summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2000-03-10Add and enable aideagc1-1/+2
2000-03-10Initial import of aide, a free intrusion detection system for checkingagc5-0/+33
file integrity, into the NetBSD packages collection. It creates a database from the regular expression rules that it finds from the config file. Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (md5,sha1,rmd160,tiger,haval,etc.) that are used to check the integrity of the file. More algorithms can be added with relative ease. All of the usual file attributes can also be checked for inconsistencies. It can read databases from older or newer versions. See the manual pages within the distribution for further info. There is also a beginning of a manual at http://www.cs.tut.fi/~rammer/aide/manual.html This package is very similar to tripwire, but without its licen[cs]e constraints.
2000-03-09remove trailing `.'wiz1-1/+1
2000-03-07correct homepage (www.openssh.org is not the official site!)wiz1-2/+2
2000-03-06Adapt ssh to use our login.conf framework.mjl3-75/+190
2000-03-03can't install ssh on top of openssh, due to conflicting files.itojun1-1/+3
2000-03-02find -> ${FIND}wiz1-2/+2
2000-03-02exclude /dev/fd from logging, as proposed by Scott Aaron Bamfordwiz1-1/+4
<sab@zeekuschrist.com> in Pine.NEB.4.21.0003021549090.8049-100000@blip.fish.poo on tech-pkg, to prevent segfault
2000-03-02Fetch and install man page, as noted by Markus Kurekwiz5-28/+35
<kurek@uni-duisburg.de> in pkg/9519. Also defuzz patches.
2000-02-28Only enable Kerberos 5 support if USE_HEIMDAL is set; sudo uses APIthorpej1-1/+4
features present in Heimdal but NOT present in MIT Kerberos (one more reason to ditch MIT, I guess).
2000-02-27Find krb5 includes/libraries as installed in a crypto-aware NetBSDthorpej2-13/+35
installation. Still doesn't work; MIT Kerberos 5 is missing some calls that sudo wants (tho Heimdal has them).
2000-02-27Update gnupg to 1.0.1, as PR'd bywiz3-6/+8
Takahiro Kambe <taca@sky.yamashina.kyoto.jp> in pkg/9477. Changes since 1.0.0: * New command --verify-files. New option --fast-list-mode. * $http_proxy is now used when --honor-http-proxy is set. * Fixed some minor bugs and the problem with conventional encrypted packets which did use the gpg v3 partial length headers. * Add Indonesian and Portugese translations. * Fixed a bug with symmetric-only encryption using the non-default 3DES. The option --emulate-3des-s2k-bug may be used to decrypt documents which have been encrypted this way; this should be done immediately as this workaround will be remove in 1.1 * Can now handle (but not display) PGP's photo IDs. I don't know the format of that packet but after stripping a few bytes from the start it looks like a JPEG (at least my test data). Handling of this package is required because otherwise it would mix up the self signatures and you can't import those keys. * Passing non-ascii user IDs on the commandline should now work in all cases. * New keys are now generated with an additional preference to Blowfish. * Removed the GNU Privacy Handbook from the distribution as it will go into a separate one.
2000-02-25remove commented out SUBDIR += lines for packages that never gotwiz1-15/+3
converted from FreeBSD, or have been disabled since. Sorted lines alphabetically, added some missing directories.
2000-02-14Make this work on NetBSD as well as Solaris.agc3-9/+25
2000-02-12Install the static libs, now that they're built anyway, and run "ranlib",fredb2-3/+11
if it exists. Minor fix-up to PLIST. Closes PR pkg/8897.
2000-02-11Add and enable ddos-scan.agc1-1/+2
2000-02-11Initial import of ddos-scan into the NetBSD packages collection.agc6-0/+76
"dds" is a program to scan for a limited set of distributed denial of service (ddos) agents. At present, it scans for active instances of "trinoo", "Tribe Flood Network" ("TFN") and "stacheldraht" agents, which were compiled using the default values in known source distributions, such as those found at: http://packetstorm.securify.com/distributed/ It will *not* detect TFN2K agents. For analyses of the three distributed denial of service attack tools it scans for, and the methods being used by dds to identify them, see: http://staff.washington.edu/dittrich/misc/trinoo.analysis http://staff.washington.edu/dittrich/misc/tfn.analysis http://staff.washington.edu/dittrich/misc/stacheldraht.analysis
2000-02-11Make this compile with KERBEROS=5.jlam2-8/+15
2000-02-07Add and enable portsentry.agc1-1/+2
2000-02-07Initial import of portsentry into the NetBSD packages collection.agc9-0/+167
PortSentry is a utility which detects and respond to port scans against a target host in real-time.
2000-02-05minor fixes for pkglintwiz1-3/+3
2000-02-05pax -> ${PAX}wiz1-2/+2
2000-02-05added patch-sumwiz1-0/+6
2000-02-05$() -> ${}wiz1-2/+2
2000-02-05add proper info dir entrywiz3-3/+20
2000-02-05whitespace fixwiz1-1/+1
2000-02-05RCS tag addedwiz1-0/+1
2000-02-05replaced CMDs by ${CMD}wiz1-4/+4
2000-02-05remove unused patchwiz1-78/+0
2000-02-05replaced some CMDs by ${CMD}wiz1-9/+9
2000-02-05RCS tags addedwiz3-0/+3
2000-02-05remove trailing '.'wiz1-1/+1
2000-02-05RCS tags addedwiz2-0/+2
2000-02-05remove IS_INTERACTIVE, since it doesn't seem to be interactive (anymore?)wiz1-2/+1
2000-02-05RCS tags addedwiz2-0/+2
2000-01-28Update to sudo-1.6.2p1. Changes from 1.6.2 (committed yesterday!):jlam2-5/+7
393) Users in the 'exempt' group shouldn't get their $PATH overridden by 'secure-path'. Patch from jmknoble@pobox.com. 394) Pam now works on HP-UX 11.0, thanks to Jeff A. Earickson.
2000-01-28Update to sudo-1.6.2. This is a bugfix release over sudo-1.6.1.jlam2-4/+4
Changes from Sudo 1.6.1: 383) Better behavior for -l and -v flags in conjunction with NOPASSWD and added "verifypw" and "listpw" options. 384) For HP-UX with cc, add the -Aa flag along with -D_HPUX_SOURCE. 385) Fix compilation with K&R compilers. 386) For netgroup host matching, match against the short version of the hostname as well as the long one if they are different. 387) Terminate passwd reading on '\r' in addition to '\n' 388) Visudo used to loop endlessly if a user entered ^D at the whatnow prompt. EOF is now treaded as 'x' (exit w/o saving changes). 389) The 'shell_noargs' runtime option is back based on a patch from bguillory@email.com. 390) Systems that return RLIM_INFINITY for RLIMIT_NOFILE (like AIX) would loop for a very loing time during sudo startup. A value of RLIM_INFINITY is now ignored (getdtablesize/sysconf is used instead). 391) Locking in visudo was broken. We now lock the sudoers file, not the sudoers temp file, which should be safe. 392) PAM fixups: custom prompts now work correctly and errors are dealt with more sanely. Patches from Cloyce D. Spradling.
2000-01-27fix compilation on IPv6-ready environment.itojun2-12/+19
the reason of failure: openssh configure.in tries to include specwise incorrect header (netinet/in6.h), and checks for function availablility with too high warning level.
2000-01-27Clean this up, sync with the ssh package, and update tohubertf1-0/+14
1.2.2 (fixing PR 9304 by David Rankin <drankin@bohemians.lexington.ky.us>. Changes: 20000125 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas <andre.lucas@dial.pipex.com> - Reorder PAM initialisation so it does not mess up lastlog. Reported by Andre Lucas <andre.lucas@dial.pipex.com> - Use preformatted manpages on SCO, report from Gary E. Miller <gem@rellim.com> - New URL for x11-ssh-askpass. - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble <jmknoble@pobox.com> - Added 'DESTDIR' option to Makefile to ease package building. Patch from Jim Knoble <jmknoble@pobox.com> - Updated RPM spec files to use DESTDIR 20000124 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number increment) 20000123 - OpenBSD CVS: - [packet.c] getsockname() requires initialized tolen; andy@guildsoftware.com - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin <drankin@bohemians.lexington.ky.us> - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com> 20000122 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor <bent@clark.net> - Merge preformatted manpage patch from Andre Lucas <andre.lucas@dial.pipex.com> - Make IPv4 use the default in RPM packages - Irix uses preformatted manpages - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE> - OpenBSD CVS updates: - [packet.c] use getpeername() in packet_connection_is_on_socket(), fixes sshd -i; from Holger.Trapp@Informatik.TU-Chemnitz.DE - [sshd.c] log with level log() not fatal() if peer behaves badly. - [readpass.c] instead of blocking SIGINT, catch it ourselves, so that we can clean the tty modes up and kill ourselves -- instead of our process group leader (scp, cvs, ...) going away and leaving us in noecho mode. people with cbreak shells never even noticed.. - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8] ie. -> i.e., 20000120 - Don't use getaddrinfo on AIX - Update to latest OpenBSD CVS: - [auth-rsa.c] - fix user/1056, sshd keeps restrictions; dbt@meat.net - [sshconnect.c] - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. - destroy keys earlier - split key exchange (kex) and user authentication (user-auth), ok: provos@ - [sshd.c] - no need for poll.h; from bright@wintelcom.net - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. - split key exchange (kex) and user authentication (user-auth), ok: provos@ - [sshd.c] - no need for poll.h; from bright@wintelcom.net - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. - split key exchange (kex) and user authentication (user-auth), ok: provos@ - Big manpage and config file cleanup from Andre Lucas <andre.lucas@dial.pipex.com> - Re-added latest (unmodified) OpenBSD manpages - Doc updates - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and Christos Zoulas <christos@netbsd.org> 20000119 - SCO compile fixes from Gary E. Miller <gem@rellim.com> - Compile fix from Darren_Hall@progressive.com - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC addresses using getaddrinfo(). Added a configure switch to make the default lookup mode AF_INET 20000118 - Fixed --with-pid-dir option - Makefile fix from Gary E. Miller <gem@rellim.com> - Compile fix for HPUX and Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
2000-01-27Clean this up, sync with the ssh package, and update tohubertf14-207/+166
1.2.2 (fixing PR 9304 by David Rankin <drankin@bohemians.lexington.ky.us>. Changes: 20000125 - Fix NULL pointer dereference in login.c. Fix from Andre Lucas <andre.lucas@dial.pipex.com> - Reorder PAM initialisation so it does not mess up lastlog. Reported by Andre Lucas <andre.lucas@dial.pipex.com> - Use preformatted manpages on SCO, report from Gary E. Miller <gem@rellim.com> - New URL for x11-ssh-askpass. - Fixpaths was missing /etc/ssh_known_hosts. Report from Jim Knoble <jmknoble@pobox.com> - Added 'DESTDIR' option to Makefile to ease package building. Patch from Jim Knoble <jmknoble@pobox.com> - Updated RPM spec files to use DESTDIR 20000124 - Pick up version 1.2.2 from OpenBSD CVS (no changes, just version number increment) 20000123 - OpenBSD CVS: - [packet.c] getsockname() requires initialized tolen; andy@guildsoftware.com - AIX patch from Matt Richards <v2matt@btv.ibm.com> and David Rankin <drankin@bohemians.lexington.ky.us> - Fix lastlog support, patch from Andre Lucas <andre.lucas@dial.pipex.com> 20000122 - Fix compilation of bsd-snprintf.c on Solaris, fix from Ben Taylor <bent@clark.net> - Merge preformatted manpage patch from Andre Lucas <andre.lucas@dial.pipex.com> - Make IPv4 use the default in RPM packages - Irix uses preformatted manpages - Missing htons() in bsd-bindresvport.c, fix from Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE> - OpenBSD CVS updates: - [packet.c] use getpeername() in packet_connection_is_on_socket(), fixes sshd -i; from Holger.Trapp@Informatik.TU-Chemnitz.DE - [sshd.c] log with level log() not fatal() if peer behaves badly. - [readpass.c] instead of blocking SIGINT, catch it ourselves, so that we can clean the tty modes up and kill ourselves -- instead of our process group leader (scp, cvs, ...) going away and leaving us in noecho mode. people with cbreak shells never even noticed.. - [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8] ie. -> i.e., 20000120 - Don't use getaddrinfo on AIX - Update to latest OpenBSD CVS: - [auth-rsa.c] - fix user/1056, sshd keeps restrictions; dbt@meat.net - [sshconnect.c] - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. - destroy keys earlier - split key exchange (kex) and user authentication (user-auth), ok: provos@ - [sshd.c] - no need for poll.h; from bright@wintelcom.net - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. - split key exchange (kex) and user authentication (user-auth), ok: provos@ - [sshd.c] - no need for poll.h; from bright@wintelcom.net - disable agent fwding for proto 1.3, remove abuse of auth-rsa flags. - split key exchange (kex) and user authentication (user-auth), ok: provos@ - Big manpage and config file cleanup from Andre Lucas <andre.lucas@dial.pipex.com> - Re-added latest (unmodified) OpenBSD manpages - Doc updates - NetBSD patch from David Rankin <drankin@bohemians.lexington.ky.us> and Christos Zoulas <christos@netbsd.org> 20000119 - SCO compile fixes from Gary E. Miller <gem@rellim.com> - Compile fix from Darren_Hall@progressive.com - Linux/glibc-2.1.2 takes a *long* time to look up names for AF_UNSPEC addresses using getaddrinfo(). Added a configure switch to make the default lookup mode AF_INET 20000118 - Fixed --with-pid-dir option - Makefile fix from Gary E. Miller <gem@rellim.com> - Compile fix for HPUX and Solaris from Andre Lucas <andre.lucas@dial.pipex.com>
2000-01-27Adjust CONFLICTS to not clash with the ssh-ip-tunnel package.hubertf1-2/+2
2000-01-27no "-" in pkg version!hubertf1-2/+2
2000-01-23Use "${MACHINE_ARCH}-${LOWER_OPSYS}" instead of "i386-netbsd" so thattron2-14/+14
this work on all (our at least more) platforms.
2000-01-22Link "ssh-askpass" with run time library path for X11 libraries. Fixestron2-5/+14
PR pkg/9242 by Christian E. Hopps.
2000-01-17Use new variable USE_IDEA, which is YES/NO, and mention that SSH_DONT_USE_IDEAjlam1-5/+13
is deprecated. Defaults to USE_IDEA=YES to match current default build.
2000-01-17make this work under current too.christos2-4/+45
2000-01-17fix obvious problems.christos1-3/+4
2000-01-17New openssh package [needs some cleanup]christos14-0/+357
- it is not enabled by default (need to think what to do with the ssh conflict) - only tested under 1.4.1 so far
2000-01-14Add and enable "fsh".fredb1-1/+2
2000-01-14Initial import of fsh-1.0, "fast remote command execution". The authorfredb5-0/+41
states that the motivation for this program was to speed up cvs work, but it works just as well with "rsync" and other programs that use ssh for the transport. This is a set of python scripts: "fsh" uses ssh, (or optionally rsh or lsh) to start and set up a connection to "fshd" on the remote host, also includes "fcp", and docs in "info" format.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-23 14:05:41 +0000