Home | History | Annotate | only in /src/libexec/rshd
History log of /src/libexec/rshd
RevisionDateAuthorComments
 1.19 16-Aug-2011  christos document non-literal format strings
 1.18 16-Mar-2009  lukem Default to WARNS=4
Exceptions that need a lower level are:
getty ld.elf_so lfs_cleanerd makewhatis telnetd tftpd
hpropd ipropd-master ipropd-slave kadmind kpasswdd
 1.17 27-Mar-2005  christos branches: 1.17.28;
KNF, WARNS == 3. Reported by John Nemeth
 1.16 04-Mar-2005  he branches: 1.16.2;
Introduce PAM_STATIC_LDADD and PAM_STATIC_DPADD. When compiling
with MKPIC=no, possibly because the target does not support shared
libraries, these include libraries required to resolve all symbols
which end up referenced from PAM-using applications. The libraries
presently required are -lcrypt, -lrpcsvc and -lutil.

Add use of these variables which are currently set up to use PAM,
so that they compile when MKPIC=no.

Also, in the telnetd case, reorder the order of the libraries, so
that libtelnet.a comes before -ltermcap and -lutil, again to fix
link error when MKPIC=no.

Discussed with thorpej and christos.
 1.15 20-Feb-2005  christos PAMify.
 1.14 10-Jan-2005  lukem Only compile in IPv6 support if ${USE_INET6} != "no"

MKINET6 is for providing IPv6 infrastructure.
USE_INET6 is for compiling IPv6 support into the programs (needs MKINET6).
 1.13 30-Nov-2002  lukem revert previous; this *DOES* use -lutil
 1.12 30-Nov-2002  lukem don't need -lutil here
 1.11 31-Jan-2000  itojun IPv6 support.
 1.10 24-Jan-2000  itojun declare -DLOGIN_CAP in CPPFLAGS, not in CFLAGS.
 1.9 22-Jan-2000  mjl Login.conf-ify rshd. Heavily inspired by FreeBSD.
 1.8 08-Oct-1997  mrg merge lite-2 Makefiles (rcsids), and turn on WARNS for all of libexec.
 1.7 07-Oct-1997  mrg WARNS?=1
 1.6 22-Dec-1994  cgd specify man pages the new way.
 1.5 05-Jun-1994  cgd kill kerberos and stream encryption support, so it's exportable.
 1.4 05-Jun-1994  cgd clean up import, RCS ids
 1.3 28-Jan-1994  cgd don't need -lutil
 1.2 01-Aug-1993  mycroft Add RCS identifiers.
 1.1 21-Mar-1993  cgd branches: 1.1.1;
Initial revision
 1.1.1.2 05-Jun-1994  cgd update from 4.4-Lite. no local changes.
 1.1.1.1 21-Mar-1993  cgd initial import of 386bsd-0.1 sources
 1.16.2.1 09-Jul-2005  tron Pull up revision 1.17 (requested by lukem in ticket #532):
KNF, WARNS == 3. Reported by John Nemeth
 1.17.28.1 13-May-2009  jym Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
 1.19 03-Jul-2017  wiz Remove workaround for ancient HTML generation code.
 1.18 09-Mar-2005  wiz Bump date for previous, and some minor cleanup while here.
 1.17 09-Mar-2005  hubertf * Add ssh(1), sshd(8) and hosts_access(5) to SEE ALSO list.
(What would one look at for Kerberos?)
* Be a bit more explicit about the security implications of rsh & friends,
as suggested by Steven M. Bellovin and OK'd by Christos Zoulas
 1.16 17-Jul-2004  wiz Code is not using gethostbyaddr any longer, but getnameinfo.
Fix references. Addresses part of PR 26337 by Peter Postma.
 1.15 07-Aug-2003  agc Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22284, verified by myself.
 1.14 25-Feb-2003  wiz .Nm does not need a dummy argument ("") before punctuation or
for correct formatting of the SYNOPSIS any longer.
 1.13 29-Sep-2002  wiz Begin new sentences on new lines.
Patch from Robert Elz (kre at munnari oz au).
 1.12 08-Feb-2002  ross Generate <>& symbolically. I'm avoiding .../dist/... directories for now.
 1.11 15-Jan-2002  wiz Whitespace nits.
 1.10 30-May-2000  itojun document IPv4 mapped address twists.
- ftp(1): treats IPv4 mapped destination as IPv4 peer, not native IPv6 peer.
this does not support network with SIIT translator.
- rshd(8)/rlogind(8): rejects accesses from IPv4 mapped peer, to avoid
possible abuse of IPv4 mapped addr (rshd/rlogind use source address-based
auth so it is important to check the condition).
 1.9 22-Jan-2000  mjl branches: 1.9.2;
Login.conf-ify rshd. Heavily inspired by FreeBSD.
 1.8 22-Mar-1999  garbled More and more .Os cleanups. .Os is defined in the tmac.doc-common file,
so we shouldn't override it with versions in the manpages. Many more to
come.
 1.7 29-Apr-1998  fair fix bad .Xr references
 1.6 20-Oct-1997  enami Fix .Nm usage.
 1.5 07-Oct-1997  mrg WARNS?=1
 1.4 05-Jun-1994  cgd clean up import, RCS ids
 1.3 23-Dec-1993  cgd add '-L' flag, for those of us who are *really* paranoid...
Logs all rsh commands (including failed ones).
 1.2 01-Aug-1993  mycroft Add RCS indentifiers.
 1.1 21-Mar-1993  cgd branches: 1.1.1;
Initial revision
 1.1.1.2 05-Jun-1994  cgd update from 4.4-Lite. no local changes.
 1.1.1.1 21-Mar-1993  cgd initial import of 386bsd-0.1 sources
 1.9.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.51 07-Oct-2017  ryo fix to compile without USE_PAM. (unused variables)
 1.50 14-Jul-2012  darrenr bin/46703: BSD r-commands use wrong source address for stderr
http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=46703
Bump libc minor for the addition of rresvport_af_addr()
 1.49 30-Oct-2011  christos branches: 1.49.2;
PR/45542: Henning Petersen: Misplaced parenthesis in rshd.c
 1.48 27-Aug-2011  joerg Use static. Don't manipulate environ directly, just reset it and use
setenv.
 1.47 16-Mar-2009  lukem fix sign-compare issue
 1.46 20-Jul-2008  lukem branches: 1.46.6;
Remove the \n and tabs from the __COPYRIGHT() strings.
 1.45 15-Dec-2007  perry branches: 1.45.6;
convert __attribute__s to applicable cdefs.h macros
 1.44 09-May-2006  mrg branches: 1.44.10;
change (mostly) int to socklen_t. GCC 4 doesn't like that int and
socklen_t are different signness.
 1.43 19-Apr-2005  christos check pwd != NULL
 1.42 30-Mar-2005  christos - use getpwnam_r
 1.41 27-Mar-2005  christos KNF, WARNS == 3. Reported by John Nemeth
 1.40 13-Mar-2005  christos branches: 1.40.2;
Handle the regular case too, not only the error case.
 1.39 12-Mar-2005  christos - Don't call pam functions after pam_end().
- Only call wait for our own pid.
- Improve error checking.
- Reorder some code to minimize diffs with FreeBSD.
 1.38 11-Mar-2005  ginsbach Remove unnecessary cast.
 1.37 09-Mar-2005  wiz Sort options.
 1.36 08-Mar-2005  christos Avoid source routing ip options. Described in:
http://www.citi.umich.edu/u/provos/papers/secnet-spoof.txt
 1.35 20-Feb-2005  christos Add missing goto badlogin; noticed by: Hisashi T Fujinaka
 1.34 20-Feb-2005  christos PAMify.
 1.33 16-Nov-2004  itojun NI_WITHSCOPEID was not picked up by IETF standardization process
 1.32 07-Aug-2003  agc Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22284, verified by myself.
 1.31 14-Jun-2003  joff use TCP_NODELAY
 1.30 17-May-2003  itojun string manipulation cleanup
 1.29 03-Mar-2003  dsl Call setsid() before (setusercontext() calls) setlogin() so we don't change
the username of inetd and everyone else that is logged in.
(approved by christos)
 1.28 23-Sep-2002  mycroft null commit
 1.27 23-Sep-2002  itojun poll.h, not sys/poll.h
 1.26 18-Sep-2002  mycroft select() -> poll()
 1.25 18-Mar-2002  mjl ANSIfy.
Lose \n from syslog messages.
strncpy() -> strlcpy().
Correct last arg to execl (NULL, not 0).
(From OpenBSD)
 1.24 24-Sep-2001  wiz va_{start,end} audit:
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).

Improved by comments from enami and christos -- thanks!

Heimdal/krb4/KAME changes already fed back, rest to follow.

Inspired by, but not not based on, OpenBSD.
 1.23 04-Feb-2001  christos fix nested extern
 1.22 11-Jan-2001  lukem - use SHUT_RDWR instead of 1+1 for the 2nd arg to shutdown()
- use LOG_ERR for fatal errors
- don't use LOG_ODELAY, it's the default
 1.21 09-Nov-2000  itojun do not refer free'ed memory region. KAME PR 302 from ryo@iij.ad.jp
 1.20 10-Oct-2000  is Format string cleanups by sommerfeld.
 1.19 14-Apr-2000  itojun branches: 1.19.4;
reject conneciton attempt from IPv4 mapped address, just in case.
I thought of supporting it, however, rejected due to possible complication.
i prefer the safer side here... (code available, commented out)
 1.18 31-Jan-2000  itojun IPv6 support.
 1.17 22-Jan-2000  mjl Login.conf-ify rshd. Heavily inspired by FreeBSD.
 1.16 10-Aug-1998  perry branches: 1.16.2;
bzero->memset, bcopy->memcpy, bcmp->memcmp
 1.15 26-Jul-1998  mycroft const poisoning.
 1.14 06-Jul-1998  mrg - use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames
 1.13 28-Feb-1998  enami Cosmetic changes; fix more indentation (just added/deleted white spaces).
 1.12 08-Jan-1998  lukem fix indenting of a block
 1.11 08-Oct-1997  enami Compare a return value of getopt() against -1 instead of EOF.
 1.10 07-Oct-1997  mrg WARNS?=1
 1.9 20-Jan-1995  christos Fix:
Save hostname in a permanent buffer, otherwise ruserok()
can trash it if it calls gethostbyname() or inet_ntoa().
Repeat by:
Add entries in .rhosts and login from a machine that does
not have an entry there. Notice that the error message
in syslog contains the last hostname in .rhosts and not
the original remote hostname.
 1.8 05-Jun-1994  cgd kill kerberos and stream encryption support, so it's exportable.
 1.7 05-Jun-1994  cgd clean up import, RCS ids
 1.6 19-May-1994  pk Add underscore to _check_rhosts_file
 1.5 18-Feb-1994  cgd didn't apply that patch verbatim, and needless to say, i biffed it.
 1.4 18-Feb-1994  cgd fix from vdlinden@fwi.uva.nl (Frank van der Linden) to prevent null deref
 1.3 23-Dec-1993  cgd add '-L' flag, for those of us who are *really* paranoid...
Logs all rsh commands (including failed ones).
 1.2 01-Aug-1993  mycroft Add RCS identifiers.
 1.1 21-Mar-1993  cgd branches: 1.1.1;
Initial revision
 1.1.1.2 05-Jun-1994  cgd update from 4.4-Lite. no local changes.
 1.1.1.1 21-Mar-1993  cgd initial import of 386bsd-0.1 sources
 1.16.2.1 10-Oct-2000  he Pull up revision 1.20 (via patch, requested by is):
Format string cleanup.
 1.19.4.1 17-Oct-2000  tv Pullup libexec string format fixes [is].
See "cvs log" for explicit revision numbers per file, from sommerfeld.
 1.40.2.3 09-Jul-2005  tron Pull up revision 1.43 (requested by lukem in ticket #532):
check pwd != NULL
 1.40.2.2 09-Jul-2005  tron Pull up revision 1.42 (requested by lukem in ticket #532):
- use getpwnam_r
 1.40.2.1 09-Jul-2005  tron Pull up revision 1.41 (requested by lukem in ticket #532):
KNF, WARNS == 3. Reported by John Nemeth
 1.44.10.1 09-Jan-2008  matt sync with HEAD
 1.45.6.1 18-Sep-2008  wrstuden Sync with wrstuden-revivesa-base-2.
 1.46.6.1 13-May-2009  jym Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
 1.49.2.1 30-Oct-2012  yamt sync with head

RSS XML Feed