src-test2/secure/libexec, branch release/4.6.1 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=release%2F4.6.1 2002-07-16T12:33:28Z Merge OpenSSH, OPIE, PAM and a number of dependencies from -STABLE. 2002-07-16T12:33:28Z Dag-Erling Smørgrav des@FreeBSD.org 2002-07-16T12:33:28Z urn:sha1:b9214dfb5f5cb452b50a7918e1a6b455a57ace6c This commit was manufactured by cvs2svn to create branch 'RELENG_4_6'. 2002-07-05T08:39:11Z cvs2svn cvs2svn@FreeBSD.org 2002-07-05T08:39:11Z urn:sha1:d3272a1036228c4c263c8f1591f73e36f84bebe2 MFC diff reduction changes. 2002-04-19T12:03:57Z Ruslan Ermilov ru@FreeBSD.org 2002-04-19T12:03:57Z urn:sha1:7bf5029f8df80ba2ab78f94d92b5ba895d3cf01b MFC: Merge infrastucture for cleaned-up secure telnet. 2002-04-13T11:00:52Z Mark Murray markm@FreeBSD.org 2002-04-13T11:00:52Z urn:sha1:ca271c4ea11cc81ab3cccba972761db9436bbd91 MFC: OpenSSH 2.9 2001-09-28T01:33:53Z Brian Feldman green@FreeBSD.org 2001-09-28T01:33:53Z urn:sha1:7b974c5b2f8afd9b94cc4e81337b3a596d1c485d The only difference between this and what's in -CURRENT is that the default /etc/ssh/ssh_config sets "Protocol 1,2" for all hosts. This can be overrided entirely in user ~/.ssh/config files, as always. MFC: Security fixes to SRA telnet: 2001-05-30T20:46:48Z Nick Sayer nsayer@FreeBSD.org 2001-05-30T20:46:48Z urn:sha1:9c903a8b764a8b16c4208020b6ae98bff6d35e7e 1. Add PAM support to SRA. Includes adding telnetd to /etc/pam.conf and -lpam to the secure telnetd/telnet Makefiles. 2. Insist on secure tty before allowing root login. This should be replaced with a suitable PAM module at some point. 3. Make sure not to overflow the xuser/xpass buffers. Since they were malloc()ed (check for malloc failure and abort, too, btw) this was likely not exploitable, but it is best to be safe. Submitted by: kris Review timeout: security-officer MFC: OpenSSH 2.2.0 2000-10-28T23:06:34Z Kris Kennaway kris@FreeBSD.org 2000-10-28T23:06:34Z urn:sha1:2fcc6fadf43a41fd564baa55e795d975beb7b632 This commit was manufactured by cvs2svn to create branch 'RELENG_4'. 2000-09-11T07:14:44Z cvs2svn cvs2svn@FreeBSD.org 2000-09-11T07:14:44Z urn:sha1:63f72fa3bd45676089f55dbda33e61ecc4d00bc2 MFC: Don't build telnetd if NO_OPENSSL defined (now that I have permission :-) 2000-07-25T09:33:43Z Kris Kennaway kris@FreeBSD.org 2000-07-25T09:33:43Z urn:sha1:7265e1844cc8dc3fbcc684e4a027263f8e2d95fd Approved by: jkh Back out previous unapproved commit, it went to the wrong branch. 2000-07-25T01:11:18Z Kris Kennaway kris@FreeBSD.org 2000-07-25T01:11:18Z urn:sha1:a49a5c1300dc43e5ed54a82762e2d9b48d3f2f83