Ben Lindstrom [Mon, 23 Dec 2002 02:26:08 +0000 (02:26 +0000)]
- markus@cvs.openbsd.org 2002/12/10 08:56:00
[session.c]
Make sure $SHELL points to the shell from the password file, even if shell
is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
Ben Lindstrom [Mon, 23 Dec 2002 02:22:09 +0000 (02:22 +0000)]
- markus@cvs.openbsd.org 2002/12/05 11:08:35
[scp.c]
use roundup() similar to rcp/util.c and avoid problems with strange
filesystem block sizes, noted by tjr@freebsd.org; ok djm@
Ben Lindstrom [Mon, 23 Dec 2002 02:01:55 +0000 (02:01 +0000)]
- markus@cvs.openbsd.org 2002/11/18 16:43:44
[clientloop.c]
don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
Ben Lindstrom [Mon, 23 Dec 2002 02:00:23 +0000 (02:00 +0000)]
- fgsch@cvs.openbsd.org 2002/11/15 10:03:09
[authfile.c]
lseek(2) may return -1 when getting the public/private key lenght.
Simplify the code and check for errors using fstat(2).
Ben Lindstrom [Sat, 9 Nov 2002 15:59:27 +0000 (15:59 +0000)]
- (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c
ntsec now default if cygwin version beginning w/ version 56. Patch
by Corinna Vinschen <vinschen@redhat.com>
Ben Lindstrom [Sat, 9 Nov 2002 15:52:31 +0000 (15:52 +0000)]
- markus@cvs.openbsd.org 2002/11/07 22:08:07
[readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
because HostbasedAuthentication might be enabled based on the
target host and ssh-keysign(8) does not know the remote hostname
and not trust ssh(1) about the hostname, so we add a new option
EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
Damien Miller [Thu, 3 Oct 2002 01:54:35 +0000 (11:54 +1000)]
- (djm) OpenBSD CVS Sync
- markus@cvs.openbsd.org 2002/10/01 20:34:12
[ssh-agent.c]
allow root to access the agent, since there is no protection from root.
Damien Miller [Mon, 30 Sep 2002 01:59:21 +0000 (11:59 +1000)]
- (djm) OpenBSD CVS Sync
- mickey@cvs.openbsd.org 2002/09/27 10:42:09
[compat.c compat.h sshd.c]
add a generic match for a prober, such as sie big brother;
idea from stevesk@; markus@ ok
Damien Miller [Wed, 25 Sep 2002 02:20:52 +0000 (12:20 +1000)]
- todd@cvs.openbsd.org 2002/09/24 20:59:44
[sshd.8]
tweak the example $HOME/.ssh/rc script to not show on any cmdline the
sensitive data it handles. This fixes bug # 402 as reported by
kolya@mit.edu (Nickolai Zeldovich).
ok markus@ and stevesk@
Damien Miller [Wed, 25 Sep 2002 02:19:08 +0000 (12:19 +1000)]
- (djm) OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2002/09/23 20:46:27
[canohost.c]
change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
Tim Rice [Mon, 23 Sep 2002 23:54:10 +0000 (16:54 -0700)]
[configure.ac] s/return/exit/ patch by dtucker@zip.com.au
From autoconf guidelines:
"Test programs should exit, not return, from main, because on some
systems (old Suns, at least) the argument to return in main is ignored."
Damien Miller [Sat, 21 Sep 2002 15:26:51 +0000 (01:26 +1000)]
- stevesk@cvs.openbsd.org 2002/09/20 18:41:29
[auth.c]
log illegal user here for missing privsep case (ssh2).
this is executed in the monitor. ok markus@
Damien Miller [Thu, 19 Sep 2002 01:54:54 +0000 (11:54 +1000)]
- itojun@cvs.openbsd.org 2002/09/17 07:47:02
[channels.c]
don't quit while creating X11 listening socket.
http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
got from portable. markus ok
Damien Miller [Thu, 19 Sep 2002 01:49:37 +0000 (11:49 +1000)]
- stevesk@cvs.openbsd.org 2002/09/13 19:23:09
[channels.c sshconnect.c sshd.c]
remove use of SO_LINGER, it should not be needed. error check
SO_REUSEADDR. fixup comments. ok markus@
Damien Miller [Wed, 11 Sep 2002 23:54:25 +0000 (09:54 +1000)]
- djm@cvs.openbsd.org 2002/09/11 22:41:50
[sftp.1 sftp-client.c sftp-client.h sftp-common.c sftp-common.h]
[sftp-glob.c sftp-glob.h sftp-int.c sftp-server.c]
support for short/long listings and globbing in "ls"; ok markus@
Damien Miller [Wed, 11 Sep 2002 23:52:46 +0000 (09:52 +1000)]
- stevesk@cvs.openbsd.org 2002/09/11 18:27:26
[authfd.c authfd.h ssh.c]
don't connect to agent to test for presence if we've previously
connected; ok markus@
Damien Miller [Wed, 11 Sep 2002 23:49:15 +0000 (09:49 +1000)]
- markus@cvs.openbsd.org 2002/09/09 14:54:15
[channels.c kex.h key.c monitor.c monitor_wrap.c radix.c uuencode.c]
signed vs unsigned from -pedantic; ok henning@
Damien Miller [Wed, 11 Sep 2002 23:47:29 +0000 (09:47 +1000)]
- itojun@cvs.openbsd.org 2002/09/09 06:48:06
[auth1.c auth.h auth-krb5.c monitor.c monitor.h]
[monitor_wrap.c monitor_wrap.h]
kerberos support for privsep. confirmed to work by lha@stacken.kth.se
patch from markus
Damien Miller [Thu, 5 Sep 2002 04:35:14 +0000 (14:35 +1000)]
- (djm) OpenBSD CVS Sync
- stevesk@cvs.openbsd.org 2002/09/04 18:52:42
[servconf.c sshd.8 sshd_config.5]
default LoginGraceTime to 2m; 1m may be too short for slow systems.
ok markus@
Damien Miller [Wed, 4 Sep 2002 06:45:09 +0000 (16:45 +1000)]
- stevesk@cvs.openbsd.org 2002/08/29 15:57:25
[monitor.c session.c sshlogin.c sshlogin.h]
pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
NOTE: there are also p-specific parts to this patch. ok markus@
projects / thirdparty / openssh-portable.git / log
