Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | fix local arbitrary command execution vulnerability on local/local and | 2006-01-31 | 1 | -2/+6 | ||
| | | | | | remote/remote copies (CVE-2006-0225, bz #1094), patch by t8m AT centrum.cz, polished by dtucker@ and myself; ok markus@ | |||||
* | two changes to the new ssh tunnel support. this breaks compatibility | 2005-12-08 | 1 | -2/+14 | ||
| | | | | | | | | | | | | with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@ | |||||
* | Add support for tun(4) forwarding over OpenSSH, based on an idea and | 2005-12-06 | 1 | -1/+3 | ||
| | | | | | | | | | | | | initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||||
* | ensure that stdio fds are attached; ok deraadt@ | 2005-09-13 | 1 | -1/+2 | ||
| | ||||||
* | use __sentinel__ attribute; ok deraadt@ djm@ markus@ | 2005-07-14 | 1 | -2/+2 | ||
| | ||||||
* | implement support for X11 and agent forwarding over multiplex slave | 2005-07-04 | 1 | -1/+2 | ||
| | | | | | | | | connections. Because of protocol limitations, the slave connections inherit the master's DISPLAY and SSH_AUTH_SOCK rather than distinctly forwarding their own. ok dtucker@ "put it in" deraadt@ | |||||
* | introduce a generic %foo expansion function. replace existing % expansion and | 2005-06-06 | 1 | -1/+2 | ||
| | | | | add expansion to ControlPath; ok markus@ | |||||
* | replace tilde_expand_filename with a simpler implementation, ahead of more | 2005-04-09 | 1 | -5/+2 | ||
| | | | | whacking; ok deraadt@ | |||||
* | bz#413: allow optional specification of bind address for port forwardings. | 2005-03-01 | 1 | -1/+2 | ||
| | | | | | | | | Patch originally by Dan Astorian, but worked on by several people Adds GatewayPorts=clientspecified option on server to allow remote forwards to bind to client-specified ports. ok markus@ | |||||
* | Fix debug call in error path of authorized_keys processing and fix related | 2004-12-11 | 1 | -2/+2 | ||
| | | | | warnings; ok djm@ | |||||
* | Discard over-length authorized_keys entries rather than complaining when | 2004-12-06 | 1 | -1/+2 | ||
| | | | | they don't decode. bz #884, with & ok djm@ | |||||
* | factor out common permission-asking code to separate function; ok markus@ | 2004-10-29 | 1 | -1/+2 | ||
| | ||||||
* | some signed/unsigned int comparison cleanups; markus@ ok | 2004-08-11 | 1 | -3/+3 | ||
| | ||||||
* | Add option for confirmation (ControlMaster=ask) via ssh-askpass before opening | 2004-06-17 | 1 | -1/+2 | ||
| | | | | shared connections; ok markus@ | |||||
* | set_nonblock() instead of fnctl(...,O_NONBLOCK); "looks sane" deraadt@ | 2004-06-14 | 1 | -3/+3 | ||
| | ||||||
* | kill a tiny header; ok deraadt@ | 2004-05-08 | 1 | -1/+13 | ||
| | ||||||
* | make two tiny header files go away; djm ok | 2004-05-08 | 1 | -1/+3 | ||
| | ||||||
* | KNF whitespace | 2002-03-19 | 1 | -4/+4 | ||
| | ||||||
* | add set_nodelay() to set TCP_NODELAY on a socket (prep for nagle tuning). | 2002-01-24 | 1 | -1/+2 | ||
| | | | | no nagle changes just yet; ok djm@ markus@ | |||||
* | remove comments from .h, since they are cut&paste from the .c files | 2001-06-26 | 1 | -47/+10 | ||
| | | | | and out of sync | |||||
* | prototype pedant. not very creative... | 2001-06-26 | 1 | -11/+11 | ||
| | | | | | - () -> (void) - no variable names | |||||
* | sshd command-line arguments and configuration file options that | 2001-05-19 | 1 | -1/+25 | ||
| | | | | | | | | | | | | specify time may be expressed using a sequence of the form: time[qualifier], where time is a positive integer value and qualifier is one of the following: <none>,s,m,h,d,w Examples: 600 600 seconds (10 minutes) 10m 10 minutes 1h30m 1 hour 30 minutes (90 minutes) ok markus@ | |||||
* | add unset_nonblock for stdout/err flushing in client_loop(). | 2001-05-11 | 1 | -2/+3 | ||
| | ||||||
* | Use addargs() in sftp plus some clean up of addargs(). OK Markus | 2001-05-08 | 1 | -1/+11 | ||
| | ||||||
* | Move colon() and cleanhost() to misc.c where I should I have put it in | 2001-05-03 | 1 | -1/+5 | ||
| | | | | the first place | |||||
* | robust port validation; ok markus@ jakob@ | 2001-04-12 | 1 | -1/+8 | ||
| | ||||||
* | use pwcopy in ssh.c, too | 2001-02-22 | 1 | -1/+3 | ||
| | ||||||
* | $OpenBSD$ | 2001-01-29 | 1 | -0/+2 | ||
| | ||||||
* | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -0/+19 | ||
rename util.[ch] -> misc.[ch] |