Rivoreo Source Code Repositories
src.rivoreo.one / security / openssh-library / 5a5c2b9063fc3d7315424702b01527ccb0d4c0c9
commit5a5c2b9063fc3d7315424702b01527ccb0d4c0c9[log] [download]
authorDamien Miller <djm@mindrot.org>Tue Jul 31 12:21:34 2012 +1000
committerDamien Miller <djm@mindrot.org>Tue Jul 31 12:21:34 2012 +1000
tree6bee6b7c37627e0c40544783400285c51d656348
parent709a1e90d9cfb7a0e8cdf57fa967d163c010a6bb [diff]
   - djm@cvs.openbsd.org 2012/07/10 02:19:15
     [servconf.c servconf.h sshd.c sshd_config]
     Turn on systrace sandboxing of pre-auth sshd by default for new installs
     by shipping a config that overrides the current UsePrivilegeSeparation=yes
     default. Make it easier to flip the default in the future by adding too.
5 files changed
tree: 6bee6b7c37627e0c40544783400285c51d656348
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.mux
  12. README
  13. README.dns
  14. README.platform
  15. README.privsep
  16. README.tun
  17. TODO
  18. aclocal.m4
  19. acss.c
  20. acss.h
  21. addrmatch.c
  22. atomicio.c
  23. atomicio.h
  24. audit-bsm.c
  25. audit-linux.c
  26. audit.c
  27. audit.h
  28. auth-bsdauth.c
  29. auth-chall.c
  30. auth-krb5.c
  31. auth-options.c
  32. auth-options.h
  33. auth-pam.c
  34. auth-pam.h
  35. auth-passwd.c
  36. auth-rh-rsa.c
  37. auth-rhosts.c
  38. auth-rsa.c
  39. auth-shadow.c
  40. auth-sia.c
  41. auth-sia.h
  42. auth-skey.c
  43. auth.c
  44. auth.h
  45. auth1.c
  46. auth2-chall.c
  47. auth2-gss.c
  48. auth2-hostbased.c
  49. auth2-jpake.c
  50. auth2-kbdint.c
  51. auth2-none.c
  52. auth2-passwd.c
  53. auth2-pubkey.c
  54. auth2.c
  55. authfd.c
  56. authfd.h
  57. authfile.c
  58. authfile.h
  59. bufaux.c
  60. bufbn.c
  61. bufec.c
  62. buffer.c
  63. buffer.h
  64. buildpkg.sh.in
  65. canohost.c
  66. canohost.h
  67. channels.c
  68. channels.h
  69. cipher-3des1.c
  70. cipher-acss.c
  71. cipher-aes.c
  72. cipher-bf1.c
  73. cipher-ctr.c
  74. cipher.c
  75. cipher.h
  76. cleanup.c
  77. clientloop.c
  78. clientloop.h
  79. compat.c
  80. compat.h
  81. compress.c
  82. compress.h
  83. config.guess
  84. config.sub
  85. configure.ac
  86. contrib/
  87. crc32.c
  88. crc32.h
  89. deattack.c
  90. deattack.h
  91. defines.h
  92. dh.c
  93. dh.h
  94. dispatch.c
  95. dispatch.h
  96. dns.c
  97. dns.h
  98. entropy.c
  99. entropy.h
  100. fatal.c
  101. fixpaths
  102. fixprogs
  103. groupaccess.c
  104. groupaccess.h
  105. gss-genr.c
  106. gss-serv-krb5.c
  107. gss-serv.c
  108. hostfile.c
  109. hostfile.h
  110. includes.h
  111. install-sh
  112. jpake.c
  113. jpake.h
  114. kex.c
  115. kex.h
  116. kexdh.c
  117. kexdhc.c
  118. kexdhs.c
  119. kexecdh.c
  120. kexecdhc.c
  121. kexecdhs.c
  122. kexgex.c
  123. kexgexc.c
  124. kexgexs.c
  125. key.c
  126. key.h
  127. log.c
  128. log.h
  129. loginrec.c
  130. loginrec.h
  131. logintest.c
  132. mac.c
  133. mac.h
  134. match.c
  135. match.h
  136. md-sha256.c
  137. md5crypt.c
  138. md5crypt.h
  139. mdoc2man.awk
  140. misc.c
  141. misc.h
  142. mkinstalldirs
  143. moduli
  144. moduli.5
  145. moduli.c
  146. monitor.c
  147. monitor.h
  148. monitor_fdpass.c
  149. monitor_fdpass.h
  150. monitor_mm.c
  151. monitor_mm.h
  152. monitor_wrap.c
  153. monitor_wrap.h
  154. msg.c
  155. msg.h
  156. mux.c
  157. myproposal.h
  158. nchan.c
  159. nchan.ms
  160. nchan2.ms
  161. openbsd-compat/
  162. openssh.xml.in
  163. opensshd.init.in
  164. packet.c
  165. packet.h
  166. pathnames.h
  167. pkcs11.h
  168. platform.c
  169. platform.h
  170. progressmeter.c
  171. progressmeter.h
  172. readconf.c
  173. readconf.h
  174. readpass.c
  175. regress/
  176. rijndael.c
  177. rijndael.h
  178. roaming.h
  179. roaming_client.c
  180. roaming_common.c
  181. roaming_dummy.c
  182. roaming_serv.c
  183. rsa.c
  184. rsa.h
  185. sandbox-darwin.c
  186. sandbox-null.c
  187. sandbox-rlimit.c
  188. sandbox-seccomp-filter.c
  189. sandbox-systrace.c
  190. scard/
  191. schnorr.c
  192. schnorr.h
  193. scp.1
  194. scp.c
  195. servconf.c
  196. servconf.h
  197. serverloop.c
  198. serverloop.h
  199. session.c
  200. session.h
  201. sftp-client.c
  202. sftp-client.h
  203. sftp-common.c
  204. sftp-common.h
  205. sftp-glob.c
  206. sftp-server-main.c
  207. sftp-server.8
  208. sftp-server.c
  209. sftp.1
  210. sftp.c
  211. sftp.h
  212. ssh-add.1
  213. ssh-add.c
  214. ssh-agent.1
  215. ssh-agent.c
  216. ssh-dss.c
  217. ssh-ecdsa.c
  218. ssh-gss.h
  219. ssh-keygen.1
  220. ssh-keygen.c
  221. ssh-keyscan.1
  222. ssh-keyscan.c
  223. ssh-keysign.8
  224. ssh-keysign.c
  225. ssh-pkcs11-client.c
  226. ssh-pkcs11-helper.8
  227. ssh-pkcs11-helper.c
  228. ssh-pkcs11.c
  229. ssh-pkcs11.h
  230. ssh-rsa.c
  231. ssh-sandbox.h
  232. ssh.1
  233. ssh.c
  234. ssh.h
  235. ssh1.h
  236. ssh2.h
  237. ssh_config
  238. ssh_config.5
  239. sshconnect.c
  240. sshconnect.h
  241. sshconnect1.c
  242. sshconnect2.c
  243. sshd.8
  244. sshd.c
  245. sshd_config
  246. sshd_config.5
  247. sshlogin.c
  248. sshlogin.h
  249. sshpty.c
  250. sshpty.h
  251. sshtty.c
  252. survey.sh.in
  253. ttymodes.c
  254. ttymodes.h
  255. uidswap.c
  256. uidswap.h
  257. umac.c
  258. umac.h
  259. uuencode.c
  260. uuencode.h
  261. version.h
  262. xmalloc.c
  263. xmalloc.h