Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | When system calls indicate an error they return -1, not some arbitrary | 2019-06-28 | 1 | -11/+11 | |
| | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | ||||
* | Remove support for running ssh(1) setuid and fatal if attempted. | 2018-07-18 | 1 | -9/+1 | |
| | | | | | Do not link uidwap.c into ssh any more. Neuters UsePrivilegedPort, which will be marked as deprecated shortly. ok markus@ djm@ | ||||
* | invalidate supplemental group cache used by temporarily_use_uid() | 2018-06-15 | 1 | -3/+4 | |
| | | | | | | when the target uid differs; could cause failure to read authorized_keys under some configurations. patch by Jakub Jelen via bz2873; ok dtucker, markus | ||||
* | Revert previous commit. We still want to call setgroups in the case where | 2015-06-24 | 1 | -4/+3 | |
| | | | | | | | there are zero groups to remove any that we might otherwise inherit (as pointed out by grawity at gmail.com) and since the 2nd argument to setgroups is always a static global it's always valid to dereference in this case. ok deraadt@ djm@ | ||||
* | Don't call setgroups if we have zero groups; there's no guarantee that it | 2015-06-22 | 1 | -3/+4 | |
| | | | | | won't try to deref the pointer. Based on a patch from mail at quitesimple.org, ok djm deraadt | ||||
* | Replace <sys/param.h> with <limits.h> and other less dirty headers where | 2015-01-16 | 1 | -2/+2 | |
| | | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | ||||
* | Include stdlib.h for free() as per the man page. | 2013-11-08 | 1 | -1/+2 | |
| | |||||
* | almost entirely get rid of the culture of ".h files that include .h files" | 2006-08-03 | 1 | -5/+2 | |
| | | | | | ok djm, sort of ok stevesk makes the pain stop in one easy step | ||||
* | move #include <sys/param.h> out of includes.h | 2006-07-26 | 1 | -1/+2 | |
| | |||||
* | move #include <string.h> out of includes.h | 2006-07-22 | 1 | -1/+2 | |
| | |||||
* | move #include <unistd.h> out of includes.h | 2006-07-17 | 1 | -1/+2 | |
| | |||||
* | move #include <errno.h> out of includes.h; ok markus@ | 2006-07-11 | 1 | -1/+2 | |
| | |||||
* | move #include <pwd.h> out of includes.h; ok markus@ | 2006-07-06 | 1 | -1/+5 | |
| | |||||
* | do not set the gid, noted by solar; ok djm | 2006-06-08 | 1 | -3/+9 | |
| | |||||
* | replace remaining setuid() calls with permanently_set_uid() and | 2006-06-06 | 1 | -1/+3 | |
| | | | | check seteuid() return values; report Marcus Meissner; ok dtucker djm | ||||
* | use setres[ug]id() to permanently revoke privileges; ok deraadt@ | 2006-04-22 | 1 | -9/+5 | |
| | |||||
* | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | 2006-03-25 | 1 | -0/+1 | |
| | | | | Theo nuked - our scripts to sync -portable need them in the files | ||||
* | RCSID() can die | 2006-03-19 | 1 | -1/+0 | |
| | |||||
* | seteuid and setegid; markus ok | 2003-05-29 | 1 | -1/+5 | |
| | |||||
* | little more debugging; ok markus@ | 2002-07-15 | 1 | -6/+11 | |
| | |||||
* | use correct function name in fatal() | 2002-05-28 | 1 | -2/+2 | |
| | |||||
* | format spec change/casts and some KNF; ok markus@ | 2002-05-28 | 1 | -9/+9 | |
| | |||||
* | typo: assign to self; ok markus@ solar@openwall.com | 2002-04-01 | 1 | -2/+1 | |
| | |||||
* | basic KNF done while i was looking for something else | 2001-12-19 | 1 | -4/+4 | |
| | |||||
* | undo last change; does not work for sshd | 2001-08-08 | 1 | -4/+1 | |
| | |||||
* | permanently_set_uid is a noop if user is not privilegued; | 2001-08-08 | 1 | -1/+4 | |
| | | | | fixes bug on solaris; from sbi@uchicago.edu | ||||
* | set non-privileged gid before uid; tholo@ and deraadt@ | 2001-04-20 | 1 | -5/+5 | |
| | |||||
* | KNF | 2001-04-08 | 1 | -8/+8 | |
| | |||||
* | do gid/groups-swap in addition to uid-swap, should help if /home/group | 2001-04-06 | 1 | -32/+59 | |
| | | | | | is chmod 750 + chgrp grp /home/group/, work be deraadt and me, thanks to olar@openwall.com is comments. we had many requests for this. | ||||
* | split ssh.h and try to cleanup the #include mess. remove unnecessary #includes. | 2001-01-21 | 1 | -2/+2 | |
| | | | | rename util.[ch] -> misc.[ch] | ||||
* | sync with portable openssh; stevesk@pobox.com | 2000-12-29 | 1 | -3/+2 | |
| | |||||
* | fix prototypes; from stevesk@pobox.com | 2000-12-20 | 1 | -2/+2 | |
| | |||||
* | typo; from wsanchez@apple.com | 2000-12-17 | 1 | -2/+2 | |
| | |||||
* | cleanup copyright notices on all files. I have attempted to be accurate with | 2000-09-07 | 1 | -2/+7 | |
| | | | | | | | the details. everything is now under Tatu's licence (which I copied from his readme), and/or the core-sdi bsd-ish thing for deattack, or various openbsd developers under a 2-term bsd licence. We're not changing any rules, just being accurate. | ||||
* | print uid/gid as unsigned | 2000-08-28 | 1 | -6/+6 | |
| | |||||
* | OpenBSD tag | 2000-06-20 | 1 | -1/+1 | |
| | |||||
* | whitespace cleanup | 2000-04-14 | 1 | -4/+4 | |
| | |||||
* | KNF, final part 3 | 1999-11-24 | 1 | -5/+6 | |
| | |||||
* | much more KNF | 1999-11-24 | 1 | -30/+26 | |
| | |||||
* | KNF part 1 | 1999-11-23 | 1 | -33/+28 | |
| | |||||
* | even smaller | 1999-09-30 | 1 | -32/+1 | |
| | |||||
* | i bet a lot of people didn't know what ssh 1.2.16 had a nice license. | 1999-09-26 | 1 | -0/+126 | |
well, except for the patent issues. someone in sweden (forget their name at the moment) cleaned out most of the patented code, and now this code removes rsa code. when this is done, it will link against libssl, but the work isn't completely done yet. then we need to bring this up to modern days, featurewise. |