mirror/freebsd
1
0
Fork 0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-17 10:26:15 +00:00
Code Issues Releases Activity
136,069 Commits 339 Branches 3,553 Tags 2 GiB
bfa0795b00
Commit Graph

49 Commits

Author SHA1 Message Date
Colin Percival
d16f6f5027 Add missing code needed for the detection of IPSec packet replays. [1] 
Correctly identify the user running opiepasswd(1) when the login name
differs from the account name. [2]

Security:	FreeBSD-SA-06:11.ipsec [1]
Security:	FreeBSD-SA-06:12.opie [2]
 2006-03-22 16:00:42 +00:00
Andrey A. Chernov
85ca5e684e Create /etc/opiekeys with 0600, not 0644 
PR:     84221
 2005-07-29 09:59:24 +00:00
Kris Kennaway
654cbf38df FreeBSD does not use this code, but ftpd_popen() contains a buffer overflow. 
We might as well patch it.

Submitted by:   Przemyslaw Frasunek <venglin@freebsd.lublin.pl>
PR:             bin/23352
MFC After:	The average time before an unpatched Windows 2000 server gets owned
 2003-07-13 05:59:50 +00:00
Dag-Erling Smørgrav
5da7cece45 When computing a new seed for an existing user, opienewseed() would 
incorrectly compute the length of the numeric portion of the previous
seed, causing the new seed to be one character shorter than the old
one.

This patch has been submitted to the vendor; I'm committing it right
away since the file is already off the vendor branch.

MFC after:	3 days
 2003-01-22 10:55:36 +00:00
Mark Murray
f4083b2413 Resolve conflicts. 2002-03-21 23:42:52 +00:00
Mark Murray
7b0f9607c9 This commit was generated by cvs2svn to compensate for changes in r92906, 
which included commits to RCS files with non-trunk default branches.
 2002-03-21 22:50:02 +00:00
Mark Murray
cfb697297a Vendor import of OPIE 2.4 2002-03-21 22:50:02 +00:00
Andrey A. Chernov
9df24552a0 Zeroing memset() in opiechallenge() really is not needed because it is the 
very first thing immediately following opielookup() does being entered, i.e.
look at this:

int opielookup FUNCTION((opie, principal), struct opie *opie AND char
*principal
)
{
  int i;

  memset(opie, 0, sizeof(struct opie));
...
 2002-01-24 22:19:21 +00:00
Joerg Wunsch
32eb5fea1a Make the -a flag to opiekey(1) actually work as advertised. 
Reviewed by:	ache, audit, security
MFC after:	1 week
 2002-01-09 13:36:26 +00:00
Andrey A. Chernov
57766554c6 Repo copied to /usr/src/lib/libopie/ 2002-01-03 15:58:11 +00:00
Andrey A. Chernov
eac68b24dc Add heuristic to detect SSH connection (in the same style as other 
heuristics already here which not supposed to be secure, just helpers).

Approved by:	security@ silence
 2001-08-29 13:17:02 +00:00
Mark Murray
432f97766d Fix overflow problem when giving a username that is too long. 
Also minor declaration/header fixes while auditing the code.
 2001-08-20 12:52:49 +00:00
Andrey A. Chernov
c6fa3dde62 Fix uninitialized "force" variable. 
PR:		23203
Submitted by:	fenner
Approved by:	markm
 2001-08-13 19:43:14 +00:00
Mark Murray
c7ff6083f9 Fix SHA1 hashing. 2001-07-14 08:30:54 +00:00
Mark Murray
bce9718b36 Usse a better method to get a user's credentials, as uid's may be 
legally duplicated.

Requested by:	ache
 2001-07-14 08:29:19 +00:00
Ruslan Ermilov
63914212f0 Eliminate troff(1) warnings that were hiding some useful text. 2001-07-12 14:29:59 +00:00
Andrey A. Chernov
cd01c79119 Make the similar changes as in our keyinfo, i.e. allow user to get his own 
sequence and allow root to get everybody's one. Before this change user
can't get his own sequence, root required.
 2001-06-23 04:48:59 +00:00
Kris Kennaway
18690202e2 Import patch to fix non-constant format string abuses. This patch was 
approved by the vendor and will be present in future releases.
 2001-03-05 02:54:13 +00:00
Kris Kennaway
fc03710c55 This commit was generated by cvs2svn to compensate for changes in r73569, 
which included commits to RCS files with non-trunk default branches.
 2001-03-05 02:54:13 +00:00
Kris Kennaway
88868b1649 Correct security hole in setproctitle(). We don't compile this code, but 
having the security hole there makes my skin itch.
 2000-07-10 07:30:28 +00:00
Kris Kennaway
6102159f98 Add some extra functions adapted from OpenBSD, in preparation for 
OpenSSH OPIE support.
 2000-05-15 04:20:54 +00:00
Kris Kennaway
bf1d0435ca Allow applications to disable the installation of the atexit() handler 
which cleans up OPIE lockfiles. This is required for pam_opie.

Submitted by:   Jim Bloom <bloom@acm.org>
 2000-04-17 00:01:23 +00:00
Kris Kennaway
0d845f9706 Resolve conflicts 2000-04-10 11:18:54 +00:00
Kris Kennaway
dd9cf0235c Upgrade to OPIE 2.32, from http://www.inner.net/pub/opie/ 2000-04-10 11:09:42 +00:00
Kris Kennaway
46c66b6f15 This commit was generated by cvs2svn to compensate for changes in r59118, 
which included commits to RCS files with non-trunk default branches.
 2000-04-10 11:09:42 +00:00
Chris Costello
fe93771ac9 - Use proper markup for a section header. 
- Replace nonexistent OPIE_PROMPT_MAX with OPIE_CHALLENGE_MAX

PR:		16209
Submitted by:	Tetsuro Furuya <tfuruya@ppp142197.asahi-net.or.jp>
 2000-01-19 21:54:19 +00:00
Warner Losh
a4c0f3bc90 sprintf -> snprintf 1998-09-09 17:08:46 +00:00
Bruce Evans
9f15c7ece5 Fixed printf format errors. 1998-06-30 18:06:23 +00:00
Steve Price
3630d9abff 'They They' -> 'They' 
PR:		6912
Submitted by:	Stefan Eggers <seggers@semyam.dinoco.de>
 1998-06-14 16:06:00 +00:00
Alexander Langer
c62b41d9d5 YTK fix. 1997-12-22 23:00:35 +00:00
Steve Price
f8a9ca2b82 Make this manpage reveal its true identity. A diff of these 
changes has also been sent to opie-bugs@inner.net.

PR:		5129
Submitted by:	jkh
 1997-11-27 18:10:42 +00:00
Andrey A. Chernov
b1769be32c Move locks from /etc/opielocks to /var/run/opielocks to keep 
/etc  non-writeable as possible
 1997-10-01 13:02:20 +00:00
Andrey A. Chernov
32fb311063 Add setutent.c 1997-09-29 11:31:22 +00:00
Andrey A. Chernov
6305a1fdec This commit was generated by cvs2svn to compensate for changes in r29975, 
which included commits to RCS files with non-trunk default branches.
 1997-09-29 11:31:22 +00:00
Andrey A. Chernov
14925a4bcd Oops, __END_DECLS was in wrong place 1997-09-29 10:58:53 +00:00
Andrey A. Chernov
bde4652505 Not used in this version 1997-09-29 10:42:45 +00:00
Andrey A. Chernov
4aed43db5a Moved to libopie 1997-09-29 10:38:24 +00:00
Andrey A. Chernov
e9fcc517e1 Merge 1997-09-29 10:33:14 +00:00
Andrey A. Chernov
8fd53644f9 Upgrade to 2.31 1997-09-29 08:53:38 +00:00
Andrey A. Chernov
27544d1f2f This commit was generated by cvs2svn to compensate for changes in r29964, 
which included commits to RCS files with non-trunk default branches.
 1997-09-29 08:53:38 +00:00
Paul Traina
5901e3495b Remove bits of libmissing we don't care about. 1997-09-03 08:24:28 +00:00
Paul Traina
0e904270de Update synopsis. A partial fix has also been submitted to opie@bugs@inner.net 
Submitted by:	bde
 1997-08-26 20:55:43 +00:00
Andrey A. Chernov
6d0f9ab962 Detect null secret as error, it is temp. fix until next release 
Submitted by: Craig Metz <cmetz@inner.net>
 1997-08-05 23:15:28 +00:00
Paul Traina
6234a6e16a Make OPIE's public API use BSD conventions. 1997-03-08 19:42:17 +00:00
cvs2svn
5f386f3f23 This commit was manufactured by cvs2svn to create branch 'VENDOR-opie'. 1997-02-07 03:46:29 +00:00
Paul Traina
ae7c505681 Config information for FreeBSD 1997-02-07 03:46:28 +00:00
Paul Traina
0e719bd969 Minimal man page changes to reflect integrated ftpd/login/su 1997-02-07 03:46:00 +00:00
Paul Traina
049c277a7b Disconnect OPIE from internal MD4/5 routines 1997-02-07 03:44:44 +00:00
Paul Traina
3c491303b5 Initial import of OPIE v2.3 from 
ftp://ftp.nrl.navy.mil/pub/security/opie/
 1997-02-06 17:52:29 +00:00