Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-06-29 | make -u flag per-device similarly to -a and -w | Alexandre Ratchov | |
2011-06-27 | for mount_ntfs, fix an error in previous; for tr, fix an error of the | Jason McIntyre | |
same variety... | |||
2011-06-27 | remove two forgotten debug printf()s | Alexandre Ratchov | |
2011-06-27 | Display the CPU usage when -ddddd is used, ie the time spent on | Alexandre Ratchov | |
calculations compared to the time spend on sleeping in poll(). | |||
2011-06-27 | expose audio client names through sysex messages, this way any | Alexandre Ratchov | |
midi client could determine which volume knob corresponds to which client. Such sysex messages are ignored by hardware or software that don't understand them | |||
2011-06-27 | PANE_FREEZE doesn't do anything anymore, so remove it. | Nicholas Marriott | |
2011-06-26 | no mcd | Ted Unangst | |
2011-06-25 | DESTDIR handling does not belong here. This is built live. | Theo de Raadt | |
ok otto | |||
2011-06-25 | some improvements from Cl??ment B??sch; ok tedu | Jason McIntyre | |
2011-06-25 | add CAVEATS section explaining some of the differences between this | Jasper Lievisse Adriaanse | |
and the fd.o implementation feedback/ok jmc@ | |||
2011-06-23 | ignore EINTR errors from poll() | Damien Miller | |
2011-06-23 | switch to installing source manuals (base part) | Ingo Schwarze | |
discussed with lots of people, tested by naddy@, "move fast" deraadt@ | |||
2011-06-23 | Don't check dev/ramdisk.h for ioctl(2) commands as it doesn't exist | Matthew Dempsky | |
anymore. Noticed by and ok claudio@ | |||
2011-06-23 | Add a couple of extra xterm-style keys that gnome terminal provides, | Nicholas Marriott | |
from Dustin Kirkland. | |||
2011-06-23 | rename sandbox.h => ssh-sandbox.h to make things easier for portable | Damien Miller | |
2011-06-22 | $OpenBSD$ makers | Damien Miller | |
2011-06-22 | hook up a channel confirm callback to warn the user then requested X11 | Damien Miller | |
forwarding was refused by the server; ok markus@ | |||
2011-06-22 | introduce sandboxing of the pre-auth privsep child using systrace(4). | Damien Miller | |
This introduces a new "UsePrivilegeSeparation=sandbox" option for sshd_config that applies mandatory restrictions on the syscalls the privsep child can perform. This prevents a compromised privsep child from being used to attack other hosts (by opening sockets and proxying) or probing local kernel attack surface. The sandbox is implemented using systrace(4) in unsupervised "fast-path" mode, where a list of permitted syscalls is supplied. Any syscall not on the list results in SIGKILL being sent to the privsep child. Note that this requires a kernel with the new SYSTR_POLICY_KILL option. UsePrivilegeSeparation=sandbox will become the default in the future so please start testing it now. feedback dtucker@; ok markus@ | |||
2011-06-22 | reuse the multistate option arrays to pretty-print options for "sshd -T" | Damien Miller | |
2011-06-21 | Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudio | Mike Belopuhov | |
2011-06-20 | Make -aoff option apply to MIDI ports (-q) as well, ensuring the device | Alexandre Ratchov | |
stays closed also if -q is used. As we're at it, add -a to midicat so it behaves like aucat. | |||
2011-06-20 | fix a segfault found by jasper@ | Marc Espie | |
ok miod@, otto@, jasper@ | |||
2011-06-20 | Switch binary file detection from !(isprint() || isspace()) to checking | Stefan Sperling | |
for embedded NULs. Matches GNU and FreeBSD grep, and avoids problems with e.g. latin1-encoded files being treated as binary in the UTF-8 locale once grep calls setlocale() (which it does not, yet). OK millert@ tedu@ | |||
2011-06-20 | more fancy kdump output, mostly from FreeBSD; ok deraadt@ tedu@ | Otto Moerbeek | |
2011-06-20 | Teach lint about %F, %A, %a format specifiers. | Martynas Venckus | |
OK millert@. | |||
2011-06-20 | Revert rev 1.21 which is superceded by 1.22 | Todd C. Miller | |
2011-06-20 | Prevent lint from warning about %m in C format strings. Quiets | Todd C. Miller | |
false positives when check syslog(3) format strings that use %m. OK tedu@ martynas@ | |||
2011-06-20 | - Adjust Getopts() hash to align options with values. | Jasper Lievisse Adriaanse | |
- Tweak comment about static libs. | |||
2011-06-20 | - implement --static, and preserve dependency order, | Jasper Lievisse Adriaanse | |
instead of search order when printing the libraries required for linking. this now passes our --static regress tests and matches fd.o | |||
2011-06-18 | the %m argument as used by syslog does not eat an argument, so skip over it. | Ted Unangst | |
ok martynas | |||
2011-06-18 | Have -T[x]html print out the link target for `Lk' | Ingo Schwarze | |
if no link title is provided. Based on a patch by Tim van der Molen, tweaked by kristaps@. | |||
2011-06-18 | Warn and stop processing if the format string ends with an backslash. | Philip Guenthe | |
From Andres Perera (andres.p at zoho.com), ok otto@, millert@ | |||
2011-06-17 | setproctitle for a mux master that has been gracefully stopped; | Damien Miller | |
bz#1911 from Bert.Wesarg AT googlemail.com | |||
2011-06-17 | factor out multi-choice option parsing into a parse_multistate label | Damien Miller | |
and some support structures; ok dtucker@ | |||
2011-06-17 | the protocol version should be unsigned; bz#1913 reported by mb AT | Damien Miller | |
smartftp.com | |||
2011-06-17 | make the pre-auth privsep slave log via a socketpair shared with the | Damien Miller | |
monitor rather than /var/empty/dev/log; ok dtucker@ deraadt@ markus@ | |||
2011-06-16 | Prototypes of functions generated by mksubr. | Otto Moerbeek | |
2011-06-16 | Local changes to make this work on OpenBSD. Not used functions disabled for | Otto Moerbeek | |
now. | |||
2011-06-16 | mksubr from freebsd, to be used to generate flags to name translation | Otto Moerbeek | |
for kdump. Added missing license to the file, with the kind permission of the author David Kirchner. Not used yet. ok miod@ | |||
2011-06-16 | - finally unconfuse emacs by using parentheses for split() | Jasper Lievisse Adriaanse | |
2011-06-16 | fix printrequiresprivate-mode name in a test | Jasper Lievisse Adriaanse | |
2011-06-15 | - only process Requires.private if needed (--cflags, --static or ↵ | Jasper Lievisse Adriaanse | |
--print-requires-private) - process Requires.private before processing Requires, order matters these are first steps towards a working --static. static doesn't work yet as libraries get re-ordered in a funky way. | |||
2011-06-14 | make sure key_parse_public/private_rsa1() no longer consumes its input buffer. | Markus Friedl | |
fixes ssh-add for passphrase-protected ssh1-keys; noted by naddy@; ok djm@ | |||
2011-06-14 | exit if there is an unknown option; from FreeBSD | Christian Weisgerber | |
ok millert@ | |||
2011-06-12 | tweak the virtual pkg-config config | Jasper Lievisse Adriaanse | |
2011-06-12 | - rename pr_* to say_* to be consistent with perl (prompted by espie@) | Jasper Lievisse Adriaanse | |
- move actual printing to STDERR to one place, this makes it easier to: - honor $mode{estdout} (--errors-to-stdout) which was silently ignored untill now | |||
2011-06-12 | - Rename $D to $mode{debug} for consistency. | Jasper Lievisse Adriaanse | |
- Factorize lots of prints into a common debug/error subroutine. This reduces unneeded clutter when testing for $mode{printerr} or $mode{debug}. Will be adjusted further when fixing --errors-to-stdout | |||
2011-06-12 | - fix comment | Jasper Lievisse Adriaanse | |
- style nit | |||
2011-06-12 | - fix version comparison by adjusting the regex which decides about | Jasper Lievisse Adriaanse | |
what is an operator and what is a valid version. (all version comparison regress tests pass now) - add back 'rc' support ok sthen@ | |||
2011-06-11 | - add check for empty files | Jasper Lievisse Adriaanse | |
- only do the above check, and print an error if we lack a required field if $mode{printerr}. - put code setting $D together |