d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
160,341 Commits 4 Branches 49 Tags
Commit Graph

418 Commits

Author SHA1 Message Date
attilio
99524169bf Avoid sshd, cron, syslogd and inetd to be killed under high-pressure swap 
environments.
Please note that this can't be done while such processes run in jails.

Note: in future it would be interesting to find a way to do that
selectively for any desired proccess (choosen by user himself), probabilly
via a ptrace interface or whatever.

Obtained from:	Sandvine Incorporated
Reviewed by:	emaste, arch@
Sponsored by:	Sandvine Incorporated
MFC:		1 month
 2009-11-25 15:12:24 +00:00
des
ca406db9c3 Fix globbing 
Noticed by:	delphij, David Cornejo <dave@dogwood.com>
Forgotten by:	des
 2009-11-10 09:45:43 +00:00
des
9c86ec8748 Remove dupe. 2009-10-11 14:27:33 +00:00
des
62e4403f72 Add more symbols that need to be masked: 
- initialized and uninitialized data
 - symbols from roaming_dummy.c which end up in pam_ssh

Update the command line used to generate the #defines.
 2009-10-05 18:55:13 +00:00
des
c6a1085fef Upgrade to OpenSSH 5.3p1. 2009-10-01 17:12:52 +00:00
des
32589bd8e2 Update and remove CVS-specific items 
Approved by:	re (kib)
 2009-08-13 06:07:38 +00:00
jhb
056d36800b Use the closefrom(2) system call. 
Reviewed by:	des
 2009-06-16 15:30:10 +00:00
des
8bf56a9772 Upgrade to OpenSSH 5.2p1. 
MFC after:	3 months
 2009-05-22 18:46:28 +00:00
des
a9989b9d40 At some point, construct_utmp() was changed to use realhostname() to fill 
in the struct utmp due to concerns about the length of the hostname buffer.
However, this breaks the UseDNS option.  There is a simpler and better
solution: initialize utmp_len to the correct value (UT_HOSTSIZE instead of
MAXHOSTNAMELEN) and let get_remote_name_or_ip() worry about the size of the
buffer.

PR:		bin/97499
Submitted by:	Bruce Cran <bruce@cran.org.uk>
MFC after:	1 week
 2008-10-21 11:58:26 +00:00
des
a51772f108 Our groff doesn't understand $Mdocdate$, so replace them with bare dates. 
MFC after:	3 days
 2008-09-29 10:53:05 +00:00
des
ab1a43cf51 MFV "xmalloc: zero size" fix. 
MFC after:	1 week
 2008-09-24 21:20:44 +00:00
des
364610d759 Remove some unused files. 2008-09-01 16:34:02 +00:00
des
f50b650b57 Set SIZEOF_LONG_INT and SIZEOF_LONG_LONG_INT to plausible values. They 
aren't used for anything, but that's no excuse for being silly.
 2008-09-01 14:15:57 +00:00
des
f53f7dd853 Use net.inet.ip.portrange.reservedhigh instead of IPPORT_RESERVED. 
Submitted upstream, no reaction.

Submitted by:	delphij@
MFC after:	2 weeks
 2008-08-20 10:40:07 +00:00
des
b7aa600c41 Upgrade to OpenSSH 5.1p1. 
I have worked hard to reduce diffs against the vendor branch.  One
notable change in that respect is that we no longer prefer DSA over
RSA - the reasons for doing so went away years ago.  This may cause
some surprises, as ssh will warn about unknown host keys even for
hosts whose keys haven't changed.

MFC after:	6 weeks
 2008-08-01 02:48:36 +00:00
des
f672f908e1 Another file with no local changes. 
"This time for sure!"
 2008-08-01 01:50:55 +00:00
des
47d27c283c Another file with no local changes. 2008-08-01 01:48:33 +00:00
des
d1eccf1850 Another four files without local changes. This is driving me nuts - 
every time I think I got them all, another one pops up.
 2008-08-01 01:45:56 +00:00
des
0afede05d8 Yet another file with no local changes. 2008-08-01 01:38:50 +00:00
des
9472224e68 Accidentally mangled this one in the previous commit. 2008-08-01 01:38:24 +00:00
des
ab05c9d6e0 More files which no longer have any local changes. 2008-08-01 01:32:56 +00:00
des
aec4b2ce63 These two files have no local patches except to prevent expansion of the 
original $FreeBSD$ keywords.  Revert those changes, and simply disable
keyword expansion.
 2008-08-01 01:30:26 +00:00
des
c16d19ef38 Last remains of old OPIE patch 2008-08-01 01:24:42 +00:00
des
1d5516fdb1 We no longer have any local changes here. 2008-08-01 01:19:13 +00:00
des
0a6d19e874 Tag expansion is no longer needed (svn handles them correctly). 
Add svn command to diff against vendor branch.
 2008-08-01 01:05:27 +00:00
des
e4b4e186ba This is no longer needed. 2008-08-01 01:04:52 +00:00
des
ed6e3a816d Cleanup. 2008-08-01 01:00:34 +00:00
des
fa78b524d4 Ugh. Set svn:mergeinfo correctly. 2008-08-01 00:34:37 +00:00
des
ce65202984 Catch up with reality. 2008-08-01 00:28:50 +00:00
des
e253d923d4 Revert an old hack I put in to replace S/Key with OPIE. We haven't used 
that code in ages - we use pam_opie(8) instead - so this is a NOP.
 2008-08-01 00:27:48 +00:00
des
a0701212a1 Add missing #include for strlen() 2008-07-31 23:33:26 +00:00
des
0c146c189c Fix alignment of the cmsg buffer by placing it in a union with a struct 
cmsghdr.  Derived from upstream patch.

Submitted by:	cognet
MFC after:	2 weeks
 2008-07-30 09:16:46 +00:00
des
01d1a97b94 Remove a bunch of files we don't need to build OpenSSH. They are still 
available in base/vendor-crypto/openssh/dist/.
 2008-07-23 17:02:25 +00:00
des
f1596419c2 Properly flatten openssh/dist. 2008-07-22 19:01:18 +00:00
des
666aa9cc16 Revert part of 180714 - the intent was to flatten dist, not to nuke it. 2008-07-22 18:58:19 +00:00
des
624d93001f Flatten the OpenSSH vendor tree for 3.x and newer. 2008-07-22 17:13:05 +00:00
des
081081cbe3 Fix the Xlist so it actually works with 'tar -X', and update the upgrade 
instructions accordingly.
 2008-02-06 23:14:24 +00:00
des
76b6e0b06e As per discussion, commit experimental metadata for my contrib packages. 
The idea is to have a FREEBSD-vendor file for every third-party package
in the tree.
 2008-02-06 23:06:24 +00:00
des
91a576f9b7 s/X11R6/local/g 2007-05-24 22:04:07 +00:00
des
f486315183 Resolve conflicts. 2006-11-10 16:52:41 +00:00
des
f591b3e29c Vendor import of OpenSSH 4.5p1. 2006-11-10 16:39:21 +00:00
des
11e3a8c8c1 This commit was generated by cvs2svn to compensate for changes in r164146, 
which included commits to RCS files with non-trunk default branches.
 2006-11-10 16:39:21 +00:00
des
d75fd1fec6 Don't define XAUTH_PATH here, we either pass it in on the compiler command 
line or rely on the built-in default.
 2006-10-06 14:27:26 +00:00
des
91390ee9f2 Go figure how an extra $Id$ line crept in... 2006-10-04 10:21:00 +00:00
des
178eb45ceb Merge vendor patch. 2006-10-04 10:15:53 +00:00
des
e6cc400c8f Apply vendor patch to fix detection of tap / tun headers and ENGINE support. 2006-10-04 10:14:30 +00:00
des
351bcb5c21 Tweak ifdefs for backward compatibility. 2006-10-03 11:33:25 +00:00
des
24e2cf96ac Dead files. 2006-10-02 13:29:41 +00:00
des
a74a69e336 Regenerate; no effect on the code as it doesn't actually use the handful of 
conditionals that changed in this revision.
 2006-10-02 12:45:27 +00:00
des
14ad83d6bf Update configure options and add some missing steps. 
The section about our local changes needs reviewing, and some of those
changes should probably be reconsidered (such as preferring DSA over RSA,
which made sense when RSA was encumbered but probably doesn't any more)
 2006-10-02 12:39:28 +00:00