Age | Commit message (Collapse) | Author |
|
UsePAM section. Parts from djm@ and jmc@.
|
|
[ssh-agent.1]
Add examples to ssh-agent.1, bz#481 from Ralf Hauser; ok deraadt@
|
|
[auth.c auth2-none.c authfile.c channels.c monitor.c monitor_mm.c
packet.c packet.h progressmeter.c session.c openbsd-compat/xmmap.c]
improve some code lint did not like; djm millert ok
|
|
[kex.c]
don't overwrite what we are trying to compute
|
|
[OVERVIEW auth-rsa.c auth1.c kex.c monitor.c session.c sshconnect1.c
sshd.c] removed: mpaux.c mpaux.h
kill some more tiny files; ok deraadt@
|
|
[moduli.c ssh-keygen.c] removed: moduli.h
zap another tiny header; ok deraadt@
|
|
[clientloop.c misc.h readpass.c scard.c ssh-add.c ssh-agent.c ssh-keygen.c
sshconnect.c sshconnect1.c sshconnect2.c] removed: readpass.h
kill a tiny header; ok deraadt@
|
|
[auth.c clientloop.c misc.h servconf.c ssh.c sshpty.h sshtty.c
tildexpand.c], removed: sshtty.h tildexpand.h
make two tiny header files go away; djm ok
|
|
[ssh_config.5]
typo from John Cosimano (PR 3770);
|
|
[scp.1]
SendEnv here too;
|
|
libresolv, fixes problems detecting it on some platforms
(eg Linux/x86-64). From Kurt Roeckx via Debian, ok mouring@
|
|
[scp.1]
ConnectionTimeout -> ConnectTimeout for scp.1 too.
|
|
[sftp.1]
ConnectionTimeout -> ConnectTimeout here too, pointed out by jmc@
|
|
[ssh.1]
ConnectionTimeout -> ConnectTimeout, from m.a.ellis at ncl.ac.uk via
Debian. ok djm@
|
|
[sshd.8]
Man page grammar fix (bz #858), from damerell at chiark.greenend.org.uk
via Debian; ok djm@
|
|
[sftp.1 ssh.1]
add SendEnv to -o list;
|
|
[sshd_config.5]
remove unnecessary .Pp;
|
|
[ssh_config.5 sshd_config.5]
manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu)
|
|
[readconf.c readconf.h servconf.c servconf.h session.c session.h ssh.c
ssh_config.5 sshd_config.5]
bz #815: implement ability to pass specified environment variables from
the client to the server; ok markus@
|
|
[moduli.c]
Bugzilla #850: Sophie Germain is the correct name of the French
mathematician, "Sophie Germaine" isn't; from Luc.Maisonobe@c-s.fr
|
|
|
|
as extern int if not already declared. Fixes compile errors on old SCO
platforms. ok tim@
|
|
|
|
with Heimdal
|
|
|
|
[ssh.c]
fix idiot typo that i introduced in my last commit;
spotted by cschneid AT cschneid.com
|
|
[ssh_config.5]
kill whitespace at eol;
|
|
[ssh.1 ssh_config.5]
document strict permission checks on ~/.ssh/config; prompted by,
with & ok jmc@
|
|
[readconf.c readconf.h ssh-keysign.c ssh.c]
perform strict ownership and modes checks for ~/.ssh/config files,
as these can be used to execute arbitrary programs; ok markus@
NB. ssh will now exit when it detects a config with poor permissions
|
|
|
|
- henning@cvs.openbsd.org 2004/04/08 16:08:21
[sshconnect2.c]
swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what FreeBSD and NetBSD do.
ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
|
|
[scp.c]
limit trust between local and remote rcp/scp process,
noticed by lcamtuf; ok deraadt@, djm@
|
|
[canohost.c]
don't skip ip options check when UseDNS=no; ok markus@ (ID sync only)
|
|
[sftp-client.c]
sync comment with reality
|
|
[regress/login-timeout.sh]
Missing OBJ, from tim@. ok markus@ (Already fixed, ID sync only)
|
|
[regress/login-timeout.sh]
Use sudo when restarting daemon during test. ok markus@
|
|
change of user context without a password, so relax auth method
restrictions; from vinschen AT redhat.com; ok dtucker@
|
|
authentication attempts. With & ok djm@
|
|
BROKEN_SETREGID for SCO OpenServer 3
|
|
file using FILE: method, fixes problems on Mac OSX.
Patch from simon@sxw.org.uk; ok dtucker@
|
|
FAT/NTFS does not permit quotes in filenames. From vinschen at redhat.com
|
|
|
|
4-arg, with compatibility for 3-arg versions. From djm@, ok me.
|
|
skeychallenge(), eg on NetBSD. ok mouring@
|
|
from bug #701 (text from jfh at cise.ufl.edu).
|
|
limiting scope and dtucker@ agreed.
|
|
simplify loginrec.c. ok tim@
|
|
back and #undef TARGET_OS_MAC instead. (Bug report pending with Apple)
|
|
pty name on Linux 2.6.x systems. Patch from jpe at eisenmenger.org.
|
|
if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
are starting to restrict it as internal since it is not needed by
developers any more. (Patch based on Apple tree)
- (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
krb5 on MacOS/X conflicts. There may be a better solution, but this will
work for now.
|