summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2018-09-16Use user_from_uid(3) and group_from_gid(3) in a few more placesTodd C. Miller
that do repeated lookups. OK tb@
2018-09-16Use user_from_uid(3) and group_from_gid(3) to avoid extra passwdTodd C. Miller
and group file lookups. This required a bit of reordering of the file mode handling bits to deal with the const char *. OK tb@
2018-09-16Replace the local getname() and getuserid() functions with callsTodd C. Miller
to user_from_uid(3) and uid_from_user(3). This requires sprinkling const in a few places to match the return value of user_from_uid(3). OK tb@
2018-09-14Do not leak a file descriptor when opening nohup.out. Make sureAlexander Bluhm
that stdout and stderr are not closed. from Nan Xiao
2018-09-14No longer needed since the ping/ping6 unification.Florian Obser
Pointed out by Clemens Goessnitzer (clemens AT goessnitzer.info), thanks!
2018-09-14second try, deals properly with missing and private-only keys:Damien Miller
Use consistent format in debug log for keys readied, offered and received during public key authentication. This makes it a little easier to see what is going on, as each message now contains (where available) the key filename, its type and fingerprint, and whether the key is hosted in an agent or a token.
2018-09-14revert following; deals badly with agent keysDamien Miller
revision 1.285 date: 2018/09/14 04:17:12; author: djm; state: Exp; lines: +47 -26; commitid: lflGFcNb2X2HebaK; Use consistent format in debug log for keys readied, offered and received during public key authentication. This makes it a little easier to see what is going on, as each message now contains the key filename, its type and fingerprint, and whether the key is hosted in an agent or a token.
2018-09-14garbage-collect moribund ssh_new_private() API.Damien Miller
2018-09-14Use consistent format in debug log for keys readied, offered andDamien Miller
received during public key authentication. This makes it a little easier to see what is going on, as each message now contains the key filename, its type and fingerprint, and whether the key is hosted in an agent or a token.
2018-09-13Fix warnings caused by user_from_uid() and group_from_gid() nowTodd C. Miller
returning const char *.
2018-09-13hold our collective noses and use the openssl-1.1.x API in OpenSSH;Damien Miller
feedback and ok tb@ jsing@ markus@
2018-09-12fix edit mistake; spotted by jmc@Damien Miller
2018-09-12add SSH_ALLOWED_CA_SIGALGS - the default list of signature algorithmsDamien Miller
that are allowed for CA signatures. Notably excludes ssh-dsa. ok markus@
2018-09-12add sshkey_check_cert_sigtype() that checks a cert->signature_typeDamien Miller
against a supplied whitelist; ok markus
2018-09-12add cert->signature_type field and keep it in sync with certificateDamien Miller
signature wrt loading and certification operations; ok markus@
2018-09-12Add "ssh -Q sig" to allow listing supported signature algorithmsDamien Miller
ok markus@
2018-09-12allow key revocation by SHA256 hash and allow ssh-keygen to create KRLsDamien Miller
using SHA256/base64 key fingerprints; ok markus@
2018-09-12log certificate fingerprint in authentication success/failure messageDamien Miller
(previously we logged only key ID and CA key fingerprint). ok markus@
2018-09-11The cursor position is limited to the margins for CUF and CUB, so turnNicholas Marriott
margins off for printing cells (like most everything else already does). Problem reported by Thomas Sattler.
2018-09-11Do not check for mouse events on pane borders when zoomed, based on aNicholas Marriott
fix from Avi Halachmi.
2018-09-10Do not clear selection when searching.Nicholas Marriott
2018-09-09Fix a crash in rdistd triggered by the recent getpw{ent,nam,uid}Todd C. Miller
changes. This stems from rdist stashing a pointer to the static area used by getpw{ent,nam,uid} and using it to avoid repeating passwd lookups when pw->pw_name matches the user to be looked up. This relied on undefined behavior, and with the recent passwd changes, is no longer possible as the old pointer will be invalidated. A better approach is to use the upcoming uid_from_user(3) functions. Found by and fix OK tim@
2018-09-07Remove unnused af argument from unmask(), sync with pfctlkn
Noted by jca, thanks. OK jca claudio
2018-09-07Declare strings passed to local_listen() as const. This makes itAlexander Bluhm
consistent to remote_connect() and getaddrinfo(3). from Nan Xiao
2018-09-07Add FALLTHROUGH comments where appropriate. Patch from jjelen at redhatDarren Tucker
via bz#2687.
2018-09-07ssh -MM requires confirmation for all operations that change theDamien Miller
multiplexing state, not just new sessions. mention that confirmation is checked via ssh-askpass
2018-09-06Do not close the socket twice in netcat.Alexander Bluhm
from Nan Xiao; OK tb@
2018-09-03Allow a large line number to go to the end with goto-line, from MarkNicholas Marriott
Kelly in GitHub issue 1460.
2018-09-03Fix selection test, from Takeshi Banse.Nicholas Marriott
2018-09-01update currency exchange rates;Jason McIntyre
2018-08-31clarify that patterns are extended regular expressions; ok millert@ phessler@Christian Weisgerber
2018-08-31Dont print "default" for "0.0.0.0" if it is a host route.YASUOKA Masahiko
diff from asou at soum.co.jp ok claudio kn
2018-08-29Reset line flag when clearing selection, GitHub issue 1454.Nicholas Marriott
2018-08-29recognize kcov ioctl commands; ok deraadt@ mpi@ visa@anton
2018-08-29Keep any text killed in the command prompt with C-w and yank it withNicholas Marriott
C-y, only use the top buffer if no text has previously been killed. This and previous change promped by discussion with kn@.
2018-08-29Add C-Left and C-Right as aliases for M-b and M-f.Nicholas Marriott
2018-08-29Add set-case-replaced to toggle case-preserving replace on or off.Reyk Floeter
By default, replacing "foo" with "bar" turns "FOO" into "BAR". With case-replace turned off, "FOO" will turn into "bar". OK florian@ tb@
2018-08-28Drop SSLv2, SSLv3 support.cheloha
No need to check for SSLv2/3 sessions when printing the tally mark. Also do SSLv23_client_method -> TLS_client_method. ok jsing@
2018-08-28fix misplaced parenthesis inside if-clause. it's harmless and the only issue isRicardo Mestre
showing an unknown error (since it's not defined) during fatal(), if it ever an error occurs inside that condition. OK deraadt@ markus@ djm@
2018-08-28fix build with DEBUG_PK enabledRicardo Mestre
OK dtucker@
2018-08-28Check for SSL_write(3) error.cheloha
jsing@ notes that this is not a complete solution, as we don't account for retries or partial writes, but that this is a step in a right direction. May want to revisit this later to provide a complete solution. ok jsing@
2018-08-27Reduce excessive right padding in tagged list heads.Ingo Schwarze
The 1.2em was an approximate equivalent of the 2n traditionally used for terminal display, but it is much too wide for HTML rendering. Issue reported by mikeb@.
2018-08-27Memory leaks, from Gang Fan in GitHub issue 1453.Nicholas Marriott
2018-08-26Handle fork() errors. The Perl fork() wrapper returns undef ratherChristian Weisgerber
than -1 on error. ok jca@
2018-08-26Support nesting of elements with next-line scope.Ingo Schwarze
For example, ksh93(1) needs this for .B\n.SM.
2018-08-26Add q: format prefix to escape sh(1) special characters. Suggested byNicholas Marriott
someone ages ago and then more recently in GitHub issue 1449.
2018-08-25Rudimentary implementation of the roff(7) .char (output glyphIngo Schwarze
definition) request, used for example by groff_hdtbl(7). This simplistic implementation may interact incorrectly with the .tr (input character translation) request. But come on, you are not only using .char *and* .tr, but you do so with respect to the same character in the same manual page?
2018-08-25If man(7) next-line scope is open and the line ends with \c,Ingo Schwarze
the scope remains open. Needed for example for groff_man(7).
2018-08-24update usage for pkcs8;Jason McIntyre
ok tb
2018-08-24Rudimentary implementation of the roff(7) .while request.Ingo Schwarze
Needed for example by groff_hdtbl(7). There are two limitations: It does not support nested .while requests yet, and each .while loop must start and end in the same scope. The roff_parseln() return codes are now more flexible and allow OR'ing options.