| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2009-11-20 | Warn but do not fail if stat()ing the subsystem binary fails. This helps | Darren Tucker | |
| with chrootdirectory+forcecommand=sftp-server and restricted shells. bz #1599, ok djm. | |||
| 2009-11-19 | bz#1606: error when an attempt is made to connect to a server | Damien Miller | |
| with ForceCommand=internal-sftp with a shell session (i.e. not a subsystem session). Avoids stuck client when attempting to ssh to such a service. ok dtucker@ | |||
| 2009-10-06 | bz#1596: fflush(NULL) before exec() to ensure that everying (motd | Damien Miller | |
| in particular) has made it out before the streams go away. | |||
| 2009-04-17 | use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server; | Kevin Steves | |
| ok djm@ markus@ | |||
| 2009-01-22 | make Channel->path an allocated string, saving a few bytes here and | Damien Miller | |
| there and fixing bz#1380 in the process; ok markus@ | |||
| 2008-11-09 | typo fixed (overriden -> overridden) | Tobias Stoeckmann | |
| ok espie, jmc | |||
| 2008-10-02 | Convert an unchecked strdup to xstrdup. OK deraadt@ | Todd C. Miller | |
| 2008-08-21 | allow ForceCommand internal-sftp with arguments. based on patch from | Damien Miller | |
| michael.barabanov AT gmail.com; ok markus@ | |||
| 2008-06-16 | Rename the isatty argument to is_tty so we don't shadow isatty(3). | Darren Tucker | |
| ok markus@ | |||
| 2008-06-15 | don't call isatty() on a pty master, instead pass a flag down to | Damien Miller | |
| channel_set_fds() indicating that te fds refer to a tty. Fixes a hang on exit on Solaris (bz#1463) in portable but is actually a generic bug; ok dtucker deraadt markus | |||
| 2008-06-14 | suppress the warning message from chdir(homedir) failures | Damien Miller | |
| when chrooted (bz#1461); ok dtucker | |||
| 2008-05-09 | re-add the USE_PIPES code and enable it. | Markus Friedl | |
| without pipes shutdown-read from the sshd does not trigger a SIGPIPE when the forked program does a write. ok djm@ | |||
| 2008-05-08 | Make the maximum number of sessions run-time controllable via | Damien Miller | |
| a sshd_config MaxSessions knob. This is useful for disabling login/shell/subsystem access while leaving port-forwarding working (MaxSessions 0), disabling connection multiplexing (MaxSessions 1) or simply increasing the number of allows multiplexed sessions. Because some bozos are sure to configure MaxSessions in excess of the number of available file descriptors in sshd (which, at peak, might be as many as 9*MaxSessions), audit sshd to ensure that it doesn't leak fds on error paths, and make it fail gracefully on out-of-fd conditions - sending channel errors instead of than exiting with fatal(). bz#1090; MaxSessions config bits and manpage from junyer AT gmail.com ok markus@ | |||
| 2008-05-08 | Implement a channel success/failure status confirmation callback | Damien Miller | |
| mechanism. Each channel maintains a queue of callbacks, which will be drained in order (RFC4253 guarantees confirm messages are not reordered within an channel). Also includes a abandonment callback to clean up if a channel is closed without sending confirmation messages. This probably shouldn't happen in compliant implementations, but it could be abused to leak memory. ok markus@ (as part of a larger diff) | |||
| 2008-05-07 | Enable the AllowAgentForwarding option in sshd_config (global and match | Pierre-Yves Ritschard | |
| context), to specify if agents should be permitted on the server. As the man page states: ``Note that disabling Agent forwarding does not improve security unless users are also denied shell access, as they can always install their own forwarders.'' ok djm@, ok and a mild frown markus@ | |||
| 2008-04-18 | remove unneccessary parentheses | Damien Miller | |
| 2008-03-26 | add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc | Damien Miller | |
| 2008-03-25 | last patch had backwards test; spotted by termim AT gmail.com | Damien Miller | |
| 2008-03-25 | ignore ~/.ssh/rc if a sshd_config ForceCommand is specified; | Damien Miller | |
| from dtucker@ ok deraadt@ djm@ | |||
| 2008-02-22 | closefrom() call was too early, delay it until just before we execute | Damien Miller | |
| the user's rc files (if any). | |||
| 2008-02-20 | correct boolean encoding for coredump; der Mouse via dugsong | Markus Friedl | |
| 2008-02-13 | rekey arc4random and OpenSSL RNG in postauth child | Damien Miller | |
| closefrom fds > 2 before shell/command execution ok markus@ | |||
| 2008-02-10 | delay ~ expansion for ChrootDirectory so it expands to the logged-in user's | Damien Miller | |
| home, rather than the user who starts sshd (probably root) | |||
| 2008-02-08 | add sshd_config ChrootDirectory option to chroot(2) users to a directory and | Damien Miller | |
| tweak internal sftp server to work with it (no special files in chroot required). ok markus@ | |||
| 2008-02-04 | link sftp-server into sshd; feedback and ok djm@ | Markus Friedl | |
| 2007-09-11 | use strcspn to properly overwrite '\n' in fgets returned buffer | Gilles Chehade | |
| ok pyr@, ray@, millert@, moritz@, chl@ | |||
| 2007-08-23 | missed include bits from last commit | Damien Miller | |
| 2007-08-23 | unifdef HAVE_LOGIN_CAP; ok deraadt@ millert@ | Damien Miller | |
| 2007-01-21 | spaces | Kevin Steves | |
| 2006-10-09 | xmalloc -> xcalloc that was missed previously, from portable | Damien Miller | |
| 2006-08-29 | normalise some inconsistent (but harmless) NULL pointer checks | Damien Miller | |
| spotted by the Stanford SATURN tool, via Isil Dillig; ok markus@ deraadt@ | |||
| 2006-08-18 | delay authentication related cleanups until we're authenticated and | Markus Friedl | |
| all alarms have been cancelled; ok deraadt | |||
| 2006-08-04 | spaces | Kevin Steves | |
| 2006-08-03 | almost entirely get rid of the culture of ".h files that include .h files" | Theo de Raadt | |
| ok djm, sort of ok stevesk makes the pain stop in one easy step | |||
| 2006-08-01 | move #include <stdio.h> out of includes.h | Kevin Steves | |
| 2006-07-26 | move #include <stdlib.h> out of includes.h | Kevin Steves | |
| 2006-07-26 | move #include <sys/param.h> out of includes.h | Kevin Steves | |
| 2006-07-22 | move #include <string.h> out of includes.h | Kevin Steves | |
| 2006-07-20 | missed some needed #include <unistd.h> when KERBEROS5=no; issue from | Kevin Steves | |
| massimo@cedoc.mo.it | |||
| 2006-07-19 | Add ForceCommand keyword to sshd_config, equivalent to the "command=" | Darren Tucker | |
| key option, man page entry and example in sshd_config. Feedback & ok djm@, man page corrections & ok jmc@ | |||
| 2006-07-11 | move #include <errno.h> out of includes.h; ok markus@ | Kevin Steves | |
| 2006-07-11 | add ExitOnForwardFailure: terminate the connection if ssh(1) | Markus Friedl | |
| cannot set up all requested dynamic, local, and remote port forwardings. ok djm, dtucker, stevesk, jmc | |||
| 2006-07-08 | missed these from last commit: | Kevin Steves | |
| move #include <sys/socket.h> out of includes.h | |||
| 2006-07-06 | move #include <pwd.h> out of includes.h; ok markus@ | Kevin Steves | |
| 2006-07-06 | support arguments to Subsystem commands; ok markus@ | Damien Miller | |
| 2006-07-02 | move #include <grp.h> out of includes.h | Kevin Steves | |
| 2006-04-20 | Switch from using pipes to socketpairs for communication between | Damien Miller | |
| sftp/scp and ssh, and between sshd and its subprocesses. This saves a file descriptor per session and apparently makes userland ppp over ssh work; ok markus@ deraadt@ | |||
| 2006-03-25 | Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that | Damien Miller | |
| Theo nuked - our scripts to sync -portable need them in the files | |||
| 2006-03-25 | change OpenSSH's xrealloc() function from being xrealloc(p, new_size) to | Damien Miller | |
| xrealloc(p, new_nmemb, new_itemsize). realloc is particularly prone to integer overflows because it is almost always allocating "n * size" bytes, so this is a far safer API; ok deraadt@ | |||
| 2006-03-20 | annoying spacing fixes getting in the way of real diffs | Theo de Raadt | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |