summaryrefslogtreecommitdiff
path: root/usr.bin
AgeCommit message (Collapse)Author
2020-10-13Set RGB flag if capabilities are present, GitHub issue 2418.Nicholas Marriott
2020-10-13Un-const what we pass to dirname(3).Martijn van Duren
Original diff by and OK naddy@
2020-10-12Accommodate POSIX basename(3) that takes a non-const parameter andChristian Weisgerber
may modify the string buffer. From Joerg Sonnenberger for DragonFly BSD. ok millert@
2020-10-12Accommodate POSIX basename(3) that takes a non-const parameter andChristian Weisgerber
may modify the string buffer. ok millert@
2020-10-12Zap unused family parameter from ssh_connect_direct()kn
sshconnect.c r1.241 from 2013 made it unused; found while reading code. OK djm
2020-10-11UpdateHostkeys: check for keys under other namesDamien Miller
Stop UpdateHostkeys from automatically removing deprecated keys from known_hosts files if the same keys exist under a different name or address to the host that is being connected to. This avoids UpdateHostkeys from making known_hosts inconsistent in some cases. For example, multiple host aliases sharing address-based known_hosts on different lines, or hosts that resolves to multiple addresses. ok markus@
2020-10-11UpdateHostkeys: better CheckHostIP handlingDamien Miller
When preparing to update the known_hosts file, fully check both entries for both the host and the address (if CheckHostIP enabled) and ensure that, at the end of the operation, entries for both are recorded. Make sure this works with HashKnownHosts too, which requires maintaining a list of entry-types seen across the whole file for each key. ok markus@
2020-10-11UpdateHostkeys: better detect manual host entriesDamien Miller
Disable UpdateHostkeys if the known_hosts line has more than two entries in the pattern-list. ssh(1) only writes "host" or "host,ip" lines so anything else was added by a different tool or by a human. ok markus@
2020-10-09Escape ! in QlTim van der Molen
OK jmc@ nicm@, agreement from schwarze@
2020-10-09fix SEE ALSO;Jason McIntyre
2020-10-09Add nolog option to avoid syslog(3)kn
doas(1) unconditionally logs all executions but syslog.conf(5) provides no means to filter messages by user, target or command. Add the "nolog" option to doas.conf(5) such that syslog becomes an opt-out feature; this keeps configuration simple enough yet powerful since rule definition is the best place to decide whether to log commands or not on a per rule basis - this also aoids duplicating information or logic in any other log processing tool. OK tedu martijn
2020-10-09Improve error message on missing permissionkn
In case "cmd" (and "args") in doas.conf(5) mismatch, the log syslog(3) message might be read as if the command was executed but failed, i.e. returned non-zero. Be unambiguous and help admins spot execution *attempts* as such: -Oct 9 01:05:20 eru doas: failed command for kn: echo bar +Oct 9 01:05:20 eru doas: command not permitted for kn: echo bar OK tedu deraadt
2020-10-08set SO_REUSEADDR on the server socket when we play oscp server.Bob Beck
ok inoguchi@ tb@ deraadt@
2020-10-08don't misdetect comma-separated hostkey names as wildcards;Damien Miller
spotted by naddy@
2020-10-08clarify conditions for UpdateHostkeysDamien Miller
2020-10-07Allow fnmatch(3) wildcards in update-environment, GitHub issue 2397.Nicholas Marriott
2020-10-07Disable UpdateHostkeys when hostkey checking failsDamien Miller
If host key checking fails (i.e. a wrong host key is recorded for the server) and the user elects to continue (via StrictHostKeyChecking=no), then disable UpdateHostkeys for the session. reminded by Mark D. Baushke; ok markus@
2020-10-07Fix UpdateHostkeys/HashKnownHosts/CheckHostIP bugDamien Miller
When all of UpdateHostkeys, HashKnownHosts and ChechHostIP were enabled and new host keys were learned, known_hosts IP entries were not being recorded for new host keys. reported by matthieu@ ok markus@
2020-10-07don't UpdateHostkeys when the hostkey is verified by theDamien Miller
GlobalKnownHostsFile file, support only UserKnownHostsFile matches suggested by Mark D. Baushke; feedback and ok markus@
2020-10-07revert kex->flags cert hostkey downgrade back to a plain keyDamien Miller
(commitid VtF8vozGOF8DMKVg). We now do this a simpler way that needs less plumbing. ok markus@
2020-10-07simply disable UpdateHostkeys when a certificate successfullyDamien Miller
authenticated the host; simpler than the complicated plumbing via kex->flags we have now. ok markus@
2020-10-07disable UpdateHostkeys by default if VerifyHostKeyDNS is enabled;Damien Miller
suggested by Mark D. Baushke
2020-10-06Fix a last minute change in previous.Nicholas Marriott
2020-10-06Add a state struct to store working state during format expansionNicholas Marriott
instead of modiyfing the format tree. Use this to disable nested job expansion so that the result of #() is not expanded again. Reported by Chas J Owens IV, GitHub issue 2390.
2020-10-06Agent protocol draft is now at rev 4. ok djm@Darren Tucker
2020-10-05Trim "s from process names; also fix a default format in man page.Nicholas Marriott
2020-10-05Tidy the resize code, merge some common bits and add some comments. FromNicholas Marriott
"Mike" in GitHub issue 2392.
2020-10-05Use the setal capability as well as (tmux's) Setulc.Nicholas Marriott
2020-10-04when ordering host key algorithms in the client, consider the ECDSADamien Miller
key subtype; ok markus@
2020-10-04Allow full range of UIDs and GIDs for sftp chown and chgrp on 32bitDarren Tucker
platforms instead of being limited by LONG_MAX. bz#3206, found by booking00 at sina.cn, ok markus@
2020-10-03There are lots of place where we want to redirect stdin, stdoutDamien Miller
and/or stderr to /dev/null. Factor all these out to a single stdfd_devnull() function that allows selection of which of these to redirect. ok markus@
2020-10-03enable UpdateHostkeys by default when the configuration has notDamien Miller
overridden UserKnownHostsFile; ok markus@ "The timing is perfect" deraadt@
2020-10-03disable UpdateHostkeys when a wildcard hostname pattern isDamien Miller
encountered or when a certificate host key is in use. feedback/ok markus@
2020-10-03record when the host key checking code downgrades a certificate hostDamien Miller
key to a plain key. This occurs when the user connects to a host with a certificate host key but no corresponding CA key configured in known_hosts; feedback and ok markus@
2020-10-03prefer ed25519 signature algorithm variants to ECDSA; ok markus@Damien Miller
2020-10-03want time.h here tooDamien Miller
2020-10-03split introductory paragraph, and insert ominous words about the globTheo de Raadt
issue, which cannot be fully fixed and really requires completely replacing scp with a completely different subsystem. team effort to find the right words..
2020-10-02Add -[46] nops for compatibility with the OpenSSL s_serverTheo Buehler
On OpenBSD it's necessary to use the eopenssl11 s_server with either -4 or -6 to choose an address family. I often want to try something with an OpenSSL server and then test the same thing with LibreSSL or vice versa. Adding and removing -4s on top of editing the command is annoying and distracting. This commits teaches our s_server to ignore -4 and -6 and thus makes commands that work with eopenssl11 more likely to work with openssl(1). These options are deliberately undocumented and don't show up in help listings. ok bcook inoguchi jsing
2020-10-01add a missing .PpIngo Schwarze
2020-10-01add example to apropos.1 to list all manuals in a given sectionians
ok schwarze@
2020-10-01update currency exchange rates;Jason McIntyre
2020-09-30Now that dprintf(3) uses format string annotation checking, a sizeof()Theo de Raadt
requires (int) for a '*' modifier ok millert
2020-09-30Regen moduli.Darren Tucker
2020-09-27openssh 8.4Damien Miller
2020-09-23Escape+Up and the other arrow keys should be kept as Escape+Up and notNicholas Marriott
converted to M-Up. Do not give them the implied meta flag so they don't match the M-Up entry in the output key tree. Fixes problem with vi reported by jsing@.
2020-09-22Move a sentence to the right command.Nicholas Marriott
2020-09-22Do not wrap at end of text when positioning at end of match because theNicholas Marriott
length may include trailing spaces.
2020-09-22Resize screen to the correct size (borders need to be taken off).Nicholas Marriott
2020-09-22Fix warnings on some platforms with %llx and add a new message to handleNicholas Marriott
64-bit client flags.
2020-09-21close stdin when forking after authentication too; ok markusDamien Miller
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-24 20:04:14 +0000