summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2000-06-15upgrade to 2.1.1p1 from portable openssh distribution.itojun5-58/+12
--- changelog from 2.1.0p3: 20000609 - (djm) Patch from Kenji Miyake <kenji@miyake.org> to disable utmp usage (in favour of utmpx) on Solaris 8 20000606 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through list of commands (by default). Removed verbose debugging (by default). - (djm) Increased command entropy estimates and default entropy collection timeout - (djm) Remove duplicate headers from loginrec.c - (djm) Don't add /usr/local/lib to library search path on Irix - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III <tibbs@math.uh.edu> - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg <zack@wolery.cumb.org> - (djm) OpenBSD CVS updates: - todd@cvs.openbsd.org [sshconnect2.c] teach protocol v2 to count login failures properly and also enable an explanation of why the password prompt comes up again like v1; this is NOT crypto - markus@cvs.openbsd.org [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8] xauth_location support; pr 1234 [readconf.c sshconnect2.c] typo, unused [session.c] allow use_login only for login sessions, otherwise remote commands are execed with uid==0 [sshd.8] document UseLogin better [version.h] OpenSSH 2.1.1 [auth-rsa.c] fix match_hostname() logic for auth-rsa: deny access if we have a negative match or no match at all [channels.c hostfile.c match.c] don't panic if mkdtemp fails for authfwd; jkb@yahoo-inc.com via kris@FreeBSD.org 20000606 - (djm) Added --with-cflags, --with-ldflags and --with-libs options to configure. 20000604 - Configure tweaking for new login code on Irix 5.3 - (andre) login code changes based on djm feedback 20000603 - (andre) New login code - Remove bsd-login.[ch] and all the OpenBSD-derived code in login.c - Add loginrec.[ch], logintest.c and autoconf code 20000531 - Cleanup of auth.c, login.c and fake-* - Cleanup of auth-pam.c, save and print "account expired" error messages - Fix EGD read bug by IWAMURO Motonori <iwa@mmp.fujitsu.co.jp> - Rewrote bsd-login to use proper utmp API if available. Major cleanup of fallback DIY code.
2000-06-14upgrade to 2000/6/14 snapshot. changes:itojun3-5/+4
- SA bundle (AH + ESP) negotiation is corrected - be more picky about permission of pre-shared key file (don't open it it it looks vulnerable).
2000-06-13Update xdm-krb4 to version 3.3.6.1.wennmach3-6/+6
Version 3.3.6.1 fixes some minor issues and nits (like using snprintf instead of sprintf, and using newer functions, like krb_afslog_uid_home instead of krb_afslog) in greeter/verify.c. Most changes are from Assar Westerlund (assar@sics.se, assar@netbsd.org), some from myself.
2000-06-12add couple of more issues and a design choice.itojun1-4/+12
2000-06-12add RESTRICTED (crypto) and IGNORE (broken by PF_KEY API change)itojun1-1/+4
2000-06-12add RESTRICTED for crypto.itojun1-3/+2
2000-06-12add files/md5. From: Bernd Ernestiitojun2-16/+3
2000-06-12build 20000612 KAME racoon IKE daemon, by pulling tar.gz from ftp.kame.netitojun8-54/+109
(does not use anoncvs any more). changes in racoon itself is way too many to mention. for full changelog refer http://www.kame.net/dev/cvsweb.cgi/kame/CHANGELOG.
2000-06-08Add and enable xdm-krb4.wennmach1-1/+2
2000-06-08Initial import of xdm-krb4, an Kerberos IV and AFS aware xdm.wennmach7-0/+70
Thanks to Johan Danielsson who looked into my Kerberos changes of xdm. (Most of it is directly derived from his work).
2000-06-08Reflect new location of services.diff.wennmach1-3/+3
2000-06-08File moved.wennmach1-1/+1
2000-06-08Find arla's configuration directory even if arla is notwennmach1-0/+15
installed in /usr/arla.
2000-06-08Added descriptions of what exactly each patch does.wennmach9-16/+55
Inserted placeholders into MESSAGE which get replaced during pre-install. Enhanced MESSAGE text.
2000-06-06Update to 1.6.3p4. Notable changes:mjl4-22/+13
393) Users in the 'exempt' group shouldn't get their $PATH overridden by 'secure-path'. Patch from jmknoble@pobox.com. 395) Fixed a bug that caused an infinite loop when the password timeout was disabled. 396) It is now possible to set the path to the editor for visudo as well as the flag that determines whether or not visudo will look at $EDITOR in the sudoers file. 398) Added rootpw, runaspw, and targetpw to prompt for the root, runas_default and target user's passwords respectively (instead of the invoking user's password). 399) Added -S flag to force password read from stdin. 400) Restore coredumpsize resource limit before exec'ing the child process (sudo sets it to 0 internally). 404) Fixed a bug where sudo would hang around and consume CPU if we spawn a long-running process. 406) Added set_logname run-time option. When unset, sudo will not set the USER and LOGNAME environment variables. 407) Wildcards are now allowed in the hostnames specified in sudoers. The 'fqdn' option is often required for this to be useful. 408) Fixed a bug where host and user qualifiers in a Defaults entry were not being used correctly and the entry was being applied globally. 409) Fixed targetpw, rootpw, and runaspw options when used with non-passwd authentication (pam, etc). 410) When the targetpw flag is set, use the target username as part of the timestamp path. 411) Fixed a bug that prevented the -H option from being useful. 412) Fixed a case where a string was used after it has been freed.
2000-06-05Add and enable amavisrh1-1/+2
2000-06-05Initial import of amavis-0.2.0p6, a mail virus scannerrh7-0/+64
2000-06-05Add and enable uvscan and uvscan-datrh1-1/+3
2000-06-05Initial import of uvscan-dat-4080, a set of AntiVirus DAT files for uvscanrh5-0/+48
2000-06-05Initial import of uvscan-4.07e, an evaluation version of the McAfeerh6-0/+64
DOS/Windows file virus scanner
2000-06-01s/USE_LIBTOOL/USE_PKGLIBTOOL/rh2-4/+4
Add a new USE_LIBTOOL definition that uses the libtool package instead of pkglibtool which is now considered outdated. USE_PKGLIBTOOL is available for backwards compatibility with old packages but is deprecated for new packages.
2000-05-31upgrade to 2.1.0p3.itojun11-142/+69
there are too many changes to mention here. the biggest change would be the addition of SSH protocol version 2 (uses DSA).
2000-05-28Fix path to old distfile on openssh.com.wiz1-2/+2
2000-05-25Add and enable kth-krb4wennmach1-1/+2
2000-05-25Initial import of kth-krb4-1.0.1: Kerberos IV distribution from KTHwennmach14-0/+519
2000-05-20-fix BUILD_DEPENDS to correctly include bisondmcmahill1-3/+4
-don't let make(1) set YACC (which then gets passed to configure) so configure can correctly find bison.
2000-05-19find /dev/random, and use itwiz3-7/+9
2000-05-19add www.openssh.com to MASTER_SITES; all mirrors don't have the filewiz1-2/+3
anymore
2000-05-12Fix last commit.veego1-2/+2
2000-05-10Support to build it on Solaris.veego12-22/+42
It would be easier to make that change if we support patches for one OPSYS but someone removed that from out tree.
2000-04-28Wrap ${CC} and ${LD} in quotes -- in case they are multiple words.mycroft1-2/+3
2000-04-27make it work with openssl-0.9.5a.itojun2-5/+5
cope with PATENTEDOPENSSLSRC environment (mk.conf needs to be set)
2000-04-26Use "SSLBASE" instead of "SSLDIR".tron1-4/+2
2000-04-26Switch to "USE_SSL".tron1-9/+3
2000-04-26Don't clobber permission of "/var/run" during installation.tron2-4/+12
2000-04-26Make this actually compile on recent NetBSD systems:hubertf3-1/+21
* force "bison -y" *via $YACC) * undefine _POSIX_C_SOURCE, needed to get S_ISLNK defined in <sys/stat.h>
2000-04-25If PATENTEDOPENSSLSRC is present in the build environment, thenthorpej2-2/+12
assume that a full (i.e. "with RSA") OpenSSL installation already exists on the system (and thus a dependency on ../security/openssl is not needed).
2000-04-24Don't complain on deinstallation if directory "${PREFIX}/certs" cannottron1-2/+2
be removed.
2000-04-23Sync w/ srcurity/ssh: prevent a segv when doing password authenticationthorpej2-9/+10
and the client happens to not be in a Kerberos realm.
2000-04-22Defuzz patches.fredb3-15/+16
2000-04-21Enable smtpd.mjl1-1/+2
2000-04-21Initial import of smtpd, an SMTP store-and-forward proxy for firewalling.mjl9-0/+138
2000-04-21allow use of openssl-0.9.5aexplorer1-2/+2
2000-04-21upgrade to 0.9.5aexplorer5-85/+182
2000-04-18Fix a bug where if you were logging in from an account which had notthorpej2-9/+10
authorized key and for which there was no kerberos principle, sshd would segfault.
2000-04-12check if the system is IPsec ready NetBSD system.itojun2-2/+12
2000-04-12Make it plain that this is the IPv6 version of the secure shell.agc2-6/+7
2000-04-06Update to newer distfile. Only change is in the README:wiz2-5/+5
Author recommends RID instead of his own program. Fixes pkg/9805.
2000-04-04correct dependency to cvs.itojun1-2/+2
2000-04-04add cvs to dependency list.itojun1-1/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-27 04:30:43 +0000