summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Expand)Author
2015-11-19Call syslog() if login_* pledge fails; OK deraadt@Todd C. Miller
2015-11-18use _shadow getpw functions. these utilities obviously deal with hashes.Ted Unangst
2015-11-16Observe that FIOASYNC clearing for stdin is only done in the case whereTheo de Raadt
2015-11-16don't need to ifdef setproctitleTed Unangst
2015-11-15ldd(1) sets environment variable LD_TRACE_LOADED_OBJECTS to tell ld.soTheo de Raadt
2015-11-15pledge "stdio rpath wpath cpath tmppath fattr"Theo de Raadt
2015-11-134-step pledge in a program noone really uses anymore.Theo de Raadt
2015-11-13_exit() in the child; as a result, must use syslog() directly.Theo de Raadt
2015-11-06further PPP reduction, hint from sthenTed Unangst
2015-11-06remove ppplogin support. ok sthenTed Unangst
2015-11-06Fix unloading of load groups when the last reference wasn't on thePhilip Guenther
2015-11-02Remove duplicate declarationPhilip Guenther
2015-11-02Factor out the logic for mprotecting the memory between two symbols intoPhilip Guenther
2015-11-02Fix typo: s/DT_JUMPREL/DT_JMPREL/Philip Guenther
2015-10-29remove tests for LD_HINTS_VERSION_1; ok kettenisTheo de Raadt
2015-10-25No longer create /var/run/ftpd.pid in daemon mode; OK jung@ jca@Todd C. Miller
2015-10-25unifdef some oldness. (BSD not defined since removal of param.h)Ted Unangst
2015-10-25No need to declare pwd_gensalt; it's unused and gone.Antoine Jacoutot
2015-10-24Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass.Antoine Jacoutot
2015-10-22Add pledge support to login_yubikey. Much feedback and OK millert@Brandon Mercer
2015-10-22use crypt_checkpass("password", NULL) to fake a login instead of bcryptTed Unangst
2015-10-22use crypt_checkpass to check passwordTed Unangst
2015-10-22use crypt_checkpass instead of doing things the hard way with crypt.Ted Unangst
2015-10-19Delete the empty example file "ftpchroot"; no example is needed.Ingo Schwarze
2015-10-17login_token needs pledge "flock" now.Alexander Bluhm
2015-10-16Hoist clearing of FIOASYNC to much earlier, then getty can useTheo de Raadt
2015-10-16Implement real "flock" request and add it to userland programs thatTodd C. Miller
2015-10-15Pledge login_token with "stdio rpath wpath cpath fattr getpw tty".Alexander Bluhm
2015-10-14Check mmap and read return values. While at it, remove unused duplicated file.Tobias Stoeckmann
2015-10-14pledge "stdio rpath" is good enough for these mainline BSD auth loginTheo de Raadt
2015-10-13pledge "stdio rpath wpath cpath fattr"; fattr due to locking code borrowedTheo de Raadt
2015-10-12Call pledge(2) after initial getsockname(2) to avoid "inet" addition.Masao Uebayashi
2015-10-10normalize a few more tame request orderings, to help reviewTheo de Raadt
2015-10-09With nfs spool (fork + seteuid/setuid balony) support gone, it becomesTheo de Raadt
2015-10-09remove NFS spool support; it stands in the way of pledge(2)Theo de Raadt
2015-10-09this cpp operates file using pledge "stdio rpath wpath cpath"Theo de Raadt
2015-10-05Use explicit_bzero() instead of memset() for zeroing out secrets.Todd C. Miller
2015-10-05KNF a switch statement, moving a local variable up a frame as well -Theo de Raadt
2015-10-05Remove unused errstr variable.Todd C. Miller
2015-10-04fix custom popen to return pid to caller instead of tracking in a giantTed Unangst
2015-10-02Talk about 'RADIUS server' in most cases, rather than referring specificallyStuart Henderson
2015-10-01some radiusd updates, from theo buehlerJason McIntyre
2015-09-23Don't be too agressive write-protecting the GOT and PLT. If we have no clueMark Kettenis
2015-09-22Use explicit_bzero() to zero out the password. From Michael McConville.Todd C. Miller
2015-09-19kbind has eliminated the need for and use of the bind lock. Delete it, thePhilip Guenther
2015-09-19Remove PROT_EXEC bit from GOT_PERMS. ld.so doesn't need it anymore, andMark Kettenis
2015-09-19Make bootstrapping code compatible with the Secure-PLT ABI.Mark Kettenis
2015-09-13Rename __sysctl syscall to just sysctl, as the userland wrapper is no longerPhilip Guenther
2015-09-12Use kbind for lazy binding GOT/PLT updates on arm.Philip Guenther
2015-09-11add some missing .Cm macros and drop some redundant .Bk while hereIngo Schwarze