freebsd-ports/security/ssh2/files/patch-al

*** sshconnect.c.orig	Wed Apr 23 08:40:11 1997
--- sshconnect.c	Fri Apr 25 12:41:59 1997
***************
*** 311,316 ****
--- 311,322 ----
      {
        struct sockaddr_in sin;
        int p;
+ #if defined(__FreeBSD__)  && !defined(SOCKS)
+ 	p = 1023;	/* Compat with old FreeBSD */
+       sock = rresvport(&p);
+       if (sock < 0)
+ 	fatal("rresvport: %.100s", strerror(errno));
+ #else
        for (p = 1023; p > 512; p--)
  	{
  	  sock = socket(AF_INET, SOCK_STREAM, 0);
***************
*** 338,343 ****
--- 344,350 ----
  	    }
  	  fatal("bind: %.100s", strerror(errno));
  	}
+ #endif
        debug("Allocated local port %d.", p);
      }
    else
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc. 1997-04-25 05:01:06 +00:00			`*** sshconnect.c.orig Wed Apr 23 08:40:11 1997`
			`--- sshconnect.c Fri Apr 25 12:41:59 1997`
Have ssh use rresvport() to get a privileged socket instead of doing it itself. This means it obeys the portrange sysctl's. 1996-08-12 14:17:53 +00:00			`***************`
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc. 1997-04-25 05:01:06 +00:00			`* 311,316 **`
			`--- 311,322 ----`
Have ssh use rresvport() to get a privileged socket instead of doing it itself. This means it obeys the portrange sysctl's. 1996-08-12 14:17:53 +00:00			`{`
			`struct sockaddr_in sin;`
			`int p;`
			`+ #if defined(__FreeBSD__) && !defined(SOCKS)`
Make one of our changes for -current work on 2.1. In -current, rresvport() ignores it's argument (it's meaningless, the kernel keeps the state), but 2.1.x use it. ssh was effectively giving a random port to 2.1. Originally noticed by: John Polstra <jdp@polstra.com> 1996-12-27 08:42:41 +00:00			`+ p = 1023; /* Compat with old FreeBSD */`
Have ssh use rresvport() to get a privileged socket instead of doing it itself. This means it obeys the portrange sysctl's. 1996-08-12 14:17:53 +00:00			`+ sock = rresvport(&p);`
			`+ if (sock < 0)`
			`+ fatal("rresvport: %.100s", strerror(errno));`
			`+ #else`
			`for (p = 1023; p > 512; p--)`
			`{`
			`sock = socket(AF_INET, SOCK_STREAM, 0);`
			`***************`
Update from ssh-1.2.19 to ssh-1.2.20. All patches applied still, I just regenerated them to fix the line numbers. Also, I added two commented out options in Makefile, one to tell sshd that a group writeable homedir is OK because all users are in their own group, and the other is to allow an unencrypted connection (which is dangerous since it can lead to compromise of keys), but on a secure network it's damn useful for backups etc. 1997-04-25 05:01:06 +00:00			`* 338,343 **`
			`--- 344,350 ----`
Have ssh use rresvport() to get a privileged socket instead of doing it itself. This means it obeys the portrange sysctl's. 1996-08-12 14:17:53 +00:00			`}`
			`fatal("bind: %.100s", strerror(errno));`
			`}`
			`+ #endif`
			`debug("Allocated local port %d.", p);`
			`}`
			`else`