Rivoreo Source Code Repositories
src.rivoreo.one / security / openssh-library / 84a89161a9629239b64171ef3e22ef6a3e462d51
commit84a89161a9629239b64171ef3e22ef6a3e462d51[log] [download]
authorDamien Miller <djm@mindrot.org>Wed Jul 02 12:47:48 2014 +1000
committerDamien Miller <djm@mindrot.org>Wed Jul 02 12:47:48 2014 +1000
treeb2d4e810d05a4ee77db25e2989d88b660fa684d4
parent51504ceec627c0ad57b9f75585c7b3d277f326be [diff]
   - matthew@cvs.openbsd.org 2014/06/18 02:59:13
     [sandbox-systrace.c]
     Now that we have a dedicated getentropy(2) system call for
     arc4random(3), we can disallow __sysctl(2) in OpenSSH's systrace
     sandbox.

     ok djm
2 files changed
tree: b2d4e810d05a4ee77db25e2989d88b660fa684d4
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. PROTOCOL
  9. PROTOCOL.agent
  10. PROTOCOL.certkeys
  11. PROTOCOL.chacha20poly1305
  12. PROTOCOL.key
  13. PROTOCOL.krl
  14. PROTOCOL.mux
  15. README
  16. README.dns
  17. README.platform
  18. README.privsep
  19. README.tun
  20. TODO
  21. aclocal.m4
  22. addrmatch.c
  23. atomicio.c
  24. atomicio.h
  25. audit-bsm.c
  26. audit-linux.c
  27. audit.c
  28. audit.h
  29. auth-bsdauth.c
  30. auth-chall.c
  31. auth-krb5.c
  32. auth-options.c
  33. auth-options.h
  34. auth-pam.c
  35. auth-pam.h
  36. auth-passwd.c
  37. auth-rh-rsa.c
  38. auth-rhosts.c
  39. auth-rsa.c
  40. auth-shadow.c
  41. auth-sia.c
  42. auth-sia.h
  43. auth-skey.c
  44. auth.c
  45. auth.h
  46. auth1.c
  47. auth2-chall.c
  48. auth2-gss.c
  49. auth2-hostbased.c
  50. auth2-kbdint.c
  51. auth2-none.c
  52. auth2-passwd.c
  53. auth2-pubkey.c
  54. auth2.c
  55. authfd.c
  56. authfd.h
  57. authfile.c
  58. authfile.h
  59. blocks.c
  60. bufaux.c
  61. bufbn.c
  62. bufec.c
  63. buffer.c
  64. buffer.h
  65. buildpkg.sh.in
  66. canohost.c
  67. canohost.h
  68. chacha.c
  69. chacha.h
  70. channels.c
  71. channels.h
  72. cipher-3des1.c
  73. cipher-aes.c
  74. cipher-aesctr.c
  75. cipher-aesctr.h
  76. cipher-bf1.c
  77. cipher-chachapoly.c
  78. cipher-chachapoly.h
  79. cipher-ctr.c
  80. cipher.c
  81. cipher.h
  82. cleanup.c
  83. clientloop.c
  84. clientloop.h
  85. compat.c
  86. compat.h
  87. compress.c
  88. compress.h
  89. config.guess
  90. config.sub
  91. configure.ac
  92. contrib/
  93. crc32.c
  94. crc32.h
  95. crypto_api.h
  96. deattack.c
  97. deattack.h
  98. defines.h
  99. dh.c
  100. dh.h
  101. digest-libc.c
  102. digest-openssl.c
  103. digest.h
  104. dispatch.c
  105. dispatch.h
  106. dns.c
  107. dns.h
  108. ed25519.c
  109. entropy.c
  110. entropy.h
  111. fatal.c
  112. fe25519.c
  113. fe25519.h
  114. fixalgorithms
  115. fixpaths
  116. fixprogs
  117. ge25519.c
  118. ge25519.h
  119. ge25519_base.data
  120. groupaccess.c
  121. groupaccess.h
  122. gss-genr.c
  123. gss-serv-krb5.c
  124. gss-serv.c
  125. hash.c
  126. hmac.c
  127. hmac.h
  128. hostfile.c
  129. hostfile.h
  130. includes.h
  131. install-sh
  132. kex.c
  133. kex.h
  134. kexc25519.c
  135. kexc25519c.c
  136. kexc25519s.c
  137. kexdh.c
  138. kexdhc.c
  139. kexdhs.c
  140. kexecdh.c
  141. kexecdhc.c
  142. kexecdhs.c
  143. kexgex.c
  144. kexgexc.c
  145. kexgexs.c
  146. key.c
  147. key.h
  148. krl.c
  149. krl.h
  150. log.c
  151. log.h
  152. loginrec.c
  153. loginrec.h
  154. logintest.c
  155. mac.c
  156. mac.h
  157. match.c
  158. match.h
  159. md-sha256.c
  160. md5crypt.c
  161. md5crypt.h
  162. mdoc2man.awk
  163. misc.c
  164. misc.h
  165. mkinstalldirs
  166. moduli
  167. moduli.5
  168. moduli.c
  169. monitor.c
  170. monitor.h
  171. monitor_fdpass.c
  172. monitor_fdpass.h
  173. monitor_mm.c
  174. monitor_mm.h
  175. monitor_wrap.c
  176. monitor_wrap.h
  177. msg.c
  178. msg.h
  179. mux.c
  180. myproposal.h
  181. nchan.c
  182. nchan.ms
  183. nchan2.ms
  184. openbsd-compat/
  185. openssh.xml.in
  186. opensshd.init.in
  187. packet.c
  188. packet.h
  189. pathnames.h
  190. pkcs11.h
  191. platform.c
  192. platform.h
  193. poly1305.c
  194. poly1305.h
  195. progressmeter.c
  196. progressmeter.h
  197. readconf.c
  198. readconf.h
  199. readpass.c
  200. regress/
  201. rijndael.c
  202. rijndael.h
  203. roaming.h
  204. roaming_client.c
  205. roaming_common.c
  206. roaming_dummy.c
  207. roaming_serv.c
  208. rsa.c
  209. rsa.h
  210. sandbox-capsicum.c
  211. sandbox-darwin.c
  212. sandbox-null.c
  213. sandbox-rlimit.c
  214. sandbox-seccomp-filter.c
  215. sandbox-systrace.c
  216. sc25519.c
  217. sc25519.h
  218. scard/
  219. scp.1
  220. scp.c
  221. servconf.c
  222. servconf.h
  223. serverloop.c
  224. serverloop.h
  225. session.c
  226. session.h
  227. sftp-client.c
  228. sftp-client.h
  229. sftp-common.c
  230. sftp-common.h
  231. sftp-glob.c
  232. sftp-server-main.c
  233. sftp-server.8
  234. sftp-server.c
  235. sftp.1
  236. sftp.c
  237. sftp.h
  238. smult_curve25519_ref.c
  239. ssh-add.1
  240. ssh-add.c
  241. ssh-agent.1
  242. ssh-agent.c
  243. ssh-dss.c
  244. ssh-ecdsa.c
  245. ssh-ed25519.c
  246. ssh-gss.h
  247. ssh-keygen.1
  248. ssh-keygen.c
  249. ssh-keyscan.1
  250. ssh-keyscan.c
  251. ssh-keysign.8
  252. ssh-keysign.c
  253. ssh-pkcs11-client.c
  254. ssh-pkcs11-helper.8
  255. ssh-pkcs11-helper.c
  256. ssh-pkcs11.c
  257. ssh-pkcs11.h
  258. ssh-rsa.c
  259. ssh-sandbox.h
  260. ssh.1
  261. ssh.c
  262. ssh.h
  263. ssh1.h
  264. ssh2.h
  265. ssh_config
  266. ssh_config.5
  267. sshbuf-getput-basic.c
  268. sshbuf-getput-crypto.c
  269. sshbuf-misc.c
  270. sshbuf.c
  271. sshbuf.h
  272. sshconnect.c
  273. sshconnect.h
  274. sshconnect1.c
  275. sshconnect2.c
  276. sshd.8
  277. sshd.c
  278. sshd_config
  279. sshd_config.5
  280. ssherr.c
  281. ssherr.h
  282. sshlogin.c
  283. sshlogin.h
  284. sshpty.c
  285. sshpty.h
  286. sshtty.c
  287. survey.sh.in
  288. ttymodes.c
  289. ttymodes.h
  290. uidswap.c
  291. uidswap.h
  292. umac.c
  293. umac.h
  294. uuencode.c
  295. uuencode.h
  296. verify.c
  297. version.h
  298. xmalloc.c
  299. xmalloc.h