[Bug 2130] Bugs intended to be fixed in 6.4
https://bugzilla.mindrot.org/show_bug.cgi?id=2130 Damien Miller d...@mindrot.org changed: What|Removed |Added Depends on|1644| -- You are receiving this mail because: You are watching the assignee of the bug. You are watching the reporter of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 1644] Allow ip options except source routing
https://bugzilla.mindrot.org/show_bug.cgi?id=1644 Damien Miller d...@mindrot.org changed: What|Removed |Added Blocks|2130| --- Comment #21 from Damien Miller d...@mindrot.org --- Removing this from consideration for release until comment #17 is resolved. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2076] Bugs intended to be fixed in 6.3
https://bugzilla.mindrot.org/show_bug.cgi?id=2076 Bug 2076 depends on bug 1988, which changed state. Bug 1988 Summary: ControlPersist causes stderr to be left open until the master connection times out https://bugzilla.mindrot.org/show_bug.cgi?id=1988 What|Removed |Added Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching the assignee of the bug. You are watching the reporter of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2126] ISP bogus NX records override configuration Host
https://bugzilla.mindrot.org/show_bug.cgi?id=2126 Damien Miller d...@mindrot.org changed: What|Removed |Added Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #3 from Damien Miller d...@mindrot.org --- If you can get a debug trace from unpatched OpenSSH showing this issue then please reopen this bug. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2130] Bugs intended to be fixed in 6.4
https://bugzilla.mindrot.org/show_bug.cgi?id=2130 Darren Tucker dtuc...@zip.com.au changed: What|Removed |Added Depends on|1988| -- You are receiving this mail because: You are watching the assignee of the bug. You are watching the reporter of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2076] Bugs intended to be fixed in 6.3
https://bugzilla.mindrot.org/show_bug.cgi?id=2076 Darren Tucker dtuc...@zip.com.au changed: What|Removed |Added Depends on||1988 -- You are receiving this mail because: You are watching the assignee of the bug. You are watching the reporter of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2126] ISP bogus NX records override configuration Host
https://bugzilla.mindrot.org/show_bug.cgi?id=2126 --- Comment #4 from Darren Tucker dtuc...@zip.com.au --- (In reply to Damien Miller from comment #3) If you can get a debug trace from unpatched OpenSSH showing this issue then please reopen this bug. Also the fragment of ssh_config or ~/.ssh/config that you're using. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2140] Capsicum support for FreeBSD 10 (-current)
https://bugzilla.mindrot.org/show_bug.cgi?id=2140
--- Comment #1 from Damien Miller d...@mindrot.org ---
Comment on attachment 2326
-- https://bugzilla.mindrot.org/attachment.cgi?id=2326
openssh-capsicum
Looks good - a couple of small things.
Index: sandbox-capsicum.c
===
RCS file: sandbox-capsicum.c
diff -N sandbox-capsicum.c
--- /dev/null 1 Jan 1970 00:00:00 -
+++ sandbox-capsicum.c 7 Aug 2013 19:39:21 -
@@ -0,0 +1,90 @@
+
Please add a license block here.
http://www.openbsd.org/cgi-bin/cvsweb/src/share/misc/license.template?rev=1.3;content-type=text%2Fplain
is our preferred one.
+/* Capsicum sandbox that sets zero nfiles, nprocs and filesize rlimits,
+ * limits file descriptors on monitoring object,
+ * and switches to capability mode
+*/
Minor style nit. The first line of a multiline comment should be /*
by itself.
The last line's '*' should be aligned to the previous line's (i.e. add
a space at the start of the line).
+struct ssh_sandbox {
+ struct monitor *monitor;
This isn't used and can be removed.
+extern struct monitor *pmonitor;
This can go too.
+ box-monitor = pmonitor;
and this.
+ if (cap_rights_limit(box-monitor-m_recvfd, CAP_READ | CAP_WRITE) ==
-1)
+ fatal(%s: failed to limit the network socket, __func__);
+ if (cap_rights_limit(box-monitor-m_log_sendfd, CAP_WRITE) == -1)
+ fatal(%s: failed to limit the logging socket, __func__);
Are there any other fds open at this point? How about 0, 1 and 2 -
could they be limited?
--
You are receiving this mail because:
You are watching the assignee of the bug.
___
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 172] Add multiple AuthorizedKeyFiles options
https://bugzilla.mindrot.org/show_bug.cgi?id=172 Damien Miller d...@mindrot.org changed: What|Removed |Added CC||wa...@debian.org --- Comment #13 from Damien Miller d...@mindrot.org --- *** Bug 1684 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are the assignee for the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2130] Bugs intended to be fixed in 6.4
https://bugzilla.mindrot.org/show_bug.cgi?id=2130 Damien Miller d...@mindrot.org changed: What|Removed |Added Depends on||2140 -- You are receiving this mail because: You are watching the assignee of the bug. You are watching the reporter of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2123] does not seem to support sftp protocol version 5 rename flag for overwriting files
https://bugzilla.mindrot.org/show_bug.cgi?id=2123 Damien Miller d...@mindrot.org changed: What|Removed |Added CC||d...@mindrot.org Status|NEW |RESOLVED Resolution|--- |WORKSFORME --- Comment #4 from Damien Miller d...@mindrot.org --- Closing: this looks like a bug in ruby-net-ssh rather than sftp-server. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2130] Bugs intended to be fixed in 6.4
https://bugzilla.mindrot.org/show_bug.cgi?id=2130 Bug 2130 depends on bug 2139, which changed state. Bug 2139 Summary: re-exec fallback problem https://bugzilla.mindrot.org/show_bug.cgi?id=2139 What|Removed |Added Status|RESOLVED|REOPENED Resolution|FIXED |--- -- You are receiving this mail because: You are watching the assignee of the bug. You are watching the reporter of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2139] re-exec fallback problem
https://bugzilla.mindrot.org/show_bug.cgi?id=2139 Damien Miller d...@mindrot.org changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|FIXED |--- --- Comment #5 from Damien Miller d...@mindrot.org --- Hang on - the patch hasn't been committed yet. We'll close the bug once it is in. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2139] re-exec fallback problem
https://bugzilla.mindrot.org/show_bug.cgi?id=2139 Damien Miller d...@mindrot.org changed: What|Removed |Added Attachment #2339|0 |1 is obsolete|| --- Comment #6 from Damien Miller d...@mindrot.org --- Created attachment 2347 -- https://bugzilla.mindrot.org/attachment.cgi?id=2347action=edit Revised diff Revised diff - this closes the original startup_pipe after checking it hasn't already landed at the fd number we want to inhabit. Could you please test this one? -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 1821] Public part of authorized user credentials cannot be exposed within session
https://bugzilla.mindrot.org/show_bug.cgi?id=1821 Damien Miller d...@mindrot.org changed: What|Removed |Added CC||d...@mindrot.org Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #1 from Damien Miller d...@mindrot.org --- *** This bug has been marked as a duplicate of bug 2054 *** -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[Bug 2054] Environment fails to provide cryptographic identity of remote party
https://bugzilla.mindrot.org/show_bug.cgi?id=2054 Damien Miller d...@mindrot.org changed: What|Removed |Added CC||frbrgeo...@gmail.com --- Comment #6 from Damien Miller d...@mindrot.org --- *** Bug 1821 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. ___ openssh-bugs mailing list openssh-bugs@mindrot.org https://lists.mindrot.org/mailman/listinfo/openssh-bugs
