summaryrefslogtreecommitdiff
path: root/openbsd-compat/port-linux.c
Commit message (Collapse)AuthorAgeFilesLines
* SELinux has deprecated security_context_tDamien Miller2020-11-131-9/+6
| | | | (it was only ever a char* anyway)
* logging is now macros, remove function pointersDamien Miller2020-10-171-5/+5
|
* spelling mistakesDamien Miller2020-03-131-1/+1
| | | | from https://fossies.org/linux/misc/openssh-8.2p1.tar.gz/codespell.html
* Include stdlib.h.Darren Tucker2018-09-071-0/+1
| | | | Patch from jjelen at redhat via bz#2687.
* avoid inclusion of deprecated selinux/flask.hDamien Miller2018-02-261-3/+6
| | | | Use string_to_security_class() instead.
* Remove obsolete CVS $Id from source files.Darren Tucker2016-08-171-2/+0
| | | | | Since -portable switched to git the CVS $Id tags are no longer being updated and are becoming increasingly misleading. Remove them.
* downgrade OOM adjustment logging: verbose -> debugDamien Miller2015-07-301-2/+2
|
* - (dtucker) [M auth-chall.c auth-krb5.c auth-pam.c cipher-aes.c cipher-ctr.cDarren Tucker2013-06-021-7/+5
| | | | | | | | groupaccess.c loginrec.c monitor.c monitor_wrap.c session.c sshd.c sshlogin.c uidswap.c openbsd-compat/bsd-cygwin_util.c openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/port-aix.c openbsd-compat/port-linux.c] Replace portable-specific instances of xfree with the equivalent calls to free.
* - (djm) [openbsd-compat/port-linux.c] bz#1960: fix crash on SELinuxDamien Miller2012-03-091-3/+4
| | | | | systems where sshd is run in te wrong context. Patch from Sven Vermeulen; ok dtucker@
* - (djm) [openbsd-compat/port-linux.c] Suppress logging when attemptingDamien Miller2011-08-291-6/+19
| | | | | to switch SELinux context away from unconfined_t, based on patch from Jan Chadima; bz#1919 ok dtucker@
* - (dtucker) [openbsd-compat/port-linux.c] Bug 1924: Improve selinux contextDarren Tucker2011-08-121-2/+3
| | | | | change error by reporting old and new context names Patch from jchadima at redhat.
* - (dtucker) [openbsd-compat/port-linux.c] Bug #1851: fix syntax error inDarren Tucker2011-02-061-2/+2
| | | | selinux code. Patch from Leonardo Chiquitto.
* - (djm) [openbsd-compat/port-linux.c] Check whether SELinux is enabledDamien Miller2011-01-281-7/+9
| | | | | | before attempting setfscreatecon(). Check whether matchpathcon() succeeded before using its result. Patch from cjwatson AT debian.org; bz#1851
* - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.cDamien Miller2011-01-251-1/+15
| | | | | | | openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to port-linux.c to avoid compilation errors. Add -lselinux to ssh when building with SELinux support to avoid linking failure; report from amk AT spamfence.net; ok dtucker
* - (dtucker) [openbsd-compat/port-linux.c] Fix minor bug caught by -Werror onDarren Tucker2011-01-171-2/+2
| | | | the tinderbox.
* - (dtucker) [openbsd-compat/port-linux.c] Bug #1838: Add support for the newDarren Tucker2011-01-171-19/+36
| | | | | Linux OOM-killer magic values that changed in 2.6.36 kernels, with fallback to the old values. Feedback from vapier at gentoo org and djm, ok djm.
* - (dtucker) [openbsd-compat/port-linux.c] Check is_selinux_enabled for exactDarren Tucker2010-09-101-2/+2
| | | | | return code since it can apparently return -1 under some conditions. From openssh bugs werbittewas de, ok djm@
* - (dtucker) [openbsd-compat/port-linux.c] Make failure to write to the OOMDarren Tucker2010-03-011-4/+4
| | | | | adjust log at verbose only, since according to cjwatson in bug #1470 some virtualization platforms don't allow writes.
* - (dtucker) Bug #1470: Disable OOM-killing of the listening sshd on Linux,Darren Tucker2009-12-081-2/+61
| | | | based on a patch from Vaclav Ovsik and Colin Watson. ok djm.
* - (dtucker) [session.c openbsd-compat/port-linux.{c,h}] Bug #1637: if selinuxDarren Tucker2009-10-241-1/+36
| | | | | is enabled set the security context to "sftpd_t" before running the internal sftp server Based on a patch from jchadima at redhat.
* - (dtucker) Cache selinux status earlier so we know if it's enabled after aDarren Tucker2008-03-271-2/+2
| | | | | | chroot. Allows ChrootDirectory to work with selinux support compiled in but not enabled. Using it with selinux enabled will require some selinux support inside the chroot. "looks sane" djm@
* - (djm) bz#1325: Fix SELinux in permissive mode where it wouldDamien Miller2007-06-281-1/+3
| | | | | incorrectly fatal() on errors. patch from cjwatson AT debian.org; ok dtucker
* - (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]Damien Miller2006-09-011-1/+2
| | | | | | | | | | | | | | | | | [auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c] [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c] [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c] [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c] [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c] [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c] [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c] [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c] [sshconnect1.c sshconnect2.c sshd.c rc4.diff] [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c] [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c] [openbsd-compat/port-uw.c] Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h; compile problems reported by rac AT tenzing.org
* - (djm) [acss.c auth-krb5.c auth-options.c auth-pam.c auth-shadow.c]Damien Miller2006-07-241-1/+4
| | | | | | | | | | | | | | | [canohost.c channels.c cipher-acss.c defines.h dns.c gss-genr.c] [gss-serv-krb5.c gss-serv.c log.h loginrec.c logintest.c readconf.c] [servconf.c ssh-keygen.c ssh-keyscan.c ssh-keysign.c ssh-rand-helper.c] [ssh.c sshconnect.c sshd.c openbsd-compat/bindresvport.c] [openbsd-compat/bsd-arc4random.c openbsd-compat/bsd-misc.c] [openbsd-compat/getrrsetbyname.c openbsd-compat/glob.c] [openbsd-compat/mktemp.c openbsd-compat/port-linux.c] [openbsd-compat/port-tun.c openbsd-compat/readpassphrase.c] [openbsd-compat/setproctitle.c openbsd-compat/xmmap.c] make the portable tree compile again - sprinkle unistd.h and string.h back in. Don't redefine __unused, as it turned out to be used in headers on Linux, and replace its use in auth-pam.c with ARGSUSED
* - (djm) [Makefile.in configure.ac session.c sshpty.c]Damien Miller2006-04-221-0/+165
[contrib/redhat/sshd.init openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c] [openbsd-compat/port-linux.h] Add support for SELinux, setting the execution and TTY contexts. based on patch from Daniel Walsh, bz #880; ok dtucker@