PERFORCE change 51596 for review
Marcel Moolenaar
marcel at FreeBSD.org
Thu Apr 22 20:16:54 PDT 2004
http://perforce.freebsd.org/chv.cgi?CH=51596
Change 51596 by marcel at marcel_nfs on 2004/04/22 20:16:19
IFC @51595
Affected files ...
.. //depot/projects/gdb/UPDATING#11 integrate
.. //depot/projects/gdb/bin/df/df.1#4 integrate
.. //depot/projects/gdb/bin/df/df.c#7 integrate
.. //depot/projects/gdb/crypto/openssh/.cvsignore#1 branch
.. //depot/projects/gdb/crypto/openssh/ChangeLog#3 integrate
.. //depot/projects/gdb/crypto/openssh/README#3 integrate
.. //depot/projects/gdb/crypto/openssh/acconfig.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth-krb5.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth-pam.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth-pam.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth-passwd.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth-sia.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth-sia.h#2 integrate
.. //depot/projects/gdb/crypto/openssh/auth-skey.c#2 integrate
.. //depot/projects/gdb/crypto/openssh/auth.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth1.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/auth2.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/canohost.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/config.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/configure.ac#3 integrate
.. //depot/projects/gdb/crypto/openssh/contrib/Makefile#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/README#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/aix/README#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/aix/buildbff.sh#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/aix/inventory.sh#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/aix/pam.conf#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/caldera/openssh.spec#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/caldera/ssh-host-keygen#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/caldera/sshd.init#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/caldera/sshd.pam#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/cygwin/Makefile#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/cygwin/README#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/cygwin/ssh-host-config#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/cygwin/ssh-user-config#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/findssl.sh#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/gnome-ssh-askpass1.c#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/gnome-ssh-askpass2.c#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/hpux/README#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/hpux/egd#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/hpux/egd.rc#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/hpux/sshd#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/hpux/sshd.rc#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/redhat/gnome-ssh-askpass.csh#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/redhat/gnome-ssh-askpass.sh#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/redhat/openssh.spec#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/redhat/sshd.init#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/redhat/sshd.pam#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/solaris/README#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/solaris/buildpkg.sh#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/solaris/opensshd.in#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/ssh-copy-id#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/ssh-copy-id.1#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/sshd.pam.freebsd#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/sshd.pam.generic#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/suse/openssh.spec#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/suse/rc.config.sshd#1 branch
.. //depot/projects/gdb/crypto/openssh/contrib/suse/rc.sshd#1 branch
.. //depot/projects/gdb/crypto/openssh/defines.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/dh.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/gss-serv-krb5.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/loginrec.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/monitor.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/monitor_wrap.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/monitor_wrap.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/openbsd-compat/.cvsignore#1 branch
.. //depot/projects/gdb/crypto/openssh/openbsd-compat/bsd-cygwin_util.c#2 integrate
.. //depot/projects/gdb/crypto/openssh/openbsd-compat/bsd-misc.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/openbsd-compat/fake-rfc2553.h#4 integrate
.. //depot/projects/gdb/crypto/openssh/openbsd-compat/setenv.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/openbsd-compat/xcrypt.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/readconf.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/readconf.h#3 integrate
.. //depot/projects/gdb/crypto/openssh/regress/Makefile#3 integrate
.. //depot/projects/gdb/crypto/openssh/regress/README.regress#3 integrate
.. //depot/projects/gdb/crypto/openssh/regress/dynamic-forward.sh#2 integrate
.. //depot/projects/gdb/crypto/openssh/regress/login-timeout.sh#1 branch
.. //depot/projects/gdb/crypto/openssh/regress/sftp-cmds.sh#3 integrate
.. //depot/projects/gdb/crypto/openssh/regress/ssh-com-client.sh#2 integrate
.. //depot/projects/gdb/crypto/openssh/regress/ssh-com-keygen.sh#2 integrate
.. //depot/projects/gdb/crypto/openssh/regress/ssh-com-sftp.sh#2 integrate
.. //depot/projects/gdb/crypto/openssh/regress/ssh-com.sh#3 integrate
.. //depot/projects/gdb/crypto/openssh/regress/test-exec.sh#3 integrate
.. //depot/projects/gdb/crypto/openssh/regress/try-ciphers.sh#2 integrate
.. //depot/projects/gdb/crypto/openssh/scard/.cvsignore#1 branch
.. //depot/projects/gdb/crypto/openssh/scp.1#3 integrate
.. //depot/projects/gdb/crypto/openssh/session.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/sftp-client.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/sftp.1#3 integrate
.. //depot/projects/gdb/crypto/openssh/sftp.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/ssh-agent.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/ssh-keyscan.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/ssh.1#3 integrate
.. //depot/projects/gdb/crypto/openssh/ssh.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/ssh_config#3 integrate
.. //depot/projects/gdb/crypto/openssh/ssh_config.5#3 integrate
.. //depot/projects/gdb/crypto/openssh/sshconnect2.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/sshd.c#3 integrate
.. //depot/projects/gdb/crypto/openssh/sshd_config#5 integrate
.. //depot/projects/gdb/crypto/openssh/sshd_config.5#5 integrate
.. //depot/projects/gdb/crypto/openssh/sshlogin.c#2 integrate
.. //depot/projects/gdb/crypto/openssh/version.h#3 integrate
.. //depot/projects/gdb/etc/defaults/periodic.conf#2 integrate
.. //depot/projects/gdb/etc/mtree/BSD.local.dist#5 integrate
.. //depot/projects/gdb/etc/mtree/BSD.usr.dist#6 integrate
.. //depot/projects/gdb/etc/periodic/security/610.ipf6denied#1 branch
.. //depot/projects/gdb/etc/rc.d/ipfilter#5 integrate
.. //depot/projects/gdb/etc/rc.d/ipmon#4 integrate
.. //depot/projects/gdb/games/fortune/datfiles/fortunes#4 integrate
.. //depot/projects/gdb/games/fortune/datfiles/fortunes.sp.ok#2 integrate
.. //depot/projects/gdb/games/fortune/datfiles/fortunes2#3 integrate
.. //depot/projects/gdb/gnu/lib/libg2c/Makefile#2 integrate
.. //depot/projects/gdb/gnu/lib/libg2c/config.h#2 integrate
.. //depot/projects/gdb/include/ctype.h#2 integrate
.. //depot/projects/gdb/lib/Makefile#5 integrate
.. //depot/projects/gdb/lib/libarchive/archive_entry.c#8 integrate
.. //depot/projects/gdb/lib/libarchive/archive_platform.h#7 integrate
.. //depot/projects/gdb/lib/libarchive/archive_read_extract.c#6 integrate
.. //depot/projects/gdb/lib/libarchive/archive_read_support_format_tar.c#9 integrate
.. //depot/projects/gdb/lib/libarchive/archive_write_set_format_pax.c#9 integrate
.. //depot/projects/gdb/lib/libarchive/archive_write_set_format_shar.c#6 integrate
.. //depot/projects/gdb/lib/libarchive/archive_write_set_format_ustar.c#7 integrate
.. //depot/projects/gdb/lib/libc/gen/getpwent.c#3 integrate
.. //depot/projects/gdb/lib/libc/net/res_query.c#2 integrate
.. //depot/projects/gdb/lib/libc/stdio/vfprintf.c#4 integrate
.. //depot/projects/gdb/lib/libc/stdio/vfwprintf.c#4 integrate
.. //depot/projects/gdb/lib/libc/sys/kqueue.2#2 integrate
.. //depot/projects/gdb/lib/libdisk/chunk.c#3 integrate
.. //depot/projects/gdb/lib/libdisk/create_chunk.c#3 integrate
.. //depot/projects/gdb/lib/libdisk/disk.c#3 integrate
.. //depot/projects/gdb/lib/libdisk/libdisk.h#4 integrate
.. //depot/projects/gdb/lib/libdisk/open_disk.c#4 integrate
.. //depot/projects/gdb/lib/libdisk/write_powerpc_disk.c#1 branch
.. //depot/projects/gdb/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml#12 integrate
.. //depot/projects/gdb/sbin/fsck_msdosfs/boot.c#2 integrate
.. //depot/projects/gdb/share/colldef/Makefile#5 integrate
.. //depot/projects/gdb/share/man/man4/acpi.4#4 integrate
.. //depot/projects/gdb/share/man/man4/ip.4#2 integrate
.. //depot/projects/gdb/share/man/man4/man4.i386/acpi_asus.4#1 branch
.. //depot/projects/gdb/share/man/man4/ng_ether.4#2 integrate
.. //depot/projects/gdb/share/mk/sys.mk#3 integrate
.. //depot/projects/gdb/share/mklocale/Makefile#4 integrate
.. //depot/projects/gdb/share/monetdef/Makefile#6 integrate
.. //depot/projects/gdb/share/monetdef/he_IL.UTF-8.src#1 branch
.. //depot/projects/gdb/share/msgdef/Makefile#5 integrate
.. //depot/projects/gdb/share/msgdef/he_IL.UTF-8.src#1 branch
.. //depot/projects/gdb/share/numericdef/Makefile#5 integrate
.. //depot/projects/gdb/share/timedef/Makefile#6 integrate
.. //depot/projects/gdb/share/timedef/he_IL.UTF-8.src#1 branch
.. //depot/projects/gdb/sys/amd64/acpica/acpi_machdep.c#2 integrate
.. //depot/projects/gdb/sys/boot/i386/boot0/boot0.s#2 integrate
.. //depot/projects/gdb/sys/boot/i386/boot0/boot0ext.s#3 integrate
.. //depot/projects/gdb/sys/boot/i386/boot0/boot0sio.s#2 integrate
.. //depot/projects/gdb/sys/compat/ndis/kern_ndis.c#12 integrate
.. //depot/projects/gdb/sys/compat/ndis/ntoskrnl_var.h#8 integrate
.. //depot/projects/gdb/sys/conf/NOTES#13 integrate
.. //depot/projects/gdb/sys/conf/files#17 integrate
.. //depot/projects/gdb/sys/conf/files.i386#11 integrate
.. //depot/projects/gdb/sys/conf/options#13 integrate
.. //depot/projects/gdb/sys/dev/acpica/Osd/OsdTable.c#3 integrate
.. //depot/projects/gdb/sys/dev/acpica/acpi.c#13 integrate
.. //depot/projects/gdb/sys/dev/acpica/acpi_acad.c#4 integrate
.. //depot/projects/gdb/sys/dev/acpica/acpi_cpu.c#5 integrate
.. //depot/projects/gdb/sys/dev/acpica/acpi_timer.c#5 integrate
.. //depot/projects/gdb/sys/dev/acpica/acpivar.h#9 integrate
.. //depot/projects/gdb/sys/dev/asr/asr.c#4 integrate
.. //depot/projects/gdb/sys/dev/ata/ata-chipset.c#6 integrate
.. //depot/projects/gdb/sys/dev/ata/ata-pci.c#5 integrate
.. //depot/projects/gdb/sys/dev/ata/ata-pci.h#6 integrate
.. //depot/projects/gdb/sys/dev/ciss/cissreg.h#3 integrate
.. //depot/projects/gdb/sys/dev/hfa/fore_load.c#3 delete
.. //depot/projects/gdb/sys/dev/if_ndis/if_ndis.c#11 integrate
.. //depot/projects/gdb/sys/dev/pci/pci.c#6 integrate
.. //depot/projects/gdb/sys/dev/sound/pci/cmi.c#5 integrate
.. //depot/projects/gdb/sys/geom/concat/g_concat.c#4 integrate
.. //depot/projects/gdb/sys/i386/acpica/acpi_asus.c#1 branch
.. //depot/projects/gdb/sys/i386/acpica/acpi_machdep.c#3 integrate
.. //depot/projects/gdb/sys/i386/conf/GENERIC#6 integrate
.. //depot/projects/gdb/sys/i386/conf/NOTES#10 integrate
.. //depot/projects/gdb/sys/ia64/acpica/acpi_machdep.c#2 integrate
.. //depot/projects/gdb/sys/kern/imgact_elf.c#8 integrate
.. //depot/projects/gdb/sys/kern/kern_exec.c#7 integrate
.. //depot/projects/gdb/sys/kern/kern_timeout.c#4 integrate
.. //depot/projects/gdb/sys/kern/sched_ule.c#9 integrate
.. //depot/projects/gdb/sys/kern/vfs_export.c#3 integrate
.. //depot/projects/gdb/sys/kern/vfs_syscalls.c#7 integrate
.. //depot/projects/gdb/sys/modules/acpi/acpi/Makefile#3 integrate
.. //depot/projects/gdb/sys/modules/acpi/acpi_asus/Makefile#1 branch
.. //depot/projects/gdb/sys/modules/asr/Makefile#2 integrate
.. //depot/projects/gdb/sys/modules/ipfilter/Makefile#2 integrate
.. //depot/projects/gdb/sys/net/radix.c#4 integrate
.. //depot/projects/gdb/sys/net/route.c#7 integrate
.. //depot/projects/gdb/sys/net/route.h#6 integrate
.. //depot/projects/gdb/sys/netinet/in_pcb.c#5 integrate
.. //depot/projects/gdb/sys/netinet/tcp_subr.c#6 integrate
.. //depot/projects/gdb/sys/netinet/tcp_var.h#5 integrate
.. //depot/projects/gdb/sys/netipsec/xform_tcp.c#2 integrate
.. //depot/projects/gdb/sys/pci/amdpm.c#3 integrate
.. //depot/projects/gdb/sys/powerpc/include/param.h#3 integrate
.. //depot/projects/gdb/sys/powerpc/include/pmap.h#5 integrate
.. //depot/projects/gdb/sys/sys/callout.h#3 integrate
.. //depot/projects/gdb/sys/sys/imgact.h#3 integrate
.. //depot/projects/gdb/usr.bin/find/find.1#4 integrate
.. //depot/projects/gdb/usr.bin/make/job.c#2 integrate
.. //depot/projects/gdb/usr.bin/tar/write.c#5 integrate
.. //depot/projects/gdb/usr.sbin/inetd/inetd.c#4 integrate
.. //depot/projects/gdb/usr.sbin/rarpd/rarpd.c#2 integrate
Differences ...
==== //depot/projects/gdb/UPDATING#11 (text+ko) ====
@@ -17,6 +17,11 @@
developers choose to disable these features on build machines
to maximize performance.
+20040420:
+ Due to changes in the callout ABI, kernels compiled after this
+ date may be incompatible with kernel modules compiled prior to
+ 20040406.
+
20040414:
The PCI bus power state stuff has been turned on. If this causes
problems for your system, please disable it using the tunable
@@ -1591,4 +1596,4 @@
Contact Warner Losh if you have any questions about your use of
this document.
-$FreeBSD: src/UPDATING,v 1.305 2004/04/16 18:36:52 brooks Exp $
+$FreeBSD: src/UPDATING,v 1.306 2004/04/20 15:49:30 cperciva Exp $
==== //depot/projects/gdb/bin/df/df.1#4 (text+ko) ====
@@ -26,7 +26,7 @@
.\" SUCH DAMAGE.
.\"
.\" @(#)df.1 8.3 (Berkeley) 5/8/95
-.\" $FreeBSD: src/bin/df/df.1,v 1.32 2004/04/18 20:56:31 obrien Exp $
+.\" $FreeBSD: src/bin/df/df.1,v 1.33 2004/04/22 16:33:54 obrien Exp $
.\"
.Dd May 8, 1995
.Dt DF 1
@@ -37,7 +37,7 @@
.Sh SYNOPSIS
.Nm
.Oo
-.Fl b | h | H | k |
+.Fl b | g | h | H | k |
.Fl m | P
.Oc
.Op Fl aciln
==== //depot/projects/gdb/bin/df/df.c#7 (text+ko) ====
@@ -44,7 +44,7 @@
#endif /* not lint */
#endif
#include <sys/cdefs.h>
-__FBSDID("$FreeBSD: src/bin/df/df.c,v 1.58 2004/04/18 20:56:31 obrien Exp $");
+__FBSDID("$FreeBSD: src/bin/df/df.c,v 1.60 2004/04/22 17:05:08 obrien Exp $");
#include <sys/param.h>
#include <sys/stat.h>
@@ -115,13 +115,13 @@
static unit_t unitp [] = { NONE, KILO, MEGA, GIGA, TERA, PETA };
+static void addstat(struct statfs *, struct statfs *);
static char *getmntpt(const char *);
static int int64width(int64_t);
static char *makenetvfslist(void);
static void prthuman(const struct statfs *, int64_t);
static void prthumanval(double);
static void prtstat(struct statfs *, struct maxwidths *);
-static void addstat(struct statfs *, struct statfs *);
static size_t regetmntinfo(struct statfs **, long, const char **);
static unit_t unit_adjust(double *);
static void update_maxwidths(struct maxwidths *, const struct statfs *);
@@ -140,8 +140,9 @@
main(int argc, char *argv[])
{
struct stat stbuf;
- struct statfs statfsbuf, totalbuf, *mntbuf;
+ struct statfs statfsbuf, totalbuf;
struct maxwidths maxwidths;
+ struct statfs *mntbuf;
const char *fstype;
char *mntpath, *mntpt;
const char **vfslist;
@@ -150,24 +151,24 @@
fstype = "ufs";
- memset (&totalbuf, 0, sizeof (totalbuf));
+ memset(&totalbuf, 0, sizeof(totalbuf));
totalbuf.f_bsize = DEV_BSIZE;
- strncpy (totalbuf.f_mntfromname, "total", MNAMELEN);
+ strncpy(totalbuf.f_mntfromname, "total", MNAMELEN);
vfslist = NULL;
while ((ch = getopt(argc, argv, "abcgHhiklmnPt:")) != -1)
switch (ch) {
case 'a':
aflag = 1;
break;
- case 'c':
- cflag = 1;
- break;
case 'b':
/* FALLTHROUGH */
case 'P':
putenv("BLOCKSIZE=512");
hflag = 0;
break;
+ case 'c':
+ cflag = 1;
+ break;
case 'g':
putenv("BLOCKSIZE=1g");
hflag = 0;
@@ -428,12 +429,11 @@
static int headerlen, timesthrough = 0;
static const char *header;
int64_t used, availblks, inodes;
- int total;
if (++timesthrough == 1) {
mwp->mntfrom = imax(mwp->mntfrom, (int)strlen("Filesystem"));
if (hflag) {
- header = " Size";
+ header = " Size";
mwp->total = mwp->used = mwp->avail =
(int)strlen(header);
} else {
@@ -470,15 +470,15 @@
}
(void)printf(" %5.0f%%",
availblks == 0 ? 100.0 : (double)used / (double)availblks * 100.0);
- total = !*sfsp->f_mntonname &&
- strncmp(sfsp->f_mntfromname, "total", MNAMELEN) == 0;
if (iflag) {
inodes = sfsp->f_files;
used = inodes - sfsp->f_ffree;
(void)printf(" %*jd %*jd %4.0f%% ", mwp->iused, (intmax_t)used,
mwp->ifree, (intmax_t)sfsp->f_ffree, inodes == 0 ? 100.0 :
(double)used / (double)inodes * 100.0);
- } else if (!total)
+ } else
+ (void)printf(" ");
+ if (strncmp(sfsp->f_mntfromname, "total", MNAMELEN) != 0)
(void)printf(" %s", sfsp->f_mntonname);
(void)printf("\n");
}
@@ -486,8 +486,9 @@
void
addstat(struct statfs *totalfsp, struct statfs *statfsp)
{
- double bsize = statfsp->f_bsize / totalfsp->f_bsize;
+ uint64_t bsize;
+ bsize = statfsp->f_bsize / totalfsp->f_bsize;
totalfsp->f_blocks += statfsp->f_blocks * bsize;
totalfsp->f_bfree += statfsp->f_bfree * bsize;
totalfsp->f_bavail += statfsp->f_bavail * bsize;
@@ -546,7 +547,7 @@
{
(void)fprintf(stderr,
- "usage: df [-b | -H | -h | -k | -m | -P] [-aciln] [-t type] [file | filesystem ...]\n");
+"usage: df [-b | -g | -H | -h | -k | -m | -P] [-aciln] [-t type] [file | filesystem ...]\n");
exit(EX_USAGE);
}
==== //depot/projects/gdb/crypto/openssh/ChangeLog#3 (text+ko) ====
@@ -1,3 +1,192 @@
+20040418
+ - (dtucker) [auth-pam.c] Log username and source host for failed PAM
+ authentication attempts. With & ok djm@
+ - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow
+ change of user context without a password, so relax auth method
+ restrictions; from vinschen AT redhat.com; ok dtucker@
+ - Release 3.8.1p1
+
+20040416
+ - (dtucker) [regress/sftp-cmds.sh] Skip quoting test on Cygwin, since
+ FAT/NTFS does not permit quotes in filenames. From vinschen at redhat.com
+ - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache
+ file using FILE: method, fixes problems on Mac OSX.
+ Patch from simon at sxw.org.uk; ok dtucker@
+ - (tim) [configure.ac] Set SETEUID_BREAKS_SETUID, BROKEN_SETREUID and
+ BROKEN_SETREGID for SCO OpenServer 3
+
+20040412
+ - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
+ from bug #701 (text from jfh at cise.ufl.edu).
+ - (dtucker) [acconfig.h configure.ac defines.h] Bug #673: check for 4-arg
+ skeychallenge(), eg on NetBSD. ok mouring@
+ - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly
+ 4-arg, with compatibility for 3-arg versions. From djm@, ok me.
+ - (djm) [configure.ac] Fix detection of libwrap on OpenBSD; ok dtucker@
+
+20040408
+ - (dtucker) [loginrec.c] Use UT_LINESIZE if available, prevents truncating
+ pty name on Linux 2.6.x systems. Patch from jpe at eisenmenger.org.
+ - (bal) [monitor.c monitor_wrap.c] Second try. Put the zlib.h headers
+ back and #undef TARGET_OS_MAC instead. (Bug report pending with Apple)
+ - (dtucker) [defines.h loginrec.c] Define UT_LINESIZE if not defined and
+ simplify loginrec.c. ok tim@
+ - (bal) [monitor.c monitor_wrap.c] Ok.. Last time. Promise. Tim suggested
+ limiting scope and dtucker@ agreed.
+
+20040407
+ - (dtucker) [session.c] Flush stdout after displaying loginmsg. From
+ f_mohr at yahoo.de.
+ - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see
+ if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
+ are starting to restrict it as internal since it is not needed by
+ developers any more. (Patch based on Apple tree)
+ - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
+ krb5 on MacOS/X conflicts. There may be a better solution, but this will
+ work for now.
+
+20040406
+ - (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use
+ updwtmpx() on IRIX since it seems to clobber utmp. ok djm@
+ - (dtucker) [configure.ac] Bug #816, #748 (again): Attempt to detect
+ broken getaddrinfo and friends on HP-UX. ok djm@
+
+20040330
+ - (dtucker) [configure.ac] Bug #811: Use "!" for LOCKED_PASSWD_PREFIX on
+ Linuxes, since that's what many use. ok djm@
+ - (dtucker) [auth-pam.c] rename the_authctxt to sshpam_authctxt in auth-pam.c
+ to reduce potential confusion with the one in sshd.c. ok djm@
+ - (djm) Bug #825: Fix ip_options_check() for mapped IPv4/IPv6 connection;
+ with & ok dtucker@
+
+20040327
+ - (dtucker) [session.c] Bug #817: Clear loginmsg after fork to prevent
+ duplicate login messages for mutli-session logins. ok djm@
+
+20040322
+ - (djm) [sshd.c] Drop supplemental groups if started as root
+ - (djm) OpenBSD CVS Sync
+ - markus at cvs.openbsd.org 2004/03/09 22:11:05
+ [ssh.c]
+ increase x11 cookie lifetime to 20 minutes; ok djm
+ - markus at cvs.openbsd.org 2004/03/10 09:45:06
+ [ssh.c]
+ trim usage to match ssh(1) and look more like unix. ok djm@
+ - markus at cvs.openbsd.org 2004/03/11 08:36:26
+ [sshd.c]
+ trim usage; ok deraadt
+ - markus at cvs.openbsd.org 2004/03/11 10:21:17
+ [ssh.c sshd.c]
+ ssh, sshd: sync version output, ok djm
+ - markus at cvs.openbsd.org 2004/03/20 10:40:59
+ [version.h]
+ 3.8.1
+ - (djm) Crank RPM spec versions
+
+20040311
+ - (djm) [configure.ac] Add standard license to configure.ac; ok ben, dtucker
+
+20040310
+ - (dtucker) [openbsd-compat/fake-rfc2553.h] Bug #812: #undef getaddrinfo
+ before redefining it, silences warnings on Tru64.
+
+20040308
+ - (dtucker) [sshd.c] Back out rev 1.270 as it caused problems on some
+ platforms (eg SCO, HP-UX) with logging in the wrong TZ. ok djm@
+ - (dtucker) [configure.ac sshd.c openbsd-compat/bsd-misc.h
+ openbsd-compat/setenv.c] Unset KRB5CCNAME on AIX to prevent it from being
+ inherited by the child. ok djm@
+ - (dtucker) [auth-pam.c auth-pam.h auth1.c auth2.c monitor.c monitor_wrap.c
+ monitor_wrap.h] Bug #808: Ensure force_pwchange is correctly initialized
+ even if keyboard-interactive is not used by the client. Prevents
+ segfaults in some cases where the user's password is expired (note this
+ is not considered a security exposure). ok djm@
+ - (djm) OpenBSD CVS Sync
+ - markus at cvs.openbsd.org 2004/03/03 06:47:52
+ [sshd.c]
+ change proctiltle after accept(2); ok henning, deraadt, djm
+ - djm at cvs.openbsd.org 2004/03/03 09:30:42
+ [sftp-client.c]
+ Don't print duplicate messages when progressmeter is off
+ Spotted by job317 AT mailvault.com; ok markus@
+ - djm at cvs.openbsd.org 2004/03/03 09:31:20
+ [sftp.c]
+ Fix initialisation of progress meter; ok markus@
+ - markus at cvs.openbsd.org 2004/03/05 10:53:58
+ [readconf.c readconf.h scp.1 sftp.1 ssh.1 ssh_config.5 sshconnect2.c]
+ add IdentitiesOnly; ok djm@, pb@
+ - djm at cvs.openbsd.org 2004/03/08 09:38:05
+ [ssh-keyscan.c]
+ explicitly initialise remote_major and remote_minor.
+ from cjwatson AT debian.org; ok markus@
+ - dtucker at cvs.openbsd.org 2004/03/08 10:18:57
+ [sshd_config.5]
+ Document KerberosGetAFSToken; ok markus@
+ - (tim) [regress/README.regress] Document ssh-rand-helper issue. ok bal
+
+20040307
+ - (tim) [regress/login-timeout.sh] fix building outside of source tree.
+
+20040304
+ - (dtucker) [auth-pam.c] Don't try to export PAM when compiled with
+ -DUSE_POSIX_THREADS. From antoine.verheijen at ualbert ca. ok djm@
+ - (dtucker) [auth-pam.c] Reset signal status when starting pam auth thread,
+ prevent hanging during PAM keyboard-interactive authentications. ok djm@
+ - (dtucker) [auth-passwd.c auth-sia.c auth-sia.h defines.h
+ openbsd-compat/xcrypt.c] Bug #802: Fix build error on Tru64 when
+ configured --with-osfsia. ok djm@
+
+20040303
+ - (djm) [configure.ac ssh-agent.c] Use prctl to prevent ptrace on ssh-agent
+ ok dtucker
+
+20040229
+ - (tim) [configure.ac] Put back bits mistakenly removed from Rev 1.188
+
+20040229
+ - (dtucker) OpenBSD CVS Sync
+ - djm at cvs.openbsd.org 2004/02/25 00:22:45
+ [sshd.c]
+ typo in comment
+ - dtucker at cvs.openbsd.org 2004/02/27 22:42:47
+ [dh.c]
+ Prevent sshd from sending DH groups with a primitive generator of zero or
+ one, even if they are listed in /etc/moduli. ok markus@
+ - dtucker at cvs.openbsd.org 2004/02/27 22:44:56
+ [dh.c]
+ Make /etc/moduli line buffer big enough for 8kbit primes, in case anyone
+ ever uses one. ok markus@
+ - dtucker at cvs.openbsd.org 2004/02/27 22:49:27
+ [dh.c]
+ Reset bit counter at the right time, fixes debug output in the case where
+ the DH group is rejected. ok markus@
+ - dtucker at cvs.openbsd.org 2004/02/17 08:23:20
+ [regress/Makefile regress/login-timeout.sh]
+ Add regression test for LoginGraceTime; ok markus@
+ - markus at cvs.openbsd.org 2004/02/24 16:56:30
+ [regress/test-exec.sh]
+ allow arguments in ${TEST_SSH_XXX}
+ - markus at cvs.openbsd.org 2004/02/24 17:06:52
+ [regress/ssh-com-client.sh regress/ssh-com-keygen.sh
+ regress/ssh-com-sftp.sh regress/ssh-com.sh]
+ test against recent ssh.com releases
+ - dtucker at cvs.openbsd.org 2004/02/28 12:16:57
+ [regress/dynamic-forward.sh]
+ Make dynamic-forward understand nc's new output. ok markus@
+ - dtucker at cvs.openbsd.org 2004/02/28 13:44:45
+ [regress/try-ciphers.sh]
+ Test acss too; ok markus@
+ - (dtucker) [regress/try-ciphers.sh] Skip acss if not compiled in (eg if we
+ built with openssl < 0.9.7)
+
+20040226
+ - (bal) KNF our sshlogin.c even if the code looks nothing like upstream
+ code due to diversity issues.
+
+20040225
+ - (djm) Trim ChangeLog
+ - (djm) Don't specify path to PAM modules in Redhat sshd.pam; from Fedora
+
20040224
- (dtucker) OpenBSD CVS Sync
- markus at cvs.openbsd.org 2004/02/19 21:15:04
@@ -794,1139 +983,4 @@
- (djm) Trim deprecated options from INSTALL. Mention UsePAM
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
-20030919
- - (djm) Bug #683: Remove reference to --with-ipv4-default from INSTALL;
- djast AT cs.toronto.edu
- - (djm) Bug #661: Remove duplicate check for basename; from
- bugzilla-openssh AT thewrittenword.com
- - (djm) Bug #641: Allow RedHat RPM building without GTK-2; Patch from
- jason AT devrandom.org
- - (djm) Bug #646: Fix location of x11-ssh-askpass; Jim
- - (dtucker) [openbsd-compat/port-aix.h] Bug #640: Don't include audit.h
- unless required. Reorder to reduce warnings.
- - (dtucker) [session.c] Bug #643: Fix size_t -> u_int and fix null deref
- when /etc/default/login doesn't exist or isn't readable. Fixes from
- jparsons-lists at saffron.net and georg.oppenberg at deu mci com.
- - (dtucker) [acconfig.h] Updated basename test needs HAVE_BASENAME
-
-20030918
- - (djm) Bug #652: Fix empty password auth
-
-20030917
- - (djm) Sync with V_3_7 branch
- - (djm) OpenBSD Sync
- - markus at cvs.openbsd.org 2003/09/16 21:02:40
- [buffer.c channels.c version.h]
- more malloc/fatal fixes; ok millert/deraadt; ghudson at MIT.EDU
- - (djm) Crank RPM spec file versions
- - (tim) [openbsd-compat/inet_ntoa.c] 20030917 "Sync with V_3_7 branch" undid
- 20030916 "Missed dead header in inet_ntoa.c"
-
-20030916
- - (dtucker) [acconfig.h configure.ac defines.h session.c] Bug #252: Retrieve
- PATH (or SUPATH) and UMASK from /etc/default/login on platforms that have it
- (eg Solaris, Reliant Unix). Patch from Robert.Dahlem at siemens.com.
- ok djm@
- - (bal) OpenBSD Sync
- - deraadt at cvs.openbsd.org 2003/09/16 03:03:47
- [buffer.c]
- do not expand buffer before attempting to reallocate it; markus ok
- - (tim) [configure.ac] Fix portability issues.
- - (bal) Missed dead header in inet_ntoa.c
-
-20030914
- - (dtucker) [Makefile regress/Makefile] Fix portability issues preventing
- the regression tests from running with Solaris' make. Patch from Brian
- Poole (raj at cerias.purdue.edu).
- - (dtucker) [regress/Makefile] AIX's make doesn't like " +=", so replace
- with vanilla "=".
-
-20030913
- - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for
- slower hosts, increase to 10 sec.
- - (dtucker) [auth-passwd.c] On AIX, call setauthdb() before loginsuccess(),
- required to correctly reset failed login count when using a password
- registry other than "files" (eg LDAP, see bug #543).
- - (tim) [configure.ac] define WITH_ABBREV_NO_TTY for SCO.
- Report by Roger Cornelius.
- - (dtucker) [auth-pam.c] Use SSHD_PAM_SERVICE for PAM service name, patch
- from cjwatson at debian.org.
-
-20030912
- - (tim) [regress/agent-ptrace.sh] sh doesn't like "if ! shell_function; then".
- - (tim) [Makefile.in] only mkdir regress if it does not exist.
- - (tim) [regress/yes-head.sh] shell portability fix.
-
-20030911
- - (dtucker) [configure.ac] Bug #588, #615: Move other libgen tests to after
- the dirname test, to allow a broken dirname to be detected correctly.
- Based partially on patch supplied by alex.kiernan at thus.net. ok djm@
- - (tim) [configure.ac] Move libgen tests to before libwrap to unbreak
- UnixWare 2.03 using --with-tcp-wrappers.
- - (tim) [configure.ac] Prefer setuid/setgid on UnixWare and Open Server.
- - (tim) [regress/agent-ptrace.sh regress/dynamic-forward.sh
- regress/sftp-cmds.sh regress/stderr-after-eof.sh regress/test-exec.sh]
- no longer depends on which(1). patch by dtucker@
-
-20030910
- - (dtucker) [configure.ac] Bug #636: Add support for Cray's new X1 machine.
- Patch from wendyp at cray.com.
- - (dtucker) [configure.ac] Part of bug #615: tcsendbreak might be a macro.
- - (dtucker) [regressh/yes-head.sh] Some platforms (eg Solaris) don't have
- "yes".
-
-20030909
- - (tim) [regress/Makefile] Fixes for building outside of a read-only
- source tree.
- - (tim) [regress/agent-timeout.sh] s/TIMEOUT/SSHAGENT_TIMEOUT/ Fixes conflict
- with shell read-only variable.
- - (tim) [regress/sftp-badcmds.sh regress/sftp-cmds.sh] Fix errors like
- UX:rm: ERROR: Cannot remove '.' or '..'
-
-20030908
- - (tim) [configure.ac openbsd-compat/getrrsetbyname.c] wrap _getshort and
- _getlong in #ifndef
- - (tim) [configure.ac acconfig.h openbsd-compat/getrrsetbyname.c] test for
- HEADER.ad in arpa/nameser.h
- - (tim) [ssh-keygen.c] s/PATH_MAX/MAXPATHLEN/ ok mouring@
-
-20030907
- - (dtucker) [agent-ptrace.sh dynamic-forward.sh (all regress/)]
- Put "which" inside quotes.
- - (dtucker) [dynamic-forward.sh forwarding.sh sftp-batch.sh (all regress/)]
- Add ${EXEEXT}: required to work on Cygwin.
- - (dtucker) [regress/sftp-batch.sh] Make temporary batch file name more
- distinctive, so "rm ${BATCH}.*" doesn't match the script itself.
- - (dtucker) [regress/sftp-cmds.sh] Skip quoted file test on Cygwin.
- - (dtucker) [openbsd-compat/xcrypt.c] #elsif -> #elif
- - (dtucker) [acconfig.h] Typo.
- - (dtucker) [CREDITS Makefile.in configure.ac mdoc2man.awk mdoc2man.pl]
- Replace mdoc2man.pl with mdoc2man.awk, provided by Peter Stuge.
-
-20030906
- - (dtucker) [acconfig.h configure.ac uidswap.c] Prefer setuid/setgid on AIX.
-
-20030905
- - (dtucker) [Makefile.in] Add distclean target for regress/, fix clean target.
-
-20030904
- - (dtucker) Portablize regression tests. Parts contributed by Roumen
- Petrov, David M. Williams and Corinna Vinschen.
- - [Makefile.in] Add "make tests" target and "make clean" hooks.
- - [regress/agent-getpeereid.sh] Skip test on platforms that don't support
- getpeereid.
- - [regress/agent-ptrace.sh] Skip tests if platform doesn't support it or
- gdb cannot be found.
- - [regress/reconfigure/sh] Make path to sshd fully qualified if required.
- - [regress/rekey.sh] Remove dependence on /dev/zero (not all platforms have
- it). The sparse file will take less disk space too.
- - [regress/sftp-cmds.sh] Ensure files used for test are readable.
- - [regress/stderr-after-eof.sh] Search for a usable checksum program.
- - [regress/sftp-badcmds.sh regress/sftp-cmds.sh regress/sftp.sh
- regress/ssh-com-client.sh regress/ssh-com-sftp.sh regress/stderr-data.sh
- regress/transfer.sh] Use ${EXEEXT} where appropriate.
- - [regress/sftp.sh regress/ssh-com-sftp.sh] Remove dependency on /dev/stdin.
- - [regress/agent-ptrace.sh regress/agent-timeout.sh]
- "grep -q" -> "grep >/dev/null"
- - [regress/agent.sh regress/proto-version.sh regress/ssh-com.sh
- regress/test-exec.sh] Handle different ways of echoing without newlines.
- - [regress/dynamic-forward.sh] Some "which" programs output on stderr.
- - [regress/sftp-cmds.sh] Use portable "test" option.
- - [regress/test-exec.sh] Use sudo, search for "whoami" equivalent, always
- use Strictmodes no, wait longer for sshd startup.
- - [regress/Makefile] Remove BSDisms.
- - [regress/README.regress] Add a basic readme.
- - [Makefile.in regress/agent-getpeereid.sh] config.h is now in $BUILDDIR
- not $OBJ.
- - [Makefile.in regress/agent-ptrace] Fix minor regress issues on Cygwin.
-
-20030903
- - (djm) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/08/26 09:58:43
- [auth-passwd.c auth.c auth.h auth1.c auth2-none.c auth2-passwd.c]
- [auth2.c monitor.c]
- fix passwd auth for 'username leaks via timing'; with djm@, original
- patches from solar
- - markus at cvs.openbsd.org 2003/08/28 12:54:34
- [auth.h]
- remove kerberos support from ssh1, since it has been replaced with GSSAPI;
- but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
- - markus at cvs.openbsd.org 2003/09/02 16:40:29
- [version.h]
- enter 3.7
- - jmc at cvs.openbsd.org 2003/09/02 18:50:06
- [sftp.1 ssh_config.5]
- escape punctuation;
- ok deraadt@
-
-20030902
- - (djm) OpenBSD CVS Sync
- - deraadt at cvs.openbsd.org 2003/08/24 17:36:51
- [auth2-gss.c]
- 64 bit cleanups; markus ok
- - markus at cvs.openbsd.org 2003/08/28 12:54:34
- [auth-krb5.c auth.h auth1.c monitor.c monitor.h monitor_wrap.c]
- [monitor_wrap.h readconf.c servconf.c session.c ssh_config.5]
- [sshconnect1.c sshd.c sshd_config sshd_config.5]
- remove kerberos support from ssh1, since it has been replaced with GSSAPI;
- but keep kerberos passwd auth for ssh1 and 2; ok djm, hin, henning, ...
- - markus at cvs.openbsd.org 2003/08/29 10:03:15
- [compat.c compat.h]
- SSH_BUG_K5USER is unused; ok henning@
- - markus at cvs.openbsd.org 2003/08/29 10:04:36
- [channels.c nchan.c]
- be less chatty; debug -> debug2, cleanup; ok henning@
- - markus at cvs.openbsd.org 2003/08/31 10:26:04
- [progressmeter.c]
- pass file_size + 1 to snprintf: fixes printing of truncated
- file names; fix based on patch/report from sturm@;
- - markus at cvs.openbsd.org 2003/08/31 12:14:22
- [progressmeter.c]
- do write to buf[-1]
- - markus at cvs.openbsd.org 2003/08/31 13:29:05
- [session.c]
- call ssh_gssapi_storecreds conditionally from do_exec();
- with sxw at inf.ed.ac.uk
- - markus at cvs.openbsd.org 2003/08/31 13:30:18
- [gss-serv.c]
- correct string termination in parse_ename(); sxw at inf.ed.ac.uk
- - markus at cvs.openbsd.org 2003/08/31 13:31:57
- [gss-serv.c]
- whitspace KNF
- - markus at cvs.openbsd.org 2003/09/01 09:50:04
- [sshd_config.5]
- gss kex is not supported; sxw at inf.ed.ac.uk
- - markus at cvs.openbsd.org 2003/09/01 12:50:46
- [readconf.c]
- rm gssapidelegatecreds alias; never supported before
- - markus at cvs.openbsd.org 2003/09/01 13:52:18
- [ssh.h]
- rm whitespace
- - markus at cvs.openbsd.org 2003/09/01 18:15:50
- [readconf.c readconf.h servconf.c servconf.h ssh.c]
- remove unused kerberos code; ok henning@
- - markus at cvs.openbsd.org 2003/09/01 20:44:54
- [auth2-gss.c]
- fix leak
- - (djm) Don't initialise pam_conv structures inline. Avoids HP/UX compiler
- error. Part of Bug #423, patch from michael_steffens AT hp.com
- - (djm) Bug #423: reorder setting of PAM_TTY and calling of PAM session
- management (now done in do_setusercontext). Largely from
- michael_steffens AT hp.com
- - (djm) Fix openbsd-compat/ again - remove references to strl(cpy|cat).h
-
-20030829
- - (bal) openbsd-compat/ clean up. Considate headers, add in Id on our
- files, and added missing license to header.
-
-20030826
- - (djm) Bug #629: Mark ssh_config option "pamauthenticationviakbdint"
- as deprecated. Remove mention from README.privsep. Patch from
- aet AT cc.hut.fi
- - (dtucker) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/08/22 10:56:09
- [auth2.c auth2-gss.c auth.h compat.c compat.h gss-genr.c gss-serv-krb5.c
- gss-serv.c monitor.c monitor.h monitor_wrap.c monitor_wrap.h readconf.c
- readconf.h servconf.c servconf.h session.c session.h ssh-gss.h
- ssh_config.5 sshconnect2.c sshd_config sshd_config.5]
- support GSS API user authentication; patches from Simon Wilkinson,
- stripped down and tested by Jakob and myself.
- - markus at cvs.openbsd.org 2003/08/22 13:20:03
- [sshconnect2.c]
- remove support for "kerberos-2 at ssh.com"
- - markus at cvs.openbsd.org 2003/08/22 13:22:27
- [auth2.c] (auth2-krb5.c removed)
- nuke "kerberos-2 at ssh.com"
- - markus at cvs.openbsd.org 2003/08/22 20:55:06
- [LICENCE]
- add Simon Wilkinson
- - deraadt at cvs.openbsd.org 2003/08/24 17:36:52
- [monitor.c monitor_wrap.c sshconnect2.c]
- 64 bit cleanups; markus ok
- - fgsch at cvs.openbsd.org 2003/08/25 08:13:09
- [sftp-int.c]
- fix div by zero when listing for filename lengths longer than width.
- markus@ ok.
- - djm at cvs.openbsd.org 2003/08/25 10:33:33
- [sshconnect2.c]
- fprintf->logit to silence login banner with "ssh -q"; ok markus@
- - (dtucker) [Makefile.in acconfig.h auth-krb5.c auth-pam.c auth-pam.h
- configure.ac defines.h gss-serv-krb5.c session.c ssh-gss.h sshconnect1.c
- sshconnect2.c] Add Portable GSSAPI support, patch by Simon Wilkinson.
- - (dtucker) [Makefile.in] Remove auth2-krb5.
- - (dtucker) [contrib/aix/inventory.sh] Add public domain notice. ok mouring@
- (the original author)
- - (dtucker) [auth.c] Do not check for locked accounts when PAM is enabled.
-
-20030825
- - (djm) Bug #621: Select OpenSC keys by usage attributes. Patch from
- larsch at trustcenter.de
- - (bal) openbsd-compat/ OpenBSD updates. Mostly licensing, ansifications
- and minor fixes. OK djm@
- - (bal) redo how we handle 'mysignal()'. Move it to
- openbsd-compat/bsd-misc.c, s/mysignal/signal/ and #define signal to
- be our 'mysignal' by default. OK djm@
- - (dtucker) [acconfig.h auth.c configure.ac sshd.8] Bug #422 again: deny
- any access to locked accounts. ok djm@
- - (djm) Bug #564: Perform PAM account checks for all authentications when
- UsePAM=yes; ok dtucker
- - (dtucker) [configure.ac] Bug #533, #551: define BROKEN_GETADDRINFO on
- Tru64, solves getnameinfo and "bad addr or host" errors. ok djm@
- - (dtucker) [README buildbff.sh inventory.sh] (all in contrib/aix)
- Update package builder: correctly handle config variables, use lsuser
- rather than /etc/passwd, fix typos, add Id's.
-
-20030822
- - (djm) s/get_progname/ssh_get_progname/g to avoid conflict with Heimdal
- -lbroken; ok dtucker
- - (dtucker) [contrib/cygwin/ssh-user-config] Put keys in authorized_keys
- rather that authorized_keys2. Patch from vinschen at redhat.com.
-
-20030821
- - (dtucker) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/08/14 16:08:58
- [ssh-keygen.c]
- exit after primetest, ok djm@
- - (dtucker) [defines.h] Put CMSG_DATA, CMSG_FIRSTHDR with other CMSG* macros,
- change CMSG_DATA to use __CMSG_ALIGN (and thus work properly), reformat for
- consistency.
- - (dtucker) [configure.ac] Move openpty/ctty test outside of case statement
- and after normal openpty test.
-
-20030813
- - (dtucker) [session.c] Remove #ifdef TIOCSBRK kludge.
- - (dtucker) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/08/13 08:33:02
- [session.c]
- use more portable tcsendbreak(3) and ignore break_length;
- ok deraadt, millert
- - markus at cvs.openbsd.org 2003/08/13 08:46:31
- [auth1.c readconf.c readconf.h servconf.c servconf.h ssh.c ssh_config
- ssh_config.5 sshconnect1.c sshd.8 sshd.c sshd_config sshd_config.5]
- remove RhostsAuthentication; suggested by djm@ before; ok djm@, deraadt@,
- fgsch@, miod@, henning@, jakob@ and others
- - markus at cvs.openbsd.org 2003/08/13 09:07:10
- [readconf.c ssh.c]
- socks4->socks, since with support both 4 and 5; dtucker at zip.com.au
- - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
- Add a tcsendbreak function for platforms that don't have one, based on the
- one from OpenBSD.
-
-20030811
- - (dtucker) OpenBSD CVS Sync
- (thanks to Simon Wilkinson for help with this -dt)
- - markus at cvs.openbsd.org 2003/07/16 15:02:06
- [auth-krb5.c]
- mcc -> fcc; from Love Hörnquist Åstrand <lha at it.su.se>
- otherwise the kerberos credentinal is stored in a memory cache
- in the privileged sshd. ok jabob@, hin@ (some time ago)
- - (dtucker) [openbsd-compat/xcrypt.c] Remove Cygwin #ifdef block (duplicate
- in bsd-cygwin_util.h).
-
-20030808
- - (dtucker) [openbsd-compat/fake-rfc2553.h] Older Linuxes have AI_PASSIVE and
- AI_CANONNAME in netdb.h but not AI_NUMERICHOST, so check each definition
- separately before defining them.
- - (dtucker) [auth-pam.c] Don't set PAM_TTY if tty is null. ok djm@
-
-20030807
- - (dtucker) [session.c] Have session_break_req not attempt to send a break
- if TIOCSBRK and TIOCCBRK are not defined (eg Cygwin).
- - (dtucker) [canohost.c] Bug #336: Only check ip options if IP_OPTIONS is
- defined (fixes compile error on really old Linuxes).
- - (dtucker) [defines.h] Bug #336: Add CMSG_DATA and CMSG_FIRSTHDR macros if
- not already defined (eg Linux with some versions of libc5), based on those
- from OpenBSD.
- - (dtucker) [openbsd-compat/bsd-cygwin_util.c openbsd-compat/bsd-cygwin_util.h]
- Remove incorrect filenames from comments (file names are in Id tags).
- - (dtucker) [session.c openbsd-compat/bsd-cygwin_util.h] Move Cygwin
- specific defines and includes to bsd-cygwin_util.h. Fixes build error too.
-
-20030802
- - (dtucker) [monitor.h monitor_wrap.h] Remove excess ident tags.
- - (dtucker) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/07/22 13:35:22
- [auth1.c auth.h auth-passwd.c monitor.c monitor.h monitor_wrap.c
- monitor_wrap.h readconf.c readconf.h servconf.c servconf.h session.c ssh.1
- ssh.c ssh_config.5 sshconnect1.c sshd.c sshd_config.5 ssh.h]
- remove (already disabled) KRB4/AFS support, re-enable -k in ssh(1);
- test+ok henning@
- - (dtucker) [Makefile.in acconfig.h configure.ac] Remove KRB4/AFS support.
- - (dtucker) [auth-krb4.c radix.c radix.h] Remove KRB4/AFS specific files.
- - (dtucker) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/07/23 07:42:43
- [sshd_config]
- remove AFS; itojun@
- - djm at cvs.openbsd.org 2003/07/28 09:49:56
- [ssh-keygen.1 ssh-keygen.c]
- Support for generating Diffie-Hellman groups (/etc/moduli) from ssh-keygen.
- Based on code from Phil Karn, William Allen Simpson and Niels Provos.
- ok markus@, thanks jmc@
- - markus at cvs.openbsd.org 2003/07/29 18:24:00
- [LICENCE progressmeter.c]
- replace 4 clause BSD licensed progressmeter code with a replacement
- from Nils Nordman and myself; ok deraadt@
- (copied from OpenBSD an re-applied portable changes)
- - markus at cvs.openbsd.org 2003/07/29 18:26:46
- [progressmeter.c]
- fix length for "- stalled -" (included with previous import)
- - markus at cvs.openbsd.org 2003/07/30 07:44:14
- [progressmeter.c]
- use only 4 digits in format_size (included with previous import)
- - markus at cvs.openbsd.org 2003/07/30 07:53:27
- [progressmeter.c]
- whitespace (included with previous import)
- - markus at cvs.openbsd.org 2003/07/31 09:21:02
- [auth2-none.c]
- check whether passwd auth is allowd, similar to proto 1; rob at pitman.co.za
- ok henning
- - avsm at cvs.openbsd.org 2003/07/31 15:50:16
- [atomicio.c]
- correct comment: atomicio takes vwrite, not write; deraadt@ ok
- - markus at cvs.openbsd.org 2003/07/31 22:34:03
- [progressmeter.c]
- print rate similar old version; round instead truncate;
- (included in previous progressmeter.c commit)
- - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
- Add a tcgetpgrp function.
- - (dtucker) [Makefile.in moduli.c moduli.h] Add new files and to Makefile.
- - (dtucker) [openbsd-compat/bsd-misc.c] Fix cut-and-paste bug in tcgetpgrp.
-
-20030730
- - (djm) [auth-pam.c] Don't use crappy APIs like sprintf. Thanks bal
-
-20030726
- - (dtucker) [openbsd-compat/xcrypt.c] Fix typo: DISABLED_SHADOW ->
- DISABLE_SHADOW. Fixes HP-UX compile error.
-
-20030724
- - (bal) [auth-passwd.c openbsd-compat/Makefile.in openbsd-compat/xcrypt.c
- openbsd-compat/xcrypt.h] Split off encryption into xcrypt() interface,
- and isolate shadow password functions. Tested in Solaris, but should
- not break other platforms too badly (except maybe HP =). Also brings
- auth-passwd.c into full sync with OpenBSD tree.
-
-20030723
- - (dtucker) [configure.ac] Back out change for bug #620.
-
-20030719
- - (dtucker) [configure.ac] Bug #620: Define BROKEN_GETADDRINFO for
- Solaris/x86. Patch from jrhett at isite.net.
- - (dtucker) OpenBSD CVS Sync
- - markus at cvs.openbsd.org 2003/07/14 12:36:37
- [sshd.c]
- remove undocumented -V option. would be only useful if openssh is used
- as ssh v1 server for ssh.com's ssh v2.
>>> TRUNCATED FOR MAIL (1000 lines) <<<
More information about the p4-projects
mailing list