summaryrefslogtreecommitdiffstats
path: root/libexec/login_reject
AgeCommit message (Collapse)AuthorFilesLines
2018-04-26Use <fcntl.h> instead of <sys/file.h> for open() and friends.guenther1-10/+2
Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup. ok deraadt@ krw@
2016-09-03convert to use readpassphrase() instead of DEPRECATED/getpass()gsoares1-2/+3
OK millert@
2016-08-16remove unneeded caststedu1-2/+2
2016-04-26Add missing "tty" promise to the pledge(2) callmestre1-2/+2
This is needed since getpass(3) calls readpassphrase(3) which in turn tries to open(2) a tty in O_RDWR mode Problem reported by Kevin Chadwick <m8il1ists ! gmail.com> Cluebat stick provided by deraadt@, OK millert@
2015-11-19Call syslog() if login_* pledge fails; OK deraadt@millert1-3/+5
2015-10-22use crypt_checkpass("password", NULL) to fake a login instead of bcrypttedu1-3/+3
2015-10-14pledge "stdio rpath" is good enough for these mainline BSD auth loginderaadt1-1/+4
programs. (I am very surprised pledge ended up working for programs like this) ok semarie millert
2014-11-03reduce dependency on passwd. just call bcrypt_newhash to do the dummy work.tedu2-12/+5
2014-04-23Remove more Kerberos cruft.ajacoutot1-4/+4
ok jca@ jmc@
2012-12-04remove some unnecessary sys/param.h inclusionsderaadt1-2/+1
2007-05-31convert to new .Dd format;jmc1-2/+2
2007-02-06fix some dodgy displays;jmc1-5/+4
2006-04-02some extern and gooderaadt1-2/+4
2006-03-09Foil potential timing attacks by using the correct password hashmillert2-5/+12
instead of "xx". In practice this means bcrypt() will be used for non-existent users instead of DES crypt(). Adapted from a patch by Peter Philipp. OK deraadt@
2002-09-06ansi; ok millert pvalchevderaadt1-7/+3
2002-06-28minor indent cleanupderaadt1-3/+3
2002-06-02minor KNFderaadt1-3/+3
2002-03-13login(8) -> login(1)marc1-3/+3
2001-12-06Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsmillert1-3/+1
getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel.
2001-11-13o) fix bogus .Xr usage;mpech1-4/+5
o) start new sentence on a new line; o) don't use .Xr instead of .Pa tag; o) minimal -mdoc design fixes; millert@ ok;
2001-10-24getopt(3) returns -1 when out of args, not EOF.mpech1-2/+2
millert@ ok
2001-07-08Remove extraneous .Pp after .Shmillert1-2/+1
2000-12-12reject login script; rejects attempted authenticationmillert3-0/+220
will be used when BSD authentication is enabled