| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
From the release notes,
> This release contains a number of security fixes, some small features
> and bugfixes.
The most significant change in 9.6p1 is a set of fixes for a newly-
discovered weakness in the SSH transport protocol. The fix was already
merged into FreeBSD and released as FreeBSD-SA-23:19.openssh.
Full release notes at https://www.openssh.com/txt/release-9.6
Relnotes: Yes
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 069ac18495ad8fde2748bc94b0f80a50250bb01d)
(cherry picked from commit a25789646d7130f5be166cac63d5c8b2b07c4706)
|
|
|
|
|
|
|
| |
Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Similar commit in main:
(cherry picked from commit d0b2dbfa0ecf)
|
|
|
|
|
|
|
|
|
|
|
|
| |
This moves SSHDIR and ssh_namespace.h handling to a common location,
and will simplify future work such as adding U2F support (D32509).
Reviewed by: kevans
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D32808
(cherry picked from commit 9d63429fa16352f58037ac2aa6ddc734b25e8331)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Literal references to /usr/local exist in a large number of files in
the FreeBSD base system. Many are in contributed software, in configuration
files, or in the documentation, but 19 uses have been identified in C
source files or headers outside the contrib and sys/contrib directories.
This commit makes it possible to set _PATH_LOCALBASE in paths.h to use
a different prefix for locally installed software.
In order to avoid changes to openssh source files, LOCALBASE is passed to
the build via Makefiles under src/secure. While _PATH_LOCALBASE could have
been used here, there is precedent in the construction of the path used to
a xauth program which depends on the LOCALBASE value passed on the compiler
command line to select a non-default directory.
This could be changed in a later commit to make the openssh build
consistently use _PATH_LOCALBASE. It is considered out-of-scope for this
commit.
Reviewed by: imp
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D26942
Notes:
svn path=/head/; revision=367075
|
|
|
|
|
|
|
| |
Sponsored by: Dell EMC Isilon
Notes:
svn path=/head/; revision=325188
|
|\
| |
| |
| |
| |
| |
| | |
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/projects/release-pkg/; revision=296869
|
| |
| |
| |
| | |
Notes:
svn path=/head/; revision=296633
|
|\|
| |
| |
| |
| |
| |
| | |
Sponsored by: The FreeBSD Foundation
Notes:
svn path=/projects/release-pkg/; revision=293172
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
bsd.lib.mk and bsd.prog.mk already depend all objs on headers in SRCS if
there is not yet a depend file. The headers in SRCS are never built or
installed. After 'make depend' the header was already added as a proper
dependency on the objects where needed.
MFC after: 2 weeks
Sponsored by: EMC / Isilon Storage Division
Notes:
svn path=/head/; revision=291941
|
|\|
| |
| |
| | |
Notes:
svn path=/projects/release-pkg/; revision=287710
|
| |
| |
| |
| |
| |
| |
| | |
Sponsored by: gandi.net
Notes:
svn path=/head/; revision=287466
|
|\|
| |
| |
| | |
Notes:
svn path=/projects/release-pkg/; revision=284410
|
| |\
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Off by default, build behaves normally.
WITH_META_MODE we get auto objdir creation, the ability to
start build from anywhere in the tree.
Still need to add real targets under targets/ to build packages.
Differential Revision: D2796
Reviewed by: brooks imp
Notes:
svn path=/head/; revision=284345
|
| | |
| | |
| | |
| | | |
Notes:
svn path=/projects/bmake/; revision=284172
|
| | |\
| | |/
| |/|
| | | |
Notes:
svn path=/projects/bmake/; revision=283595
|
| | |\
| | | |
| | | |
| | | | |
Notes:
svn path=/projects/bmake/; revision=274683
|
| | |\ \
| | | | |
| | | | |
| | | | | |
Notes:
svn path=/projects/bmake/; revision=270164
|
| | | | |
| | | | |
| | | | |
| | | | | |
Notes:
svn path=/projects/bmake/; revision=266219
|
| | |\| |
| | | | |
| | | | |
| | | | | |
Notes:
svn path=/projects/bmake/; revision=265720
|
| | | | |
| | | | |
| | | | |
| | | | | |
Notes:
svn path=/projects/bmake/; revision=256419
|
| | |\ \ \
| | | | | |
| | | | | |
| | | | | | |
Notes:
svn path=/projects/bmake/; revision=255477
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Notes:
svn path=/projects/bmake/; revision=248169
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Notes:
svn path=/projects/bmake/; revision=246868
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Requested by: Simon Gerraty <sjg@juniper.net>
Notes:
svn path=/projects/bmake/; revision=239572
|
|/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Flag config files as "to be merged on upgrade"
Notes:
svn path=/projects/release-pkg/; revision=279674
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The framework now ensure by itself that pthread is added to the link chain
as the last component if linked to kerberos hence avoid with out any explicit
addition prevent issue like CVE-2014-8475
Notes:
svn path=/head/; revision=275083
|
| |_|_|/
|/| | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Reduce overlinking
Notes:
svn path=/head/; revision=275077
|
| |_|/
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Make sure everything linking to a privatelib and/or an internallib does it directly
from the OBJDIR rather than DESTDIR.
Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsing
in final installation
Introduce the LD* variable which is what ld(1) is expecting (via LDADD) to link to
internal/privatelib
Directly link to the .so in case of private library to avoid having to complexify
LDFLAGS.
Phabric: https://phabric.freebsd.org/D553
Reviewed by: imp, emaste
Notes:
svn path=/head/; revision=269648
|
| |/
|/|
| |
| |
| |
| |
| | |
from the latter.
Notes:
svn path=/head/; revision=265420
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
as static binaries, if desired. The one exception is sshd, which runs
into trouble due to libpam.a's includion of pam_ssh.
Make OpenSSH use LDNS if available. This allows it to verify signed
SSHFP records.
Approved by: re (blanket)
Notes:
svn path=/head/; revision=255460
|
|/
|
|
|
|
|
| |
Approved by: re (blanket)
Notes:
svn path=/head/; revision=255386
|
|
|
|
| |
Notes:
svn path=/head/; revision=197679
|
|
|
|
|
|
|
| |
Discussed with: ru
Notes:
svn path=/head/; revision=158529
|
|
|
|
|
|
|
|
|
|
|
| |
the namespace of applications which inadvertantly link in libssh (usually
through pam_ssh)
Suggested by: lukem@netbsd.org
MFC after: 6 weeks
Notes:
svn path=/head/; revision=158519
|
|
|
|
|
|
|
|
|
| |
trouble, especially on amd64.
Requested by: ru
Notes:
svn path=/head/; revision=147098
|
|
|
|
| |
Notes:
svn path=/head/; revision=147056
|
|
|
|
| |
Notes:
svn path=/head/; revision=124212
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
it. While not strictly required, it unbreaks the cross-build world that
is resulting from moving the libraries around.
I have a more permanent solution to this problem in the works, but I
asked des for permission to commit this to get the ball rolling. This
also makes the ssh build more along the lines of what the openssh-portable
and OpenBSD openssh Makefile glue does.
Reviewed by: des
Notes:
svn path=/head/; revision=119116
|
|
|
|
|
|
|
| |
Sponsored by: DARPA, NAI Labs
Notes:
svn path=/head/; revision=98820
|
|
|
|
|
|
|
|
|
| |
introduced, and a few more I hadn't yet fixed.
Submitted by: bde
Notes:
svn path=/head/; revision=98749
|
|
|
|
| |
Notes:
svn path=/head/; revision=98739
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
dependencies in the correct place, record the fact that -lssh
depends on -lcrypto and -lz.
Removed false dependencies on -lz (except ssh(1) and sshd(8)).
Removed false dependencies on -lcrypto and -lutil for scp(1).
Reviewed by: markm
Notes:
svn path=/head/; revision=90405
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Spam /usr/lib some more by making libssh a standard library.
- Tweak ${LIBPAM} and ${MINUSLPAM}.
- Garbage collect unused libssh_pic.a.
- Add fake -lz dependency to secure/ makefiles needed for
dynamic linkage with -lssh.
Reviewed by: des, markm
Approved by: markm
Notes:
svn path=/head/; revision=89705
|
|
|
|
|
|
|
| |
programs are now included: sftp(1) and ssh-keyscan(1).
Notes:
svn path=/head/; revision=76264
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a
in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there.
- SSHDIR (formerly SSHSRC) is now shared between all SSH modules.
New LIBSSH is introduced for libssh.a (an internal static lib).
Previously, build without prior `obj' was broken; SSH modules
always looked for libssh.a in ${.OBJDIR}. Also, the dependancies
on the libssh.a were missing.
- libtelnet/ did not install the crypto version of telnet.h into
/usr/include/arpa.
- Removed BINOWN, BINMODE, BINDIR and SRCS with default values.
Reviewed by: markm
- MAN[1-9] -> MAN.
Notes:
svn path=/head/; revision=74818
|
|
|
|
|
|
|
|
| |
dynamically by default, we use the dlopen() calls to load librsaref.so
on US code trees.
Notes:
svn path=/head/; revision=57475
|
|
Notes:
svn path=/head/; revision=57434
|