summaryrefslogtreecommitdiffstats
path: root/libexec/login_token
AgeCommit message (Collapse)AuthorFilesLines
2021-01-02Check auth_mkvalue(3) return value for NULL (malloc failure).millert1-3/+9
For constant strings we don't actually need to use auth_mkvalue(3). Problem reported by Ross L Richardson.
2020-09-06Move definiton of struct token_types *tt to init.c from header file.mortimer2-3/+5
Makes it build with -fno-common. ok deraadt
2019-06-28When system calls indicate an error they return -1, not some arbitraryderaadt2-4/+4
value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.
2016-03-30for some time now mandoc has not required MLINKS to functionjmc1-5/+1
correctly - logically complete that now by removing MLINKS from base; authors need only to ensure there is an entry in NAME for any function/ util being added. MLINKS will still work, and remain for perl to ease upgrades; ok nicm (curses) bcook (ssl) ok schwarze, who provided a lot of feedback and assistance ok tb natano jung
2015-12-22assign pointers to NULL rather than 0mmcc1-3/+3
2015-11-19Call syslog() if login_* pledge fails; OK deraadt@millert1-3/+5
2015-10-17login_token needs pledge "flock" now.bluhm1-2/+2
OK millert@
2015-10-15Pledge login_token with "stdio rpath wpath cpath fattr getpw tty".bluhm1-1/+4
OK deraadt@
2015-10-05Use explicit_bzero() instead of memset() for zeroing out secrets.millert2-10/+8
OK deraadt@
2013-12-03use LOGIN_NAME_MAX instead of L_cuserid, and adjust .h includes; ok millertderaadt4-6/+9
2013-11-27unsigned char for ctypederaadt1-3/+3
ok okan kettenis
2013-08-22Correct format string mismatches turned up by -Wformat=2guenther1-6/+6
suggestions and ok millert@
2013-07-16use .Mt for email addresses; from Jan Stary <hans at stare dot cz>schwarze1-3/+3
2013-05-07fixed size types should be fixed size. long -> uint32_t.tedu1-2/+2
from Matthias Pitzl pitzl at genua de
2013-01-13Fix warnings.fgsch3-10/+8
millert@ ok.
2012-12-04remove some unnecessary sys/param.h inclusionsderaadt3-6/+3
2012-02-01improve synopsis markup of login_* utilities; use a more standardsobrado1-6/+6
phrasing when listing flags; add missing arguments to flags in the DESCRIPTION section of the manual page. use of .Li (literal text) macros and standard wording suggested by jmc@ ok jmc@
2010-10-15Switch the remaining users of libdes in src to libcrypto,jsg2-24/+24
telnet portion partially from the latest heimdal. ok mikeb@
2009-10-22replace cross references to other manual pages with the right macros.sobrado1-3/+5
2007-05-31convert to new .Dd format;jmc1-2/+2
2005-11-12spacingderaadt1-3/+3
2005-09-16if tokendb_open() failed, do not crash if tokendb_close() is calledderaadt1-3/+6
2005-05-26memset to 0, not '0'; millert@ okavsm1-3/+3
2005-02-17Remove extra return (0); call. otto@, henning@ okaaron1-2/+1
2004-03-10More checking for a NULL return value from getpass(). otto@ OKmillert1-2/+6
2003-07-29spacesderaadt1-3/+3
2003-07-10add missing includesdavid1-1/+2
ok deraadt@ tedu@
2003-06-02- section reorderjmc1-4/+4
- An/Aq for author
2003-02-20remove useless cast in memset()millert1-2/+2
2003-02-03typos;jmc1-3/+3
ipsecadm(8): examples ho@ help and ok markus@
2002-11-21Fix thinko, mode 0640 not 0620millert1-4/+4
2002-11-21tokenadm -> _tokenmillert2-4/+4
2002-11-21Add a new group, "tokenadm" and make login_token setgid tokenadm insteadmillert3-10/+28
of setuid root. deraadt@ OK
2002-09-06spacesderaadt2-6/+4
2002-07-16typos / double wordsjufi3-6/+6
2002-06-28minor indent cleanupderaadt1-6/+5
2002-06-23more gid_t and uid_t are unsignedderaadt1-3/+3
2002-06-02minor KNFderaadt1-3/+3
2002-03-11we don't need "/" after ${DESTDIR}mpech1-2/+2
millert@ ok
2001-12-07Block keyboard-generated signals during database accesses.millert1-1/+14
2001-12-06Do not set handler for SIGINT and SIGQUIT to SIG_IGN since it preventsmillert1-3/+1
getpass()/readpassphrase() from being able to restore the tty mode on keyboard interrupt. Along with the recent readpassphrase.c commit this means that if you ^C things that use login scripts (like su(1)) with a non-CBREAK shell your tty mode will be restored nicely. TODO: The various login scripts need to install handlers to avoid leaving turd files or otherwise ending in a bad state. It would also be nice to send BI_REJECT to the back channel.
2001-11-13o) fix bogus .Xr usage;mpech1-2/+3
o) start new sentence on a new line; o) don't use .Xr instead of .Pa tag; o) minimal -mdoc design fixes; millert@ ok;
2001-10-24getopt(3) returns -1 when out of args, not EOF.mpech1-2/+2
millert@ ok
2001-08-18strlcpy invades the treederaadt1-2/+2
2001-08-02o) .Sh AUTHOR -> .Sh AUTHORS;mpech1-2/+2
o) .Sh EXAMPLE -> .Sh EXAMPLES; o) Delete .Sh OPTIONS. Text moved to .Sh DESCRIPTION; millert@ ok
2001-08-01Remove tokenctl and tokenls from SEE ALSO -- they don't existmillert1-2/+1
2001-07-08Remove extraneous .Pp after .Shmillert1-2/+1
2001-06-28Remove tokenrandomnumber(), call arc4random() directly; markus@ OKmillert1-19/+3
2001-05-30do not access the database after tokendb_close() is called; ok millert@markus1-3/+4
2000-12-20use arc4random, clear secrets, use readpassphrase in tokeninit; ok millert@markus2-34/+31