search for: dotat

...Dunlap <randy.dunlap at oracle.com> Cc: Jeremy Fitzhardinge <jeremy.fitzhardinge at citrix.com> Cc: Konrad Rzeszutek Wilk <konrad.wilk at oracle.com> Cc: xen-devel at lists.xensource.com (moderated for non-subscribers) Cc: virtualization at lists.osdl.org Cc: Tony Finch <dot at dotat.at> --- include/xen/privcmd.h | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) --- linux-next-20101112.orig/include/xen/privcmd.h +++ linux-next-20101112/include/xen/privcmd.h @@ -34,13 +34,10 @@ #define __LINUX_PUBLIC_PRIVCMD_H__ #include <linux/types.h> +#include <li...

...Dunlap <randy.dunlap at oracle.com> Cc: Jeremy Fitzhardinge <jeremy.fitzhardinge at citrix.com> Cc: Konrad Rzeszutek Wilk <konrad.wilk at oracle.com> Cc: xen-devel at lists.xensource.com (moderated for non-subscribers) Cc: virtualization at lists.osdl.org Cc: Tony Finch <dot at dotat.at> --- include/xen/privcmd.h | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) --- linux-next-20101112.orig/include/xen/privcmd.h +++ linux-next-20101112/include/xen/privcmd.h @@ -34,13 +34,10 @@ #define __LINUX_PUBLIC_PRIVCMD_H__ #include <linux/types.h> +#include <li...

...Dunlap <randy.dunlap at oracle.com> Cc: Jeremy Fitzhardinge <jeremy.fitzhardinge at citrix.com> Cc: Konrad Rzeszutek Wilk <konrad.wilk at oracle.com> Cc: xen-devel at lists.xensource.com (moderated for non-subscribers) Cc: virtualization at lists.osdl.org Cc: Tony Finch <dot at dotat.at> --- include/xen/privcmd.h | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) --- linux-next-20101112.orig/include/xen/privcmd.h +++ linux-next-20101112/include/xen/privcmd.h @@ -34,13 +34,10 @@ #define __LINUX_PUBLIC_PRIVCMD_H__ #include <linux/types.h> +#include <li...

...SER); - if ((stat(_PATH_PRIVSEP_CHROOT_DIR, &st) == -1) || - (S_ISDIR(st.st_mode) == 0)) - fatal("Missing privilege separation directory: %s", - _PATH_PRIVSEP_CHROOT_DIR); } /* Configuration looks good, so exit if in test mode. */ Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ FISHER GERMAN BIGHT: WESTERLY VEERING NORTHWESTERLY 4 OR 5, OCCASIONALLY 6. SHOWERS. MODERATE OR GOOD.

...> 14. [Bug 369] Inconsistant exiit status from scp > (bugzilla-daemon at mindrot.org) > 15. [Bug 369] Inconsistant exiit status from scp > (bugzilla-daemon at mindrot.org) > > --__--__-- > > Message: 1 > To: kevin at kevindegraaf.net > From: Tony Finch <dot at dotat.at> > Cc: openssh-unix-dev at mindrot.org > Subject: Re: OpenSSH 3.4p1 hostbased auth - howto? > Date: Wed, 24 Jul 2002 12:09:43 +0100 > > Kevin DeGraaf <kevin at kevindegraaf.net> wrote: > > > >5. On both machines, I created /etc/ssh/sshd_config: > > >...

...= -1) ? errno_to_portable(errno) : SSH2_FX_OK; - } + /* this will fail if 'newpath' exists */ + ret = symlink(oldpath, newpath); + status = (ret == -1) ? errno_to_portable(errno) : SSH2_FX_OK; send_status(id, status); xfree(oldpath); xfree(newpath); Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ CAPE WRATH TO RATTRAY HEAD INCLUDING ORKNEY: WEST 4 BACKING SOUTH 5 TO 7 LOCALLY GALE 8, LATER VEERING WEST TO SOUTHWEST AND DECREASING 5 OR 6. RAIN SPREADING FROM THE WEST, CLEARING LATER. GOOD DECREASING MODERATE IN RAIN. SLIGHT TO MODERATE LOCALLY ROUGH.

Greetings, cvsup.uk.FreeBSD.org is outdated. I know this is not the proper list, but which one is? -- Best Wishes, Stefan Lambrev ICQ# 24134177

...figuration option to sshd which quashes their attempts to set LD_PRELOAD etc. using ~/.ssh/environment or the environment= option in their ~/.ssh/authorized_keys files. It was generated against the OpenBSD version of OpenSSH but applies to the portable version too. Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ SOUTH UTSIRE: NORTHWEST 3 OR 4, OCCASIONALLY 5, BACKING SOUTH FOR A TIME. RAIN AT TIMES. MODERATE OR GOOD. --- sshd_config.5 9 Jul 2002 17:46:25 -0000 1.5 +++ sshd_config.5 24 Jul 2002 16:55:29 -0000 @@ -459,6 +459,21 @@ If this option is set to .Dq no root is not allow...

...elegant fashion. I did also consider creating two new directives -- one for each direction of TCP forwarding -- so that enabling them could be configured independently, but that got a bit ugly and anyway listening ports bound to localhost aren't all that dodgy. Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ NORTHWEST ROCKALL MALIN HEBRIDES: SOUTHWEST 4 OR 5 BACKING SOUTHEAST 5 OR 6, OCCASIONALLY 7 LATER. RAIN AT TIMES. MODERATE OR GOOD. --- auth-options.c 26 Jul 2002 11:02:28 -0000 1.3 +++ auth-options.c 13 Aug 2002 19:16:27 -0000 @@ -221,8 +221,6 @@ } cp = "permi...

...ControlMaster=auto Product: Portable OpenSSH Version: 4.6p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org ReportedBy: dot at dotat.at Created an attachment (id=1335) --> (http://bugzilla.mindrot.org/attachment.cgi?id=1335) Fix race in ControlMaster=auto There is a race in the setup of the ControlMaster socket in auto mode, as illustrated by the following command line: ssh -oControlMaster=auto -oControlPath=sock localho...

...if one is running then things will still work. However if for some reason the name server is running but has ACLs which only permit queries on 127.0.0.1 then sshd will hang when attempting a DNS lookup since it gets neither an ICMP port unreachable nor a response. Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ VIKING: WESTERLY VEERING NORTHWESTERLY 4 OR 5, OCCASIONALLY 6 IN WEST LATER. RAIN OR SQUALLY SHOWERS. MODERATE OR GOOD.

Hello, We are using the AllowUsers feature of sshd and would like to control which users can ask for forwarding of which ports. E.g. when the user is foo, allow him to tunnel connections to bar:5678 and baz:7654, but no shell (or some dummy shell) and no other forwardings. Is such feature planned for the future? Would you accept such patch in the mainstream distribution? I would appreciate Cc:

...n Jun 18 16:48:13 2007 +++ ssh-rand-helper.c Mon Jun 18 16:47:32 2007 @@ -31,7 +31,7 @@ #include <sys/socket.h> #include <stdarg.h> -#include <stddef.h> +#include <string.h> #include <netinet/in.h> #include <arpa/inet.h> Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ SHANNON ROCKALL: EAST OR NORTHEAST 3 OR 4, INCREASING 5 TO 7. MODERATE OR ROUGH. RAIN OR SHOWERS. MODERATE OR GOOD, OCCASIONALLY POOR.

...y = log_facility_number(optarg); if (log_level == SYSLOG_FACILITY_NOT_SET) - error("Invalid log facility \"%s\"", optarg); + fatal("Invalid log facility \"%s\"", optarg); break; case 'h': default: Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ HUMBER THAMES: SOUTHEASTERLY, VEERING SOUTHWESTERLY FOR A TIME, 3 OR 4 OCCASIONALLY 5. SLIGHT OR MODERATE. SHOWERS. MODERATE OR GOOD.

...ing in the documentation that atomic updates are not possible in this situation. Fixing rsync to update the file atomically may cause problems if the target filesystem is short on space, which is probably the reason for using the --temp-dir option in the first place. Tony. -- f.a.n.finch <dot@dotat.at> http://dotat.at/ BERWICK ON TWEED TO WHITBY: WEST OR SOUTHWEST 2 OR 3 INCREASING 3 OR 4. FAIR. GOOD. SLIGHT OR SMOOTH.

I'm curious as to whether or not there is a way to restrict forwarded ports server side. For instance, I'm running an IRC server and am allowing users to connect via ssh forwarding (so I can take advantange of using openssh's public key method for authentication). Each client I tell to setup their ~/.ssh/config in a certain way, but the relevant line is: LocalForward 6667

...control master mode. One will succeed in creating the control master socket and the other will fail and bomb. The attached patch eliminates this race by trying to create a control master socket first, and falling back to control client mode if master mode fails. Tony. -- f.a.n.finch <dot at dotat.at> http://dotat.at/ IRISH SEA: SOUTHERLY, BACKING NORTHEASTERLY FOR A TIME, 3 OR 4. SLIGHT OR MODERATE. SHOWERS. MODERATE OR GOOD, OCCASIONALLY POOR. -------------- next part -------------- --- ssh.c~ Fri Jan 5 05:30:17 2007 +++ ssh.c Fri Aug 3 19:21:18 2007 @@ -1045,18 +1045,19 @@ } }...

Hey all, on the distcc mailing list, a thread about load balancing got a bit out of hand, and we started thinking about moving fsh-like connection caching into ssh itself to get rid of the overhead of starting up the python interpreter to run rsh. (Interestingly, mit's "rex", described at http://www.lcs.mit.edu/publications/pubs/pdf/MIT-LCS-TR-884.pdf, considers connection caching

...memcpy. niels@ ok - [pty.c] namebuflen not sizeof namebuflen; bnd at ep-ag.com via djm at mindrot.org fix proto; markus - [ssh.1] typo; mark.baushke at solipsa.com - [channels.c ssh.c ssh.h sshd.c] type conflict for 'extern Type *options' in channels.c; dot at dotat.at - [sshconnect.c] move checking of hostkey into own function. - [version.h] OpenSSH-1.2.1 - Clean up broken includes in pty.c - Some older systems don't have poll.h, they use sys/poll.h instead - Doc updates 19991211 - Fix compilation on systems with AFS. Reported by...

http://bugzilla.mindrot.org/show_bug.cgi?id=377 Summary: Reduce compiler warnings. Use unsigned args to the ctype.h is*() macros. Product: Portable OpenSSH Version: -current Platform: Sparc OS/Version: Solaris Status: NEW Severity: trivial Priority: P2 Component: Miscellaneous