summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2010-03-06When the last field on an output line is empty, break the lineIngo Schwarze
if and only if something was printed on that line. This avoids double line breaks after nested lists while still breaking lines after items with empty body.
2010-03-05At the end of lines, split words at existing hyphens:Ingo Schwarze
Making pages look better and helping comparisons with groff output. Note that proper hyphenation is postponed for now because it doesn't really help the switch.
2010-03-05mention loading of certificate files from [private]-cert.pub whenDamien Miller
they are present; feedback and ok jmc@
2010-03-05document certificate authentication; help/ok djmJason McIntyre
2010-03-05tweak previous;Jason McIntyre
2010-03-05make the warning for a revoked key louder and more noticableDamien Miller
2010-03-04"force-command" is not spelled "forced-command"; spotted byDamien Miller
imorgan AT nas.nasa.gov
2010-03-04move section on CA and revoked keys from ssh.1 to sshd.8's known hostsDamien Miller
format section and rework it a bit; requested by jmc@
2010-03-04missing word; spotted by jmc@Damien Miller
2010-03-04fix Bk/Ek;Jason McIntyre
2010-03-04remove -6 from usage();Jason McIntyre
2010-03-04Add a -L flag to print the contents of a certificate; ok markus@Damien Miller
2010-03-046Bone is dead and doesn't respond to whois requests. Remove manKenneth R Westerback
page mentions and '-6' related code. Pointed out by Sebastian Rother. ok deraadt@ henning@
2010-03-04tweak previous;Jason McIntyre
2010-03-04Remove old $Sudo$ tags; the main sudo tree no longer lives in cvs.Todd C. Miller
2010-03-04Add a TrustedUserCAKeys option to sshd_config to specify CA keys thatDamien Miller
are trusted to authenticate users (in addition than doing it per-user in authorized_keys). Add a RevokedKeys option to sshd_config and a @revoked marker to known_hosts to allow keys to me revoked and banned for user or host authentication. feedback and ok markus@
2010-03-04`speed' is an argument, not a flag.Igor Sobrado
ok jmc@
2010-03-04use buffer_get_string_ptr_ret() where we are checking the returnDamien Miller
value explicitly instead of the fatal()-causing buffer_get_string_ptr()
2010-03-03s/similar same/similar/; from imorgan AT nas.nasa.govDamien Miller
2010-03-03the authorized_keys option for CA keys is "cert-authority", notDamien Miller
"from=cert-authority". spotted by imorgan AT nas.nasa.gov
2010-03-03it's true!Jasper Lievisse Adriaanse
2010-03-03reject strings with embedded ASCII nul chars in certificate key IDs,Damien Miller
principal names and constraints
2010-03-02Add RCS IdentDamien Miller
2010-03-02POSIX strptime is stricter than OpenBSD's so do a little dance toDamien Miller
appease it.
2010-03-02In man(7), do not crash on very long title lines,Ingo Schwarze
and do not emulate groff's habit of printing garbage either, but just print the wanted information even though the format must be sacrificed because it won't fit.
2010-03-02For -man -Tascii, limit the width of normal text to 65 characters,Ingo Schwarze
and effectively unlimit the width of literal displays. Following this traditional behaviour allows for automatic output comparisons.
2010-03-02Accept the non-standard macros .Sp (similar to .sp)Ingo Schwarze
and .Vb/.Ve (similar to .nf/.fi) in man(7) mode. These are not intended to be used manually, but they allow us to properly render man(7) code autogenerated by pod2man(1), making Perl and OpenSSL happy in our tree.
2010-03-02Proper inter-sentence spacing for mdoc(7).Ingo Schwarze
When a text line or a non-block macro line in the source code ends in any of ".!?", consider that an end of sentence (EOS). This makes Jason's rule "new sentence, new line" even more important. Let the parser detect the EOS and insert a token into the AST. Let the -Tascii frontend render the EOS token as a double space before the next word.
2010-03-02Permit keys in copy mode to be prefixed by a repeat count, entered withNicholas Marriott
[1-9] in vi mode, or M-[1-9] in emacs mode. From Micah Cowan, tweaked a little by me.
2010-03-02Distinguish opening and closing delimiters, and close out blockIngo Schwarze
macros after closing delimiters only, not after opening ones. Besides, neither roff nor old nor new groff consider braces { } as delimiters. This fixes some frequent misrenderings by mandoc, for example ".Ql (" being rendered as "`'(" instead of "`('".
2010-03-01Extend the end-of-line key so that in normal mode a second press movesNicholas Marriott
the cursor to the end of a wrapped line (if present) and in rectangle mode it toggles between the end of the text and the last cell on the line. From Micah Cowan.
2010-03-01Check for colour and attribute modifications early so the translatedNicholas Marriott
values can be stored in the cached terminal attributes rather than the requested (untranslated) values. Prevents tmux clearing and setting the attributes for every character when using aixterm colours.
2010-03-01update to sudo 1.7.2p5Todd C. Miller
2010-03-01zap what seems to be a left-over debug message; ok markus@Otto Moerbeek
2010-03-01Add printing of current profile and feature information to 'info'Kenneth R Westerback
command with -v. Make a second -v cause printing of raw feature data and a full list of profiles. A few minor tweaks to the feature bitmap handling. Helps in debugging media problems in cdio. Suggestions from fgsch@, man page fixes from jmc@ as usual. ok beck@ deraadt@
2010-02-28%t didn't properly remove trailing spaces from the end of the prompt.Jasper Lievisse Adriaanse
patch from daniel malament in pr 6235 ok millert@
2010-02-28In -x mode, if count was > 1 we would print both the hex and ascii versionsTodd C. Miller
of the response (for count == 1 only the hex version was printed). Make things consistent and match the docs by only printing the hex mode even if count > 1. OK otto@
2010-02-27Fix the atelnet() function, which was wrong in several ways.Nicholas Marriott
Pointed out by obsd at happyjack.org, fix based on a diff from kili@. ok deraadt
2010-02-26tweak previous;Jason McIntyre
2010-02-26Add support for certificate key types for users and hosts.Damien Miller
OpenSSH certificate key types are not X.509 certificates, but a much simpler format that encodes a public key, identity information and some validity constraints and signs it with a CA key. CA keys are regular SSH keys. This certificate style avoids the attack surface of X.509 certificates and is very easy to deploy. Certified host keys allow automatic acceptance of new host keys when a CA certificate is marked as trusted in ~/.ssh/known_hosts. see VERIFYING HOST KEYS in ssh(1) for details. Certified user keys allow authentication of users when the signing CA key is marked as trusted in authorized_keys. See "AUTHORIZED_KEYS FILE FORMAT" in sshd(8) for details. Certificates are minted using ssh-keygen(1), documentation is in the "CERTIFICATES" section of that manpage. Documentation on the format of certificates is in the file PROTOCOL.certkeys feedback and ok markus@
2010-02-26Old news: there is an experimental "loongson" port.Ingo Schwarze
This commit corresponds to what jmc@ did in share/tmac/mdoc/doc-common and share/man/man7/mdoc.samples.7 on January 24.
2010-02-26The groff_man(7) manual says "the first line of text following" .TP isIngo Schwarze
used as a label, not "the first line following", so allow (some kinds of) intervening macros - some people actually put macros in between. On the other hand, when there is no text line before the next block macro, that is, when the .TP block ends without any text line, then something *is* broken, so still error out in that case.
2010-02-26Support .It .Xo.Ingo Schwarze
The trick is to not switch from the .It header to the body at EOL, but, in case an explicit block macro follows, at the end of the block.
2010-02-25The correct value of DEL is 0x7F, not 0xFF. This is purely a documentationChristian Weisgerber
issue--od(1) and hexdump(1) behave as expected. From FreeBSD.
2010-02-24Typo fix from Tim van der Molen.Nicholas Marriott
2010-02-24Don't set the terminal to nonblocking on detach until we have finished with itNicholas Marriott
entirely.
2010-02-24Add $OpenBSD$ tags in comments, our portable-syncing scripts use theseDamien Miller
2010-02-23Fix the worst among the fatal block-nesting issues we have in our tree,Ingo Schwarze
in the end simply changing Oo Xo Oo Oc Oc Xc to Oo Xo Oo Oc Xc Oc. I tried five different variants without the Xo/Xc, because there is no real reason why Xo/Xc should be needed here, and two additional variants with Xo/Xc that look more pretty than what i'm now committing. All seven alternatives work both with mandoc and groff 1.20.1, but all seven trigger various different bugs in our old groff, and we still need to remain compatible with our old groff right now. ok jmc@ sobrado@
2010-02-23bump patchlevelTodd C. Miller
2010-02-22Check for pseudo-command by looking at the first character of theTodd C. Miller
command in sudoers instead of checking the user-supplied command for a slash.