Ed Maste ae1f79038f sftp: disallow creation (of empty files) in read-only mode
Direct commit to stable/11; already fixed in newer OpenSSH in 12 and
later.

PR:		233801
Reported by:	Dani
Obtained from:	OpenBSD 1.111
Security:	CVE-2017-15906
2019-12-13 20:45:45 +00:00
..
2019-09-10 21:14:56 +00:00

$FreeBSD$

This directory is for the EXACT same use as src/contrib, except it
holds crypto sources.  In other words, this holds raw sources obtained
from various third party vendors, with FreeBSD patches applied.  No
compilation is done from this directory, it is all done from the
src/secure directory.  The separation between src/contrib and src/crypto
is the result of an old USA law, which made these sources export
controlled, so they had to be kept separate.