Commit Graph

293 Commits

Author SHA1 Message Date
itojun
ba613513e8 sync with openssh 2.9.9 around 9/27. 2001-09-27 03:24:01 +00:00
itojun
bcdc367f57 OpenSSH 2.9.9 as of 2001/9/27 2001-09-27 02:00:33 +00:00
itojun
00489c2412 apply the following advisory. 2.9.9 will be imported soon.
Subject: OpenSSH Security Advisory (adv.option)
From: Markus Friedl <markus@openbsd.org>
Message-ID: <20010926231823.A15229@folly>
2001-09-27 00:12:42 +00:00
wiz
4c99916337 va_{start,end} audit:
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).

Improved by comments from enami and christos -- thanks!

Heimdal/krb4/KAME changes already fed back, rest to follow.

Inspired by, but not not based on, OpenBSD.
2001-09-24 13:22:25 +00:00
wiz
f6f3964e5e Remove formatted man pages. Ok'd by joda. 2001-09-24 12:37:41 +00:00
assar
7b980ee03e remove files that were not part of last import 2001-09-23 05:03:52 +00:00
assar
ea130a2327 removed not-used files
noticed by Bernd Ernesti <netbsd@veego.de>
2001-09-21 14:40:30 +00:00
thorpej
123c0ecfea Printf formats on LP64. 2001-09-18 03:11:22 +00:00
assar
c6cbe4853a fix merge-o's 2001-09-17 15:06:48 +00:00
assar
5b9616a3e3 merge heimdal 0.4e 2001-09-17 12:32:33 +00:00
assar
e4d8a8f3dd import of heimdal 0.4e 2001-09-17 12:24:30 +00:00
assar
d318b56bd0 merge krb4-1.1 2001-09-17 12:21:41 +00:00
assar
1877630d24 import krb4-1.1 2001-09-17 12:09:38 +00:00
cjs
d814de63b5 For consistency, make permit_root_login default to PERMIT_NO if not specified
in the config file. Thanks to itojun for pointing this out.
2001-09-03 04:23:10 +00:00
simonb
8d327e93bf Include <string.h> for memcpy() prototype. 2001-09-02 08:45:22 +00:00
itojun
ee42f09d5b upgrade to KAME 2001/8/31. 2001-08-31 10:36:08 +00:00
itojun
9e9f5f3086 KAME as of 2001/8/31 2001-08-31 09:59:03 +00:00
cjs
da09d12c1e Document that PermitRootLogin's default is now "no". 2001-08-31 09:00:29 +00:00
cjs
894936aa50 Do not permit direct root logins. This makes ssh consistent with
NetBSD's default security policy in this area: if you are not on
a secure terminal, you must be able to authenticate as a user in
the "wheel" group before you may attempt to authenticate as root
using the root password.
2001-08-31 08:16:24 +00:00
itojun
e99543f805 validate certs correctly. sync with kame 2001-08-06 08:17:40 +00:00
itojun
0f6cbd66d3 need string.h for alpha. from chuck 2001-08-06 05:48:50 +00:00
itojun
d4d587fb31 (should) fix build on alpha. From: Chuck Silvers <chuq@chuq.com> 2001-08-05 18:52:13 +00:00
garbled
7c0934f7f5 While writing sushi's support for sshd.conf, I found out that the manpage
lies wrt to MaxStartups.  Make the manpage match the code.
2001-08-03 02:29:07 +00:00
itojun
5abda287b4 Get rid of "Os KAME". 2001-08-02 12:19:45 +00:00
itojun
366bd307b0 sync with 2001/8/2 KAME racoon/libipsec. 2001-08-02 12:15:00 +00:00
itojun
7295c743a4 bring in latest racoon/libipsec from KAME. lots of lots of stability fixes. 2001-08-02 12:06:08 +00:00
manu
3f1d5c2789 sshd is now able to log in an user if the filesystem is readonly and the tty
owned by root. Note that the tty still must be mode 620, and sshd does not
check which group owns the tty (more problems here?).
This closes NetBSD PR bin/13499
The fix has been commited to OpenSSH CVS. See OpenBSD's PR user/1946.
2001-07-27 23:34:27 +00:00
assar
76371341d1 remove a (potentially) double free 2001-07-18 21:54:56 +00:00
itojun
7fc834dc03 upgrade to 0.9.6b. no shlib major/minor bump is necessary. 2001-07-11 06:50:53 +00:00
itojun
0eb42056bd OpenSSL 0.9.6b 2001-07-11 03:54:20 +00:00
itojun
a549080f85 OpenSSL 0.9.6b 2001-07-11 03:53:32 +00:00
wiz
c1f85780da Remove another one, noted by Love <lha@stacken.kth.se>, confirmed by thorpej. 2001-07-10 21:52:46 +00:00
itojun
7d076b538c fix PRNG weakness. the workaround presented on bugtraq posting. 2001-07-10 14:01:26 +00:00
wiz
eed063b542 Remove some items that have been done, and improve description on some
others.
2001-07-09 21:01:31 +00:00
wiz
7615e78c24 Remove formatted man pages. 2001-07-08 19:20:55 +00:00
hubertf
f5bb393643 add missing .El 2001-07-05 20:47:31 +00:00
hubertf
d8ec602681 Note: just because our macros/groff/whatever terminates .Bl internall for a
new .Sh doesn't mean the ending .El should be omitted
2001-06-26 00:52:59 +00:00
hubertf
d91e447e6b PRevent one of these:
List open at EOF -- A .Bl directive has no matching .El
2001-06-25 23:37:27 +00:00
wiz
419e44fdc2 Mostly formatting fixes. 2001-06-24 17:44:11 +00:00
veego
7b726945ac There is no photurisd(8). 2001-06-24 17:29:43 +00:00
assar
f9feddfb52 add string.h, noted by Staffan Thomen <duck@multi.fi> 2001-06-23 22:42:43 +00:00
itojun
69d60502fe upgrade to openssh 2.9, around 2001/6/24 (from openbsd usr.bin/ssh).
- authorized_keys2 and known_hosts2 are obsoleted, and integrated
  into those without "2".
- file name change, /etc/primes -> /etc/moduli
- cleanups
2001-06-23 19:37:38 +00:00
itojun
0d521994cf OpenBSD 2001/6/24 2001-06-23 19:09:44 +00:00
itojun
6cc43ed622 OpenSSH 2.9 as of 2001/6/24 2001-06-23 16:36:22 +00:00
itojun
5324608adc reject expired password/account. warn if interactive && about to expire.
ala login(1).  From: Brian Poole <raj@cerias.purdue.edu>

XXX code duplicate with login(1) - should be solved by BSD AUTH code integration
2001-06-23 08:08:04 +00:00
itojun
fed4515da9 bump netbsd-local version number to identify X11 "cookies" fix 2001-06-20 07:49:45 +00:00
assar
4b1c7f1857 update generated heimdal include files for 0.3f
update Makefile infrastructure for 0.3f
bump shared library versions
fix some merge problems
2001-06-20 02:01:18 +00:00
assar
df54fb31c9 merge in conflicts after 0.3f import 2001-06-19 22:39:52 +00:00
assar
c6c55d41cd import of heimdal 0.3f 2001-06-19 22:08:08 +00:00
assar
f9ab899fe6 import of heimdal 0.3f 2001-06-19 22:07:32 +00:00