Commit Graph

157 Commits

Author SHA1 Message Date
jkh
8eb37231d4 Bring in my changes for removing the pestilent obj links (unless you
really want them) from /usr/src.  This is the final version of the
patches, incorporating the feedback I've received from -current.
1996-06-24 04:26:21 +00:00
nate
87afb7f371 Bring in a change that got lost when we spammed over the CVS repository
to fix the mega-commits spamming.

pst         96/05/29 20:09:25

  Modified:    secure/usr.bin/telnet  Makefile main.c
  Log:
  Remove obsolete SOCKSv4 support

Submitted by:	pst
Obtained from:  A mirrored CVS repository that will disappear next SUP
1996-06-05 22:48:04 +00:00
ache
573902ba60 Localize time 1996-05-07 19:05:10 +00:00
markm
c489d65b82 Add extra targets a' la' eBones/Makefile for release/Makefile.
(bootstrap etc)
1996-05-04 08:32:07 +00:00
markm
d2848b10f6 Add randomness from /dev/random if it is available. 1996-05-04 07:25:54 +00:00
pst
d73d5ee489 Add support for socks 1996-04-23 05:18:43 +00:00
pst
ce274bb1f0 typo shmrsh -> smrsh 1996-04-22 20:30:09 +00:00
pst
6ba3b3888d Enable proper installation of sendmail restricted shell smrsh(8).
This program is a wrapper for the prog mailer in sendmail.  It does shell
meta character masking and restricts the list of executables to those found
in /usr/libexec/sm.bin.

The default sendmail.cf file does not use this tool, however you can enable
it by either changing /bin/sh to /usr/libexec/smrsh or adding the line
FEATURE(smrsh) into your sendmail .mc file and rebuilding your .cf file.

For more info, RTFMP.
1996-04-21 19:48:07 +00:00
markm
71735d6644 Split libcrypt and libcipher man pages. 1996-04-13 08:18:24 +00:00
markm
4d98cdc072 Split the libcrypt and libcipher man pages. 1996-04-13 08:03:24 +00:00
mpp
217959f2b8 Install crypt.3 so that libcipher will install if /usr/share/man
has been blown away.  Previously it depended on an existing
crypt.3 to be present for the man page links to install properly.
1996-04-09 17:20:33 +00:00
markm
73546c6080 Comment out the NOPROFILE=yes to make this orthogonal with the rest of our
libs.
1996-03-17 15:43:32 +00:00
markm
135587ee97 Big clean-up job. Remove ancient and never-to-be used stuff.
The look much more like BSD Makefiles now.
1996-03-11 16:17:58 +00:00
markm
164d339617 Fix typo #ifdef -> .if defined().
Tidy uo this file a bit.
1996-03-11 06:22:50 +00:00
markm
93e818aea7 Fix typo - -des -> -ldes 1996-03-10 21:15:00 +00:00
ache
fd4a236df2 Sense MAKE_EBONES, DESTDIR
SRCS, DPADD cleanup
1996-03-09 13:39:00 +00:00
ache
14fe133184 Sense MAKE_EBONES, DESTDIR
SRCS cleanup
DPADD cleanup
1996-03-09 13:36:34 +00:00
ache
beb2bbfb7a Sense MAKE_EBONES, DESTDIR
SRCS cleanup
DPADD cleanup
1996-03-09 13:26:21 +00:00
jkh
10255f12e4 Add back missing crypt.3 man page. 1996-02-21 08:15:08 +00:00
mpp
0796408d4a Another round of man page cleanups.
Down to only about 100 items left to cleanup! :-)
1996-02-12 04:57:03 +00:00
markm
a329e20c69 Add the new libdes to the build 1996-02-11 08:46:59 +00:00
markm
463582428c Rats. Forgot to `cvs add' this. 1996-02-10 23:49:27 +00:00
markm
1f82e254e3 iImport a FreeBSD Makefile, BSD-ise the header and correct a typo. As the
interface has changed a bit (there are more rentry points), the
shared library has been bumped to libdes.so.2.1.
1996-02-10 15:54:48 +00:00
markm
ac42567227 This is the long-awaited new DES library. Over the next couple of days
will be properly built into the system.
1996-02-10 15:32:26 +00:00
markm
654d720840 This commit was generated by cvs2svn to compensate for changes in r14009,
which included commits to RCS files with non-trunk default branches.
1996-02-10 15:32:26 +00:00
mpp
6e83fbce86 Correct some manual page cross reference errors. E.g. su is a section
one man page, not section eight.  This is the first round of such changes
and only fixes man pages in manual section one.
1996-02-02 00:26:12 +00:00
peter
c3f352d4ad This commit was generated by cvs2svn to compensate for changes in r13122,
which included commits to RCS files with non-trunk default branches.
1995-12-30 19:02:48 +00:00
peter
ab124e78b0 recording cvs-1.6 file death 1995-12-30 19:02:48 +00:00
ache
2c2755e311 Pick correct library dir whenever obj exists or not 1995-12-21 17:57:16 +00:00
markm
923a80ce6b Dual personality crypt(3). This crypt will choose its encryption algorithm
(DES or MD5) based on the type of salt used. Salt beginning with "$1$"
indicates MD5.
1995-12-16 09:14:12 +00:00
peter
1686d8abf9 *GULP* cvs remove the uncomfortably large list of files that are no longer
part of sendmail 8.7.2...
1995-12-02 20:58:10 +00:00
peter
c860a459a3 Re-disable the cf/cf SUBDIR - we were not building it before anyway.
The Makefile down there does not handle the obj dir well..
1995-12-02 18:36:12 +00:00
peter
cd51f07d81 Import Sendmail-8.7.2 as discussed on -current.
The conflict merge will happen shortly after.
1995-12-02 17:30:23 +00:00
ache
b3c2c5a150 Remove LD_NOSTD_PATH unsetenv, it isn't exist anymore 1995-10-24 06:52:36 +00:00
ache
ad266c215d Fix original patch error with ! before strncmp
Zap only needed LD_* variables
1995-10-20 22:17:35 +00:00
ache
c0765b5449 Don't allow LD_* env. variables to be tricked
Submitted by: Sam Hartman <hartmans@mit.edu>
1995-10-20 17:16:58 +00:00
gibbs
651cbee0db Remove MAKE_EBONES conditionals. They were originally placed here because
of missing functionality in our libkrb which is no longer a problem.
1995-10-11 00:04:09 +00:00
ache
c0bde4017e Remove duplicated targets which now build from main tree
if available and allowed
1995-09-29 20:23:09 +00:00
gibbs
8d7d06f373 Add TELNETOBJDIR and CRYPTOBJDIR for use in LDADD entries. This makes
secure reference the libraries that were just build instead of in /usr/lib.
1995-09-16 03:04:10 +00:00
gibbs
958c14faa7 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 1995-09-14 21:29:21 +00:00
gibbs
684e425bda Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES.
Fix up some of the des calls to be compatible with eBones.
1995-09-14 21:29:08 +00:00
dg
1ae004d611 sys_term.c: killed sleep(1) as this should no longer be a problem with
the move of startslave().
telnetd.c: fix bug introduced with the move of startslave()...the number
of arguments was wrong and "level" and "user_name" had to be made globals.
1995-09-11 21:02:02 +00:00
pst
14ad5aa657 Move erase cleanup outside linemode conditional 1995-09-06 02:03:36 +00:00
pst
8693020356 Avoid race condition with telnet options processing (login: prompt lost).
Submitted by:	John Capo & Peter Wemm
1995-09-05 19:31:06 +00:00
pst
b68227ec08 Set erase character for login: prompt.
Submitted by:	Peter Wemm & John Capo
1995-09-05 19:30:05 +00:00
pst
059d76f5fe Do NOT compile with -DKLUDGELINEMODE...hoses many telnet clients 1995-08-28 17:55:08 +00:00
peter
47235a8c6f Import Sendmail v8.6.12, onto the CSRG(!) branch.
A seperate commit to fix the conflicts wil follow.
1995-08-17 04:39:13 +00:00
ache
f87a14f2ec Comment out LDADD+=-ldescrypt, it is not yet active due to
missng defines for krb4encpwd and rsaencpwd and missing rsa library too.
1995-08-05 19:10:25 +00:00
ache
25dcf9aae3 Change default banner to FreeBSD, properly ifdefed by __FreeBSD__
Reviewed by:
Submitted by:
Obtained from:
1995-08-04 00:12:08 +00:00
markm
96fd43c32a After pst and ache fixed secure telnet, it was still not in the main
makefiles. This puts it in.

PLEASE NOTE - YOU WILL NEED TO BUILD AND INSTALL THE libtelnet IN secure/
Reviewed by:
Submitted by:
Obtained from:
1995-07-29 12:49:25 +00:00
ache
5bd836c190 Final cleanup pass through Makefiles, now this stuff
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
1995-07-24 22:55:59 +00:00
ache
2abb3f187a Add -ldescrypt, or wrong crypt version can be picked from libc
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 22:01:01 +00:00
ache
02f285eeb1 Add LDADD+= -ldescrypt
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:57:58 +00:00
ache
7e1e5231a4 Move -ldes under kerb stuff, my fault
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:49:06 +00:00
ache
8d6cb97e95 Since this stuff not works with eBones, ifdef kerberos stuff
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 21:47:30 +00:00
ache
96d8cee523 Since this stuff not works with eBones, ifdef kerberos stuff
with MAKE_KERBEROS to allow other things to live
Submitted by:
Obtained from:
1995-07-24 21:38:32 +00:00
ache
cb87a42d33 Add comment about new_rnd_key.c module needed from original
libdes (and not present in eBones libdes)
1995-07-24 21:12:57 +00:00
ache
dcde8b5f80 Add comment about new_rbd_key.c module needed from
original libdes
1995-07-24 21:10:47 +00:00
ache
0551b03e78 Fix dependances, typing errors, etc.
Note: this thing need original libdes not Eric Young libdes from eBones
Submitted by:
Obtained from:
1995-07-24 20:40:03 +00:00
ache
d5bb9e78cb Point to proper DESTDIR now
Reviewed by:
Submitted by:
Obtained from:
1995-07-24 20:31:07 +00:00
ache
2bad985464 Fix many bogus things, typing error, dependance errors, etc.,
now it compiles.
Note: this stuff requires original libdes, not libdes from
Eric Yang which we have in eBones.
1995-07-24 20:29:12 +00:00
pst
5b689f15e4 When hostname len > 8, name replaced with dot notation when -u flag
not specified (default case).
Use _PATH_* for utmp/wtmp.

Support for >32 PTYs.
>Submitted by:   Heikki Suonsivu <hsu@cs.hut.fi>

Plug already known security hole. (Brought over from 1.1.5):
Fixed security problem with telnetd, which allowed
   telnet -l -hcert.org localhost
to change the user's host in utmp.
Thanks to Matthew Green <mrgreen@@mame.mu.oz.au> for showing me this one.

>Reviewed by:    karl, guido
>Submitted by:   mrgreen@mame.mu.oz.au

Obtained from:	FreeBSD insecure telnetd
1995-07-20 12:35:01 +00:00
pst
d1a257b33a The final negotiation of DO_BINARY in the LINEMODE portion of the telnetd code
causes some clients that do not support linemode to mis-interpret the return
key (i.e. double returns).
The fix is to only do the state check for binary options if linemode will
be used.
Closes PR#505.

Submitted by:   Charles Henrich
Obtained from:	FreeBSD insecure telnetd
1995-07-20 12:32:40 +00:00
pst
d6b93135e2 Update telnet to the 95.05.31 release.
Obtained from:	Dave Borman <dab@cray.com>
1995-07-20 11:40:06 +00:00
rgrimes
f3a2b348da Remove trailing whitespace. 1995-05-30 06:12:45 +00:00
jkh
8e4a47a63b Argh! Another instance of DES rather than des that I forgot. Truly,
this keyword is in too many places! :(
1995-05-11 22:07:49 +00:00
jkh
34164c8be6 Rename secure to DES. 1995-05-09 05:22:41 +00:00
wollman
294d85f56c This commit was generated by cvs2svn to compensate for changes in r7283,
which included commits to RCS files with non-trunk default branches.
1995-03-23 19:09:24 +00:00
wollman
a42f520712 Mark Murray's authdes.c for xntpd 1995-03-23 19:09:24 +00:00
dima
937577d030 Security fixes.
CERT Advisory CA-95:03.telnet.encryption

Obtained from: CERT
1995-02-17 03:57:00 +00:00
jkh
5fd14a3119 Change name of secrdist to secure. 1995-01-14 11:32:41 +00:00
phk
898bee8131 Fix secrdist sharedlib bug. 1994-11-24 22:34:18 +00:00
phk
4483a2072f des DISTRIBUTION became secrdist. 1994-11-22 08:03:26 +00:00
phk
790dc6108e fix libdescrypt reference. 1994-11-21 02:58:43 +00:00
phk
277a5cfc85 Make the "distribute" target build the "des" distribution. Make des'ed
init and ed, by pointing to real sources.
1994-11-14 20:45:35 +00:00
pst
0ffafd8bfe !Just! fixing makefile, no code changes Geoff 1994-09-30 06:04:40 +00:00
csgr
20327548ff More elegant fix for short settings.
(Our existing fixes already plugged the security holes involved.)
Submitted by:	Geoff Rehmet after consultation with David Burren
1994-09-19 19:26:39 +00:00
ache
1265c85a97 Add libcipher.a: libcrypt exports only crypt() but not des_setkey()
which is in libcipher.a
1994-09-12 17:27:55 +00:00
rgrimes
83c1bfeaeb Change all references to LIBTERM and -ltermlib to LIBTERMCAP and -ltermcap 1994-09-11 21:53:28 +00:00
csgr
73e15728f8 fix bogus .include
Submitted by:	Geoff.
1994-09-09 09:43:18 +00:00
csgr
4ad4a88210 add libcipher to Makefile
Submitted by:	Geoff.
1994-09-08 19:06:58 +00:00
csgr
9baa6a9d3f - Remove crypt() - it's in libcrypt
- remove ^L's - CTM will probably choke on them
- add PRECIOUSLIB to Makefile
- name changes libcrypt -> libcipher
Submitted by:	Geoff.
1994-09-07 21:48:54 +00:00
csgr
53362bf89c This commit was generated by cvs2svn to compensate for changes in r2546,
which included commits to RCS files with non-trunk default branches.
1994-09-07 21:18:08 +00:00
csgr
f5ee65e487 Bring in the 1.1.x international libcrypt, which
will in due course become libcipher.
Based on David Burren's FreeSEC
Submitted by:	Geoff.
1994-09-07 21:18:08 +00:00
pst
5787daa8ba Back out static hacks & build of usr.bin until Geoff informs the
world of his master plan.

Submitted by:	pst
1994-09-07 07:47:08 +00:00
pst
6239100975 Remove static in front of declarations for des_setkey and des_cipher
so that linking against -lcrypt (-ldescrypt) will give us the good
versions instead of the stubs in libc.  (These changes need to be
made to the non-US version of libdescrypt too!)

Allow building and support for bdes program.
A bit more work still needs to be done on secure telnet.

Submitted by:	pst
1994-09-07 07:16:52 +00:00
csgr
c900d4c13e This commit was generated by cvs2svn to compensate for changes in r2316,
which included commits to RCS files with non-trunk default branches.
1994-08-27 15:48:54 +00:00
csgr
23c56ec341 The telnet version with encryption in in.
Reviewed by:	geoff.
1994-08-27 15:48:54 +00:00
wollman
ad7993daba Hopefully fix bogus permissions. 1994-08-26 23:31:11 +00:00
wollman
e682e5ecfb Install libdescrypt.so immutable. 1994-08-26 19:03:23 +00:00
csgr
ec3eb0ab36 Fix afterinstall rule for generating links to the real libcrypt
Submitted by:	Geoff
1994-08-20 18:16:57 +00:00
csgr
dcaf997105 Move the telnetd with encryption to src/secure
This needs tidying up and having makefiles sorted out later.
Reviewed by:	Geoff Rehmet
1994-08-12 22:53:46 +00:00
csgr
a9cb0181e6 This commit was generated by cvs2svn to compensate for changes in r2050,
which included commits to RCS files with non-trunk default branches.
1994-08-12 22:53:46 +00:00
csgr
5b8002826f Libtelnet with encryption goes walkies to src/secure/lib
Reviewed by:	Geoff Rehmet
1994-08-12 22:03:01 +00:00
csgr
7cdc913e30 This commit was generated by cvs2svn to compensate for changes in r2047,
which included commits to RCS files with non-trunk default branches.
1994-08-12 22:03:01 +00:00
csgr
e69ff52b97 when making test programs, look for libdescrypt, not libcrypt
Submitted by:	Geoff Rehmet
1994-08-12 21:55:04 +00:00
csgr
968abb74bc 1) don't make bdes yet
2) fix .include in secure/lib/Makefile.inc
3) fix afterinstall rule in libcrypt/Makefile
Submitted by:	Geoff Rehmet
1994-08-12 21:02:31 +00:00
csgr
6c62f898dd Install secure/lib/libcrypt as libdescrypt, and symlink it to
libcrypt.  There may be a little modification neede to this makefile once
we start working on tidy make world's.
Submitted by:	geoff.
1994-08-09 18:52:52 +00:00
csgr
9c2c030485 add lib subdir 1994-08-08 17:49:22 +00:00
csgr
a327f792a0 add Makefiles for secure/lib. Makefile.inc just includes src/lib/Makefile.inc
in order to get things like SHLIB_MAJOR etc.
1994-08-08 17:42:36 +00:00