diff options
author | Colin Watson <cjwatson@debian.org> | 2012-09-07 00:20:47 +0100 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2012-09-07 00:20:47 +0100 |
commit | eab78da6a54225de06271d9c8da650f04a55ed88 (patch) | |
tree | aa258ca77515939f6d89317ff67fbcb0bca08b24 /ssh-sandbox.h | |
parent | a26f5de49df59322fde07f7be91b3e3969c9c238 (diff) | |
parent | c6a2c0334e45419875687d250aed9bea78480f2e (diff) |
* New upstream release (http://www.openssh.com/txt/release-6.1).
- Enable pre-auth sandboxing by default for new installs.
- Allow "PermitOpen none" to refuse all port-forwarding requests
(closes: #543683).
Diffstat (limited to 'ssh-sandbox.h')
-rw-r--r-- | ssh-sandbox.h | 25 |
1 files changed, 5 insertions, 20 deletions
diff --git a/ssh-sandbox.h b/ssh-sandbox.h index 7ee4460d8..dfecd5aa0 100644 --- a/ssh-sandbox.h +++ b/ssh-sandbox.h | |||
@@ -15,24 +15,9 @@ | |||
15 | * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | 15 | * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
16 | */ | 16 | */ |
17 | 17 | ||
18 | typedef struct Sandbox Sandbox; | 18 | struct ssh_sandbox; |
19 | 19 | ||
20 | struct Sandbox { | 20 | struct ssh_sandbox *ssh_sandbox_init(void); |
21 | const char *name; | 21 | void ssh_sandbox_child(struct ssh_sandbox *); |
22 | int (*probe)(void); | 22 | void ssh_sandbox_parent_finish(struct ssh_sandbox *); |
23 | void *(*init)(void); | 23 | void ssh_sandbox_parent_preauth(struct ssh_sandbox *, pid_t); |
24 | void (*child)(void *); | ||
25 | void (*parent_finish)(void *); | ||
26 | void (*parent_preauth)(void *, pid_t); | ||
27 | }; | ||
28 | |||
29 | void *ssh_sandbox_init(void); | ||
30 | void ssh_sandbox_child(void *); | ||
31 | void ssh_sandbox_parent_finish(void *); | ||
32 | void ssh_sandbox_parent_preauth(void *, pid_t); | ||
33 | |||
34 | extern Sandbox ssh_sandbox_systrace; | ||
35 | extern Sandbox ssh_sandbox_darwin; | ||
36 | extern Sandbox ssh_sandbox_seccomp_filter; | ||
37 | extern Sandbox ssh_sandbox_rlimit; | ||
38 | extern Sandbox ssh_sandbox_null; | ||