summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2008-02-22closefrom() call was too early, delay it until just before we executeDamien Miller
the user's rc files (if any).
2008-02-20correct boolean encoding for coredump; der Mouse via dugsongMarkus Friedl
2008-02-14When started in configuration test mode (-t) do not check that sshd isMarc Balmer
being started with an absolute path. ok djm
2008-02-13rekey arc4random and OpenSSL RNG in postauth childDamien Miller
closefrom fds > 2 before shell/command execution ok markus@
2008-02-11bump Mdocdate for pages committed in "febuary", necessary becauseJason McIntyre
of a typo in rcs.c;
2008-02-10delay ~ expansion for ChrootDirectory so it expands to the logged-in user'sDamien Miller
home, rather than the user who starts sshd (probably root)
2008-02-10mantion that "internal-sftp" is useful with ForceCommand tooDamien Miller
2008-02-09Document the correct permissions for the ~/.ssh/ directory.Ryan Thomas McBride
ok jmc
2008-02-09missing `)';Jason McIntyre
2008-02-08add sshd_config ChrootDirectory option to chroot(2) users to a directory andDamien Miller
tweak internal sftp server to work with it (no special files in chroot required). ok markus@
2008-02-04link sftp-server into sshd; feedback and ok djm@Markus Friedl
2008-01-31explain how to handle local file names containing colons;Jason McIntyre
requested by Tamas TEVESZ ok dtucker
2008-01-23Revert the change for bz #1307 as it causes connection aborts if an IGNOREDarren Tucker
packet arrives while we're waiting in packet_read_expect (and possibly elsewhere).
2008-01-21when a remote write error occurs during an upload, ensure that ACKs for allDamien Miller
issued requests are properly drained. patch from t8m AT centrum.cz
2008-01-21Remove the fixed 100 handle limit in sftp-server and allocate as manyDamien Miller
as we have available file descriptors. Patch from miklos AT szeredi.hu; ok dtucker@ markus@
2008-01-20When uploading, correctly handle the case of an unquoted filename withDamien Miller
glob metacharacters that match a file exactly but not as a glob, e.g. a file called "[abcd]". report and test cases from duncan2nd AT gmx.de
2008-01-19promote rekeylimit to a int64 so it can hold the maximum useful limitDamien Miller
of 2^32; report and patch from Jan.Pechanec AT Sun.COM, ok dtucker@
2008-01-19When we added support for specified bind addresses for port forwards, weDamien Miller
added a quirk SSH_OLD_FORWARD_ADDR. There is a bug in our handling of this for -L port forwards that causes the client to listen on both v4 and v6 addresses when connected to a server with this quirk, despite having set 0.0.0.0 as a bind_address. report and patch from Jan.Pechanec AT Sun.COM; ok dtucker@
2008-01-19unbreak line numbering (broken in revision 1.164), fix error messageDamien Miller
2008-01-19when hashing individual hosts (ssh-keygen -Hf hostname), make sure weDamien Miller
hash just the specified hostname and not the entire hostspec from the keyfile. It may be of the form "hostname,ipaddr", which would lead to a hash that never matches. report and fix from jp AT devnull.cz
2008-01-19fix remote handle leak in do_download() local file open error path;Damien Miller
report and fix from sworley AT chkno.net
2008-01-19ignore SIGPIPE in multiplex client mode - we can receive this if theDamien Miller
server runs out of fds on us midway. Report and patch from gregory_shively AT fanniemae.com
2008-01-19fd leak on session multiplexing error path. Report and patch fromDamien Miller
gregory_shively AT fanniemae.com
2008-01-19scp -q implies ssh -q for the underlying connection, it doesn't justDamien Miller
hush the progress meter
2008-01-19satisfy the pedants: -q does not suppress all diagnostic messages (e.g.Damien Miller
some commandline parsing warnings go unconditionally to stdout).
2008-01-11disable unused functionsCharles Longeau
initially from tobias@, but disabled them by placing them in "#ifdef notyet" which was asked by djm@ ok djm@ tobias@
2008-01-01Allow PermitRootLogin in a Match block. Allows for, eg, permitting rootDarren Tucker
only from the local network. ok markus@, man page bit ok jmc@
2008-01-01If scp -p encounters a pre-epoch timestamp, use the epoch which isDarren Tucker
as close as we can get given that it's used unsigned. Add a little debugging while there. bz #828, ok djm@
2008-01-01spaces -> tabs from my previous commitDarren Tucker
2007-12-31When in inetd mode, have sshd generate a Protocol 1 ephemeral serverDarren Tucker
key only for connections where the client chooses Protocol 1 as opposed to when it's enabled in the server's config. Speeds up Protocol 2 connections to inetd-mode servers that also allow Protocol 1. bz #440, based on a patch from bruno at wolff.to, ok markus@
2007-12-31Prevent strict-aliasing warnings on newer gcc versions. bz #1355, patchDarren Tucker
from Dmitry V. Levin, ok djm@
2007-12-28Use the correct packet maximum sizes for remote port and agent forwarding.Darren Tucker
Prevents the server from killing the connection if too much data is queued and an excessively large packet gets sent. bz #1360, ok djm@.
2007-12-28Make SSH2_MSG_UNIMPLEMENTED and SSH2_MSG_IGNORE messages reset theDarren Tucker
ServerAlive and ClientAlive timers. Prevents dropping a connection when these are enabled but the peer does not support our keepalives. bz #1307, ok djm@.
2007-12-27Add a small helper function to consistently handle the EAI_SYSTEM errorDarren Tucker
code of getaddrinfo. Prompted by vgiffin at apple com via bz #1417. ok markus@ stevesk@
2007-12-12unbreak lls command and add a regress test that would have caught theDamien Miller
breakage; spotted by mouring@
2007-11-03avoid errno trashing in signal handler; ok dtuckerTheo de Raadt
2007-11-03Use xstrdup/xfree when saving pwname and pwdir; ok deraadt@Darren Tucker
2007-11-03bz #1377: getpwuid results were being clobbered by another getpw* callTheo de Raadt
inside tilde_expand_filename(); save the data we need carefully ok djm
2007-11-03fix memory leak in process_cmdline(), patch from Jan.Pechanec AT Sun.COM;Damien Miller
ok dtucker@
2007-10-29clean up after previous macro removal;Jason McIntyre
2007-10-29Make LocalCommand work for Protocol 1 too; ok djm@Darren Tucker
2007-10-29ProxyCommand and LocalCommand use the user's shell, not /bin/sh; ok djm@Darren Tucker
2007-10-29Send config block back to slave for invalid users too so optionsDarren Tucker
set by a Match block (eg Banner) behave the same for non-existent users. Found by and ok djm@
2007-10-29Plug tiny mem leaks in ControlPath and ProxyCommand option processing; ok djm@Darren Tucker
2007-10-29Allow build without -DGSSAPI; ok deraadt@Darren Tucker
2007-10-24factor out network read/write into an atomicio()-like function, and use itDamien Miller
to handle short reads, apply bandwidth limits and update counters. make network IO non-blocking, so a small trickle of reads/writes has a chance of updating the progress meter; bz #799 ok dtucker@
2007-10-24rework argument splitting and parsing to cope correctly with common shellDamien Miller
escapes and make handling of escaped characters consistent with sh(1) and between sftp commands (especially between ones that glob their arguments and ones that don't). parse command flags using getopt(3) rather than hand-rolled parsers. ok dtucker@
2007-10-22make sure that both the local and remote port are correct whenMarkus Friedl
parsing -L; Jan Pechanec (bz #1378)
2007-10-02handles zero-sized strings that fgets can returnCharles Longeau
properly removes trailing newline removes an unused variable correctly counts line number "looks ok" ray@ markus@
2007-09-29Remove unused prototype. ok djm@Darren Tucker
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-11 20:13:23 +0000