| Age | Commit message (Expand) | Author |
|---|
| 2015-12-01 | rpc.rstatd(8) and rpc.rusersd(8) don't run as user nobody for quite some time. | Tim van der Molen |
| 2015-12-01 | Remove superfluous check; "Of course" deraadt@ | Tim van der Molen |
| 2015-12-01 | Don't fall back to user nobody if _rusersd doesn't exist; "Of course!" deraadt@ | Tim van der Molen |
| 2015-11-29 | Document that the pfdev check for 63 is /dev/fd/ only contains those nodes | Theo de Raadt |
| 2015-11-26 | passwd no longer has an -l flag; ok deraadt | Jason McIntyre |
| 2015-11-26 | pledge in login_radius(8). | YASUOKA Masahiko |
| 2015-11-26 | rpc.yppasswdd goes to the bitbucket. | Theo de Raadt |
| 2015-11-26 | Delete YP password related code. As a result, these can also be | Theo de Raadt |
| 2015-11-25 | rename internally to ntalkd, after the binary; this way both | Jason McIntyre |
| 2015-11-24 | missing pledge "getpw" | Theo de Raadt |
| 2015-11-21 | zap the yppasswdd mlink, at ingo's behest (its original purpose being, | Jason McIntyre |
| 2015-11-21 | remove mlinks for aliases: ntalkd, mfs, updatedb | Jason McIntyre |
| 2015-11-20 | Remove login_tis, no one should be using the TIS authentication | Todd C. Miller |
| 2015-11-19 | Call syslog() if login_* pledge fails; OK deraadt@ | Todd C. Miller |
| 2015-11-18 | use _shadow getpw functions. these utilities obviously deal with hashes. | Ted Unangst |
| 2015-11-16 | Observe that FIOASYNC clearing for stdin is only done in the case where | Theo de Raadt |
| 2015-11-16 | don't need to ifdef setproctitle | Ted Unangst |
| 2015-11-15 | ldd(1) sets environment variable LD_TRACE_LOADED_OBJECTS to tell ld.so | Theo de Raadt |
| 2015-11-15 | pledge "stdio rpath wpath cpath tmppath fattr" | Theo de Raadt |
| 2015-11-13 | 4-step pledge in a program noone really uses anymore. | Theo de Raadt |
| 2015-11-13 | _exit() in the child; as a result, must use syslog() directly. | Theo de Raadt |
| 2015-11-06 | further PPP reduction, hint from sthen | Ted Unangst |
| 2015-11-06 | remove ppplogin support. ok sthen | Ted Unangst |
| 2015-11-06 | Fix unloading of load groups when the last reference wasn't on the | Philip Guenther |
| 2015-11-02 | Remove duplicate declaration | Philip Guenther |
| 2015-11-02 | Factor out the logic for mprotecting the memory between two symbols into | Philip Guenther |
| 2015-11-02 | Fix typo: s/DT_JUMPREL/DT_JMPREL/ | Philip Guenther |
| 2015-10-29 | remove tests for LD_HINTS_VERSION_1; ok kettenis | Theo de Raadt |
| 2015-10-25 | No longer create /var/run/ftpd.pid in daemon mode; OK jung@ jca@ | Todd C. Miller |
| 2015-10-25 | unifdef some oldness. (BSD not defined since removal of param.h) | Ted Unangst |
| 2015-10-25 | No need to declare pwd_gensalt; it's unused and gone. | Antoine Jacoutot |
| 2015-10-24 | Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass. | Antoine Jacoutot |
| 2015-10-22 | Add pledge support to login_yubikey. Much feedback and OK millert@ | Brandon Mercer |
| 2015-10-22 | use crypt_checkpass("password", NULL) to fake a login instead of bcrypt | Ted Unangst |
| 2015-10-22 | use crypt_checkpass to check password | Ted Unangst |
| 2015-10-22 | use crypt_checkpass instead of doing things the hard way with crypt. | Ted Unangst |
| 2015-10-19 | Delete the empty example file "ftpchroot"; no example is needed. | Ingo Schwarze |
| 2015-10-17 | login_token needs pledge "flock" now. | Alexander Bluhm |
| 2015-10-16 | Hoist clearing of FIOASYNC to much earlier, then getty can use | Theo de Raadt |
| 2015-10-16 | Implement real "flock" request and add it to userland programs that | Todd C. Miller |
| 2015-10-15 | Pledge login_token with "stdio rpath wpath cpath fattr getpw tty". | Alexander Bluhm |
| 2015-10-14 | Check mmap and read return values. While at it, remove unused duplicated file. | Tobias Stoeckmann |
| 2015-10-14 | pledge "stdio rpath" is good enough for these mainline BSD auth login | Theo de Raadt |
| 2015-10-13 | pledge "stdio rpath wpath cpath fattr"; fattr due to locking code borrowed | Theo de Raadt |
| 2015-10-12 | Call pledge(2) after initial getsockname(2) to avoid "inet" addition. | Masao Uebayashi |
| 2015-10-10 | normalize a few more tame request orderings, to help review | Theo de Raadt |
| 2015-10-09 | With nfs spool (fork + seteuid/setuid balony) support gone, it becomes | Theo de Raadt |
| 2015-10-09 | remove NFS spool support; it stands in the way of pledge(2) | Theo de Raadt |
| 2015-10-09 | this cpp operates file using pledge "stdio rpath wpath cpath" | Theo de Raadt |
| 2015-10-05 | Use explicit_bzero() instead of memset() for zeroing out secrets. | Todd C. Miller |
