Age | Commit message (Collapse) | Author |
|
[session.c]
merge ssh1/ssh2 tty msg parse and alloc code
|
|
[session.c]
merge session_free into session_close()
merge pty_cleanup_proc into session_pty_cleanup()
|
|
[session.c]
reset pointer to NULL after xfree(); report from solar@openwall.com
|
|
[session.c]
don't overwrite errno
delay deletion of the xauth cookie
|
|
[session.c]
let session_close() delete the pty. deny x11fwd if xauthfile is set.
|
|
[session.c]
merge ssh1/2 x11-fwd setup, create listener after tmp-dir
|
|
[channels.c channels.h session.c]
switch uid when cleaning up tmp files and sockets; reported by
zen-parse@gmx.net on bugtraq
|
|
[channels.c channels.h session.c]
use fatal_register_cleanup instead of atexit, sync with x11 authdir
handling
|
|
pain will be over.]
- markus@cvs.openbsd.org 2001/05/31 10:30:17
[auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
packet.c serverloop.c session.c ssh.c]
undo the .c file split, just merge the header and keep the cvs
history
|
|
- markus@cvs.openbsd.org 2001/05/30 12:55:13
[auth-options.c auth2.c channels.c channels.h clientloop.c nchan.c
packet.c serverloop.c session.c ssh.c ssh1.h]
channel layer cleanup: merge header files and split .c files
|
|
[session.c]
Disable X11 forwarding if xauth binary is not found. Patch from Nalin
Dahyabhai <nalin@redhat.com>; ok markus@
|
|
<wayne@blorf.net>
|
|
|
|
[session.c]
exec shell -c /bin/sh .ssh/sshrc, from abartlet@pcug.org.au
|
|
[session.c]
move auth_approval to do_authenticated().
do_child(): nuke hostkeys from memory
don't source .ssh/rc for subsystems.
|
|
logins and logins where access was denied by SIA. Patch from Chris Adams
<cmadams@hiwaay.net>
|
|
[session.c]
Split motd and hushlogin checks into seperate functions, helps for
portable. From Chris Adams <cmadams@hiwaay.net>; ok markus@
|
|
[clientloop.c packet.h session.c ssh.c ttymodes.c ttymodes.h]
protocol 2 tty modes support; ok markus@
|
|
[auth-rh-rsa.c auth-rhosts.c auth-rsa.c auth2.c channels.c session.c
ssh.c sshconnect.c sshconnect.h uidswap.c uidswap.h]
do gid/groups-swap in addition to uid-swap, should help if /home/group
is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks
to olar@openwall.com is comments. we had many requests for this.
|
|
[canohost.c canohost.h session.c]
move get_remote_name_or_ip() to canohost.[ch]; for portable. ok markus@
|
|
memberships) after initgroups() blows them away. Report and suggested
fix from Nalin Dahyabhai <nalin@redhat.com>
|
|
[servconf.c servconf.h session.c sshd.8 sshd_config]
PrintLastLog option; from chip@valinux.com with some minor
changes by me. ok markus@
|
|
[session.c]
shorten; ok markus@
|
|
|
|
[session.c sshd.c]
ignore SIGPIPE, restore in child, fixes x11-fwd crashes; with djm@
|
|
[session.c]
missing init; from mib@unimelb.edu.au
|
|
[auth1.c auth2.c session.c session.h]
merge common ssh v1/2 code
|
|
[session.c]
remove unused arg
|
|
[session.c]
remove unused arg
|
|
resync
|
|
|
|
suggested fix from Mike Battersby <mib@unimelb.edu.au>
|
|
VanDevender <stevev@darkwing.uoregon.edu>
|
|
[auth-options.c channels.c channels.h serverloop.c session.c]
implement "permitopen" key option, restricts -L style forwarding to
to specified host:port pairs. based on work by harlan@genua.de
|
|
[session.c]
pass Session to do_child + KNF
|
|
<gert@greenie.muc.de>
|
|
|
|
[atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h
scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c
ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8]
make copyright lines the same format
|
|
before the final fork().
|
|
|
|
|
|
[session.c]
handle SSH_PROTOFLAG_SCREEN_NUMBER for buggy clients
|
|
not just Cygwin. Based on patch by Wendy Palm <wendyp@cray.com>
|
|
|
|
- (djm) Move PAM session initialisation until after fork in sshd. Patch
from Nalin Dahyabhai <nalin@redhat.com>
|
|
breaks Solaris.
- (djm) Move PAM session setup back to before setuid to user.
fixes problems on Solaris-drived PAMs.
|
|
pty.[ch] -> sshpty.[ch]
|
|
enable with --with-bsd-auth.
|
|
[session.c]
proper payload-length check for x11 w/o screen-number
|
|
OpenServer for now. Based on patch from svaughan <svaughan@asterion.com>
|