src/secure/usr.bin, branch releng/4.6 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=releng%2F4.6 2002-07-16T12:33:28Z Merge OpenSSH, OPIE, PAM and a number of dependencies from -STABLE. 2002-07-16T12:33:28Z Dag-Erling Smørgrav des@FreeBSD.org 2002-07-16T12:33:28Z urn:sha1:b9214dfb5f5cb452b50a7918e1a6b455a57ace6c This commit was manufactured by cvs2svn to create branch 'RELENG_4_6'. 2002-07-03T13:01:42Z cvs2svn cvs2svn@FreeBSD.org 2002-07-03T13:01:42Z urn:sha1:db0a3b09965d55f9dee7a58fb04e31df42b6ae73 This commit was manufactured by cvs2svn to create branch 'RELENG_4'. 2002-06-25T19:10:10Z cvs2svn cvs2svn@FreeBSD.org 2002-06-25T19:10:10Z urn:sha1:1228bc01c43fdb84ae32b46e614d77c2a8e49c3b MFC diff reduction changes. 2002-04-19T12:03:57Z Ruslan Ermilov ru@FreeBSD.org 2002-04-19T12:03:57Z urn:sha1:7bf5029f8df80ba2ab78f94d92b5ba895d3cf01b MFC: Merge infrastucture for cleaned-up secure telnet. 2002-04-13T11:00:52Z Mark Murray markm@FreeBSD.org 2002-04-13T11:00:52Z urn:sha1:ca271c4ea11cc81ab3cccba972761db9436bbd91 Build secure/ version of telnet with MAKE_KERBEROS5 for now. 2002-03-04T10:18:10Z Ruslan Ermilov ru@FreeBSD.org 2002-03-04T10:18:10Z urn:sha1:479a41ac17843085b65896ccb6d21fddcfaf8748 This will be backed out after Mark Murray MFC'es the change to build telnet and friends from kerberos5/. Submitted by: ume Connect sftp and ssh-keyscan. 2001-10-08T14:11:00Z Brian Feldman green@FreeBSD.org 2001-10-08T14:11:00Z urn:sha1:4f182b7dec33cde3624a74891c180c6e019ca385 MFC: OpenSSH 2.9 2001-09-28T01:33:53Z Brian Feldman green@FreeBSD.org 2001-09-28T01:33:53Z urn:sha1:7b974c5b2f8afd9b94cc4e81337b3a596d1c485d The only difference between this and what's in -CURRENT is that the default /etc/ssh/ssh_config sets "Protocol 1,2" for all hosts. This can be overrided entirely in user ~/.ssh/config files, as always. MFC: Update to OpenSSL 0.9.6a 2001-07-04T23:24:42Z Kris Kennaway kris@FreeBSD.org 2001-07-04T23:24:42Z urn:sha1:2d9194bc64db3221589398c7c3d3224140636069 MFC: Security fixes to SRA telnet: 2001-05-30T20:46:48Z Nick Sayer nsayer@FreeBSD.org 2001-05-30T20:46:48Z urn:sha1:9c903a8b764a8b16c4208020b6ae98bff6d35e7e 1. Add PAM support to SRA. Includes adding telnetd to /etc/pam.conf and -lpam to the secure telnetd/telnet Makefiles. 2. Insist on secure tty before allowing root login. This should be replaced with a suitable PAM module at some point. 3. Make sure not to overflow the xuser/xpass buffers. Since they were malloc()ed (check for malloc failure and abort, too, btw) this was likely not exploitable, but it is best to be safe. Submitted by: kris Review timeout: security-officer