summaryrefslogtreecommitdiff
path: root/Makefile.in
Commit message (Collapse)AuthorAgeFilesLines
* - djm@cvs.openbsd.org 2011/06/23 23:35:42djm2011-08-051-1/+3
| | | | | [monitor.c] ignore EINTR errors from poll()
* - (djm) [configure.ac Makefile.in sandbox-darwin.c] Add a sandbox fordjm2011-06-261-2/+2
| | | | | Darwin/OS X using sandbox_init() + setrlimit(); feedback and testing markus@
* - djm@cvs.openbsd.org 2011/06/22 21:57:01djm2011-06-221-2/+3
| | | | | | | | | | | | | | | | | | | | | | [servconf.c servconf.h sshd.c sshd_config.5 sandbox-rlimit.c] [sandbox-systrace.c sandbox.h configure.ac Makefile.in] introduce sandboxing of the pre-auth privsep child using systrace(4). This introduces a new "UsePrivilegeSeparation=sandbox" option for sshd_config that applies mandatory restrictions on the syscalls the privsep child can perform. This prevents a compromised privsep child from being used to attack other hosts (by opening sockets and proxying) or probing local kernel attack surface. The sandbox is implemented using systrace(4) in unsupervised "fast-path" mode, where a list of permitted syscalls is supplied. Any syscall not on the list results in SIGKILL being sent to the privsep child. Note that this requires a kernel with the new SYSTR_POLICY_KILL option. UsePrivilegeSeparation=sandbox will become the default in the future so please start testing it now. feedback dtucker@; ok markus@
* - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac]djm2011-05-051-40/+10
| | | | | | | | | [entropy.c ssh-add.c ssh-agent.c ssh-keygen.c ssh-keyscan.c] [ssh-keysign.c ssh-pkcs11-helper.c ssh-rand-helper.8 ssh-rand-helper.c] [ssh.c ssh_prng_cmds.in sshd.c contrib/aix/buildbff.sh] [regress/README.regress] Remove ssh-rand-helper and all its tentacles. PRNGd seeding has been rolled into entropy.c directly. Thanks to tim@ for testing on affected platforms.
* - (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.cdjm2011-01-251-2/+3
| | | | | | | openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to port-linux.c to avoid compilation errors. Add -lselinux to ssh when building with SELinux support to avoid linking failure; report from amk AT spamfence.net; ok dtucker
* - (dtucker) [LICENCE Makefile.in audit-bsm.c audit-linux.c audit.c audit.hdtucker2011-01-171-2/+3
| | | | | configure.ac defines.h loginrec.c] Bug #1402: add linux audit subsystem support, based on patches from Tomas Mraz and jchadima at redhat.
* - (dtucker) [Makefile.in configure.ac regress/kextype.sh] Skip sha256-baseddtucker2011-01-161-1/+3
| | | | on configurations that don't have it.
* - (djm) [Makefile.in] Use shell test to disable ecdsa key generating indjm2011-01-141-2/+2
| | | | | | host-key-force target rather than a substitution that is replaced with a comment so that the Makefile.in is still a syntactically valid Makefile (useful to run the distprep target)
* - (tim) [Makefile.in configure.ac opensshd.init.in] Add support for generatingtim2011-01-131-10/+18
| | | | ecdsa keys. ok djm.
* - (tim) [Makefile.in] test the ECC bits if we have the capability. ok djmtim2011-01-131-2/+4
|
* - (djm) [Makefile.in] list ssh_host_ecdsa key in PATHSUBS; spotted bydjm2011-01-081-1/+2
| | | | openssh AT roumenpetrov.info
* - (djm) [configure.ac Makefile.in] Use mandoc as preferred manpagedjm2011-01-031-2/+3
| | | | | | formatter if it is present, followed by nroff and groff respectively. Fixes distprep target on OpenBSD (which has bumped groff/nroff to ports in favour of mandoc). feedback and ok tim
* - (djm) [Makefile.in] revert local hack I didn't intend to commitdjm2011-01-031-2/+2
|
* - (djm) [configure.ac] Check whether libdes is needed when buildingdjm2011-01-021-2/+2
| | | | | with Heimdal krb5 support. On OpenBSD this library no longer exists, so linking it unconditionally causes a build failure; ok dtucker
* - (djm) [Makefile.in] Add new ECC filesdjm2010-08-311-6/+6
|
* - (dtucker) [Makefile.in] Bug #1770: Link libopenbsd-compat twice to solvedtucker2010-05-121-2/+2
| | | | | circular dependency problem on old or odd platforms. From Tom Lane, ok djm@.
* - (djm) [Makefile.in] Respecify -lssh after -lopenbsd-compat fordjm2010-03-131-2/+2
| | | | | ssh-pkcs11-helper to repair static builds (we do the same for ssh-keyscan). Reported by felix-mindrot AT fefe.de
* - (tim) [Makefile.in] Add missing $(EXEEXT) to install targets.tim2010-03-121-13/+13
| | | | Patch from Corinna Vinschen.
* - (tim) [openssh/Makefile.in] Now that scard is gone, no need totim2010-03-121-2/+1
| | | | make $(datadir)
* - (djm) [Makefile.in ssh-pkcs11-helper.8] Add manpage for PKCS#11 helperdjm2010-02-241-3/+5
|
* - (djm) [INSTALL Makefile.in README.smartcard configure.ac scard-opensc.c]djm2010-02-111-9/+4
| | | | | [scard.c scard.h pkcs11.h scard/Makefile.in scard/Ssh.bin.uu scard/Ssh.java] Remove obsolete smartcard support
* - markus@cvs.openbsd.org 2010/02/08 10:50:20djm2010-02-111-5/+15
| | | | | | | | | | | | | [pathnames.h readconf.c readconf.h scp.1 sftp.1 ssh-add.1 ssh-add.c] [ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh.1 ssh.c ssh_config.5] replace our obsolete smartcard code with PKCS#11. ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20.pdf ssh(1) and ssh-keygen(1) use dlopen(3) directly to talk to a PKCS#11 provider (shared library) while ssh-agent(1) delegates PKCS#11 to a forked a ssh-pkcs11-helper process. PKCS#11 is currently a compile time option. feedback and ok djm@; inspired by patches from Alon Bar-Lev `
* - (dtucker) [Makefile.in] .c files do not belong in the OBJ lines.dtucker2010-01-081-3/+3
|
* - (dtucker) [Makefile.in added roaming_client.c roaming_serv.c] Import newdtucker2010-01-081-3/+3
| | | | files for roaming and add to Makefile.
* - (djm) [Makefile.in] Mention readconf.o in ssh-keysign's make deps.djm2009-10-021-2/+2
| | | | spotted by des AT des.no
* - (djm) [Makefile.in] bz#1505: Solaris make(1) doesn't accept make variablesdjm2009-08-281-2/+2
| | | | in argv, so pass them in the environment; ok dtucker@
* - andreas@cvs.openbsd.org 2009/05/28 16:50:16dtucker2009-06-211-7/+9
| | | | | | | | | [sshd.c packet.c serverloop.c monitor_wrap.c clientloop.c sshconnect.c monitor.c Added roaming.h roaming_common.c roaming_dummy.c] Keep track of number of bytes read and written. Needed for upcoming changes. Most code from Martin Forssen, maf at appgate dot com. ok markus@ Also, applied appropriate changes to Makefile.in
* - djm@cvs.openbsd.org 2008/11/04 08:22:13djm2008-11-051-3/+3
| | | | | | | | | | | | | | | | | | | | | [auth.h auth2.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h] [readconf.c readconf.h servconf.c servconf.h ssh2.h ssh_config.5] [sshconnect2.c sshd_config.5 jpake.c jpake.h schnorr.c auth2-jpake.c] [Makefile.in] Add support for an experimental zero-knowledge password authentication method using the J-PAKE protocol described in F. Hao, P. Ryan, "Password Authenticated Key Exchange by Juggling", 16th Workshop on Security Protocols, Cambridge, April 2008. This method allows password-based authentication without exposing the password to the server. Instead, the client and server exchange cryptographic proofs to demonstrate of knowledge of the password while revealing nothing useful to an attacker or compromised endpoint. This is experimental, work-in-progress code and is presently compiled-time disabled (turn on -DJPAKE in Makefile.inc). "just commit it. It isn't too intrusive." deraadt@
* - (djm) [Makefile.in] Print "all tests passed" when all regress tests passdjm2008-07-081-2/+2
|
* - (djm) [Makefile.in] Pass though pass to conch for interop testsdjm2008-07-041-1/+3
|
* - (djm) [Makefile.in moduli.5] Include moduli(5) manpage from OpenBSD.djm2008-06-261-3/+5
| | | | (bz#1372)
* - (dtucker) [Makefile.in] Move addrmatch.o to libssh.a where it's needed now.dtucker2008-06-101-3/+3
|
* - (dtucker) [Makefile.in] Define TEST_SSH_IPV6 in make's arguments as welldtucker2008-06-101-1/+2
| | | | as environment.
* - (dtucker) [Makefile.in configure.ac regress/addrmatch.sh] Skip IPv6dtucker2008-06-101-1/+2
| | | | specific tests on platforms that don't do IPv6.
* - (dtucker) OpenBSD CVS Syncdtucker2008-06-101-2/+2
| | | | | | | | | | | | - djm@cvs.openbsd.org 2008/06/10 03:57:27 [servconf.c match.h sshd_config.5] support CIDR address matching in sshd_config "Match address" blocks, with full support for negation and fall-back to classic wildcard matching. For example: Match address 192.0.2.0/24,3ffe:ffff::/32,!10.* PasswordAuthentication yes addrmatch.c code mostly lifted from flowd's addr.c feedback and ok dtucker@
* - djm@cvs.openbsd.org 2008/05/09 14:18:44djm2008-05-191-2/+2
| | | | | | | | [clientloop.c clientloop.h ssh.c mux.c] tidy up session multiplexing code, moving it into its own file and making the function names more consistent - making ssh.c and clientloop.c a fair bit more readable. ok markus@
* - (djm) [Makefile.in regress/test-exec.sh] Find installed plink(1) anddjm2008-03-131-1/+5
| | | | puttygen(1) by $PATH
* - (djm) [Makefile.in regress/Makefile] Fix interop-tests target (note todjm2008-03-131-2/+2
| | | | self: make changes to Makefile.in next time, not the generated Makefile).
* - djm@cvs.openbsd.org 2008/02/08 23:24:07djm2008-02-101-2/+2
| | | | | | | | [servconf.c servconf.h session.c sftp-server.c sftp.h sshd_config] [sshd_config.5] add sshd_config ChrootDirectory option to chroot(2) users to a directory and tweak internal sftp server to work with it (no special files in chroot required). ok markus@
* - djm@cvs.openbsd.org 2008/02/08 23:24:07djm2008-02-101-3/+3
| | | | | | | | [servconf.c servconf.h session.c sftp-server.c sftp.h sshd_config] [sshd_config.5] add sshd_config ChrootDirectory option to chroot(2) users to a directory and tweak internal sftp server to work with it (no special files in chroot required). ok markus@
* - pvalchev@cvs.openbsd.org 2007/06/07 19:37:34djm2007-06-111-2/+2
| | | | | | | | | | | | [kex.h mac.c mac.h monitor_wrap.c myproposal.h packet.c ssh.1] [ssh_config.5 sshd.8 sshd_config.5] Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, must specify umac-64@openssh.com). Provides about 20% end-to-end speedup compared to hmac-md5. Represents a different approach to message authentication to that of HMAC that may be beneficial if HMAC based on one of its underlying hash algorithms is found to be vulnerable to a new attack. http://www.ietf.org/rfc/rfc4418.txt in conjunction with and OK djm@
* - (dtucker) [Makefile.in configure.ac] Replace single-purpose LIBSELINUX,dtucker2007-03-251-5/+2
| | | | | LIBWRAP and LIBPAM variables in Makefile with the general-purpose SSHDLIBS. "I like" djm@
* - (tim) [Makefile.in scard/Makefile.in] Add datarootdir= lines to keeptim2006-10-231-1/+2
| | | | autoconf 2.60 from complaining.
* - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in]djm2006-09-121-2/+2
| | | | | Support SMF in Solaris Packages if enabled by configure. Patch from Chad Mynhier, tested by dtucker@
* - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ]djm2006-08-301-3/+4
| | | | | | | | [platform.c platform.h sshd.c openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c] [openbsd-compat/port-solaris.h] Add support for Solaris process contracts, enabled with --use-solaris-contracts. Patch from Chad Mynhier, tweaked by dtucker@ and myself; ok dtucker@
* - (dtucker) [Makefile.in] Bug #1177: fix incorrect path for sshrc indtucker2006-08-221-2/+2
| | | | Makefile. Patch from santhi.amirta at gmail, ok djm.
* - (djm) [Makefile.in]djm2006-07-241-2/+3
| | | | Remove generated openbsd-compat/regress/Makefile in distclean target
* - dtucker@cvs.openbsd.org 2006/04/18 10:44:28djm2006-04-231-2/+2
| | | | | | | | [bufaux.c bufbn.c Makefile.in] Move Buffer bignum functions into their own file, bufbn.c. This means that sftp and sftp-server (which use the Buffer functions in bufaux.c but not the bignum ones) no longer need to be linked with libcrypto. ok markus@
* - (djm) [Makefile.in configure.ac session.c sshpty.c]djm2006-04-221-2/+3
| | | | | | | | [contrib/redhat/sshd.init openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-linux.c] [openbsd-compat/port-linux.h] Add support for SELinux, setting the execution and TTY contexts. based on patch from Daniel Walsh, bz #880; ok dtucker@
* - (djm) [Makefile.in openbsd-compat/Makefile.in] Add added filesdjm2006-03-151-2/+2
|
View Lorry Controller Status