Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Change the current working directory to be inside the jail created by | cperciva | 2010-05-27 | 1 | -3/+1 |
| | | | | | | | | | | | | | | the jail(8) command. [10:04] Fix a one-NUL-byte buffer overflow in libopie. [10:05] Correctly sanity-check a buffer length in nfs mount. [10:06] Approved by: so (cperciva) Approved by: re (kensmith) Security: FreeBSD-SA-10:04.jail Security: FreeBSD-SA-10:05.opie Security: FreeBSD-SA-10:06.nfsclient | ||||
* | Don't include <utmp.h> when using <utmpx.h>. | ed | 2010-01-11 | 3 | -3/+6 |
| | | | | | | | libopie includes both <utmp.h> and <utmpx.h> in this case and uses some #defines to let the code use struct utmpx and its utility functions. We'd better not include <utmp.h> here, because maybe it will not be present in the future. | ||||
* | - Remove non-existing reference | gabor | 2009-01-30 | 1 | -2/+1 |
| | | | | | | | | - Fix trailing comma PR: docs/85118 Submitted by: vs MFC after: 3 days | ||||
* | Add missing code needed for the detection of IPSec packet replays. [1] | cperciva | 2006-03-22 | 1 | -1/+8 |
| | | | | | | | | Correctly identify the user running opiepasswd(1) when the login name differs from the account name. [2] Security: FreeBSD-SA-06:11.ipsec [1] Security: FreeBSD-SA-06:12.opie [2] | ||||
* | Create /etc/opiekeys with 0600, not 0644 | ache | 2005-07-29 | 2 | -3/+7 |
| | | | | PR: 84221 | ||||
* | FreeBSD does not use this code, but ftpd_popen() contains a buffer overflow. | kris | 2003-07-13 | 1 | -4/+10 |
| | | | | | | | | We might as well patch it. Submitted by: Przemyslaw Frasunek <venglin@freebsd.lublin.pl> PR: bin/23352 MFC After: The average time before an unpatched Windows 2000 server gets owned | ||||
* | When computing a new seed for an existing user, opienewseed() would | des | 2003-01-22 | 1 | -5/+4 |
| | | | | | | | | | | | incorrectly compute the length of the numeric portion of the previous seed, causing the new seed to be one character shorter than the old one. This patch has been submitted to the vendor; I'm committing it right away since the file is already off the vendor branch. MFC after: 3 days | ||||
* | Resolve conflicts. | markm | 2002-03-21 | 19 | -196/+522 |
| | |||||
* | This commit was generated by cvs2svn to compensate for changes in r92906, | markm | 2002-03-21 | 52 | -640/+1873 |
|\ | | | | | | | which included commits to RCS files with non-trunk default branches. | ||||
| * | Vendor import of OPIE 2.4 | markm | 2002-03-21 | 71 | -859/+2420 |
| | | |||||
* | | Zeroing memset() in opiechallenge() really is not needed because it is the | ache | 2002-01-24 | 1 | -2/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | very first thing immediately following opielookup() does being entered, i.e. look at this: int opielookup FUNCTION((opie, principal), struct opie *opie AND char *principal ) { int i; memset(opie, 0, sizeof(struct opie)); ... | ||||
* | | Make the -a flag to opiekey(1) actually work as advertised. | joerg | 2002-01-09 | 1 | -1/+1 |
| | | | | | | | | | | Reviewed by: ache, audit, security MFC after: 1 week | ||||
* | | Repo copied to /usr/src/lib/libopie/ | ache | 2002-01-03 | 1 | -379/+0 |
| | | |||||
* | | Add heuristic to detect SSH connection (in the same style as other | ache | 2001-08-29 | 1 | -0/+5 |
| | | | | | | | | | | | | heuristics already here which not supposed to be secure, just helpers). Approved by: security@ silence | ||||
* | | Fix overflow problem when giving a username that is too long. | markm | 2001-08-20 | 1 | -1/+9 |
| | | | | | | | | Also minor declaration/header fixes while auditing the code. | ||||
* | | Fix uninitialized "force" variable. | ache | 2001-08-13 | 1 | -1/+4 |
| | | | | | | | | | | | | PR: 23203 Submitted by: fenner Approved by: markm | ||||
* | | Fix SHA1 hashing. | markm | 2001-07-14 | 2 | -21/+17 |
| | | |||||
* | | Usse a better method to get a user's credentials, as uid's may be | markm | 2001-07-14 | 1 | -1/+3 |
| | | | | | | | | | | | | legally duplicated. Requested by: ache | ||||
* | | Eliminate troff(1) warnings that were hiding some useful text. | ru | 2001-07-12 | 1 | -1/+1 |
| | | |||||
* | | Make the similar changes as in our keyinfo, i.e. allow user to get his own | ache | 2001-06-23 | 1 | -10/+16 |
| | | | | | | | | | | sequence and allow root to get everybody's one. Before this change user can't get his own sequence, root required. | ||||
* | | This commit was generated by cvs2svn to compensate for changes in r73569, | kris | 2001-03-05 | 2 | -2/+2 |
|\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | ||||
| * | Import patch to fix non-constant format string abuses. This patch was | kris | 2001-03-05 | 2 | -2/+2 |
| | | | | | | | | approved by the vendor and will be present in future releases. | ||||
* | | Correct security hole in setproctitle(). We don't compile this code, but | kris | 2000-07-10 | 1 | -3/+3 |
| | | | | | | | | having the security hole there makes my skin itch. | ||||
* | | Add some extra functions adapted from OpenBSD, in preparation for | kris | 2000-05-15 | 1 | -1/+8 |
| | | | | | | | | OpenSSH OPIE support. | ||||
* | | Allow applications to disable the installation of the atexit() handler | kris | 2000-04-17 | 2 | -2/+13 |
| | | | | | | | | | | | | which cleans up OPIE lockfiles. This is required for pam_opie. Submitted by: Jim Bloom <bloom@acm.org> | ||||
* | | Resolve conflicts | kris | 2000-04-10 | 13 | -28/+78 |
| | | |||||
* | | This commit was generated by cvs2svn to compensate for changes in r59118, | kris | 2000-04-10 | 56 | -500/+571 |
|\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | ||||
| * | Upgrade to OPIE 2.32, from http://www.inner.net/pub/opie/ | kris | 2000-04-10 | 69 | -529/+631 |
| | | |||||
* | | - Use proper markup for a section header. | chris | 2000-01-19 | 1 | -5/+7 |
| | | | | | | | | | | | | | | - Replace nonexistent OPIE_PROMPT_MAX with OPIE_CHALLENGE_MAX PR: 16209 Submitted by: Tetsuro Furuya <tfuruya@ppp142197.asahi-net.or.jp> | ||||
* | | sprintf -> snprintf | imp | 1998-09-09 | 1 | -12/+13 |
| | | |||||
* | | Fixed printf format errors. | bde | 1998-06-30 | 1 | -1/+1 |
| | | |||||
* | | 'They They' -> 'They' | steve | 1998-06-14 | 1 | -1/+1 |
| | | | | | | | | | | PR: 6912 Submitted by: Stefan Eggers <seggers@semyam.dinoco.de> | ||||
* | | YTK fix. | alex | 1997-12-22 | 1 | -2/+2 |
| | | |||||
* | | Make this manpage reveal its true identity. A diff of these | steve | 1997-11-27 | 1 | -2/+2 |
| | | | | | | | | | | | | | | changes has also been sent to opie-bugs@inner.net. PR: 5129 Submitted by: jkh | ||||
* | | Move locks from /etc/opielocks to /var/run/opielocks to keep | ache | 1997-10-01 | 1 | -1/+1 |
| | | | | | | | | /etc non-writeable as possible | ||||
* | | This commit was generated by cvs2svn to compensate for changes in r29975, | ache | 1997-09-29 | 1 | -0/+18 |
|\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | ||||
| * | Add setutent.c | ache | 1997-09-29 | 1 | -0/+18 |
| | | |||||
* | | Oops, __END_DECLS was in wrong place | ache | 1997-09-29 | 1 | -1/+1 |
| | | |||||
* | | Not used in this version | ache | 1997-09-29 | 1 | -85/+0 |
| | | |||||
* | | Moved to libopie | ache | 1997-09-29 | 1 | -154/+0 |
| | | |||||
* | | Merge | ache | 1997-09-29 | 10 | -137/+178 |
| | | |||||
* | | This commit was generated by cvs2svn to compensate for changes in r29964, | ache | 1997-09-29 | 58 | -961/+2320 |
|\ \ | |/ | | | | | which included commits to RCS files with non-trunk default branches. | ||||
| * | Upgrade to 2.31 | ache | 1997-09-29 | 68 | -1061/+2482 |
| | | |||||
| * | This commit was manufactured by cvs2svn to create branch 'VENDOR-opie'. | cvs2svn | 1997-02-07 | 1 | -0/+322 |
| | | |||||
* | | Remove bits of libmissing we don't care about. | pst | 1997-09-03 | 17 | -1237/+0 |
| | | |||||
* | | Update synopsis. A partial fix has also been submitted to opie@bugs@inner.net | pst | 1997-08-26 | 1 | -1/+7 |
| | | | | | | | | Submitted by: bde | ||||
* | | Detect null secret as error, it is temp. fix until next release | ache | 1997-08-05 | 1 | -0/+3 |
| | | | | | | | | Submitted by: Craig Metz <cmetz@inner.net> | ||||
* | | Make OPIE's public API use BSD conventions. | pst | 1997-03-08 | 1 | -120/+29 |
| | | |||||
* | | Config information for FreeBSD | pst | 1997-02-07 | 2 | -0/+323 |
| | | |||||
* | | Minimal man page changes to reflect integrated ftpd/login/su | pst | 1997-02-07 | 6 | -30/+21 |
| | |