Commit Graph

2518 Commits

Author SHA1 Message Date
Ben Lindstrom
1f53083fc4 - markus@cvs.openbsd.org 2002/11/21 22:22:50
[dh.c]
     debug->debug2
2002-12-23 02:03:02 +00:00
Ben Lindstrom
f49dbff61d - markus@cvs.openbsd.org 2002/11/18 16:43:44
[clientloop.c]
     don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
     e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
2002-12-23 02:01:55 +00:00
Ben Lindstrom
44adb8fed9 - fgsch@cvs.openbsd.org 2002/11/15 10:03:09
[authfile.c]
     lseek(2) may return -1 when getting the public/private key lenght.
     Simplify the code and check for errors using fstat(2).

     Problem reported by Mauricio Sanchez, markus@ ok.
2002-12-23 02:00:23 +00:00
Damien Miller
ab1c12a11c - (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org 2002-12-05 20:59:33 +11:00
Tim Rice
1c9e688548 [configure.ac] fix STDPATH test for IRIX. First reported by advax@triumf.ca.
This type of solution tested by <herb@sgi.com>
2002-11-22 13:29:01 -08:00
Tim Rice
be2396458e [configure.ac] remove unused variables no_libsocket and no_libnsl 2002-11-13 15:55:55 -08:00
Tim Rice
748fcf9881 [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is not world writable. 2002-11-13 15:50:04 -08:00
Ben Lindstrom
f5397c081d - (bal) AIX does not log login attempts for unknown users (bug #432).
patch by dtucker@zip.com.au
2002-11-09 16:11:10 +00:00
Ben Lindstrom
224313cdae - (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c
ntsec now default if cygwin version beginning w/ version 56.  Patch
   by Corinna Vinschen <vinschen@redhat.com>
2002-11-09 15:59:27 +00:00
Ben Lindstrom
007eb912ea - markus@cvs.openbsd.org 2002/11/07 22:35:38
[scp.c]
     check exit status from ssh, and exit(1) if ssh fails; bug#369;
     binder@arago.de
2002-11-09 15:54:08 +00:00
Ben Lindstrom
b6df73b06a - markus@cvs.openbsd.org 2002/11/07 22:08:07
[readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
     we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
     because HostbasedAuthentication might be enabled based on the
     target host and ssh-keysign(8) does not know the remote hostname
     and not trust ssh(1) about the hostname, so we add a new option
     EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
2002-11-09 15:52:31 +00:00
Ben Lindstrom
c2faa4a504 - markus@cvs.openbsd.org 2002/11/07 16:28:47
[sshd.c]
     log to stderr if -ie is given, bug #414, prj@po.cwru.edu
2002-11-09 15:50:03 +00:00
Ben Lindstrom
8e879cf691 - markus@cvs.openbsd.org 2002/11/05 20:10:37
[sftp-client.c]
     typo; GaryF@livevault.com
2002-11-09 15:48:49 +00:00
Ben Lindstrom
41ee2b0d77 - markus@cvs.openbsd.org 2002/11/05 19:45:20
[monitor.c]
     handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
2002-11-09 15:47:47 +00:00
Ben Lindstrom
9bda7ae4c6 - markus@cvs.openbsd.org 2002/11/04 10:09:51
[packet.c]
     log before send disconnect; ok djm@
2002-11-09 15:46:24 +00:00
Ben Lindstrom
485075e8fa - markus@cvs.openbsd.org 2002/11/04 10:07:53
[auth.c]
     don't compare against pw_home if realpath fails for pw_home (seen
     on AFS); ok djm@
2002-11-09 15:45:12 +00:00
Ben Lindstrom
ee844912c9 - markus@cvs.openbsd.org 2002/10/23 10:40:16
[bufaux.c]
     %u for u_int
2002-11-09 15:43:23 +00:00
Ben Lindstrom
0cc2a47674 - markus@cvs.openbsd.org 2002/10/23 10:32:13
[packet.c]
     use %u for u_int
2002-11-09 15:41:39 +00:00
Ben Lindstrom
0851381bf7 - itojun@cvs.openbsd.org 2002/10/16 14:31:48
[sftp-common.c]
     64bit pedant.  %llu is "unsigned long long".  markus ok
2002-11-09 15:40:34 +00:00
Damien Miller
885929cd31 fix changelog 2002-10-21 20:26:16 +10:00
Damien Miller
7b3f58cbcd - (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from
dirk.meyer@dinoex.sub.org
2002-10-21 10:50:25 +10:00
Damien Miller
5a5da88c59 - (djm) Kill ssh-rand-helper children on timeout, patch from
dtucker@zip.com.au
2002-10-21 10:13:35 +10:00
Ben Lindstrom
3e0064781b - (bal) More advanced strsep test by Darren Tucker <dtucker@zip.com.au> 2002-10-16 00:24:03 +00:00
Ben Lindstrom
97e38d8667 20021015
- (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
2002-10-16 00:13:52 +00:00
Tim Rice
94f628f0ab [contrib/caldera/openssh.spec] make ssh-agent setgid nobody 2002-10-15 13:16:55 -07:00
Ben Lindstrom
dc3c757f57 - (bal) Disable post-authentication Privsep for OSF/1. It conflicts with
SIA.
2002-10-04 23:54:54 +00:00
Damien Miller
901119beab - (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2 2002-10-04 11:10:04 +10:00
Damien Miller
510d51300e - (djm) Bump RPM spec version numbers 2002-10-03 11:56:58 +10:00
Damien Miller
7156fc7da6 - markus@cvs.openbsd.org 2002/10/01 13:24:50
[version.h]
     OpenSSH 3.5
2002-10-03 11:55:37 +10:00
Damien Miller
af9de38c43 - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2002/10/01 20:34:12
     [ssh-agent.c]
     allow root to access the agent, since there is no protection from root.
2002-10-03 11:54:35 +10:00
Damien Miller
d8769625fb - stevesk@cvs.openbsd.org 2002/09/27 15:46:21
[ssh.1]
     clarify compression level protocol 1 only; ok markus@ deraadt@
2002-09-30 12:00:55 +10:00
Damien Miller
e9264973ad - (djm) OpenBSD CVS Sync
- mickey@cvs.openbsd.org 2002/09/27 10:42:09
     [compat.c compat.h sshd.c]
     add a generic match for a prober, such as sie big brother;
     idea from stevesk@; markus@ ok
2002-09-30 11:59:21 +10:00
Damien Miller
50f6123eef - (djm) Tidy contrib/, add Makefile for GNOME passphrase dialogs, tweak README 2002-09-30 10:40:39 +10:00
Damien Miller
d94e549ea8 - markus@cvs.openbsd.org 2002/09/26 11:38:43
[auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c]
     [monitor_wrap.h]
     krb4 + privsep; ok dugsong@, deraadt@
2002-09-27 13:25:58 +10:00
Damien Miller
d27a76de65 - markus@cvs.openbsd.org 2002/09/25 15:19:02
[sshd.c]
     typo; pilot@monkey.org
2002-09-27 13:22:31 +10:00
Damien Miller
d681d2602c - (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2002/09/25 11:17:16
     [sshd_config]
     sync LoginGraceTime with default
2002-09-27 13:21:57 +10:00
Tim Rice
81ed518b9b Cray fixes (bug 367) based on patch from Wendy Palm @ cray.
This does not include the deattack.c fixes.
2002-09-25 17:38:46 -07:00
Ben Lindstrom
164725f40e l) Fix issue where successfull login does not clear failure counts
in AIX.  Patch by dtucker@zip.com.au ok by djm
2002-09-25 23:14:14 +00:00
Damien Miller
dcbb6c2dc9 - todd@cvs.openbsd.org 2002/09/24 20:59:44
[sshd.8]
     tweak the example $HOME/.ssh/rc script to not show on any cmdline the
     sensitive data it handles. This fixes bug # 402 as reported by
     kolya@mit.edu (Nickolai Zeldovich).
     ok markus@ and stevesk@
2002-09-25 12:20:52 +10:00
Damien Miller
ef73f50a12 - markus@cvs.openbsd.org 2002/09/24 08:46:04
[monitor.c]
     only call kerberos code for authctxt->valid
2002-09-25 12:20:17 +10:00
Damien Miller
7db40c9e2e - markus@cvs.openbsd.org 2002/09/23 22:11:05
[monitor.c]
     only call auth_krb5 if kerberos is enabled; ok deraadt@
2002-09-25 12:19:39 +10:00
Damien Miller
b2f844dc51 - (djm) OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2002/09/23 20:46:27
     [canohost.c]
     change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
     non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
2002-09-25 12:19:08 +10:00
Tim Rice
2c961cecb0 [configure.ac] s/return/exit/ patch by dtucker@zip.com.au
From autoconf guidelines:
   "Test programs should exit, not return, from main, because on some
    systems (old Suns, at least) the argument to return in main is ignored."
2002-09-23 16:54:10 -07:00
Damien Miller
6f0a188857 - stevesk@cvs.openbsd.org 2002/09/20 18:41:29
[auth.c]
     log illegal user here for missing privsep case (ssh2).
     this is executed in the monitor. ok markus@
2002-09-22 01:26:51 +10:00
Damien Miller
16aed05578 - stevesk@cvs.openbsd.org 2002/09/19 16:03:15
[serverloop.c]
     log IP address also; ok markus@
2002-09-22 01:26:27 +10:00
Damien Miller
2138d152b2 - markus@cvs.openbsd.org 2002/09/19 15:51:23
[ssh-add.c]
     typo; cd@kalkatraz.de
2002-09-22 01:26:00 +10:00
Damien Miller
a0e4559d72 - (djm) OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2002/09/19 14:53:14
     [compat.c]
2002-09-22 01:25:35 +10:00
Damien Miller
8c4e18a6ec - djm@cvs.openbsd.org 2002/09/19 01:58:18
[ssh.c sshconnect.c]
     bugzilla.mindrot.org #223 - ProxyCommands don't exit.
     Patch from dtucker@zip.com.au; ok markus@
2002-09-19 12:05:02 +10:00
Damien Miller
9b037b837a - itojun@cvs.openbsd.org 2002/09/17 07:47:02
[channels.c]
     don't quit while creating X11 listening socket.
     http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
     got from portable.  markus ok
2002-09-19 11:54:54 +10:00
Damien Miller
86247e2798 - stevesk@cvs.openbsd.org 2002/09/16 22:03:13
[sshd.8]
     reference moduli(5) in FILES /etc/moduli.
2002-09-19 11:51:53 +10:00