Ben Lindstrom | 0a4f754 | 2002-08-20 18:36:25 +0000 | [diff] [blame^] | 1 | 20020820 |
| 2 | - OpenBSD CVS Sync |
| 3 | - millert@cvs.openbsd.org 2002/08/02 14:43:15 |
| 4 | [monitor.c monitor_mm.c] |
| 5 | Change mm_zalloc() sanity checks to be more in line with what |
| 6 | we do in calloc() and add a check to monitor_mm.c. |
| 7 | OK provos@ and markus@ |
| 8 | |
Tim Rice | d730b78 | 2002-08-13 18:52:10 -0700 | [diff] [blame] | 9 | 20020813 |
| 10 | - (tim) [configure.ac] Display OpenSSL header/library version. |
| 11 | Patch by dtucker@zip.com.au |
| 12 | |
Ben Lindstrom | 3ed6640 | 2002-08-01 01:21:56 +0000 | [diff] [blame] | 13 | 20020731 |
| 14 | - (bal) OpenBSD CVS Sync |
| 15 | - markus@cvs.openbsd.org 2002/07/24 16:11:18 |
| 16 | [hostfile.c hostfile.h sshconnect.c] |
| 17 | print out all known keys for a host if we get a unknown host key, |
| 18 | see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4 |
| 19 | |
| 20 | the ssharp mitm tool attacks users in a similar way, so i'd like to |
| 21 | pointed out again: |
| 22 | A MITM attack is always possible if the ssh client prints: |
| 23 | The authenticity of host 'bla' can't be established. |
| 24 | (protocol version 2 with pubkey authentication allows you to detect |
| 25 | MITM attacks) |
Ben Lindstrom | 8d631e8 | 2002-08-01 01:25:00 +0000 | [diff] [blame] | 26 | - mouring@cvs.openbsd.org 2002/07/25 01:16:59 |
| 27 | [sftp.c] |
| 28 | FallBackToRsh does not exist anywhere else. Remove it from here. |
| 29 | OK deraadt. |
Ben Lindstrom | 4b99be8 | 2002-08-01 01:26:29 +0000 | [diff] [blame] | 30 | - markus@cvs.openbsd.org 2002/07/29 18:57:30 |
| 31 | [sshconnect.c] |
| 32 | print file:line |
Ben Lindstrom | 5d860f0 | 2002-08-01 01:28:38 +0000 | [diff] [blame] | 33 | - markus@cvs.openbsd.org 2002/07/30 17:03:55 |
| 34 | [auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5] |
| 35 | add PermitUserEnvironment (off by default!); from dot@dotat.at; |
| 36 | ok provos, deraadt |
Ben Lindstrom | 3ed6640 | 2002-08-01 01:21:56 +0000 | [diff] [blame] | 37 | |
Ben Lindstrom | 18d2b5d | 2002-07-30 19:32:07 +0000 | [diff] [blame] | 38 | 20020730 |
| 39 | - (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de |
| 40 | |
Kevin Steves | 6a998eb | 2002-07-28 20:24:07 +0000 | [diff] [blame] | 41 | 20020728 |
| 42 | - (stevesk) [auth-pam.c] should use PAM_MSG_MEMBER(); from solar |
Kevin Steves | e7dbdf7 | 2002-07-28 20:31:18 +0000 | [diff] [blame] | 43 | - (stevesk) [CREDITS] solar |
Kevin Steves | 4bdb547 | 2002-07-28 20:42:23 +0000 | [diff] [blame] | 44 | - (stevesk) [ssh-rand-helper.c] RAND_bytes() and SHA1_Final() unsigned |
| 45 | char arg. |
Kevin Steves | 6a998eb | 2002-07-28 20:24:07 +0000 | [diff] [blame] | 46 | |
Damien Miller | 6d8d788 | 2002-07-25 14:36:24 +1000 | [diff] [blame] | 47 | 20020725 |
| 48 | - (djm) Remove some cruft from INSTALL |
Damien Miller | a7609f5 | 2002-07-25 14:40:22 +1000 | [diff] [blame] | 49 | - (djm) Latest config.guess and config.sub from ftp://ftp.gnu.org/gnu/config/ |
Damien Miller | 6d8d788 | 2002-07-25 14:36:24 +1000 | [diff] [blame] | 50 | |
Ben Lindstrom | 6f52b3e | 2002-07-23 21:00:17 +0000 | [diff] [blame] | 51 | 20020723 |
| 52 | - (bal) [bsd-cray.c bsd-cray.h] Part 2 of Cray merger. |
Ben Lindstrom | 82ec983 | 2002-07-23 21:05:17 +0000 | [diff] [blame] | 53 | - (bal) sync ID w/ ssh-agent.c |
Ben Lindstrom | 264ee30 | 2002-07-23 21:01:56 +0000 | [diff] [blame] | 54 | - (bal) OpenBSD Sync |
| 55 | - markus@cvs.openbsd.org 2002/07/19 15:43:33 |
| 56 | [log.c log.h session.c sshd.c] |
| 57 | remove fatal cleanups after fork; based on discussions with and code |
| 58 | from solar. |
Ben Lindstrom | ee8d52d | 2002-07-23 21:03:02 +0000 | [diff] [blame] | 59 | - stevesk@cvs.openbsd.org 2002/07/19 17:42:40 |
| 60 | [ssh.c] |
| 61 | display a warning from ssh when XAuthLocation does not exist or xauth |
| 62 | returned no authentication data. ok markus@ |
Ben Lindstrom | 218a07d | 2002-07-23 21:06:45 +0000 | [diff] [blame] | 63 | - stevesk@cvs.openbsd.org 2002/07/21 18:32:20 |
| 64 | [auth-options.c] |
| 65 | unneeded includes |
Ben Lindstrom | 3cc4450 | 2002-07-23 21:07:45 +0000 | [diff] [blame] | 66 | - stevesk@cvs.openbsd.org 2002/07/21 18:34:43 |
| 67 | [auth-options.h] |
| 68 | remove invalid comment |
Ben Lindstrom | b9051ec | 2002-07-23 21:11:09 +0000 | [diff] [blame] | 69 | - markus@cvs.openbsd.org 2002/07/22 11:03:06 |
| 70 | [session.c] |
| 71 | fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors; |
Ben Lindstrom | 7cea16b | 2002-07-23 21:13:40 +0000 | [diff] [blame] | 72 | - stevesk@cvs.openbsd.org 2002/07/22 17:32:56 |
| 73 | [monitor.c] |
| 74 | u_int here; ok provos@ |
Ben Lindstrom | 41daec7 | 2002-07-23 21:15:13 +0000 | [diff] [blame] | 75 | - stevesk@cvs.openbsd.org 2002/07/23 16:03:10 |
| 76 | [sshd.c] |
| 77 | utmp_len is unsigned; display error consistent with other options. |
| 78 | ok markus@ |
Ben Lindstrom | 1fa330c | 2002-07-23 21:29:49 +0000 | [diff] [blame] | 79 | - stevesk@cvs.openbsd.org 2002/07/15 17:15:31 |
| 80 | [uidswap.c] |
| 81 | little more debugging; ok markus@ |
Ben Lindstrom | 7cea16b | 2002-07-23 21:13:40 +0000 | [diff] [blame] | 82 | |
Ben Lindstrom | beb5f33 | 2002-07-22 15:28:53 +0000 | [diff] [blame] | 83 | 20020722 |
| 84 | - (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk |
Kevin Steves | 066e1ab | 2002-07-22 16:20:29 +0000 | [diff] [blame] | 85 | - (stevesk) [xmmap.c] missing prototype for fatal() |
Ben Lindstrom | 232ccf7 | 2002-07-22 23:34:25 +0000 | [diff] [blame] | 86 | - (bal) [configure.ac defines.h loginrec.c sshd.c sshpty.c] Partial sync |
| 87 | with Cray (mostly #ifdef renaming). Patch by wendyp@cray.com. |
Ben Lindstrom | 762104e | 2002-07-23 00:00:05 +0000 | [diff] [blame] | 88 | - (bal) [configure.ac] Missing ;; from cray patch. |
Ben Lindstrom | 446d886 | 2002-07-23 00:03:33 +0000 | [diff] [blame] | 89 | - (bal) [monitor_mm.c openbsd-compat/xmmap.h] Move xmmap() defines |
| 90 | into it's own header. |
Kevin Steves | 38b050a | 2002-07-23 00:44:07 +0000 | [diff] [blame] | 91 | - (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be |
| 92 | freed by the caller; add free_pam_environment() and use it. |
Kevin Steves | 6fa740b | 2002-07-23 00:51:53 +0000 | [diff] [blame] | 93 | - (stevesk) [auth-pam.c] typo in comment |
Ben Lindstrom | beb5f33 | 2002-07-22 15:28:53 +0000 | [diff] [blame] | 94 | |
Kevin Steves | 6cdecd0 | 2002-07-21 17:26:54 +0000 | [diff] [blame] | 95 | 20020721 |
| 96 | - (stevesk) [auth-pam.c] merge cosmetic changes from solar's |
| 97 | openssh-3.4p1-owl-password-changing.diff |
Kevin Steves | 63007d4 | 2002-07-21 17:57:01 +0000 | [diff] [blame] | 98 | - (stevesk) [auth-pam.c] merge rest of solar's PAM patch; |
| 99 | PAM_NEW_AUTHTOK_REQD remains in #if 0 for now. |
Kevin Steves | 3429a1b | 2002-07-21 22:49:47 +0000 | [diff] [blame] | 100 | - (stevesk) [auth-pam.c] cast to avoid initialization type mismatch |
| 101 | warning on pam_conv struct conversation function. |
Kevin Steves | 7ba4970 | 2002-07-21 23:16:00 +0000 | [diff] [blame] | 102 | - (stevesk) [auth-pam.h] license |
Kevin Steves | 21e04eb | 2002-07-21 23:20:07 +0000 | [diff] [blame] | 103 | - (stevesk) [auth-pam.h] unneeded include |
Kevin Steves | 287077e | 2002-07-21 23:59:39 +0000 | [diff] [blame] | 104 | - (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h |
Kevin Steves | 6cdecd0 | 2002-07-21 17:26:54 +0000 | [diff] [blame] | 105 | |
Kevin Steves | 3a88191 | 2002-07-20 19:05:40 +0000 | [diff] [blame] | 106 | 20020720 |
| 107 | - (stevesk) [ssh-keygen.c] bug #231: always init/seed_rng(). |
| 108 | |
Tim Rice | f1a1001 | 2002-07-19 11:57:57 -0700 | [diff] [blame] | 109 | 20020719 |
| 110 | - (tim) [contrib/solaris/buildpkg.sh] create privsep user/group if needed. |
| 111 | Patch by dtucker@zip.com.au |
Tim Rice | f028f1e | 2002-07-19 12:41:10 -0700 | [diff] [blame] | 112 | - (tim) [configure.ac] test for libxnet on HP. Patch by dtucker@zip.com.au |
Tim Rice | f1a1001 | 2002-07-19 11:57:57 -0700 | [diff] [blame] | 113 | |
Tim Rice | 7664584 | 2002-07-18 11:34:29 -0700 | [diff] [blame] | 114 | 20020718 |
| 115 | - (tim) [defines.h] Bug 313 patch by dirk.meyer@dinoex.sub.org |
| 116 | - (tim) [monitor_mm.c] add missing declaration for xmmap(). Reported |
| 117 | by ayamura@ayamura.org |
Tim Rice | 907881e | 2002-07-18 11:44:50 -0700 | [diff] [blame] | 118 | - (tim) [configure.ac] Bug 267 rework int64_t test. |
Tim Rice | eae876e | 2002-07-18 11:49:32 -0700 | [diff] [blame] | 119 | - (tim) [includes.h] Bug 267 add stdint.h |
Tim Rice | 7664584 | 2002-07-18 11:34:29 -0700 | [diff] [blame] | 120 | |
Ben Lindstrom | 2faabf3 | 2002-07-18 01:04:50 +0000 | [diff] [blame] | 121 | 20020717 |
| 122 | - (bal) aixbff package updated by dtucker@zip.com.au |
Tim Rice | e22be3b | 2002-07-17 19:20:07 -0700 | [diff] [blame] | 123 | - (tim) [configure.ac] change how we do paths in AC_PATH_PROGS tests |
| 124 | for autoconf 2.53. Based on a patch by jrj@purdue.edu |
Ben Lindstrom | 2faabf3 | 2002-07-18 01:04:50 +0000 | [diff] [blame] | 125 | |
Tim Rice | ffaf445 | 2002-07-16 14:24:38 -0700 | [diff] [blame] | 126 | 20020716 |
| 127 | - (tim) [contrib/solaris/opensshd.in] Only kill sshd if .pid file found |
| 128 | |
Ben Lindstrom | 728aa7e | 2002-07-15 17:48:11 +0000 | [diff] [blame] | 129 | 20020715 |
| 130 | - (bal) OpenBSD CVS Sync |
| 131 | - itojun@cvs.openbsd.org 2002/07/12 13:29:09 |
| 132 | [sshconnect.c] |
| 133 | print connect failure during debugging mode. |
Ben Lindstrom | c491b0d | 2002-07-15 17:52:49 +0000 | [diff] [blame] | 134 | - markus@cvs.openbsd.org 2002/07/12 15:50:17 |
| 135 | [cipher.c] |
| 136 | EVP_CIPH_CUSTOM_IV for our own rijndael |
Ben Lindstrom | 938b828 | 2002-07-15 17:58:34 +0000 | [diff] [blame] | 137 | - (bal) Remove unused tty defined in do_setusercontext() pointed out by |
| 138 | dtucker@zip.com.au plus a a more KNF since I am near it. |
Ben Lindstrom | 104c3fe | 2002-07-15 18:49:20 +0000 | [diff] [blame] | 139 | - (bal) Privsep user creation support in Solaris buildpkg.sh by |
| 140 | dtucker@zip.com.au |
Ben Lindstrom | 728aa7e | 2002-07-15 17:48:11 +0000 | [diff] [blame] | 141 | |
Tim Rice | 9521019 | 2002-07-14 10:02:20 -0700 | [diff] [blame] | 142 | 20020714 |
| 143 | - (tim) [Makefile.in] replace "id sshd" with "sshd -t" |
Tim Rice | 40017b0 | 2002-07-14 13:36:49 -0700 | [diff] [blame] | 144 | - (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c |
| 145 | openbsd-compat/Makefile.in] support compression on platforms that |
| 146 | have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c |
| 147 | Based on patch from nalin@redhat.com of code extracted from Owl's package |
Tim Rice | a091159 | 2002-07-14 14:43:57 -0700 | [diff] [blame] | 148 | - (tim) [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris. |
| 149 | report by chris@by-design.net |
Tim Rice | cdb8294 | 2002-07-14 15:33:20 -0700 | [diff] [blame] | 150 | - (tim) [loginrec.c] Bug 347: Fix typo (WTMPX_FILE) report by rodney@bond.net |
Tim Rice | 370e0ba | 2002-07-14 15:50:51 -0700 | [diff] [blame] | 151 | - (tim) [loginrec.c] Bug 348: add missing found = 1; to wtmpx_islogin() |
| 152 | report by rodney@bond.net |
Tim Rice | 9521019 | 2002-07-14 10:02:20 -0700 | [diff] [blame] | 153 | |
Tim Rice | 1363b3c | 2002-07-12 09:04:06 -0700 | [diff] [blame] | 154 | 20020712 |
| 155 | - (tim) [Makefile.in] quiet down install-files: and check-user: |
Tim Rice | 4796a29 | 2002-07-12 18:11:24 -0700 | [diff] [blame] | 156 | - (tim) [configure.ac] remove unused filepriv line |
Tim Rice | 1363b3c | 2002-07-12 09:04:06 -0700 | [diff] [blame] | 157 | |
Tim Rice | 6827395 | 2002-07-10 07:40:11 -0700 | [diff] [blame] | 158 | 20020710 |
| 159 | - (tim) [contrib/cygwin/ssh-host-config] explicitely sets the permissions |
| 160 | on /var/empty to 755 Patch by vinschen@redhat.com |
Ben Lindstrom | efee059 | 2002-07-11 03:54:43 +0000 | [diff] [blame] | 161 | - (bal) OpenBSD CVS Sync |
| 162 | - itojun@cvs.openbsd.org 2002/07/09 11:56:50 |
| 163 | [sshconnect.c] |
| 164 | silently try next address on connect(2). markus ok |
Ben Lindstrom | e982773 | 2002-07-11 03:56:46 +0000 | [diff] [blame] | 165 | - itojun@cvs.openbsd.org 2002/07/09 11:56:27 |
| 166 | [canohost.c] |
| 167 | suppress log on reverse lookup failiure, as there's no real value in |
| 168 | doing so. |
| 169 | markus ok |
Ben Lindstrom | ba8df7d | 2002-07-11 03:58:11 +0000 | [diff] [blame] | 170 | - itojun@cvs.openbsd.org 2002/07/09 12:04:02 |
| 171 | [sshconnect.c] |
| 172 | ed static function (less warnings) |
Ben Lindstrom | 9c44554 | 2002-07-11 03:59:18 +0000 | [diff] [blame] | 173 | - stevesk@cvs.openbsd.org 2002/07/09 17:46:25 |
| 174 | [sshd_config.5] |
| 175 | clarify no preference ordering in protocol list; ok markus@ |
Ben Lindstrom | a6cd75c | 2002-07-11 04:00:19 +0000 | [diff] [blame] | 176 | - itojun@cvs.openbsd.org 2002/07/10 10:28:15 |
| 177 | [sshconnect.c] |
| 178 | bark if all connection attempt fails. |
Ben Lindstrom | 6f89388 | 2002-07-11 04:01:29 +0000 | [diff] [blame] | 179 | - deraadt@cvs.openbsd.org 2002/07/10 17:53:54 |
| 180 | [rijndael.c] |
| 181 | use right sizeof in memcpy; markus ok |
Tim Rice | 6827395 | 2002-07-10 07:40:11 -0700 | [diff] [blame] | 182 | |
Ben Lindstrom | 99a4e14 | 2002-07-09 14:06:40 +0000 | [diff] [blame] | 183 | 20020709 |
| 184 | - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms |
| 185 | lacking that concept can share it. Patch by vinschen@redhat.com |
| 186 | |
Tim Rice | 8817724 | 2002-07-08 19:02:10 -0700 | [diff] [blame] | 187 | 20020708 |
| 188 | - (tim) [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to |
| 189 | work in a jumpstart environment. patch by kbrint@rufus.net |
Tim Rice | 2d0bf3d | 2002-07-08 19:10:05 -0700 | [diff] [blame] | 190 | - (tim) [Makefile.in] workaround for broken pakadd on some systems. |
Tim Rice | cbb9066 | 2002-07-08 19:17:10 -0700 | [diff] [blame] | 191 | - (tim) [configure.ac] fix libc89 utimes test. Mention default path for |
| 192 | --with-privsep-path= |
Tim Rice | 8817724 | 2002-07-08 19:02:10 -0700 | [diff] [blame] | 193 | |
Tim Rice | cc25206 | 2002-07-07 13:30:45 -0700 | [diff] [blame] | 194 | 20020707 |
| 195 | - (tim) [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH) |
Tim Rice | 9dd3081 | 2002-07-07 13:43:36 -0700 | [diff] [blame] | 196 | - (tim) [acconfig.h configure.ac sshd.c] |
| 197 | s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/ |
Tim Rice | e475a3c | 2002-07-07 14:07:46 -0700 | [diff] [blame] | 198 | - (tim) [contrib/cygwin/ssh-host-config] sshd account creation fixes |
| 199 | patch from vinschen@redhat.com |
Ben Lindstrom | 8abe736 | 2002-07-07 22:07:10 +0000 | [diff] [blame] | 200 | - (bal) [realpath.c] Updated with OpenBSD tree. |
Ben Lindstrom | c51b924 | 2002-07-07 22:10:15 +0000 | [diff] [blame] | 201 | - (bal) OpenBSD CVS Sync |
| 202 | - deraadt@cvs.openbsd.org 2002/07/04 04:15:33 |
| 203 | [key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c] |
| 204 | patch memory leaks; grendel@zeitbombe.org |
Ben Lindstrom | 8b2eecd | 2002-07-07 22:11:51 +0000 | [diff] [blame] | 205 | - deraadt@cvs.openbsd.org 2002/07/04 08:12:15 |
| 206 | [channels.c packet.c] |
| 207 | blah blah minor nothing as i read and re-read and re-read... |
Ben Lindstrom | 2bf759c | 2002-07-07 22:13:31 +0000 | [diff] [blame] | 208 | - markus@cvs.openbsd.org 2002/07/04 10:41:47 |
| 209 | [key.c monitor_wrap.c ssh-dss.c ssh-rsa.c] |
| 210 | don't allocate, copy, and discard if there is not interested in the data; |
| 211 | ok deraadt@ |
Ben Lindstrom | 8e8ef2a | 2002-07-07 22:14:55 +0000 | [diff] [blame] | 212 | - deraadt@cvs.openbsd.org 2002/07/06 01:00:49 |
| 213 | [log.c] |
| 214 | KNF |
Ben Lindstrom | 965710f | 2002-07-07 22:17:22 +0000 | [diff] [blame] | 215 | - deraadt@cvs.openbsd.org 2002/07/06 01:01:26 |
| 216 | [ssh-keyscan.c] |
| 217 | KNF, realloc fix, and clean usage |
Ben Lindstrom | 6a9fbc9 | 2002-07-07 22:19:13 +0000 | [diff] [blame] | 218 | - stevesk@cvs.openbsd.org 2002/07/06 17:47:58 |
| 219 | [ssh-keyscan.c] |
| 220 | unused variable |
Ben Lindstrom | 5c98db5 | 2002-07-07 22:25:29 +0000 | [diff] [blame] | 221 | - (bal) Minor KNF on ssh-keyscan.c |
Tim Rice | cc25206 | 2002-07-07 13:30:45 -0700 | [diff] [blame] | 222 | |
Tim Rice | e958ed3 | 2002-07-05 07:12:33 -0700 | [diff] [blame] | 223 | 20020705 |
| 224 | - (tim) [configure.ac] AIX 4.2.1 has authenticate() in libs. |
| 225 | Reported by Darren Tucker <dtucker@zip.com.au> |
Tim Rice | b66e292 | 2002-07-05 16:22:32 -0700 | [diff] [blame] | 226 | - (tim) [contrib/cygwin/ssh-host-config] double slash corrction |
| 227 | from vinschen@redhat.com |
Tim Rice | e958ed3 | 2002-07-05 07:12:33 -0700 | [diff] [blame] | 228 | |
Ben Lindstrom | 92ea0ea | 2002-07-04 18:11:09 +0000 | [diff] [blame] | 229 | 20020704 |
| 230 | - (bal) Limit data to TTY for AIX only (Newer versions can't handle the |
| 231 | faster data rate) Bug #124 |
Ben Lindstrom | 604de56 | 2002-07-04 18:20:51 +0000 | [diff] [blame] | 232 | - (bal) glob.c defines TILDE and AIX also defines it. #undef it first. |
| 233 | bug #265 |
Ben Lindstrom | d00a1a1 | 2002-07-04 19:33:49 +0000 | [diff] [blame] | 234 | - (bal) One too many nulls in ports-aix.c |
Ben Lindstrom | 92ea0ea | 2002-07-04 18:11:09 +0000 | [diff] [blame] | 235 | |
Ben Lindstrom | 6dbf300 | 2002-07-03 23:33:19 +0000 | [diff] [blame] | 236 | 20020703 |
| 237 | - (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com |
Ben Lindstrom | 723e29a | 2002-07-03 23:50:00 +0000 | [diff] [blame] | 238 | - (bal) minor correction to utimes() replacement. Patch by |
| 239 | onoe@sm.sony.co.jp |
Ben Lindstrom | 04f9af7 | 2002-07-04 00:03:56 +0000 | [diff] [blame] | 240 | - OpenBSD CVS Sync |
| 241 | - markus@cvs.openbsd.org 2002/06/27 08:49:44 |
| 242 | [dh.c ssh-keyscan.c sshconnect.c] |
| 243 | more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@ |
Ben Lindstrom | 35a2cb9 | 2002-07-04 00:05:06 +0000 | [diff] [blame] | 244 | - deraadt@cvs.openbsd.org 2002/06/27 09:08:00 |
| 245 | [monitor.c] |
| 246 | improve mm_zalloc check; markus ok |
Ben Lindstrom | eec16fc | 2002-07-04 00:06:15 +0000 | [diff] [blame] | 247 | - deraadt@cvs.openbsd.org 2002/06/27 10:35:47 |
| 248 | [auth2-none.c monitor.c sftp-client.c] |
| 249 | use xfree() |
Ben Lindstrom | edd098b | 2002-07-04 00:07:13 +0000 | [diff] [blame] | 250 | - stevesk@cvs.openbsd.org 2002/06/27 19:49:08 |
| 251 | [ssh-keyscan.c] |
| 252 | use convtime(); ok markus@ |
Ben Lindstrom | a796162 | 2002-07-04 00:08:23 +0000 | [diff] [blame] | 253 | - millert@cvs.openbsd.org 2002/06/28 01:49:31 |
| 254 | [monitor_mm.c] |
| 255 | tree(3) wants an int return value for its compare functions and |
| 256 | the difference between two pointers is not an int. Just do the |
| 257 | safest thing and store the result in a long and then return 0, |
| 258 | -1, or 1 based on that result. |
Ben Lindstrom | b1bdc5a | 2002-07-04 00:09:26 +0000 | [diff] [blame] | 259 | - deraadt@cvs.openbsd.org 2002/06/28 01:50:37 |
| 260 | [monitor_wrap.c] |
| 261 | use ssize_t |
Ben Lindstrom | fbbfa84 | 2002-07-04 00:10:34 +0000 | [diff] [blame] | 262 | - deraadt@cvs.openbsd.org 2002/06/28 10:08:25 |
| 263 | [sshd.c] |
| 264 | range check -u option at invocation |
Ben Lindstrom | 810af96 | 2002-07-04 00:11:40 +0000 | [diff] [blame] | 265 | - deraadt@cvs.openbsd.org 2002/06/28 23:05:06 |
| 266 | [sshd.c] |
| 267 | gidset[2] -> gidset[1]; markus ok |
Ben Lindstrom | 5a9d0ea | 2002-07-04 00:12:53 +0000 | [diff] [blame] | 268 | - deraadt@cvs.openbsd.org 2002/06/30 21:54:16 |
| 269 | [auth2.c session.c sshd.c] |
| 270 | lint asks that we use names that do not overlap |
Ben Lindstrom | a962c2f | 2002-07-04 00:14:17 +0000 | [diff] [blame] | 271 | - deraadt@cvs.openbsd.org 2002/06/30 21:59:45 |
| 272 | [auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c |
| 273 | monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c |
| 274 | sshconnect2.c sshd.c] |
| 275 | minor KNF |
Ben Lindstrom | fd2aace | 2002-07-04 00:15:22 +0000 | [diff] [blame] | 276 | - deraadt@cvs.openbsd.org 2002/07/01 16:15:25 |
| 277 | [msg.c] |
| 278 | %u |
Ben Lindstrom | 343010a | 2002-07-04 00:16:25 +0000 | [diff] [blame] | 279 | - markus@cvs.openbsd.org 2002/07/01 19:48:46 |
| 280 | [sshconnect2.c] |
| 281 | for compression=yes, we fallback to no-compression if the server does |
| 282 | not support compression, vice versa for compression=no. ok mouring@ |
Ben Lindstrom | 43ce2c8 | 2002-07-04 00:17:33 +0000 | [diff] [blame] | 283 | - markus@cvs.openbsd.org 2002/07/03 09:55:38 |
| 284 | [ssh-keysign.c] |
| 285 | use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld) |
| 286 | in order to avoid a possible Kocher timing attack pointed out by Charles |
| 287 | Hannum; ok provos@ |
Ben Lindstrom | 5d35a2f | 2002-07-04 00:19:40 +0000 | [diff] [blame] | 288 | - markus@cvs.openbsd.org 2002/07/03 14:21:05 |
| 289 | [ssh-keysign.8 ssh-keysign.c ssh.c ssh_config] |
| 290 | re-enable ssh-keysign's sbit, but make ssh-keysign read |
| 291 | /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled |
| 292 | globally. based on discussions with deraadt, itojun and sommerfeld; |
| 293 | ok itojun@ |
Ben Lindstrom | e06eb68 | 2002-07-04 00:27:21 +0000 | [diff] [blame] | 294 | - (bal) Failed password attempts don't increment counter on AIX. Bug #145 |
Ben Lindstrom | ee3a8e4 | 2002-07-04 03:07:15 +0000 | [diff] [blame] | 295 | - (bal) Missed Makefile.in change. keysign needs readconf.o |
Ben Lindstrom | 51b2488 | 2002-07-04 03:08:40 +0000 | [diff] [blame] | 296 | - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess. |
Ben Lindstrom | e06eb68 | 2002-07-04 00:27:21 +0000 | [diff] [blame] | 297 | |
Damien Miller | 23fe57c | 2002-07-02 17:08:23 +1000 | [diff] [blame] | 298 | 20020702 |
| 299 | - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc & |
| 300 | friends consistently. Spotted by Solar Designer <solar@openwall.com> |
| 301 | |
Ben Lindstrom | de07cbf | 2002-06-28 16:48:11 +0000 | [diff] [blame] | 302 | 20020629 |
| 303 | - (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style |
| 304 | clean up while I'm near it. |
| 305 | |
Kevin Steves | bdf3e89 | 2002-06-27 16:59:50 +0000 | [diff] [blame] | 306 | 20020628 |
| 307 | - (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented |
| 308 | options should contain default value. from solar. |
Ben Lindstrom | 5962735 | 2002-06-27 18:02:21 +0000 | [diff] [blame] | 309 | - (bal) Cygwin uid0 fix by vinschen@redhat.com |
Ben Lindstrom | dd21fe9 | 2002-06-27 18:23:20 +0000 | [diff] [blame] | 310 | - (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise |
| 311 | have issues of our fixes not propogating right (ie bcopy instead of |
| 312 | memmove). OK tim |
Ben Lindstrom | 68e8311 | 2002-06-28 00:37:33 +0000 | [diff] [blame] | 313 | - (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported. |
| 314 | Bug #303 |
Kevin Steves | bdf3e89 | 2002-06-27 16:59:50 +0000 | [diff] [blame] | 315 | |
Kevin Steves | 3a88191 | 2002-07-20 19:05:40 +0000 | [diff] [blame] | 316 | 20020627 |
Ben Lindstrom | d550218 | 2002-06-27 00:12:57 +0000 | [diff] [blame] | 317 | - OpenBSD CVS Sync |
| 318 | - deraadt@cvs.openbsd.org 2002/06/26 14:49:36 |
| 319 | [monitor.c] |
| 320 | correct %u |
Ben Lindstrom | d5bf46e | 2002-06-27 00:21:03 +0000 | [diff] [blame] | 321 | - deraadt@cvs.openbsd.org 2002/06/26 14:50:04 |
| 322 | [monitor_fdpass.c] |
| 323 | use ssize_t for recvmsg() and sendmsg() return |
Ben Lindstrom | 3390749 | 2002-06-27 00:21:59 +0000 | [diff] [blame] | 324 | - markus@cvs.openbsd.org 2002/06/26 14:51:33 |
| 325 | [ssh-add.c] |
| 326 | fix exit code for -X/-x |
Ben Lindstrom | 0851249 | 2002-06-27 00:23:02 +0000 | [diff] [blame] | 327 | - deraadt@cvs.openbsd.org 2002/06/26 15:00:32 |
| 328 | [monitor_wrap.c] |
| 329 | more %u |
Ben Lindstrom | fe27598 | 2002-06-27 00:25:07 +0000 | [diff] [blame] | 330 | - markus@cvs.openbsd.org 2002/06/26 22:27:32 |
| 331 | [ssh-keysign.c] |
| 332 | bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu |
Ben Lindstrom | d550218 | 2002-06-27 00:12:57 +0000 | [diff] [blame] | 333 | |
Kevin Steves | cfae58c | 2002-06-25 22:43:19 +0000 | [diff] [blame] | 334 | 20020626 |
| 335 | - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM |
Ben Lindstrom | daa2179 | 2002-06-25 23:15:30 +0000 | [diff] [blame] | 336 | - (bal) OpenBSD CVS Sync |
| 337 | - markus@cvs.openbsd.org 2002/06/23 21:34:07 |
| 338 | [channels.c] |
| 339 | tcode is u_int |
Ben Lindstrom | b48057b | 2002-06-25 23:16:31 +0000 | [diff] [blame] | 340 | - markus@cvs.openbsd.org 2002/06/24 13:12:23 |
| 341 | [ssh-agent.1] |
| 342 | the socket name contains ssh-agent's ppid; via mpech@ from form@ |
Ben Lindstrom | 4fed2be | 2002-06-25 23:17:36 +0000 | [diff] [blame] | 343 | - markus@cvs.openbsd.org 2002/06/24 14:33:27 |
| 344 | [channels.c channels.h clientloop.c serverloop.c] |
| 345 | move channel counter to u_int |
Ben Lindstrom | c5a7f4f | 2002-06-25 23:19:13 +0000 | [diff] [blame] | 346 | - markus@cvs.openbsd.org 2002/06/24 14:55:38 |
| 347 | [authfile.c kex.c ssh-agent.c] |
| 348 | cat to (void) when output from buffer_get_X is ignored |
Ben Lindstrom | 9b41397 | 2002-06-25 23:20:18 +0000 | [diff] [blame] | 349 | - itojun@cvs.openbsd.org 2002/06/24 15:49:22 |
| 350 | [msg.c] |
| 351 | printf type pedant |
Ben Lindstrom | c2df3ec | 2002-06-25 23:21:41 +0000 | [diff] [blame] | 352 | - deraadt@cvs.openbsd.org 2002/06/24 17:57:20 |
| 353 | [sftp-server.c sshpty.c] |
| 354 | explicit (u_int) for uid and gid |
Ben Lindstrom | 6398a0e | 2002-06-25 23:22:54 +0000 | [diff] [blame] | 355 | - markus@cvs.openbsd.org 2002/06/25 16:22:42 |
| 356 | [authfd.c] |
| 357 | unnecessary cast |
Ben Lindstrom | fbcc3f7 | 2002-06-25 23:24:18 +0000 | [diff] [blame] | 358 | - markus@cvs.openbsd.org 2002/06/25 18:51:04 |
| 359 | [sshd.c] |
| 360 | lightweight do_setusercontext after chroot() |
Ben Lindstrom | 5223727 | 2002-06-25 23:38:47 +0000 | [diff] [blame] | 361 | - (bal) Updated AIX package build. Patch by dtucker@zip.com.au |
Tim Rice | 2b3897c | 2002-06-25 16:45:42 -0700 | [diff] [blame] | 362 | - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8 |
Ben Lindstrom | a95fd3f | 2002-06-26 00:22:57 +0000 | [diff] [blame] | 363 | - (bal) added back in error check for mmap(). I screwed up, Pointed |
| 364 | out by stevesk@ |
Tim Rice | e04ee92 | 2002-06-25 17:25:47 -0700 | [diff] [blame] | 365 | - (tim) [README.privsep] UnixWare tip no longer needed. |
Ben Lindstrom | 4e3c631 | 2002-06-26 00:29:02 +0000 | [diff] [blame] | 366 | - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP, |
| 367 | but it all damned lies. |
Kevin Steves | 40b011c | 2002-06-26 00:43:57 +0000 | [diff] [blame] | 368 | - (stevesk) [README.privsep] more for sshd pseudo-account. |
Tim Rice | 6de3dfd | 2002-06-25 19:28:55 -0700 | [diff] [blame] | 369 | - (tim) [contrib/caldera/openssh.spec] add support for privsep |
Damien Miller | f18cd16 | 2002-06-26 19:12:59 +1000 | [diff] [blame] | 370 | - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@ |
Damien Miller | aa15137 | 2002-06-26 19:14:08 +1000 | [diff] [blame] | 371 | - (djm) OpenBSD CVS Sync |
| 372 | - markus@cvs.openbsd.org 2002/06/26 08:53:12 |
| 373 | [bufaux.c] |
| 374 | limit size of BNs to 8KB; ok provos/deraadt |
Damien Miller | 468cd71 | 2002-06-26 19:14:25 +1000 | [diff] [blame] | 375 | - markus@cvs.openbsd.org 2002/06/26 08:54:18 |
| 376 | [buffer.c] |
| 377 | limit append to 1MB and buffers to 10MB |
Damien Miller | 9403aa2 | 2002-06-26 19:14:43 +1000 | [diff] [blame] | 378 | - markus@cvs.openbsd.org 2002/06/26 08:55:02 |
| 379 | [channels.c] |
| 380 | limit # of channels to 10000 |
Damien Miller | a0796ca | 2002-06-26 19:15:07 +1000 | [diff] [blame] | 381 | - markus@cvs.openbsd.org 2002/06/26 08:58:26 |
| 382 | [session.c] |
| 383 | limit # of env vars to 1000; ok deraadt/djm |
Damien Miller | 530a754 | 2002-06-26 23:27:11 +1000 | [diff] [blame] | 384 | - deraadt@cvs.openbsd.org 2002/06/26 13:20:57 |
| 385 | [monitor.c] |
| 386 | be careful in mm_zalloc |
Damien Miller | 990070a | 2002-06-26 23:51:06 +1000 | [diff] [blame] | 387 | - deraadt@cvs.openbsd.org 2002/06/26 13:49:26 |
| 388 | [session.c] |
| 389 | disclose less information from environment files; based on input |
| 390 | from djm, and dschultz@uclink.Berkeley.EDU |
Damien Miller | fb7fd95 | 2002-06-26 23:58:39 +1000 | [diff] [blame] | 391 | - markus@cvs.openbsd.org 2002/06/26 13:55:37 |
| 392 | [auth2-chall.c] |
| 393 | make sure # of response matches # of queries, fixes int overflow; |
| 394 | from ISS |
Damien Miller | 3e36f9f | 2002-06-26 23:59:10 +1000 | [diff] [blame] | 395 | - markus@cvs.openbsd.org 2002/06/26 13:56:27 |
| 396 | [version.h] |
| 397 | 3.4 |
Damien Miller | f49035a | 2002-06-26 19:42:52 +1000 | [diff] [blame] | 398 | - (djm) Require krb5 devel for RPM build w/ KrbV |
Damien Miller | 136d441 | 2002-06-26 23:05:16 +1000 | [diff] [blame] | 399 | - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai |
| 400 | <nalin@redhat.com> |
Damien Miller | d4b11d6 | 2002-06-26 23:57:12 +1000 | [diff] [blame] | 401 | - (djm) Update spec files for release |
Damien Miller | 7868202 | 2002-06-26 23:57:59 +1000 | [diff] [blame] | 402 | - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS |
Damien Miller | 3e36f9f | 2002-06-26 23:59:10 +1000 | [diff] [blame] | 403 | - (djm) Release 3.4p1 |
Tim Rice | a8959ae | 2002-06-26 11:05:32 -0700 | [diff] [blame] | 404 | - (tim) [contrib/caldera/openssh.spec] remove 2 configure options I put in |
| 405 | by mistake |
Kevin Steves | cfae58c | 2002-06-25 22:43:19 +0000 | [diff] [blame] | 406 | |
Kevin Steves | 34f0d8f | 2002-06-24 16:26:49 +0000 | [diff] [blame] | 407 | 20020625 |
| 408 | - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh |
Kevin Steves | d486636 | 2002-06-24 16:49:22 +0000 | [diff] [blame] | 409 | - (stevesk) [README.privsep] minor updates |
Damien Miller | d3f6ad2 | 2002-06-25 10:24:47 +1000 | [diff] [blame] | 410 | - (djm) Create privsep directory and warn if privsep user is missing |
| 411 | during make install |
Ben Lindstrom | aa83b98 | 2002-06-25 02:28:22 +0000 | [diff] [blame] | 412 | - (bal) Started list of PrivSep issues in TODO |
Ben Lindstrom | 6b0c96a | 2002-06-25 03:22:03 +0000 | [diff] [blame] | 413 | - (bal) if mmap() is substandard, don't allow compression on server side. |
| 414 | Post 'event' we will add more options. |
Tim Rice | 78688d7 | 2002-06-25 10:07:25 -0700 | [diff] [blame] | 415 | - (tim) [contrib/caldera/openssh.spec] Sync with Caldera |
Ben Lindstrom | b129be6 | 2002-06-25 17:12:26 +0000 | [diff] [blame] | 416 | - (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by |
| 417 | dtucker@zip.com.au |
Tim Rice | 8eff319 | 2002-06-25 15:35:15 -0700 | [diff] [blame] | 418 | - (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus |
| 419 | for Cygwin, Cray, & SCO |
Kevin Steves | 34f0d8f | 2002-06-24 16:26:49 +0000 | [diff] [blame] | 420 | |
Ben Lindstrom | 2953d0f | 2002-06-23 21:20:34 +0000 | [diff] [blame] | 421 | 20020624 |
| 422 | - OpenBSD CVS Sync |
| 423 | - deraadt@cvs.openbsd.org 2002/06/23 03:25:50 |
| 424 | [tildexpand.c] |
| 425 | KNF |
Ben Lindstrom | 836f0e9 | 2002-06-23 21:21:30 +0000 | [diff] [blame] | 426 | - deraadt@cvs.openbsd.org 2002/06/23 03:26:19 |
| 427 | [cipher.c key.c] |
| 428 | KNF |
Ben Lindstrom | 5c38552 | 2002-06-23 21:23:20 +0000 | [diff] [blame] | 429 | - deraadt@cvs.openbsd.org 2002/06/23 03:30:58 |
| 430 | [scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c |
| 431 | sshpty.c] |
| 432 | various KNF and %d for unsigned |
Ben Lindstrom | b1f483f | 2002-06-23 21:27:18 +0000 | [diff] [blame] | 433 | - deraadt@cvs.openbsd.org 2002/06/23 09:30:14 |
| 434 | [sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c |
| 435 | sftp.c] |
| 436 | bunch of u_int vs int stuff |
Ben Lindstrom | 58d3b72 | 2002-06-23 21:28:13 +0000 | [diff] [blame] | 437 | - deraadt@cvs.openbsd.org 2002/06/23 09:39:55 |
| 438 | [ssh-keygen.c] |
| 439 | u_int stuff |
Ben Lindstrom | e135363 | 2002-06-23 21:29:23 +0000 | [diff] [blame] | 440 | - deraadt@cvs.openbsd.org 2002/06/23 09:46:51 |
| 441 | [bufaux.c servconf.c] |
| 442 | minor KNF. things the fingers do while you read |
Ben Lindstrom | 822b634 | 2002-06-23 21:38:49 +0000 | [diff] [blame] | 443 | - deraadt@cvs.openbsd.org 2002/06/23 10:29:52 |
| 444 | [ssh-agent.c sshd.c] |
| 445 | some minor KNF and %u |
Ben Lindstrom | e23f4a3 | 2002-06-23 21:40:16 +0000 | [diff] [blame] | 446 | - deraadt@cvs.openbsd.org 2002/06/23 20:39:45 |
| 447 | [session.c] |
| 448 | compression_level is u_int |
Ben Lindstrom | 8ada5d0 | 2002-06-23 21:42:50 +0000 | [diff] [blame] | 449 | - deraadt@cvs.openbsd.org 2002/06/23 21:06:13 |
| 450 | [sshpty.c] |
| 451 | KNF |
Ben Lindstrom | a9d2c89 | 2002-06-23 21:48:28 +0000 | [diff] [blame] | 452 | - deraadt@cvs.openbsd.org 2002/06/23 21:06:41 |
| 453 | [channels.c channels.h session.c session.h] |
| 454 | display, screen, row, col, xpixel, ypixel are u_int; markus ok |
Ben Lindstrom | 3f58474 | 2002-06-23 21:49:25 +0000 | [diff] [blame] | 455 | - deraadt@cvs.openbsd.org 2002/06/23 21:10:02 |
| 456 | [packet.c] |
| 457 | packet_get_int() returns unsigned for reason & seqnr |
Ben Lindstrom | a9d2c89 | 2002-06-23 21:48:28 +0000 | [diff] [blame] | 458 | - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col, |
| 459 | xpixel are u_int. |
| 460 | |
Ben Lindstrom | 2953d0f | 2002-06-23 21:20:34 +0000 | [diff] [blame] | 461 | |
Kevin Steves | 90d5de7 | 2002-06-22 18:51:48 +0000 | [diff] [blame] | 462 | 20020623 |
| 463 | - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX. |
Ben Lindstrom | 1a1b851 | 2002-06-23 00:18:15 +0000 | [diff] [blame] | 464 | - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset. |
Ben Lindstrom | 883844d | 2002-06-23 00:20:50 +0000 | [diff] [blame] | 465 | - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au |
Ben Lindstrom | 5590aa5 | 2002-06-23 00:30:30 +0000 | [diff] [blame] | 466 | - OpenBSD CVS Sync |
| 467 | - stevesk@cvs.openbsd.org 2002/06/22 02:00:29 |
| 468 | [ssh.h] |
| 469 | correct comment |
Ben Lindstrom | bf69e3b | 2002-06-23 00:31:24 +0000 | [diff] [blame] | 470 | - stevesk@cvs.openbsd.org 2002/06/22 02:40:23 |
| 471 | [ssh.1] |
| 472 | section 5 not 4 for ssh_config |
Ben Lindstrom | c001cd3 | 2002-06-23 00:32:11 +0000 | [diff] [blame] | 473 | - naddy@cvs.openbsd.org 2002/06/22 11:51:39 |
| 474 | [ssh.1] |
| 475 | typo |
Ben Lindstrom | 624e3f2 | 2002-06-23 00:32:57 +0000 | [diff] [blame] | 476 | - stevesk@cvs.openbsd.org 2002/06/22 16:32:54 |
| 477 | [sshd.8] |
| 478 | add /var/empty in FILES section |
Ben Lindstrom | 2dfacb3 | 2002-06-23 00:33:47 +0000 | [diff] [blame] | 479 | - stevesk@cvs.openbsd.org 2002/06/22 16:40:19 |
| 480 | [sshd.c] |
| 481 | check /var/empty owner mode; ok provos@ |
Ben Lindstrom | c06bf70 | 2002-06-23 00:34:37 +0000 | [diff] [blame] | 482 | - stevesk@cvs.openbsd.org 2002/06/22 16:41:57 |
| 483 | [scp.1] |
| 484 | typo |
Ben Lindstrom | 959de99 | 2002-06-23 00:35:25 +0000 | [diff] [blame] | 485 | - stevesk@cvs.openbsd.org 2002/06/22 16:45:29 |
| 486 | [ssh-agent.1 sshd.8 sshd_config.5] |
| 487 | use process ID vs. pid/PID/process identifier |
Ben Lindstrom | 57f0800 | 2002-06-23 00:37:10 +0000 | [diff] [blame] | 488 | - stevesk@cvs.openbsd.org 2002/06/22 20:05:27 |
| 489 | [sshd.c] |
| 490 | don't call setsid() if debugging or run from inetd; no "Operation not |
| 491 | permitted" errors now; ok millert@ markus@ |
Ben Lindstrom | e1c0912 | 2002-06-23 00:38:24 +0000 | [diff] [blame] | 492 | - stevesk@cvs.openbsd.org 2002/06/22 23:09:51 |
| 493 | [monitor.c] |
| 494 | save auth method before monitor_reset_key_state(); bugzilla bug #284; |
| 495 | ok provos@ |
Kevin Steves | 90d5de7 | 2002-06-22 18:51:48 +0000 | [diff] [blame] | 496 | |
Damien Miller | 263d68f | 2002-06-22 00:45:50 +1000 | [diff] [blame] | 497 | 20020622 |
| 498 | - (djm) Update README.privsep; spotted by fries@ |
Damien Miller | f102bf6 | 2002-06-22 01:44:45 +1000 | [diff] [blame] | 499 | - (djm) Release 3.3p1 |
Ben Lindstrom | ee9ac35 | 2002-06-22 00:26:59 +0000 | [diff] [blame] | 500 | - (bal) getopt now can be staticly compiled on those platforms missing |
| 501 | optreset. Patch by binder@arago.de |
Damien Miller | 263d68f | 2002-06-22 00:45:50 +1000 | [diff] [blame] | 502 | |
Damien Miller | 2d6b833 | 2002-06-21 15:59:49 +1000 | [diff] [blame] | 503 | 20020621 |
| 504 | - (djm) Sync: |
| 505 | - djm@cvs.openbsd.org 2002/06/21 05:50:51 |
| 506 | [monitor.c] |
| 507 | Don't initialise compression buffers when compression=no in sshd_config; |
| 508 | ok Niels@ |
Damien Miller | 444f9fc | 2002-06-21 16:05:12 +1000 | [diff] [blame] | 509 | - ID sync for auth-passwd.c |
Damien Miller | 4903eb4 | 2002-06-21 16:20:44 +1000 | [diff] [blame] | 510 | - (djm) Warn and disable compression on platforms which can't handle both |
| 511 | useprivilegeseparation=yes and compression=yes |
Damien Miller | 53baddb | 2002-06-21 16:42:41 +1000 | [diff] [blame] | 512 | - (djm) contrib/redhat/openssh.spec hacking: |
| 513 | - Merge in spec changes from seba@iq.pl (Sebastian Pachuta) |
| 514 | - Add new {ssh,sshd}_config.5 manpages |
| 515 | - Add new ssh-keysign program and remove setuid from ssh client |
Damien Miller | 2d6b833 | 2002-06-21 15:59:49 +1000 | [diff] [blame] | 516 | |
Ben Lindstrom | 3c73dfe | 2002-06-20 23:53:53 +0000 | [diff] [blame] | 517 | 20020620 |
Ben Lindstrom | f0bfa83 | 2002-06-21 00:01:18 +0000 | [diff] [blame] | 518 | - (bal) Fixed AIX environment handling, use setpcred() instead of existing |
| 519 | code. (Bugzilla Bug 261) |
Ben Lindstrom | 3c73dfe | 2002-06-20 23:53:53 +0000 | [diff] [blame] | 520 | - (bal) OpenBSD CVS Sync |
| 521 | - todd@cvs.openbsd.org 2002/06/14 21:35:00 |
| 522 | [monitor_wrap.c] |
| 523 | spelling; from Brian Poole <raj@cerias.purdue.edu> |
Ben Lindstrom | 4eb4c4e | 2002-06-21 00:04:48 +0000 | [diff] [blame] | 524 | - markus@cvs.openbsd.org 2002/06/15 00:01:36 |
| 525 | [authfd.c authfd.h ssh-add.c ssh-agent.c] |
| 526 | break agent key lifetime protocol and allow other contraints for key |
| 527 | usage. |
Ben Lindstrom | c90f8a9 | 2002-06-21 00:06:54 +0000 | [diff] [blame] | 528 | - markus@cvs.openbsd.org 2002/06/15 00:07:38 |
| 529 | [authfd.c authfd.h ssh-add.c ssh-agent.c] |
| 530 | fix stupid typo |
Ben Lindstrom | 45933dd | 2002-06-21 00:10:58 +0000 | [diff] [blame] | 531 | - markus@cvs.openbsd.org 2002/06/15 01:27:48 |
Ben Lindstrom | 2b266b7 | 2002-06-21 00:08:39 +0000 | [diff] [blame] | 532 | [authfd.c authfd.h ssh-add.c ssh-agent.c] |
| 533 | remove the CONSTRAIN_IDENTITY messages and introduce a new |
| 534 | ADD_ID message with contraints instead. contraints can be |
| 535 | only added together with the private key. |
Ben Lindstrom | 61c183b | 2002-06-21 00:09:54 +0000 | [diff] [blame] | 536 | - itojun@cvs.openbsd.org 2002/06/16 21:30:58 |
| 537 | [ssh-keyscan.c] |
| 538 | use TAILQ_xx macro. from lukem@netbsd. markus ok |
Ben Lindstrom | 45933dd | 2002-06-21 00:10:58 +0000 | [diff] [blame] | 539 | - deraadt@cvs.openbsd.org 2002/06/17 06:05:56 |
| 540 | [scp.c] |
| 541 | make usage like man page |
Ben Lindstrom | cb72e4f | 2002-06-21 00:41:51 +0000 | [diff] [blame] | 542 | - deraadt@cvs.openbsd.org 2002/06/19 00:27:55 |
| 543 | [auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c |
| 544 | authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1 |
| 545 | ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c |
| 546 | ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c |
| 547 | xmalloc.h] |
| 548 | KNF done automatically while reading.... |
Ben Lindstrom | 402c6cc | 2002-06-21 00:43:42 +0000 | [diff] [blame] | 549 | - markus@cvs.openbsd.org 2002/06/19 18:01:00 |
| 550 | [cipher.c monitor.c monitor_wrap.c packet.c packet.h] |
| 551 | make the monitor sync the transfer ssh1 session key; |
| 552 | transfer keycontext only for RC4 (this is still depends on EVP |
| 553 | implementation details and is broken). |
Ben Lindstrom | 9f04903 | 2002-06-21 00:59:05 +0000 | [diff] [blame] | 554 | - stevesk@cvs.openbsd.org 2002/06/20 19:56:07 |
| 555 | [ssh.1 sshd.8] |
| 556 | move configuration file options from ssh.1/sshd.8 to |
| 557 | ssh_config.5/sshd_config.5; ok deraadt@ millert@ |
Ben Lindstrom | ba8e0dd | 2002-06-21 01:00:40 +0000 | [diff] [blame] | 558 | - stevesk@cvs.openbsd.org 2002/06/20 20:00:05 |
| 559 | [scp.1 sftp.1] |
| 560 | ssh_config(5) |
Ben Lindstrom | 9721e92 | 2002-06-21 01:06:03 +0000 | [diff] [blame] | 561 | - stevesk@cvs.openbsd.org 2002/06/20 20:03:34 |
| 562 | [ssh_config sshd_config] |
| 563 | refer to config file man page |
Ben Lindstrom | 23e0f66 | 2002-06-21 01:09:47 +0000 | [diff] [blame] | 564 | - markus@cvs.openbsd.org 2002/06/20 23:05:56 |
| 565 | [servconf.c servconf.h session.c sshd.c] |
| 566 | allow Compression=yes/no in sshd_config |
Ben Lindstrom | 1b8d730 | 2002-06-21 01:11:36 +0000 | [diff] [blame] | 567 | - markus@cvs.openbsd.org 2002/06/20 23:37:12 |
| 568 | [sshd_config] |
| 569 | add Compression |
Ben Lindstrom | 47e1b40 | 2002-06-21 01:19:12 +0000 | [diff] [blame] | 570 | - stevesk@cvs.openbsd.org 2002/05/25 20:40:08 |
| 571 | [LICENCE] |
| 572 | missed Per Allansson (auth2-chall.c) |
Ben Lindstrom | 115422f | 2002-06-21 00:26:22 +0000 | [diff] [blame] | 573 | - (bal) Cygwin special handling of empty passwords wrong. Patch by |
| 574 | vinschen@redhat.com |
Ben Lindstrom | 900464e | 2002-06-21 01:24:01 +0000 | [diff] [blame] | 575 | - (bal) Missed integrating ssh_config.5 and sshd_config.5 |
Ben Lindstrom | 90ac0b5 | 2002-06-21 01:38:53 +0000 | [diff] [blame] | 576 | - (bal) Still more Makefile.in updates for ssh{d}_config.5 |
Ben Lindstrom | 3c73dfe | 2002-06-20 23:53:53 +0000 | [diff] [blame] | 577 | |
Ben Lindstrom | 0e23ebc | 2002-06-13 21:34:57 +0000 | [diff] [blame] | 578 | 20020613 |
| 579 | - (bal) typo of setgroup for cygwin. Patch by vinschen@redhat.com |
| 580 | |
Ben Lindstrom | 2415757 | 2002-06-12 16:09:39 +0000 | [diff] [blame] | 581 | 20020612 |
| 582 | - (bal) OpenBSD CVS Sync |
| 583 | - markus@cvs.openbsd.org 2002/06/11 23:03:54 |
| 584 | [ssh.c] |
| 585 | remove unused cruft. |
Ben Lindstrom | da394ca | 2002-06-12 16:11:12 +0000 | [diff] [blame] | 586 | - markus@cvs.openbsd.org 2002/06/12 01:09:52 |
| 587 | [ssh.c] |
| 588 | ssh_connect returns 0 on success |
Ben Lindstrom | 837461b | 2002-06-12 16:57:14 +0000 | [diff] [blame] | 589 | - (bal) Build noop setgroups() for cygwin to clean up code (For other |
| 590 | platforms without the setgroups() requirement, you MUST define |
| 591 | SETGROUPS_NOOP in the configure.ac) Based on patch by vinschen@redhat.com |
Ben Lindstrom | b7ae94d | 2002-06-12 17:32:30 +0000 | [diff] [blame] | 592 | - (bal) Some platforms don't have ONLCR (Notable Mint) |
Ben Lindstrom | 2415757 | 2002-06-12 16:09:39 +0000 | [diff] [blame] | 593 | |
Ben Lindstrom | 494709d | 2002-06-11 15:42:53 +0000 | [diff] [blame] | 594 | 20020611 |
| 595 | - (bal) ssh-agent.c RCSD fix (|unexpand already done) |
Ben Lindstrom | 5cac423 | 2002-06-11 15:45:02 +0000 | [diff] [blame] | 596 | - (bal) OpenBSD CVS Sync |
| 597 | - stevesk@cvs.openbsd.org 2002/06/09 22:15:15 |
| 598 | [ssh.1] |
| 599 | update for no setuid root and ssh-keysign; ok deraadt@ |
Ben Lindstrom | 18a32a7 | 2002-06-11 15:46:34 +0000 | [diff] [blame] | 600 | - itojun@cvs.openbsd.org 2002/06/09 22:17:21 |
| 601 | [sshconnect.c] |
| 602 | pass salen to sockaddr_ntop so that we are happy on linux/solaris |
Ben Lindstrom | 2779d28 | 2002-06-11 15:47:42 +0000 | [diff] [blame] | 603 | - stevesk@cvs.openbsd.org 2002/06/10 16:53:06 |
| 604 | [auth-rsa.c ssh-rsa.c] |
| 605 | display minimum RSA modulus in error(); ok markus@ |
Ben Lindstrom | 11d470d | 2002-06-11 15:50:13 +0000 | [diff] [blame] | 606 | - stevesk@cvs.openbsd.org 2002/06/10 16:56:30 |
| 607 | [ssh-keysign.8] |
| 608 | merge in stuff from my man page; ok markus@ |
Ben Lindstrom | 1775c9c | 2002-06-11 15:51:54 +0000 | [diff] [blame] | 609 | - stevesk@cvs.openbsd.org 2002/06/10 17:36:23 |
| 610 | [ssh-add.1 ssh-add.c] |
| 611 | use convtime() to parse and validate key lifetime. can now |
| 612 | use '-t 2h' etc. ok markus@ provos@ |
Ben Lindstrom | 2bf8276 | 2002-06-11 15:53:05 +0000 | [diff] [blame] | 613 | - stevesk@cvs.openbsd.org 2002/06/10 17:45:20 |
| 614 | [readconf.c ssh.1] |
| 615 | change RhostsRSAAuthentication and RhostsAuthentication default to no |
| 616 | since ssh is no longer setuid root by default; ok markus@ |
Ben Lindstrom | 914d037 | 2002-06-11 15:55:01 +0000 | [diff] [blame] | 617 | - stevesk@cvs.openbsd.org 2002/06/10 21:21:10 |
| 618 | [ssh_config] |
| 619 | update defaults for RhostsRSAAuthentication and RhostsAuthentication |
| 620 | here too (all options commented out with default value). |
Ben Lindstrom | 8bb6f36 | 2002-06-11 15:59:02 +0000 | [diff] [blame] | 621 | - markus@cvs.openbsd.org 2002/06/10 22:28:41 |
| 622 | [channels.c channels.h session.c] |
| 623 | move creation of agent socket to session.c; no need for uidswapping |
| 624 | in channel.c. |
Ben Lindstrom | f9c4884 | 2002-06-11 16:37:51 +0000 | [diff] [blame] | 625 | - markus@cvs.openbsd.org 2002/06/11 04:14:26 |
| 626 | [ssh.c sshconnect.c sshconnect.h] |
| 627 | no longer use uidswap.[ch] from the ssh client |
| 628 | run less code with euid==0 if ssh is installed setuid root |
| 629 | just switch the euid, don't switch the complete set of groups |
| 630 | (this is only needed by sshd). ok provos@ |
Ben Lindstrom | ce0f634 | 2002-06-11 16:42:49 +0000 | [diff] [blame] | 631 | - mpech@cvs.openbsd.org 2002/06/11 05:46:20 |
| 632 | [auth-krb4.c monitor.h serverloop.c session.c ssh-agent.c sshd.c] |
| 633 | pid_t cleanup. Markus need this now to keep hacking. |
| 634 | markus@, millert@ ok |
Ben Lindstrom | 9a17c9a | 2002-06-11 16:47:22 +0000 | [diff] [blame] | 635 | - itojun@cvs.openbsd.org 2002/06/11 08:11:45 |
| 636 | [canohost.c] |
| 637 | use "ntop" only after initialized |
Ben Lindstrom | 1aa6427 | 2002-06-11 20:28:05 +0000 | [diff] [blame] | 638 | - (bal) Cygwin fix up from swap uid clean up in ssh.c patch by |
| 639 | vinschen@redhat.com |
Ben Lindstrom | 494709d | 2002-06-11 15:42:53 +0000 | [diff] [blame] | 640 | |
Ben Lindstrom | ece4204 | 2002-06-09 20:00:09 +0000 | [diff] [blame] | 641 | 20020609 |
| 642 | - (bal) OpenBSD CVS Sync |
| 643 | - markus@cvs.openbsd.org 2002/06/08 05:07:56 |
| 644 | [ssh.c] |
| 645 | nuke ptrace comment |
Ben Lindstrom | a207157 | 2002-06-09 20:01:48 +0000 | [diff] [blame] | 646 | - markus@cvs.openbsd.org 2002/06/08 05:07:09 |
| 647 | [ssh-keysign.c] |
| 648 | only accept 20 byte session ids |
Ben Lindstrom | 4daea86 | 2002-06-09 20:04:02 +0000 | [diff] [blame] | 649 | - markus@cvs.openbsd.org 2002/06/08 05:17:01 |
| 650 | [readconf.c readconf.h ssh.1 ssh.c] |
| 651 | deprecate FallBackToRsh and UseRsh; patch from djm@ |
Ben Lindstrom | 1c2bafe | 2002-06-09 20:04:50 +0000 | [diff] [blame] | 652 | - markus@cvs.openbsd.org 2002/06/08 05:40:01 |
| 653 | [readconf.c] |
| 654 | just warn about Deprecated options for now |
Ben Lindstrom | 7a7483d | 2002-06-09 20:05:35 +0000 | [diff] [blame] | 655 | - markus@cvs.openbsd.org 2002/06/08 05:41:18 |
| 656 | [ssh_config] |
| 657 | remove FallBackToRsh/UseRsh |
Ben Lindstrom | af0c6d6 | 2002-06-09 20:06:29 +0000 | [diff] [blame] | 658 | - markus@cvs.openbsd.org 2002/06/08 12:36:53 |
| 659 | [scp.c] |
| 660 | remove FallBackToRsh |
Ben Lindstrom | 2e17b08 | 2002-06-09 20:13:27 +0000 | [diff] [blame] | 661 | - markus@cvs.openbsd.org 2002/06/08 12:46:14 |
| 662 | [readconf.c] |
| 663 | silently ignore deprecated options, since FallBackToRsh might be passed |
| 664 | by remote scp commands. |
Ben Lindstrom | 159ac2e | 2002-06-09 20:14:54 +0000 | [diff] [blame] | 665 | - itojun@cvs.openbsd.org 2002/06/08 21:15:27 |
| 666 | [sshconnect.c] |
| 667 | always use getnameinfo. (diag message only) |
Ben Lindstrom | 2749e1c | 2002-06-09 20:16:22 +0000 | [diff] [blame] | 668 | - markus@cvs.openbsd.org 2002/06/09 04:33:27 |
| 669 | [sshconnect.c] |
| 670 | abort() - > fatal() |
Ben Lindstrom | 05efee1 | 2002-06-09 20:20:58 +0000 | [diff] [blame] | 671 | - (bal) RCSID tag updates on channels.c, clientloop.c, nchan.c, |
| 672 | sftp-client.c, ssh-agenet.c, ssh-keygen.c and connect.h (we did unexpand |
| 673 | independant of them) |
Ben Lindstrom | ece4204 | 2002-06-09 20:00:09 +0000 | [diff] [blame] | 674 | |
Ben Lindstrom | 3545352 | 2002-06-07 14:37:00 +0000 | [diff] [blame] | 675 | 20020607 |
Ben Lindstrom | 2ab1968 | 2002-06-07 16:49:11 +0000 | [diff] [blame] | 676 | - (bal) Removed --{enable/disable}-suid-ssh |
Ben Lindstrom | 3545352 | 2002-06-07 14:37:00 +0000 | [diff] [blame] | 677 | - (bal) Missed __progname in ssh-keysign.c patch by dtucker@zip.com.au |
Ben Lindstrom | 378a417 | 2002-06-07 14:49:56 +0000 | [diff] [blame] | 678 | - (bal) use 'LOGIN_PROGRAM' not '/usr/bin/login' in session.c patch by |
| 679 | Bertrand.Velle@apogee-com.fr |
Ben Lindstrom | 3545352 | 2002-06-07 14:37:00 +0000 | [diff] [blame] | 680 | |
Ben Lindstrom | fb62a69 | 2002-06-06 19:47:11 +0000 | [diff] [blame] | 681 | 20020606 |
| 682 | - (bal) OpenBSD CVS Sync |
| 683 | - markus@cvs.openbsd.org 2002/05/15 21:56:38 |
| 684 | [servconf.c sshd.8 sshd_config] |
| 685 | re-enable privsep and disable setuid for post-3.2.2 |
Ben Lindstrom | 6a24641 | 2002-06-06 19:48:16 +0000 | [diff] [blame] | 686 | - markus@cvs.openbsd.org 2002/05/16 22:02:50 |
| 687 | [cipher.c kex.h mac.c] |
| 688 | fix warnings (openssl 0.9.7 requires const) |
Ben Lindstrom | fac7769 | 2002-06-06 19:49:54 +0000 | [diff] [blame] | 689 | - stevesk@cvs.openbsd.org 2002/05/16 22:09:59 |
| 690 | [session.c ssh.c] |
| 691 | don't limit xauth pathlen on client side and longer print length on |
| 692 | server when debug; ok markus@ |
Ben Lindstrom | 38ed63d | 2002-06-06 19:51:06 +0000 | [diff] [blame] | 693 | - deraadt@cvs.openbsd.org 2002/05/19 20:54:52 |
| 694 | [log.h] |
| 695 | extra commas in enum not 100% portable |
Ben Lindstrom | f666fec | 2002-06-06 19:51:58 +0000 | [diff] [blame] | 696 | - deraadt@cvs.openbsd.org 2002/05/22 23:18:25 |
| 697 | [ssh.c sshd.c] |
| 698 | spelling; abishoff@arc.nasa.gov |
Ben Lindstrom | 1bad256 | 2002-06-06 19:57:33 +0000 | [diff] [blame] | 699 | - markus@cvs.openbsd.org 2002/05/23 19:24:30 |
| 700 | [authfile.c authfile.h pathnames.h ssh.c sshconnect.c sshconnect.h |
| 701 | sshconnect1.c sshconnect2.c ssh-keysign.8 ssh-keysign.c Makefile.in] |
| 702 | add /usr/libexec/ssh-keysign: a setuid helper program for hostbased |
| 703 | authentication in protocol v2 (needs to access the hostkeys). |
Ben Lindstrom | 9e5bb57 | 2002-06-06 19:58:27 +0000 | [diff] [blame] | 704 | - markus@cvs.openbsd.org 2002/05/23 19:39:34 |
| 705 | [ssh.c] |
| 706 | add comment about ssh-keysign |
Ben Lindstrom | 5206b95 | 2002-06-06 19:59:29 +0000 | [diff] [blame] | 707 | - markus@cvs.openbsd.org 2002/05/24 08:45:14 |
| 708 | [sshconnect2.c] |
| 709 | stat ssh-keysign first, print error if stat fails; |
| 710 | some debug->error; fix comment |
Ben Lindstrom | 4887da2 | 2002-06-06 20:05:57 +0000 | [diff] [blame] | 711 | - markus@cvs.openbsd.org 2002/05/25 08:50:39 |
| 712 | [sshconnect2.c] |
| 713 | execlp->execl; from stevesk |
Ben Lindstrom | 855bf3a | 2002-06-06 20:27:55 +0000 | [diff] [blame] | 714 | - markus@cvs.openbsd.org 2002/05/25 18:51:07 |
| 715 | [auth.h auth2.c auth2-hostbased.c auth2-kbdint.c auth2-none.c |
| 716 | auth2-passwd.c auth2-pubkey.c Makefile.in] |
| 717 | split auth2.c into one file per method; ok provos@/deraadt@ |
Ben Lindstrom | 033a49c | 2002-06-06 20:30:28 +0000 | [diff] [blame] | 718 | - stevesk@cvs.openbsd.org 2002/05/26 20:35:10 |
| 719 | [ssh.1] |
| 720 | sort ChallengeResponseAuthentication; ok markus@ |
Ben Lindstrom | 105ccbe | 2002-06-06 20:33:06 +0000 | [diff] [blame] | 721 | - stevesk@cvs.openbsd.org 2002/05/28 16:45:27 |
| 722 | [monitor_mm.c] |
| 723 | print strerror(errno) on mmap/munmap error; ok markus@ |
Ben Lindstrom | abff1dd | 2002-06-06 20:38:49 +0000 | [diff] [blame] | 724 | - stevesk@cvs.openbsd.org 2002/05/28 17:28:02 |
| 725 | [uidswap.c] |
| 726 | format spec change/casts and some KNF; ok markus@ |
Ben Lindstrom | 10d9936 | 2002-06-06 20:44:06 +0000 | [diff] [blame] | 727 | - stevesk@cvs.openbsd.org 2002/05/28 21:24:00 |
| 728 | [uidswap.c] |
| 729 | use correct function name in fatal() |
Ben Lindstrom | 20abb75 | 2002-06-06 20:45:33 +0000 | [diff] [blame] | 730 | - stevesk@cvs.openbsd.org 2002/05/29 03:06:30 |
| 731 | [ssh.1 sshd.8] |
| 732 | spelling |
Ben Lindstrom | a26ea63 | 2002-06-06 20:46:25 +0000 | [diff] [blame] | 733 | - markus@cvs.openbsd.org 2002/05/29 11:21:57 |
| 734 | [sshd.c] |
| 735 | don't start if privsep is enabled and SSH_PRIVSEP_USER or |
| 736 | _PATH_PRIVSEP_CHROOT_DIR are missing; ok deraadt@ |
Ben Lindstrom | f088f43 | 2002-06-06 20:50:07 +0000 | [diff] [blame] | 737 | - markus@cvs.openbsd.org 2002/05/30 08:07:31 |
| 738 | [cipher.c] |
| 739 | use rijndael/aes from libcrypto (openssl >= 0.9.7) instead of |
| 740 | our own implementation. allow use of AES hardware via libcrypto, |
| 741 | ok deraadt@ |
Ben Lindstrom | cec2ea8 | 2002-06-06 20:51:04 +0000 | [diff] [blame] | 742 | - markus@cvs.openbsd.org 2002/05/31 10:30:33 |
| 743 | [sshconnect2.c] |
| 744 | extent ssh-keysign protocol: |
| 745 | pass # of socket-fd to ssh-keysign, keysign verfies locally used |
| 746 | ip-address using this socket-fd, restricts fake local hostnames |
| 747 | to actual local hostnames; ok stevesk@ |
Ben Lindstrom | 511bb24 | 2002-06-06 20:52:37 +0000 | [diff] [blame] | 748 | - markus@cvs.openbsd.org 2002/05/31 11:35:15 |
| 749 | [auth.h auth2.c] |
| 750 | move Authmethod definitons to per-method file. |
Ben Lindstrom | 01fff0c | 2002-06-06 20:54:07 +0000 | [diff] [blame] | 751 | - markus@cvs.openbsd.org 2002/05/31 13:16:48 |
| 752 | [key.c] |
| 753 | add comment: |
| 754 | key_verify returns 1 for a correct signature, 0 for an incorrect signature |
| 755 | and -1 on error. |
Ben Lindstrom | ceae9d1 | 2002-06-06 20:55:04 +0000 | [diff] [blame] | 756 | - markus@cvs.openbsd.org 2002/05/31 13:20:50 |
| 757 | [ssh-rsa.c] |
| 758 | pad received signature with leading zeros, because RSA_verify expects |
| 759 | a signature of RSA_size. the drafts says the signature is transmitted |
| 760 | unpadded (e.g. putty does not pad), reported by anakin@pobox.com |
Ben Lindstrom | 2e14bc7 | 2002-06-06 20:56:07 +0000 | [diff] [blame] | 761 | - deraadt@cvs.openbsd.org 2002/06/03 12:04:07 |
| 762 | [ssh.h] |
| 763 | compatiblity -> compatibility |
| 764 | decriptor -> descriptor |
| 765 | authentciated -> authenticated |
| 766 | transmition -> transmission |
Ben Lindstrom | dcf6bfb | 2002-06-06 20:57:17 +0000 | [diff] [blame] | 767 | - markus@cvs.openbsd.org 2002/06/04 19:42:35 |
| 768 | [monitor.c] |
| 769 | only allow enabled authentication methods; ok provos@ |
Ben Lindstrom | f67e077 | 2002-06-06 20:58:19 +0000 | [diff] [blame] | 770 | - markus@cvs.openbsd.org 2002/06/04 19:53:40 |
| 771 | [monitor.c] |
| 772 | save the session id (hash) for ssh2 (it will be passed with the |
| 773 | initial sign request) and verify that this value is used during |
| 774 | authentication; ok provos@ |
Ben Lindstrom | 3dca4f5 | 2002-06-06 20:59:25 +0000 | [diff] [blame] | 775 | - markus@cvs.openbsd.org 2002/06/04 23:02:06 |
| 776 | [packet.c] |
| 777 | remove __FUNCTION__ |
Ben Lindstrom | 7d9c38f | 2002-06-06 21:40:51 +0000 | [diff] [blame] | 778 | - markus@cvs.openbsd.org 2002/06/04 23:05:49 |
| 779 | [cipher.c monitor.c monitor_fdpass.c monitor_mm.c monitor_wrap.c] |
| 780 | __FUNCTION__ -> __func__ |
Ben Lindstrom | 22fa01c | 2002-06-06 21:46:07 +0000 | [diff] [blame] | 781 | - markus@cvs.openbsd.org 2002/06/05 16:08:07 |
| 782 | [ssh-agent.1 ssh-agent.c] |
| 783 | '-a bind_address' binds the agent to user-specified unix-domain |
| 784 | socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago). |
Ben Lindstrom | b7788f3 | 2002-06-06 21:46:08 +0000 | [diff] [blame] | 785 | - markus@cvs.openbsd.org 2002/06/05 16:08:07 |
| 786 | [ssh-agent.1 ssh-agent.c] |
| 787 | '-a bind_address' binds the agent to user-specified unix-domain |
| 788 | socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago). |
Ben Lindstrom | 21d1ed8 | 2002-06-06 21:48:57 +0000 | [diff] [blame] | 789 | - markus@cvs.openbsd.org 2002/06/05 16:48:54 |
| 790 | [ssh-agent.c] |
| 791 | copy current request into an extra buffer and just flush this |
| 792 | request on errors, ok provos@ |
Ben Lindstrom | 2f71704 | 2002-06-06 21:52:03 +0000 | [diff] [blame] | 793 | - markus@cvs.openbsd.org 2002/06/05 19:57:12 |
| 794 | [authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c] |
| 795 | ssh-add -x for lock and -X for unlocking the agent. |
| 796 | todo: encrypt private keys with locked... |
Ben Lindstrom | 163f3b8 | 2002-06-06 21:53:11 +0000 | [diff] [blame] | 797 | - markus@cvs.openbsd.org 2002/06/05 20:56:39 |
| 798 | [ssh-add.c] |
| 799 | add -x/-X to usage |
Ben Lindstrom | 61d328a | 2002-06-06 21:54:57 +0000 | [diff] [blame] | 800 | - markus@cvs.openbsd.org 2002/06/05 21:55:44 |
| 801 | [authfd.c authfd.h ssh-add.1 ssh-add.c ssh-agent.c] |
| 802 | ssh-add -t life, Set lifetime (in seconds) when adding identities; |
| 803 | ok provos@ |
Ben Lindstrom | d9d6ab6 | 2002-06-06 21:57:01 +0000 | [diff] [blame] | 804 | - stevesk@cvs.openbsd.org 2002/06/06 01:09:41 |
| 805 | [monitor.h] |
| 806 | no trailing comma in enum; china@thewrittenword.com |
Ben Lindstrom | 2c14047 | 2002-06-06 21:57:54 +0000 | [diff] [blame] | 807 | - markus@cvs.openbsd.org 2002/06/06 17:12:44 |
| 808 | [sftp-server.c] |
| 809 | discard remaining bytes of current request; ok provos@ |
Ben Lindstrom | 937df1d | 2002-06-06 21:58:35 +0000 | [diff] [blame] | 810 | - markus@cvs.openbsd.org 2002/06/06 17:30:11 |
| 811 | [sftp-server.c] |
| 812 | use get_int() macro (hide iqueue) |
Ben Lindstrom | a93f12f | 2002-06-07 01:51:06 +0000 | [diff] [blame] | 813 | - (bal) Missed msg.[ch] in merge. Required for ssh-keysign. |
Ben Lindstrom | 88d26ed | 2002-06-07 01:53:59 +0000 | [diff] [blame] | 814 | - (bal) Forgot to add msg.c Makefile.in. |
Ben Lindstrom | 4eeccc7 | 2002-06-07 01:57:25 +0000 | [diff] [blame] | 815 | - (bal) monitor_mm.c typos. |
Ben Lindstrom | b85ab30 | 2002-06-07 02:05:25 +0000 | [diff] [blame] | 816 | - (bal) Refixed auth2.c. It was never fully commited while spliting out |
Ben Lindstrom | 03bab28 | 2002-06-07 03:19:35 +0000 | [diff] [blame] | 817 | authentication to different files. |
Ben Lindstrom | db41d23 | 2002-06-07 03:11:38 +0000 | [diff] [blame] | 818 | - (bal) ssh-keysign should build and install correctly now. Phase two |
| 819 | would be to clean out any dead wood and disable ssh setuid on install. |
Ben Lindstrom | 03bab28 | 2002-06-07 03:19:35 +0000 | [diff] [blame] | 820 | - (bal) Reverse logic, use __func__ first since it's C99 |
Ben Lindstrom | ca8943e | 2002-06-06 20:42:04 +0000 | [diff] [blame] | 821 | |
Kevin Steves | df75dd2 | 2002-06-04 20:52:19 +0000 | [diff] [blame] | 822 | 20020604 |
| 823 | - (stevesk) [channels.c] bug #164 patch from YOSHIFUJI Hideaki (changed |
| 824 | setsockopt from debug to error for now). |
| 825 | |
Tim Rice | 28bbb0c | 2002-05-27 17:37:32 -0700 | [diff] [blame] | 826 | 20020527 |
| 827 | - (tim) [configure.ac.orig monitor_fdpass.c] Enahnce msghdr tests to address |
| 828 | build problem on Irix reported by Dave Love <d.love@dl.ac.uk>. Back out |
| 829 | last monitor_fdpass.c changes that are no longer needed with new tests. |
| 830 | Patch tested on Irix by Jan-Frode Myklebust <janfrode@parallab.uib.no> |
| 831 | |
Damien Miller | 74cc5bb | 2002-05-22 11:02:15 +1000 | [diff] [blame] | 832 | 20020522 |
| 833 | - (djm) Fix spelling mistakes, spotted by Solar Designer i |
| 834 | <solar@openwall.com> |
Damien Miller | 8ce8296 | 2002-05-22 14:24:01 +1000 | [diff] [blame] | 835 | - Sync scard/ (not sure when it drifted) |
Damien Miller | 667fb25 | 2002-05-22 14:14:00 +1000 | [diff] [blame] | 836 | - (djm) OpenBSD CVS Sync: |
| 837 | [auth.c] |
| 838 | Fix typo/thinko. Pass in as to auth_approval(), not NULL. |
| 839 | Closes PR 2659. |
| 840 | - Crank version |
Damien Miller | 23dc10d | 2002-05-22 14:14:54 +1000 | [diff] [blame] | 841 | - Crank RPM spec versions |
Damien Miller | 74cc5bb | 2002-05-22 11:02:15 +1000 | [diff] [blame] | 842 | |
Kevin Steves | c5041ac | 2002-05-21 17:50:21 +0000 | [diff] [blame] | 843 | 20020521 |
| 844 | - (stevesk) [sshd.c] bug 245; disable setsid() for now |
Kevin Steves | bc5bb55 | 2002-05-21 17:59:13 +0000 | [diff] [blame] | 845 | - (stevesk) [sshd.c] #ifndef HAVE_CYGWIN for setgroups() |
Kevin Steves | c5041ac | 2002-05-21 17:50:21 +0000 | [diff] [blame] | 846 | |
Tim Rice | 9de793c | 2002-05-17 08:59:22 -0700 | [diff] [blame] | 847 | 20020517 |
| 848 | - (tim) [configure.ac] remove extra MD5_MSG="no" line. |
| 849 | |
Ben Lindstrom | beecf74 | 2002-05-15 15:59:17 +0000 | [diff] [blame] | 850 | 20020515 |
| 851 | - (bal) CVS ID fix up on auth-passwd.c |
Ben Lindstrom | 1650ba3 | 2002-05-15 16:07:11 +0000 | [diff] [blame] | 852 | - (bal) OpenBSD CVS Sync |
| 853 | - deraadt@cvs.openbsd.org 2002/05/07 19:54:36 |
| 854 | [ssh.h] |
| 855 | use ssh uid |
Ben Lindstrom | 973be00 | 2002-05-15 16:08:48 +0000 | [diff] [blame] | 856 | - deraadt@cvs.openbsd.org 2002/05/08 21:06:34 |
| 857 | [ssh.h] |
| 858 | move to sshd.sshd instead |
Ben Lindstrom | 966bfda | 2002-05-15 16:09:57 +0000 | [diff] [blame] | 859 | - stevesk@cvs.openbsd.org 2002/05/11 20:24:48 |
| 860 | [ssh.h] |
| 861 | typo in comment |
Ben Lindstrom | 58d4daf | 2002-05-15 16:14:36 +0000 | [diff] [blame] | 862 | - itojun@cvs.openbsd.org 2002/05/13 02:37:39 |
| 863 | [auth-skey.c auth2.c] |
| 864 | less warnings. skey_{respond,query} are public (in auth.h) |
Ben Lindstrom | a574cda | 2002-05-15 16:16:14 +0000 | [diff] [blame] | 865 | - markus@cvs.openbsd.org 2002/05/13 20:44:58 |
| 866 | [auth-options.c auth.c auth.h] |
| 867 | move the packet_send_debug handling from auth-options.c to auth.c; |
| 868 | ok provos@ |
Ben Lindstrom | 17401b6 | 2002-05-15 16:17:56 +0000 | [diff] [blame] | 869 | - millert@cvs.openbsd.org 2002/05/13 15:53:19 |
| 870 | [sshd.c] |
| 871 | Call setsid() in the child after sshd accepts the connection and forks. |
| 872 | This is needed for privsep which calls setlogin() when it changes uids. |
| 873 | Without this, there is a race where the login name of an existing |
| 874 | connection, as returned by getlogin(), may be changed to the privsep |
| 875 | user (sshd). markus@ OK |
Ben Lindstrom | bdde330 | 2002-05-15 16:19:37 +0000 | [diff] [blame] | 876 | - markus@cvs.openbsd.org 2002/05/13 21:26:49 |
| 877 | [auth-rhosts.c] |
| 878 | handle debug messages during rhosts-rsa and hostbased authentication; |
| 879 | ok provos@ |
Ben Lindstrom | 7339b2a | 2002-05-15 16:25:01 +0000 | [diff] [blame] | 880 | - mouring@cvs.openbsd.org 2002/05/15 15:47:49 |
| 881 | [kex.c monitor.c monitor_wrap.c sshd.c] |
| 882 | 'monitor' variable clashes with at least one lame platform (NeXT). i |
| 883 | Renamed to 'pmonitor'. provos@ |
Ben Lindstrom | bb2ce36 | 2002-05-15 21:35:43 +0000 | [diff] [blame] | 884 | - deraadt@cvs.openbsd.org 2002/05/04 02:39:35 |
| 885 | [servconf.c sshd.8 sshd_config] |
| 886 | enable privsep by default; provos ok |
Ben Lindstrom | c57bbf1 | 2002-05-15 21:36:45 +0000 | [diff] [blame] | 887 | - millert@cvs.openbsd.org 2002/05/06 23:34:33 |
| 888 | [ssh.1 sshd.8] |
| 889 | Kill/adjust r(login|exec)d? references now that those are no longer in |
| 890 | the tree. |
Ben Lindstrom | c5c15dd | 2002-05-15 21:37:34 +0000 | [diff] [blame] | 891 | - markus@cvs.openbsd.org 2002/05/15 21:02:53 |
| 892 | [servconf.c sshd.8 sshd_config] |
| 893 | disable privsep and enable setuid for the 3.2.2 release |
Ben Lindstrom | 7339b2a | 2002-05-15 16:25:01 +0000 | [diff] [blame] | 894 | - (bal) Fixed up PAM case. I think. |
Ben Lindstrom | 2b70e56 | 2002-05-15 16:39:51 +0000 | [diff] [blame] | 895 | - (bal) Clarified openbsd-compat/*-cray.* Licence provided by Wendy |
Ben Lindstrom | 4e67d38 | 2002-05-15 21:50:14 +0000 | [diff] [blame] | 896 | - (bal) OpenBSD CVS Sync |
| 897 | - markus@cvs.openbsd.org 2002/05/15 21:05:29 |
| 898 | [version.h] |
| 899 | enter OpenSSH_3.2.2 |
| 900 | - (bal) Caldara, Suse, and Redhat openssh.specs updated. |
Ben Lindstrom | beecf74 | 2002-05-15 15:59:17 +0000 | [diff] [blame] | 901 | |
Kevin Steves | f8defa2 | 2002-05-13 23:31:09 +0000 | [diff] [blame] | 902 | 20020514 |
| 903 | - (stevesk) [README.privsep] PAM+privsep works with Solaris 8. |
Tim Rice | 1e28c9e | 2002-05-13 17:07:18 -0700 | [diff] [blame] | 904 | - (tim) [sshpty.c] set tty modes when allocating old style bsd ptys to |
| 905 | match what newer style ptys have when allocated. Based on a patch by |
| 906 | Roger Cornelius <rac@tenzing.org> |
Tim Rice | fd6fd24 | 2002-05-13 20:50:38 -0700 | [diff] [blame] | 907 | - (tim) [README.privsep] UnixWare 7 and OpenUNIX 8 work. |
| 908 | - (tim) [README.privsep] remove reference to UnixWare 7 and OpenUNIX 8 |
| 909 | from PAM-enabled pragraph. UnixWare has no PAM. |
Tim Rice | 8dd6feb | 2002-05-14 09:03:46 -0700 | [diff] [blame] | 910 | - (tim) [contrib/caldera/openssh.spec] update version. |
Kevin Steves | f8defa2 | 2002-05-13 23:31:09 +0000 | [diff] [blame] | 911 | |
Damien Miller | a18bbd3 | 2002-05-13 10:48:57 +1000 | [diff] [blame] | 912 | 20020513 |
Kevin Steves | 0228155 | 2002-05-13 03:57:04 +0000 | [diff] [blame] | 913 | - (stevesk) add initial README.privsep |
Kevin Steves | c81e129 | 2002-05-13 03:51:40 +0000 | [diff] [blame] | 914 | - (stevesk) [configure.ac] nicer message: --with-privsep-user=user |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 915 | - (djm) Add --with-superuser-path=xxx configure option to specify |
| 916 | what $PATH the superuser receives. |
Damien Miller | 5ad9fd9 | 2002-05-13 11:07:41 +1000 | [diff] [blame] | 917 | - (djm) Bug #231: UsePrivilegeSeparation turns off Banner. |
Damien Miller | f58c672 | 2002-05-13 13:15:42 +1000 | [diff] [blame] | 918 | - (djm) Add --with-privsep-path configure option |
Damien Miller | b7cb969 | 2002-05-13 13:26:57 +1000 | [diff] [blame] | 919 | - (djm) Update RPM spec file: different superuser path, use |
| 920 | /var/empty/sshd for privsep |
Damien Miller | f71d2a5 | 2002-05-13 15:14:08 +1000 | [diff] [blame] | 921 | - (djm) Bug #234: missing readpassphrase declaration and defines |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 922 | - (djm) Add INSTALL warning about SSH protocol 1 blowfish w/ |
| 923 | OpenSSL < 0.9.6 |
Damien Miller | a18bbd3 | 2002-05-13 10:48:57 +1000 | [diff] [blame] | 924 | |
Tim Rice | aef7371 | 2002-05-11 13:17:42 -0700 | [diff] [blame] | 925 | 20020511 |
| 926 | - (tim) [configure.ac] applied a rework of djm's OpenSSL search cleanup patch. |
| 927 | Now only searches system and /usr/local/ssl (OpenSSL's default install path) |
| 928 | Others must use --with-ssl-dir=.... |
Tim Rice | 802b956 | 2002-05-11 15:30:04 -0700 | [diff] [blame] | 929 | - (tim) [monitor_fdpass.c] fix for systems that have both |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 930 | HAVE_ACCRIGHTS_IN_MSGHDR and HAVE_CONTROL_IN_MSGHDR. Ie. sys/socket.h |
| 931 | has #define msg_accrights msg_control |
Tim Rice | aef7371 | 2002-05-11 13:17:42 -0700 | [diff] [blame] | 932 | |
Damien Miller | cfe4a89 | 2002-05-10 12:19:23 +1000 | [diff] [blame] | 933 | 20020510 |
Kevin Steves | f98fb72 | 2002-05-10 15:48:52 +0000 | [diff] [blame] | 934 | - (stevesk) [auth.c] Shadow account and expiration cleanup. Now |
| 935 | check for root forced expire. Still don't check for inactive. |
Damien Miller | cfe4a89 | 2002-05-10 12:19:23 +1000 | [diff] [blame] | 936 | - (djm) Rework RedHat RPM files. Based on spec from Nalin |
| 937 | Dahyabhai <nalin@redhat.com> and patches from |
| 938 | Pekka Savola <pekkas@netcore.fi> |
Damien Miller | 87aea25 | 2002-05-10 12:20:24 +1000 | [diff] [blame] | 939 | - (djm) Try to drop supplemental groups at daemon startup. Patch from |
| 940 | RedHat |
Ben Lindstrom | 0b47814 | 2002-05-10 02:40:15 +0000 | [diff] [blame] | 941 | - (bal) Back all the way out of auth-passwd.c changes. Breaks too many |
| 942 | things that don't set pw->pw_passwd. |
Damien Miller | cfe4a89 | 2002-05-10 12:19:23 +1000 | [diff] [blame] | 943 | |
Tim Rice | a7a5d6d | 2002-05-09 07:05:59 -0700 | [diff] [blame] | 944 | 20020509 |
| 945 | - (tim) [Makefile.in] Unbreak make -f Makefile.in distprep |
Damien Miller | ffc868f | 2002-05-09 15:59:13 +1000 | [diff] [blame] | 946 | |
Tim Rice | a7a5d6d | 2002-05-09 07:05:59 -0700 | [diff] [blame] | 947 | 20020508 |
Tim Rice | 63cf841 | 2002-05-08 15:57:18 -0700 | [diff] [blame] | 948 | - (tim) [openbsd-compat/bsd-arc4random.c] fix logic on when seed_rng() is |
| 949 | called. Report by Chris Maxwell <maxwell@cs.dal.ca> |
Tim Rice | 0502a47 | 2002-05-08 16:04:14 -0700 | [diff] [blame] | 950 | - (tim) [Makefile.in configure.ac] set SHELL variable in Makefile |
Tim Rice | a7a5d6d | 2002-05-09 07:05:59 -0700 | [diff] [blame] | 951 | - (djm) Disable PAM kbd-int auth if privsep is turned on (it doesn't work) |
Tim Rice | 63cf841 | 2002-05-08 15:57:18 -0700 | [diff] [blame] | 952 | |
| 953 | 20020507 |
Tim Rice | 4bd2a19 | 2002-05-07 19:51:31 -0700 | [diff] [blame] | 954 | - (tim) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h] |
| 955 | Add truncate() emulation to address Bug 208 |
| 956 | |
Ben Lindstrom | 532bbdb | 2002-05-06 23:06:08 +0000 | [diff] [blame] | 957 | 20020506 |
Damien Miller | 52910dd | 2002-05-08 12:18:26 +1000 | [diff] [blame] | 958 | - (djm) Unbreak auth-passwd.c for PAM and SIA |
Damien Miller | a33501b | 2002-05-08 12:24:42 +1000 | [diff] [blame] | 959 | - (djm) Unbreak PAM auth for protocol 1. Report from Pekka Savola |
| 960 | <pekkas@netcore.fi> |
Damien Miller | f762a4b | 2002-05-08 12:27:55 +1000 | [diff] [blame] | 961 | - (djm) Don't reinitialise PAM credentials before we have started PAM. |
| 962 | Report from Pekka Savola <pekkas@netcore.fi> |
| 963 | |
Damien Miller | 52910dd | 2002-05-08 12:18:26 +1000 | [diff] [blame] | 964 | 20020506 |
Ben Lindstrom | 532bbdb | 2002-05-06 23:06:08 +0000 | [diff] [blame] | 965 | - (bal) Fixed auth-passwd.c to resolve PermitEmptyPassword issue |
| 966 | |
Damien Miller | 38cd435 | 2002-05-01 13:17:33 +1000 | [diff] [blame] | 967 | 20020501 |
| 968 | - (djm) Import OpenBSD regression tests. Requires BSD make to run |
Damien Miller | 804357a | 2002-05-01 22:00:22 +1000 | [diff] [blame] | 969 | - (djm) Fix readpassphase compilation for systems which have it |
Damien Miller | 38cd435 | 2002-05-01 13:17:33 +1000 | [diff] [blame] | 970 | |
Tim Rice | 2f09289 | 2002-04-29 20:53:12 -0700 | [diff] [blame] | 971 | 20020429 |
| 972 | - (tim) [contrib/caldera/openssh.spec] update fixUP to reflect changes in |
| 973 | sshd_config. |
| 974 | - (tim) [contrib/cygwin/README] remove reference to regex. |
| 975 | patch from Corinna Vinschen <vinschen@redhat.com> |
| 976 | |
Damien Miller | 13ce922 | 2002-04-26 11:25:40 +1000 | [diff] [blame] | 977 | 20020426 |
| 978 | - (djm) Bug #137, #209: fix make problems for scard/Ssh.bin, do uudecode |
| 979 | during distprep only |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 980 | - (djm) Disable PAM password expiry until a complete fix for bug #188 |
| 981 | exists |
Damien Miller | aa100c5 | 2002-04-26 16:54:34 +1000 | [diff] [blame] | 982 | - (djm) Bug #180: Set ToS bits on IPv4-in-IPv6 mapped addresses. Based on |
| 983 | patch from openssh@misc.tecq.org |
Damien Miller | 13ce922 | 2002-04-26 11:25:40 +1000 | [diff] [blame] | 984 | |
Kevin Steves | 30e494f | 2002-04-25 17:56:07 +0000 | [diff] [blame] | 985 | 20020425 |
| 986 | - (stevesk) [defines.h] remove USE_TIMEVAL; unused |
Kevin Steves | 0ea1d9d | 2002-04-25 18:17:04 +0000 | [diff] [blame] | 987 | - (stevesk) [acconfig.h auth-passwd.c configure.ac sshd.c] HP-UX 10.26 |
| 988 | support. bug #184. most from dcole@keysoftsys.com. |
Kevin Steves | 30e494f | 2002-04-25 17:56:07 +0000 | [diff] [blame] | 989 | |
Damien Miller | 11ec281 | 2002-04-24 09:48:14 +1000 | [diff] [blame] | 990 | 20020424 |
| 991 | - (djm) OpenBSD CVS Sync |
| 992 | - markus@cvs.openbsd.org 2002/04/23 12:54:10 |
| 993 | [version.h] |
| 994 | 3.2.1 |
Damien Miller | 0150c65 | 2002-04-24 09:49:09 +1000 | [diff] [blame] | 995 | - djm@cvs.openbsd.org 2002/04/23 22:16:29 |
| 996 | [sshd.c] |
| 997 | Improve error message; ok markus@ stevesk@ |
Damien Miller | 11ec281 | 2002-04-24 09:48:14 +1000 | [diff] [blame] | 998 | |
Damien Miller | 594a71b | 2002-04-23 20:22:59 +1000 | [diff] [blame] | 999 | 20020423 |
Kevin Steves | 5feaaef | 2002-04-23 20:45:55 +0000 | [diff] [blame] | 1000 | - (stevesk) [acconfig.h configure.ac session.c] LOGIN_NO_ENDOPT for HP-UX |
Kevin Steves | 03df6cd | 2002-04-23 20:11:13 +0000 | [diff] [blame] | 1001 | - (stevesk) [acconfig.h] NEED_IN_SYSTM_H unused |
Markus Friedl | 78cf8c3 | 2002-04-23 16:41:12 +0200 | [diff] [blame] | 1002 | - (markus) OpenBSD CVS Sync |
| 1003 | - markus@cvs.openbsd.org 2002/04/23 12:58:26 |
| 1004 | [radix.c] |
| 1005 | send complete ticket; semerad@ss1000.ms.mff.cuni.cz |
Damien Miller | ef7c11d | 2002-04-23 21:13:32 +1000 | [diff] [blame] | 1006 | - (djm) Trim ChangeLog to include only post-3.1 changes |
Damien Miller | 0b3894d | 2002-04-23 21:15:31 +1000 | [diff] [blame] | 1007 | - (djm) Update RPM spec file versions |
Damien Miller | 654a4ef | 2002-04-23 21:17:17 +1000 | [diff] [blame] | 1008 | - (djm) Redhat spec enables KrbV by default |
Damien Miller | f5fea44 | 2002-04-23 22:52:45 +1000 | [diff] [blame] | 1009 | - (djm) Applied OpenSC smartcard updates from Markus & |
| 1010 | Antti Tapaninen <aet@cc.hut.fi> |
| 1011 | - (djm) Define BROKEN_REALPATH for AIX, patch from |
| 1012 | Antti Tapaninen <aet@cc.hut.fi> |
Damien Miller | f1b9d11 | 2002-04-23 23:09:19 +1000 | [diff] [blame] | 1013 | - (djm) Bug #214: Fix utmp for Irix (don't strip "tty"). Patch from |
| 1014 | Kevin Taylor <no@nowhere.org> (??) via Philipp Grau |
| 1015 | <phgrau@zedat.fu-berlin.de> |
Damien Miller | d77facd | 2002-04-23 22:59:51 +1000 | [diff] [blame] | 1016 | - (djm) Bug #213: Simplify CMSG_ALIGN macros to avoid symbol clashes. |
| 1017 | Reported by Doug Manton <dmanton@emea.att.com> |
Damien Miller | 594a71b | 2002-04-23 20:22:59 +1000 | [diff] [blame] | 1018 | - (djm) Bug #222: Fix tests for getaddrinfo on OSF/1. Spotted by |
| 1019 | Robert Urban <urban@spielwiese.de> |
Damien Miller | fa2bb69 | 2002-04-23 23:22:25 +1000 | [diff] [blame] | 1020 | - (djm) Bug #206 - blibpath isn't always needed for AIX ld, avoid |
| 1021 | sizeof(long long int) == 4 breakage. Patch from Matthew Clarke |
| 1022 | <Matthew_Clarke@mindlink.bc.ca> |
Damien Miller | 7941855 | 2002-04-23 20:28:48 +1000 | [diff] [blame] | 1023 | - (djm) Make privsep work with PAM (still experimental) |
Damien Miller | 3b23566 | 2002-04-23 20:42:36 +1000 | [diff] [blame] | 1024 | - (djm) OpenBSD CVS Sync |
| 1025 | - deraadt@cvs.openbsd.org 2002/04/20 09:02:03 |
| 1026 | [servconf.c] |
| 1027 | No, afs requires explicit enabling |
| 1028 | - markus@cvs.openbsd.org 2002/04/20 09:14:58 |
| 1029 | [bufaux.c bufaux.h] |
| 1030 | add buffer_{get,put}_short |
Damien Miller | bad0e01 | 2002-04-23 20:46:56 +1000 | [diff] [blame] | 1031 | - markus@cvs.openbsd.org 2002/04/20 09:17:19 |
| 1032 | [radix.c] |
| 1033 | rewrite using the buffer_* API, fixes overflow; ok deraadt@ |
Damien Miller | 7a8558d | 2002-04-23 20:51:15 +1000 | [diff] [blame] | 1034 | - stevesk@cvs.openbsd.org 2002/04/21 16:19:27 |
| 1035 | [sshd.8 sshd_config] |
| 1036 | document default AFSTokenPassing no; ok deraadt@ |
Damien Miller | f61c015 | 2002-04-23 20:56:02 +1000 | [diff] [blame] | 1037 | - stevesk@cvs.openbsd.org 2002/04/21 16:25:06 |
| 1038 | [sshconnect1.c] |
| 1039 | spelling in error message; ok markus@ |
Damien Miller | 635fe98 | 2002-04-23 21:00:33 +1000 | [diff] [blame] | 1040 | - markus@cvs.openbsd.org 2002/04/22 06:15:47 |
| 1041 | [radix.c] |
| 1042 | fix check for overflow |
Damien Miller | d7de14b | 2002-04-23 21:04:51 +1000 | [diff] [blame] | 1043 | - markus@cvs.openbsd.org 2002/04/22 16:16:53 |
| 1044 | [servconf.c sshd.8 sshd_config] |
| 1045 | do not auto-enable KerberosAuthentication; ok djm@, provos@, deraadt@ |
Damien Miller | 2797f7f | 2002-04-23 21:09:44 +1000 | [diff] [blame] | 1046 | - markus@cvs.openbsd.org 2002/04/22 21:04:52 |
| 1047 | [channels.c clientloop.c clientloop.h ssh.c] |
| 1048 | request reply (success/failure) for -R style fwd in protocol v2, |
| 1049 | depends on ordered replies. |
| 1050 | fixes http://bugzilla.mindrot.org/show_bug.cgi?id=215; ok provos@ |
Damien Miller | 594a71b | 2002-04-23 20:22:59 +1000 | [diff] [blame] | 1051 | |
Tim Rice | f02dccc | 2002-04-21 11:26:10 -0700 | [diff] [blame] | 1052 | 20020421 |
| 1053 | - (tim) [entropy.c.] Portability fix for SCO Unix 3.2v4.x (SCO OSR 3.0). |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1054 | entropy.c needs seteuid(getuid()) for the setuid(original_uid) to |
| 1055 | succeed. Patch by gert@greenie.muc.de. This fixes one part of Bug 208 |
Tim Rice | f02dccc | 2002-04-21 11:26:10 -0700 | [diff] [blame] | 1056 | |
Damien Miller | a370f4d | 2002-04-18 22:53:22 +1000 | [diff] [blame] | 1057 | 20020418 |
| 1058 | - (djm) Avoid SIGCHLD breakage when run from rsync. Fix from |
| 1059 | Sturle Sunde <sturle.sunde@usit.uio.no> |
| 1060 | |
Damien Miller | bd63874 | 2002-04-17 12:22:58 +1000 | [diff] [blame] | 1061 | 20020417 |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1062 | - (djm) Tell users to configure /dev/random support into OpenSSL in |
| 1063 | INSTALL |
Damien Miller | 5efd710 | 2002-04-17 12:30:45 +1000 | [diff] [blame] | 1064 | - (djm) Fix .Nm in mdoc2man.pl from pspencer@fields.utoronto.ca |
Tim Rice | 43a1c13 | 2002-04-17 21:19:14 -0700 | [diff] [blame] | 1065 | - (tim) [configure.ac] Issue warning on --with-default-path=/some_path |
| 1066 | if LOGIN_CAP is enabled. Report & testing by Tuc <tuc@ttsg.com> |
Damien Miller | bd63874 | 2002-04-17 12:22:58 +1000 | [diff] [blame] | 1067 | |
Damien Miller | 8be24f3 | 2002-04-15 13:23:59 +1000 | [diff] [blame] | 1068 | 20020415 |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1069 | - (djm) Unbreak "make install". Fix from Darren Tucker |
| 1070 | <dtucker@zip.com.au> |
Kevin Steves | eb36302 | 2002-04-15 22:00:51 +0000 | [diff] [blame] | 1071 | - (stevesk) bsd-cygwin_util.[ch] BSD license from Corinna Vinschen |
Tim Rice | 66480f1 | 2002-04-15 21:10:09 -0700 | [diff] [blame] | 1072 | - (tim) [configure.ac] add tests for recvmsg and sendmsg. |
| 1073 | [monitor_fdpass.c] add checks for HAVE_SENDMSG and HAVE_RECVMSG for |
| 1074 | systems that HAVE_ACCRIGHTS_IN_MSGHDR but no recvmsg or sendmsg. |
Damien Miller | 8be24f3 | 2002-04-15 13:23:59 +1000 | [diff] [blame] | 1075 | |
Damien Miller | 32e4818 | 2002-04-14 19:27:12 +1000 | [diff] [blame] | 1076 | 20020414 |
| 1077 | - (djm) ssh-rand-helper improvements |
| 1078 | - Add commandline debugging options |
| 1079 | - Don't write binary data if stdout is a tty (use hex instead) |
| 1080 | - Give it a manpage |
Damien Miller | 49411ff | 2002-04-14 23:16:04 +1000 | [diff] [blame] | 1081 | - (djm) Random number collection doc fixes from Ben |
Damien Miller | 32e4818 | 2002-04-14 19:27:12 +1000 | [diff] [blame] | 1082 | |
Damien Miller | fd4c9ee | 2002-04-13 11:04:40 +1000 | [diff] [blame] | 1083 | 20020413 |
| 1084 | - (djm) Add KrbV support patch from Simon Wilkinson <simon@sxw.org.uk> |
| 1085 | |
Kevin Steves | 19fa9b5 | 2002-04-12 15:36:07 +0000 | [diff] [blame] | 1086 | 20020412 |
| 1087 | - (stevesk) [auth-sia.[ch]] add BSD license from Chris Adams |
Tim Rice | ae49fe6 | 2002-04-12 10:26:21 -0700 | [diff] [blame] | 1088 | - (tim) [configure.ac] add <sys/types.h> to msghdr tests. Change -L |
| 1089 | to -h on testing for /bin being symbolic link |
Ben Lindstrom | c42f7cf | 2002-04-12 17:44:13 +0000 | [diff] [blame] | 1090 | - (bal) Mistaken in Cygwin scripts for ssh starting. Patch by |
| 1091 | Corinna Vinschen <vinschen@redhat.com> |
Ben Lindstrom | 927dfd2 | 2002-04-12 18:51:22 +0000 | [diff] [blame] | 1092 | - (bal) disable privsep if no MAP_ANON. We can re-enable it |
| 1093 | after the release when we can do more testing. |
Kevin Steves | 19fa9b5 | 2002-04-12 15:36:07 +0000 | [diff] [blame] | 1094 | |
Kevin Steves | 0c283d8 | 2002-04-11 20:39:40 +0000 | [diff] [blame] | 1095 | 20020411 |
| 1096 | - (stevesk) [auth-sia.c] cleanup |
Tim Rice | 813f045 | 2002-04-11 20:35:39 -0700 | [diff] [blame] | 1097 | - (tim) [acconfig.h defines.h includes.h] put includes in includes.h and |
| 1098 | defines in defines.h [rijndael.c openbsd-compat/fake-socket.h |
| 1099 | openbsd-compat/inet_aton.c] include "includes.h" instead of "config.h" |
| 1100 | ok stevesk@ |
Kevin Steves | 0c283d8 | 2002-04-11 20:39:40 +0000 | [diff] [blame] | 1101 | |
Kevin Steves | 6939b23 | 2002-04-10 16:09:51 +0000 | [diff] [blame] | 1102 | 20020410 |
Kevin Steves | fe6ca54 | 2002-04-10 22:04:54 +0000 | [diff] [blame] | 1103 | - (stevesk) [configure.ac monitor.c] HAVE_SOCKETPAIR |
Kevin Steves | 6939b23 | 2002-04-10 16:09:51 +0000 | [diff] [blame] | 1104 | - (stevesk) [auth-sia.c] compile fix Chris Adams <cmadams@hiwaay.net> |
Ben Lindstrom | b5115ea | 2002-04-10 16:17:34 +0000 | [diff] [blame] | 1105 | - (bal) OpenBSD CVS Sync |
| 1106 | - markus@cvs.openbsd.org 2002/04/10 08:21:47 |
| 1107 | [auth1.c compat.c compat.h] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1108 | strip '@' from username only for KerbV and known broken clients, |
| 1109 | bug #204 |
Ben Lindstrom | 027e4de | 2002-04-10 16:26:20 +0000 | [diff] [blame] | 1110 | - markus@cvs.openbsd.org 2002/04/10 08:56:01 |
| 1111 | [version.h] |
| 1112 | OpenSSH_3.2 |
| 1113 | - Added p1 to idenify Portable release version. |
Kevin Steves | 6939b23 | 2002-04-10 16:09:51 +0000 | [diff] [blame] | 1114 | |
Ben Lindstrom | 34b7320 | 2002-04-08 18:37:07 +0000 | [diff] [blame] | 1115 | 20020408 |
| 1116 | - (bal) Minor OpenSC updates. Fix up header locations and update |
| 1117 | README.smartcard provided by Juha Yrjölä <jyrjola@cc.hut.fi> |
| 1118 | |
Kevin Steves | a44e035 | 2002-04-07 16:18:03 +0000 | [diff] [blame] | 1119 | 20020407 |
| 1120 | - (stevesk) HAVE_CONTROL_IN_MSGHDR; not used right now. |
| 1121 | Future: we may want to test if fd passing works correctly. |
Kevin Steves | c3c8255 | 2002-04-07 16:39:12 +0000 | [diff] [blame] | 1122 | - (stevesk) [monitor_fdpass.c] fatal() for UsePrivilegeSeparation=yes |
| 1123 | and no fd passing support. |
Kevin Steves | 86b9fe6 | 2002-04-07 17:08:53 +0000 | [diff] [blame] | 1124 | - (stevesk) HAVE_MMAP and HAVE_SYS_MMAN_H and use them in |
| 1125 | monitor_mm.c |
Kevin Steves | b1184bb | 2002-04-07 18:12:03 +0000 | [diff] [blame] | 1126 | - (stevesk) remove configure support for poll.h; it was removed |
| 1127 | from sshd.c a long time ago. |
Kevin Steves | 7ff9112 | 2002-04-07 19:22:54 +0000 | [diff] [blame] | 1128 | - (stevesk) --with-privsep-user; default sshd |
Kevin Steves | 265c9d0 | 2002-04-07 22:36:49 +0000 | [diff] [blame] | 1129 | - (stevesk) wrap munmap() with HAVE_MMAP also. |
Kevin Steves | a44e035 | 2002-04-07 16:18:03 +0000 | [diff] [blame] | 1130 | |
Damien Miller | 12db56b | 2002-04-06 11:12:52 +1000 | [diff] [blame] | 1131 | 20020406 |
| 1132 | - (djm) Typo in Suse SPEC file. Fix from Carsten Grohmann |
| 1133 | <carsten.grohmann@dr-baldeweg.de> |
Ben Lindstrom | dc0594c | 2002-04-06 04:11:28 +0000 | [diff] [blame] | 1134 | - (bal) Added MAP_FAILED to allow AIX and Trusted HP to compile. |
Ben Lindstrom | 06e9515 | 2002-04-06 04:16:45 +0000 | [diff] [blame] | 1135 | - (bal) OpenBSD CVS Sync |
| 1136 | - djm@cvs.openbsd.org 2002/04/06 00:30:08 |
| 1137 | [sftp-client.c] |
Damien Miller | f75fcc6 | 2002-04-23 23:32:38 +1000 | [diff] [blame] | 1138 | Fix occasional corruption on upload due to bad reuse of request |
| 1139 | id, spotted by chombier@mac.com; ok markus@ |
Ben Lindstrom | de3895d | 2002-04-06 18:29:59 +0000 | [diff] [blame] | 1140 | - mouring@cvs.openbsd.org 2002/04/06 18:24:09 |
| 1141 | [scp.c] |
| 1142 | Fixes potental double // within path. |
| 1143 | http://bugzilla.mindrot.org/show_bug.cgi?id=76 |
Ben Lindstrom | 8d60175 | 2002-04-06 18:19:38 +0000 | [diff] [blame] | 1144 | - (bal) Slight update to OpenSC support. Better version checking. patch |
| 1145 | by Juha Yrjölä <jyrjola@cc.hut.fi> |
Ben Lindstrom | 8ff2a8d | 2002-04-06 18:58:31 +0000 | [diff] [blame] | 1146 | - (bal) Revered out of runtime IRIX detection of joblimits. Code is |
| 1147 | incomplete. |
Ben Lindstrom | 0318801 | 2002-04-06 20:30:07 +0000 | [diff] [blame] | 1148 | - (bal) Quiet down configure.ac if /bin/test does not exist. |
Ben Lindstrom | fdee8ef | 2002-04-06 23:52:02 +0000 | [diff] [blame] | 1149 | - (bal) We no longer use atexit()/xatexit()/on_exit() |
Damien Miller | 12db56b | 2002-04-06 11:12:52 +1000 | [diff] [blame] | 1150 | |
Ben Lindstrom | a42694f | 2002-04-05 16:11:45 +0000 | [diff] [blame] | 1151 | 20020405 |
| 1152 | - (bal) Patch for OpenSC SmartCard library; ok markus@; patch by |
| 1153 | Juha Yrjölä <jyrjola@cc.hut.fi> |
| 1154 | - (bal) Minor documentation update to reflect smartcard library |
| 1155 | support changes. |
Ben Lindstrom | 924144e | 2002-04-05 20:23:35 +0000 | [diff] [blame] | 1156 | - (bal) Too many <sys/queue.h> issues. Remove all workarounds and |
| 1157 | using internal version only. |
Ben Lindstrom | a11e270 | 2002-04-05 22:18:48 +0000 | [diff] [blame] | 1158 | - (bal) OpenBSD CVS Sync |
| 1159 | - stevesk@cvs.openbsd.org 2002/04/05 20:56:21 |
| 1160 | [sshd.8] |
| 1161 | clarify sshrc some and handle X11UseLocalhost=yes; ok markus@ |
Ben Lindstrom | a42694f | 2002-04-05 16:11:45 +0000 | [diff] [blame] | 1162 | |
Kevin Steves | e683e76 | 2002-04-04 19:02:28 +0000 | [diff] [blame] | 1163 | 20020404 |
| 1164 | - (stevesk) [auth-pam.c auth-pam.h auth-passwd.c auth-sia.c auth-sia.h |
| 1165 | auth1.c auth2.c] PAM, OSF_SIA password auth cleanup; from djm. |
Ben Lindstrom | 8a725a8 | 2002-04-04 22:10:38 +0000 | [diff] [blame] | 1166 | - (bal) OpenBSD CVS Sync |
| 1167 | - markus@cvs.openbsd.org 2002/04/03 09:26:11 |
| 1168 | [cipher.c myproposal.h] |
| 1169 | re-add rijndael-cbc@lysator.liu.se for MacSSH; ash@lab.poc.net |
Kevin Steves | e683e76 | 2002-04-04 19:02:28 +0000 | [diff] [blame] | 1170 | |
Ben Lindstrom | cdb66e0 | 2002-04-02 20:17:43 +0000 | [diff] [blame] | 1171 | 20020402 |
| 1172 | - (bal) Hand Sync of scp.c (reverted to upstream code) |
| 1173 | - deraadt@cvs.openbsd.org 2002/03/30 17:45:46 |
| 1174 | [scp.c] |
| 1175 | stretch banners |
Ben Lindstrom | 1e259bb | 2002-04-02 20:53:39 +0000 | [diff] [blame] | 1176 | - (bal) CVS ID sync of uidswap.c |
Ben Lindstrom | 155b981 | 2002-04-02 20:26:26 +0000 | [diff] [blame] | 1177 | - (bal) OpenBSD CVS Sync (now for the real sync) |
| 1178 | - markus@cvs.openbsd.org 2002/03/27 22:21:45 |
| 1179 | [ssh-keygen.c] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1180 | try to import keys with extra trailing === (seen with ssh.com < |
| 1181 | 2.0.12) |
Ben Lindstrom | 2bf56e2 | 2002-04-02 20:32:46 +0000 | [diff] [blame] | 1182 | - markus@cvs.openbsd.org 2002/03/28 15:34:51 |
| 1183 | [session.c] |
| 1184 | do not call record_login twice (for use_privsep) |
Ben Lindstrom | c447fee | 2002-04-02 20:35:35 +0000 | [diff] [blame] | 1185 | - markus@cvs.openbsd.org 2002/03/29 18:59:32 |
| 1186 | [session.c session.h] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1187 | retrieve last login time before the pty is allocated, store per |
| 1188 | session |
Ben Lindstrom | 0d0be02 | 2002-04-02 20:39:29 +0000 | [diff] [blame] | 1189 | - stevesk@cvs.openbsd.org 2002/03/29 19:16:22 |
| 1190 | [sshd.8] |
| 1191 | RSA key modulus size minimum 768; ok markus@ |
Ben Lindstrom | 03f3932 | 2002-04-02 20:43:11 +0000 | [diff] [blame] | 1192 | - stevesk@cvs.openbsd.org 2002/03/29 19:18:33 |
| 1193 | [auth-rsa.c ssh-rsa.c ssh.h] |
| 1194 | make RSA modulus minimum #define; ok markus@ |
Ben Lindstrom | 47fd811 | 2002-04-02 20:48:19 +0000 | [diff] [blame] | 1195 | - markus@cvs.openbsd.org 2002/03/30 18:51:15 |
| 1196 | [monitor.c serverloop.c sftp-int.c sftp.c sshd.c] |
| 1197 | check waitpid for EINTR; based on patch from peter@ifm.liu.se |
Ben Lindstrom | a1d8114 | 2002-04-02 20:58:11 +0000 | [diff] [blame] | 1198 | - markus@cvs.openbsd.org 2002/04/01 22:02:16 |
| 1199 | [sftp-client.c] |
| 1200 | 20480 is an upper limit for older server |
Ben Lindstrom | f26ff5b | 2002-04-02 21:00:31 +0000 | [diff] [blame] | 1201 | - markus@cvs.openbsd.org 2002/04/01 22:07:17 |
| 1202 | [sftp-client.c] |
| 1203 | fallback to stat if server does not support lstat |
Ben Lindstrom | eecdf23 | 2002-04-02 21:03:51 +0000 | [diff] [blame] | 1204 | - markus@cvs.openbsd.org 2002/04/02 11:49:39 |
| 1205 | [ssh-agent.c] |
| 1206 | check $SHELL for -k and -d, too; |
| 1207 | http://bugzilla.mindrot.org/show_bug.cgi?id=199 |
Ben Lindstrom | 2f3d52a | 2002-04-02 21:06:18 +0000 | [diff] [blame] | 1208 | - markus@cvs.openbsd.org 2002/04/02 17:37:48 |
| 1209 | [sftp.c] |
| 1210 | always call log_init() |
Ben Lindstrom | 07739fe | 2002-04-03 03:03:04 +0000 | [diff] [blame] | 1211 | - markus@cvs.openbsd.org 2002/04/02 20:11:38 |
| 1212 | [ssh-rsa.c] |
| 1213 | ignore SSH_BUG_SIGBLOB for ssh-rsa; #187 |
Ben Lindstrom | af40bc6 | 2002-04-03 03:36:54 +0000 | [diff] [blame] | 1214 | - (bal) mispelling in uidswap.c (portable only) |
Ben Lindstrom | cdb66e0 | 2002-04-02 20:17:43 +0000 | [diff] [blame] | 1215 | |
Kevin Steves | bd1901b | 2002-04-01 18:04:35 +0000 | [diff] [blame] | 1216 | 20020401 |
| 1217 | - (stevesk) [monitor.c] PAM should work again; will *not* work with |
| 1218 | UsePrivilegeSeparation=yes. |
Kevin Steves | 38c4a28 | 2002-04-02 03:24:56 +0000 | [diff] [blame] | 1219 | - (stevesk) [auth1.c] fix password auth for protocol 1 when |
| 1220 | !USE_PAM && !HAVE_OSF_SIA; merge issue. |
Kevin Steves | bd1901b | 2002-04-01 18:04:35 +0000 | [diff] [blame] | 1221 | |
Tim Rice | 49e457c | 2002-03-31 11:23:06 -0800 | [diff] [blame] | 1222 | 20020331 |
| 1223 | - (tim) [configure.ac] use /bin/test -L to work around broken builtin on |
| 1224 | Solaris 8 |
Tim Rice | c854962 | 2002-03-31 12:49:38 -0800 | [diff] [blame] | 1225 | - (tim) [sshconnect2.c] change uint32_t to u_int32_t |
Tim Rice | 49e457c | 2002-03-31 11:23:06 -0800 | [diff] [blame] | 1226 | |
Kevin Steves | 117b06d | 2002-03-30 17:55:21 +0000 | [diff] [blame] | 1227 | 20020330 |
| 1228 | - (stevesk) [configure.ac] remove header check for sys/ttcompat.h |
| 1229 | bug 167 |
| 1230 | |
Ben Lindstrom | 53f1830 | 2002-03-27 16:50:03 +0000 | [diff] [blame] | 1231 | 20020327 |
| 1232 | - (bal) 'pw' should be 'authctxt->pw' in auth1.c spotted by |
| 1233 | kent@lysator.liu.se |
Ben Lindstrom | f181384 | 2002-03-27 17:18:31 +0000 | [diff] [blame] | 1234 | - (bal) OpenBSD CVS Sync |
| 1235 | - markus@cvs.openbsd.org 2002/03/26 11:34:49 |
| 1236 | [ssh.1 sshd.8] |
| 1237 | update to recent drafts |
Ben Lindstrom | eb041dc | 2002-03-27 17:20:38 +0000 | [diff] [blame] | 1238 | - markus@cvs.openbsd.org 2002/03/26 11:37:05 |
| 1239 | [ssh.c] |
| 1240 | update Copyright |
Ben Lindstrom | cd8bbce | 2002-03-27 17:23:44 +0000 | [diff] [blame] | 1241 | - markus@cvs.openbsd.org 2002/03/26 15:23:40 |
| 1242 | [bufaux.c] |
| 1243 | do not talk about packets in bufaux |
Ben Lindstrom | 43a5e2f | 2002-03-27 17:33:17 +0000 | [diff] [blame] | 1244 | - rees@cvs.openbsd.org 2002/03/26 18:46:59 |
| 1245 | [scard.c] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1246 | try_AUT0 in read_pubkey too, for those paranoid few who want to |
| 1247 | acl 'sh' |
Ben Lindstrom | 57686a8 | 2002-03-27 17:36:41 +0000 | [diff] [blame] | 1248 | - markus@cvs.openbsd.org 2002/03/26 22:50:39 |
| 1249 | [channels.h] |
| 1250 | CHANNEL_EFD_OUTPUT_ACTIVE is false for CHAN_CLOSE_RCVD, too |
Ben Lindstrom | e1f9e32 | 2002-03-27 17:38:43 +0000 | [diff] [blame] | 1251 | - markus@cvs.openbsd.org 2002/03/26 23:13:03 |
| 1252 | [auth-rsa.c] |
| 1253 | disallow RSA keys < 768 for protocol 1, too (rhosts-rsa and rsa auth) |
Ben Lindstrom | 5997172 | 2002-03-27 17:42:57 +0000 | [diff] [blame] | 1254 | - markus@cvs.openbsd.org 2002/03/26 23:14:51 |
| 1255 | [kex.c] |
| 1256 | generate a new cookie for each SSH2_MSG_KEXINIT message we send out |
Ben Lindstrom | b57a4bf | 2002-03-27 18:00:59 +0000 | [diff] [blame] | 1257 | - mouring@cvs.openbsd.org 2002/03/27 11:45:42 |
| 1258 | [monitor.c] |
| 1259 | monitor_allowed_key() returns int instead of pointer. ok markus@ |
| 1260 | |
Kevin Steves | 6205a18 | 2002-03-26 00:12:49 +0000 | [diff] [blame] | 1261 | 20020325 |
| 1262 | - (stevesk) import OpenBSD <sys/tree.h> as "openbsd-compat/tree.h" |
Ben Lindstrom | f90f58d | 2002-03-26 01:53:03 +0000 | [diff] [blame] | 1263 | - (bal) OpenBSD CVS Sync |
| 1264 | - stevesk@cvs.openbsd.org 2002/03/23 20:57:26 |
| 1265 | [sshd.c] |
| 1266 | setproctitle() after preauth child; ok markus@ |
Ben Lindstrom | 3dc40f9 | 2002-03-26 02:01:30 +0000 | [diff] [blame] | 1267 | - markus@cvs.openbsd.org 2002/03/24 16:00:27 |
| 1268 | [serverloop.c] |
| 1269 | remove unused debug |
Ben Lindstrom | 8b08d81 | 2002-03-26 02:09:41 +0000 | [diff] [blame] | 1270 | - markus@cvs.openbsd.org 2002/03/24 16:01:13 |
| 1271 | [packet.c] |
| 1272 | debug->debug3 for extra padding |
Ben Lindstrom | fcad1c9 | 2002-03-26 02:20:06 +0000 | [diff] [blame] | 1273 | - stevesk@cvs.openbsd.org 2002/03/24 17:27:03 |
| 1274 | [kexgex.c] |
| 1275 | typo; ok markus@ |
Ben Lindstrom | 31ee7ae | 2002-03-26 02:36:29 +0000 | [diff] [blame] | 1276 | - stevesk@cvs.openbsd.org 2002/03/24 17:53:16 |
| 1277 | [monitor_fdpass.c] |
| 1278 | minor cleanup and more error checking; ok markus@ |
Ben Lindstrom | c2c6cbc | 2002-03-26 02:44:44 +0000 | [diff] [blame] | 1279 | - markus@cvs.openbsd.org 2002/03/24 18:05:29 |
| 1280 | [scard.c] |
| 1281 | we need to figure out AUT0 for sc_private_encrypt, too |
Ben Lindstrom | 2e9d866 | 2002-03-26 02:49:34 +0000 | [diff] [blame] | 1282 | - stevesk@cvs.openbsd.org 2002/03/24 23:20:00 |
| 1283 | [monitor.c] |
| 1284 | remove "\n" from fatal() |
Ben Lindstrom | f6d367b | 2002-03-26 02:59:31 +0000 | [diff] [blame] | 1285 | - markus@cvs.openbsd.org 2002/03/25 09:21:13 |
| 1286 | [auth-rsa.c] |
| 1287 | return 0 (not NULL); tomh@po.crl.go.jp |
Ben Lindstrom | 5facb2b | 2002-03-26 03:08:47 +0000 | [diff] [blame] | 1288 | - markus@cvs.openbsd.org 2002/03/25 09:25:06 |
| 1289 | [auth-rh-rsa.c] |
| 1290 | rm bogus comment |
Ben Lindstrom | 0936a5b | 2002-03-26 03:17:42 +0000 | [diff] [blame] | 1291 | - markus@cvs.openbsd.org 2002/03/25 17:34:27 |
| 1292 | [scard.c scard.h ssh-agent.c ssh-keygen.c ssh.c] |
| 1293 | change sc_get_key to sc_get_keys and hide smartcard details in scard.c |
Ben Lindstrom | c861547 | 2002-03-26 03:20:45 +0000 | [diff] [blame] | 1294 | - stevesk@cvs.openbsd.org 2002/03/25 20:12:10 |
| 1295 | [monitor_mm.c monitor_wrap.c] |
| 1296 | ssize_t args use "%ld" and cast to (long) |
| 1297 | size_t args use "%lu" and cast to (u_long) |
| 1298 | ok markus@ and thanks millert@ |
Ben Lindstrom | 4f05460 | 2002-03-26 03:23:00 +0000 | [diff] [blame] | 1299 | - markus@cvs.openbsd.org 2002/03/25 21:04:02 |
| 1300 | [ssh.c] |
| 1301 | simplify num_identity_files handling |
Ben Lindstrom | cf15944 | 2002-03-26 03:26:24 +0000 | [diff] [blame] | 1302 | - markus@cvs.openbsd.org 2002/03/25 21:13:51 |
| 1303 | [channels.c channels.h compat.c compat.h nchan.c] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1304 | don't send stderr data after EOF, accept this from older known |
| 1305 | (broken) sshd servers only, fixes |
| 1306 | http://bugzilla.mindrot.org/show_bug.cgi?id=179 |
Ben Lindstrom | 28364ec | 2002-03-26 03:42:20 +0000 | [diff] [blame] | 1307 | - stevesk@cvs.openbsd.org 2002/03/26 03:24:01 |
| 1308 | [monitor.h monitor_fdpass.h monitor_mm.h monitor_wrap.h] |
| 1309 | $OpenBSD$ |
Kevin Steves | 6205a18 | 2002-03-26 00:12:49 +0000 | [diff] [blame] | 1310 | |
Kevin Steves | b4799a3 | 2002-03-24 23:19:54 +0000 | [diff] [blame] | 1311 | 20020324 |
| 1312 | - (stevesk) [session.c] disable LOGIN_NEEDS_TERM until we are sure |
| 1313 | it can be removed. only used on solaris. will no longer compile with |
| 1314 | privsep shuffling. |
| 1315 | |
Kevin Steves | 939c9db | 2002-03-22 17:23:25 +0000 | [diff] [blame] | 1316 | 20020322 |
| 1317 | - (stevesk) HAVE_ACCRIGHTS_IN_MSGHDR configure support |
Kevin Steves | 7e14760 | 2002-03-22 18:07:17 +0000 | [diff] [blame] | 1318 | - (stevesk) [monitor.c monitor_wrap.c] #ifdef HAVE_PW_CLASS_IN_PASSWD |
Kevin Steves | 4846f4a | 2002-03-22 18:19:53 +0000 | [diff] [blame] | 1319 | - (stevesk) configure and cpp __FUNCTION__ gymnastics to handle nielsisms |
Kevin Steves | 1adb120 | 2002-03-22 19:32:53 +0000 | [diff] [blame] | 1320 | - (stevesk) [monitor_fdpass.c] support for access rights style file |
| 1321 | descriptor passing |
Kevin Steves | 205cc1e | 2002-03-22 20:43:05 +0000 | [diff] [blame] | 1322 | - (stevesk) [auth2.c] merge cleanup/sync |
Kevin Steves | 219bef1 | 2002-03-22 20:53:32 +0000 | [diff] [blame] | 1323 | - (stevesk) [defines.h] hp-ux 11 has ancillary data style fd passing, but |
| 1324 | is missing CMSG_LEN() and CMSG_SPACE() macros. |
Kevin Steves | 4435a55 | 2002-03-22 21:08:03 +0000 | [diff] [blame] | 1325 | - (stevesk) [defines.h] #define MAP_ANON MAP_ANONYMOUS for HP-UX; other |
| 1326 | platforms may need this--I'm not sure. mmap() issues will need to be |
| 1327 | addressed further. |
Tim Rice | f29a653 | 2002-03-22 13:27:40 -0800 | [diff] [blame] | 1328 | - (tim) [cipher.c] fix problem with OpenBSD sync |
Kevin Steves | 4408c20 | 2002-03-23 02:20:07 +0000 | [diff] [blame] | 1329 | - (stevesk) [LICENCE] OpenBSD sync |
Kevin Steves | 939c9db | 2002-03-22 17:23:25 +0000 | [diff] [blame] | 1330 | |
Ben Lindstrom | d45f28c | 2002-03-22 01:00:57 +0000 | [diff] [blame] | 1331 | 20020321 |
| 1332 | - (bal) OpenBSD CVS Sync |
| 1333 | - itojun@cvs.openbsd.org 2002/03/08 06:10:16 |
| 1334 | [sftp-client.c] |
| 1335 | printf type mismatch |
Ben Lindstrom | eb50545 | 2002-03-22 01:03:15 +0000 | [diff] [blame] | 1336 | - itojun@cvs.openbsd.org 2002/03/11 03:18:49 |
| 1337 | [sftp-client.c] |
| 1338 | correct type mismatches (u_int64_t != unsigned long long) |
Ben Lindstrom | 83b79e4 | 2002-03-22 01:05:27 +0000 | [diff] [blame] | 1339 | - itojun@cvs.openbsd.org 2002/03/11 03:19:53 |
| 1340 | [sftp-client.c] |
| 1341 | indent |
Ben Lindstrom | 5c15958 | 2002-03-22 01:08:07 +0000 | [diff] [blame] | 1342 | - markus@cvs.openbsd.org 2002/03/14 15:24:27 |
| 1343 | [sshconnect1.c] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1344 | don't trust size sent by (rogue) server; noted by |
| 1345 | s.esser@e-matters.de |
Ben Lindstrom | abcb145 | 2002-03-22 01:10:21 +0000 | [diff] [blame] | 1346 | - markus@cvs.openbsd.org 2002/03/14 16:38:26 |
| 1347 | [sshd.c] |
| 1348 | split out ssh1 session key decryption; ok provos@ |
Ben Lindstrom | 9c8aefe | 2002-03-22 01:12:58 +0000 | [diff] [blame] | 1349 | - markus@cvs.openbsd.org 2002/03/14 16:56:33 |
| 1350 | [auth-rh-rsa.c auth-rsa.c auth.h] |
| 1351 | split auth_rsa() for better readability and privsep; ok provos@ |
Ben Lindstrom | b61e6df | 2002-03-22 01:15:33 +0000 | [diff] [blame] | 1352 | - itojun@cvs.openbsd.org 2002/03/15 11:00:38 |
| 1353 | [auth.c] |
| 1354 | fix file type checking (use S_ISREG). ok by markus |
Ben Lindstrom | ce398b2 | 2002-03-22 01:17:52 +0000 | [diff] [blame] | 1355 | - markus@cvs.openbsd.org 2002/03/16 11:24:53 |
| 1356 | [compress.c] |
| 1357 | skip inflateEnd if inflate fails; ok provos@ |
Ben Lindstrom | 186b7da | 2002-03-22 01:20:32 +0000 | [diff] [blame] | 1358 | - markus@cvs.openbsd.org 2002/03/16 17:22:09 |
| 1359 | [auth-rh-rsa.c auth.h] |
| 1360 | split auth_rhosts_rsa(), ok provos@ |
Ben Lindstrom | eacc71b | 2002-03-22 01:22:27 +0000 | [diff] [blame] | 1361 | - stevesk@cvs.openbsd.org 2002/03/16 17:41:25 |
| 1362 | [auth-krb5.c] |
| 1363 | BSD license. from Daniel Kouril via Dug Song. ok markus@ |
Ben Lindstrom | 2ae18f4 | 2002-03-22 01:24:38 +0000 | [diff] [blame] | 1364 | - provos@cvs.openbsd.org 2002/03/17 20:25:56 |
| 1365 | [auth.c auth.h auth1.c auth2.c] |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1366 | getpwnamallow returns struct passwd * only if user valid; |
| 1367 | okay markus@ |
Ben Lindstrom | 73ab9ba | 2002-03-22 01:27:35 +0000 | [diff] [blame] | 1368 | - provos@cvs.openbsd.org 2002/03/18 01:12:14 |
| 1369 | [auth.h auth1.c auth2.c sshd.c] |
| 1370 | have the authentication functions return the authentication context |
| 1371 | and then do_authenticated; okay millert@ |
Ben Lindstrom | abf3144 | 2002-03-22 01:30:40 +0000 | [diff] [blame] | 1372 | - dugsong@cvs.openbsd.org 2002/03/18 01:30:10 |
| 1373 | [auth-krb4.c] |
| 1374 | set client to NULL after xfree(), from Rolf Braun |
| 1375 | <rbraun+ssh@andrew.cmu.edu> |
Ben Lindstrom | b481e13 | 2002-03-22 01:35:47 +0000 | [diff] [blame] | 1376 | - provos@cvs.openbsd.org 2002/03/18 03:41:08 |
| 1377 | [auth.c session.c] |
| 1378 | move auth_approval into getpwnamallow with help from millert@ |
Ben Lindstrom | 212faca | 2002-03-22 01:39:44 +0000 | [diff] [blame] | 1379 | - markus@cvs.openbsd.org 2002/03/18 17:13:15 |
| 1380 | [cipher.c cipher.h] |
| 1381 | export/import cipher states; needed by ssh-privsep |
Ben Lindstrom | f6027d3 | 2002-03-22 01:42:04 +0000 | [diff] [blame] | 1382 | - markus@cvs.openbsd.org 2002/03/18 17:16:38 |
| 1383 | [packet.c packet.h] |
| 1384 | export/import cipher state, iv and ssh2 seqnr; needed by ssh-privsep |
Ben Lindstrom | a674e8d | 2002-03-22 01:45:53 +0000 | [diff] [blame] | 1385 | - markus@cvs.openbsd.org 2002/03/18 17:23:31 |
| 1386 | [key.c key.h] |
| 1387 | add key_demote() for ssh-privsep |
Ben Lindstrom | 88aa1b4 | 2002-03-22 01:47:52 +0000 | [diff] [blame] | 1388 | - provos@cvs.openbsd.org 2002/03/18 17:25:29 |
| 1389 | [bufaux.c bufaux.h] |
| 1390 | buffer_skip_string and extra sanity checking; needed by ssh-privsep |
Ben Lindstrom | 0f345f5 | 2002-03-22 01:51:24 +0000 | [diff] [blame] | 1391 | - provos@cvs.openbsd.org 2002/03/18 17:31:54 |
| 1392 | [compress.c] |
| 1393 | export compression streams for ssh-privsep |
Ben Lindstrom | 7a2073c | 2002-03-22 02:30:41 +0000 | [diff] [blame] | 1394 | - provos@cvs.openbsd.org 2002/03/18 17:50:31 |
Damien Miller | ee5e3b2 | 2002-05-15 10:08:17 +1000 | [diff] [blame] | 1395 | [auth-bsdauth.c auth-options.c auth-rh-rsa.c auth-rsa.c] |
| 1396 | [auth-skey.c auth.h auth1.c auth2-chall.c auth2.c kex.c kex.h kexdh.c] |
| 1397 | [kexgex.c servconf.c] |
| 1398 | [session.h servconf.h serverloop.c session.c sshd.c] |
| 1399 | integrate privilege separated openssh; its turned off by default |
| 1400 | for now. work done by me and markus@ |
Ben Lindstrom | 000dda5 | 2002-03-22 02:33:12 +0000 | [diff] [blame] | 1401 | - provos@cvs.openbsd.org 2002/03/18 17:53:08 |
| 1402 | [sshd.8] |
| 1403 | credits for privsep |
Ben Lindstrom | 191c8e5 | 2002-03-22 02:37:50 +0000 | [diff] [blame] | 1404 | - provos@cvs.openbsd.org 2002/03/18 17:59:09 |
| 1405 | [sshd.8] |
| 1406 | document UsePrivilegeSeparation |
Ben Lindstrom | 01426a6 | 2002-03-22 02:40:03 +0000 | [diff] [blame] | 1407 | - stevesk@cvs.openbsd.org 2002/03/18 23:52:51 |
| 1408 | [servconf.c] |
| 1409 | UnprivUser/UnprivGroup usable now--specify numeric user/group; ok |
| 1410 | provos@ |
Ben Lindstrom | 7a7edf7 | 2002-03-22 02:42:37 +0000 | [diff] [blame] | 1411 | - stevesk@cvs.openbsd.org 2002/03/19 03:03:43 |
| 1412 | [pathnames.h servconf.c servconf.h sshd.c] |
| 1413 | _PATH_PRIVSEP_CHROOT_DIR; ok provos@ |
Ben Lindstrom | 85520a6 | 2002-03-22 02:44:40 +0000 | [diff] [blame] | 1414 | - stevesk@cvs.openbsd.org 2002/03/19 05:23:08 |
| 1415 | [sshd.8] |
| 1416 | Banner has no default. |
Ben Lindstrom | cb1f60e | 2002-03-22 02:47:28 +0000 | [diff] [blame] | 1417 | - mpech@cvs.openbsd.org 2002/03/19 06:32:56 |
| 1418 | [sftp-int.c] |
| 1419 | use xfree() after xstrdup(). |
| 1420 | |
| 1421 | markus@ ok |
Ben Lindstrom | 0810519 | 2002-03-22 02:50:06 +0000 | [diff] [blame] | 1422 | - markus@cvs.openbsd.org 2002/03/19 10:35:39 |
| 1423 | [auth-options.c auth.h session.c session.h sshd.c] |
| 1424 | clean up prototypes |
Ben Lindstrom | 6328ab3 | 2002-03-22 02:54:23 +0000 | [diff] [blame] | 1425 | - markus@cvs.openbsd.org 2002/03/19 10:49:35 |
Damien Miller | ee5e3b2 | 2002-05-15 10:08:17 +1000 | [diff] [blame] | 1426 | [auth-krb5.c auth-rh-rsa.c auth.c cipher.c key.c misc.h] |
| 1427 | [packet.c session.c sftp-client.c sftp-glob.h sftp.c ssh-add.c ssh.c] |
| 1428 | [sshconnect2.c sshd.c ttymodes.c] |
Ben Lindstrom | 6328ab3 | 2002-03-22 02:54:23 +0000 | [diff] [blame] | 1429 | KNF whitespace |
Ben Lindstrom | 7ebb635 | 2002-03-22 03:04:08 +0000 | [diff] [blame] | 1430 | - markus@cvs.openbsd.org 2002/03/19 14:27:39 |
| 1431 | [auth.c auth1.c auth2.c] |
| 1432 | make getpwnamallow() allways call pwcopy() |
Ben Lindstrom | f34e4eb | 2002-03-22 03:08:30 +0000 | [diff] [blame] | 1433 | - markus@cvs.openbsd.org 2002/03/19 15:31:47 |
| 1434 | [auth.c] |
| 1435 | check for NULL; from provos@ |
Ben Lindstrom | c743134 | 2002-03-22 03:11:49 +0000 | [diff] [blame] | 1436 | - stevesk@cvs.openbsd.org 2002/03/20 19:12:25 |
| 1437 | [servconf.c servconf.h ssh.h sshd.c] |
| 1438 | for unprivileged user, group do: |
| 1439 | pw=getpwnam(SSH_PRIVSEP_USER); do_setusercontext(pw). ok provos@ |
Ben Lindstrom | 58b391b | 2002-03-22 03:21:16 +0000 | [diff] [blame] | 1440 | - stevesk@cvs.openbsd.org 2002/03/20 21:08:08 |
| 1441 | [sshd.c] |
| 1442 | strerror() on chdir() fail; ok provos@ |
Ben Lindstrom | 1ee9ec3 | 2002-03-22 03:14:45 +0000 | [diff] [blame] | 1443 | - markus@cvs.openbsd.org 2002/03/21 10:21:20 |
| 1444 | [ssh-add.c] |
| 1445 | ignore errors for nonexisting default keys in ssh-add, |
| 1446 | fixes http://bugzilla.mindrot.org/show_bug.cgi?id=158 |
Ben Lindstrom | 5589f4b | 2002-03-22 03:24:32 +0000 | [diff] [blame] | 1447 | - jakob@cvs.openbsd.org 2002/03/21 15:17:26 |
| 1448 | [clientloop.c ssh.1] |
| 1449 | add built-in command line for adding new port forwardings on the fly. |
| 1450 | based on a patch from brian wellington. ok markus@. |
Ben Lindstrom | 0b675b1 | 2002-03-22 03:28:11 +0000 | [diff] [blame] | 1451 | - markus@cvs.openbsd.org 2002/03/21 16:38:06 |
| 1452 | [scard.c] |
| 1453 | make compile w/ openssl 0.9.7 |
Ben Lindstrom | 70e3ad8 | 2002-03-22 03:33:43 +0000 | [diff] [blame] | 1454 | - markus@cvs.openbsd.org 2002/03/21 16:54:53 |
| 1455 | [scard.c scard.h ssh-keygen.c] |
| 1456 | move key upload to scard.[ch] |
| 1457 | - markus@cvs.openbsd.org 2002/03/21 16:57:15 |
| 1458 | [scard.c] |
| 1459 | remove const |
Ben Lindstrom | eda98a7 | 2002-03-22 03:35:48 +0000 | [diff] [blame] | 1460 | - markus@cvs.openbsd.org 2002/03/21 16:58:13 |
| 1461 | [clientloop.c] |
| 1462 | remove unused |
Ben Lindstrom | 818659a | 2002-03-22 03:38:35 +0000 | [diff] [blame] | 1463 | - rees@cvs.openbsd.org 2002/03/21 18:08:15 |
| 1464 | [scard.c] |
| 1465 | In sc_put_key(), sc_reader_id should be id. |
Ben Lindstrom | fa1336f | 2002-03-22 03:40:58 +0000 | [diff] [blame] | 1466 | - markus@cvs.openbsd.org 2002/03/21 20:51:12 |
| 1467 | [sshd_config] |
| 1468 | add privsep (off) |
Ben Lindstrom | 943481c | 2002-03-22 03:43:46 +0000 | [diff] [blame] | 1469 | - markus@cvs.openbsd.org 2002/03/21 21:23:34 |
| 1470 | [sshd.c] |
| 1471 | add privsep_preauth() and remove 1 goto; ok provos@ |
Ben Lindstrom | 266ec63 | 2002-03-22 03:47:38 +0000 | [diff] [blame] | 1472 | - rees@cvs.openbsd.org 2002/03/21 21:54:34 |
| 1473 | [scard.c scard.h ssh-keygen.c] |
| 1474 | Add PIN-protection for secret key. |
Ben Lindstrom | ba72d30 | 2002-03-22 03:51:06 +0000 | [diff] [blame] | 1475 | - rees@cvs.openbsd.org 2002/03/21 22:44:05 |
| 1476 | [authfd.c authfd.h ssh-add.c ssh-agent.c ssh.c] |
| 1477 | Add PIN-protection for secret key. |
Ben Lindstrom | 681d932 | 2002-03-22 03:53:00 +0000 | [diff] [blame] | 1478 | - markus@cvs.openbsd.org 2002/03/21 23:07:37 |
| 1479 | [clientloop.c] |
| 1480 | remove unused, sync w/ cmdline patch in my tree. |
Ben Lindstrom | fa1336f | 2002-03-22 03:40:58 +0000 | [diff] [blame] | 1481 | |
Tim Rice | 88f2ab5 | 2002-03-17 12:17:34 -0800 | [diff] [blame] | 1482 | 20020317 |
Damien Miller | 860e929 | 2002-05-15 10:12:29 +1000 | [diff] [blame] | 1483 | - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is |
| 1484 | wanted, warn if directory does not exist. Put system directories in |
| 1485 | front of PATH for finding entorpy commands. |
Tim Rice | 3a42346 | 2002-03-17 14:05:24 -0800 | [diff] [blame] | 1486 | - (tim) [contrib/aix/buildbff.sh contrib/aix/inventory.sh] AIX package |
| 1487 | build fixes. Patch by Darren Tucker <dtucker@zip.com.au> |
| 1488 | [contrib/solaris/buildpkg.sh] add missing dirs to SYSTEM_DIR. Have |
| 1489 | postinstall check for $piddir and add if necessary. |
Tim Rice | 88f2ab5 | 2002-03-17 12:17:34 -0800 | [diff] [blame] | 1490 | |
Tim Rice | 29bdd2c | 2002-03-11 20:55:53 -0800 | [diff] [blame] | 1491 | 20020311 |
| 1492 | - (tim) [contrib/solaris/buildpkg.sh, contrib/solaris/README] Updated to |
| 1493 | build on all platforms that support SVR4 style package tools. Now runs |
| 1494 | from build dir. Parts are based on patches from Antonio Navarro, and |
| 1495 | Darren Tucker. |
| 1496 | |
Damien Miller | ff8f94c | 2002-03-11 10:48:53 +1100 | [diff] [blame] | 1497 | 20020308 |
Damien Miller | c7375ac | 2002-03-11 10:51:17 +1100 | [diff] [blame] | 1498 | - (djm) Revert bits of Markus' OpenSSL compat patch which was |
| 1499 | accidentally committed. |
| 1500 | - (djm) Add Markus' patch for compat wih OpenSSL < 0.9.6. |
| 1501 | Known issue: Blowfish for SSH1 does not work |
Kevin Steves | 5819307 | 2002-03-11 00:16:34 +0000 | [diff] [blame] | 1502 | - (stevesk) entropy.c: typo in debug message |
Damien Miller | 4a10d2e | 2002-03-11 22:53:29 +1100 | [diff] [blame] | 1503 | - (djm) ssh-keygen -i needs seeded RNG; report from markus@ |
Damien Miller | ff8f94c | 2002-03-11 10:48:53 +1100 | [diff] [blame] | 1504 | |
Ben Lindstrom | 0a4f754 | 2002-08-20 18:36:25 +0000 | [diff] [blame^] | 1505 | $Id: ChangeLog,v 1.2415 2002/08/20 18:36:25 mouring Exp $ |