Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-05-15 | - deraadt@cvs.openbsd.org 2002/05/04 02:39:35 | Ben Lindstrom | |
[servconf.c sshd.8 sshd_config] enable privsep by default; provos ok (historical) | |||
2002-05-15 | - (bal) Clarified openbsd-compat/*-cray.* Licence provided by Wendy. | Ben Lindstrom | |
2002-05-15 | - mouring@cvs.openbsd.org 2002/05/15 15:47:49 | Ben Lindstrom | |
[kex.c monitor.c monitor_wrap.c sshd.c] 'monitor' variable clashes with at least one lame platform (NeXT). i Renamed to 'pmonitor'. provos@ - (bal) Fixed up PAM case. I think. | |||
2002-05-15 | - markus@cvs.openbsd.org 2002/05/13 21:26:49 | Ben Lindstrom | |
[auth-rhosts.c] handle debug messages during rhosts-rsa and hostbased authentication; ok provos@ | |||
2002-05-15 | - millert@cvs.openbsd.org 2002/05/13 15:53:19 | Ben Lindstrom | |
[sshd.c] Call setsid() in the child after sshd accepts the connection and forks. This is needed for privsep which calls setlogin() when it changes uids. Without this, there is a race where the login name of an existing connection, as returned by getlogin(), may be changed to the privsep user (sshd). markus@ OK | |||
2002-05-15 | - markus@cvs.openbsd.org 2002/05/13 20:44:58 | Ben Lindstrom | |
[auth-options.c auth.c auth.h] move the packet_send_debug handling from auth-options.c to auth.c; ok provos@ | |||
2002-05-15 | - itojun@cvs.openbsd.org 2002/05/13 02:37:39 | Ben Lindstrom | |
[auth-skey.c auth2.c] less warnings. skey_{respond,query} are public (in auth.h) | |||
2002-05-15 | - stevesk@cvs.openbsd.org 2002/05/11 20:24:48 | Ben Lindstrom | |
[ssh.h] typo in comment | |||
2002-05-15 | - deraadt@cvs.openbsd.org 2002/05/08 21:06:34 | Ben Lindstrom | |
[ssh.h] move to sshd.sshd instead | |||
2002-05-15 | - deraadt@cvs.openbsd.org 2002/05/07 19:54:36 | Ben Lindstrom | |
[ssh.h] use ssh uid | |||
2002-05-15 | - (bal) CVS ID fix up on auth-passwd.c | Ben Lindstrom | |
2002-05-15 | wrap | Damien Miller | |
2002-05-15 | wrap | Damien Miller | |
2002-05-14 | update version. | Tim Rice | |
2002-05-13 | remove reference to UnixWare 7 and OpenUNIX 8 | Tim Rice | |
from PAM-enabled pragraph. UnixWare has no PAM. | |||
2002-05-13 | 20020514 | Tim Rice | |
[sshpty.c] set tty modes when allocating old style bsd ptys to match what newer style ptys have when allocated. Based on a patch by Roger Cornelius <rac@tenzing.org> [README.privsep] UnixWare 7 and OpenUNIX 8 work. | |||
2002-05-13 | - (stevesk) [README.privsep] PAM+privsep works with Solaris 8. | Kevin Steves | |
2002-05-13 | - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ OpenSSL < 0.9.6 | Damien Miller | |
2002-05-13 | - (djm) Bug #234: missing readpassphrase declaration and defines | Damien Miller | |
2002-05-13 | - (stevesk) add initial README.privsep | Kevin Steves | |
2002-05-13 | - (stevesk) [configure.ac] nicer message: --with-privsep-user=user | Kevin Steves | |
2002-05-13 | - (djm) Update RPM spec file: different superuser path, use | Damien Miller | |
/var/empty/sshd for privsep | |||
2002-05-13 | - (djm) Add --with-privsep-path configure option | Damien Miller | |
2002-05-13 | - (djm) Bug #231: UsePrivilegeSeparation turns off Banner. | Damien Miller | |
2002-05-13 | - (djm) Add --with-superuser-path=xxx configure option to specify what $PATH | Damien Miller | |
the superuser receives. | |||
2002-05-11 | fix for systems that have both HAVE_ACCRIGHTS_IN_MSGHDR and | Tim Rice | |
HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h has #define msg_accrights msg_control | |||
2002-05-11 | applied a rework of djm's OpenSSL search cleanup patch. | Tim Rice | |
Now only searches system and /usr/local/ssl (OpenSSL's default install path) Others must use --with-ssl-dir=.... | |||
2002-05-10 | - (stevesk) [auth.c] Shadow account and expiration cleanup. Now | Kevin Steves | |
check for root forced expire. Still don't check for inactive. | |||
2002-05-10 | - (bal) Back all the way out of auth-passwd.c changes. Breaks too many | Ben Lindstrom | |
things that don't set pw->pw_passwd. | |||
2002-05-10 | - (djm) Try to drop supplemental groups at daemon startup. Patch from | Damien Miller | |
RedHat | |||
2002-05-10 | - (djm) Rework RedHat RPM files. Based on spec from Nalin | Damien Miller | |
Dahyabhai <nalin@redhat.com> and patches from Pekka Savola <pekkas@netcore.fi> | |||
2002-05-09 | Unbreak make -f Makefile.in distprep | Tim Rice | |
2002-05-09 | - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work) | Damien Miller | |
2002-05-08 | set SHELL in Makefile in case someone makes from a non bourne compatable shell | Tim Rice | |
2002-05-08 | fix logic on when seed_rng() is called. | Tim Rice | |
Report by Chris Maxwell <maxwell@cs.dal.ca> | |||
2002-05-07 | Add truncate() emulation to address Bug 208 | Tim Rice | |
2002-05-08 | - (djm) Don't reinitialise PAM credentials before we have started PAM. | Damien Miller | |
Report from Pekka Savola <pekkas@netcore.fi> | |||
2002-05-08 | - (djm) Unbreak PAM auth for protocol 1. Report from Pekka Savola | Damien Miller | |
<pekkas@netcore.fi> | |||
2002-05-08 | - (djm) Unbreak auth-passwd.c for PAM and SIA | Damien Miller | |
2002-05-06 | - (bal) Fixed auth-passwd.c to resolve PermitEmptyPassword issue | Ben Lindstrom | |
2002-05-01 | - (djm) Fix readpassphase compilation for systems which have it | Damien Miller | |
2002-05-01 | - (djm) Import OpenBSD regression tests. Requires BSD make to run | Damien Miller | |
2002-04-29 | [contrib/caldera/openssh.spec] update fixUP to reflect changes in sshd_config. | Tim Rice | |
[contrib/cygwin/README] remove reference to regex. patch from Corinna Vinschen <vinschen@redhat.com> | |||
2002-04-26 | - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on | Damien Miller | |
patch from openssh@misc.tecq.org | |||
2002-04-26 | - (djm) Disable PAM password expiry until a complete fix for bug #188 exists | Damien Miller | |
2002-04-26 | - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode | Damien Miller | |
during distprep only | |||
2002-04-25 | - (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26 | Kevin Steves | |
support. bug #184. most from dcole@keysoftsys.com. | |||
2002-04-25 | - (stevesk) [defines.h] remove USE_TIMEVAL; unused | Kevin Steves | |
2002-04-24 | - djm@cvs.openbsd.org 2002/04/23 22:16:29 | Damien Miller | |
[sshd.c] Improve error message; ok markus@ stevesk@ | |||
2002-04-24 | - (djm) OpenBSD CVS Sync | Damien Miller | |
- markus@cvs.openbsd.org 2002/04/23 12:54:10 [version.h] 3.2.1 |