summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
2000-03-26upgrade to 1.2.3. make it conflict with security/ssh6.itojun5-25/+21
2000-03-26revise CONFLICTS line.itojun2-4/+4
2000-03-21Update fortify to 1.4.6. Changes from 1.4.5:jlam3-19/+208
Added Communicator versions for 4.72 and several more platforms.
2000-03-20Optimize dependence pattern.tron1-2/+2
2000-03-20Depend on "ssh" or "ssh6" package.tron1-2/+2
2000-03-20split security/ssh and security/ssh6.itojun73-3566/+11535
security/ssh6: IPv4/v6 ready, socks unavailable, kerberos available (not tested) security/ssh: IPv4 onlyready, socks available, kerberos available (not tested) should be integrated into one whenever socks support becomes aware of getaddrinfo/getnameinfo. two directories with tons of patches/patch-* is a maintenance headache.
2000-03-18SSH_DONT_USE_IDEA is deprecated, so include USE_IDEA in BUILD_DEFS instead.jlam1-2/+2
2000-03-18Make this compile on m68k. Old m68k hack for bin_div.c is broken forfredb1-13/+0
OpenSSL-0.94, but that's OK, because it's evidently no longer needed.
2000-03-18Sync with latest changes to "patch-ab" and "patch-aj".tron1-3/+3
2000-03-18Make this compile on m68k. Old m68k hack for bin_div.c is broken forfredb1-2/+1
OpenSSL-0.94, but that's OK, because it's evidently no longer needed.
2000-03-18mark socksified build broken, this has been unavailable for some time.itojun1-1/+2
2000-03-18address PR9630. compilation chokes on IPv4-only kernel.itojun2-269/+273
this basically is due to synchronization issue between WIDE ssh IPv6 patch and netbsd repository.
2000-03-16s/^a //wiz1-1/+1
2000-03-10Add and enable aideagc1-1/+2
2000-03-10Initial import of aide, a free intrusion detection system for checkingagc5-0/+33
file integrity, into the NetBSD packages collection. It creates a database from the regular expression rules that it finds from the config file. Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (md5,sha1,rmd160,tiger,haval,etc.) that are used to check the integrity of the file. More algorithms can be added with relative ease. All of the usual file attributes can also be checked for inconsistencies. It can read databases from older or newer versions. See the manual pages within the distribution for further info. There is also a beginning of a manual at http://www.cs.tut.fi/~rammer/aide/manual.html This package is very similar to tripwire, but without its licen[cs]e constraints.
2000-03-09remove trailing `.'wiz1-1/+1
2000-03-07correct homepage (www.openssh.org is not the official site!)wiz1-2/+2
2000-03-06Adapt ssh to use our login.conf framework.mjl3-75/+190
2000-03-03can't install ssh on top of openssh, due to conflicting files.itojun1-1/+3
2000-03-02find -> ${FIND}wiz1-2/+2
2000-03-02exclude /dev/fd from logging, as proposed by Scott Aaron Bamfordwiz1-1/+4
<sab@zeekuschrist.com> in Pine.NEB.4.21.0003021549090.8049-100000@blip.fish.poo on tech-pkg, to prevent segfault
2000-03-02Fetch and install man page, as noted by Markus Kurekwiz5-28/+35
<kurek@uni-duisburg.de> in pkg/9519. Also defuzz patches.
2000-02-28Only enable Kerberos 5 support if USE_HEIMDAL is set; sudo uses APIthorpej1-1/+4
features present in Heimdal but NOT present in MIT Kerberos (one more reason to ditch MIT, I guess).
2000-02-27Find krb5 includes/libraries as installed in a crypto-aware NetBSDthorpej2-13/+35
installation. Still doesn't work; MIT Kerberos 5 is missing some calls that sudo wants (tho Heimdal has them).
2000-02-27Update gnupg to 1.0.1, as PR'd bywiz3-6/+8
Takahiro Kambe <taca@sky.yamashina.kyoto.jp> in pkg/9477. Changes since 1.0.0: * New command --verify-files. New option --fast-list-mode. * $http_proxy is now used when --honor-http-proxy is set. * Fixed some minor bugs and the problem with conventional encrypted packets which did use the gpg v3 partial length headers. * Add Indonesian and Portugese translations. * Fixed a bug with symmetric-only encryption using the non-default 3DES. The option --emulate-3des-s2k-bug may be used to decrypt documents which have been encrypted this way; this should be done immediately as this workaround will be remove in 1.1 * Can now handle (but not display) PGP's photo IDs. I don't know the format of that packet but after stripping a few bytes from the start it looks like a JPEG (at least my test data). Handling of this package is required because otherwise it would mix up the self signatures and you can't import those keys. * Passing non-ascii user IDs on the commandline should now work in all cases. * New keys are now generated with an additional preference to Blowfish. * Removed the GNU Privacy Handbook from the distribution as it will go into a separate one.
2000-02-25remove commented out SUBDIR += lines for packages that never gotwiz1-15/+3
converted from FreeBSD, or have been disabled since. Sorted lines alphabetically, added some missing directories.
2000-02-14Make this work on NetBSD as well as Solaris.agc3-9/+25
2000-02-12Install the static libs, now that they're built anyway, and run "ranlib",fredb2-3/+11
if it exists. Minor fix-up to PLIST. Closes PR pkg/8897.
2000-02-11Add and enable ddos-scan.agc1-1/+2
2000-02-11Initial import of ddos-scan into the NetBSD packages collection.agc6-0/+76
"dds" is a program to scan for a limited set of distributed denial of service (ddos) agents. At present, it scans for active instances of "trinoo", "Tribe Flood Network" ("TFN") and "stacheldraht" agents, which were compiled using the default values in known source distributions, such as those found at: http://packetstorm.securify.com/distributed/ It will *not* detect TFN2K agents. For analyses of the three distributed denial of service attack tools it scans for, and the methods being used by dds to identify them, see: http://staff.washington.edu/dittrich/misc/trinoo.analysis http://staff.washington.edu/dittrich/misc/tfn.analysis http://staff.washington.edu/dittrich/misc/stacheldraht.analysis
2000-02-11Make this compile with KERBEROS=5.jlam2-8/+15
2000-02-07Add and enable portsentry.agc1-1/+2
2000-02-07Initial import of portsentry into the NetBSD packages collection.agc9-0/+167
PortSentry is a utility which detects and respond to port scans against a target host in real-time.
2000-02-05minor fixes for pkglintwiz1-3/+3
2000-02-05pax -> ${PAX}wiz1-2/+2
2000-02-05added patch-sumwiz1-0/+6
2000-02-05$() -> ${}wiz1-2/+2
2000-02-05add proper info dir entrywiz3-3/+20
2000-02-05whitespace fixwiz1-1/+1
2000-02-05RCS tag addedwiz1-0/+1
2000-02-05replaced CMDs by ${CMD}wiz1-4/+4
2000-02-05remove unused patchwiz1-78/+0
2000-02-05replaced some CMDs by ${CMD}wiz1-9/+9
2000-02-05RCS tags addedwiz3-0/+3
2000-02-05remove trailing '.'wiz1-1/+1
2000-02-05RCS tags addedwiz2-0/+2
2000-02-05remove IS_INTERACTIVE, since it doesn't seem to be interactive (anymore?)wiz1-2/+1
2000-02-05RCS tags addedwiz2-0/+2
2000-01-28Update to sudo-1.6.2p1. Changes from 1.6.2 (committed yesterday!):jlam2-5/+7
393) Users in the 'exempt' group shouldn't get their $PATH overridden by 'secure-path'. Patch from jmknoble@pobox.com. 394) Pam now works on HP-UX 11.0, thanks to Jeff A. Earickson.
2000-01-28Update to sudo-1.6.2. This is a bugfix release over sudo-1.6.1.jlam2-4/+4
Changes from Sudo 1.6.1: 383) Better behavior for -l and -v flags in conjunction with NOPASSWD and added "verifypw" and "listpw" options. 384) For HP-UX with cc, add the -Aa flag along with -D_HPUX_SOURCE. 385) Fix compilation with K&R compilers. 386) For netgroup host matching, match against the short version of the hostname as well as the long one if they are different. 387) Terminate passwd reading on '\r' in addition to '\n' 388) Visudo used to loop endlessly if a user entered ^D at the whatnow prompt. EOF is now treaded as 'x' (exit w/o saving changes). 389) The 'shell_noargs' runtime option is back based on a patch from bguillory@email.com. 390) Systems that return RLIM_INFINITY for RLIMIT_NOFILE (like AIX) would loop for a very loing time during sudo startup. A value of RLIM_INFINITY is now ignored (getdtablesize/sysconf is used instead). 391) Locking in visudo was broken. We now lock the sudoers file, not the sudoers temp file, which should be safe. 392) PAM fixups: custom prompts now work correctly and errors are dealt with more sanely. Patches from Cloyce D. Spradling.
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-17 14:24:40 +0000