| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
and giving a dire error to its lingering users.
|
|
|
|
|
|
| |
when an X11-forwarded client was closed. For some reason, sshd didn't
disable the SIGPIPE exit handler and died a horrible death (well, okay,
a silent death really). Set SIGPIPE's handler to SIG_IGN.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
new features description elided in favor of checking out their
website.
Important new FreeBSD-version stuff: PAM support has been worked
in, partially from the "Unix" OpenSSH version, and a lot due to the
work of Eivind Eklend, too.
This requires at least the following in pam.conf:
sshd auth sufficient pam_skey.so
sshd auth required pam_unix.so try_first_pass
sshd session required pam_permit.so
Parts by: Eivind Eklend <eivind@FreeBSD.org>
|
| |
|
|\
| |
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| | |
|
| |
| |
| |
| | |
Not responded to by: kris, then green
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
back to the original environ unconditionally. The setting of the
variable to save the previous environ is conditional; it happens when
ENV.e_committed is set. Therefore, don't try to swap the env back
unless the previous env has been initialized.
PR: bin/22670
Submitted by: Takanori Saneto <sanewo@ba2.so-net.ne.jp>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
in ports/security/openssh/files/pam_ssh.c
PR: 22164
Submitted by: Takanori Saneto <sanewo@ba2.so-net.ne.jp>
Reviewed by: green
Approved by: green
|
| |
| |
| |
| | |
checks were only made when using the 1.x protocol.
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| |
| |
| |
| |
| | |
ssh-agent or X11 forwarding even if it was disabled.
This is the vendor fix provided, not an actual revision of clientloop.c.
Submitted by: Markus Friedl <markus@OpenBSD.org> via kris
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
Reviewed by: gshapiro, peter, green
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| | |
|
| |
| |
| |
| | |
It's the only way to be sure.
|
| |
| |
| |
| |
| |
| | |
up the function definition from unistd.h instead. Use s->tty instead.
Submitted by: peter
|
| |
| |
| |
| | |
Submitted by: gshapiro
|
| |
| |
| |
| | |
was using this feature.
|
| |
| |
| |
| |
| |
| |
| |
| | |
the login_cap and login.access checks for whether a user/host is allowed
access to the system for users other than root. But since we currently don't
have a similar check in the ssh2 code path anyway, it's um, "okay".
Submitted by: gshapiro
|
| |
| |
| |
| | |
Submitted by: gshapiro
|
| |
| |
| |
| |
| |
| | |
integration. This currently has no effect.
Submitted by: gshapiro
|
| |
| |
| |
| |
| |
| | |
where it is already disabled by default.
Reminded by: peter
|
| |
| |
| |
| |
| |
| |
| | |
seconds.
PR: 20488
Submitted by: rwatson
|
| |
| |
| |
| |
| | |
PR: 17818
Submitted by: Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE>
|
| |
| |
| |
| |
| |
| |
| |
| | |
It seems as if uninitialised memory was the culprit.
We may want to contribute this back to the OpenSSH project.
Submitted by: Alexander Leidinger <Alexander@Leidinger.net> on -current.
|
| |
| |
| |
| |
| |
| |
| | |
The OpenSSH maintainer probably want to contribute this back to the
real OpenSSH guys.
Submitted by: Jon Perkin <sketchy@netcraft.com>
|
| |
| |
| |
| | |
Pointed out by: asmodai
|
| |
| |
| |
| |
| | |
PR: 20108
Submitted by: Doug Lee
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
sshd's internal default was 'yes'. (if some cracker managed to trash
/etc/ssh/sshd_config, then root logins could be reactivated)
Approved by: kris
|
| |
| |
| |
| |
| |
| | |
silly in this day and age.
Approved by: kris
|
| |
| |
| |
| | |
We do have /proc/curproc/file :)
|
| |
| |
| |
| |
| |
| | |
In some cases, limits did not get set to the proper class, but
instead always to "default", because not all passwd copies were
done to completion.
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
before for this, requiring a new function (get_ipaddr()). canohost.c
receives a $FreeBSD$ line.
Suggested by: Niels Provos <niels@OpenBSD.org>
|
| |
| |
| |
| | |
Submitted by: Udo Schweigert <ust@cert.siemens.de>
|
| |
| |
| |
| |
| |
| | |
uid 0.
Obtained from: OpenBSD
|
| | |
|
| | |
|
| | |
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| | |
Obtained from: OpenBSD
|
| | |
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| | |
Obtained from: OpenBSD
|