
2002-11-09 15:48:49 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/05 20:10:37
|
|
|
|
|
[sftp-client.c]
|
|
|
|
|
typo; GaryF@livevault.com
|
2002-11-09 15:50:03 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/07 16:28:47
|
|
|
|
|
[sshd.c]
|
|
|
|
|
log to stderr if -ie is given, bug #414, prj@po.cwru.edu
|
2002-11-09 15:52:31 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/07 22:08:07
|
|
|
|
|
[readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
|
|
|
|
|
we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
|
|
|
|
|
because HostbasedAuthentication might be enabled based on the
|
|
|
|
|
target host and ssh-keysign(8) does not know the remote hostname
|
|
|
|
|
and not trust ssh(1) about the hostname, so we add a new option
|
|
|
|
|
EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
|
2002-11-09 15:54:08 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/11/07 22:35:38
|
|
|
|
|
[scp.c]
|
|
|
|
|
check exit status from ssh, and exit(1) if ssh fails; bug#369;
|
|
|
|
|
binder@arago.de
|
2002-11-09 15:59:27 +00:00
|
|
|
- (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c
|
|
|
|
|
ntsec now default if cygwin version beginning w/ version 56. Patch
|
|
|
|
|
by Corinna Vinschen <vinschen@redhat.com>
|
2002-11-09 16:11:10 +00:00
|
|
|
- (bal) AIX does not log login attempts for unknown users (bug #432).
|
|
|
|
|
patch by dtucker@zip.com.au
|
2002-11-09 15:40:34 +00:00
|
|
|
|
2002-10-21 00:13:35 +00:00
|
|
|
20021021
|
2002-10-21 10:26:16 +00:00
|
|
|
- (djm) Bug #400: Kill ssh-rand-helper children on timeout, patch from
|
|
|
|
|
dtucker@zip.com.au
|
2002-10-21 00:50:25 +00:00
|
|
|
- (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from
|
|
|
|
|
dirk.meyer@dinoex.sub.org
|
2002-10-21 00:13:35 +00:00
|
|
|
|
2002-10-16 00:13:52 +00:00
|
|
|
20021015
|
|
|
|
|
- (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
|
2002-10-16 00:24:03 +00:00
|
|
|
- (bal) More advanced strsep test by Darren Tucker <dtucker@zip.com.au>
|
2002-10-16 00:13:52 +00:00
|
|
|
|
2002-10-15 20:16:55 +00:00
|
|
|
20021015
|
|
|
|
|
- (tim) [contrib/caldera/openssh.spec] make ssh-agent setgid nobody
|
|
|
|
|
|
2002-10-04 23:54:54 +00:00
|
|
|
20021004
|
|
|
|
|
- (bal) Disable post-authentication Privsep for OSF/1. It conflicts with
|
|
|
|
|
SIA.
|
|
|
|
|
|
2002-10-03 01:54:35 +00:00
|
|
|
20021003
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/10/01 20:34:12
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
allow root to access the agent, since there is no protection from root.
|
2002-10-03 01:55:37 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/10/01 13:24:50
|
|
|
|
|
[version.h]
|
|
|
|
|
OpenSSH 3.5
|
2002-10-03 01:56:58 +00:00
|
|
|
- (djm) Bump RPM spec version numbers
|
2002-10-04 01:10:04 +00:00
|
|
|
- (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2
|
2002-10-03 01:54:35 +00:00
|
|
|
|
2002-09-30 00:40:39 +00:00
|
|
|
20020930
|
2002-09-30 01:59:21 +00:00
|
|
|
- (djm) Tidy contrib/, add Makefile for GNOME passphrase dialogs,
|
|
|
|
|
tweak README
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- mickey@cvs.openbsd.org 2002/09/27 10:42:09
|
|
|
|
|
[compat.c compat.h sshd.c]
|
|
|
|
|
add a generic match for a prober, such as sie big brother;
|
|
|
|
|
idea from stevesk@; markus@ ok
|
2002-09-30 02:00:55 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/27 15:46:21
|
|
|
|
|
[ssh.1]
|
|
|
|
|
clarify compression level protocol 1 only; ok markus@ deraadt@
|
2002-09-30 00:40:39 +00:00
|
|
|
|
2002-09-27 03:21:57 +00:00
|
|
|
20020927
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/09/25 11:17:16
|
|
|
|
|
[sshd_config]
|
|
|
|
|
sync LoginGraceTime with default
|
2002-09-27 03:22:31 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/25 15:19:02
|
|
|
|
|
[sshd.c]
|
|
|
|
|
typo; pilot@monkey.org
|
2002-09-27 03:25:58 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/26 11:38:43
|
|
|
|
|
[auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c]
|
|
|
|
|
[monitor_wrap.h]
|
|
|
|
|
krb4 + privsep; ok dugsong@, deraadt@
|
2002-09-27 03:21:57 +00:00
|
|
|
|
2002-09-25 23:14:14 +00:00
|
|
|
20020925
|
|
|
|
|
- (bal) Fix issue where successfull login does not clear failure counts
|
|
|
|
|
in AIX. Patch by dtucker@zip.com.au ok by djm
|
2002-09-26 00:38:46 +00:00
|
|
|
- (tim) Cray fixes (bug 367) based on patch from Wendy Palm @ cray.
|
|
|
|
|
This does not include the deattack.c fixes.
|
2002-09-25 23:14:14 +00:00
|
|
|
|
2002-09-25 02:19:08 +00:00
|
|
|
20020923
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- stevesk@cvs.openbsd.org 2002/09/23 20:46:27
|
|
|
|
|
[canohost.c]
|
|
|
|
|
change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
|
|
|
|
|
non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
|
2002-09-25 02:19:39 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/23 22:11:05
|
|
|
|
|
[monitor.c]
|
|
|
|
|
only call auth_krb5 if kerberos is enabled; ok deraadt@
|
2002-09-25 02:20:17 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/24 08:46:04
|
|
|
|
|
[monitor.c]
|
|
|
|
|
only call kerberos code for authctxt->valid
|
2002-09-25 02:20:52 +00:00
|
|
|
- todd@cvs.openbsd.org 2002/09/24 20:59:44
|
|
|
|
|
[sshd.8]
|
|
|
|
|
tweak the example $HOME/.ssh/rc script to not show on any cmdline the
|
|
|
|
|
sensitive data it handles. This fixes bug # 402 as reported by
|
|
|
|
|
kolya@mit.edu (Nickolai Zeldovich).
|
|
|
|
|
ok markus@ and stevesk@
|
2002-09-25 02:19:08 +00:00
|
|
|
|
2002-09-23 23:54:10 +00:00
|
|
|
20020923
|
|
|
|
|
- (tim) [configure.ac] s/return/exit/ patch by dtucker@zip.com.au
|
|
|
|
|
|
2002-09-21 15:25:35 +00:00
|
|
|
20020922
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- stevesk@cvs.openbsd.org 2002/09/19 14:53:14
|
|
|
|
|
[compat.c]
|
2002-09-21 15:26:00 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/19 15:51:23
|
|
|
|
|
[ssh-add.c]
|
|
|
|
|
typo; cd@kalkatraz.de
|
2002-09-21 15:26:27 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/19 16:03:15
|
|
|
|
|
[serverloop.c]
|
|
|
|
|
log IP address also; ok markus@
|
2002-09-21 15:26:51 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/20 18:41:29
|
|
|
|
|
[auth.c]
|
|
|
|
|
log illegal user here for missing privsep case (ssh2).
|
|
|
|
|
this is executed in the monitor. ok markus@
|
2002-09-21 15:25:35 +00:00
|
|
|
|
2002-09-19 01:46:58 +00:00
|
|
|
20020919
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- stevesk@cvs.openbsd.org 2002/09/12 19:11:52
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
%u for uid print; ok markus@
|
2002-09-19 01:47:55 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/12 19:50:36
|
|
|
|
|
[session.c ssh.1]
|
|
|
|
|
add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384. ok markus@
|
2002-09-19 01:49:37 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/13 19:23:09
|
|
|
|
|
[channels.c sshconnect.c sshd.c]
|
|
|
|
|
remove use of SO_LINGER, it should not be needed. error check
|
|
|
|
|
SO_REUSEADDR. fixup comments. ok markus@
|
2002-09-19 01:50:48 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/16 19:55:33
|
|
|
|
|
[session.c]
|
|
|
|
|
log when _PATH_NOLOGIN exists; ok markus@
|
2002-09-19 01:51:21 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/16 20:12:11
|
|
|
|
|
[sshd_config.5]
|
|
|
|
|
more details on X11Forwarding security issues and threats; ok markus@
|
2002-09-19 01:51:53 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/16 22:03:13
|
|
|
|
|
[sshd.8]
|
|
|
|
|
reference moduli(5) in FILES /etc/moduli.
|
2002-09-19 01:54:54 +00:00
|
|
|
- itojun@cvs.openbsd.org 2002/09/17 07:47:02
|
|
|
|
|
[channels.c]
|
|
|
|
|
don't quit while creating X11 listening socket.
|
|
|
|
|
http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
|
|
|
|
|
got from portable. markus ok
|
2002-09-19 02:05:02 +00:00
|
|
|
- djm@cvs.openbsd.org 2002/09/19 01:58:18
|
|
|
|
|
[ssh.c sshconnect.c]
|
|
|
|
|
bugzilla.mindrot.org #223 - ProxyCommands don't exit.
|
|
|
|
|
Patch from dtucker@zip.com.au; ok markus@
|
2002-09-19 01:46:58 +00:00
|
|
|
|
2002-09-11 23:43:56 +00:00
|
|
|
20020912
|
2002-09-12 04:49:00 +00:00
|
|
|
- (djm) Made GNOME askpass programs return non-zero if cancel button is
|
|
|
|
|
pressed.
|
2002-09-12 00:32:59 +00:00
|
|
|
- (djm) Added getpeereid() replacement. Properly implemented for systems
|
|
|
|
|
with SO_PEERCRED support. Faked for systems which lack it.
|
2002-09-12 00:43:29 +00:00
|
|
|
- (djm) Sync sys/tree.h with OpenBSD -current. Rename tree.h and
|
|
|
|
|
fake-queue.h to sys-tree.h and sys-queue.h
|
2002-09-11 23:43:56 +00:00
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/09/08 20:24:08
|
|
|
|
|
[hostfile.h]
|
|
|
|
|
no comma at end of enumerator list
|
2002-09-11 23:47:29 +00:00
|
|
|
- itojun@cvs.openbsd.org 2002/09/09 06:48:06
|
|
|
|
|
[auth1.c auth.h auth-krb5.c monitor.c monitor.h]
|
|
|
|
|
[monitor_wrap.c monitor_wrap.h]
|
|
|
|
|
kerberos support for privsep. confirmed to work by lha@stacken.kth.se
|
|
|
|
|
patch from markus
|
2002-09-11 23:49:15 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/09 14:54:15
|
|
|
|
|
[channels.c kex.h key.c monitor.c monitor_wrap.c radix.c uuencode.c]
|
|
|
|
|
signed vs unsigned from -pedantic; ok henning@
|
2002-09-11 23:51:10 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/09/10 20:24:47
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
check the euid of the connecting process with getpeereid(2);
|
|
|
|
|
ok provos deraadt stevesk
|
2002-09-11 23:52:03 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/11 17:55:03
|
|
|
|
|
[ssh.1]
|
|
|
|
|
add agent and X11 forwarding warning text from ssh_config.5; ok markus@
|
2002-09-11 23:52:46 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/09/11 18:27:26
|
|
|
|
|
[authfd.c authfd.h ssh.c]
|
|
|
|
|
don't connect to agent to test for presence if we've previously
|
|
|
|
|
connected; ok markus@
|
2002-09-11 23:54:25 +00:00
|
|
|
- djm@cvs.openbsd.org 2002/09/11 22:41:50
|
|
|
|
|
[sftp.1 sftp-client.c sftp-client.h sftp-common.c sftp-common.h]
|
|
|
|
|
[sftp-glob.c sftp-glob.h sftp-int.c sftp-server.c]
|
|
|
|
|
support for short/long listings and globbing in "ls"; ok markus@
|
2002-09-12 00:34:13 +00:00
|
|
|
- djm@cvs.openbsd.org 2002/09/12 00:13:06
|
|
|
|
|
[sftp-int.c]
|
|
|
|
|
zap unused var introduced in last commit
|
2002-09-11 23:43:56 +00:00
|
|
|
|
2002-09-11 00:29:11 +00:00
|
|
|
20020911
|
|
|
|
|
- (djm) Sync openbsd-compat with OpenBSD -current
|
|
|
|
|
|
2002-09-10 11:43:53 +00:00
|
|
|
20020910
|
|
|
|
|
- (djm) Bug #365: Read /.ssh/environment properly under CygWin.
|
|
|
|
|
Patch from Mark Bradshaw <bradshaw@staff.crosswalk.com>
|
2002-09-10 12:26:17 +00:00
|
|
|
- (djm) Bug #138: Make protocol 1 blowfish work with old OpenSSL.
|
|
|
|
|
Patch from Robert Halubek <rob@adso.com.pl>
|
2002-09-10 11:43:53 +00:00
|
|
|
|
2002-09-05 04:35:14 +00:00
|
|
|
20020905
|
|
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- stevesk@cvs.openbsd.org 2002/09/04 18:52:42
|
|
|
|
|
[servconf.c sshd.8 sshd_config.5]
|
|
|
|
|
default LoginGraceTime to 2m; 1m may be too short for slow systems.
|
|
|
|
|
ok markus@
|
2002-09-05 06:32:02 +00:00
|
|
|
- (djm) Merge openssh-TODO.patch from Redhat (null) beta
|
2002-09-05 06:46:24 +00:00
|
|
|
- (djm) Add gnome-ssh-askpass2.c (gtk2) by merge with patch from
|
|
|
|
|
Nalin Dahyabhai <nalin@redhat.com>
|
2002-09-05 06:53:20 +00:00
|
|
|
- (djm) Add support for building gtk2 password requestor from Redhat beta
|
2002-09-05 04:35:14 +00:00
|
|
|
|
2002-09-04 06:20:26 +00:00
|
|
|
20020903
|
2002-09-04 13:26:29 +00:00
|
|
|
- (djm) Patch from itojun@ for Darwin OS: test getaddrinfo, reorder libcrypt
|
2002-09-04 07:19:04 +00:00
|
|
|
- (djm) Fix Redhat RPM build dependancy test
|
2002-09-04 06:20:26 +00:00
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/08/12 10:46:35
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
make ssh-agent setgid, disallow ptrace.
|
2002-09-04 06:24:55 +00:00
|
|
|
- espie@cvs.openbsd.org 2002/08/21 11:20:59
|
|
|
|
|
[sshd.8]
|
|
|
|
|
`RSA' updated to refer to `public key', where it matters.
|
|
|
|
|
okay markus@
|
2002-09-04 06:25:52 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/21 19:38:06
|
|
|
|
|
[servconf.c sshd.8 sshd_config sshd_config.5]
|
|
|
|
|
change LoginGraceTime default to 1 minute; ok mouring@ markus@
|
2002-09-04 06:28:18 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/21 20:10:28
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
raise listen backlog; ok markus@
|
2002-09-04 06:31:21 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/22 19:27:53
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
use common close function; ok markus@
|
2002-09-04 06:32:10 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/22 19:38:42
|
|
|
|
|
[clientloop.c]
|
|
|
|
|
format with current EscapeChar; bugzilla #388 from wknox@mitre.org.
|
|
|
|
|
ok markus@
|
2002-09-04 06:33:31 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/22 20:57:19
|
|
|
|
|
[ssh-agent.c]
|
|
|
|
|
shutdown(SHUT_RDWR) not needed before close here; ok markus@
|
2002-09-04 06:37:26 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/08/22 21:33:58
|
|
|
|
|
[auth1.c auth2.c]
|
|
|
|
|
auth_root_allowed() is handled by the monitor in the privsep case,
|
|
|
|
|
so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325
|
2002-09-04 06:39:02 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/08/22 21:45:41
|
|
|
|
|
[session.c]
|
|
|
|
|
send signal name (not signal number) in "exit-signal" message; noticed
|
|
|
|
|
by galb@vandyke.com
|
2002-09-04 06:39:48 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/27 17:13:56
|
|
|
|
|
[ssh-rsa.c]
|
|
|
|
|
RSA_public_decrypt() returns -1 on error so len must be signed;
|
|
|
|
|
ok markus@
|
2002-09-04 06:40:37 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/27 17:18:40
|
|
|
|
|
[ssh_config.5]
|
|
|
|
|
some warning text for ForwardAgent and ForwardX11; ok markus@
|
2002-09-04 06:45:09 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/29 15:57:25
|
|
|
|
|
[monitor.c session.c sshlogin.c sshlogin.h]
|
|
|
|
|
pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
|
|
|
|
|
NOTE: there are also p-specific parts to this patch. ok markus@
|
2002-09-04 06:46:06 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/29 16:02:54
|
|
|
|
|
[ssh.1 ssh.c]
|
|
|
|
|
deprecate -P as UsePrivilegedPort defaults to no now; ok markus@
|
2002-09-04 06:47:35 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/29 16:09:02
|
|
|
|
|
[ssh_config.5]
|
|
|
|
|
more on UsePrivilegedPort and setuid root; ok markus@
|
2002-09-04 06:50:06 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/29 19:49:42
|
|
|
|
|
[ssh.c]
|
|
|
|
|
shrink initial privilege bracket for setuid case; ok markus@
|
2002-09-04 06:51:03 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/29 22:54:10
|
|
|
|
|
[ssh_config.5 sshd_config.5]
|
|
|
|
|
state XAuthLocation is a full pathname
|
2002-09-04 06:20:26 +00:00
|
|
|
|
2002-08-20 18:36:25 +00:00
|
|
|
20020820
|
|
|
|
|
- OpenBSD CVS Sync
|
|
|
|
|
- millert@cvs.openbsd.org 2002/08/02 14:43:15
|
|
|
|
|
[monitor.c monitor_mm.c]
|
|
|
|
|
Change mm_zalloc() sanity checks to be more in line with what
|
|
|
|
|
we do in calloc() and add a check to monitor_mm.c.
|
|
|
|
|
OK provos@ and markus@
|
2002-08-20 18:38:02 +00:00
|
|
|
- marc@cvs.openbsd.org 2002/08/02 16:00:07
|
|
|
|
|
[ssh.1 sshd.8]
|
|
|
|
|
note that .ssh/environment is only read when
|
|
|
|
|
allowed (PermitUserEnvironment in sshd_config).
|
|
|
|
|
OK markus@
|
2002-08-20 18:39:14 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/08/02 21:23:41
|
|
|
|
|
[ssh-rsa.c]
|
|
|
|
|
diff is u_int (2x); ok deraadt/provos
|
2002-08-20 18:40:03 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/08/02 22:20:30
|
|
|
|
|
[ssh-rsa.c]
|
|
|
|
|
replace RSA_verify with our own version and avoid the OpenSSL ASN.1 parser
|
|
|
|
|
for authentication; ok deraadt/djm
|
2002-08-20 18:41:15 +00:00
|
|
|
- aaron@cvs.openbsd.org 2002/08/08 13:50:23
|
|
|
|
|
[sshconnect1.c]
|
|
|
|
|
Use & to test if bits are set, not &&; markus@ ok.
|
2002-08-20 18:42:13 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/08 23:54:52
|
|
|
|
|
[auth.c]
|
|
|
|
|
typo in comment
|
2002-08-20 18:43:27 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/09 17:21:42
|
|
|
|
|
[sshd_config.5]
|
|
|
|
|
use Op for mdoc conformance; from esr@golux.thyrsus.com
|
|
|
|
|
ok aaron@
|
2002-08-20 18:44:24 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/09 17:41:12
|
|
|
|
|
[sshd_config.5]
|
|
|
|
|
proxy vs. fake display
|
2002-08-20 18:54:20 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/12 17:30:35
|
|
|
|
|
[ssh.1 sshd.8 sshd_config.5]
|
|
|
|
|
more PermitUserEnvironment; ok markus@
|
2002-08-20 19:03:20 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/17 23:07:14
|
|
|
|
|
[ssh.1]
|
|
|
|
|
ForwardAgent has defaulted to no for over 2 years; be more clear here.
|
2002-08-20 19:04:51 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/08/17 23:55:01
|
|
|
|
|
[ssh_config.5]
|
|
|
|
|
ordered list here
|
2002-08-21 02:54:11 +00:00
|
|
|
- (bal) [defines.h] Some platforms don't have SIZE_T_MAX. So assign
|
|
|
|
|
it to ULONG_MAX.
|
2002-08-20 18:36:25 +00:00
|
|
|
|
2002-08-14 01:52:10 +00:00
|
|
|
20020813
|
|
|
|
|
- (tim) [configure.ac] Display OpenSSL header/library version.
|
|
|
|
|
Patch by dtucker@zip.com.au
|
|
|
|
|
|
2002-08-01 01:21:56 +00:00
|
|
|
20020731
|
|
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/07/24 16:11:18
|
|
|
|
|
[hostfile.c hostfile.h sshconnect.c]
|
|
|
|
|
print out all known keys for a host if we get a unknown host key,
|
|
|
|
|
see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4
|
|
|
|
|
|
|
|
|
|
the ssharp mitm tool attacks users in a similar way, so i'd like to
|
|
|
|
|
pointed out again:
|
|
|
|
|
A MITM attack is always possible if the ssh client prints:
|
|
|
|
|
The authenticity of host 'bla' can't be established.
|
|
|
|
|
(protocol version 2 with pubkey authentication allows you to detect
|
|
|
|
|
MITM attacks)
|
2002-08-01 01:25:00 +00:00
|
|
|
- mouring@cvs.openbsd.org 2002/07/25 01:16:59
|
|
|
|
|
[sftp.c]
|
|
|
|
|
FallBackToRsh does not exist anywhere else. Remove it from here.
|
|
|
|
|
OK deraadt.
|
2002-08-01 01:26:29 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/29 18:57:30
|
|
|
|
|
[sshconnect.c]
|
|
|
|
|
print file:line
|
2002-08-01 01:28:38 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/30 17:03:55
|
|
|
|
|
[auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5]
|
|
|
|
|
add PermitUserEnvironment (off by default!); from dot@dotat.at;
|
|
|
|
|
ok provos, deraadt
|
2002-08-01 01:21:56 +00:00
|
|
|
|
2002-07-30 19:32:07 +00:00
|
|
|
20020730
|
|
|
|
|
- (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de
|
|
|
|
|
|
2002-07-28 20:24:07 +00:00
|
|
|
20020728
|
|
|
|
|
- (stevesk) [auth-pam.c] should use PAM_MSG_MEMBER(); from solar
|
2002-07-28 20:31:18 +00:00
|
|
|
- (stevesk) [CREDITS] solar
|
2002-07-28 20:42:23 +00:00
|
|
|
- (stevesk) [ssh-rand-helper.c] RAND_bytes() and SHA1_Final() unsigned
|
|
|
|
|
char arg.
|
2002-07-28 20:24:07 +00:00
|
|
|
|
2002-07-25 04:36:24 +00:00
|
|
|
20020725
|
|
|
|
|
- (djm) Remove some cruft from INSTALL
|
2002-07-25 04:40:22 +00:00
|
|
|
- (djm) Latest config.guess and config.sub from ftp://ftp.gnu.org/gnu/config/
|
2002-07-25 04:36:24 +00:00
|
|
|
|
2002-07-23 21:00:17 +00:00
|
|
|
20020723
|
|
|
|
|
- (bal) [bsd-cray.c bsd-cray.h] Part 2 of Cray merger.
|
2002-07-23 21:05:17 +00:00
|
|
|
- (bal) sync ID w/ ssh-agent.c
|
2002-07-23 21:01:56 +00:00
|
|
|
- (bal) OpenBSD Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/07/19 15:43:33
|
|
|
|
|
[log.c log.h session.c sshd.c]
|
|
|
|
|
remove fatal cleanups after fork; based on discussions with and code
|
|
|
|
|
from solar.
|
2002-07-23 21:03:02 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/19 17:42:40
|
|
|
|
|
[ssh.c]
|
|
|
|
|
display a warning from ssh when XAuthLocation does not exist or xauth
|
|
|
|
|
returned no authentication data. ok markus@
|
2002-07-23 21:06:45 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/21 18:32:20
|
|
|
|
|
[auth-options.c]
|
|
|
|
|
unneeded includes
|
2002-07-23 21:07:45 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/21 18:34:43
|
|
|
|
|
[auth-options.h]
|
|
|
|
|
remove invalid comment
|
2002-07-23 21:11:09 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/22 11:03:06
|
|
|
|
|
[session.c]
|
|
|
|
|
fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors;
|
2002-07-23 21:13:40 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/22 17:32:56
|
|
|
|
|
[monitor.c]
|
|
|
|
|
u_int here; ok provos@
|
2002-07-23 21:15:13 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/23 16:03:10
|
|
|
|
|
[sshd.c]
|
|
|
|
|
utmp_len is unsigned; display error consistent with other options.
|
|
|
|
|
ok markus@
|
2002-07-23 21:29:49 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/15 17:15:31
|
|
|
|
|
[uidswap.c]
|
|
|
|
|
little more debugging; ok markus@
|
2002-07-23 21:13:40 +00:00
|
|
|
|
2002-07-22 15:28:53 +00:00
|
|
|
20020722
|
|
|
|
|
- (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk
|
2002-07-22 16:20:29 +00:00
|
|
|
- (stevesk) [xmmap.c] missing prototype for fatal()
|
2002-07-22 23:34:25 +00:00
|
|
|
- (bal) [configure.ac defines.h loginrec.c sshd.c sshpty.c] Partial sync
|
|
|
|
|
with Cray (mostly #ifdef renaming). Patch by wendyp@cray.com.
|
2002-07-23 00:00:05 +00:00
|
|
|
- (bal) [configure.ac] Missing ;; from cray patch.
|
2002-07-23 00:03:33 +00:00
|
|
|
- (bal) [monitor_mm.c openbsd-compat/xmmap.h] Move xmmap() defines
|
|
|
|
|
into it's own header.
|
2002-07-23 00:44:07 +00:00
|
|
|
- (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be
|
|
|
|
|
freed by the caller; add free_pam_environment() and use it.
|
2002-07-23 00:51:53 +00:00
|
|
|
- (stevesk) [auth-pam.c] typo in comment
|
2002-07-22 15:28:53 +00:00
|
|
|
|
2002-07-21 17:26:54 +00:00
|
|
|
20020721
|
|
|
|
|
- (stevesk) [auth-pam.c] merge cosmetic changes from solar's
|
|
|
|
|
openssh-3.4p1-owl-password-changing.diff
|
2002-07-21 17:57:01 +00:00
|
|
|
- (stevesk) [auth-pam.c] merge rest of solar's PAM patch;
|
|
|
|
|
PAM_NEW_AUTHTOK_REQD remains in #if 0 for now.
|
2002-07-21 22:49:47 +00:00
|
|
|
- (stevesk) [auth-pam.c] cast to avoid initialization type mismatch
|
|
|
|
|
warning on pam_conv struct conversation function.
|
2002-07-21 23:16:00 +00:00
|
|
|
- (stevesk) [auth-pam.h] license
|
2002-07-21 23:20:07 +00:00
|
|
|
- (stevesk) [auth-pam.h] unneeded include
|
2002-07-21 23:59:39 +00:00
|
|
|
- (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h
|
2002-07-21 17:26:54 +00:00
|
|
|
|
2002-07-20 19:05:40 +00:00
|
|
|
20020720
|
|
|
|
|
- (stevesk) [ssh-keygen.c] bug #231: always init/seed_rng().
|
|
|
|
|
|
2002-07-19 18:57:57 +00:00
|
|
|
20020719
|
|
|
|
|
- (tim) [contrib/solaris/buildpkg.sh] create privsep user/group if needed.
|
|
|
|
|
Patch by dtucker@zip.com.au
|
2002-07-19 19:41:10 +00:00
|
|
|
- (tim) [configure.ac] test for libxnet on HP. Patch by dtucker@zip.com.au
|
2002-07-19 18:57:57 +00:00
|
|
|
|
2002-07-18 18:34:29 +00:00
|
|
|
20020718
|
|
|
|
|
- (tim) [defines.h] Bug 313 patch by dirk.meyer@dinoex.sub.org
|
|
|
|
|
- (tim) [monitor_mm.c] add missing declaration for xmmap(). Reported
|
|
|
|
|
by ayamura@ayamura.org
|
2002-07-18 18:44:50 +00:00
|
|
|
- (tim) [configure.ac] Bug 267 rework int64_t test.
|
2002-07-18 18:49:32 +00:00
|
|
|
- (tim) [includes.h] Bug 267 add stdint.h
|
2002-07-18 18:34:29 +00:00
|
|
|
|
2002-07-18 01:04:50 +00:00
|
|
|
20020717
|
|
|
|
|
- (bal) aixbff package updated by dtucker@zip.com.au
|
2002-07-18 02:20:07 +00:00
|
|
|
- (tim) [configure.ac] change how we do paths in AC_PATH_PROGS tests
|
|
|
|
|
for autoconf 2.53. Based on a patch by jrj@purdue.edu
|
2002-07-18 01:04:50 +00:00
|
|
|
|
2002-07-16 21:24:38 +00:00
|
|
|
20020716
|
|
|
|
|
- (tim) [contrib/solaris/opensshd.in] Only kill sshd if .pid file found
|
|
|
|
|
|
2002-07-15 17:48:11 +00:00
|
|
|
20020715
|
|
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- itojun@cvs.openbsd.org 2002/07/12 13:29:09
|
|
|
|
|
[sshconnect.c]
|
|
|
|
|
print connect failure during debugging mode.
|
2002-07-15 17:52:49 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/12 15:50:17
|
|
|
|
|
[cipher.c]
|
|
|
|
|
EVP_CIPH_CUSTOM_IV for our own rijndael
|
2002-07-15 17:58:34 +00:00
|
|
|
- (bal) Remove unused tty defined in do_setusercontext() pointed out by
|
|
|
|
|
dtucker@zip.com.au plus a a more KNF since I am near it.
|
2002-07-15 18:49:20 +00:00
|
|
|
- (bal) Privsep user creation support in Solaris buildpkg.sh by
|
|
|
|
|
dtucker@zip.com.au
|
2002-07-15 17:48:11 +00:00
|
|
|
|
2002-07-14 17:02:20 +00:00
|
|
|
20020714
|
|
|
|
|
- (tim) [Makefile.in] replace "id sshd" with "sshd -t"
|
2002-07-14 20:36:49 +00:00
|
|
|
- (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c
|
|
|
|
|
openbsd-compat/Makefile.in] support compression on platforms that
|
|
|
|
|
have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c
|
|
|
|
|
Based on patch from nalin@redhat.com of code extracted from Owl's package
|
2002-07-14 21:43:57 +00:00
|
|
|
- (tim) [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris.
|
|
|
|
|
report by chris@by-design.net
|
2002-07-14 22:33:20 +00:00
|
|
|
- (tim) [loginrec.c] Bug 347: Fix typo (WTMPX_FILE) report by rodney@bond.net
|
2002-07-14 22:50:51 +00:00
|
|
|
- (tim) [loginrec.c] Bug 348: add missing found = 1; to wtmpx_islogin()
|
|
|
|
|
report by rodney@bond.net
|
2002-07-14 17:02:20 +00:00
|
|
|
|
2002-07-12 16:04:06 +00:00
|
|
|
20020712
|
|
|
|
|
- (tim) [Makefile.in] quiet down install-files: and check-user:
|
2002-07-13 01:11:24 +00:00
|
|
|
- (tim) [configure.ac] remove unused filepriv line
|
2002-07-12 16:04:06 +00:00
|
|
|
|
2002-07-10 14:40:11 +00:00
|
|
|
20020710
|
|
|
|
|
- (tim) [contrib/cygwin/ssh-host-config] explicitely sets the permissions
|
|
|
|
|
on /var/empty to 755 Patch by vinschen@redhat.com
|
2002-07-11 03:54:43 +00:00
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- itojun@cvs.openbsd.org 2002/07/09 11:56:50
|
|
|
|
|
[sshconnect.c]
|
|
|
|
|
silently try next address on connect(2). markus ok
|
2002-07-11 03:56:46 +00:00
|
|
|
- itojun@cvs.openbsd.org 2002/07/09 11:56:27
|
|
|
|
|
[canohost.c]
|
|
|
|
|
suppress log on reverse lookup failiure, as there's no real value in
|
|
|
|
|
doing so.
|
|
|
|
|
markus ok
|
2002-07-11 03:58:11 +00:00
|
|
|
- itojun@cvs.openbsd.org 2002/07/09 12:04:02
|
|
|
|
|
[sshconnect.c]
|
|
|
|
|
ed static function (less warnings)
|
2002-07-11 03:59:18 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/09 17:46:25
|
|
|
|
|
[sshd_config.5]
|
|
|
|
|
clarify no preference ordering in protocol list; ok markus@
|
2002-07-11 04:00:19 +00:00
|
|
|
- itojun@cvs.openbsd.org 2002/07/10 10:28:15
|
|
|
|
|
[sshconnect.c]
|
|
|
|
|
bark if all connection attempt fails.
|
2002-07-11 04:01:29 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/07/10 17:53:54
|
|
|
|
|
[rijndael.c]
|
|
|
|
|
use right sizeof in memcpy; markus ok
|
2002-07-10 14:40:11 +00:00
|
|
|
|
2002-07-09 14:06:40 +00:00
|
|
|
20020709
|
|
|
|
|
- (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms
|
|
|
|
|
lacking that concept can share it. Patch by vinschen@redhat.com
|
|
|
|
|
|
2002-07-09 02:02:10 +00:00
|
|
|
20020708
|
|
|
|
|
- (tim) [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to
|
|
|
|
|
work in a jumpstart environment. patch by kbrint@rufus.net
|
2002-07-09 02:10:05 +00:00
|
|
|
- (tim) [Makefile.in] workaround for broken pakadd on some systems.
|
2002-07-09 02:17:10 +00:00
|
|
|
- (tim) [configure.ac] fix libc89 utimes test. Mention default path for
|
|
|
|
|
--with-privsep-path=
|
2002-07-09 02:02:10 +00:00
|
|
|
|
2002-07-07 20:30:45 +00:00
|
|
|
20020707
|
|
|
|
|
- (tim) [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH)
|
2002-07-07 20:43:36 +00:00
|
|
|
- (tim) [acconfig.h configure.ac sshd.c]
|
|
|
|
|
s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/
|
2002-07-07 21:07:46 +00:00
|
|
|
- (tim) [contrib/cygwin/ssh-host-config] sshd account creation fixes
|
|
|
|
|
patch from vinschen@redhat.com
|
2002-07-07 22:07:10 +00:00
|
|
|
- (bal) [realpath.c] Updated with OpenBSD tree.
|
2002-07-07 22:10:15 +00:00
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- deraadt@cvs.openbsd.org 2002/07/04 04:15:33
|
|
|
|
|
[key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c]
|
|
|
|
|
patch memory leaks; grendel@zeitbombe.org
|
2002-07-07 22:11:51 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/07/04 08:12:15
|
|
|
|
|
[channels.c packet.c]
|
|
|
|
|
blah blah minor nothing as i read and re-read and re-read...
|
2002-07-07 22:13:31 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/04 10:41:47
|
|
|
|
|
[key.c monitor_wrap.c ssh-dss.c ssh-rsa.c]
|
|
|
|
|
don't allocate, copy, and discard if there is not interested in the data;
|
|
|
|
|
ok deraadt@
|
2002-07-07 22:14:55 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/07/06 01:00:49
|
|
|
|
|
[log.c]
|
|
|
|
|
KNF
|
2002-07-07 22:17:22 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/07/06 01:01:26
|
|
|
|
|
[ssh-keyscan.c]
|
|
|
|
|
KNF, realloc fix, and clean usage
|
2002-07-07 22:19:13 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/07/06 17:47:58
|
|
|
|
|
[ssh-keyscan.c]
|
|
|
|
|
unused variable
|
2002-07-07 22:25:29 +00:00
|
|
|
- (bal) Minor KNF on ssh-keyscan.c
|
2002-07-07 20:30:45 +00:00
|
|
|
|
2002-07-05 14:12:33 +00:00
|
|
|
20020705
|
|
|
|
|
- (tim) [configure.ac] AIX 4.2.1 has authenticate() in libs.
|
|
|
|
|
Reported by Darren Tucker <dtucker@zip.com.au>
|
2002-07-05 23:22:32 +00:00
|
|
|
- (tim) [contrib/cygwin/ssh-host-config] double slash corrction
|
|
|
|
|
from vinschen@redhat.com
|
2002-07-05 14:12:33 +00:00
|
|
|
|
2002-07-04 18:11:09 +00:00
|
|
|
20020704
|
|
|
|
|
- (bal) Limit data to TTY for AIX only (Newer versions can't handle the
|
|
|
|
|
faster data rate) Bug #124
|
2002-07-04 18:20:51 +00:00
|
|
|
- (bal) glob.c defines TILDE and AIX also defines it. #undef it first.
|
|
|
|
|
bug #265
|
2002-07-04 19:33:49 +00:00
|
|
|
- (bal) One too many nulls in ports-aix.c
|
2002-07-04 18:11:09 +00:00
|
|
|
|
2002-07-03 23:33:19 +00:00
|
|
|
20020703
|
|
|
|
|
- (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com
|
2002-07-03 23:50:00 +00:00
|
|
|
- (bal) minor correction to utimes() replacement. Patch by
|
|
|
|
|
onoe@sm.sony.co.jp
|
2002-07-04 00:03:56 +00:00
|
|
|
- OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/06/27 08:49:44
|
|
|
|
|
[dh.c ssh-keyscan.c sshconnect.c]
|
|
|
|
|
more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
|
2002-07-04 00:05:06 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/27 09:08:00
|
|
|
|
|
[monitor.c]
|
|
|
|
|
improve mm_zalloc check; markus ok
|
2002-07-04 00:06:15 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/27 10:35:47
|
|
|
|
|
[auth2-none.c monitor.c sftp-client.c]
|
|
|
|
|
use xfree()
|
2002-07-04 00:07:13 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/27 19:49:08
|
|
|
|
|
[ssh-keyscan.c]
|
|
|
|
|
use convtime(); ok markus@
|
2002-07-04 00:08:23 +00:00
|
|
|
- millert@cvs.openbsd.org 2002/06/28 01:49:31
|
|
|
|
|
[monitor_mm.c]
|
|
|
|
|
tree(3) wants an int return value for its compare functions and
|
|
|
|
|
the difference between two pointers is not an int. Just do the
|
|
|
|
|
safest thing and store the result in a long and then return 0,
|
|
|
|
|
-1, or 1 based on that result.
|
2002-07-04 00:09:26 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/28 01:50:37
|
|
|
|
|
[monitor_wrap.c]
|
|
|
|
|
use ssize_t
|
2002-07-04 00:10:34 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/28 10:08:25
|
|
|
|
|
[sshd.c]
|
|
|
|
|
range check -u option at invocation
|
2002-07-04 00:11:40 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/28 23:05:06
|
|
|
|
|
[sshd.c]
|
|
|
|
|
gidset[2] -> gidset[1]; markus ok
|
2002-07-04 00:12:53 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/30 21:54:16
|
|
|
|
|
[auth2.c session.c sshd.c]
|
|
|
|
|
lint asks that we use names that do not overlap
|
2002-07-04 00:14:17 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/30 21:59:45
|
|
|
|
|
[auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
|
|
|
|
|
monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
|
|
|
|
|
sshconnect2.c sshd.c]
|
|
|
|
|
minor KNF
|
2002-07-04 00:15:22 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/07/01 16:15:25
|
|
|
|
|
[msg.c]
|
|
|
|
|
%u
|
2002-07-04 00:16:25 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/01 19:48:46
|
|
|
|
|
[sshconnect2.c]
|
|
|
|
|
for compression=yes, we fallback to no-compression if the server does
|
|
|
|
|
not support compression, vice versa for compression=no. ok mouring@
|
2002-07-04 00:17:33 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/03 09:55:38
|
|
|
|
|
[ssh-keysign.c]
|
|
|
|
|
use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
|
|
|
|
|
in order to avoid a possible Kocher timing attack pointed out by Charles
|
|
|
|
|
Hannum; ok provos@
|
2002-07-04 00:19:40 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/07/03 14:21:05
|
|
|
|
|
[ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
|
|
|
|
|
re-enable ssh-keysign's sbit, but make ssh-keysign read
|
|
|
|
|
/etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
|
|
|
|
|
globally. based on discussions with deraadt, itojun and sommerfeld;
|
|
|
|
|
ok itojun@
|
2002-07-04 00:27:21 +00:00
|
|
|
- (bal) Failed password attempts don't increment counter on AIX. Bug #145
|
2002-07-04 03:07:15 +00:00
|
|
|
- (bal) Missed Makefile.in change. keysign needs readconf.o
|
2002-07-04 03:08:40 +00:00
|
|
|
- (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess.
|
2002-07-04 00:27:21 +00:00
|
|
|
|
2002-07-02 07:08:23 +00:00
|
|
|
20020702
|
|
|
|
|
- (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &
|
|
|
|
|
friends consistently. Spotted by Solar Designer <solar@openwall.com>
|
|
|
|
|
|
2002-06-28 16:48:11 +00:00
|
|
|
20020629
|
|
|
|
|
- (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style
|
|
|
|
|
clean up while I'm near it.
|
|
|
|
|
|
2002-06-27 16:59:50 +00:00
|
|
|
20020628
|
|
|
|
|
- (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
|
|
|
|
|
options should contain default value. from solar.
|
2002-06-27 18:02:21 +00:00
|
|
|
- (bal) Cygwin uid0 fix by vinschen@redhat.com
|
2002-06-27 18:23:20 +00:00
|
|
|
- (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise
|
|
|
|
|
have issues of our fixes not propogating right (ie bcopy instead of
|
|
|
|
|
memmove). OK tim
|
2002-06-28 00:37:33 +00:00
|
|
|
- (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported.
|
|
|
|
|
Bug #303
|
2002-06-27 16:59:50 +00:00
|
|
|
|
2002-07-20 19:05:40 +00:00
|
|
|
20020627
|
2002-06-27 00:12:57 +00:00
|
|
|
- OpenBSD CVS Sync
|
|
|
|
|
- deraadt@cvs.openbsd.org 2002/06/26 14:49:36
|
|
|
|
|
[monitor.c]
|
|
|
|
|
correct %u
|
2002-06-27 00:21:03 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/26 14:50:04
|
|
|
|
|
[monitor_fdpass.c]
|
|
|
|
|
use ssize_t for recvmsg() and sendmsg() return
|
2002-06-27 00:21:59 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 14:51:33
|
|
|
|
|
[ssh-add.c]
|
|
|
|
|
fix exit code for -X/-x
|
2002-06-27 00:23:02 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/26 15:00:32
|
|
|
|
|
[monitor_wrap.c]
|
|
|
|
|
more %u
|
2002-06-27 00:25:07 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 22:27:32
|
|
|
|
|
[ssh-keysign.c]
|
|
|
|
|
bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
|
2002-06-27 00:12:57 +00:00
|
|
|
|
2002-06-25 22:43:19 +00:00
|
|
|
20020626
|
|
|
|
|
- (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM
|
2002-06-25 23:15:30 +00:00
|
|
|
- (bal) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/06/23 21:34:07
|
|
|
|
|
[channels.c]
|
|
|
|
|
tcode is u_int
|
2002-06-25 23:16:31 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/24 13:12:23
|
|
|
|
|
[ssh-agent.1]
|
|
|
|
|
the socket name contains ssh-agent's ppid; via mpech@ from form@
|
2002-06-25 23:17:36 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/24 14:33:27
|
|
|
|
|
[channels.c channels.h clientloop.c serverloop.c]
|
|
|
|
|
move channel counter to u_int
|
2002-06-25 23:19:13 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/24 14:55:38
|
|
|
|
|
[authfile.c kex.c ssh-agent.c]
|
|
|
|
|
cat to (void) when output from buffer_get_X is ignored
|
2002-06-25 23:20:18 +00:00
|
|
|
- itojun@cvs.openbsd.org 2002/06/24 15:49:22
|
|
|
|
|
[msg.c]
|
|
|
|
|
printf type pedant
|
2002-06-25 23:21:41 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/24 17:57:20
|
|
|
|
|
[sftp-server.c sshpty.c]
|
|
|
|
|
explicit (u_int) for uid and gid
|
2002-06-25 23:22:54 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/25 16:22:42
|
|
|
|
|
[authfd.c]
|
|
|
|
|
unnecessary cast
|
2002-06-25 23:24:18 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/25 18:51:04
|
|
|
|
|
[sshd.c]
|
|
|
|
|
lightweight do_setusercontext after chroot()
|
2002-06-25 23:38:47 +00:00
|
|
|
- (bal) Updated AIX package build. Patch by dtucker@zip.com.au
|
2002-06-25 23:45:42 +00:00
|
|
|
- (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
|
2002-06-26 00:22:57 +00:00
|
|
|
- (bal) added back in error check for mmap(). I screwed up, Pointed
|
|
|
|
|
out by stevesk@
|
2002-06-26 00:25:47 +00:00
|
|
|
- (tim) [README.privsep] UnixWare tip no longer needed.
|
2002-06-26 00:29:02 +00:00
|
|
|
- (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP,
|
|
|
|
|
but it all damned lies.
|
2002-06-26 00:43:57 +00:00
|
|
|
- (stevesk) [README.privsep] more for sshd pseudo-account.
|
2002-06-26 02:28:55 +00:00
|
|
|
- (tim) [contrib/caldera/openssh.spec] add support for privsep
|
2002-06-26 09:12:59 +00:00
|
|
|
- (djm) setlogin needs pgid==pid on BSD/OS; from itojun@
|
2002-06-26 09:14:08 +00:00
|
|
|
- (djm) OpenBSD CVS Sync
|
|
|
|
|
- markus@cvs.openbsd.org 2002/06/26 08:53:12
|
|
|
|
|
[bufaux.c]
|
|
|
|
|
limit size of BNs to 8KB; ok provos/deraadt
|
2002-06-26 09:14:25 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 08:54:18
|
|
|
|
|
[buffer.c]
|
|
|
|
|
limit append to 1MB and buffers to 10MB
|
2002-06-26 09:14:43 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 08:55:02
|
|
|
|
|
[channels.c]
|
|
|
|
|
limit # of channels to 10000
|
2002-06-26 09:15:07 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 08:58:26
|
|
|
|
|
[session.c]
|
|
|
|
|
limit # of env vars to 1000; ok deraadt/djm
|
2002-06-26 13:27:11 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/26 13:20:57
|
|
|
|
|
[monitor.c]
|
|
|
|
|
be careful in mm_zalloc
|
2002-06-26 13:51:06 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/26 13:49:26
|
|
|
|
|
[session.c]
|
|
|
|
|
disclose less information from environment files; based on input
|
|
|
|
|
from djm, and dschultz@uclink.Berkeley.EDU
|
2002-06-26 13:58:39 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 13:55:37
|
|
|
|
|
[auth2-chall.c]
|
|
|
|
|
make sure # of response matches # of queries, fixes int overflow;
|
|
|
|
|
from ISS
|
2002-06-26 13:59:10 +00:00
|
|
|
- markus@cvs.openbsd.org 2002/06/26 13:56:27
|
|
|
|
|
[version.h]
|
|
|
|
|
3.4
|
2002-06-26 09:42:52 +00:00
|
|
|
- (djm) Require krb5 devel for RPM build w/ KrbV
|
2002-06-26 13:05:16 +00:00
|
|
|
- (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai
|
|
|
|
|
<nalin@redhat.com>
|
2002-06-26 13:57:12 +00:00
|
|
|
- (djm) Update spec files for release
|
2002-06-26 13:57:59 +00:00
|
|
|
- (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS
|
2002-06-26 13:59:10 +00:00
|
|
|
- (djm) Release 3.4p1
|
2002-06-26 18:05:32 +00:00
|
|
|
- (tim) [contrib/caldera/openssh.spec] remove 2 configure options I put in
|
|
|
|
|
by mistake
|
2002-06-25 22:43:19 +00:00
|
|
|
|
2002-06-24 16:26:49 +00:00
|
|
|
20020625
|
|
|
|
|
- (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
|
2002-06-24 16:49:22 +00:00
|
|
|
- (stevesk) [README.privsep] minor updates
|
2002-06-25 00:24:47 +00:00
|
|
|
- (djm) Create privsep directory and warn if privsep user is missing
|
|
|
|
|
during make install
|
2002-06-25 02:28:22 +00:00
|
|
|
- (bal) Started list of PrivSep issues in TODO
|
2002-06-25 03:22:03 +00:00
|
|
|
- (bal) if mmap() is substandard, don't allow compression on server side.
|
|
|
|
|
Post 'event' we will add more options.
|
2002-06-25 17:07:25 +00:00
|
|
|
- (tim) [contrib/caldera/openssh.spec] Sync with Caldera
|
2002-06-25 17:12:26 +00:00
|
|
|
- (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by
|
|
|
|
|
dtucker@zip.com.au
|
2002-06-25 22:35:15 +00:00
|
|
|
- (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus
|
|
|
|
|
for Cygwin, Cray, & SCO
|
2002-06-24 16:26:49 +00:00
|
|
|
|
2002-06-23 21:20:34 +00:00
|
|
|
20020624
|
|
|
|
|
- OpenBSD CVS Sync
|
|
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 03:25:50
|
|
|
|
|
[tildexpand.c]
|
|
|
|
|
KNF
|
2002-06-23 21:21:30 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 03:26:19
|
|
|
|
|
[cipher.c key.c]
|
|
|
|
|
KNF
|
2002-06-23 21:23:20 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 03:30:58
|
|
|
|
|
[scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
|
|
|
|
|
sshpty.c]
|
|
|
|
|
various KNF and %d for unsigned
|
2002-06-23 21:27:18 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 09:30:14
|
|
|
|
|
[sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
|
|
|
|
|
sftp.c]
|
|
|
|
|
bunch of u_int vs int stuff
|
2002-06-23 21:28:13 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 09:39:55
|
|
|
|
|
[ssh-keygen.c]
|
|
|
|
|
u_int stuff
|
2002-06-23 21:29:23 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 09:46:51
|
|
|
|
|
[bufaux.c servconf.c]
|
|
|
|
|
minor KNF. things the fingers do while you read
|
2002-06-23 21:38:49 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 10:29:52
|
|
|
|
|
[ssh-agent.c sshd.c]
|
|
|
|
|
some minor KNF and %u
|
2002-06-23 21:40:16 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 20:39:45
|
|
|
|
|
[session.c]
|
|
|
|
|
compression_level is u_int
|
2002-06-23 21:42:50 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 21:06:13
|
|
|
|
|
[sshpty.c]
|
|
|
|
|
KNF
|
2002-06-23 21:48:28 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 21:06:41
|
|
|
|
|
[channels.c channels.h session.c session.h]
|
|
|
|
|
display, screen, row, col, xpixel, ypixel are u_int; markus ok
|
2002-06-23 21:49:25 +00:00
|
|
|
- deraadt@cvs.openbsd.org 2002/06/23 21:10:02
|
|
|
|
|
[packet.c]
|
|
|
|
|
packet_get_int() returns unsigned for reason & seqnr
|
2002-06-23 21:48:28 +00:00
|
|
|
- (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
|
|
|
|
|
xpixel are u_int.
|
|
|
|
|
|
2002-06-23 21:20:34 +00:00
|
|
|
|
2002-06-22 18:51:48 +00:00
|
|
|
20020623
|
|
|
|
|
- (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX.
|
2002-06-23 00:18:15 +00:00
|
|
|
- (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset.
|
2002-06-23 00:20:50 +00:00
|
|
|
- (bal) add extern char *getopt. Based on report by dtucker@zip.com.au
|
2002-06-23 00:30:30 +00:00
|
|
|
- OpenBSD CVS Sync
|
|
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 02:00:29
|
|
|
|
|
[ssh.h]
|
|
|
|
|
correct comment
|
2002-06-23 00:31:24 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 02:40:23
|
|
|
|
|
[ssh.1]
|
|
|
|
|
section 5 not 4 for ssh_config
|
2002-06-23 00:32:11 +00:00
|
|
|
- naddy@cvs.openbsd.org 2002/06/22 11:51:39
|
|
|
|
|
[ssh.1]
|
|
|
|
|
typo
|
2002-06-23 00:32:57 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:32:54
|
|
|
|
|
[sshd.8]
|
|
|
|
|
add /var/empty in FILES section
|
2002-06-23 00:33:47 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:40:19
|
|
|
|
|
[sshd.c]
|
|
|
|
|
check /var/empty owner mode; ok provos@
|
2002-06-23 00:34:37 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:41:57
|
|
|
|
|
[scp.1]
|
|
|
|
|
typo
|
2002-06-23 00:35:25 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:45:29
|
|
|
|
|
[ssh-agent.1 sshd.8 sshd_config.5]
|
|
|
|
|
use process ID vs. pid/PID/process identifier
|
2002-06-23 00:37:10 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 20:05:27
|
|
|
|
|
[sshd.c]
|
|
|
|
|
don't call setsid() if debugging or run from inetd; no "Operation not
|
|
|
|
|
permitted" errors now; ok millert@ markus@
|
2002-06-23 00:38:24 +00:00
|
|
|
- stevesk@cvs.openbsd.org 2002/06/22 23:09:51
|
|
|
|
|
[monitor.c]
|
|
|
|
|
save auth method before monitor_reset_key_state(); bugzilla bug #284;
|
|
|
|
|
ok provos@
|
2002-06-22 18:51:48 +00:00
|
|
|
|
2003-01-24 00:34:52 +00:00
|
|
|
$Id: ChangeLog,v 1.2583 2003/01/24 00:34:52 djm Exp $
|
