Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-08-16 | - (dtucker) [acconfig.h auth-pam.c configure.ac] Set real uid to non-root | Darren Tucker | |
to convince Solaris PAM to honour password complexity rules. ok djm@ | |||
2004-08-15 | - (djm) [acconfig.h configure.ac openbsd-compat/Makefile.in | Damien Miller | |
openbsd-compat/bsd-closefrom.c openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h openbsd-compat/openbsd-compat.h] Use smarter closefrom() replacement from sudo; ok dtucker@ | |||
2004-06-28 | - (dtucker) [acconfig.h configure.ac sftp-server.c] Bug #823: add sftp | Darren Tucker | |
rename handling for Linux which returns EPERM for link() on (at least some) filesystems that do not support hard links. sftp-server will fall back to stat+rename() in such cases. | |||
2004-04-16 | Typo fix in comment | Darren Tucker | |
2004-04-14 | - (dtucker) [acconfig.h configure.ac defines.h] Bug #673: check for 4-arg | Darren Tucker | |
skeychallenge(), eg on NetBSD. ok mouring@ | |||
2004-04-07 | - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see | Ben Lindstrom | |
if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X) are starting to restrict it as internal since it is not needed by developers any more. (Patch based on Apple tree) - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since krb5 on MacOS/X conflicts. There may be a better solution, but this will work for now. | |||
2004-04-06 | - (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use | Darren Tucker | |
updwtmpx() on IRIX since it seems to clobber utmp. ok djm@ | |||
2004-02-06 | - markus@cvs.openbsd.org 2004/01/30 09:48:57 | Darren Tucker | |
[auth-passwd.c auth.h pathnames.h session.c] support for password change; ok dtucker@ (set password-dead=1w in login.conf to use this). In -Portable, this is currently only platforms using bsdauth. | |||
2004-01-23 | - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c] | Darren Tucker | |
Change AFS symbol to USE_AFS to prevent namespace collisions, do not include kafs.h unless necessary. From deengert at anl.gov. For consistency, all of the libkafs bits are now inside "#if defined(KRB5) && defined(USE_AFS)". | |||
2004-01-05 | - (dtucker) [acconfig.h configure.ac includes.h servconf.c session.c] | Darren Tucker | |
Only enable KerberosGetAFSToken if Heimdal's libkafs is found. with jakob@ | |||
2004-01-02 | - (djm) OSX/Darwin needs BIND_8_COMPAT to build getrrsetbyname. Report from | Damien Miller | |
jakob@ | |||
2003-12-17 | - (dtucker) [acconfig.h configure.ac uidswap.c] Bug #645: Check for | Darren Tucker | |
setres[ug]id() present but not implemented (eg some Linux/glibc combinations). | |||
2003-10-15 | - (dtucker) [acconfig.h configure.ac dns.c openbsd-compat/getrrsetbyname.c | Darren Tucker | |
openbsd-compat/getrrsetbyname.h] DNS fingerprint support is now always compiled in but disabled in config. | |||
2003-09-19 | - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME | Darren Tucker | |
2003-09-16 | - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve | Darren Tucker | |
PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it (eg Solaris, Reliant Unix). Patch from Robert.Dahlem at siemens.com. ok djm@ | |||
2003-09-08 | [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for | Tim Rice | |
HEADER.ad in arpa/nameser.h | |||
2003-09-07 | - (dtucker) [acconfig.h] Typo. | Darren Tucker | |
2003-09-06 | - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX. | Darren Tucker | |
2003-08-26 | - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h | Darren Tucker | |
configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson. | |||
2003-08-25 | - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny | Darren Tucker | |
any access to locked accounts. ok djm@ | |||
2003-08-02 | - (dtucker) OpenBSD CVS SyncPOST_KRB4_REMOVAL | Darren Tucker | |
- markus@cvs.openbsd.org 2003/07/22 13:35:22 [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h] remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1); test+ok henning@ - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support. - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files. I hope I got this right.... | |||
2003-07-14 | - (dtucker) [acconfig.h configure.ac port-aix.c] Older AIXes don't declare | Darren Tucker | |
loginfailed at all, so assume 3-arg loginfailed if not declared. | |||
2003-07-08 | - (dtucker) [acconfig.h auth-passwd.c configure.ac session.c port-aix.[ch]] | Darren Tucker | |
Include AIX headers for authentication functions and make calls match prototypes. Test for and handle 3-args and 4-arg variants of loginfailed. | |||
2003-06-11 | - (djm) Put licenses on substantial header files | Damien Miller | |
2003-06-05 | - (djm) Implement paranoid priv dropping checks, based on: | Damien Miller | |
"SetUID demystified" - Hao Chen, David Wagner and Drew Dean Proceedings of USENIX Security Symposium 2002 | |||
2003-06-03 | - (djm) Replace setproctitle replacement with code derived from | Damien Miller | |
UCB sendmail | |||
2003-05-18 | - (djm) Remove IPv4 by default hack now that we can specify AF in config | Damien Miller | |
2003-05-15 | - (djm) Import getrrsetbyname() function from OpenBSD libc (for DNS support) | Damien Miller | |
2003-05-15 | - (djm) Configure glue for DNS support (code doesn't work in portable yet) | Damien Miller | |
2003-05-10 | - (dtucker) Bug #536: Test for and work around openpty/controlling ttyBEFORE_FREEBSD_PAM_MERGE | Darren Tucker | |
problem on Linux (fixes "could not set controlling tty" errors). Also renames STREAMS_PUSH_ACQUIRES_CTTY to the more generic SSHD_ACQUIRES_CTTY and moves the Solaris-specific comments to configure.ac. | |||
2003-05-02 | - (dtucker) Bug #544: ignore invalid cmsg_type on Linux 2.0 kernels, | Darren Tucker | |
privsep should now work. | |||
2003-03-10 | - (djm) Bug #245: TTY problems on Solaris. Fix by stevesk@ and | Damien Miller | |
dtucker@zip.com.au | |||
2003-01-28 | - (djm) Search libposix4 and librt for nanosleep. From dtucker@zip.com.au | Damien Miller | |
and openssh-unix-dev@thewrittenword.com | |||
2003-01-13 | - (djm) Rework openbsd-compat/setproctitle.c a bit: move emulation type | Damien Miller | |
detection to configure.ac. Prompted by stevesk@ | |||
2003-01-07 | - (djm) Bug #26: Use local mkstemp() rather than glibc's silly one. Fixes | Damien Miller | |
Can't pass KRB4 TGT passing. Fix from: jan.iven@cern.ch | |||
2002-09-25 | Cray fixes (bug 367) based on patch from Wendy Palm @ cray. | Tim Rice | |
This does not include the deattack.c fixes. | |||
2002-07-14 | (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c | Tim Rice | |
openbsd-compat/Makefile.in] support compression on platforms that have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c Based on patch from nalin@redhat.com of code extracted from Owl's package | |||
2002-07-09 | - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms | Ben Lindstrom | |
lacking that concept can share it. Patch by vinschen@redhat.com | |||
2002-07-07 | [acconfig.h configure.ac sshd.c] s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/ | Tim Rice | |
2002-06-25 | [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus | Tim Rice | |
for Cygwin, Cray, & SCO | |||
2002-06-25 | - (bal) if mmap() is substandard, don't allow compression on server side. | Ben Lindstrom | |
Post 'event' we will add more options. | |||
2002-06-24 | - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh | Kevin Steves | |
2002-06-12 | - (bal) Build noop setgroups() for cygwin to clean up code (For other | Ben Lindstrom | |
platforms without the setgroups() requirement, you MUST define SETGROUPS_NOOP in the configure.ac) Based on patch by vinschen@redhat.com | |||
2002-05-13 | - (djm) Add --with-privsep-path configure option | Damien Miller | |
2002-05-13 | - (djm) Add --with-superuser-path=xxx configure option to specify what $PATH | Damien Miller | |
the superuser receives. | |||
2002-04-25 | - (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26 | Kevin Steves | |
support. bug #184. most from dcole@keysoftsys.com. | |||
2002-04-23 | - (stevesk) [acconfig.h configure.ac session.c] LOGIN_NO_ENDOPT for HP-UX | Kevin Steves | |
2002-04-23 | - (stevesk) [acconfig.h] NEED_IN_SYSTM_H unused | Kevin Steves | |
2002-04-23 | - (djm) Bug #214: Fix utmp for Irix (don't strip "tty"). Patch from | Damien Miller | |
Kevin Taylor <no@nowhere.org> (??) via Philipp Grau <phgrau@zedat.fu-berlin.de> | |||
2002-04-13 | - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk> | Damien Miller | |