summaryrefslogtreecommitdiffstats
path: root/libexec/login_reject (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Use <fcntl.h> instead of <sys/file.h> for open() and friends.guenther2018-04-261-10/+2
| | | | | | | Delete a bunch of unnecessary #includes and sort to match style(9) while doing the above cleanup. ok deraadt@ krw@
* convert to use readpassphrase() instead of DEPRECATED/getpass()gsoares2016-09-031-2/+3
| | | | OK millert@
* remove unneeded caststedu2016-08-161-2/+2
|
* Add missing "tty" promise to the pledge(2) callmestre2016-04-261-2/+2
| | | | | | | | | This is needed since getpass(3) calls readpassphrase(3) which in turn tries to open(2) a tty in O_RDWR mode Problem reported by Kevin Chadwick <m8il1ists ! gmail.com> Cluebat stick provided by deraadt@, OK millert@
* Call syslog() if login_* pledge fails; OK deraadt@millert2015-11-191-3/+5
|
* use crypt_checkpass("password", NULL) to fake a login instead of bcrypttedu2015-10-221-3/+3
|
* pledge "stdio rpath" is good enough for these mainline BSD auth loginderaadt2015-10-141-1/+4
| | | | | | programs. (I am very surprised pledge ended up working for programs like this) ok semarie millert
* reduce dependency on passwd. just call bcrypt_newhash to do the dummy work.tedu2014-11-032-12/+5
|
* Remove more Kerberos cruft.ajacoutot2014-04-231-4/+4
| | | | ok jca@ jmc@
* remove some unnecessary sys/param.h inclusionsderaadt2012-12-041-2/+1
|
* convert to new .Dd format;jmc2007-05-311-2/+2
|
* fix some dodgy displays;jmc2007-02-061-5/+4
|
* some extern and gooderaadt2006-04-021-2/+4
|
* Foil potential timing attacks by using the correct password hashmillert2006-03-092-5/+12
| | | | | | instead of "xx". In practice this means bcrypt() will be used for non-existent users instead of DES crypt(). Adapted from a patch by Peter Philipp. OK deraadt@
* ansi; ok millert pvalchevderaadt2002-09-061-7/+3
|
* minor indent cleanupderaadt2002-06-281-3/+3
|
* minor KNFderaadt2002-06-021-3/+3
|
* login(8) -> login(1)marc2002-03-131-3/+3
|
* Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsmillert2001-12-061-3/+1
| | | | | | | | | | | | getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel.
* o) fix bogus .Xr usage;mpech2001-11-131-4/+5
| | | | | | | | o) start new sentence on a new line; o) don't use .Xr instead of .Pa tag; o) minimal -mdoc design fixes; millert@ ok;
* getopt(3) returns -1 when out of args, not EOF.mpech2001-10-241-2/+2
| | | | millert@ ok
* Remove extraneous .Pp after .Shmillert2001-07-081-2/+1
|
* reject login script; rejects attempted authenticationmillert2000-12-123-0/+220
will be used when BSD authentication is enabled