summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2004-08-17 - (dtucker) [regress/README.regress] Note compatibility issues with GNU head.Darren Tucker
2004-08-16 - (dtucker) [acconfig.h auth-pam.c configure.ac] Set real uid to non-rootDarren Tucker
to convince Solaris PAM to honour password complexity rules. ok djm@
2004-08-15 - (dtucker) [Makefile.in] Fix typo.Darren Tucker
2004-08-15 - (djm) [loginrec.c] Check that seek succeeded here too; ok dtuckerDamien Miller
2004-08-15 - (djm) [acconfig.h configure.ac openbsd-compat/Makefile.inDamien Miller
openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h openbsd-compat/openbsd-compat.h] Use smarter closefrom() replacement from sudo; ok dtucker@
2004-08-15 - (dtucker) [Makefile.in ssh-keysign.c ssh.c] Use permanently_set_uid() sinceDarren Tucker
it does the right thing on all platforms. ok djm@
2004-08-15 - (dtucker) [loginrec.c openbsd-compat/port-aix.c openbsd-compat/port-aix.h]Darren Tucker
Plug AIX login recording into login_write so logins will be recorded for all auth types.
2004-08-15 - (dtucker) [includes.h] Undef _INCLUDE__STDC__ on HP-UX, otherwiseDarren Tucker
prot.h and shadow.h provide conflicting declarations of getspnam. ok djm@
2004-08-14 - (dtucker) [auth-krb5.c gss-serv-krb5.c openbsd-compat/xmmap.c]Darren Tucker
Explicitly set umask for mkstemp; ok djm@
2004-08-14remove antique crypto restrictions textDamien Miller
2004-08-13 - dtucker@cvs.openbsd.org 2004/08/13 11:09:24Darren Tucker
[servconf.c] Fix line numbers off-by-one in error messages, from tortay at cc.in2p3.fr ok markus@, djm@
2004-08-13 - djm@cvs.openbsd.org 2004/08/13 02:51:48Darren Tucker
[monitor_fdpass.c] extra check for no message case; ok markus, deraadt, hshoexer, henning
2004-08-13 - jmc@cvs.openbsd.org 2004/08/13 00:01:43Darren Tucker
[ssh-keygen.1] kill whitespace at eol;
2004-08-13 - jakob@cvs.openbsd.org 2004/08/12 21:41:13Darren Tucker
[ssh-keygen.1 ssh.1] improve SSHFP documentation; ok deraadt@
2004-08-13 - djm@cvs.openbsd.org 2004/08/12 09:18:24Darren Tucker
[sshlogin.c] typo in error message, spotted by moritz AT jodeit.org (Id sync only)
2004-08-13 - avsm@cvs.openbsd.org 2004/08/11 21:44:32Darren Tucker
[authfd.c scp.c ssh-keyscan.c] use atomicio instead of homegrown equivalents or read/write. markus@ ok
2004-08-13 - avsm@cvs.openbsd.org 2004/08/11 21:43:05Darren Tucker
[channels.c channels.h clientloop.c misc.c misc.h serverloop.c ssh-agent.c] some signed/unsigned int comparison cleanups; markus@ ok
2004-08-13 - (dtucker) [openbsd-compat/bsd-misc.c] Typo in #ifdef; from vinschen atDarren Tucker
redhat.com
2004-08-12 - (dtucker) [sshd.c] Clear loginmsg in postauth monitor, prevents doublingDarren Tucker
messages generated before the postauth privsep split.
2004-08-12 - djm@cvs.openbsd.org 2004/08/11 12:01:16Darren Tucker
[sshlogin.c] make store_lastlog_message() static to appease -Wall; ok markus
2004-08-12 - djm@cvs.openbsd.org 2004/08/11 11:59:22Darren Tucker
[sshlogin.c] check that lseek went were we told it to; ok markus@ (Id sync only, but similar changes are needed in loginrec.c)
2004-08-12 - dtucker@cvs.openbsd.org 2004/08/11 11:50:09Darren Tucker
[sshd.c] Don't try to close startup_pipe if it's not open; ok djm@
2004-08-12 - dtucker@cvs.openbsd.org 2004/08/11 11:09:54Darren Tucker
[servconf.c] Fix minor leak; "looks right" deraadt@
2004-08-12 - djm@cvs.openbsd.org 2004/08/04 10:37:52Darren Tucker
[dh.c] return group14 when no primes found - fixes hang on empty /etc/moduli; ok markus@
2004-08-12 - markus@cvs.openbsd.org 2004/07/28 09:40:29Darren Tucker
[auth.c auth1.c auth2.c cipher.c cipher.h key.c session.c ssh.c sshconnect1.c] more s/illegal/invalid/
2004-08-12 - markus@cvs.openbsd.org 2004/07/28 08:56:22Darren Tucker
[sshd.c] call setsid() _before_ re-exec
2004-08-12 - (dtucker) [sshd.c] Remove duplicate variable imported during sync.Darren Tucker
2004-07-21 - djm@cvs.openbsd.org 2004/07/21 11:51:29Damien Miller
[canohost.c] bz#902: cache remote port so we don't fatal() in auth_log when remote connection goes away quickly. from peak AT argo.troja.mff.cuni.cz; ok markus@
2004-07-21 - (djm) [auth-pam.c] Portable parts of bz#899: Don't display invalidDamien Miller
usernames in setproctitle from peak AT argo.troja.mff.cuni.cz;
2004-07-21 - djm@cvs.openbsd.org 2004/07/21 10:36:23Damien Miller
[gss-serv-krb5.c] fix function declaration
2004-07-21 - djm@cvs.openbsd.org 2004/07/21 10:33:31Damien Miller
[auth1.c auth2.c] bz#899: Don't display invalid usernames in setproctitle
2004-07-21 - (djm) OpenBSD CVS SyncDamien Miller
- markus@cvs.openbsd.org 2004/07/21 08:56:12 [auth.c] s/Illegal user/Invalid user/; many requests; ok djm, millert, niklas, miod, ...
2004-07-21 - (djm) [regress/README.regress] Remove caveat regarding TCP wrappers, nowDamien Miller
that sshd is fixed to behave better; suggested by tim
2004-07-21 - (djm) [contrib/redhat/sshd.pam] bz #903: Remove redundant entries; fromDamien Miller
peak AT argo.troja.mff.cuni.cz
2004-07-21 - (djm) [log.c] bz #111: Escape more control characters when sending dataDamien Miller
to syslog; from peak AT argo.troja.mff.cuni.cz
2004-07-19 - (tim) [configure.ac] updwtmpx() on OpenServer seems to add duplicate entry.Tim Rice
Report by rac AT tenzing.org
2004-07-19 - (djm) [auth-pam.c] Avoid use of xstrdup and friends in conversation function,Damien Miller
instead return PAM_CONV_ERR, avoiding another path to fatal(); ok dtucker@
2004-07-19 - (djm) [openbsd-compat/bsd-arc4random.c] Discard early keystream, like OpenBSDDamien Miller
ok dtucker@
2004-07-17 - dtucker@cvs.openbsd.org 2004/07/17 05:31:41Darren Tucker
[monitor.c monitor_wrap.c session.c session.h sshd.c sshlogin.c] Move "Last logged in at.." message generation to the monitor, right before recording the new login. Fixes missing lastlog message when /var/log/lastlog is not world-readable and incorrect datestamp when multiple sessions are used (bz #463); much assistance & ok markus@
2004-07-17 - brad@cvs.openbsd.org 2004/07/12 23:34:25Darren Tucker
[ssh-keyscan.1] Fix incorrect macro, .I -> .Em From: Eric S. Raymond <esr at thyrsus dot com> ok jmc@
2004-07-17 - deraadt@cvs.openbsd.org 2004/07/11 17:48:47Darren Tucker
[channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h sshd.c ttymodes.h] spaces
2004-07-17 - (dtucker) [logintest.c scp.c sftp-server.c sftp.c ssh-add.c ssh-agent.cDarren Tucker
ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c ssh.c sshd.c openbsd-compat/bsd-misc.c] Move "char *__progname" to bsd-misc.c. Reduces diff vs OpenBSD; ok mouring@, tested by tim@ too.
2004-07-11 - (dtucker) [auth-pam.c] Check for zero from waitpid() too, which allowsDarren Tucker
the monitor to properly clean up the PAM thread (Debian bug #252676).
2004-07-09 - (tim) [contrib/cygwin/README] add minires-devel requirement. Patch fromTim Rice
vinschen AT redhat.com
2004-07-08 - dtucker@cvs.openbsd.org 2004/07/08 12:47:21Darren Tucker
[scp.c] Prevent scp from skipping the file following a double-error. bz #863, ok markus@
2004-07-08 - dtucker@cvs.openbsd.org 2004/07/03 11:02:25Darren Tucker
[monitor_wrap.c] Put s/key functions inside #ifdef SKEY same as monitor.c, from des@freebsd via bz #330, ok markus@
2004-07-08 - dtucker@cvs.openbsd.org 2004/07/03 05:11:33Darren Tucker
[sshlogin.c] (RCSID sync only, the corresponding code is not in Portable) Use '\0' not 0 for string; ok djm@, deraadt@
2004-07-02 - (dtucker) [mdoc2man.awk] Teach it to ignore .Bk -words, reported byDarren Tucker
strube at physik3.gwdg.de a long time ago.
2004-07-01 - (tim) [buildpkg.sh.in] Add $REV to bump the package revision withinTim Rice
the same version. Handle the case where someone uses --with-privsep-user= and the user name does not match the group name. ok dtucker@
2004-07-01 - (dtucker) [auth-pam.c] Bug #559 (last piece): Pass DISALLOW_NULL_AUTHTOKDarren Tucker
to pam_authenticate for challenge-response auth too. Originally from fcusack at fcusack.com, ok djm@