similar to: [Bug 1287] Use getpeerucred on Solaris

hi, Solaris doesn't have getpeereid() or SO_PEERCRED. However, getpeerucred() is perfectly usable for that; and it's in Solaris 10 and OpenSolaris. So, ssh-agent(1) security there so far depends only on permissions of the socket directory and with this patch it checks peer's credentials, too. I patched following files using a snapshot from 20060921: openssh/config.h.in

http://bugzilla.mindrot.org/show_bug.cgi?id=1287 Summary: Use getpeerucred on Solaris Product: Portable OpenSSH Version: v4.5p1 Platform: All URL: http://marc.theaimsgroup.com/?l=openssh-unix- dev&m=115919880516907&w=2 OS/Version: Solaris Status: NEW Severity: normal

http://bugzilla.mindrot.org/show_bug.cgi?id=1287 dtucker at zip.com.au changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Comment #1 from dtucker at zip.com.au 2007-03-21 21:40

On 10/3/20 1:50 PM, Richard W.M. Jones wrote: > New nbdkit_peer_pid, nbdkit_peer_uid and nbdkit_peer_gid calls can be > used on Linux (only) to read the peer PID, UID and GID from clients > connected over a Unix domain socket. This can be used in the > preconnect phase to add additional filtering. > > One use for this is to add an extra layer of authentication for local >

http://bugzilla.mindrot.org/show_bug.cgi?id=1149 Summary: Does not build on QNX Product: Portable OpenSSH Version: 4.3p1 Platform: ix86 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: bitbucket at mindrot.org ReportedBy: kraai at ftbfs.org

I've discovered a problem with OpenSSH 2.9.9p2 under Solaris 2.5.1 . In auth.c, secure_filename() walks upwards toward the user's home directory or the filesystem root, verifying that no directories along the way are group or world writable. Solaris 2.5.1's dirname() function has a bug where dirname("/.ssh") returns an empty string instead of "/". This causes

http://bugzilla.mindrot.org/show_bug.cgi?id=168 ------- Additional Comments From djm at mindrot.org 2002-04-17 12:28 ------- I don't understand the problem here: CPPFLAGS gets updated for each directory on the list with either -Idirectory or -Idirectory/include (if it exists). ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the

http://bugzilla.mindrot.org/show_bug.cgi?id=60 ------- Additional Comments From djm at mindrot.org 2002-01-14 19:28 ------- Why / where is this needed? Can you show an example of a failed build. This may be an autoconf bug. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=84 wknox at mitre.org changed: What |Removed |Added ---------------------------------------------------------------------------- Version|-current |3.0.2p1 ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=323 ------- Additional Comments From luc at suryo.com 2002-06-30 05:40 ------- A better solution is to install the pacthes that will support /dev/random and /dev/urandom. Then recompile openssl and then openssh. Solaris 8: 112438-01 patch for Sparc 112439-01 patch for x86 Solaris 9: has standard /dev/random and /dev/urandom Not sure if one can

http://bugzilla.mindrot.org/show_bug.cgi?id=605 Summary: make install don't create piddir Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P2 Component: Build system AssignedTo: openssh-bugs at mindrot.org ReportedBy:

Dear OpenSSH Developers, Thanks for all the great work on this important tool. We've built version 3.1p1 on SAPTC platforms under Solaris 2.8 using gcc 2.95.2. Several quick notes and a question: 1) There are several discrepancies between the INSTALL file on the openssh web site ftp://ftp.ca.openbsd.org/pub/OpenBSD/OpenSSH/portable/INSTALL and the output from "./configure

Hi. After I've run the configure (./configure --prefix=/usr/local --without-rsh --disable-suid-ssh --sysconfdir=/usr/local/etc --with-ssl-dir=/usr/local/ssl --with-tcp-wrappers) and want to run the make (make -d -d) script, I get this error msg: Finished prerequisites of target file `inet_aton.o'. Must remake target `inet_aton.o'. make[1]: Entering directory

Timo, I have to test something on one of the BSD, namely related to src/lib/net.c . -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca God,Queen and country!Never Satan President Republic!Beware AntiChrist rising! http://www.fullyfollow.me/rootnl2k Look at Psalms 14 and 53 on Atheism Time for Stephen to move on on Oct 19 2015!!

On Sun, Sep 27, 2015 at 12:40:40PM -0600, The Doctor wrote: > Timo, > > I have to test something on one of the BSD, namely related to src/lib/net.c . > FYI make sys/ucred.h reads #ifndef _SYS_UCRED_H_ #define _SYS_UCRED_H_ /* * Credentials. */ struct ucred { u_int cr_ref; /* reference count */ uid_t cr_uid; /* effective

On Fri, Feb 12, 2010 at 5:35 PM, Tim Rice <tim at multitalents.net> wrote: > Attached as cofig.log.gz and compile.log.gz I saw a few warnings: > "/opt/src/utils/nut-2.4.1-r2339/drivers/apcsmart.c", line 34: warning: too many struct/union initializers > "/opt/src/utils/nut-2.4.1-r2339/drivers/apcsmart.c", line 44: warning: too many struct/union initializers >

New nbdkit_peer_pid, nbdkit_peer_uid and nbdkit_peer_gid calls can be used on Linux (only) to read the peer PID, UID and GID from clients connected over a Unix domain socket. This can be used in the preconnect phase to add additional filtering. One use for this is to add an extra layer of authentication for local connections. A subsequent commit will enhance the now misnamed nbdkit-ip-filter to

When I do a ./configure in dovecot (2.2.1) I get this notice (first line): configure: WARNING: you should use --build, --host, --target Then, much later on: checking sys/ucred.h presence... yes configure: WARNING: sys/ucred.h: present but cannot be compiled configure: WARNING: sys/ucred.h: check for missing prerequisite headers? configure: WARNING: sys/ucred.h: see the Autoconf

Version 3.7p1 of OpenSSH can't be compiled on IRIX 6.5 because the file openbsd-compat/inet_ntoa.h is missing. It is possible to compile successfully using this file out of version 3.6.1p2. Heiko Heiko Schlichting | Freie Universit?t Berlin heiko at FU-Berlin.DE | Zentraleinrichtung f?r Datenverarbeitung (ZEDAT) Telefon +49 30 838-54327 | Fabeckstra?e 32 Telefax +49 30

I ran into the following problem the first time I used OpenSSH_3.6.1p2 on Solaris 8 (sparc, 32-bit): $ ssh kiwi Enter passphrase for RSA key '/net/sic/export/ford/home/eggert/.ssh/identity': getsockopt TCP_NODELAY: Socket operation on non-socket Last login: Sat May 10 14:27:01 2003 from ip-66-80-53-59.d Sun Microsystems Inc. SunOS 5.8 Generic Patch October 2001