Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | - (dtucker) [configure.ac] Set put -lselinux into $LIBS while testing forV_4_4 | Darren Tucker | 2006-10-07 | 2 | -3/+11 |
| | | | | | SELinux functions so they're detected correctly. Patch from pebenito at gentoo.org. | ||||
* | - (dtucker) [audit-bsm.c] Include errno.h. Pointed out by des at des.no. | Darren Tucker | 2006-10-01 | 2 | -2/+6 |
| | |||||
* | - (dtucker) [configure.ac] Bug #1239: Fix configure test for OpenSSH engine | Darren Tucker | 2006-09-29 | 2 | -4/+8 |
| | | | | support. Patch from andrew.benham at thus net. | ||||
* | - (dtucker) [entropy.c] Bug #1238: include signal.h to fix compilation error | Darren Tucker | 2006-09-28 | 2 | -1/+7 |
| | | | | | on Solaris 8 w/out /dev/random or prngd. Patch from rl at math.technion.ac.il. | ||||
* | Marker for 4.4p1 release | Darren Tucker | 2006-09-28 | 1 | -1/+2 |
| | |||||
* | - (dtucker) [sftp-server.8] Resync; spotted by djm@V_4_4_P1 | Darren Tucker | 2006-09-26 | 1 | -1/+2 |
| | |||||
* | - (dtucker) [bufaux.h] nuke bufaux.h; it's already gone from OpenBSD and not | Darren Tucker | 2006-09-26 | 1 | -2/+2992 |
| | | | | referenced any more. ok djm@ | ||||
* | - (dtucker) [sftp-server.8] Resync; spotted by djm@ | Darren Tucker | 2006-09-26 | 2 | -4/+6 |
| | |||||
* | - (dtucker) [bufaux.h] nuke bufaux.h; it's already gone from OpenBSD and not | Darren Tucker | 2006-09-26 | 2 | -56/+5 |
| | | | | referenced any more. ok djm@ | ||||
* | Trim ChangeLog Prior to 4.2p1 | Darren Tucker | 2006-09-26 | 1 | -2992/+1 |
| | |||||
* | 20060924 | Tim Rice | 2006-09-24 | 2 | -4/+7 |
| | | | | | - (tim) [configure.ac] Remove CFLAGS hack for UnixWare 1.x/2.x (added to rev 1.308) to work around broken gcc 2.x header file. | ||||
* | - (dtucker) [configure.ac] Bug #1234: Put opensc libs into $LIBS rather than | Darren Tucker | 2006-09-23 | 2 | -4/+8 |
| | | | | $LDFLAGS. Patch from vapier at gentoo org. | ||||
* | - (dtucker) [packet.c canohost.c] Include arpa/inet.h for htonl macros on | Darren Tucker | 2006-09-22 | 3 | -1/+7 |
| | | | | some platforms (eg HP-UX 11.00). From santhi.amirta at gmail com. | ||||
* | - (dtucker) [defines.h] Include unistd.h before defining getpgrp; fixes | Darren Tucker | 2006-09-21 | 2 | -2/+5 |
| | | | | build error on Ultrix. From Bernhard Simon. | ||||
* | - markus@cvs.openbsd.org 2006/09/19 21:14:08 | Darren Tucker | 2006-09-21 | 2 | -2/+8 |
| | | | | | [packet.c] client NULL deref on protocol error; Tavis Ormandy, Google Security Team | ||||
* | - otto@cvs.openbsd.org 2006/09/19 05:52:23 | Darren Tucker | 2006-09-21 | 2 | -4/+12 |
| | | | | | | | [sftp.c] Use S_IS* macros insted of masking with S_IF* flags. The latter may have multiple bits set, which lead to surprising results. Spotted by Paul Stoeber, more to come. ok millert@ pedro@ jaredy@ djm@ | ||||
* | - (dtucker) [openbsd-compat/port-aix.{c,h}] Reduce scope of includes. | Darren Tucker | 2006-09-18 | 3 | -14/+14 |
| | | | | Prevents macro redefinition warnings of "RDONLY". | ||||
* | - (dtucker) [configure.ac] On AIX, check to see if the compiler will allow | Darren Tucker | 2006-09-18 | 2 | -3/+30 |
| | | | | | | macro redefinitions, and if not, remove "-qlanglvl=ansi" from the flags. Allows build out of the box with older VAC and XLC compilers. Found by David Bronder and Bernhard Simon. | ||||
* | - (dtucker) [INSTALL] Add info about audit support. | Darren Tucker | 2006-09-17 | 2 | -2/+13 |
| | |||||
* | - (djm) [sshd.c] Fix warning/API abuse; ok dtucker@ | Damien Miller | 2006-09-17 | 2 | -2/+3 |
| | |||||
* | - (dtucker) [monitor.c] Correctly handle auditing of single commands when | Darren Tucker | 2006-09-17 | 2 | -5/+4 |
| | | | | using Protocol 1. From jhb at freebsd. | ||||
* | - (dtucker) [auth-pam.c] Propogate TZ environment variable to PAM auth | Darren Tucker | 2006-09-17 | 2 | -1/+10 |
| | | | | | process so that any logging it does is with the right timezone. From Scott Strickler, ok djm@. | ||||
* | - (djm) Add openssh.xml to .cvsignore and sort it | Damien Miller | 2006-09-17 | 2 | -22/+24 |
| | |||||
* | - djm@cvs.openbsd.org 2006/09/16 19:53:37 | Damien Miller | 2006-09-17 | 4 | -9/+45 |
| | | | | | | | [deattack.c deattack.h packet.c] limit maximum work performed by the CRC compensation attack detector, problem reported by Tavis Ormandy, Google Security Team; ok markus@ deraadt@ | ||||
* | - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in] | Damien Miller | 2006-09-12 | 5 | -34/+247 |
| | | | | | Support SMF in Solaris Packages if enabled by configure. Patch from Chad Mynhier, tested by dtucker@ | ||||
* | - (dtucker) [cipher-aes.c] Include string.h for memcpy and friends. Noted | Darren Tucker | 2006-09-11 | 2 | -1/+6 |
| | | | | by Pekka Savola. | ||||
* | - (dtucker) [configure.ac] Add -lcrypt to let DragonFly build OOTB. | Darren Tucker | 2006-09-10 | 2 | -3/+7 |
| | |||||
* | - (dtucker) [contrib/aix/buildbff.sh] Ensure that perl is available. | Darren Tucker | 2006-09-10 | 2 | -2/+7 |
| | |||||
* | - (dtucker) [buildpkg.sh.in] Always create privsep user. ok djm@ | Darren Tucker | 2006-09-09 | 2 | -10/+3 |
| | |||||
* | - (dtucker) [contrib/aix/buildbff.sh] Always create privsep user. | Darren Tucker | 2006-09-09 | 2 | -25/+22 |
| | |||||
* | - (dtucker) [openbsd-compat/bsd-snprintf.c] Add stdarg.h. | Darren Tucker | 2006-09-09 | 2 | -1/+5 |
| | |||||
* | - (dtucker) [configure.ac] The BSM header test needs time.h in some cases. | Darren Tucker | 2006-09-09 | 2 | -4/+11 |
| | |||||
* | - (dtucker) [auth-sia.c] Add includes required for build on Tru64. Patch | Darren Tucker | 2006-09-08 | 2 | -1/+7 |
| | | | | from Chris Adams. | ||||
* | - (dtucker) [regress/cfgmatch.sh] stop_client is racy, so give us a better | Darren Tucker | 2006-09-08 | 2 | -1/+4 |
| | | | | chance of winning. | ||||
* | - (dtucker) [loginrec.c] Wrap paths.h in HAVE_PATHS_H. | Darren Tucker | 2006-09-07 | 2 | -2/+5 |
| | |||||
* | - (tim) [configure.ac] s/BROKEN_UPDWTMP/BROKEN_UPDWTMPX/ on SCO OSR6 | Tim Rice | 2006-09-06 | 2 | -5/+5 |
| | |||||
* | - (djm) [sshd.c auth.c] Set up fakepw() with privsep uid/gid, so it can | Damien Miller | 2006-09-07 | 3 | -16/+28 |
| | | | | | | | be used to drop privilege to; fixes Solaris GSSAPI crash reported by Magnus Abrante; suggestion and feedback dtucker@ NB. this change will require that the privilege separation user must exist on all the time, not just when UsePrivilegeSeparation=yes | ||||
* | - (dtucker) [loginrec.c] Include paths.h for _PATH_BTMP. | Darren Tucker | 2006-09-05 | 2 | -1/+3 |
| | |||||
* | - (dtucker) [configure.ac] s/AC_DEFINES/AC_DEFINE/ spotted by Roumen Petrov. | Darren Tucker | 2006-09-05 | 2 | -4/+7 |
| | |||||
* | - (dtucker) [configure.ac] Define BROKEN_UPDWTMP on SCO OSR6 as the native | Darren Tucker | 2006-09-04 | 2 | -3/+10 |
| | | | | | updwdtmp seems to generate invalid wtmp entries. From Roger Cornelius, ok djm@ | ||||
* | - (dtucker) [configure.ac openbsd-compat/openbsd-compat.h] Check for | Darren Tucker | 2006-09-03 | 3 | -4/+20 |
| | | | | | declaration of writev(2) and declare it ourselves if necessary. Makes the atomiciov() calls build on really old systems. ok djm@ | ||||
* | - (dtucker) [ssh-keyscan.c ssh-rand-helper.c ssh.c sshconnect.c | Darren Tucker | 2006-09-02 | 9 | -1/+21 |
| | | | | | | | openbsd-compat/bindresvport.c openbsd-compat/getrrsetbyname.c openbsd-compat/port-tun.c openbsd-compat/rresvport.c] Include <arpa/inet.h> for hton* and ntoh* macros. Required on (at least) HP-UX since we define _XOPEN_SOURCE_EXTENDED. Found by santhi.amirta at gmail com. | ||||
* | - (dtucker) [openbsd-compat/port-irix.c] Add errno.h, found by Iain Morgan. | Darren Tucker | 2006-09-02 | 2 | -2/+6 |
| | |||||
* | - (dtucker) [README contrib/{caldera,redhat,suse}/openssh.spec] Crank | Darren Tucker | 2006-09-01 | 5 | -7/+9 |
| | | | | versions. | ||||
* | - (dtucker) [configure.ac includes.h openbsd-compat/glob.{c,h}] Explicitly | Darren Tucker | 2006-09-01 | 5 | -6/+16 |
| | | | | | | | test for GLOB_NOMATCH and use our glob functions if it's not found. Stops sftp from segfaulting when attempting to get a nonexistent file on Cygwin (previous versions of OpenSSH didn't use the native glob). Partly from and tested by Corinna Vinschen. | ||||
* | - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Fix implict declaration | Darren Tucker | 2006-09-01 | 2 | -8/+10 |
| | | | | warnings for binary_open and binary_close. Patch from Corinna Vinschen. | ||||
* | - (djm) [includes.h monitor.c openbsd-compat/bindresvport.c] | Damien Miller | 2006-09-01 | 5 | -3/+16 |
| | | | | | [openbsd-compat/rresvport.c] Some more headers: netinet/in.h sys/socket.h and unistd.h in various places | ||||
* | - (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c] | Damien Miller | 2006-09-01 | 59 | -16/+117 |
| | | | | | | | | | | | | | | | | | [auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c] [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c] [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c] [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c] [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c] [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c] [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c] [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c] [sshconnect1.c sshconnect2.c sshd.c rc4.diff] [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c] [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c] [openbsd-compat/port-uw.c] Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h; compile problems reported by rac AT tenzing.org | ||||
* | - (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilege | Darren Tucker | 2006-08-31 | 2 | -1/+4 |
| | | | | while setting up the ssh service account. Patch from Corinna Vinschen. | ||||
* | - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ] | Damien Miller | 2006-08-31 | 13 | -12/+332 |
| | | | | | | | | [platform.c platform.h sshd.c openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c] [openbsd-compat/port-solaris.h] Add support for Solaris process contracts, enabled with --use-solaris-contracts. Patch from Chad Mynhier, tweaked by dtucker@ and myself; ok dtucker@ |