mirror of git://anongit.mindrot.org/openssh.git
wrap
This commit is contained in:
parent
ee5e3b2d8a
commit
860e929fa2
55
ChangeLog
55
ChangeLog
|
@ -11,22 +11,23 @@
|
||||||
20020513
|
20020513
|
||||||
- (stevesk) add initial README.privsep
|
- (stevesk) add initial README.privsep
|
||||||
- (stevesk) [configure.ac] nicer message: --with-privsep-user=user
|
- (stevesk) [configure.ac] nicer message: --with-privsep-user=user
|
||||||
- (djm) Add --with-superuser-path=xxx configure option to specify what $PATH
|
- (djm) Add --with-superuser-path=xxx configure option to specify
|
||||||
the superuser receives.
|
what $PATH the superuser receives.
|
||||||
- (djm) Bug #231: UsePrivilegeSeparation turns off Banner.
|
- (djm) Bug #231: UsePrivilegeSeparation turns off Banner.
|
||||||
- (djm) Add --with-privsep-path configure option
|
- (djm) Add --with-privsep-path configure option
|
||||||
- (djm) Update RPM spec file: different superuser path, use
|
- (djm) Update RPM spec file: different superuser path, use
|
||||||
/var/empty/sshd for privsep
|
/var/empty/sshd for privsep
|
||||||
- (djm) Bug #234: missing readpassphrase declaration and defines
|
- (djm) Bug #234: missing readpassphrase declaration and defines
|
||||||
- (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ OpenSSL < 0.9.6
|
- (djm) Add INSTALL warning about SSH protocol 1 blowfish w/
|
||||||
|
OpenSSL < 0.9.6
|
||||||
|
|
||||||
20020511
|
20020511
|
||||||
- (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch.
|
- (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch.
|
||||||
Now only searches system and /usr/local/ssl (OpenSSL's default install path)
|
Now only searches system and /usr/local/ssl (OpenSSL's default install path)
|
||||||
Others must use --with-ssl-dir=....
|
Others must use --with-ssl-dir=....
|
||||||
- (tim) [monitor_fdpass.c] fix for systems that have both
|
- (tim) [monitor_fdpass.c] fix for systems that have both
|
||||||
HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h has
|
HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h
|
||||||
#define msg_accrights msg_control
|
has #define msg_accrights msg_control
|
||||||
|
|
||||||
20020510
|
20020510
|
||||||
- (stevesk) [auth.c] Shadow account and expiration cleanup. Now
|
- (stevesk) [auth.c] Shadow account and expiration cleanup. Now
|
||||||
|
@ -75,7 +76,8 @@
|
||||||
20020426
|
20020426
|
||||||
- (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode
|
- (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode
|
||||||
during distprep only
|
during distprep only
|
||||||
- (djm) Disable PAM password expiry until a complete fix for bug #188 exists
|
- (djm) Disable PAM password expiry until a complete fix for bug #188
|
||||||
|
exists
|
||||||
- (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on
|
- (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on
|
||||||
patch from openssh@misc.tecq.org
|
patch from openssh@misc.tecq.org
|
||||||
|
|
||||||
|
@ -148,21 +150,23 @@
|
||||||
|
|
||||||
20020421
|
20020421
|
||||||
- (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
|
- (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0).
|
||||||
entropy.c needs seteuid(getuid()) for the setuid(original_uid) to succeed.
|
entropy.c needs seteuid(getuid()) for the setuid(original_uid) to
|
||||||
Patch by gert@greenie.muc.de. This fixes one part of Bug 208
|
succeed. Patch by gert@greenie.muc.de. This fixes one part of Bug 208
|
||||||
|
|
||||||
20020418
|
20020418
|
||||||
- (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
|
- (djm) Avoid SIGCHLD breakage when run from rsync. Fix from
|
||||||
Sturle Sunde <sturle.sunde@usit.uio.no>
|
Sturle Sunde <sturle.sunde@usit.uio.no>
|
||||||
|
|
||||||
20020417
|
20020417
|
||||||
- (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL
|
- (djm) Tell users to configure /dev/random support into OpenSSL in
|
||||||
|
INSTALL
|
||||||
- (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
|
- (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca
|
||||||
- (tim) [configure.ac] Issue warning on --with-default-path=/some_path
|
- (tim) [configure.ac] Issue warning on --with-default-path=/some_path
|
||||||
if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
|
if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com>
|
||||||
|
|
||||||
20020415
|
20020415
|
||||||
- (djm) Unbreak "make install". Fix from Darren Tucker <dtucker@zip.com.au>
|
- (djm) Unbreak "make install". Fix from Darren Tucker
|
||||||
|
<dtucker@zip.com.au>
|
||||||
- (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
|
- (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen
|
||||||
- (tim) [configure.ac] add tests for recvmsg and sendmsg.
|
- (tim) [configure.ac] add tests for recvmsg and sendmsg.
|
||||||
[monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
|
[monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for
|
||||||
|
@ -200,7 +204,8 @@
|
||||||
- (bal) OpenBSD CVS Sync
|
- (bal) OpenBSD CVS Sync
|
||||||
- markus@cvs.openbsd.org 2002/04/10 08:21:47
|
- markus@cvs.openbsd.org 2002/04/10 08:21:47
|
||||||
[auth1.c compat.c compat.h]
|
[auth1.c compat.c compat.h]
|
||||||
strip '@' from username only for KerbV and known broken clients, bug #204
|
strip '@' from username only for KerbV and known broken clients,
|
||||||
|
bug #204
|
||||||
- markus@cvs.openbsd.org 2002/04/10 08:56:01
|
- markus@cvs.openbsd.org 2002/04/10 08:56:01
|
||||||
[version.h]
|
[version.h]
|
||||||
OpenSSH_3.2
|
OpenSSH_3.2
|
||||||
|
@ -271,13 +276,15 @@
|
||||||
- (bal) OpenBSD CVS Sync (now for the real sync)
|
- (bal) OpenBSD CVS Sync (now for the real sync)
|
||||||
- markus@cvs.openbsd.org 2002/03/27 22:21:45
|
- markus@cvs.openbsd.org 2002/03/27 22:21:45
|
||||||
[ssh-keygen.c]
|
[ssh-keygen.c]
|
||||||
try to import keys with extra trailing === (seen with ssh.com < 2.0.12)
|
try to import keys with extra trailing === (seen with ssh.com <
|
||||||
|
2.0.12)
|
||||||
- markus@cvs.openbsd.org 2002/03/28 15:34:51
|
- markus@cvs.openbsd.org 2002/03/28 15:34:51
|
||||||
[session.c]
|
[session.c]
|
||||||
do not call record_login twice (for use_privsep)
|
do not call record_login twice (for use_privsep)
|
||||||
- markus@cvs.openbsd.org 2002/03/29 18:59:32
|
- markus@cvs.openbsd.org 2002/03/29 18:59:32
|
||||||
[session.c session.h]
|
[session.c session.h]
|
||||||
retrieve last login time before the pty is allocated, store per session
|
retrieve last login time before the pty is allocated, store per
|
||||||
|
session
|
||||||
- stevesk@cvs.openbsd.org 2002/03/29 19:16:22
|
- stevesk@cvs.openbsd.org 2002/03/29 19:16:22
|
||||||
[sshd.8]
|
[sshd.8]
|
||||||
RSA key modulus size minimum 768; ok markus@
|
RSA key modulus size minimum 768; ok markus@
|
||||||
|
@ -335,7 +342,8 @@
|
||||||
do not talk about packets in bufaux
|
do not talk about packets in bufaux
|
||||||
- rees@cvs.openbsd.org 2002/03/26 18:46:59
|
- rees@cvs.openbsd.org 2002/03/26 18:46:59
|
||||||
[scard.c]
|
[scard.c]
|
||||||
try_AUT0 in read_pubkey too, for those paranoid few who want to acl 'sh'
|
try_AUT0 in read_pubkey too, for those paranoid few who want to
|
||||||
|
acl 'sh'
|
||||||
- markus@cvs.openbsd.org 2002/03/26 22:50:39
|
- markus@cvs.openbsd.org 2002/03/26 22:50:39
|
||||||
[channels.h]
|
[channels.h]
|
||||||
CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too
|
CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too
|
||||||
|
@ -392,8 +400,9 @@
|
||||||
simplify num_identity_files handling
|
simplify num_identity_files handling
|
||||||
- markus@cvs.openbsd.org 2002/03/25 21:13:51
|
- markus@cvs.openbsd.org 2002/03/25 21:13:51
|
||||||
[channels.c channels.h compat.c compat.h nchan.c]
|
[channels.c channels.h compat.c compat.h nchan.c]
|
||||||
don't send stderr data after EOF, accept this from older known (broken)
|
don't send stderr data after EOF, accept this from older known
|
||||||
sshd servers only, fixes http://bugzilla.mindrot.org/show_bug.cgi?id=179
|
(broken) sshd servers only, fixes
|
||||||
|
http://bugzilla.mindrot.org/show_bug.cgi?id=179
|
||||||
- stevesk@cvs.openbsd.org 2002/03/26 03:24:01
|
- stevesk@cvs.openbsd.org 2002/03/26 03:24:01
|
||||||
[monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h]
|
[monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h]
|
||||||
$OpenBSD$
|
$OpenBSD$
|
||||||
|
@ -431,7 +440,8 @@
|
||||||
indent
|
indent
|
||||||
- markus@cvs.openbsd.org 2002/03/14 15:24:27
|
- markus@cvs.openbsd.org 2002/03/14 15:24:27
|
||||||
[sshconnect1.c]
|
[sshconnect1.c]
|
||||||
don't trust size sent by (rogue) server; noted by s.esser@e-matters.de
|
don't trust size sent by (rogue) server; noted by
|
||||||
|
s.esser@e-matters.de
|
||||||
- markus@cvs.openbsd.org 2002/03/14 16:38:26
|
- markus@cvs.openbsd.org 2002/03/14 16:38:26
|
||||||
[sshd.c]
|
[sshd.c]
|
||||||
split out ssh1 session key decryption; ok provos@
|
split out ssh1 session key decryption; ok provos@
|
||||||
|
@ -452,7 +462,8 @@
|
||||||
BSD license. from Daniel Kouril via Dug Song. ok markus@
|
BSD license. from Daniel Kouril via Dug Song. ok markus@
|
||||||
- provos@cvs.openbsd.org 2002/03/17 20:25:56
|
- provos@cvs.openbsd.org 2002/03/17 20:25:56
|
||||||
[auth.c auth.h auth1.c auth2.c]
|
[auth.c auth.h auth1.c auth2.c]
|
||||||
getpwnamallow returns struct passwd * only if user valid; okay markus@
|
getpwnamallow returns struct passwd * only if user valid;
|
||||||
|
okay markus@
|
||||||
- provos@cvs.openbsd.org 2002/03/18 01:12:14
|
- provos@cvs.openbsd.org 2002/03/18 01:12:14
|
||||||
[auth.h auth1.c auth2.c sshd.c]
|
[auth.h auth1.c auth2.c sshd.c]
|
||||||
have the authentication functions return the authentication context
|
have the authentication functions return the authentication context
|
||||||
|
@ -568,9 +579,9 @@
|
||||||
remove unused, sync w/ cmdline patch in my tree.
|
remove unused, sync w/ cmdline patch in my tree.
|
||||||
|
|
||||||
20020317
|
20020317
|
||||||
- (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is wanted,
|
- (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is
|
||||||
warn if directory does not exist. Put system directories in front of
|
wanted, warn if directory does not exist. Put system directories in
|
||||||
PATH for finding entorpy commands.
|
front of PATH for finding entorpy commands.
|
||||||
- (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package
|
- (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package
|
||||||
build fixes. Patch by Darren Tucker <dtucker@zip.com.au>
|
build fixes. Patch by Darren Tucker <dtucker@zip.com.au>
|
||||||
[contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have
|
[contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have
|
||||||
|
@ -590,4 +601,4 @@
|
||||||
- (stevesk) entropy.c: typo in debug message
|
- (stevesk) entropy.c: typo in debug message
|
||||||
- (djm) ssh-keygen -i needs seeded RNG; report from markus@
|
- (djm) ssh-keygen -i needs seeded RNG; report from markus@
|
||||||
|
|
||||||
$Id: ChangeLog,v 1.2119 2002/05/15 00:08:17 djm Exp $
|
$Id: ChangeLog,v 1.2120 2002/05/15 00:12:29 djm Exp $
|
||||||
|
|
Loading…
Reference in New Issue