summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/misc.h (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* fix local arbitrary command execution vulnerability on local/local anddjm2006-01-311-2/+6
| | | | | remote/remote copies (CVE-2006-0225, bz #1094), patch by t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@
* two changes to the new ssh tunnel support. this breaks compatibilityreyk2005-12-081-2/+14
| | | | | | | | | | | | with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@
* Add support for tun(4) forwarding over OpenSSH, based on an idea andreyk2005-12-061-1/+3
| | | | | | | | | | | | initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others
* ensure that stdio fds are attached; ok deraadt@djm2005-09-131-1/+2
|
* use __sentinel__ attribute; ok deraadt@ djm@ markus@dtucker2005-07-141-2/+2
|
* implement support for X11 and agent forwarding over multiplex slavedjm2005-07-041-1/+2
| | | | | | | | connections. Because of protocol limitations, the slave connections inherit the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding their own. ok dtucker@ "put it in" deraadt@
* introduce a generic %foo expansion function. replace existing % expansion anddjm2005-06-061-1/+2
| | | | add expansion to ControlPath; ok markus@
* replace tilde_expand_filename with a simpler implementation, ahead of moredjm2005-04-091-5/+2
| | | | whacking; ok deraadt@
* bz#413: allow optional specification of bind address for port forwardings.djm2005-03-011-1/+2
| | | | | | | | Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@
* Fix debug call in error path of authorized_keys processing and fix relateddtucker2004-12-111-2/+2
| | | | warnings; ok djm@
* Discard over-length authorized_keys entries rather than complaining whendtucker2004-12-061-1/+2
| | | | they don't decode. bz #884, with & ok djm@
* factor out common permission-asking code to separate function; ok markus@djm2004-10-291-1/+2
|
* some signed/unsigned int comparison cleanups; markus@ okavsm2004-08-111-3/+3
|
* Add option for confirmation (ControlMaster=ask) via ssh-askpass before openingdjm2004-06-171-1/+2
| | | | shared connections; ok markus@
* set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@djm2004-06-141-3/+3
|
* kill a tiny header; ok deraadt@djm2004-05-081-1/+13
|
* make two tiny header files go away; djm okderaadt2004-05-081-1/+3
|
* KNF whitespacemarkus2002-03-191-4/+4
|
* add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning).stevesk2002-01-241-1/+2
| | | | no nagle changes just yet; ok djm@ markus@
* remove comments from .h, since they are cut&paste from the .c filesmarkus2001-06-261-47/+10
| | | | and out of sync
* prototype pedant. not very creative...itojun2001-06-261-11/+11
| | | | | - () -> (void) - no variable names
* sshd command-line arguments and configuration file options thatstevesk2001-05-191-1/+25
| | | | | | | | | | | | specify time may be expressed using a sequence of the form: time[qualifier], where time is a positive integer value and qualifier is one of the following: <none>,s,m,h,d,w Examples: 600 600 seconds (10 minutes) 10m 10 minutes 1h30m 1 hour 30 minutes (90 minutes) ok markus@
* add unset_nonblock for stdout/err flushing in client_loop().markus2001-05-111-2/+3
|
* Use addargs() in sftp plus some clean up of addargs(). OK Markusmouring2001-05-081-1/+11
|
* Move colon() and cleanhost() to misc.c where I should I have put it inmouring2001-05-031-1/+5
| | | | the first place
* robust port validation; ok markus@ jakob@stevesk2001-04-121-1/+8
|
* use pwcopy in ssh.c, toomarkus2001-02-221-1/+3
|
* $OpenBSD$niklas2001-01-291-0/+2
|
* split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.markus2001-01-211-0/+19
rename util.[ch] -> misc.[ch]