diff options
author | Damien Miller <djm@mindrot.org> | 2002-05-15 10:12:29 +1000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2002-05-15 10:12:29 +1000 |
commit | 860e929fa2c804d66aa9a0586cd097b00bd2cac2 (patch) | |
tree | ef7a7b8c5ee11af13920b78e046c32b413a60fe1 /ChangeLog | |
parent | ee5e3b2d8a9d99d7d254f7a6c715ed541810edeb (diff) |
wrap
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 55 |
1 files changed, 33 insertions, 22 deletions
@@ -11,22 +11,23 @@ | |||
11 | 20020513 | 11 | 20020513 |
12 | - (stevesk) add initial README.privsep | 12 | - (stevesk) add initial README.privsep |
13 | - (stevesk) [configure.ac] nicer message: --with-privsep-user=user | 13 | - (stevesk) [configure.ac] nicer message: --with-privsep-user=user |
14 | - (djm) Add --with-superuser-path=xxx configure option to specify what $PATH | 14 | - (djm) Add --with-superuser-path=xxx configure option to specify |
15 | the superuser receives. | 15 | what $PATH the superuser receives. |
16 | - (djm) Bug #231: UsePrivilegeSeparation turns off Banner. | 16 | - (djm) Bug #231: UsePrivilegeSeparation turns off Banner. |
17 | - (djm) Add --with-privsep-path configure option | 17 | - (djm) Add --with-privsep-path configure option |
18 | - (djm) Update RPM spec file: different superuser path, use | 18 | - (djm) Update RPM spec file: different superuser path, use |
19 | /var/empty/sshd for privsep | 19 | /var/empty/sshd for privsep |
20 | - (djm) Bug #234: missing readpassphrase declaration and defines | 20 | - (djm) Bug #234: missing readpassphrase declaration and defines |
21 | - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ OpenSSL < 0.9.6 | 21 | - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ |
22 | OpenSSL < 0.9.6 | ||
22 | 23 | ||
23 | 20020511 | 24 | 20020511 |
24 | - (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch. | 25 | - (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch. |
25 | Now only searches system and /usr/local/ssl (OpenSSL's default install path) | 26 | Now only searches system and /usr/local/ssl (OpenSSL's default install path) |
26 | Others must use --with-ssl-dir=.... | 27 | Others must use --with-ssl-dir=.... |
27 | - (tim) [monitor_fdpass.c] fix for systems that have both | 28 | - (tim) [monitor_fdpass.c] fix for systems that have both |
28 | HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h has | 29 | HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h |
29 | #define msg_accrights msg_control | 30 | has #define msg_accrights msg_control |
30 | 31 | ||
31 | 20020510 | 32 | 20020510 |
32 | - (stevesk) [auth.c] Shadow account and expiration cleanup. Now | 33 | - (stevesk) [auth.c] Shadow account and expiration cleanup. Now |
@@ -75,7 +76,8 @@ | |||
75 | 20020426 | 76 | 20020426 |
76 | - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode | 77 | - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode |
77 | during distprep only | 78 | during distprep only |
78 | - (djm) Disable PAM password expiry until a complete fix for bug #188 exists | 79 | - (djm) Disable PAM password expiry until a complete fix for bug #188 |
80 | exists | ||
79 | - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on | 81 | - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on |
80 | patch from openssh@misc.tecq.org | 82 | patch from openssh@misc.tecq.org |
81 | 83 | ||
@@ -148,21 +150,23 @@ | |||
148 | 150 | ||
149 | 20020421 | 151 | 20020421 |
150 | - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0). | 152 | - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0). |
151 | entropy.c needs seteuid(getuid()) for the setuid(original_uid) to succeed. | 153 | entropy.c needs seteuid(getuid()) for the setuid(original_uid) to |
152 | Patch by gert@greenie.muc.de. This fixes one part of Bug 208 | 154 | succeed. Patch by gert@greenie.muc.de. This fixes one part of Bug 208 |
153 | 155 | ||
154 | 20020418 | 156 | 20020418 |
155 | - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from | 157 | - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from |
156 | Sturle Sunde <sturle.sunde@usit.uio.no> | 158 | Sturle Sunde <sturle.sunde@usit.uio.no> |
157 | 159 | ||
158 | 20020417 | 160 | 20020417 |
159 | - (djm) Tell users to configure /dev/random support into OpenSSL in INSTALL | 161 | - (djm) Tell users to configure /dev/random support into OpenSSL in |
162 | INSTALL | ||
160 | - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca | 163 | - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca |
161 | - (tim) [configure.ac] Issue warning on --with-default-path=/some_path | 164 | - (tim) [configure.ac] Issue warning on --with-default-path=/some_path |
162 | if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com> | 165 | if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com> |
163 | 166 | ||
164 | 20020415 | 167 | 20020415 |
165 | - (djm) Unbreak "make install". Fix from Darren Tucker <dtucker@zip.com.au> | 168 | - (djm) Unbreak "make install". Fix from Darren Tucker |
169 | <dtucker@zip.com.au> | ||
166 | - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen | 170 | - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen |
167 | - (tim) [configure.ac] add tests for recvmsg and sendmsg. | 171 | - (tim) [configure.ac] add tests for recvmsg and sendmsg. |
168 | [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for | 172 | [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for |
@@ -200,7 +204,8 @@ | |||
200 | - (bal) OpenBSD CVS Sync | 204 | - (bal) OpenBSD CVS Sync |
201 | - markus@cvs.openbsd.org 2002/04/10 08:21:47 | 205 | - markus@cvs.openbsd.org 2002/04/10 08:21:47 |
202 | [auth1.c compat.c compat.h] | 206 | [auth1.c compat.c compat.h] |
203 | strip '@' from username only for KerbV and known broken clients, bug #204 | 207 | strip '@' from username only for KerbV and known broken clients, |
208 | bug #204 | ||
204 | - markus@cvs.openbsd.org 2002/04/10 08:56:01 | 209 | - markus@cvs.openbsd.org 2002/04/10 08:56:01 |
205 | [version.h] | 210 | [version.h] |
206 | OpenSSH_3.2 | 211 | OpenSSH_3.2 |
@@ -271,13 +276,15 @@ | |||
271 | - (bal) OpenBSD CVS Sync (now for the real sync) | 276 | - (bal) OpenBSD CVS Sync (now for the real sync) |
272 | - markus@cvs.openbsd.org 2002/03/27 22:21:45 | 277 | - markus@cvs.openbsd.org 2002/03/27 22:21:45 |
273 | [ssh-keygen.c] | 278 | [ssh-keygen.c] |
274 | try to import keys with extra trailing === (seen with ssh.com < 2.0.12) | 279 | try to import keys with extra trailing === (seen with ssh.com < |
280 | 2.0.12) | ||
275 | - markus@cvs.openbsd.org 2002/03/28 15:34:51 | 281 | - markus@cvs.openbsd.org 2002/03/28 15:34:51 |
276 | [session.c] | 282 | [session.c] |
277 | do not call record_login twice (for use_privsep) | 283 | do not call record_login twice (for use_privsep) |
278 | - markus@cvs.openbsd.org 2002/03/29 18:59:32 | 284 | - markus@cvs.openbsd.org 2002/03/29 18:59:32 |
279 | [session.c session.h] | 285 | [session.c session.h] |
280 | retrieve last login time before the pty is allocated, store per session | 286 | retrieve last login time before the pty is allocated, store per |
287 | session | ||
281 | - stevesk@cvs.openbsd.org 2002/03/29 19:16:22 | 288 | - stevesk@cvs.openbsd.org 2002/03/29 19:16:22 |
282 | [sshd.8] | 289 | [sshd.8] |
283 | RSA key modulus size minimum 768; ok markus@ | 290 | RSA key modulus size minimum 768; ok markus@ |
@@ -335,7 +342,8 @@ | |||
335 | do not talk about packets in bufaux | 342 | do not talk about packets in bufaux |
336 | - rees@cvs.openbsd.org 2002/03/26 18:46:59 | 343 | - rees@cvs.openbsd.org 2002/03/26 18:46:59 |
337 | [scard.c] | 344 | [scard.c] |
338 | try_AUT0 in read_pubkey too, for those paranoid few who want to acl 'sh' | 345 | try_AUT0 in read_pubkey too, for those paranoid few who want to |
346 | acl 'sh' | ||
339 | - markus@cvs.openbsd.org 2002/03/26 22:50:39 | 347 | - markus@cvs.openbsd.org 2002/03/26 22:50:39 |
340 | [channels.h] | 348 | [channels.h] |
341 | CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too | 349 | CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too |
@@ -392,8 +400,9 @@ | |||
392 | simplify num_identity_files handling | 400 | simplify num_identity_files handling |
393 | - markus@cvs.openbsd.org 2002/03/25 21:13:51 | 401 | - markus@cvs.openbsd.org 2002/03/25 21:13:51 |
394 | [channels.c channels.h compat.c compat.h nchan.c] | 402 | [channels.c channels.h compat.c compat.h nchan.c] |
395 | don't send stderr data after EOF, accept this from older known (broken) | 403 | don't send stderr data after EOF, accept this from older known |
396 | sshd servers only, fixes http://bugzilla.mindrot.org/show_bug.cgi?id=179 | 404 | (broken) sshd servers only, fixes |
405 | http://bugzilla.mindrot.org/show_bug.cgi?id=179 | ||
397 | - stevesk@cvs.openbsd.org 2002/03/26 03:24:01 | 406 | - stevesk@cvs.openbsd.org 2002/03/26 03:24:01 |
398 | [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h] | 407 | [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h] |
399 | $OpenBSD$ | 408 | $OpenBSD$ |
@@ -431,7 +440,8 @@ | |||
431 | indent | 440 | indent |
432 | - markus@cvs.openbsd.org 2002/03/14 15:24:27 | 441 | - markus@cvs.openbsd.org 2002/03/14 15:24:27 |
433 | [sshconnect1.c] | 442 | [sshconnect1.c] |
434 | don't trust size sent by (rogue) server; noted by s.esser@e-matters.de | 443 | don't trust size sent by (rogue) server; noted by |
444 | s.esser@e-matters.de | ||
435 | - markus@cvs.openbsd.org 2002/03/14 16:38:26 | 445 | - markus@cvs.openbsd.org 2002/03/14 16:38:26 |
436 | [sshd.c] | 446 | [sshd.c] |
437 | split out ssh1 session key decryption; ok provos@ | 447 | split out ssh1 session key decryption; ok provos@ |
@@ -452,7 +462,8 @@ | |||
452 | BSD license. from Daniel Kouril via Dug Song. ok markus@ | 462 | BSD license. from Daniel Kouril via Dug Song. ok markus@ |
453 | - provos@cvs.openbsd.org 2002/03/17 20:25:56 | 463 | - provos@cvs.openbsd.org 2002/03/17 20:25:56 |
454 | [auth.c auth.h auth1.c auth2.c] | 464 | [auth.c auth.h auth1.c auth2.c] |
455 | getpwnamallow returns struct passwd * only if user valid; okay markus@ | 465 | getpwnamallow returns struct passwd * only if user valid; |
466 | okay markus@ | ||
456 | - provos@cvs.openbsd.org 2002/03/18 01:12:14 | 467 | - provos@cvs.openbsd.org 2002/03/18 01:12:14 |
457 | [auth.h auth1.c auth2.c sshd.c] | 468 | [auth.h auth1.c auth2.c sshd.c] |
458 | have the authentication functions return the authentication context | 469 | have the authentication functions return the authentication context |
@@ -568,9 +579,9 @@ | |||
568 | remove unused, sync w/ cmdline patch in my tree. | 579 | remove unused, sync w/ cmdline patch in my tree. |
569 | 580 | ||
570 | 20020317 | 581 | 20020317 |
571 | - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is wanted, | 582 | - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is |
572 | warn if directory does not exist. Put system directories in front of | 583 | wanted, warn if directory does not exist. Put system directories in |
573 | PATH for finding entorpy commands. | 584 | front of PATH for finding entorpy commands. |
574 | - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package | 585 | - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package |
575 | build fixes. Patch by Darren Tucker <dtucker@zip.com.au> | 586 | build fixes. Patch by Darren Tucker <dtucker@zip.com.au> |
576 | [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have | 587 | [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have |
@@ -590,4 +601,4 @@ | |||
590 | - (stevesk) entropy.c: typo in debug message | 601 | - (stevesk) entropy.c: typo in debug message |
591 | - (djm) ssh-keygen -i needs seeded RNG; report from markus@ | 602 | - (djm) ssh-keygen -i needs seeded RNG; report from markus@ |
592 | 603 | ||
593 | $Id: ChangeLog,v 1.2119 2002/05/15 00:08:17 djm Exp $ | 604 | $Id: ChangeLog,v 1.2120 2002/05/15 00:12:29 djm Exp $ |