summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-05-22crank rpm spec versionsDamien Miller
2002-05-22Crank versionDamien Miller
(also missed changelog message)
2002-05-22rcsid syncDamien Miller
2002-05-22 fix spelling mistakes spotted by Solar Designer <solar@openwall.com>Damien Miller
2002-05-21 - (stevesk) [sshd.c] #ifndef HAVE_CYGWIN for setgroups()Kevin Steves
2002-05-21 - (stevesk) [sshd.c] bug 245; disable setsid() for nowKevin Steves
2002-05-17[configure.ac] remove extra MD5_MSG="no" line.Tim Rice
2002-05-16p1Damien Miller
2002-05-15 - (bal) OpenBSD CVS SyncBen Lindstrom
- markus@cvs.openbsd.org 2002/05/15 21:05:29 [version.h] enter OpenSSH_3.2.2 - (bal) Caldara, Suse, and Redhat openssh.specs updated.
2002-05-15 - markus@cvs.openbsd.org 2002/05/15 21:02:53Ben Lindstrom
[servconf.c sshd.8 sshd_config] disable privsep and enable setuid for the 3.2.2 release
2002-05-15 - millert@cvs.openbsd.org 2002/05/06 23:34:33Ben Lindstrom
[ssh.1 sshd.8] Kill/adjust r(login|exec)d? references now that those are no longer in the tree.
2002-05-15 - deraadt@cvs.openbsd.org 2002/05/04 02:39:35Ben Lindstrom
[servconf.c sshd.8 sshd_config] enable privsep by default; provos ok (historical)
2002-05-15 - (bal) Clarified openbsd-compat/*-cray.* Licence provided by Wendy.Ben Lindstrom
2002-05-15 - mouring@cvs.openbsd.org 2002/05/15 15:47:49Ben Lindstrom
[kex.c monitor.c monitor_wrap.c sshd.c] 'monitor' variable clashes with at least one lame platform (NeXT). i Renamed to 'pmonitor'. provos@ - (bal) Fixed up PAM case. I think.
2002-05-15 - markus@cvs.openbsd.org 2002/05/13 21:26:49Ben Lindstrom
[auth-rhosts.c] handle debug messages during rhosts-rsa and hostbased authentication; ok provos@
2002-05-15 - millert@cvs.openbsd.org 2002/05/13 15:53:19Ben Lindstrom
[sshd.c] Call setsid() in the child after sshd accepts the connection and forks. This is needed for privsep which calls setlogin() when it changes uids. Without this, there is a race where the login name of an existing connection, as returned by getlogin(), may be changed to the privsep user (sshd). markus@ OK
2002-05-15 - markus@cvs.openbsd.org 2002/05/13 20:44:58Ben Lindstrom
[auth-options.c auth.c auth.h] move the packet_send_debug handling from auth-options.c to auth.c; ok provos@
2002-05-15 - itojun@cvs.openbsd.org 2002/05/13 02:37:39Ben Lindstrom
[auth-skey.c auth2.c] less warnings. skey_{respond,query} are public (in auth.h)
2002-05-15 - stevesk@cvs.openbsd.org 2002/05/11 20:24:48Ben Lindstrom
[ssh.h] typo in comment
2002-05-15 - deraadt@cvs.openbsd.org 2002/05/08 21:06:34Ben Lindstrom
[ssh.h] move to sshd.sshd instead
2002-05-15 - deraadt@cvs.openbsd.org 2002/05/07 19:54:36Ben Lindstrom
[ssh.h] use ssh uid
2002-05-15 - (bal) CVS ID fix up on auth-passwd.cBen Lindstrom
2002-05-15wrapDamien Miller
2002-05-15wrapDamien Miller
2002-05-14update version.Tim Rice
2002-05-13 remove reference to UnixWare 7 and OpenUNIX 8Tim Rice
from PAM-enabled pragraph. UnixWare has no PAM.
2002-05-1320020514Tim Rice
[sshpty.c] set tty modes when allocating old style bsd ptys to match what newer style ptys have when allocated. Based on a patch by Roger Cornelius <rac@tenzing.org> [README.privsep] UnixWare 7 and OpenUNIX 8 work.
2002-05-13 - (stevesk) [README.privsep] PAM+privsep works with Solaris 8.Kevin Steves
2002-05-13 - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ OpenSSL < 0.9.6Damien Miller
2002-05-13 - (djm) Bug #234: missing readpassphrase declaration and definesDamien Miller
2002-05-13align summaryDamien Miller
2002-05-13unbreakDamien Miller
2002-05-13 - (stevesk) add initial README.privsepKevin Steves
2002-05-13 - (stevesk) [configure.ac] nicer message: --with-privsep-user=userKevin Steves
2002-05-13unbreakDamien Miller
2002-05-13 - (djm) Update RPM spec file: different superuser path, useDamien Miller
/var/empty/sshd for privsep
2002-05-13 - (djm) Add --with-privsep-path configure optionDamien Miller
2002-05-13 - (djm) Bug #231: UsePrivilegeSeparation turns off Banner.Damien Miller
2002-05-13 - (djm) Add --with-superuser-path=xxx configure option to specify what $PATHDamien Miller
the superuser receives.
2002-05-13 - (djm) Add --with-superuser-path=xxx configure option to specify what $PATHDamien Miller
the superuser receives.
2002-05-11 fix for systems that have both HAVE_ACCRIGHTS_IN_MSGHDR andTim Rice
HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h has #define msg_accrights msg_control
2002-05-11 applied a rework of djm's OpenSSL search cleanup patch.Tim Rice
Now only searches system and /usr/local/ssl (OpenSSL's default install path) Others must use --with-ssl-dir=....
2002-05-10 - (stevesk) [auth.c] Shadow account and expiration cleanup. NowKevin Steves
check for root forced expire. Still don't check for inactive.
2002-05-10 - (bal) Back all the way out of auth-passwd.c changes. Breaks too manyBen Lindstrom
things that don't set pw->pw_passwd.
2002-05-10 - (djm) Try to drop supplemental groups at daemon startup. Patch fromDamien Miller
RedHat
2002-05-10 - (djm) Rework RedHat RPM files. Based on spec from NalinDamien Miller
Dahyabhai <nalin@redhat.com> and patches from Pekka Savola <pekkas@netcore.fi>
2002-05-09 Unbreak make -f Makefile.in distprepTim Rice
2002-05-09 - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)Damien Miller
2002-05-08set SHELL in Makefile in case someone makes from a non bourne compatable shellTim Rice
2002-05-08fix logic on when seed_rng() is called.Tim Rice
Report by Chris Maxwell <maxwell@cs.dal.ca>