hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-12-21 08:24:10 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
12,672 Commits 91 Branches 0 Tags 2 GiB
6a076cdd9a
Commit Graph

126 Commits

Author SHA1 Message Date
Andrey A. Chernov
e7f2f8f46c Kill gets() found 1996-02-23 03:01:53 +00:00
Andrey A. Chernov
9b3a4c562d Fix weak random number hole 
Obtained from: CERT
 1996-02-21 21:40:14 +00:00
Mark Murray
351549a1e4 Fixes to allow eBones to properly bootstrap in a release environment 
Submitted by:	joerg
 1996-02-14 19:32:53 +00:00
Mark Murray
8bf3e8a486 Remove the old DES library from the bootstrap: target 
Found by: Joerg
 1996-02-13 12:25:32 +00:00
Mark Murray
4c2a9deca2 Remove the old DES library man pages from the make. This whole directory 
actually needs to be deleted and the man pages moved to eBones/lib.
 1996-02-11 11:46:37 +00:00
Mark Murray
4d463f945c The new des library has its own man pages. Trash this old one. 1996-02-11 11:44:14 +00:00
Mark Murray
21ab456bea Push the old des library into the attic (finally!). Also update 
headers to put des.h in <des.h> not <kerberosIV/des.h>.
 1996-02-11 08:52:29 +00:00
Mark Murray
9e084cdbbc Rename des_set_key -> des_set_key_krb. This was a name conflict with a 
documented routine in libdes.
 1996-02-03 11:40:16 +00:00
Peter Wemm
a5b996a7ec recording cvs-1.6 file death 1995-12-30 19:02:48 +00:00
Andrey A. Chernov
7c2f9a038e Fix typo in bind argument 
Submitted by: gibbs
 1995-12-24 12:02:34 +00:00
Andrey A. Chernov
f43072706a Shut compiler warning 1995-12-23 22:02:13 +00:00
Mark Murray
f92b5f0f32 After some more investigation I found that I can build a release from scratch 
by just adding the following patch. I think this is much cleaner than my
previous patch that changed release/Makefile allthough I still think we can
add the -DNOMAN in some places. :-)

John
--
Submitted by:John.Hay@csir.co.za
 1995-11-21 06:35:37 +00:00
Mark Murray
e7ade28530 Bring Jordan's 2.1 dependancy fixes into current. 
Incorporate some dependancy fixes from John Hay
Submitted by:	jkh, John Hay<jhay@mikom.csir.co.za>
 1995-11-12 08:13:23 +00:00
Mark Murray
9d38201e5d Add the man directory to the SUBDIR list - some pages were bing lost. 
Thes pages will move for 2.2.

Please put this in 2.1
 1995-11-01 13:38:22 +00:00
Andrey A. Chernov
a18c0b455a Remove LD_NOSTD_PATH unsetenv, it isn't exist anymore 1995-10-24 06:52:36 +00:00
Andrey A. Chernov
d549e5cc7f Fix original patch error with ! before strncmp 
Zap only needed LD_* variables
 1995-10-20 22:17:35 +00:00
Andrey A. Chernov
b6369ff12e Don't allow LD_* env. variables to be tricked 
Submitted by: Sam Hartman <hartmans@mit.edu>
 1995-10-20 17:16:58 +00:00
Justin T. Gibbs
9d01cc32c6 Remove MAKE_EBONES conditionals. They were originally placed here because 
of missing functionality in our libkrb which is no longer a problem.
 1995-10-11 00:04:09 +00:00
Justin T. Gibbs
24d6908188 Bump SHLIB_MINOR for krb_get_local_addr() and krb_bind_local_addr() 1995-10-06 17:37:54 +00:00
Justin T. Gibbs
f4390542d7 Kerberos can now deal with multi-homed clients. 
Kerberos obtains a network address for the local host from the routing
tables and uses it consistently for all Kerberos transactions.  This ensures
that packets only leave the *authenticated* interface.  Clients who open
and use their own sockets for encrypted or authenticated correspondance
to kerberos services should bind their sockets to the same address as that
used by kerberos.  krb_get_local_addr() and krb_bind_local_addr() allow
clients to obtain the local address or bind a socket to the local address
used by Kerberos respectively.

Reviewed by: Mark Murray <markm>, Garrett Wollman <wollman>
Obtained from: concept by Dieter Dworkin Muller <dworkin@village.org>
 1995-10-05 21:30:21 +00:00
Justin T. Gibbs
e2bfbbc955 Add -L paths for all locally built eBones libraries. Many of the programs 
already did this, but this catches the straglers.
 1995-09-26 02:36:08 +00:00
Justin T. Gibbs
69c1a301a3 Remove duplicate rkinit_err.c entry in the SRCS line. 1995-09-24 02:33:42 +00:00
Mark Murray
fce03bf4b4 Correct a lie in the man pages: /etc/athena/srvtab -> /etc/kerberosIV/srvtab 1995-09-17 07:58:21 +00:00
Justin T. Gibbs
2157145c1e The problem. If the first request to kerberos is not a ticket 
request, it cores due to using the unitialized global req_name_ptr
pointer.  -Wall does not reveal this.

Repeat by having an old valid ticket and start kerberos.  rsh to
a non-realm system.

Also intialize lifetime to DEFAULT_TKT_LIFE and kerno to KSUCCESS since
they can be refernced before being initialized.

Submitted by:	John Capo <jc@irbs.com>
 1995-09-17 00:39:00 +00:00
Justin T. Gibbs
adad30bca2 Fix printf formatting error %ls -> %s. 1995-09-16 23:11:25 +00:00
Mark Murray
87c66f4cc7 Bring in a hand written replacement for MIT's file of the same name. 
Reviewed by:Justin Gibbs
 1995-09-16 20:44:27 +00:00
Justin T. Gibbs
b7f41e3f67 Add TELNETOBJDIR and CRYPTOBJDIR for use in LDADD entries. This makes 
secure reference the libraries that were just build instead of in /usr/lib.
 1995-09-16 03:04:10 +00:00
Justin T. Gibbs
aee030f52c Integrate rkinit into the build. 1995-09-15 06:20:48 +00:00
Justin T. Gibbs
dabcad5f04 Integrate rkinitd into the build. 1995-09-15 06:20:38 +00:00
Justin T. Gibbs
1d36423686 Fix this file for the last time. My last diff was screwed up. 1995-09-15 06:20:23 +00:00
Justin T. Gibbs
95081b095a Integrate librkinit into the build. 1995-09-15 06:19:31 +00:00
Justin T. Gibbs
d61b48d4da Header files for the rkinit suite. 1995-09-15 06:19:14 +00:00
Justin T. Gibbs
1a5eab9072 Fix the most blatant -Wall errors. 1995-09-15 06:18:56 +00:00
Justin T. Gibbs
c344ca9395 Server side of the rkinit package. 
Obtained from: MIT
 1995-09-15 06:13:43 +00:00
Justin T. Gibbs
43dcd8e508 Rkinit allows you to safely forward tickets to other kerberos hosts. 
Obtained from: MIT
 1995-09-15 06:11:53 +00:00
Justin T. Gibbs
b00d18e592 MIT's librkinit. Part of the rkinit suite. Rkinit allows you to forward 
tickets to other kerberos hosts safely in one easy step.
 1995-09-15 06:09:30 +00:00
Justin T. Gibbs
790136a438 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 1995-09-14 21:29:21 +00:00
Justin T. Gibbs
9d6965ac06 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 
Fix up some of the des calls to be compatible with eBones.
 1995-09-14 21:29:08 +00:00
Justin T. Gibbs
075a578e23 Prototypes for the function in new_rnd_key.c from the mit des library. 1995-09-14 21:12:42 +00:00
Justin T. Gibbs
828e0c47c8 Bring in new_rnd_key.c from the mit des library. This gives folks in the 
U.S. the ability to build a secure telnet.  Mark is already working on
emultating these function in the export tree, but it will be a while yet.

Kill MISSING since the missing functions are here now.
 1995-09-14 21:12:16 +00:00
Justin T. Gibbs
794087e9b8 Bring back the multi-homed server fixes from revision 1.6. They got 
klobered when the formating changes were "undone".
 1995-09-14 20:58:35 +00:00
Justin T. Gibbs
a7c8d68774 Forgot to bring this patch over. 1995-09-14 19:52:28 +00:00
Justin T. Gibbs
a032b44df6 Fix a few problems with the depend target. 
Pointed out by: Mark Murray <markm>
 1995-09-14 18:16:18 +00:00
Justin T. Gibbs
f3ebe76761 Bmake fixes for eBones. 1995-09-14 04:11:21 +00:00
Justin T. Gibbs
8fbd000c5d Don't cast die with (__sighandler_t *) when its passed to signal(). Instead 
have die take an int arg that it never uses.
 1995-09-14 04:08:58 +00:00
Justin T. Gibbs
a7c207ecf4 Bmake fixes for the eBones tree. 1995-09-14 04:06:18 +00:00
Justin T. Gibbs
b30c068c58 Actually install des.h. We haven't been for a while now. 1995-09-14 04:04:24 +00:00
Justin T. Gibbs
20e8750f5e des_check_key_parity and des_fixup_key_parity go by other names in eBones' 
des.  I've added #defines for them, so they are no longer "missing".
 1995-09-14 04:02:38 +00:00
Justin T. Gibbs
ccf0ac68a9 Bring back Makefile.inc and give it a better rules for dealing with the 
.et files.
 1995-09-14 04:00:59 +00:00
Mark Murray
c103e9bd14 added Makefile.inc in the necessary places. 
Pointed out by: Garrett Wollman
Obtained from: equivalent directoies rooted in src/
 1995-09-13 17:47:41 +00:00