Commit Graph

46276 Commits

Author SHA1 Message Date
markm
608b5f8fbb Use libcrypto instead of libdes. 2000-02-24 23:15:42 +00:00
markm
1b942b3840 Run sshd at boot time if the sysadmin wants it. Also install
ssh[d] config files in the right place.
2000-02-24 23:12:04 +00:00
markm
27fe751781 Add userland tweakables for OpenSSH and OpenSSL. 2000-02-24 23:08:19 +00:00
markm
eb2f1b4a7c We have a new world order in libraries.
Goodbye libdes; Welcome libcrypto.
2000-02-24 23:03:16 +00:00
markm
60d4791e24 Remove port components not needed in 4.n+
Submitted by:	Half the freaking planet....
2000-02-24 22:39:24 +00:00
markm
20612f21c7 Use libcrypto instead of libdes.
Also - OpenSSH blesses us with a module for PAM.
2000-02-24 22:24:37 +00:00
markm
7f1f2ce659 Use libcrypto inst=ead if libdes. 2000-02-24 21:21:15 +00:00
markm
8a6c9808f4 Use libcrypto instead of libdes. 2000-02-24 21:18:08 +00:00
markm
3c2d308df1 Use libcrypto instead of libdes. Upgrade for Heimdal-0.2p 2000-02-24 21:15:14 +00:00
markm
4dfdc66cab Use libcrypto instead of libdes. 2000-02-24 21:10:28 +00:00
markm
7926f9a427 Use libcrypto in place of libdes. 2000-02-24 21:06:22 +00:00
markm
1bcfc94e36 Use libcrypto instead of libdes. 2000-02-24 21:01:54 +00:00
markm
be68b23c6f Use libcrypto in place of libdes. 2000-02-24 20:57:04 +00:00
dillon
414d15acb8 Fix a 'freeing free block' panic in UFS. The problem occurs when the
filesystem fills up.  If the first indirect block exists and FFS is able
    to allocate deeper indirect blocks, but is not able to allocate the
    data block, FFS improperly unwinds the indirect blocks and leaves a
    block pointer hanging to a freed block.  This will cause a panic later
    when the file is removed.  The solution is to properly account for the
    first block-pointer-to-an-indirect-block we had to create in a balloc
    operation and then unwind it if a failure occurs.

Detective work by: Ian Dowse <iedowse@maths.tcd.ie>
Reviewed by: mckusick, Ian Dowse <iedowse@maths.tcd.ie>
Approved by: jkh
2000-02-24 20:43:20 +00:00
wilko
324686decc Add some info on DP264. People familiar with this beast: please review
for correctness
2000-02-24 20:35:46 +00:00
markm
881ec50548 Use libcrypto instead of libdes. 2000-02-24 20:21:16 +00:00
markm
443e3df9fc RIP libdes. All hail libcrypto! 2000-02-24 19:35:08 +00:00
markm
2cbf93e2b4 Get crypto from libcrypto, not libdes. 2000-02-24 19:28:31 +00:00
shin
a2e9fa03c1 Add length check to sbcreatecontrol().
Now this check is necessary because IPv6 source routing might use
  control data bigger than MLEN. (e.g. 16bytes IPv6 addr x 23 hops)
  Actually mbuf cluster should be used in uipc_socket.c:sbcreatecontrol()
  and uipc_syscalls.c:sockargs() when data size is bigger then MLEN,
  and such patches were already in KAME environment and have been
  confirmed to work well. I just forgot to merge them into 4.0, sorry.

  For safety, I'll postpone such patches until after 4.0 release.
  The effect of postponement is followings.
    -Ping6 source routing hops are limitted to around 6 or so.
    -If some apps do setsockopt IPV6_RTHDR and try to receive
     incoming IPv6 source routing info, it can't receive more
     than 6 hops source routing info.
     (But currently, no apps seems to be doing it.)

Approved by: jkh
2000-02-24 19:21:26 +00:00
markm
7ba9efa321 libdes is OBE 2000-02-24 19:08:24 +00:00
shin
1c7bbb579d Security fixes. (Just same as sbin/ping and usr.sbin/traceroute)
-Open socket() at first and then setuid() to actual user.
  -Allow ping6 preload option only for root.

Approved by: jkh

Submitted by: Neil Blakey-Milner <nbm@mithrandr.moria.org>
2000-02-24 19:06:05 +00:00
shin
d693ba6b01 Correctly print out "Connected to" hostname.
Temporal buffer was used for the hostname and freed before actually used.

Specified by: ru
Approved by: jkh
2000-02-24 19:01:38 +00:00
markm
ef025b40ab Build everything properly. This means:
o Don't b uild libdes.

o Crypto is now housed in libcrypto (with a compatability symlink to
  libdes)

o RSA may depend on RSAREF at your locale.

o OpenSSH is now a part of the base system.
2000-02-24 18:59:34 +00:00
shin
1f38e33d22 -Remove IPv6 initialization failed interfaces from the list of
interfaces passed to rtadvd
-Comment out example sentences more completely
-Redirect error message of ifconfig output into /dev/null, to correctly
 find out working IPv6 interfaces

Approved by: jkh
2000-02-24 18:52:58 +00:00
shin
298e37dd98 Print ifname when sendmsg failed.
Approved by: jkh
2000-02-24 18:46:51 +00:00
markm
e2eb488588 Add the OpenSSH userland-building Makefiles. 2000-02-24 17:00:55 +00:00
luigi
f7c4b7763a Record and pack together all ipfw changes.
Approved-by: jordan
2000-02-24 16:20:37 +00:00
markm
37a38e6638 Add the patches fom ports (QV: ports/security/openssh/patches/patch-*) 2000-02-24 15:29:42 +00:00
markm
606d31b1ec This commit was generated by cvs2svn to compensate for changes in r57429,
which included commits to RCS files with non-trunk default branches.
2000-02-24 14:29:47 +00:00
markm
fc557ff7d9 Vendor import of OpenSSH. 2000-02-24 14:29:47 +00:00
markm
be16c6202a Merge conflicts. 2000-02-24 13:37:41 +00:00
markm
4d2ec46519 Oops; forgot to add this. 2000-02-24 13:20:48 +00:00
markm
3aaee576c1 Get this to the same level of functionality as old libdes. 2000-02-24 13:20:15 +00:00
markm
4f25fdd792 This commit was generated by cvs2svn to compensate for changes in r57422,
which included commits to RCS files with non-trunk default branches.
2000-02-24 11:28:20 +00:00
markm
5ed96cd5da Vendor import of Heimdal 0.2p 2000-02-24 11:28:20 +00:00
markm
1a9f61a7f9 This commit was generated by cvs2svn to compensate for changes in r57419,
which included commits to RCS files with non-trunk default branches.
2000-02-24 11:19:29 +00:00
markm
69414e22b9 Vendor import of Heimdal 0.2o 2000-02-24 11:19:29 +00:00
markm
50efcd9b31 This commit was generated by cvs2svn to compensate for changes in r57416,
which included commits to RCS files with non-trunk default branches.
2000-02-24 11:07:16 +00:00
markm
fa8b1a96d3 Vendor import of Heimdal 0.2n 2000-02-24 11:07:16 +00:00
markm
d99784ddf1 freefall/internat diff reducer 2000-02-24 10:38:40 +00:00
markm
fd6da7cf96 Freefall/Internat diff reducer. 2000-02-24 10:37:29 +00:00
markm
6f148d13ec Freefall/Internat diff reducer. 2000-02-24 10:21:56 +00:00
markm
3b9684411f Freefall/Internat diff reducer. 2000-02-24 10:06:57 +00:00
markm
95d086535d Diff reducer. Comes from Internat. 2000-02-24 09:52:37 +00:00
markm
785e71a1db Remove useless whitespace.
Part of big commit OK'ed by: JKH
2000-02-24 09:48:58 +00:00
jkh
0daf42533e Do USA_RESIDENT properly. 2000-02-24 08:28:06 +00:00
shin
b171311de4 -Removed unnecessary use of awk.
-small comment fix.

Approved by: jkh

Submitted by:  Chris Costello <chris@calldei.com>
2000-02-24 06:51:03 +00:00
shin
d60db65e7c Added rc.network6.
Approved by: jkh

Submitted by: bmah@CA.Sandia.GOV (Bruce A. Mah),
	Ruslan Ermilov <ru@ucb.crimea.ua>
2000-02-24 06:42:49 +00:00
jdp
961e2c4b68 Make the default dynamic linker pathname correct for FreeBSD.
I had resisted this for a while because I didn't want to take these
file off the vendor branch.  But it turns out they were already off
the vendor branch anyway.

PR:		gnu/9987
Submitted by:	Vladimir Kushnir <kushn@mail.kar.net>
Approved by:	jkh
2000-02-24 05:46:27 +00:00
archie
60e3ab891f Fix incorrect man page information about the name of the netgraph node
when compiled with options NETGRAPH.
2000-02-24 04:33:33 +00:00