summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/session.c
AgeCommit message (Expand)Author
2017-06-24refactor authentication loggingDamien Miller
2017-06-24no need to call log_init to reinitialise logged PID in child sessions,Damien Miller
2017-05-31Switch to recallocarray() for a few operations. Both growth and shrinkageTheo de Raadt
2017-05-31clear session keys from memory; ok djm@Markus Friedl
2016-11-30Add a sshd_config DisableForwaring option that disables X11, agent,Damien Miller
2016-08-23fix previous, a condition was modified incorrectly; ok markus@ deraadt@Otto Moerbeek
2016-08-19remove UseLogin option and support for having /bin/login manageDamien Miller
2016-08-13remove ssh1 server code; ok djm@Markus Friedl
2016-03-10sanitise characters destined for xauthDamien Miller
2016-03-07refactor canohost.c: move functions that cache results closer to theDamien Miller
2016-02-16add a "Close session" log entry (at loglevel=verbose) to correspondDamien Miller
2015-10-24skip "Could not chdir to home directory" message when chrootedDamien Miller
2015-04-24rename xrealloc() to xreallocarray() since it follows that form.Theo de Raadt
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2015-01-14move authfd.c and its tentacles to the new buffer/key API;Damien Miller
2014-12-22make internal handling of filename arguments of "none" more consistentDamien Miller
2014-07-15Add support for Unix domain socket forwarding. A remote TCP portTodd C. Miller
2014-07-03Add a sshd_config PermitUserRC option to control whether ~/.ssh/rc isDamien Miller
2014-07-03standardise on NI_MAXHOST for gethostname() string lengths; aboutDamien Miller
2014-03-03ignore enviornment variables with embedded '=' or '\0' characters;Damien Miller
2014-01-31replace most bzero with explicit_bzero, except a few that cna be memsetTed Unangst
2014-01-18explicitly define USE_PIPES to 1 to prevent redefinition warnings in portableDarren Tucker
2013-10-29shd_config PermitTTY to disallow TTY allocation, mirroring theDamien Miller
2013-10-14Add logging of session starts in a useful format; ok markus@ feedback andDamien Miller
2013-07-19add ssh-agent(1) support to sshd(8); allows encrypted hostkeys,Markus Friedl
2013-05-17bye, bye xfree(); ok markus@Damien Miller
2013-04-19reintroduce 1.262 without the connection-killing bug:Damien Miller
2013-04-17revert rev 1.262; it fails because uid is already set here. ok djm@Darren Tucker
2013-03-06fatal() when ChrootDirectory specified by running without root privileges;Damien Miller
2012-12-02make AllowTcpForwarding accept "local" and "remote" in addition to itsDamien Miller
2012-03-15root should always be excluded from the test for /etc/nologin insteadPhilip Guenthe
2011-10-24bz#1859: send tty break to pty master instead of (probably alreadyDamien Miller
2010-11-25replace close() loop for fds 3->64 with closefrom();Damien Miller
2010-11-13allow ssh and sshd to set arbitrary TOS/DSCP/QoS values instead ofDamien Miller
2010-06-25bz#1750: fix requirement for /dev/null inside ChrootDirectory forDamien Miller
2010-06-22include the user name on "subsystem request for ..." log messages;Damien Miller
2010-06-18Missing check for chroot_director == "none" (we already checked againstDamien Miller
2010-04-23set stderr to /dev/null for subsystems rather than just closing it.Damien Miller
2010-03-07Hold authentication debug messages until after successful authentication.Darren Tucker
2010-01-12Add explicit stat so we reliably detect nologin with bad perms. ok djm markusDarren Tucker
2010-01-12Do not allow logins if /etc/nologin exists but is not readable by the userDarren Tucker
2009-11-20Warn but do not fail if stat()ing the subsystem binary fails. This helpsDarren Tucker
2009-11-19bz#1606: error when an attempt is made to connect to a serverDamien Miller
2009-10-06bz#1596: fflush(NULL) before exec() to ensure that everying (motdDamien Miller
2009-04-17use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;Kevin Steves
2009-01-22make Channel->path an allocated string, saving a few bytes here andDamien Miller
2008-11-09typo fixed (overriden -> overridden)Tobias Stoeckmann
2008-10-02Convert an unchecked strdup to xstrdup. OK deraadt@Todd C. Miller
2008-08-21allow ForceCommand internal-sftp with arguments. based on patch fromDamien Miller
2008-06-16Rename the isatty argument to is_tty so we don't shadow isatty(3).Darren Tucker