summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* - pyr@cvs.openbsd.org 2008/05/07 06:43:35Damien Miller2008-05-192-2/+6
| | | | | [sshd_config] push the sshd_config bits in, spotted by ajacoutot@
* - pyr@cvs.openbsd.org 2008/05/07 05:49:37Damien Miller2008-05-195-9/+38
| | | | | | | | | | | [servconf.c servconf.h session.c sshd_config.5] Enable the AllowAgentForwarding option in sshd_config (global and match context), to specify if agents should be permitted on the server. As the man page states: ``Note that disabling Agent forwarding does not improve security unless users are also denied shell access, as they can always install their own forwarders.'' ok djm@, ok and a mild frown markus@
* - djm@cvs.openbsd.org 2008/04/30 10:14:03Damien Miller2008-05-193-6/+10
| | | | | | [ssh-keyscan.1 ssh-keyscan.c] default to rsa (protocol 2) keys, instead of rsa1 keys; spotted by larsnooden AT openoffice.org
* - otto@cvs.openbsd.org 2008/04/29 11:20:31Damien Miller2008-05-192-5/+5
| | | | | [monitor_mm.h] garbage collect two unused fields in struct mm_master; ok markus@
* - djm@cvs.openbsd.org 2008/04/18 22:01:33Damien Miller2008-05-192-3/+6
| | | | | [session.c] remove unneccessary parentheses
* - jmc@cvs.openbsd.org 2008/04/18 17:15:47Damien Miller2008-05-192-4/+8
| | | | | [sftp.1] macro fixage;
* - djm@cvs.openbsd.org 2008/04/18 12:32:11Damien Miller2008-05-197-15/+339
| | | | | | | | | | | [sftp-client.c sftp-client.h sftp-server.c sftp.1 sftp.c sftp.h] introduce sftp extension methods statvfs@openssh.com and fstatvfs@openssh.com that implement statvfs(2)-like operations, based on a patch from miklos AT szeredi.hu (bz#1399) also add a "df" command to the sftp client that uses the statvfs@openssh.com to produce a df(1)-like display of filesystem space and inode utilisation ok markus@
* - (djm) OpenBSD CVS SyncDamien Miller2008-05-193-28/+17
| | | | | | | | | - djm@cvs.openbsd.org 2008/04/13 00:22:17 [dh.c sshd.c] Use arc4random_buf() when requesting more than a single word of output Use arc4random_uniform() when the desired random number upper bound is not a power of two ok deraadt@ millert@
* - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c]Damien Miller2008-05-194-4/+82
| | | | | [configure.ac] Implement arc4random_buf(), import implementation of arc4random_uniform() from OpenBSD
* - djm@cvs.openbsd.org 2008/04/05 02:46:02Damien Miller2008-05-192-4/+8
| | | | | [sshd_config.5] HostbasedAuthentication is supported under Match too
* - djm@cvs.openbsd.org 2008/04/04 06:44:26Damien Miller2008-05-192-36/+7
| | | | | | [sshd_config.5] oops, some unrelated stuff crept into that commit - backout. spotted by jmc@
* - (djm) OpenBSD CVS SyncDamien Miller2008-05-192-3/+44
| | | | | | | - djm@cvs.openbsd.org 2008/04/04 05:14:38 [sshd_config.5] ChrootDirectory is supported in Match blocks (in fact, it is most useful there). Spotted by Minstrel AT minstrel.org.uk
* - (djm) Force string arguments to replacement setproctitle() thoughDamien Miller2008-05-162-5/+11
| | | | strnvis first. Ok dtucker@
* - (djm) [openbsd-compat/bsd-poll.c] Include stdlib.h to avoid compile-Damien Miller2008-04-042-2/+7
| | | | time warnings on LynxOS. Patch from ops AT iki.fi
* - (djm) Release 5.0p1V_5_0_P1Damien Miller2008-04-031-1/+2
|
* - (djm) [README] Update link to release notesDamien Miller2008-04-032-3/+4
|
* - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller2008-04-034-6/+17
| | | | [contrib/suse/openssh.spec] Crank version numbers in RPM spec files
* - djm@cvs.openbsd.org 2008/04/03 09:50:14Damien Miller2008-04-032-3/+6
| | | | | [version.h] openssh-5.0
* - jmc@cvs.openbsd.org 2008/03/27 22:37:57Damien Miller2008-04-032-4/+7
| | | | | [sshd.8] remove trailing whitespace;
* - markus@cvs.openbsd.org 2008/04/02 15:36:51Damien Miller2008-04-022-5/+9
| | | | | | [channels.c] avoid possible hijacking of x11-forwarded connections (back out 1.183) CVE-2008-1483; ok djm@
* - (djm) Release 4.9p1Damien Miller2008-03-271-1/+2
|
* - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller2008-03-274-6/+8
| | | | [contrib/suse/openssh.spec] Crank version numbers in RPM spec files
* - (djm) [README] Update link to release notesDamien Miller2008-03-272-3/+4
|
* - (djm) [regress/Makefile] cleanup PuTTY interop test droppingsDamien Miller2008-03-272-2/+6
|
* - (djm) [configure.ac] --with-selinux tooDamien Miller2008-03-272-4/+5
|
* - (djm) [configure.ac] fix alignment of --without-stackprotect descriptionDamien Miller2008-03-272-4/+5
|
* - djm@cvs.openbsd.org 2008/03/24 21:46:54Damien Miller2008-03-272-13/+6
| | | | | | [regress/sftp-badcmds.sh] disable no-replace rename test now that we prefer a POSIX rename; spotted by dkrause@
* - djm@cvs.openbsd.org 2008/03/27 00:16:49Damien Miller2008-03-272-3/+6
| | | | | [version.h] openssh-4.9
* - djm@cvs.openbsd.org 2008/03/26 21:28:14Damien Miller2008-03-275-7/+23
| | | | | [auth-options.c auth-options.h session.c sshd.8] add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc
* - djm@cvs.openbsd.org 2008/03/25 23:01:41Damien Miller2008-03-272-3/+6
| | | | | [session.c] last patch had backwards test; spotted by termim AT gmail.com
* - djm@cvs.openbsd.org 2008/03/25 11:58:02Damien Miller2008-03-273-7/+14
| | | | | | [session.c sshd_config.5] ignore ~/.ssh/rc if a sshd_config ForceCommand is specified; from dtucker@ ok deraadt@ djm@
* - deraadt@cvs.openbsd.org 2008/03/24 16:11:07Damien Miller2008-03-272-4/+11
| | | | | | | | | [monitor_fdpass.c] msg_controllen has to be CMSG_SPACE so that the kernel can account for each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis
* - djm@cvs.openbsd.org 2008/03/23 12:54:01Damien Miller2008-03-272-7/+27
| | | | | | | | | | [sftp-client.c] prefer POSIX-style file renaming over filexfer rename behaviour if the server supports the posix-rename@openssh.com extension. Note that the old (filexfer) behaviour would refuse to clobber an existing file. Users who depended on this should adjust their sftp(1) usage. ok deraadt@ markus@
* - deraadt@cvs.openbsd.org 2008/03/15 16:19:02Damien Miller2008-03-272-4/+9
| | | | | | | [monitor_fdpass.c] Repair the simple cases for msg_controllen where it should just be CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer
* - deraadt@cvs.openbsd.org 2008/03/13 01:49:53Damien Miller2008-03-272-9/+14
| | | | | | [monitor_fdpass.c] Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due to an extensive discussion with otto, kettenis, millert, and hshoexer
* - jmc@cvs.openbsd.org 2008/02/11 07:58:28Damien Miller2008-03-274-7/+12
| | | | | | [ssh.1 sshd.8 sshd_config.5] bump Mdocdate for pages committed in "febuary", necessary because of a typo in rcs.c;
* - (djm) Fix RCS ident in sftp-server-main.cDamien Miller2008-03-272-2/+3
|
* - (dtucker) Cache selinux status earlier so we know if it's enabled after aDarren Tucker2008-03-264-4/+16
| | | | | | chroot. Allows ChrootDirectory to work with selinux support compiled in but not enabled. Using it with selinux enabled will require some selinux support inside the chroot. "looks sane" djm@
* - (djm) [session.c] Relocate incorrectly-placed closefrom() that was causingDamien Miller2008-03-152-3/+5
| | | | crashes when used with ChrootDirectory
* - (djm) [regress/test-exec.sh] Quote putty-related variables in case they areDamien Miller2008-03-142-4/+10
| | | | | | empty; report and patch from Peter Stuge - (djm) [regress/test-exec.sh] Silence noise from detection of putty commands; report from Peter Stuge
* - (tim) [regress/localcommand.sh] Shell portability fix. Reported by imorgan atTim Rice2008-03-142-2/+4
| | | | nas.nasa.gov
* - (tim) [regress/sftp-cmds.sh] s/cd/lcd/ in lls test. Reported byTim Rice2008-03-142-2/+7
| | | | | vinschen at redhat.com. Add () to put echo commands in subshell for lls test I mistakenly left out of last commit.
* forgot to add vinschen at redhat.com on last commitTim Rice2008-03-141-2/+2
|
* - (tim) [regress/sftp-cmds.sh regress/ssh2putty.sh] Shell portability fixesTim Rice2008-03-143-5/+9
| | | | from imorgan at nas.nasa.gov
* - (tim) [scp.c] Use poll.h if available, fall back to sys/poll.h if not. PatchTim Rice2008-03-142-3/+9
| | | | by vinschen at redhat.com.
* - (djm) [Makefile.in regress/test-exec.sh] Find installed plink(1) andDamien Miller2008-03-133-4/+18
| | | | puttygen(1) by $PATH
* - (djm) [Makefile.in regress/Makefile] Fix interop-tests target (note toDamien Miller2008-03-133-5/+9
| | | | self: make changes to Makefile.in next time, not the generated Makefile).
* - djm@cvs.openbsd.org 2007/12/21 04:13:53Damien Miller2008-03-127-7/+196
| | | | | | | | [regress/Makefile regress/test-exec.sh regress/putty-ciphers.sh] [regress/putty-kex.sh regress/putty-transfer.sh regress/ssh2putty.sh] basic (crypto, kex and transfer) interop regression tests against putty To run these, install putty and run "make interop-tests" from the build directory - the tests aren't run by default yet.
* - djm@cvs.openbsd.org 2007/12/12 05:04:03Damien Miller2008-03-122-5/+13
| | | | | | | [regress/sftp-cmds.sh] unbreak lls command and add a regress test that would have caught the breakage; spotted by mouring@ NB. sftp code change already committed.
* - jmc@cvs.openbsd.org 2007/11/25 15:35:09Damien Miller2008-03-123-5/+10
| | | | | | | [regress/agent-getpeereid.sh regress/agent.sh] more existant -> existent, from Martynas Venckus; pfctl changes: ok henning ssh changes: ok deraadt
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 13:56:02 +0100