summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2021-09-26openssh-8.8Damien Miller
2021-09-26need initgroups() before setresgid(); reported by anton@, ok deraadt@Damien Miller
2021-09-25RSA/SHA-1 is not used by default anymoreKlemens Nanni
OK dtucker deraadt djm
2021-09-23Remove wpath from secure mode pledge.Tobias Stoeckmann
Upstream removed history file support for secure mode. The history file feature is off by default already, disallowing it altogether in secure mode allows us to drop wpath. Added a note about it to manual page. ok benno, deraadt
2021-09-23Remove an unused variable and a pointless label.Theo Buehler
ok inoguchi
2021-09-22Fix command prompt with multiple prompts (add the result onto the listNicholas Marriott
again as we go along). ok deraadt
2021-09-20fix missing -s in SYNOPSYS and usage() as well as a capitalisationDamien Miller
mistake; spotted by jmc@
2021-09-20Fix "Allocated port" debug message for unix sockets. From peder.stray atDarren Tucker
gmail.com via github PR#272, ok deraadt@
2021-09-20Switch scp back to use the old protocol by default, ahead of release.Damien Miller
We'll wait a little longer for people to pick up sftp-server(8) that supports the extension that scp needs for ~user paths to continue working in SFTP protocol mode. Discussed with deraadt@
2021-09-19bump example versionsSebastian Benoit
Whatever deraadt@
2021-09-18better error message for ~user failures when the sftp-serverDamien Miller
lacks the expand-path extension; ok deraadt@
2021-09-17sys/param.h is only needed for MAXCOMLEN, but a few header filesTheo de Raadt
which must be manually included in userland were missing
2021-09-17the ioctl table generation does not require sys/param.hTheo de Raadt
2021-09-17Do not destroy sessions twice, GitHub issue 2889.Nicholas Marriott
2021-09-16make some more scp-in-SFTP mode better match Unix idiomsDamien Miller
suggested by deraadt@
2021-09-16allow log_stderr==2 to prefix log messages with argv[0]Damien Miller
use this to make scp's SFTP mode error messages more scp-like prompted by and ok deraadt@
2021-09-16Fix run-shell -d with no command, GitHub issue 2885.Nicholas Marriott
2021-09-16missing space character in ssh -G output broke the t-sshcfgparseDamien Miller
regression test; spotted by anton@
2021-09-15For the moment, restore if-shell and run-shell to parsing at the lastNicholas Marriott
moment (when the shell command completes) rather than when first invoked, GitHub issue 2872.
2021-09-15allow CanonicalizePermittedCNAMEs=none in ssh_config; ok markus@Damien Miller
2021-09-14put back the mux_ctx memleak fix for SSH_CHANNEL_MUX_CLIENTmbuhl
OK mfriedl@
2021-09-11Do not ignore SIGINT while waiting for input if editline(3) is not used.Ingo Schwarze
Instead, in non-interactive mode, exit sftp(1), like for other serious errors. As pointed out by dtucker@, when compiled without editline(3) support in portable OpenSSH, the el == NULL branch is also used for interactive mode. In that case, discard the input line and provide a fresh prompt to the user just like in the case where editline(3) is used. OK djm@
2021-09-11when using SFTP protocol, continue transferring files after aDamien Miller
transfer error occurs. This matches original scp/rcp behaviour. ok dtucker@
2021-09-10Do fatal/fatalx a different way so the compiler trick to avoid warningsNicholas Marriott
becomes unnecessary, prompted by theo.
2021-09-10Get rid of the last two warnings by turning them off around the problemNicholas Marriott
statements, if the compiler supports it.
2021-09-10Quirk-compatibility with GNU tbl(1):Ingo Schwarze
With the "nospaces" option, skip space characters before and after "T{", in addition to skipping those at the beginning and end of data cells. Minor issue reported by <Oliver dot Corff at email dot de>.
2021-09-10In a tbl(7) having the "nospaces" option, skip space charactersIngo Schwarze
not only at the end of data cells, but also after "T}", aligning the behaviour of the parser with GNU tbl(1). Issue reported by <Oliver dot Corff at email dot de>.
2021-09-10Document that non-interactive commands are run via the user's shellDarren Tucker
using the -c flag. ok jmc@
2021-09-10Document behaviour of arguments following non-interactive commands.Darren Tucker
Prompted by github PR#139 from EvanTheB, feedback & ok djm@ jmc@
2021-09-10Disable aliases inside aliases for the moment.Nicholas Marriott
2021-09-10Clarify which file's attributes -p preserves, and that it's specificallyDarren Tucker
the file mode bits. bz#3340 from calestyo at scientia.net, ok djm@ jmc@
2021-09-10openssh-7.4 was incorrectly listed twice; spotted by DmitryDamien Miller
Belyavskiy, ok dtucker@
2021-09-09Keep -? as usage.Nicholas Marriott
2021-09-09Turn on both button and all mouse modes for menus since some terminalsNicholas Marriott
only support the former.
2021-09-09In HTML output, in cells with an "n" (number) layout, pad numbersIngo Schwarze
on the right side with UTF-8 punctuation and figure spaces such that numbers in different tbl(7) rows align at the decimal point. The exact HTML output format was suggested by <Oliver dot Corff at email dot de>; the implementation in C is mine.
2021-09-09If the layout or data of an individual cell in a tbl(7) containsIngo Schwarze
only "_", "-", or "=", requesting a horizontal line to be drawn across the middle of the cell, print <hr/> in that cell in HTML output. That is arguably slightly ugly because HTML 5 regards <hr/> as semantic markup, meaning "thematic break". If somebody knowns a better way to render a horizontal line across the middle of a table cell with pure HTML and CSS, and without implying a specific meaning, please tell me. Missing feature reported by <Oliver dot Corff at email dot de>.
2021-09-09Expand argument to run-shell again.Nicholas Marriott
2021-09-09Fix parsing of aliases again (GitHub issue 2842), also make argumentNicholas Marriott
parsing a bit simpler and fix the names of some client flags.
2021-09-09- move CAVEATS to its correct orderJason McIntyre
- use the term "legacy" protocol rather than "original", as the latter made the text misleading - uppercase SCP ok djm
2021-09-08Use the SFTP protocol by default. The original scp/rcp protocol remainsDamien Miller
available via the -O flag. Note that ~user/ prefixed paths in SFTP mode require a protocol extension that was first shipped in OpenSSH 8.7. ok deraadt, after baking in snaps for a while without incident
2021-09-08correct my mistake in previous fix; spotted by halexDamien Miller
2021-09-07Fix an infinite loop that could occur during some cases of horizontallyIngo Schwarze
overlapping horizontal spans. One span would calculate a desired target width and start preparations for applying it to some columns, then the other span would overwrite the target width with a different value and also start preparations for applying that one to some columns, which could sometimes confuse the code doing the final distribution to the point of not doing anything at all before entering the next iteration. Fix this by making sure the distribution is done step by step, doing one step at a time rather than allowing multiple steps to conflict. Specifically, always do the smallest useful step first. This change also simplifies the code. For example, the local "colwidth" array is no longer needed. Note that the algorithm still differs from the one implemented in GNU tbl(1), which appears to not even try to harmonize column widths but seems to simply distribute the same amount to all constituent columns, no matter whether their intrinsic width is narrow or wide. Adopting a GNU-compatible algorithm might allow further simplifiction in addition to yielding even more similar output, but i do not want to implement any major changes of the algorithm at this time. The infinite loop was reported by <Oliver dot Corff at email dot de>.
2021-09-07Correctly calculate required column widths for tables containingIngo Schwarze
cells that horizontally span columns which contains "n" (number) formatted cells on other rows. This requires updating total column widths from "n" formatted cells before starting width distribution from the spanning cells to their constituent columns.
2021-09-07Retry up to 3 times on password authentication failureJoshua Stein
ok martijn support from various
2021-09-07we already parse the GNU tbl(7) "nospaces" option,Ingo Schwarze
so let it have the intended effect, too
2021-09-07do not crash when a tbl(7) cell uses roman fontIngo Schwarze
2021-09-07avoid NULL deref in -Y find-principals. Report and fix fromDamien Miller
Carlo Marcelo Arenas Belón
2021-09-06revision 1.381 neglected to remove sChallengeResponseAuthenticationTodd C. Miller
from the enum. Noticed by christos@zoulas.com. OK dtucker@
2021-09-05new sentence, new line, and tweak wording of previous;Jason McIntyre
2021-09-05Remove unused variable tmptm in do_body of openssl(1) caKinichiro Inoguchi