search for: privsep_path

Outside the pre-auth patch by Markus to fix Cygwin and a few other platforms. SEND ME (privately) ANY required patch against the lastest snapshot. I'm doing the final commits this evening. Patches that have been temporary rejected for this release. - Owl's full patch for SysV Shm if mmap fails - mmap() on /dev/zero - mmap() on sparse file .. Not looked at the BSD/OS 5.0 patch

...t;$LIBS $KLIBS $K5LIBS" # Looking for programs, paths and files -AC_ARG_WITH(rsh, - [ --with-rsh=PATH Specify path to remote shell program ], - [ - if test "x$withval" != "$no" ; then - rsh_path=$withval - fi - ], - [ - AC_PATH_PROG(rsh_path, rsh) - ] -) PRIVSEP_PATH=/var/empty AC_ARG_WITH(privsep-path, @@ -1835,9 +1822,6 @@ AC_DEFINE_UNQUOTED(XAUTH_PATH, "$xauth_path") XAUTH_PATH=$xauth_path AC_SUBST(XAUTH_PATH) -fi -if test ! -z "$rsh_path" ; then - AC_DEFINE_UNQUOTED(RSH_PATH, "$rsh_path") fi # Check for mail director...

...==================== RCS file: /var/cvs/openssh/acconfig.h,v retrieving revision 1.139 diff -u -r1.139 acconfig.h --- acconfig.h 24 Jun 2002 16:26:49 -0000 1.139 +++ acconfig.h 25 Jun 2002 00:15:54 -0000 @@ -355,6 +355,9 @@ /* Path that unprivileged child will chroot() to in privep mode */ #undef PRIVSEP_PATH +/* Define if you have the `mmap' function that supports MAP_ANON|SHARED */ +#undef HAVE_MMAP_ANON_SHARED + @BOTTOM@ /* ******************* Shouldn't need to edit below this line ************** */ Index: configure.ac =================================================================== RC...

Hi, the following patch explicitely sets the permissions on /var/empty to 755 when running the ssh-host-config script on Cygwin. I never thought it would be necessary but apparently there are actually users working with a umask of 0. Sigh. Corinna Index: contrib/cygwin/ssh-host-config =================================================================== RCS file:

http://bugzilla.mindrot.org/show_bug.cgi?id=605 Summary: make install don't create piddir Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: Build system AssignedTo: openssh-bugs at mindrot.org ReportedBy:

...akefile.in --- Makefile.in 24 Feb 2010 07:18:51 -0000 1.306 +++ Makefile.in 9 Mar 2010 13:33:06 -0000 @@ -255,20 +255,20 @@ install-files: $(srcdir)/mkinstalldirs $(DESTDIR)$(mandir)/$(mansubdir)8 $(srcdir)/mkinstalldirs $(DESTDIR)$(libexecdir) (umask 022 ; $(srcdir)/mkinstalldirs $(DESTDIR)$(PRIVSEP_PATH)) - $(INSTALL) -m 0755 $(STRIP_OPT) ssh $(DESTDIR)$(bindir)/ssh - $(INSTALL) -m 0755 $(STRIP_OPT) scp $(DESTDIR)$(bindir)/scp - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-add $(DESTDIR)$(bindir)/ssh-add - $(INSTALL) -m 0755 $(STRIP_OPT) ssh-agent $(DESTDIR)$(bindir)/ssh-agent - $(INSTALL) -m 0755 $(STRIP_...

.../test_helper/libtest_helper.a \ -lssh -lopenbsd-compat -lssh -lopenbsd-compat $(LIBS) diff --git a/contrib/cygwin/Makefile b/contrib/cygwin/Makefile index a0261f4..89c7dfd 100644 --- a/contrib/cygwin/Makefile +++ b/contrib/cygwin/Makefile @@ -14,8 +14,6 @@ inetdefdir=$(defaultsdir)/inetd.d PRIVSEP_PATH=/var/empty INSTALL=/usr/bin/install -c -DESTDIR= - all: @echo @echo "Use \`make cygwin-postinstall DESTDIR=[package directory]'" diff --git a/deattack.c b/deattack.c index e76481a..e5193db 100644 --- a/deattack.c +++ b/deattack.c @@ -97,7 +97,7 @@ check_crc(const u_char *S, co...

I just upgraded to OpenSSH3.2.3p1 as it seemed that UsePrivilegeSeparation yes might help with my problem (connections forwarded are owned by root instead of the user I logged in as on the server), but instead, sshd barfs on receiving a connection. Without UsePrivilegeSeparation the server works fine. # strace -o /tmp/sshd.str sshd -d debug1: sshd version OpenSSH_3.2.3p1 debug1: private host

..._LOGIN */ /* #undef HAVE_GETOPT_OPTRESET */ /* #undef MISSING_NFDBITS */ /* #undef MISSING_HOWMANY */ /* #undef MISSING_FD_MASK */ /* #undef SMARTCARD */ /* #undef USE_SECTOK */ /* #undef USE_OPENSC */ #define OPENSSL_PRNG_ONLY 1 /* #undef WITH_ABBREV_NO_TTY */ /* #undef SUPERUSER_PATH */ /* #undef PRIVSEP_PATH */ /* #undef DISABLE_FD_PASSING */ #define HAVE_STRICT_MKSTEMP 1 #define HAVE_NANOSLEEP 1 /* #undef SSHD_ACQUIRES_CTTY */ /* #undef BROKEN_CMSG_TYPE */ #define LINK_OPNOTSUPP_ERRNO EPERM /* #undef LOCKED_PASSWD_STRING */ #define LOCKED_PASSWD_PREFIX "!" /* #undef LOCKED_PASSWD_SUBSTR */ /...

...debug2("mac_setup: found %s", name); --- openssh-4.7p1/Makefile.in Tue Dec 18 02:42:38 2007 +++ openssh-4.7p1/Makefile.in Tue Dec 18 02:42:21 2007 @@ -18,6 +18,7 @@ piddir=@piddir@ srcdir=@srcdir@ top_srcdir=@top_srcdir@ +ssldir=@ssldir@ DESTDIR= VPATH=@srcdir@ @@ -29,6 +30,7 @@ PRIVSEP_PATH=@PRIVSEP_PATH@ SSH_PRIVSEP_USER=@SSH_PRIVSEP_USER@ STRIP_OPT=@STRIP_OPT@ +FIPS_MODE=@FIPS_MODE@ PATHS= -DSSHDIR=\"$(sysconfdir)\" \ -D_PATH_SSH_PROGRAM=\"$(SSH_PROGRAM)\" \ @@ -252,12 +254,18 @@ $(srcdir)/mkinstalldirs $(DESTDIR)$(libexecdir) (umask 022 ; $(srcdir)/mk...

...++ Makefile 2003-10-30 15:15:07.277580000 +0100 @@ -0,0 +1,56 @@ +srcdir=../.. +prefix=/usr +exec_prefix=$(prefix) +bindir=$(prefix)/bin +datadir=$(prefix)/share +docdir=$(datadir)/doc +sshdocdir=$(docdir)/openssh +cygdocdir=$(docdir)/Cygwin +sysconfdir=/etc +defaultsdir=$(sysconfdir)/defaults/etc +PRIVSEP_PATH=/var/empty +INSTALL=/usr/bin/install -c + +DESTDIR= + +all: + @echo + @echo "Use \`make cygwin-postinstall DESTDIR=[package directory]'" + @echo "Be sure having DESTDIR set correctly!" + @echo + +move-config-files: $(DESTDIR)$(sysconfdir)/ssh_config $(DESTDIR)$(sysconfdir)/s...

...CKAGE_NAME='OpenSSH' PACKAGE_STRING='OpenSSH Portable' PACKAGE_TARNAME='openssh' PACKAGE_VERSION='Portable' PATH_GROUPADD_PROG='groupadd' PATH_PASSWD_PROG='/usr/bin/passwd' PATH_SEPARATOR=':' PATH_USERADD_PROG='useradd' PERL='' PRIVSEP_PATH='/var/empty' PROG_ARP='/cygdrive/c/WINDOWS/system32/arp' PROG_DF='/bin/df' PROG_IFCONFIG='undef' PROG_IPCS='/bin/ipcs' PROG_JSTAT='undef' PROG_LAST='undef' PROG_LASTLOG='undef' PROG_LS='/bin/ls' PROG_NETSTAT='/cygdrive/c/WI...

Hi, The main (and probably the only) use case of this PAM module is to let sudo authenticate users via their ssh-agent, therefore without having to type any password and without being tempted to use the NOPASSWD sudo option for such convenience. The principle is originally implemented by an existing module [0][1] and many pages that explain how to use it for such purpose can be found online.

http://bugzilla.mindrot.org/show_bug.cgi?id=601 Summary: configure script doesen't setup preprocessor flags properly Product: Portable OpenSSH Version: 3.6.1p2 Platform: Sparc OS/Version: Solaris Status: NEW Severity: major Priority: P2 Component: Build system AssignedTo: