Age | Commit message (Collapse) | Author |
|
Existing shells would be leaked.
The old check only caught multiple commands, not shells.
|
|
|
|
|
|
|
|
DROPBEAR_SVR_PUBKEY_OPTIONS
|
|
|
|
lose exit status messages
|
|
* dropbear_exit: remove priority parameter
confusion with dropbear_log()
* const parameter
|
|
For the sake of review, this commit alters only the code; the affiliated
comments within the source files also need to be updated, but doing so
now would obscure the operational changes that have been made here.
* All on/off options have been switched to the numeric `#if' variant;
that is the only way to make this `default_options.h.in' thing work
in a reasonable manner.
* There is now some very minor compile-time checking of the user's
choice of options.
* NO_FAST_EXPTMOD doesn't seem to be used, so it has been removed.
* ENABLE_USER_ALGO_LIST was supposed to be renamed DROPBEAR_USER_ALGO_LIST,
and this commit completes that work.
* DROPBEAR_FUZZ seems to be a relatively new, as-yet undocumented option,
which was added by the following commit:
commit 6e0b539e9ca0b5628c6c5a3d118ad6a2e79e8039
Author: Matt Johnston <matt@ucc.asn.au>
Date: Tue May 23 22:29:21 2017 +0800
split out checkpubkey_line() separately
It has now been added to `sysoptions.h' and defined as `0' by default.
* The configuration option `DROPBEAR_PASSWORD_ENV' is no longer listed in
`default_options.h.in'; it is no longer meant to be set by the user, and
is instead left to be defined in `sysoptions.h' (where it was already being
defined) as merely the name of the environment variable in question:
DROPBEAR_PASSWORD
To enable or disable use of that environment variable, the user must now
toggle `DROPBEAR_USE_DROPBEAR_PASSWORD'.
* The sFTP support is now toggled by setting `DROPBEAR_SFTPSERVER', and the
path of the sFTP server program is set independently through the usual
SFTPSERVER_PATH.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This change adds a -c option to dropbear, to force the session to use a
specific command, in a similar fashion to OpenSSH's ForceCommand
configuration option.
This is useful to provide a simple fixed service over ssh, without
requiring an authorized key file for the per-key forced_command option.
This setting takes precedence over the channel session's provided
command, and the per-key forced_command setting.
Signed-off-by: Jeremy Kerr <jk@ozlabs.org>
|
|
(possibly via authorized_keys(5) restrictions), even when a
pseudo-terminal has been allocated for the session. In other words,
only display the MOTD when the server starts the user's default shell.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This function is used when USE_VFORK is unset.
|
|
|
|
Client side is not complete.
|
|
and /**/ comments
|
|
|
|
|
|
|
|
|
|
if (connecting || ptys || x11) tos = LOWDELAY;
else if (tcp_forwards) tos = 0;
else tos = BULK;
TCP forwards could be either lowdelay or bulk, hence the default priority.
|
|
- Use _exit() in segv handler
|
|
time
- Set non-pty connections to bulk for client and server
|
|
|
|
--HG--
rename : random.c => dbrandom.c
rename : random.h => dbrandom.h
|
|
|
|
Try to read from /dev/urandom multiple times, take input from extra sources,
and use /dev/random when generating private keys
|
|
Got rid of ENABLE_AGENTFWD macro.
|
|
It makes it a bit more obvious why there's a test there since HAVE_FORK
is the normal case.
|
|
|
|
|
|
|
|
|
|
the original_command into chansess struct since that makes more sense
|
|
--HG--
extra : convert_revision : 8845727a7e2b096015dbb76d8f3df13c9acee7da
|
|
--HG--
extra : convert_revision : 8a608f0ed5e4b491dba4bf330e560636ec7376fd
|
|
--HG--
extra : convert_revision : 997e53cec7a9efb7413ac6e17b6be60a5597bd2e
|
|
--HG--
extra : convert_revision : a014a978f213e6ff424e7d10794ae426375f3191
|
|
once we've forked (the connection socket has been closed).
Fixes inetd mode.
--HG--
extra : convert_revision : 7d5d152ec84fb11a188966c1400d213c908cc511
|