summaryrefslogtreecommitdiff
path: root/ChangeLog
AgeCommit message (Collapse)Author
2002-05-15 - deraadt@cvs.openbsd.org 2002/05/04 02:39:35Ben Lindstrom
[servconf.c sshd.8 sshd_config] enable privsep by default; provos ok (historical)
2002-05-15 - (bal) Clarified openbsd-compat/*-cray.* Licence provided by Wendy.Ben Lindstrom
2002-05-15 - mouring@cvs.openbsd.org 2002/05/15 15:47:49Ben Lindstrom
[kex.c monitor.c monitor_wrap.c sshd.c] 'monitor' variable clashes with at least one lame platform (NeXT). i Renamed to 'pmonitor'. provos@ - (bal) Fixed up PAM case. I think.
2002-05-15 - markus@cvs.openbsd.org 2002/05/13 21:26:49Ben Lindstrom
[auth-rhosts.c] handle debug messages during rhosts-rsa and hostbased authentication; ok provos@
2002-05-15 - millert@cvs.openbsd.org 2002/05/13 15:53:19Ben Lindstrom
[sshd.c] Call setsid() in the child after sshd accepts the connection and forks. This is needed for privsep which calls setlogin() when it changes uids. Without this, there is a race where the login name of an existing connection, as returned by getlogin(), may be changed to the privsep user (sshd). markus@ OK
2002-05-15 - markus@cvs.openbsd.org 2002/05/13 20:44:58Ben Lindstrom
[auth-options.c auth.c auth.h] move the packet_send_debug handling from auth-options.c to auth.c; ok provos@
2002-05-15 - itojun@cvs.openbsd.org 2002/05/13 02:37:39Ben Lindstrom
[auth-skey.c auth2.c] less warnings. skey_{respond,query} are public (in auth.h)
2002-05-15 - stevesk@cvs.openbsd.org 2002/05/11 20:24:48Ben Lindstrom
[ssh.h] typo in comment
2002-05-15 - deraadt@cvs.openbsd.org 2002/05/08 21:06:34Ben Lindstrom
[ssh.h] move to sshd.sshd instead
2002-05-15 - deraadt@cvs.openbsd.org 2002/05/07 19:54:36Ben Lindstrom
[ssh.h] use ssh uid
2002-05-15 - (bal) CVS ID fix up on auth-passwd.cBen Lindstrom
2002-05-15wrapDamien Miller
2002-05-15wrapDamien Miller
2002-05-14update version.Tim Rice
2002-05-13 remove reference to UnixWare 7 and OpenUNIX 8Tim Rice
from PAM-enabled pragraph. UnixWare has no PAM.
2002-05-1320020514Tim Rice
[sshpty.c] set tty modes when allocating old style bsd ptys to match what newer style ptys have when allocated. Based on a patch by Roger Cornelius <rac@tenzing.org> [README.privsep] UnixWare 7 and OpenUNIX 8 work.
2002-05-13 - (stevesk) [README.privsep] PAM+privsep works with Solaris 8.Kevin Steves
2002-05-13 - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ OpenSSL < 0.9.6Damien Miller
2002-05-13 - (djm) Bug #234: missing readpassphrase declaration and definesDamien Miller
2002-05-13 - (stevesk) add initial README.privsepKevin Steves
2002-05-13 - (stevesk) [configure.ac] nicer message: --with-privsep-user=userKevin Steves
2002-05-13 - (djm) Update RPM spec file: different superuser path, useDamien Miller
/var/empty/sshd for privsep
2002-05-13 - (djm) Add --with-privsep-path configure optionDamien Miller
2002-05-13 - (djm) Bug #231: UsePrivilegeSeparation turns off Banner.Damien Miller
2002-05-13 - (djm) Add --with-superuser-path=xxx configure option to specify what $PATHDamien Miller
the superuser receives.
2002-05-11 fix for systems that have both HAVE_ACCRIGHTS_IN_MSGHDR andTim Rice
HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h has #define msg_accrights msg_control
2002-05-11 applied a rework of djm's OpenSSL search cleanup patch.Tim Rice
Now only searches system and /usr/local/ssl (OpenSSL's default install path) Others must use --with-ssl-dir=....
2002-05-10 - (stevesk) [auth.c] Shadow account and expiration cleanup. NowKevin Steves
check for root forced expire. Still don't check for inactive.
2002-05-10 - (bal) Back all the way out of auth-passwd.c changes. Breaks too manyBen Lindstrom
things that don't set pw->pw_passwd.
2002-05-10 - (djm) Try to drop supplemental groups at daemon startup. Patch fromDamien Miller
RedHat
2002-05-10 - (djm) Rework RedHat RPM files. Based on spec from NalinDamien Miller
Dahyabhai <nalin@redhat.com> and patches from Pekka Savola <pekkas@netcore.fi>
2002-05-09 Unbreak make -f Makefile.in distprepTim Rice
2002-05-09 - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work)Damien Miller
2002-05-08set SHELL in Makefile in case someone makes from a non bourne compatable shellTim Rice
2002-05-08fix logic on when seed_rng() is called.Tim Rice
Report by Chris Maxwell <maxwell@cs.dal.ca>
2002-05-07 Add truncate() emulation to address Bug 208Tim Rice
2002-05-08 - (djm) Don't reinitialise PAM credentials before we have started PAM.Damien Miller
Report from Pekka Savola <pekkas@netcore.fi>
2002-05-08 - (djm) Unbreak PAM auth for protocol 1. Report from Pekka SavolaDamien Miller
<pekkas@netcore.fi>
2002-05-08 - (djm) Unbreak auth-passwd.c for PAM and SIADamien Miller
2002-05-06 - (bal) Fixed auth-passwd.c to resolve PermitEmptyPassword issueBen Lindstrom
2002-05-01 - (djm) Fix readpassphase compilation for systems which have itDamien Miller
2002-05-01 - (djm) Import OpenBSD regression tests. Requires BSD make to runDamien Miller
2002-04-29[contrib/caldera/openssh.spec] update fixUP to reflect changes in sshd_config.Tim Rice
[contrib/cygwin/README] remove reference to regex. patch from Corinna Vinschen <vinschen@redhat.com>
2002-04-26 - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based onDamien Miller
patch from openssh@misc.tecq.org
2002-04-26 - (djm) Disable PAM password expiry until a complete fix for bug #188 existsDamien Miller
2002-04-26 - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecodeDamien Miller
during distprep only
2002-04-25 - (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26Kevin Steves
support. bug #184. most from dcole@keysoftsys.com.
2002-04-25 - (stevesk) [defines.h] remove USE_TIMEVAL; unusedKevin Steves
2002-04-24 - djm@cvs.openbsd.org 2002/04/23 22:16:29Damien Miller
[sshd.c] Improve error message; ok markus@ stevesk@
2002-04-24 - (djm) OpenBSD CVS SyncDamien Miller
- markus@cvs.openbsd.org 2002/04/23 12:54:10 [version.h] 3.2.1