| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Replace all calls to signal(2) with a wrapper around sigaction(2). | 2020-01-23 | 1 | -7/+7 | |
| | | | | | | | This wrapper blocks all other signals during the handler preventing races between handlers, and sets SA_RESTART which should reduce the potential for short read/write operations. | ||||
| * | fix setting of $SSH_ASKPASS_PROMPT - it shouldn't be set when asking | 2019-12-06 | 1 | -5/+13 | |
| | | | | | | passphrases, only when confirming the use of a key (i.e. for ssh-agent keys added with "ssh-add -c keyfile") | ||||
| * | bring the __func__ | 2019-12-06 | 1 | -6/+6 | |
| | | |||||
| * | use error()+_exit() instead of fatal() to avoid running cleanup | 2019-11-27 | 1 | -2/+3 | |
| | | | | | | handlers in child process; spotted via weird regress failures in portable | ||||
| * | follow existing askpass logic for security key notifier: fall back | 2019-11-15 | 1 | -3/+4 | |
| | | | | | | to _PATH_SSH_ASKPASS_DEFAULT if no $SSH_ASKPASS environment variable is set. | ||||
| * | pass SSH_ASKPASS_PROMPT hint to y/n key confirm too | 2019-11-12 | 1 | -1/+2 | |
| | | |||||
| * | dd API for performing one-shot notifications via tty or SSH_ASKPASS | 2019-11-12 | 1 | -1/+85 | |
| | | |||||
| * | When system calls indicate an error they return -1, not some arbitrary | 2019-06-28 | 1 | -5/+5 | |
| | | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | ||||
| * | Print an \r in front of the password prompt so parts of a password | 2019-01-19 | 1 | -4/+11 | |
| | | | | | | | | | that was entered too early are likely clobbered by the prompt. Idea from doas. from and ok djm "i like it" deraadt | ||||
| * | Remove support for running ssh(1) setuid and fatal if attempted. | 2018-07-18 | 1 | -2/+1 | |
| | | | | | | Do not link uidwap.c into ssh any more. Neuters UsePrivilegedPort, which will be marked as deprecated shortly. ok markus@ djm@ | ||||
| * | Pass (char *)NULL rather than (char *)0 to execl and execlp. | 2015-12-11 | 1 | -2/+2 | |
| | | | | | ok dtucker@ | ||||
| * | convert memset of potentially-private data to explicit_bzero() | 2014-02-02 | 1 | -4/+4 | |
| | | |||||
| * | bye, bye xfree(); ok markus@ | 2013-05-17 | 1 | -2/+2 | |
| | | |||||
| * | fix ControlMaster=ask regression | 2010-12-15 | 1 | -11/+16 | |
| | | | | | | | reset SIGCHLD handler before fork (and restore it after) so we don't miss the the askpass child's exit status. Correct test for exit status/signal to account for waitpid() failure; with claudio@ ok claudio@ markus@ | ||||
| * | almost entirely get rid of the culture of ".h files that include .h files" | 2006-08-03 | 1 | -3/+1 | |
| | | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
| * | move #include <stdio.h> out of includes.h | 2006-08-01 | 1 | -1/+2 | |
| | | |||||
| * | move #include <stdlib.h> out of includes.h | 2006-07-26 | 1 | -1/+2 | |
| | | |||||
| * | move #include <string.h> out of includes.h | 2006-07-22 | 1 | -1/+2 | |
| | | |||||
| * | move #include <unistd.h> out of includes.h | 2006-07-17 | 1 | -1/+2 | |
| | | |||||
| * | move #include <errno.h> out of includes.h; ok markus@ | 2006-07-11 | 1 | -1/+2 | |
| | | |||||
| * | move #include <stdarg.h> out of includes.h; ok markus@ | 2006-07-10 | 1 | -1/+2 | |
| | | |||||
| * | move #include <fcntl.h> out of includes.h | 2006-07-09 | 1 | -1/+2 | |
| | | |||||
| * | do not set the gid, noted by solar; ok djm | 2006-06-08 | 1 | -2/+2 | |
| | | |||||
| * | replace remaining setuid() calls with permanently_set_uid() and | 2006-06-06 | 1 | -3/+3 | |
| | | | | | check seteuid() return values; report Marcus Meissner; ok dtucker djm | ||||
| * | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | 2006-03-25 | 1 | -0/+1 | |
| | | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
| * | RCSID() can die | 2006-03-19 | 1 | -1/+0 | |
| | | |||||
| * | move #include <sys/wait.h> out of includes.h; ok markus@ | 2006-02-10 | 1 | -1/+4 | |
| | | |||||
| * | move #include <paths.h> out of includes.h; ok markus@ | 2006-02-08 | 1 | -1/+2 | |
| | | |||||
| * | missing {} | 2005-05-02 | 1 | -2/+3 | |
| | | |||||
| * | Add debug message if read_passphrase can't open /dev/tty; bz #471; ok djm@ | 2005-04-23 | 1 | -2/+6 | |
| | | |||||
| * | factor out common permission-asking code to separate function; ok markus@ | 2004-10-29 | 1 | -1/+27 | |
| | | |||||
| * | Add option for confirmation (ControlMaster=ask) via ssh-askpass before opening | 2004-06-17 | 1 | -2/+7 | |
| | | | | | shared connections; ok markus@ | ||||
| * | kill a tiny header; ok deraadt@ | 2004-05-08 | 1 | -2/+2 | |
| | | |||||
| * | ssh-add -c, prompt user for confirmation (using ssh-askpass) when | 2003-01-23 | 1 | -4/+12 | |
| | | | | | private agent key is used; with djm@; test by dugsong@, djm@; ok deraadt@ | ||||
| * | client side support for PASSWD_CHANGEREQ | 2002-03-26 | 1 | -2/+5 | |
| | | | | | based on work by johan.andersson@appgate.com; ok provos@ | ||||
| * | readpass.c is not longer from UCB, since we now use readpassphrase(3) | 2002-02-13 | 1 | -21/+12 | |
| | | |||||
| * | use _PATH_TTY | 2002-01-11 | 1 | -2/+2 | |
| | | |||||
| * | Avoid interruptable passphrase read; ok markus@ | 2001-12-21 | 1 | -6/+15 | |
| | | |||||
| * | don't strdup too much data; from gotoh@taiyo.co.jp; ok millert. | 2001-11-08 | 1 | -6/+5 | |
| | | |||||
| * | delete spurious #includes; ok deraadt@ markus@ | 2001-07-14 | 1 | -2/+1 | |
| | | |||||
| * | don't panic if fork or pipe fail (just return an empty passwd). | 2001-07-10 | 1 | -5/+9 | |
| | | |||||
| * | do not return NULL, use "" instead. | 2001-07-02 | 1 | -2/+2 | |
| | | |||||
| * | switch to readpassphrase(3) | 2001-06-24 | 1 | -16/+19 | |
| | | | | | 2.7/8-stable needs readpassphrase.[ch] from libc | ||||
| * | more strict prototypes. raise warning level in Makefile.inc. markus ok'ed | 2001-06-23 | 1 | -2/+2 | |
| | | | | | TODO; cleanup headers | ||||
| * | Use const for 'prompt'. Brought over from portable tree. | 2001-05-06 | 1 | -2/+2 | |
| | | |||||
| * | Put the 'const' back into ssh_askpass() function. Pointed out | 2001-05-02 | 1 | -2/+2 | |
| | | | | | by Mark Miller <markm@swoon.net>. OK Markus | ||||
| * | call askpass from ssh, too, based on work by roth@feep.net, ok deraadt | 2001-04-18 | 1 | -1/+70 | |
| | | |||||
| * | sync with netbsd tree changes. | 2001-02-08 | 1 | -1/+2 | |
| | | | | | | | - more strict prototypes, include necessary headers - use paths.h/pathnames.h decls - size_t typecase to int -> u_long | ||||
| * | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -2/+1 | |
| | | | | | rename util.[ch] -> misc.[ch] | ||||
| * | add support for s/key (kbd-interactive) to ssh2, based on work by mkiernan@avantgo.com and me | 2000-10-11 | 1 | -73/+9 | |
| | | |||||
