Damien Miller
4888671343
- (djm) [openbsd-compat/mktemp.c] forklift upgrade to -current version.
...
The file was totally rewritten between what we had in tree and -current.
2011-09-23 10:56:29 +10:00
Damien Miller
3a359b3228
- millert@cvs.openbsd.org 2008/08/21 16:54:44
...
[mktemp.c]
Remove useless code, the kernel will set errno appropriately if an
element in the path does not exist. OK deraadt@ pvalchev@
2011-09-23 10:47:29 +10:00
Damien Miller
dc0e09b41c
- deraadt@cvs.openbsd.org 2008/07/22 21:47:45
...
[mktemp.c]
use arc4random_uniform(); ok djm millert
2011-09-23 10:46:48 +10:00
Damien Miller
cd92790fcb
- (djm) [openbsd-compat/getgrouplist.c] Remove OpenBSD rcsid marker: the
...
upstream version is YPified and we don't want this
2011-09-23 10:44:03 +10:00
Damien Miller
834e820317
- tobias@cvs.openbsd.org 2007/10/21 11:09:30
...
[mktemp.c]
Comment fix about time consumption of _gettemp.
FreeBSD did this in revision 1.20.
OK deraadt@, krw@
2011-09-23 10:42:02 +10:00
Damien Miller
acdf3fbdba
- (djm) [openbsd-compat/getcwd.c] Remove OpenBSD rcsid marker since we no
...
longer want to sync this file (OpenBSD uses a __getcwd syscall now, we
want this longhand version)
2011-09-23 10:40:50 +10:00
Damien Miller
b9cd0491f7
- millert@cvs.openbsd.org 2006/05/05 15:27:38
...
[openbsd-compat/strlcpy.c]
Convert do {} while loop -> while {} for clarity. No binary change
on most architectures. From Oliver Smith. OK deraadt@ and henning@
2011-09-23 10:38:11 +10:00
Damien Miller
add1e20802
- millert@cvs.openbsd.org 2006/05/05 15:27:38
...
[strlcpy.c]
Convert do {} while loop -> while {} for clarity. No binary change
on most architectures. From Oliver Smith. OK deraadt@ and henning@
2011-09-23 10:38:01 +10:00
Damien Miller
d7be70d052
- djm@cvs.openbsd.org 2011/09/22 06:29:03
...
[sftp.c]
don't let remote_glob() implicitly sort its results in do_globbed_ls() -
in all likelihood, they will be resorted anyway
2011-09-22 21:43:06 +10:00
Damien Miller
57c38ac7d5
- markus@cvs.openbsd.org 2011/09/12 08:46:15
...
[sftp-client.c]
fix leak in do_lsreaddir(); ok djm
2011-09-22 21:42:45 +10:00
Damien Miller
3decdba425
- markus@cvs.openbsd.org 2011/09/11 16:07:26
...
[sftp-client.c]
fix leaks in do_hardlink() and do_readlink(); bz#1921
from Loganaden Velvindron
2011-09-22 21:41:05 +10:00
Damien Miller
1bcbd0a9de
- okan@cvs.openbsd.org 2011/09/11 06:59:05
...
[ssh.1]
document new -O cancel command; ok djm@
2011-09-22 21:40:45 +10:00
Damien Miller
ff773644e6
- markus@cvs.openbsd.org 2011/09/10 22:26:34
...
[channels.c channels.h clientloop.c ssh.1]
support cancellation of local/dynamic forwardings from ~C commandline;
ok & feedback djm@
2011-09-22 21:39:48 +10:00
Damien Miller
f6dff7cd2f
- djm@cvs.openbsd.org 2011/09/09 22:46:44
...
[channels.c channels.h clientloop.h mux.c ssh.c]
support for cancelling local and remote port forwards via the multiplex
socket. Use ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request
the cancellation of the specified forwardings; ok markus@
2011-09-22 21:38:52 +10:00
Damien Miller
9ee2c606c1
- djm@cvs.openbsd.org 2011/09/09 22:38:21
...
[sshd.c]
kill the preauth privsep child on fatal errors in the monitor;
ok markus@
2011-09-22 21:38:30 +10:00
Damien Miller
0603d98b4e
- djm@cvs.openbsd.org 2011/09/09 22:37:01
...
[scp.c]
suppress adding '--' to remote commandlines when the first argument
does not start with '-'. saves breakage on some difficult-to-upgrade
embedded/router platforms; feedback & ok dtucker ok markus
2011-09-22 21:38:00 +10:00
Damien Miller
4cb855b070
- djm@cvs.openbsd.org 2011/09/09 00:44:07
...
[PROTOCOL.mux]
MUX_C_CLOSE_FWD includes forward type in message (though it isn't
implemented anyway)
2011-09-22 21:37:38 +10:00
Damien Miller
f6e758cdba
- djm@cvs.openbsd.org 2011/09/09 00:43:00
...
[ssh_config.5 sshd_config.5]
fix typo in IPQoS parsing: there is no "AF14" class, but there is
an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk
2011-09-22 21:37:13 +10:00
Damien Miller
6232a16a9a
- deraadt@cvs.openbsd.org 2011/09/07 02:18:31
...
[ssh-keygen.1]
typo (they vs the) found by Lawrence Teo
2011-09-22 21:36:00 +10:00
Damien Miller
e029673f1f
- jmc@cvs.openbsd.org 2011/09/05 07:01:44
...
[scp.1]
knock out a useless Ns;
2011-09-22 21:34:56 +10:00
Damien Miller
2918e030fc
- djm@cvs.openbsd.org 2011/09/05 05:59:08
...
[misc.c]
fix typo in IPQoS parsing: there is no "AF14" class, but there is
an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk
2011-09-22 21:34:35 +10:00
Damien Miller
e577772a89
- djm@cvs.openbsd.org 2011/09/05 05:56:13
...
[scp.1 sftp.1]
mention ControlPersist and KbdInteractiveAuthentication in the -o
verbiage in these pages too (prompted by jmc@)
2011-09-22 21:34:15 +10:00
Damien Miller
efad727517
- djm@cvs.openbsd.org 2011/08/26 01:45:15
...
[ssh.1]
Add some missing ssh_config(5) options that can be used in ssh(1)'s
-o argument. Patch from duclare AT guu.fi
2011-09-22 21:33:53 +10:00
Damien Miller
e128a50e35
- djm@cvs.openbsd.org 2011/09/22 06:27:29
...
[glob.c]
fix GLOB_KEEPSTAT without GLOB_NOSORT; the implicit sort was being
applied only to the gl_pathv vector and not the corresponding gl_statv
array. reported in OpenSSH bz#1935; feedback and okay matthew@
2011-09-22 21:22:21 +10:00
Damien Miller
c4bf7dde92
- stsp@cvs.openbsd.org 2011/09/20 10:18:46
...
[glob.c]
In glob(3), limit recursion during matching attempts. Similar to
fnmatch fix. Also collapse consecutive '*' (from NetBSD).
ok miod deraadt
2011-09-22 21:21:48 +10:00
Damien Miller
e01a627047
- pyr@cvs.openbsd.org 2011/05/12 07:15:10
...
[openbsd-compat/glob.c]
When the max number of items for a directory has reached GLOB_LIMIT_READDIR
an error is returned but closedir() is not called.
spotted and fix provided by Frank Denis obsd-tech@pureftpd.org
ok otto@, millert@
2011-09-22 21:20:21 +10:00
Darren Tucker
e8a82c5faf
- (dtucker) [entropy.h] Bug #1932 : remove old definition of init_rng. From
...
Colin Watson.
2011-09-09 11:29:40 +10:00
Damien Miller
022ee24197
- (djm) [contrib/redhat/openssh.spec] Correct restorcon => restorecon
2011-09-07 09:15:02 +10:00
Damien Miller
fb9d8173f0
- (djm) [README version.h] Correct version
2011-09-07 09:11:53 +10:00
Damien Miller
8e4a71e952
- (djm) Release OpenSSH-5.9
2011-09-05 15:39:20 +10:00
Damien Miller
86dcd3e45a
- (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
...
[contrib/suse/openssh.spec] Update version numbers.
2011-09-05 10:29:04 +10:00
Darren Tucker
0dd24e02ec
- (dtucker) [ssh-keygen.c ssh-pkcs11.c] Bug #1929 : add null implementations
...
ofsh-pkcs11.cpkcs_init and pkcs_terminate for building without dlopen support.
2011-09-04 19:59:26 +10:00
Damien Miller
6efd94f32e
- (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal
...
regress errors for the sandbox to warnings. ok tim dtucker
2011-09-04 19:04:16 +10:00
Damien Miller
58ac11a2bd
- (djm) [openbsd-compat/port-linux.c] Suppress logging when attempting
...
to switch SELinux context away from unconfined_t, based on patch from
Jan Chadima; bz#1919 ok dtucker@
2011-08-29 16:09:52 +10:00
Darren Tucker
4438354870
- (dtucker) [auth-skey.c] Add log.h to fix build --with-skey.
2011-08-28 04:50:16 +10:00
Tim Rice
a6e60616be
- (tim) [configure.ac] Typo in error message spotted by Andy Tsouladze
2011-08-17 21:48:22 -07:00
Damien Miller
2df1bec086
- (djm) [regress/cipher-speed.sh regress/try-ciphers.sh] disable HMAC-SHA2
...
MAC tests for platforms that hack EVP_SHA2 support
2011-08-17 12:25:46 +10:00
Damien Miller
062fa30532
- djm@cvs.openbsd.org 2011/08/02 01:23:41
...
[regress/cipher-speed.sh regress/try-ciphers.sh]
add SHA256/SHA512 based HMAC modes
2011-08-17 12:10:02 +10:00
Damien Miller
faf4d80420
- markus@cvs.openbsd.org 2011/06/30 22:44:43
...
[connect-privsep.sh]
test with sandbox enabled; ok djm@
2011-08-17 12:09:19 +10:00
Damien Miller
9231c8bde4
- dtucker@cvs.openbsd.org 2011/06/03 05:35:10
...
[regress/cfgmatch.sh]
use OBJ to find test configs, patch from Tim Rice
2011-08-17 12:08:15 +10:00
Damien Miller
44a6c9340a
- (djm) [contrib/ssh-copy-id] Missing backlslash; spotted by
...
bisson AT archlinux.org
2011-08-17 12:01:44 +10:00
Damien Miller
1a91c0f163
- (djm) [configure.ac] error out if the host lacks the necessary bits for
...
an explicitly requested sandbox type
2011-08-17 11:59:25 +10:00
Damien Miller
9c08312968
- (djm) [ openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
...
binary_pipe is no longer required on Cygwin; patch from Corinna Vinschen
2011-08-17 11:31:07 +10:00
Tim Rice
a1226828ad
- (tim) [mac.c myproposal.h] Wrap SHA256 and SHA512 in ifdefs for
...
OpenSSL 0.9.7. ok djm
2011-08-16 17:29:01 -07:00
Damien Miller
d1eb1dd5ed
- (djm) [contrib/ssh-copy-id] Fix failure for cases where the path to the
...
identify file contained whitespace. bz#1828 patch from gwenael.lambrouin
AT gmail.com; ok dtucker@
2011-08-12 11:22:47 +10:00
Damien Miller
2db9977c06
- (djm) [contrib/redhat/openssh.spec contrib/redhat/sshd.init]
...
[contrib/suse/openssh.spec contrib/suse/rc.sshd] Updated RHEL and SLES
init scrips from imorgan AT nas.nasa.gov
2011-08-12 11:02:35 +10:00
Darren Tucker
4d47ec9c89
- (dtucker) [openbsd-compat/port-linux.c] Bug 1924: Improve selinux context
...
change error by reporting old and new context names Patch from
jchadima at redhat.
2011-08-12 10:12:53 +10:00
Darren Tucker
ddccfb4b98
- dtucker@cvs.openbsd.org 2011/08/07 12:55:30
...
[sftp.1]
typo, fix from Laurent Gautrot
2011-08-07 23:12:26 +10:00
Darren Tucker
91e6b57729
- jmc@cvs.openbsd.org 2010/10/14 20:41:28
...
[moduli.5]
probabalistic -> probabilistic; from naddy
2011-08-07 23:10:56 +10:00
Darren Tucker
f279474f1b
- sobrado@cvs.openbsd.org 2009/10/28 08:56:54
...
[moduli.5]
"Diffie-Hellman" is the usual spelling for the cryptographic protocol
first published by Whitfield Diffie and Martin Hellman in 1976.
ok jmc@
2011-08-07 23:10:11 +10:00