summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2002-07-31Add support for OpenSSL 0.9.6e.tron1-1/+8
2002-07-31Build and install "saslauthd", a daemon running as root that performsjlam8-18/+115
plaintext password authentication for Cyrus SASL. This will allow daemons _not_ running as root to perform SASL PLAIN authentication (including getpwent and PAM). Bump PKGREVISION to 1.
2002-07-30Update security/pam-smbpass to version 2.2.5. This version matches thejlam4-85/+15
pam_smbpass distributed with the samba-2.2.5 sources.
2002-07-30Factor out common parts of samba and winbind into net/samba/Makefile.commonjlam7-201/+8
and merge their patch collections. These two packages are built from the same source tree, and updates to the main distfile should be shared by both packages.
2002-07-29Add and enable winbind.jlam1-1/+2
2002-07-29security/winbind - unified logon information between UNIX and Windows NTjlam10-0/+281
Winbind uses a UNIX implementation of Microsoft RPC calls, Pluggable Authentication Modules, and the Name Service Switch to allow Windows NT domain users to appear and operate as UNIX users on a UNIX machine. Users and groups are allocated as they are resolved to a range of user and group ids specified by the administrator of the Samba system. Currently, the nsswitch module doesn't work on NetBSD as NetBSD doesn't support dynamically loadable nsdispatch callbacks. However, the pam_winbind.so module may (quite usefully) be used to authenticate against a domain controller for a Windows domain via the NT user authentication protocol. This package currently tracks the winbind components from the Samba 2.2.x releases, but may be used in conjunction with older Samba 2.0.x releases as well.
2002-07-28Build on Darwin using patches from Apple's Darwin source repository,schmonz5-11/+37
via Fink.
2002-07-26Depends on openssl 0.9.6D, as noted by Eric Schnoebelen in pkg/17728.wiz1-2/+2
2002-07-26Add skey support on Solaris.grant1-1/+6
2002-07-26add and enable skey.grant1-1/+2
2002-07-26Initial import of skey-1.1.5 into the NetBSD packages collection.grant4-0/+48
This is the port of S/key implementation from OpenBSD source tree to Solaris, Linux, *BSD, AIX and probably other *NIX systems. This port consists of the introduction of autoconf support and replacement of OpenBSD library functions that are (regrettably) absent from other unices. This package provides skey support for other packages on non-NetBSD systems, and is marked ONLY_FOR_PLATFORM SunOS right now.
2002-07-24Change explicit build dependencies on perl into "USE_PERL5=build". Thisjlam4-9/+8
makes these packages build correctly on Darwin where perl>=5.8.0 is required.
2002-07-22Use correct homepage.jlam1-2/+2
2002-07-21PKGNAME is now the same as DISTNAME, remove it.wiz1-2/+1
2002-07-21Update to 1.6, requested by the author.wiz4-21/+14
Changes since 1.6beta: supported automatic wide ip range scan(fast xx times than 1.6beta version) supported scan time fixed broadcast bug fixed osfinger check a few bug fixed supported check recent apache chunk bug scanrule/apache.uxe moved arirang scan rule files into scanrule directory fixed gcc -Wall compile option
2002-07-18Correct wrong detection of /dev/random in GnuPG 1.0.7 on NetBSD.heinz5-4/+47
Bumped PKGREVISION to 1, changed PLIST accordingly and added 2 patches for configure and configure.ac. Patches were sent to gnupg-bugs@gnu.org. Thomas Klausner approved.
2002-07-18Add USE_X11BASE - should fix problem in bulk build.agc1-1/+3
2002-07-17Remove non-existing files (detected by bulk build).martti1-13/+1
2002-07-16Update virus definitions to version "4212"martti2-5/+5
2002-07-15Add a pointer to Steve Bellovin's mail inagc1-0/+42
http://mail-index.netbsd.org/current-users/2002/07/15/0006.html about NFS blocksizes when using mount(8) and cfs
2002-07-14Add and enable flawfinder. Sort.wiz1-2/+3
2002-07-14Initial import of flawfinder-1.20.wiz4-0/+36
flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-13Update to 150. Last version was 77, so ChangeLog would be too big to addwiz4-67/+22
here -- lots of new features and bug fixes. Distfile has version number now, so this should fix pkg/17588.
2002-07-12Remove some unnecessary spaces.wiz1-5/+5
2002-07-12Add version number to depends line.wiz1-2/+2
2002-07-12Add and enable snortsnarfagc1-1/+2
2002-07-12Initial import of snortsnarf-20020621.1 into the NetBSD Packagesagc5-0/+101
Collection. Provided in PR 17580 by Hiramatsu Yoshifumi (hiramatu@boreas.dti.ne.jp), with minor changes by me. SnortSnarf is a Perl program to take files of alerts from the free Snort Intrusion Detection System , and produce HTML output intended for diagnostic inspection and tracking down problems.
2002-07-04Add chmod a+r after downloading the new vulnerability file.wiz2-3/+4
Addresses part of pkg/17368. Bump to 1.14.
2002-07-03Updated msu to 1.04:abs2-5/+5
Only strip the problem LD_* type environment variables.
2002-07-02Deprecate IS_INTERACTIVEagc1-3/+2
Mark this package as using an interactive configuration stage
2002-07-02Deprecate IS_INTERACTIVE.agc1-2/+2
The correct way to mark this package as broken on sparc64 is to use the BROKEN definition.
2002-06-29minor formatting fix.grant1-4/+4
2002-06-28Update pgpdump to 0.17jun2-5/+5
* Defining the SHA-1 hash for Secret Key Packet. * Defining the -a and -g option. * Catching up to 2440bis-05. * Implementing User_Attribute_Packet. * Implementing features and revocation_target. * Removing macros to avoid side-effects.
2002-06-28IGNORE platforms that aren't noted to have an in-tree OpenSSH. For now,jlam1-1/+3
this means only NetBSD-1.5.* and NetBSD-1.6* can do this update.
2002-06-28No need to substitute for @PREFIX@, as ${PKG_PREFIX} already has thatjlam1-2/+2
value.
2002-06-28Only allow an in-tree update to occur if OpenSSL>=0.9.5a is in the basejlam2-6/+14
distribution. This prevents surprises like "hey, why is /usr/sbin/sshd broken" if a pkgsrc openssl is pkg_delete'd. Idea by itojun.
2002-06-28Add ability to update the in-tree OpenSSH directly from pkgsrc. Thisjlam3-19/+70
installs the binaries directly in /usr and places the manpages and example files in the correct hier(7) locations. We don't register installation in this case because the package database can't handle it. We deal with the ssh config files and directories as follows: NetBSD-1.5.* use /etc/ssh_config, /etc/sshd_config NetBSD-1.6 use /etc/ssh/ssh_config, /etc/ssh/sshd_config We also emit a warning in the MESSAGE file that /etc/ssh.conf and /etc/sshd.conf should be renamed in order to keep using them. Lastly, there is a new target "tarball" to generate a tarball of the installed files that might be used to install quickly on many machines, though it may be only of limited utility. These changes are only active if UPDATE_INTREE_OPENSSH is defined.
2002-06-28Warn about what to do if you have /etc/ssh.conf and /etc/sshd.conf.jlam1-2/+7
2002-06-28Add PKG_SYSCONFDIR to BUILD_DEFS.seb3-6/+4
Note: it was already as part of CONFIGURE_ENV value, this change only makes it more "readable" IMHO. Remove explicit addition of PKG_SYSCONFDIR to BUILD_DEFS in a couple of Makefiles.
2002-06-28s/${PKG_SYSCONFDIR}/@PKG_SYSCONFDIR@/grant1-3/+3
2002-06-27Updated msu to 1.03:abs2-5/+5
Revoke all additional groups Sanitise LD_* and friends from the environment. syslog() less, err() more.
2002-06-27backout 1.77 with comment, to get working blowfish support. pkg/17405.itojun1-2/+3
2002-06-27use ${CAT} not @CAT@, as it is set by pkgsrc/mk/install/header.itojun1-2/+2
From: Stoned Elipot <seb@script.jussieu.fr>
2002-06-27use @PREFIX@ and @CAT. From: Stoned Elipot <seb@script.jussieu.fr>itojun1-3/+3
2002-06-27add /usr/pkg/etc/ssh to the targetitojun1-2/+2
2002-06-27add POST-INSTALL warning if sshd configuration file is found in agrant3-4/+42
previous configuration directory. format MESSAGE consistently.
2002-06-26upgrade to 3.4p1 (openssh-3.4.0.1).itojun4-51/+6
20020626 - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM - (bal) OpenBSD CVS Sync - markus@cvs.openbsd.org 2002/06/23 21:34:07 [channels.c] tcode is u_int - markus@cvs.openbsd.org 2002/06/24 13:12:23 [ssh-agent.1] the socket name contains ssh-agent's ppid; via mpech@ from form@ - markus@cvs.openbsd.org 2002/06/24 14:33:27 [channels.c channels.h clientloop.c serverloop.c] move channel counter to u_int - markus@cvs.openbsd.org 2002/06/24 14:55:38 [authfile.c kex.c ssh-agent.c] cat to (void) when output from buffer_get_X is ignored - itojun@cvs.openbsd.org 2002/06/24 15:49:22 [msg.c] printf type pedant - deraadt@cvs.openbsd.org 2002/06/24 17:57:20 [sftp-server.c sshpty.c] explicit (u_int) for uid and gid - markus@cvs.openbsd.org 2002/06/25 16:22:42 [authfd.c] unnecessary cast - markus@cvs.openbsd.org 2002/06/25 18:51:04 [sshd.c] lightweight do_setusercontext after chroot() - (bal) Updated AIX package build. Patch by dtucker@zip.com.au - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8 - (bal) added back in error check for mmap(). I screwed up, Pointed out by stevesk@ - (tim) [README.privsep] UnixWare tip no longer needed. - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP, but it all damned lies. - (stevesk) [README.privsep] more for sshd pseudo-account. - (tim) [contrib/caldera/openssh.spec] add support for privsep - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@ - (djm) OpenBSD CVS Sync - markus@cvs.openbsd.org 2002/06/26 08:53:12 [bufaux.c] limit size of BNs to 8KB; ok provos/deraadt - markus@cvs.openbsd.org 2002/06/26 08:54:18 [buffer.c] limit append to 1MB and buffers to 10MB - markus@cvs.openbsd.org 2002/06/26 08:55:02 [channels.c] limit # of channels to 10000 - markus@cvs.openbsd.org 2002/06/26 08:58:26 [session.c] limit # of env vars to 1000; ok deraadt/djm - deraadt@cvs.openbsd.org 2002/06/26 13:20:57 [monitor.c] be careful in mm_zalloc - deraadt@cvs.openbsd.org 2002/06/26 13:49:26 [session.c] disclose less information from environment files; based on input from djm, and dschultz@uclink.Berkeley.EDU - markus@cvs.openbsd.org 2002/06/26 13:55:37 [auth2-chall.c] make sure # of response matches # of queries, fixes int overflow; from ISS - markus@cvs.openbsd.org 2002/06/26 13:56:27 [version.h] 3.4 - (djm) Require krb5 devel for RPM build w/ KrbV - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai <nalin@redhat.com> - (djm) Update spec files for release - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS - (djm) Release 3.4p1 20020625 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh - (stevesk) [README.privsep] minor updates - (djm) Create privsep directory and warn if privsep user is missing during make install - (bal) Started list of PrivSep issues in TODO - (bal) if mmap() is substandard, don't allow compression on server side. Post 'event' we will add more options. - (tim) [contrib/caldera/openssh.spec] Sync with Caldera - (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by dtucker@zip.com.au - (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus for Cygwin, Cray, & SCO 20020624 - OpenBSD CVS Sync - deraadt@cvs.openbsd.org 2002/06/23 03:25:50 [tildexpand.c] KNF - deraadt@cvs.openbsd.org 2002/06/23 03:26:19 [cipher.c key.c] KNF - deraadt@cvs.openbsd.org 2002/06/23 03:30:58 [scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c sshpty.c] various KNF and %d for unsigned - deraadt@cvs.openbsd.org 2002/06/23 09:30:14 [sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c sftp.c] bunch of u_int vs int stuff - deraadt@cvs.openbsd.org 2002/06/23 09:39:55 [ssh-keygen.c] u_int stuff - deraadt@cvs.openbsd.org 2002/06/23 09:46:51 [bufaux.c servconf.c] minor KNF. things the fingers do while you read - deraadt@cvs.openbsd.org 2002/06/23 10:29:52 [ssh-agent.c sshd.c] some minor KNF and %u - deraadt@cvs.openbsd.org 2002/06/23 20:39:45 [session.c] compression_level is u_int - deraadt@cvs.openbsd.org 2002/06/23 21:06:13 [sshpty.c] KNF - deraadt@cvs.openbsd.org 2002/06/23 21:06:41 [channels.c channels.h session.c session.h] display, screen, row, col, xpixel, ypixel are u_int; markus ok - deraadt@cvs.openbsd.org 2002/06/23 21:10:02 [packet.c] packet_get_int() returns unsigned for reason & seqnr - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col, xpixel are u_int. 20020623 - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX. - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset. - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au - OpenBSD CVS Sync - stevesk@cvs.openbsd.org 2002/06/22 02:00:29 [ssh.h] correct comment - stevesk@cvs.openbsd.org 2002/06/22 02:40:23 [ssh.1] section 5 not 4 for ssh_config - naddy@cvs.openbsd.org 2002/06/22 11:51:39 [ssh.1] typo - stevesk@cvs.openbsd.org 2002/06/22 16:32:54 [sshd.8] add /var/empty in FILES section - stevesk@cvs.openbsd.org 2002/06/22 16:40:19 [sshd.c] check /var/empty owner mode; ok provos@ - stevesk@cvs.openbsd.org 2002/06/22 16:41:57 [scp.1] typo - stevesk@cvs.openbsd.org 2002/06/22 16:45:29 [ssh-agent.1 sshd.8 sshd_config.5] use process ID vs. pid/PID/process identifier - stevesk@cvs.openbsd.org 2002/06/22 20:05:27 [sshd.c] don't call setsid() if debugging or run from inetd; no "Operation not permitted" errors now; ok millert@ markus@ - stevesk@cvs.openbsd.org 2002/06/22 23:09:51 [monitor.c] save auth method before monitor_reset_key_state(); bugzilla bug #284; ok provos@
2002-06-26add expiry fields to passwd entryitojun1-2/+2
2002-06-26Substitute a couple of `mkdir' by `${MKDIR}'.seb6-14/+14
Remove `-p' from mkdir arguments, it is already part of ${MKDIR}. While here substitute a couple of ${PREFIX} by `%D' in `@exec ${MKDIR} ...' lines and add a couple of missing `%D' in such lines too!
2002-06-26need -pitojun1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-03 15:55:27 +0000