OpenBSD CVS

CVS log for src/etc/Attic/security


[BACK] Up to [local] / src / etc

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.89, Sun Apr 17 21:35:22 2011 UTC (13 years, 1 month ago) by schwarze
Branch: MAIN
CVS Tags: HEAD
Changes since 1.88: +1 -1 lines
FILE REMOVED

Replaced by src/libexec/security a few minutes ago;
deraadt@ suggests to remove the old file right away.

Revision 1.88 / (download) - annotate - [select for diffs], Wed Jun 3 14:45:39 2009 UTC (14 years, 11 months ago) by jj
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7, OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.87: +2 -2 lines
Diff to previous 1.87 (colored)

Arla client rename from xfs to nnpfs for later upgrades. Tested on various arches. ok todd@ beck@

Revision 1.87 / (download) - annotate - [select for diffs], Sun May 24 22:25:12 2009 UTC (14 years, 11 months ago) by schwarze
Branch: MAIN
Changes since 1.86: +8 -4 lines
Diff to previous 1.86 (colored)

new variable SUIDSKIP to exclude paths from setuid and device checks,
useful for example for release(8) DESTDIRs, ro-mounted foreign OS
partitions, nosuid+nodev-mounted backup areas and the like
while here, do not call ls w/o args in case find returns nothing
based on a patch from halex@, re-implemented by me; variable naming by jmc@
ok halex@ jmc@

Revision 1.86 / (download) - annotate - [select for diffs], Mon May 18 19:37:47 2009 UTC (15 years ago) by schwarze
Branch: MAIN
Changes since 1.85: +2 -3 lines
Diff to previous 1.85 (colored)

support shell globs on ^+ lines in changelist(5)
based on a patch from John Wong, johnw at wonghome dot net, tweaked by me
while here, document globbing for normal lines, too
"i like that" okan@;  feedback and ok jmc@

Revision 1.85 / (download) - annotate - [select for diffs], Sat May 16 23:40:13 2009 UTC (15 years ago) by schwarze
Branch: MAIN
Changes since 1.84: +6 -7 lines
Diff to previous 1.84 (colored)

fix a couple of obvious echo -> next_part conversions i forgot;
found while investigating an unrelated bug report from John Wong

Revision 1.84 / (download) - annotate - [select for diffs], Thu May 14 21:24:33 2009 UTC (15 years ago) by schwarze
Branch: MAIN
Changes since 1.83: +83 -188 lines
Diff to previous 1.83 (colored)

replace the $OUTPUT idiom by the new next_part function from daily(8)
shortening the script by 100 lines and making it easier to understand
no functional change intended
feedback and ok  sthen@ ajacoutot@ okan@

Revision 1.83 / (download) - annotate - [select for diffs], Mon May 4 00:37:03 2009 UTC (15 years ago) by schwarze
Branch: MAIN
Changes since 1.82: +3 -3 lines
Diff to previous 1.82 (colored)

The strings "x5y" and "-42" are not valid group IDs, so fix the regex,
and fix two pastos in the printf(1) reporting bad group IDs;
ok okan@

Revision 1.82 / (download) - annotate - [select for diffs], Mon Mar 23 15:14:50 2009 UTC (15 years, 1 month ago) by ajacoutot
Branch: MAIN
Changes since 1.81: +2 -2 lines
Diff to previous 1.81 (colored)

Small rewording to remove ambiguity.
A package can actually "change" after an update even if its version does
not and yet it will not appear in the security(8) output.

wording by eric@
ok mbalmer@

Revision 1.81 / (download) - annotate - [select for diffs], Wed Jul 23 16:05:47 2008 UTC (15 years, 9 months ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.80: +5 -2 lines
Diff to previous 1.80 (colored)

Prevent warning about insecure hostnames where no /etc/hostname.*
exists. From wcmaier@.

Check target of symbolic links to avoid noise at boot and in
seucrity output where you have several interfaces symlinked to one
config file.

"If you think this is the right thing to do" deraadt@

Revision 1.80 / (download) - annotate - [select for diffs], Thu Apr 17 19:49:16 2008 UTC (16 years, 1 month ago) by sthen
Branch: MAIN
Changes since 1.79: +10 -1 lines
Diff to previous 1.79 (colored)

Teach security(8) to check for world-readable hostname.if files.
An increasing number of types of these files (e.g. ppp, carp and
wlan adapters) may contain secrets.

ok deraadt oga johan

Revision 1.79 / (download) - annotate - [select for diffs], Tue Oct 23 11:19:58 2007 UTC (16 years, 6 months ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.78: +22 -1 lines
Diff to previous 1.78 (colored)

list package changes in daily insecurity output

ok henning

Revision 1.78 / (download) - annotate - [select for diffs], Wed Aug 22 12:03:26 2007 UTC (16 years, 9 months ago) by henning
Branch: MAIN
Changes since 1.77: +2 -2 lines
Diff to previous 1.77 (colored)

plural of ID is IDs, not ID's, ok mk jmc

Revision 1.77 / (download) - annotate - [select for diffs], Tue Oct 31 01:38:22 2006 UTC (17 years, 6 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.76: +20 -1 lines
Diff to previous 1.76 (colored)

generate diffs for files listed in /etc/changelist as they are created
and deleted. previously this script only generated diffs for existing
files.

ok lots of people including millert@ msf@ mcbride@ todd@ and probably more.

Revision 1.76 / (download) - annotate - [select for diffs], Fri Oct 13 20:12:16 2006 UTC (17 years, 7 months ago) by otto
Branch: MAIN
Changes since 1.75: +2 -2 lines
Diff to previous 1.75 (colored)

changelist files are ascii, even if they contain a few funny chars.
Encountered by henning@; ok millert@ robert@ deraadt@

Revision 1.75 / (download) - annotate - [select for diffs], Tue Mar 21 19:59:28 2006 UTC (18 years, 2 months ago) by david
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.74: +6 -6 lines
Diff to previous 1.74 (colored)

Fix for PR 5043: shell startup scripts might contain binary characters but
grep should assume ASCII text, fixes umask detection
ok millert@ jaredy@

Revision 1.74 / (download) - annotate - [select for diffs], Tue Dec 6 20:18:56 2005 UTC (18 years, 5 months ago) by pedro
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_9
Changes since 1.73: +2 -2 lines
Diff to previous 1.73 (colored)

Remove fdescfs

Revision 1.73 / (download) - annotate - [select for diffs], Thu Nov 24 12:08:15 2005 UTC (18 years, 5 months ago) by pedro
Branch: MAIN
Changes since 1.72: +2 -2 lines
Diff to previous 1.72 (colored)

Remove kernfs, okay deraadt@.

Revision 1.72 / (download) - annotate - [select for diffs], Fri Nov 11 18:15:07 2005 UTC (18 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.71: +2 -2 lines
Diff to previous 1.71 (colored)

do not scan afs/xfs directories; chris.kuethe

Revision 1.71 / (download) - annotate - [select for diffs], Tue Feb 22 10:50:55 2005 UTC (19 years, 2 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE, OPENBSD_3_8, OPENBSD_3_7_BASE, OPENBSD_3_7
Changes since 1.70: +2 -2 lines
Diff to previous 1.70 (colored)

Avoid spurious "globally exported" warning. Noted by jared r r spiegel.
ok henning@

Revision 1.70 / (download) - annotate - [select for diffs], Mon Feb 7 06:08:10 2005 UTC (19 years, 3 months ago) by david
Branch: MAIN
Changes since 1.69: +9 -9 lines
Diff to previous 1.69 (colored)

indentation whitespace nits

Revision 1.69 / (download) - annotate - [select for diffs], Thu Jan 6 00:00:38 2005 UTC (19 years, 4 months ago) by jmc
Branch: MAIN
Changes since 1.68: +4 -4 lines
Diff to previous 1.68 (colored)

- document /etc/security's .secure hooks
- sync the comments in /etc/security

ok millert@

Revision 1.68 / (download) - annotate - [select for diffs], Wed Aug 25 19:59:29 2004 UTC (19 years, 8 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.67: +2 -2 lines
Diff to previous 1.67 (colored)

Use $file shorthand instead of specifying /var/backups/disklabel.$d.
Noticed by ian@

Revision 1.67 / (download) - annotate - [select for diffs], Wed Aug 25 19:17:30 2004 UTC (19 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.66: +25 -1 lines
Diff to previous 1.66 (colored)

store a copy of the disklabel for mounted filesystems and report changes
OK deraadt@

Revision 1.66 / (download) - annotate - [select for diffs], Sun Dec 28 19:51:31 2003 UTC (20 years, 4 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5
Changes since 1.65: +17 -12 lines
Diff to previous 1.65 (colored)

Update based on PR 2208:
o Prepare for the update to join(1).
o Handle non-ascii chars in pathnames for setuid and device checks.

ok millert@ deraadt@

Revision 1.65 / (download) - annotate - [select for diffs], Fri Nov 28 07:32:12 2003 UTC (20 years, 5 months ago) by sturm
Branch: MAIN
Changes since 1.64: +2 -2 lines
Diff to previous 1.64 (colored)

fix regexp for group names

ok millert@

Revision 1.64 / (download) - annotate - [select for diffs], Mon Jul 7 15:35:55 2003 UTC (20 years, 10 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE, OPENBSD_3_4
Changes since 1.63: +2 -2 lines
Diff to previous 1.63 (colored)

when testing passwd(5) expire field, force its value to an int before
checking for non-zero since an empty field is equivalent to 0.
Problem noted by Graeme Lee.

Revision 1.63 / (download) - annotate - [select for diffs], Thu Jul 3 23:05:42 2003 UTC (20 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.62: +5 -6 lines
Diff to previous 1.62 (colored)

Fix setting of umaskset.  Also, there is no need to use TMP3 for
umask detection.

Revision 1.62 / (download) - annotate - [select for diffs], Tue Jul 1 22:12:50 2003 UTC (20 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.61: +2 -2 lines
Diff to previous 1.61 (colored)

We need the "/ 10" in the group writability check after all; marc@

Revision 1.61 / (download) - annotate - [select for diffs], Tue Jul 1 21:52:39 2003 UTC (20 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.60: +11 -7 lines
Diff to previous 1.60 (colored)

Make the test for unsafe umask more bullet-proof.  With help from marc@

Revision 1.60 / (download) - annotate - [select for diffs], Mon Jun 30 23:47:14 2003 UTC (20 years, 10 months ago) by avsm
Branch: MAIN
Changes since 1.59: +2 -2 lines
Diff to previous 1.59 (colored)

some more extra mktemp randomness; millert@ ok

Revision 1.59 / (download) - annotate - [select for diffs], Sun Jun 15 22:12:32 2003 UTC (20 years, 11 months ago) by grange
Branch: MAIN
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

The hyphen in regexp should really be escaped
ok millert@

Revision 1.58 / (download) - annotate - [select for diffs], Fri Jun 13 15:55:57 2003 UTC (20 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.57: +2 -2 lines
Diff to previous 1.57 (colored)

Add dot ('.') in usernames too for consistency with adduser/useradd.
Noted by Brian Poole

Revision 1.57 / (download) - annotate - [select for diffs], Thu Jun 12 19:11:57 2003 UTC (20 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.56: +2 -2 lines
Diff to previous 1.56 (colored)

Don't complain about usernames that end in '$' which may be needed by
samba; this is consistent with useradd and adduser.  From Dan Brosemer.

Revision 1.56 / (download) - annotate - [select for diffs], Tue Apr 8 20:42:42 2003 UTC (21 years, 1 month ago) by millert
Branch: MAIN
Changes since 1.55: +8 -8 lines
Diff to previous 1.55 (colored)

Use POSIX chown semantics (user:group); noted by Leandro Costa

Revision 1.55 / (download) - annotate - [select for diffs], Mon Dec 30 13:59:54 2002 UTC (21 years, 4 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_3
Changes since 1.54: +2 -2 lines
Diff to previous 1.54 (colored)

put bin dirs before sbin dirs in PATH for consistency with other cron scripts

Revision 1.54 / (download) - annotate - [select for diffs], Sun Dec 15 13:25:27 2002 UTC (21 years, 5 months ago) by henning
Branch: MAIN
Changes since 1.53: +19 -19 lines
Diff to previous 1.53 (colored)

writeable -> writable; torh at bogus dot net

Revision 1.53 / (download) - annotate - [select for diffs], Tue Jul 23 18:26:35 2002 UTC (21 years, 10 months ago) by pvalchev
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE, OPENBSD_3_2
Changes since 1.52: +3 -1 lines
Diff to previous 1.52 (colored)

check account expiration time as well; from hamajima@nagoya.ydc.co.jp pr2835

Revision 1.52 / (download) - annotate - [select for diffs], Wed Jul 17 01:32:04 2002 UTC (21 years, 10 months ago) by jcs
Branch: MAIN
Changes since 1.51: +2 -2 lines
Diff to previous 1.51 (colored)

don't complain about our new usernames that start with underscores

deraadt and millert ok

Revision 1.51 / (download) - annotate - [select for diffs], Wed May 22 03:57:24 2002 UTC (22 years ago) by millert
Branch: MAIN
Changes since 1.50: +3 -3 lines
Diff to previous 1.50 (colored)

Check for S/Key entries in /etc/skey, not /etc/skeyeys; David Krause
We could use skeyinfo(1) to check but this is much cheaper.

Revision 1.50 / (download) - annotate - [select for diffs], Mon Feb 18 18:13:06 2002 UTC (22 years, 3 months ago) by pvalchev
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE, OPENBSD_3_1
Changes since 1.49: +2 -8 lines
Diff to previous 1.49 (colored)

use mktemp; help & ok millert

Revision 1.49 / (download) - annotate - [select for diffs], Mon Oct 1 16:52:18 2001 UTC (22 years, 7 months ago) by jakob
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE, OPENBSD_3_0
Changes since 1.48: +2 -2 lines
Diff to previous 1.48 (colored)

mtree -l (loose permissions check) on /etc/mtree/special. ok millert@.

Revision 1.48 / (download) - annotate - [select for diffs], Fri Apr 6 17:13:37 2001 UTC (23 years, 1 month ago) by brad
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE, OPENBSD_2_9
Changes since 1.47: +5 -5 lines
Diff to previous 1.47 (colored)

fix username and groupname length checks.
--
Patch from: wilfried@ via PR#1761
Ok'd by: deraadt@

Revision 1.47 / (download) - annotate - [select for diffs], Thu Apr 5 18:47:00 2001 UTC (23 years, 1 month ago) by millert
Branch: MAIN
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored)

Skip entries starting with '+' in duplicate user ID check so we don't
get false positives for YP stuff.  Closes PR 1755

Revision 1.46 / (download) - annotate - [select for diffs], Sun Mar 25 04:50:27 2001 UTC (23 years, 1 month ago) by millert
Branch: MAIN
Changes since 1.45: +26 -2 lines
Diff to previous 1.45 (colored)

Don't provide diffs of sensitive files like ssh host keys.  Instead,
just save the md5 checksums so we can still determine when something
change.  Entries in /etc/changelist that are prefixed with a '+'
will only have their md5 checksums saved, not the actual files.

Revision 1.45 / (download) - annotate - [select for diffs], Fri Mar 16 15:38:13 2001 UTC (23 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.44: +5 -4 lines
Diff to previous 1.44 (colored)

Add ~/.ssh/id_dsa and ~/.ssh/id_rsa to the "must be owned by user and
not readable by other" block.  Remove ~/.ssh/random_seed as it is
not used in OpenSSH.

Add ~/.ssh/authorized_keys2, and ~/.ssh/known_hosts to the "must be
owned by user and not writable"  block.

Revision 1.44 / (download) - annotate - [select for diffs], Wed Jan 31 19:12:10 2001 UTC (23 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.43: +3 -3 lines
Diff to previous 1.43 (colored)

more fat utmp; ianm@cit.uws.edu.au

Revision 1.43 / (download) - annotate - [select for diffs], Fri Dec 22 08:04:48 2000 UTC (23 years, 5 months ago) by todd
Branch: MAIN
Changes since 1.42: +3 -2 lines
Diff to previous 1.42 (colored)

gnupg ring/data ownership/permission checking added; ok millert@

Revision 1.42 / (download) - annotate - [select for diffs], Sun Dec 17 22:35:19 2000 UTC (23 years, 5 months ago) by marc
Branch: MAIN
Changes since 1.41: +3 -3 lines
Diff to previous 1.41 (colored)

Todd, Aaron, Dug, and me all prefer unidiff

Revision 1.41 / (download) - annotate - [select for diffs], Fri Oct 20 16:27:16 2000 UTC (23 years, 7 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE, OPENBSD_2_8
Changes since 1.40: +52 -52 lines
Diff to previous 1.40 (colored)

Since sh's bulitin echo(1) supports /t and /n there is no reason to
use printf(1) here.  This way there is no possibility of format
string problems and we use a shell builtin instead of an external
command.

Revision 1.40 / (download) - annotate - [select for diffs], Wed Oct 18 16:45:27 2000 UTC (23 years, 7 months ago) by hugh
Branch: MAIN
Changes since 1.39: +21 -21 lines
Diff to previous 1.39 (colored)

printf(1) format string fixes! checked by theo.
inspiration from dynamo@ime.net.
also a typo fix.

Revision 1.39 / (download) - annotate - [select for diffs], Fri Oct 6 17:35:30 2000 UTC (23 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

When including the listing of a directory in root's security mail, pass the
-q flag to ls(1) so that non-printable characters will appear as '?'. This
prevents a malicious user from fooling the administrator into thinking the
contents of a file name are actually valid script output (note that you can
put newlines in file names); deraadt@ ok

Revision 1.38 / (download) - annotate - [select for diffs], Sun Jul 23 19:49:17 2000 UTC (23 years, 10 months ago) by rohee
Branch: MAIN
Changes since 1.37: +3 -1 lines
Diff to previous 1.37 (colored)

Add a little blurb explaing the meaning of mtree's output.
millert@ ok.

Revision 1.37 / (download) - annotate - [select for diffs], Sun Jun 18 06:33:34 2000 UTC (23 years, 11 months ago) by todd
Branch: MAIN
Changes since 1.36: +7 -4 lines
Diff to previous 1.36 (colored)

fix inspired by pr 744 from karls@inet.no
changed so files are e.g. backups/etc_passwd not backups/_etc_passwd

Revision 1.36 / (download) - annotate - [select for diffs], Fri May 26 14:54:17 2000 UTC (23 years, 11 months ago) by aaron
Branch: MAIN
Changes since 1.35: +6 -6 lines
Diff to previous 1.35 (colored)

Capitalize 'id' to be consistent with our man pages.

Revision 1.35 / (download) - annotate - [select for diffs], Sun Apr 16 20:46:22 2000 UTC (24 years, 1 month ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE, OPENBSD_2_7
Changes since 1.34: +4 -4 lines
Diff to previous 1.34 (colored)

sendmail support files now live in /etc/mail

Revision 1.34 / (download) - annotate - [select for diffs], Tue Feb 29 20:36:25 2000 UTC (24 years, 2 months ago) by aaron
Branch: MAIN
Changes since 1.33: +2 -2 lines
Diff to previous 1.33 (colored)

existance -> existence

Revision 1.33 / (download) - annotate - [select for diffs], Mon Nov 22 15:48:07 1999 UTC (24 years, 6 months ago) by millert
Branch: MAIN
Changes since 1.32: +3 -3 lines
Diff to previous 1.32 (colored)

match /dev/fd{0,1,2,3}{,B,C,D,E,F,G,H}[abcdefghijklmnop] when doing device checks; closes PR #750

Revision 1.32 / (download) - annotate - [select for diffs], Sat Jun 19 17:14:31 1999 UTC (24 years, 11 months ago) by espie
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.31: +4 -4 lines
Diff to previous 1.31 (colored)

Give line printout along with line number.

Revision 1.31 / (download) - annotate - [select for diffs], Sun Nov 22 22:15:42 1998 UTC (25 years, 6 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE, OPENBSD_2_5
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored)

make /var/backups same as mtree says; mickey

Revision 1.30 / (download) - annotate - [select for diffs], Mon Aug 17 16:43:47 1998 UTC (25 years, 9 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_2_4_BASE, OPENBSD_2_4
Changes since 1.29: +3 -3 lines
Diff to previous 1.29 (colored)

don't include FIFOs in check for set[ug]id files and devices; andrew@nfr.net

Revision 1.29 / (download) - annotate - [select for diffs], Sat Jul 11 05:01:11 1998 UTC (25 years, 10 months ago) by marc
Branch: MAIN
Changes since 1.28: +28 -10 lines
Diff to previous 1.28 (colored)

better checks for . in path from "Denis A. Doroshenko" <cyxob@isl.vtu.lt>

Revision 1.28 / (download) - annotate - [select for diffs], Sun May 10 18:11:04 1998 UTC (26 years ago) by todd
Branch: MAIN
Changes since 1.27: +7 -4 lines
Diff to previous 1.27 (colored)

Check a few more DOTfiles that could potentially compromise security on a per
user basis.

Revision 1.27 / (download) - annotate - [select for diffs], Sun Mar 22 03:39:11 1998 UTC (26 years, 2 months ago) by marc
Branch: MAIN
CVS Tags: OPENBSD_2_3_BASE, OPENBSD_2_3
Changes since 1.26: +43 -2 lines
Diff to previous 1.26 (colored)

fix ksh.kshrc; check ksh.kshrc, .kshrc for owner/mode/path

Revision 1.26 / (download) - annotate - [select for diffs], Wed Feb 25 16:00:29 1998 UTC (26 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.25: +2 -2 lines
Diff to previous 1.25 (colored)

Deal with non-existent /etc/skeykeys

Revision 1.25 / (download) - annotate - [select for diffs], Sun Dec 28 23:26:25 1997 UTC (26 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.24: +2 -2 lines
Diff to previous 1.24 (colored)

be more careful during termination

Revision 1.24 / (download) - annotate - [select for diffs], Mon Nov 17 08:35:42 1997 UTC (26 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.23: +2 -2 lines
Diff to previous 1.23 (colored)

completely avoid master.passwd in the changelist processing; jbernard@tater.mines.edu

Revision 1.23 / (download) - annotate - [select for diffs], Sun Oct 5 11:49:14 1997 UTC (26 years, 7 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_2_BASE, OPENBSD_2_2
Changes since 1.22: +10 -3 lines
Diff to previous 1.22 (colored)

handling for closed home directories;  yensid@afri.imsa.edu

Revision 1.22 / (download) - annotate - [select for diffs], Mon Sep 29 22:15:58 1997 UTC (26 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.21: +2 -2 lines
Diff to previous 1.21 (colored)

oops, detect blowfish-a as OK; yensid@imsa.edu, PR#321

Revision 1.21 / (download) - annotate - [select for diffs], Tue Sep 2 06:46:42 1997 UTC (26 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.20: +7 -3 lines
Diff to previous 1.20 (colored)

better path handling; jbernard@tater.mines.edu, netbsd pr#3995

Revision 1.20 / (download) - annotate - [select for diffs], Mon Jun 23 02:54:31 1997 UTC (26 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

/etc/profile should be checked along with .profile for consistency with
/etc/csh.login and .login.  From Chris Jones <cjones@rupert.oscs.montana.edu>

Revision 1.19 / (download) - annotate - [select for diffs], Mon Jun 2 02:02:25 1997 UTC (26 years, 11 months ago) by flipk
Branch: MAIN
Changes since 1.18: +3 -3 lines
Diff to previous 1.18 (colored)

1. ignore blank lines
2. /-ro/   ->  /^-ro$/ : allows hostnames containing "*-ro*" and
   ignores "-root"

Revision 1.18 / (download) - annotate - [select for diffs], Mon Mar 17 20:17:57 1997 UTC (27 years, 2 months ago) by gene
Branch: MAIN
CVS Tags: OPENBSD_2_1_BASE, OPENBSD_2_1
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

Don't consider an account disabled just because the password length != 13.
Also, take into account users w/ the blowfish cypher.

Revision 1.17 / (download) - annotate - [select for diffs], Tue Dec 10 07:26:01 1996 UTC (27 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.16: +2 -2 lines
Diff to previous 1.16 (colored)

blow away tmp dir on more traps

Revision 1.16 / (download) - annotate - [select for diffs], Fri Dec 6 18:12:57 1996 UTC (27 years, 5 months ago) by millert
Branch: MAIN
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored)

check for entry in /etc/skeykeys and ~/.ssh in evil system()

Revision 1.15 / (download) - annotate - [select for diffs], Fri Dec 6 17:51:49 1996 UTC (27 years, 5 months ago) by millert
Branch: MAIN
Changes since 1.14: +6 -6 lines
Diff to previous 1.14 (colored)

Change some "test -f" to "test -s"
Don't bitch about star'd out logins unless they have a .rhosts/.shosts/.klogin
file (ie: something that would let them in via rsh/ssh).

Revision 1.14 / (download) - annotate - [select for diffs], Fri Dec 6 17:17:13 1996 UTC (27 years, 5 months ago) by millert
Branch: MAIN
Changes since 1.13: +8 -7 lines
Diff to previous 1.13 (colored)

skip lines in /etc/passwd that start with + or -.
don't bitch about root-owned .rhosts since multiple system accounts
share root's homedir.

Revision 1.13 / (download) - annotate - [select for diffs], Sat Nov 30 17:50:58 1996 UTC (27 years, 5 months ago) by millert
Branch: MAIN
Changes since 1.12: +49 -46 lines
Diff to previous 1.12 (colored)

Merged our changes back into 4.4BSD version.
Can't do "find -ls" since we need to store the date in an absolute format
(ls -T).  Use "find -print0" | xargs -0 instead.

Revision 1.12 / (download) - annotate - [select for diffs], Sat Nov 23 19:10:43 1996 UTC (27 years, 6 months ago) by millert
Branch: MAIN
Changes since 1.11: +3 -3 lines
Diff to previous 1.11 (colored)

Deal with leading whitespace in find output.  Fixes problem of devices
showing up in the setuid list ;-)

Revision 1.11 / (download) - annotate - [select for diffs], Tue Oct 22 07:58:30 1996 UTC (27 years, 7 months ago) by tholo
Branch: MAIN
Changes since 1.10: +10 -8 lines
Diff to previous 1.10 (colored)

Update to work properly with output from find -ls; also skip commented out
lines in /etc/exports

Revision 1.10 / (download) - annotate - [select for diffs], Fri Sep 20 20:35:37 1996 UTC (27 years, 8 months ago) by bitblt
Branch: MAIN
CVS Tags: OPENBSD_2_0_BASE, OPENBSD_2_0
Changes since 1.9: +3 -3 lines
Diff to previous 1.9 (colored)

names of set-uid files are no longer passed to a shell.
Thanks to deraadt for pointing out the -ls flag on find.

Revision 1.9 / (download) - annotate - [select for diffs], Mon Sep 16 19:40:27 1996 UTC (27 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.8: +6 -6 lines
Diff to previous 1.8 (colored)

toor is gone; thanks bibtlt

Revision 1.8 / (download) - annotate - [select for diffs], Sun Sep 15 20:29:41 1996 UTC (27 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.7: +3 -3 lines
Diff to previous 1.7 (colored)

setup trap after mkdir

Revision 1.7 / (download) - annotate - [select for diffs], Sun Sep 15 20:12:18 1996 UTC (27 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.6: +16 -8 lines
Diff to previous 1.6 (colored)

kill the races; found by bitblt

Revision 1.6 / (download) - annotate - [select for diffs], Fri Jul 19 16:55:51 1996 UTC (27 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.5: +4 -4 lines
Diff to previous 1.5 (colored)

Would give complain that /etc/hosts.equiv /etc/shosts.equiv /etc/hosts.lpd
have '+' in them even when they don't.  Escaped the + to fix.

Revision 1.5 / (download) - annotate - [select for diffs], Fri Jul 12 00:06:50 1996 UTC (27 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.4: +3 -3 lines
Diff to previous 1.4 (colored)

setgid too

Revision 1.4 / (download) - annotate - [select for diffs], Sun Jul 7 09:35:26 1996 UTC (27 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

only watch for pure + entries

Revision 1.3 / (download) - annotate - [select for diffs], Sun May 26 10:25:29 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +1 -3 lines
Diff to previous 1.2 (colored)

sync & label

Revision 1.2 / (download) - annotate - [select for diffs], Mon Dec 18 16:56:37 1995 UTC (28 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.1: +75 -40 lines
Diff to previous 1.1 (colored)

numerous improvements by arnej@pvv.unit.no, david@city.ac.uk, and myself.
complain less in normal situations, and deal better with netgroups, YP,
ssh configuration files, and other rather normal configurations.

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Wed Oct 18 08:37:57 1995 UTC (28 years, 7 months ago) by deraadt
CVS Tags: netbsd_1_1
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

initial import of NetBSD tree

Revision 1.1 / (download) - annotate - [select for diffs], Wed Oct 18 08:37:57 1995 UTC (28 years, 7 months ago) by deraadt
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.