Be consistent about making USE_PAM!=no be exclusive to USE_SKEY!=no.

Add support for PAM when using -p, via USE_PAM!=no.

Fix non-root S/key support with USE_SKEY!=no (which is exclusive to
USE_PAM!=no); discovered whilst testing the "old" behaviour.

Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.

Split the notion of building Hesiod, Kerberos, S/key, and YP
infrastructure and using that infrastructure in programs.

* MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building
of the infratsructure (libraries, support programs, etc.)

* USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control
building of support for using the corresponding API
in various libraries/programs that can use it.

As discussed on tech-toolchain.

Remove INSTALLFLAGS=-fschg, as per change to usr.bin/ssh/ssh/Makefile.

branches: 1.9.12;
Eliminate redundant library inclusion.

Conditionalize SKEY support. CFLAGS->CPPFLAGS

Merged with 4.4lite.
Changed to conform to NetBSD's new RCS Id convention.

skey support from <tsarna@endicor.com>

always use libcrypt

Add RCS indentifiers.

changed to use new libcrypt scheme.

added support for using real crypt

branches: 1.1.1;
Initial revision

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

Ispell. Begin new sentences on a new line.

Whitespace cleanup.

Add new option "-n" to disable lock timeout. Patch supplied by "The Man"
in PR bin/7816.

WARNSify, fix .Nm usage, getopt returns -1 not EOF

Merged with 4.4lite.
Changed to conform to NetBSD's new RCS Id convention.

skey support from <tsarna@endicor.com>

Add RCS indentifiers.

branches: 1.1.1;
Initial revision

Drop main() prototype.

fix unused variable warnings

branches: 1.32.2;
Use C89 function definitions

branches: 1.31.8;
fix time_t printf format.

Remove the \n and tabs from the __COPYRIGHT() strings.
Tweak to use a consistent format.

Coverity CID 5011: #ifdef out unreachable code.

branches: 1.28.2; 1.28.4;
Add support for PAM when using -p, via USE_PAM!=no.

Fix non-root S/key support with USE_SKEY!=no (which is exclusive to
USE_PAM!=no); discovered whilst testing the "old" behaviour.

convert __attribute__s to applicable cdefs.h macros

branches: 1.26.4;
* Remove unused header ctype.h
* Remove __P

Contributed by Slava Semushin <slava.semushin@gmail.com> in private mail.

clear errno before using strtol

ok christos & joerg

Usage -> usage; add missing -n to usage. From Kouichirou Hiratsuka in PR 26221.

- KNF
- detect and print more errors
- use strtol() instead of atoi()
- use getprogname()

PR/24796: Colin Percival: CPU-eating loop in lock(1); apply FreeBSD fix.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

error handling on strdup failure

Just another skey compile fix.

Don't declare 'extern opt*' getopt variables.

Add new option "-n" to disable lock timeout. Patch supplied by "The Man"
in PR bin/7816.

portability in printf format, and support for svr4 timezone.

const poisoning.

const poisoning.

- use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames

KNF, and discard privs as soon as possible. ensure hostname is nul-terminated

Need <time.h> for localtime() and asctime() prototypes.

WARNSify, fix .Nm usage, getopt returns -1 not EOF

NULL => 0 (Arne Juul; PR#3629)

Include appropriate header files to bring prototypes into scope.
Removed explicit errno declarations.

sys/signal.h -> signal.h

can't assume that timeval.ts_sec is same type as time_t. grr.

Use POSIX tty semantics and err*(3)/warn*(3).

Merged with 4.4lite.
Changed to conform to NetBSD's new RCS Id convention.

skey support from <tsarna@endicor.com>

Add RCS identifiers.

branches: 1.1.1;
Initial revision