d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
52,619 Commits 4 Branches 49 Tags 2 GiB
79c8873163
Commit Graph

245 Commits

Author SHA1 Message Date
Paul Traina
33bb8564be Add support for socks 1996-04-23 05:18:43 +00:00
Paul Traina
4b2e1057cf typo shmrsh -> smrsh 1996-04-22 20:30:09 +00:00
Paul Traina
0abdd9956c Enable proper installation of sendmail restricted shell smrsh(8). 
This program is a wrapper for the prog mailer in sendmail.  It does shell
meta character masking and restricts the list of executables to those found
in /usr/libexec/sm.bin.

The default sendmail.cf file does not use this tool, however you can enable
it by either changing /bin/sh to /usr/libexec/smrsh or adding the line
FEATURE(smrsh) into your sendmail .mc file and rebuilding your .cf file.

For more info, RTFMP.
 1996-04-21 19:48:07 +00:00
Mark Murray
c5cdf2c7f4 Split libcrypt and libcipher man pages. 1996-04-13 08:18:24 +00:00
Mark Murray
bb230f68ca Split the libcrypt and libcipher man pages. 1996-04-13 08:03:24 +00:00
Mike Pritchard
cad56be80a Install crypt.3 so that libcipher will install if /usr/share/man 
has been blown away.  Previously it depended on an existing
crypt.3 to be present for the man page links to install properly.
 1996-04-09 17:20:33 +00:00
Mark Murray
18992ffaea Comment out the NOPROFILE=yes to make this orthogonal with the rest of our 
libs.
 1996-03-17 15:43:32 +00:00
Mark Murray
6dd8a38202 Big clean-up job. Remove ancient and never-to-be used stuff. 
The look much more like BSD Makefiles now.
 1996-03-11 16:17:58 +00:00
Mark Murray
7c9dcdde00 Fix typo #ifdef -> .if defined(). 
Tidy uo this file a bit.
 1996-03-11 06:22:50 +00:00
Mark Murray
d825f2fad0 Fix typo - -des -> -ldes 1996-03-10 21:15:00 +00:00
Andrey A. Chernov
0a2c4bde08 Sense MAKE_EBONES, DESTDIR 
SRCS, DPADD cleanup
 1996-03-09 13:39:00 +00:00
Andrey A. Chernov
a0e2ca089a Sense MAKE_EBONES, DESTDIR 
SRCS cleanup
DPADD cleanup
 1996-03-09 13:36:34 +00:00
Andrey A. Chernov
f6d9ce2bae Sense MAKE_EBONES, DESTDIR 
SRCS cleanup
DPADD cleanup
 1996-03-09 13:26:21 +00:00
Jordan K. Hubbard
1c934dae3e Add back missing crypt.3 man page. 1996-02-21 08:15:08 +00:00
Mike Pritchard
bcff8e2ae4 Another round of man page cleanups. 
Down to only about 100 items left to cleanup! :-)
 1996-02-12 04:57:03 +00:00
Mark Murray
14a23345e6 Add the new libdes to the build 1996-02-11 08:46:59 +00:00
Mark Murray
fffad2951a Rats. Forgot to `cvs add' this. 1996-02-10 23:49:27 +00:00
Mark Murray
537c20ded7 iImport a FreeBSD Makefile, BSD-ise the header and correct a typo. As the 
interface has changed a bit (there are more rentry points), the
shared library has been bumped to libdes.so.2.1.
 1996-02-10 15:54:48 +00:00
Mark Murray
3a8043c232 This is the long-awaited new DES library. Over the next couple of days 
will be properly built into the system.
 1996-02-10 15:32:26 +00:00
Mark Murray
568f3a3d5a This commit was generated by cvs2svn to compensate for changes in r14009, 
which included commits to RCS files with non-trunk default branches.
 1996-02-10 15:32:26 +00:00
Mike Pritchard
7c87ef470d Correct some manual page cross reference errors. E.g. su is a section 
one man page, not section eight.  This is the first round of such changes
and only fixes man pages in manual section one.
 1996-02-02 00:26:12 +00:00
Peter Wemm
6065a0be11 This commit was generated by cvs2svn to compensate for changes in r13122, 
which included commits to RCS files with non-trunk default branches.
 1995-12-30 19:02:48 +00:00
Peter Wemm
a5b996a7ec recording cvs-1.6 file death 1995-12-30 19:02:48 +00:00
Andrey A. Chernov
ab6b1a8ad5 Pick correct library dir whenever obj exists or not 1995-12-21 17:57:16 +00:00
Mark Murray
96e718fe29 Dual personality crypt(3). This crypt will choose its encryption algorithm 
(DES or MD5) based on the type of salt used. Salt beginning with "$1$"
indicates MD5.
 1995-12-16 09:14:12 +00:00
Peter Wemm
1cdee109d0 *GULP* cvs remove the uncomfortably large list of files that are no longer 
part of sendmail 8.7.2...
 1995-12-02 20:58:10 +00:00
Peter Wemm
03d7755c08 Re-disable the cf/cf SUBDIR - we were not building it before anyway. 
The Makefile down there does not handle the obj dir well..
 1995-12-02 18:36:12 +00:00
Peter Wemm
1f160589bb Import Sendmail-8.7.2 as discussed on -current. 
The conflict merge will happen shortly after.
 1995-12-02 17:30:23 +00:00
Andrey A. Chernov
a18c0b455a Remove LD_NOSTD_PATH unsetenv, it isn't exist anymore 1995-10-24 06:52:36 +00:00
Andrey A. Chernov
d549e5cc7f Fix original patch error with ! before strncmp 
Zap only needed LD_* variables
 1995-10-20 22:17:35 +00:00
Andrey A. Chernov
b6369ff12e Don't allow LD_* env. variables to be tricked 
Submitted by: Sam Hartman <hartmans@mit.edu>
 1995-10-20 17:16:58 +00:00
Justin T. Gibbs
9d01cc32c6 Remove MAKE_EBONES conditionals. They were originally placed here because 
of missing functionality in our libkrb which is no longer a problem.
 1995-10-11 00:04:09 +00:00
Andrey A. Chernov
d6cf037780 Remove duplicated targets which now build from main tree 
if available and allowed
 1995-09-29 20:23:09 +00:00
Justin T. Gibbs
b7f41e3f67 Add TELNETOBJDIR and CRYPTOBJDIR for use in LDADD entries. This makes 
secure reference the libraries that were just build instead of in /usr/lib.
 1995-09-16 03:04:10 +00:00
Justin T. Gibbs
790136a438 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 1995-09-14 21:29:21 +00:00
Justin T. Gibbs
9d6965ac06 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 
Fix up some of the des calls to be compatible with eBones.
 1995-09-14 21:29:08 +00:00
David Greenman
b834e407de sys_term.c: killed sleep(1) as this should no longer be a problem with 
the move of startslave().
telnetd.c: fix bug introduced with the move of startslave()...the number
of arguments was wrong and "level" and "user_name" had to be made globals.
 1995-09-11 21:02:02 +00:00
Paul Traina
b74fc1026f Move erase cleanup outside linemode conditional 1995-09-06 02:03:36 +00:00
Paul Traina
a06a8a9829 Avoid race condition with telnet options processing (login: prompt lost). 
Submitted by:	John Capo & Peter Wemm
 1995-09-05 19:31:06 +00:00
Paul Traina
d0d1fb6198 Set erase character for login: prompt. 
Submitted by:	Peter Wemm & John Capo
 1995-09-05 19:30:05 +00:00
Paul Traina
a4a142bd15 Do NOT compile with -DKLUDGELINEMODE...hoses many telnet clients 1995-08-28 17:55:08 +00:00
Peter Wemm
7791ac4067 Import Sendmail v8.6.12, onto the CSRG(!) branch. 
A seperate commit to fix the conflicts wil follow.
 1995-08-17 04:39:13 +00:00
Andrey A. Chernov
0a06628ab2 Comment out LDADD+=-ldescrypt, it is not yet active due to 
missng defines for krb4encpwd and rsaencpwd and missing rsa library too.
 1995-08-05 19:10:25 +00:00
Andrey A. Chernov
ba60b431ca Change default banner to FreeBSD, properly ifdefed by __FreeBSD__ 
Reviewed by:
Submitted by:
Obtained from:
 1995-08-04 00:12:08 +00:00
Mark Murray
d5fc4d2a65 After pst and ache fixed secure telnet, it was still not in the main 
makefiles. This puts it in.

PLEASE NOTE - YOU WILL NEED TO BUILD AND INSTALL THE libtelnet IN secure/
Reviewed by:
Submitted by:
Obtained from:
 1995-07-29 12:49:25 +00:00
Andrey A. Chernov
9ed77b336f Final cleanup pass through Makefiles, now this stuff 
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
 1995-07-24 22:55:59 +00:00
Andrey A. Chernov
dbd07ffcc0 Add -ldescrypt, or wrong crypt version can be picked from libc 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 22:01:01 +00:00
Andrey A. Chernov
6b370f4c7e Add LDADD+= -ldescrypt 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:57:58 +00:00
Andrey A. Chernov
b6c080f6bc Move -ldes under kerb stuff, my fault 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:49:06 +00:00
Andrey A. Chernov
e74d115547 Since this stuff not works with eBones, ifdef kerberos stuff 
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:47:30 +00:00
Andrey A. Chernov
3b901a0b79 Since this stuff not works with eBones, ifdef kerberos stuff 
with MAKE_KERBEROS to allow other things to live
Submitted by:
Obtained from:
 1995-07-24 21:38:32 +00:00
Andrey A. Chernov
4109d6bfef Add comment about new_rnd_key.c module needed from original 
libdes (and not present in eBones libdes)
 1995-07-24 21:12:57 +00:00
Andrey A. Chernov
7170827e21 Add comment about new_rbd_key.c module needed from 
original libdes
 1995-07-24 21:10:47 +00:00
Andrey A. Chernov
f8e556c37d Fix dependances, typing errors, etc. 
Note: this thing need original libdes not Eric Young libdes from eBones
Submitted by:
Obtained from:
 1995-07-24 20:40:03 +00:00
Andrey A. Chernov
2c178baa51 Point to proper DESTDIR now 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 20:31:07 +00:00
Andrey A. Chernov
bfdd0041fc Fix many bogus things, typing error, dependance errors, etc., 
now it compiles.
Note: this stuff requires original libdes, not libdes from
Eric Yang which we have in eBones.
 1995-07-24 20:29:12 +00:00
Paul Traina
4a0834a5a2 When hostname len > 8, name replaced with dot notation when -u flag 
not specified (default case).
Use _PATH_* for utmp/wtmp.

Support for >32 PTYs.
>Submitted by:   Heikki Suonsivu <hsu@cs.hut.fi>

Plug already known security hole. (Brought over from 1.1.5):
Fixed security problem with telnetd, which allowed
   telnet -l -hcert.org localhost
to change the user's host in utmp.
Thanks to Matthew Green <mrgreen@@mame.mu.oz.au> for showing me this one.

>Reviewed by:    karl, guido
>Submitted by:   mrgreen@mame.mu.oz.au

Obtained from:	FreeBSD insecure telnetd
 1995-07-20 12:35:01 +00:00
Paul Traina
4fd39f708a The final negotiation of DO_BINARY in the LINEMODE portion of the telnetd code 
causes some clients that do not support linemode to mis-interpret the return
key (i.e. double returns).
The fix is to only do the state check for binary options if linemode will
be used.
Closes PR#505.

Submitted by:   Charles Henrich
Obtained from:	FreeBSD insecure telnetd
 1995-07-20 12:32:40 +00:00
Paul Traina
9809ff32f6 Update telnet to the 95.05.31 release. 
Obtained from:	Dave Borman <dab@cray.com>
 1995-07-20 11:40:06 +00:00
Rodney W. Grimes
5ebc7e6281 Remove trailing whitespace. 1995-05-30 06:12:45 +00:00
Jordan K. Hubbard
1b780c0e7f Argh! Another instance of DES rather than des that I forgot. Truly, 
this keyword is in too many places! :(
 1995-05-11 22:07:49 +00:00
Jordan K. Hubbard
b5260d2051 Rename secure to DES. 1995-05-09 05:22:41 +00:00
Garrett Wollman
c16b583c3c Mark Murray's authdes.c for xntpd 1995-03-23 19:09:24 +00:00
Dima Ruban
399e5b4411 Security fixes. 
CERT Advisory CA-95:03.telnet.encryption

Obtained from: CERT
 1995-02-17 03:57:00 +00:00
Jordan K. Hubbard
002feff1d6 Change name of secrdist to secure. 1995-01-14 11:32:41 +00:00
Poul-Henning Kamp
2ef260d35c Fix secrdist sharedlib bug. 1994-11-24 22:34:18 +00:00
Poul-Henning Kamp
c3cd331e8e des DISTRIBUTION became secrdist. 1994-11-22 08:03:26 +00:00
Poul-Henning Kamp
7b0a9474f1 fix libdescrypt reference. 1994-11-21 02:58:43 +00:00
Poul-Henning Kamp
f079582484 Make the "distribute" target build the "des" distribution. Make des'ed 
init and ed, by pointing to real sources.
 1994-11-14 20:45:35 +00:00
Paul Traina
448380bfbf !Just! fixing makefile, no code changes Geoff 1994-09-30 06:04:40 +00:00
Geoff Rehmet
49de41577e More elegant fix for short settings. 
(Our existing fixes already plugged the security holes involved.)
Submitted by:	Geoff Rehmet after consultation with David Burren
 1994-09-19 19:26:39 +00:00
Andrey A. Chernov
95fb75febe Add libcipher.a: libcrypt exports only crypt() but not des_setkey() 
which is in libcipher.a
 1994-09-12 17:27:55 +00:00
Rodney W. Grimes
6897a8a75d Change all references to LIBTERM and -ltermlib to LIBTERMCAP and -ltermcap 1994-09-11 21:53:28 +00:00
Geoff Rehmet
77b06a9b6c fix bogus .include 
Submitted by:	Geoff.
 1994-09-09 09:43:18 +00:00
Geoff Rehmet
daf0f855ad add libcipher to Makefile 
Submitted by:	Geoff.
 1994-09-08 19:06:58 +00:00
Geoff Rehmet
37ea1bf4c9 - Remove crypt() - it's in libcrypt 
- remove ^L's - CTM will probably choke on them
- add PRECIOUSLIB to Makefile
- name changes libcrypt -> libcipher
Submitted by:	Geoff.
 1994-09-07 21:48:54 +00:00
Geoff Rehmet
8b2981f937 Bring in the 1.1.x international libcrypt, which 
will in due course become libcipher.
Based on David Burren's FreeSEC
Submitted by:	Geoff.
 1994-09-07 21:18:08 +00:00
Paul Traina
bf8f9d53f6 Back out static hacks & build of usr.bin until Geoff informs the 
world of his master plan.

Submitted by:	pst
 1994-09-07 07:47:08 +00:00
Paul Traina
21b4fe120d Remove static in front of declarations for des_setkey and des_cipher 
so that linking against -lcrypt (-ldescrypt) will give us the good
versions instead of the stubs in libc.  (These changes need to be
made to the non-US version of libdescrypt too!)

Allow building and support for bdes program.
A bit more work still needs to be done on secure telnet.

Submitted by:	pst
 1994-09-07 07:16:52 +00:00
Geoff Rehmet
eb3ae6fd94 The telnet version with encryption in in. 
Reviewed by:	geoff.
 1994-08-27 15:48:54 +00:00
Garrett Wollman
ef17cd2157 Hopefully fix bogus permissions. 1994-08-26 23:31:11 +00:00
Garrett Wollman
52780bc5c4 Install libdescrypt.so immutable. 1994-08-26 19:03:23 +00:00
Geoff Rehmet
db5408c498 Fix afterinstall rule for generating links to the real libcrypt 
Submitted by:	Geoff
 1994-08-20 18:16:57 +00:00
Geoff Rehmet
daf079cb54 Move the telnetd with encryption to src/secure 
This needs tidying up and having makefiles sorted out later.
Reviewed by:	Geoff Rehmet
 1994-08-12 22:53:46 +00:00
Geoff Rehmet
040d596f3e Libtelnet with encryption goes walkies to src/secure/lib 
Reviewed by:	Geoff Rehmet
 1994-08-12 22:03:01 +00:00
Geoff Rehmet
f09e7cba42 when making test programs, look for libdescrypt, not libcrypt 
Submitted by:	Geoff Rehmet
 1994-08-12 21:55:04 +00:00
Geoff Rehmet
b1c75fb65d 1) don't make bdes yet 
2) fix .include in secure/lib/Makefile.inc
3) fix afterinstall rule in libcrypt/Makefile
Submitted by:	Geoff Rehmet
 1994-08-12 21:02:31 +00:00
Geoff Rehmet
7dc2bee339 Install secure/lib/libcrypt as libdescrypt, and symlink it to 
libcrypt.  There may be a little modification neede to this makefile once
we start working on tidy make world's.
Submitted by:	geoff.
 1994-08-09 18:52:52 +00:00
Geoff Rehmet
3f64ea42b6 add lib subdir 1994-08-08 17:49:22 +00:00
Geoff Rehmet
b7dd315906 add Makefiles for secure/lib. Makefile.inc just includes src/lib/Makefile.inc 
in order to get things like SHLIB_MAJOR etc.
 1994-08-08 17:42:36 +00:00
Geoff Rehmet
712ca8b499 Modify libcrypt so that the only exported symbol is _crypt(). 
Submitted by:	 Geoff Rehmet
 1994-08-08 17:29:04 +00:00
Geoff Rehmet
c4f09032cb Unecumbered securedist from FreeBSD 1.1.5.1 - sources for libcrypt. 
The next commit will remove all symbols except _crypt()
Reviewed by:	Geoff Rehmet
Submitted by:	David Burren
 1994-08-08 17:18:09 +00:00
Garrett Wollman
107fc7e35c Allow the `bdes' program to compile. 1994-08-07 19:04:10 +00:00
Garrett Wollman
0cc8ddab2b Moved from usr.bin/bdes for export-control. 1994-08-07 18:17:39 +00:00
Rodney W. Grimes
dea673e932 BSD 4.4 Lite usr.sbin Sources 1994-05-26 05:23:31 +00:00