hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2024-12-30 15:38:06 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
18,546 Commits 91 Branches 0 Tags 2 GiB
af20215665
Commit Graph

116 Commits

Author SHA1 Message Date
Andrey A. Chernov
d549e5cc7f Fix original patch error with ! before strncmp 
Zap only needed LD_* variables
 1995-10-20 22:17:35 +00:00
Andrey A. Chernov
b6369ff12e Don't allow LD_* env. variables to be tricked 
Submitted by: Sam Hartman <hartmans@mit.edu>
 1995-10-20 17:16:58 +00:00
Justin T. Gibbs
9d01cc32c6 Remove MAKE_EBONES conditionals. They were originally placed here because 
of missing functionality in our libkrb which is no longer a problem.
 1995-10-11 00:04:09 +00:00
Andrey A. Chernov
d6cf037780 Remove duplicated targets which now build from main tree 
if available and allowed
 1995-09-29 20:23:09 +00:00
Justin T. Gibbs
b7f41e3f67 Add TELNETOBJDIR and CRYPTOBJDIR for use in LDADD entries. This makes 
secure reference the libraries that were just build instead of in /usr/lib.
 1995-09-16 03:04:10 +00:00
Justin T. Gibbs
790136a438 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 1995-09-14 21:29:21 +00:00
Justin T. Gibbs
9d6965ac06 Enable kerberosIV authentication/encryption conditionalized on MAKE_EBONES. 
Fix up some of the des calls to be compatible with eBones.
 1995-09-14 21:29:08 +00:00
David Greenman
b834e407de sys_term.c: killed sleep(1) as this should no longer be a problem with 
the move of startslave().
telnetd.c: fix bug introduced with the move of startslave()...the number
of arguments was wrong and "level" and "user_name" had to be made globals.
 1995-09-11 21:02:02 +00:00
Paul Traina
b74fc1026f Move erase cleanup outside linemode conditional 1995-09-06 02:03:36 +00:00
Paul Traina
a06a8a9829 Avoid race condition with telnet options processing (login: prompt lost). 
Submitted by:	John Capo & Peter Wemm
 1995-09-05 19:31:06 +00:00
Paul Traina
d0d1fb6198 Set erase character for login: prompt. 
Submitted by:	Peter Wemm & John Capo
 1995-09-05 19:30:05 +00:00
Paul Traina
a4a142bd15 Do NOT compile with -DKLUDGELINEMODE...hoses many telnet clients 1995-08-28 17:55:08 +00:00
Peter Wemm
7791ac4067 Import Sendmail v8.6.12, onto the CSRG(!) branch. 
A seperate commit to fix the conflicts wil follow.
 1995-08-17 04:39:13 +00:00
Andrey A. Chernov
0a06628ab2 Comment out LDADD+=-ldescrypt, it is not yet active due to 
missng defines for krb4encpwd and rsaencpwd and missing rsa library too.
 1995-08-05 19:10:25 +00:00
Andrey A. Chernov
ba60b431ca Change default banner to FreeBSD, properly ifdefed by __FreeBSD__ 
Reviewed by:
Submitted by:
Obtained from:
 1995-08-04 00:12:08 +00:00
Mark Murray
d5fc4d2a65 After pst and ache fixed secure telnet, it was still not in the main 
makefiles. This puts it in.

PLEASE NOTE - YOU WILL NEED TO BUILD AND INSTALL THE libtelnet IN secure/
Reviewed by:
Submitted by:
Obtained from:
 1995-07-29 12:49:25 +00:00
Andrey A. Chernov
9ed77b336f Final cleanup pass through Makefiles, now this stuff 
autodetect kerberos/eBones and work even with eBones,
but with reduced functionality (don't pick up des/krb stuff
in this case)
 1995-07-24 22:55:59 +00:00
Andrey A. Chernov
dbd07ffcc0 Add -ldescrypt, or wrong crypt version can be picked from libc 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 22:01:01 +00:00
Andrey A. Chernov
6b370f4c7e Add LDADD+= -ldescrypt 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:57:58 +00:00
Andrey A. Chernov
b6c080f6bc Move -ldes under kerb stuff, my fault 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:49:06 +00:00
Andrey A. Chernov
e74d115547 Since this stuff not works with eBones, ifdef kerberos stuff 
with MAKE_KERBEROS to allow other things to live
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 21:47:30 +00:00
Andrey A. Chernov
3b901a0b79 Since this stuff not works with eBones, ifdef kerberos stuff 
with MAKE_KERBEROS to allow other things to live
Submitted by:
Obtained from:
 1995-07-24 21:38:32 +00:00
Andrey A. Chernov
4109d6bfef Add comment about new_rnd_key.c module needed from original 
libdes (and not present in eBones libdes)
 1995-07-24 21:12:57 +00:00
Andrey A. Chernov
7170827e21 Add comment about new_rbd_key.c module needed from 
original libdes
 1995-07-24 21:10:47 +00:00
Andrey A. Chernov
f8e556c37d Fix dependances, typing errors, etc. 
Note: this thing need original libdes not Eric Young libdes from eBones
Submitted by:
Obtained from:
 1995-07-24 20:40:03 +00:00
Andrey A. Chernov
2c178baa51 Point to proper DESTDIR now 
Reviewed by:
Submitted by:
Obtained from:
 1995-07-24 20:31:07 +00:00
Andrey A. Chernov
bfdd0041fc Fix many bogus things, typing error, dependance errors, etc., 
now it compiles.
Note: this stuff requires original libdes, not libdes from
Eric Yang which we have in eBones.
 1995-07-24 20:29:12 +00:00
Paul Traina
4a0834a5a2 When hostname len > 8, name replaced with dot notation when -u flag 
not specified (default case).
Use _PATH_* for utmp/wtmp.

Support for >32 PTYs.
>Submitted by:   Heikki Suonsivu <hsu@cs.hut.fi>

Plug already known security hole. (Brought over from 1.1.5):
Fixed security problem with telnetd, which allowed
   telnet -l -hcert.org localhost
to change the user's host in utmp.
Thanks to Matthew Green <mrgreen@@mame.mu.oz.au> for showing me this one.

>Reviewed by:    karl, guido
>Submitted by:   mrgreen@mame.mu.oz.au

Obtained from:	FreeBSD insecure telnetd
 1995-07-20 12:35:01 +00:00
Paul Traina
4fd39f708a The final negotiation of DO_BINARY in the LINEMODE portion of the telnetd code 
causes some clients that do not support linemode to mis-interpret the return
key (i.e. double returns).
The fix is to only do the state check for binary options if linemode will
be used.
Closes PR#505.

Submitted by:   Charles Henrich
Obtained from:	FreeBSD insecure telnetd
 1995-07-20 12:32:40 +00:00
Paul Traina
9809ff32f6 Update telnet to the 95.05.31 release. 
Obtained from:	Dave Borman <dab@cray.com>
 1995-07-20 11:40:06 +00:00
Rodney W. Grimes
5ebc7e6281 Remove trailing whitespace. 1995-05-30 06:12:45 +00:00
Jordan K. Hubbard
1b780c0e7f Argh! Another instance of DES rather than des that I forgot. Truly, 
this keyword is in too many places! :(
 1995-05-11 22:07:49 +00:00
Jordan K. Hubbard
b5260d2051 Rename secure to DES. 1995-05-09 05:22:41 +00:00
Garrett Wollman
c16b583c3c Mark Murray's authdes.c for xntpd 1995-03-23 19:09:24 +00:00
Dima Ruban
399e5b4411 Security fixes. 
CERT Advisory CA-95:03.telnet.encryption

Obtained from: CERT
 1995-02-17 03:57:00 +00:00
Jordan K. Hubbard
002feff1d6 Change name of secrdist to secure. 1995-01-14 11:32:41 +00:00
Poul-Henning Kamp
2ef260d35c Fix secrdist sharedlib bug. 1994-11-24 22:34:18 +00:00
Poul-Henning Kamp
c3cd331e8e des DISTRIBUTION became secrdist. 1994-11-22 08:03:26 +00:00
Poul-Henning Kamp
7b0a9474f1 fix libdescrypt reference. 1994-11-21 02:58:43 +00:00
Poul-Henning Kamp
f079582484 Make the "distribute" target build the "des" distribution. Make des'ed 
init and ed, by pointing to real sources.
 1994-11-14 20:45:35 +00:00
Paul Traina
448380bfbf !Just! fixing makefile, no code changes Geoff 1994-09-30 06:04:40 +00:00
Geoff Rehmet
49de41577e More elegant fix for short settings. 
(Our existing fixes already plugged the security holes involved.)
Submitted by:	Geoff Rehmet after consultation with David Burren
 1994-09-19 19:26:39 +00:00
Andrey A. Chernov
95fb75febe Add libcipher.a: libcrypt exports only crypt() but not des_setkey() 
which is in libcipher.a
 1994-09-12 17:27:55 +00:00
Rodney W. Grimes
6897a8a75d Change all references to LIBTERM and -ltermlib to LIBTERMCAP and -ltermcap 1994-09-11 21:53:28 +00:00
Geoff Rehmet
77b06a9b6c fix bogus .include 
Submitted by:	Geoff.
 1994-09-09 09:43:18 +00:00
Geoff Rehmet
daf0f855ad add libcipher to Makefile 
Submitted by:	Geoff.
 1994-09-08 19:06:58 +00:00
Geoff Rehmet
37ea1bf4c9 - Remove crypt() - it's in libcrypt 
- remove ^L's - CTM will probably choke on them
- add PRECIOUSLIB to Makefile
- name changes libcrypt -> libcipher
Submitted by:	Geoff.
 1994-09-07 21:48:54 +00:00
Geoff Rehmet
8b2981f937 Bring in the 1.1.x international libcrypt, which 
will in due course become libcipher.
Based on David Burren's FreeSEC
Submitted by:	Geoff.
 1994-09-07 21:18:08 +00:00
Paul Traina
bf8f9d53f6 Back out static hacks & build of usr.bin until Geoff informs the 
world of his master plan.

Submitted by:	pst
 1994-09-07 07:47:08 +00:00
Paul Traina
21b4fe120d Remove static in front of declarations for des_setkey and des_cipher 
so that linking against -lcrypt (-ldescrypt) will give us the good
versions instead of the stubs in libc.  (These changes need to be
made to the non-US version of libdescrypt too!)

Allow building and support for bdes program.
A bit more work still needs to be done on secure telnet.

Submitted by:	pst
 1994-09-07 07:16:52 +00:00
Geoff Rehmet
eb3ae6fd94 The telnet version with encryption in in. 
Reviewed by:	geoff.
 1994-08-27 15:48:54 +00:00
Garrett Wollman
ef17cd2157 Hopefully fix bogus permissions. 1994-08-26 23:31:11 +00:00
Garrett Wollman
52780bc5c4 Install libdescrypt.so immutable. 1994-08-26 19:03:23 +00:00
Geoff Rehmet
db5408c498 Fix afterinstall rule for generating links to the real libcrypt 
Submitted by:	Geoff
 1994-08-20 18:16:57 +00:00
Geoff Rehmet
daf079cb54 Move the telnetd with encryption to src/secure 
This needs tidying up and having makefiles sorted out later.
Reviewed by:	Geoff Rehmet
 1994-08-12 22:53:46 +00:00
Geoff Rehmet
040d596f3e Libtelnet with encryption goes walkies to src/secure/lib 
Reviewed by:	Geoff Rehmet
 1994-08-12 22:03:01 +00:00
Geoff Rehmet
f09e7cba42 when making test programs, look for libdescrypt, not libcrypt 
Submitted by:	Geoff Rehmet
 1994-08-12 21:55:04 +00:00
Geoff Rehmet
b1c75fb65d 1) don't make bdes yet 
2) fix .include in secure/lib/Makefile.inc
3) fix afterinstall rule in libcrypt/Makefile
Submitted by:	Geoff Rehmet
 1994-08-12 21:02:31 +00:00
Geoff Rehmet
7dc2bee339 Install secure/lib/libcrypt as libdescrypt, and symlink it to 
libcrypt.  There may be a little modification neede to this makefile once
we start working on tidy make world's.
Submitted by:	geoff.
 1994-08-09 18:52:52 +00:00
Geoff Rehmet
3f64ea42b6 add lib subdir 1994-08-08 17:49:22 +00:00
Geoff Rehmet
b7dd315906 add Makefiles for secure/lib. Makefile.inc just includes src/lib/Makefile.inc 
in order to get things like SHLIB_MAJOR etc.
 1994-08-08 17:42:36 +00:00
Geoff Rehmet
712ca8b499 Modify libcrypt so that the only exported symbol is _crypt(). 
Submitted by:	 Geoff Rehmet
 1994-08-08 17:29:04 +00:00
Geoff Rehmet
c4f09032cb Unecumbered securedist from FreeBSD 1.1.5.1 - sources for libcrypt. 
The next commit will remove all symbols except _crypt()
Reviewed by:	Geoff Rehmet
Submitted by:	David Burren
 1994-08-08 17:18:09 +00:00
Garrett Wollman
107fc7e35c Allow the `bdes' program to compile. 1994-08-07 19:04:10 +00:00
Garrett Wollman
0cc8ddab2b Moved from usr.bin/bdes for export-control. 1994-08-07 18:17:39 +00:00
Rodney W. Grimes
dea673e932 BSD 4.4 Lite usr.sbin Sources 1994-05-26 05:23:31 +00:00