Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-08-31 | - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ] | Damien Miller | |
[platform.c platform.h sshd.c openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c] [openbsd-compat/port-solaris.h] Add support for Solaris process contracts, enabled with --use-solaris-contracts. Patch from Chad Mynhier, tweaked by dtucker@ and myself; ok dtucker@ | |||
2006-08-30 | - (dtucker) [auth.c openbsd-compat/port-aix.c] Bug #1207: always call | Darren Tucker | |
loginsuccess on AIX immediately after authentication to clear the failed login count. Previously this would only happen when an interactive session starts (ie when a pty is allocated) but this means that accounts that have primarily non-interactive sessions (eg scp's) may gradually accumulate enough failures to lock out an account. This change may have a side effect of creating two audit records, one with a tty of "ssh" corresponding to the authentication and one with the allocated pty per interactive session. | |||
2006-08-30 | - (djm) [openbsd-compat/xcrypt.c] needs unistd.h | Damien Miller | |
2006-08-30 | - djm@cvs.openbsd.org 2006/08/30 00:14:37 | Damien Miller | |
[version.h] crank to 4.4 | |||
2006-08-30 | - dtucker@cvs.openbsd.org 2006/08/30 00:06:51 | Damien Miller | |
[sshconnect2.c] Fix regression where SSH2 banner is printed at loglevels ERROR and FATAL where previously it weren't. bz #1221, found by Dean Kopesky, ok djm@ | |||
2006-08-30 | - dtucker@cvs.openbsd.org 2006/08/29 12:02:30 | Damien Miller | |
[gss-genr.c] Work around a problem in Heimdal that occurs when KRB5CCNAME file is missing, by checking whether or not kerberos allocated us a context before attempting to free it. Patch from Simon Wilkinson, tested by biorn@, ok djm@ | |||
2006-08-30 | - djm@cvs.openbsd.org 2006/08/29 10:40:19 | Damien Miller | |
[channels.c session.c] normalise some inconsistent (but harmless) NULL pointer checks spotted by the Stanford SATURN tool, via Isil Dillig; ok markus@ deraadt@ | |||
2006-08-30 | - dtucker@cvs.openbsd.org 2006/08/21 08:15:57 | Damien Miller | |
[sshd.8] Add more detail about what permissions are and aren't accepted for authorized_keys files. Corrections jmc@, ok djm@, "looks good" jmc@ | |||
2006-08-30 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- dtucker@cvs.openbsd.org 2006/08/21 08:14:01 [sshd_config.5] Document HostbasedUsesNameFromPacketOnly. Corrections from jmc@, ok jmc@ djm@ | |||
2006-08-24 | - (dtucker) [openbsd-compat/xmmap.c] Move #define HAVE_MMAP to prevent | Darren Tucker | |
unused variable warning when we have a broken or missing mmap(2). Now with 100% more diff! | |||
2006-08-24 | - (dtucker) [openbsd-compat/xmmap.c] Move #define HAVE_MMAP to prevent | Darren Tucker | |
unused variable warning when we have a broken or missing mmap(2). | |||
2006-08-24 | - (dtucker) [openbsd-compat/rresvport.c] Include <stdlib.h> for malloc. | Darren Tucker | |
2006-08-24 | - (dtucker) [openbsd-compat/bsd-openpty.c] Include for ioctl(2). | Darren Tucker | |
2006-08-24 | - (dtucker) [openbsd-compat/bsd-misc.c] Include <sys/select.h> for select(2) | Darren Tucker | |
on POSIX systems. | |||
2006-08-24 | - (dtucker) [openbsd-compat/bsd-misc.c] Add includes needed for select(2) on | Darren Tucker | |
older systems. | |||
2006-08-24 | - (dtucker) [openbsd-compat/basename.c] Include errno.h. | Darren Tucker | |
2006-08-22 | - (dtucker) [Makefile.in] Bug #1177: fix incorrect path for sshrc in | Darren Tucker | |
Makefile. Patch from santhi.amirta at gmail, ok djm. | |||
2006-08-20 | - (dtucker) [configure.ac] Remove errant "-". | Darren Tucker | |
2006-08-20 | - (dtucker) [configure.ac] Bug #1181: Explicitly test to see if OpenSSL | Darren Tucker | |
(0.9.8a and presumably newer) requires -ldl to successfully link. | |||
2006-08-20 | - (dtucker) [configure.ac] Relocate --with-pam parts in preparation for | Darren Tucker | |
fixing bug #1181. No changes yet. | |||
2006-08-20 | - (dtucker) [configure.ac] Save $LIBS during PAM library tests and restore | Darren Tucker | |
afterward. Removes the need to mangle $LIBS later to remove -lpam and -ldl. | |||
2006-08-20 | - (dtucker) [log.c] Move ifdef to prevent unused variable warning. | Darren Tucker | |
2006-08-19 | - (dtucker) [openbsd-compat/regress/Makefile.in] Add $(EXEEXT) and add a | Darren Tucker | |
single rule for the test progs. | |||
2006-08-19 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- djm@cvs.openbsd.org 2006/08/18 22:41:29 [gss-genr.c] GSSAPI error code should be 0 and not -1; from simon@sxw.org.uk | |||
2006-08-19 | - (djm) Disable sigdie() for platforms that cannot safely syslog inside | Damien Miller | |
a signal handler (basically all of them, excepting OpenBSD); ok dtucker@ | |||
2006-08-19 | - djm@cvs.openbsd.org 2006/08/18 14:40:34 | Damien Miller | |
[gss-genr.c ssh-gss.h] constify host argument to match the rest of the GSSAPI functions and unbreak compilation with -Werror | |||
2006-08-19 | - djm@cvs.openbsd.org 2006/08/18 13:54:54 | Damien Miller | |
[gss-genr.c ssh-gss.h sshconnect2.c] bz #1218 - disable SPNEGO as per RFC4462; diff from simon AT sxw.org.uk ok markus@ | |||
2006-08-19 | - djm@cvs.openbsd.org 2006/08/18 10:27:16 | Damien Miller | |
[misc.h] reorder so prototypes are sorted by the files they refer to; no binary change | |||
2006-08-19 | - markus@cvs.openbsd.org 2006/08/18 09:15:20 | Damien Miller | |
[auth.h session.c sshd.c] delay authentication related cleanups until we're authenticated and all alarms have been cancelled; ok deraadt | |||
2006-08-19 | - deraadt@cvs.openbsd.org 2006/08/18 09:13:26 | Damien Miller | |
[log.c log.h sshd.c] make signal handler termination path shorter; risky code pointed out by mark dowd; ok djm markus | |||
2006-08-19 | - djm@cvs.openbsd.org 2006/08/16 11:47:15 | Damien Miller | |
[sshd.c] factor inetd connection, TCP listen and main TCP accept loop out of main() into separate functions to improve readability; ok markus@ | |||
2006-08-19 | - dtucker@cvs.openbsd.org 2006/08/14 12:40:25 | Damien Miller | |
[servconf.c servconf.h sshd_config.5] Add ability to match groups to Match keyword in sshd_config. Feedback djm@, stevesk@, ok stevesk@. | |||
2006-08-19 | - miod@cvs.openbsd.org 2006/08/12 20:46:46 | Damien Miller | |
[monitor.c monitor_wrap.c] Revert previous include file ordering change, for ssh to compile under gcc2 (or until openssl include files are cleaned of parameter names in function prototypes) | |||
2006-08-19 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- stevesk@cvs.openbsd.org 2006/08/06 01:13:32 [compress.c monitor.c monitor_wrap.c] "zlib.h" can be <zlib.h>; ok djm@ markus@ | |||
2006-08-18 | - (dtucker) [openbsd-compat/regress/Makefile.in] Use implicit rules for the | Darren Tucker | |
test progs instead; they work better than what we have. | |||
2006-08-18 | - (dtucker) [openbsd-compat/regress/snprintftest.c] Newline on error. | Darren Tucker | |
2006-08-18 | - (dtucker) [openbsd-compat/bsd-closefrom.c] Comment out rcsid. | Darren Tucker | |
2006-08-18 | - (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Resync with | Darren Tucker | |
closefrom.c from sudo. | |||
2006-08-17 | - (dtucker) [openbsd-compat/regress/{Makefile.in,closefromtest.c}] Regress | Darren Tucker | |
test for closefrom() in compat code. | |||
2006-08-17 | - (dtucker) [configure.ac openbsd-compat/bsd-closefrom.c] Use F_CLOSEM fcntl | Darren Tucker | |
for closefrom() on AIX. Pointed out by William Ahern. | |||
2006-08-17 | - (dtucker) [openbsd-compat/fake-rfc2553.c openbsd-compat/setproctitle.c] | Darren Tucker | |
Include stdlib.h for malloc and friends. | |||
2006-08-16 | - (djm) [audit-bsm.c] Sprinkle in some headers | Damien Miller | |
2006-08-15 | - (dtucker) [LICENCE] Add Reyk to the list for the compat dir. | Darren Tucker | |
2006-08-07 | - (djm) [openbsd-compat/bsd-getpeereid.c] Add some headers to quiet warnings | Damien Miller | |
on Solaris 10 | |||
2006-08-06 | - (dtucker) [openbsd-compat/{bsd-asprintf.c,bsd-openpty.c,bsd-snprintf.c, | Darren Tucker | |
glob.c}] Include stdlib.h for malloc and friends in compat code. | |||
2006-08-06 | - (dtucker) [defines.h] With the includes.h changes we no longer get the | Darren Tucker | |
name clash on "YES" so we can remove the workaround for it. | |||
2006-08-06 | - (dtucker) [audit-bsm.c] Add additional headers now required. | Darren Tucker | |
2006-08-06 | - (dtucker) [audit.c audit.h] Repair headers. | Darren Tucker | |
2006-08-05 | - (dtucker) [auth-skey.c] monitor_wrap.h needs ssh-gss.h. | Darren Tucker | |
2006-08-05 | - (dtucker) [openbsd-compat/fake-rfc2553.c] Add headers needed for inet_ntoa. | Darren Tucker | |