summaryrefslogtreecommitdiffstats
path: root/src/appl/bsd/login.c
Commit message (Collapse)AuthorAgeFilesLines
* Unbundle applications into separate repositoryGreg Hudson2009-11-221-1930/+0
| | | | | | | | | | | | | | | Remove libpty, gssftp, telnet, and the bsd applications from the source tree, build system, and tests. Docs still need to be updated to remove mentions of the applications. The build system should be simplified now that we're down to one configure script and don't need some of the functionality currently in aclocal.m4. ticket: 6583 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23305 dc483132-0cff-0310-8789-dd5450dbe970
* make mark-cstyleTom Yu2009-10-311-19/+19
| | | | | | make reindent git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23100 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb4 support in the applications. login's ability to run aklogGreg Hudson2008-12-151-595/+20
| | | | | | | | | | | | has been preserved and made unconditional on krb4 support, since aklog can now do krb5 auth. The config variable is now named krb_run_aklog (as it was sometimes documented), not krb4_run_aklog as it previously was. ticket: 6303 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21450 dc483132-0cff-0310-8789-dd5450dbe970
* Convert many uses of sprintf to snprintf or asprintfGreg Hudson2008-12-011-5/+6
| | | | | | | ticket: 6200 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21258 dc483132-0cff-0310-8789-dd5450dbe970
* Use strlcpy instead of strcpy in many placesGreg Hudson2008-10-241-1/+1
| | | | | | | ticket: 6200 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20919 dc483132-0cff-0310-8789-dd5450dbe970
* Use strdup in place of malloc/strcpy in many placesGreg Hudson2008-10-201-2/+1
| | | | | | | ticket: 6200 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20898 dc483132-0cff-0310-8789-dd5450dbe970
* fix MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilitiesTom Yu2006-08-081-1/+4
| | | | | | | | | | | | | | | | | | | * src/appl/gssftp/ftpd/ftpd.c (getdatasock, passive): * src/appl/bsd/v4rcp.c (main): * src/appl/bsd/krcp.c (main): * src/appl/bsd/krshd.c (doit): * src/appl/bsd/login.c (main): * src/clients/ksu/main.c (sweep_up): * src/lib/krb4/kuserok.c (kuserok): Check return values from setuid() and related functions to avoid privilege escalation vulnerabilities. Fixes MITKRB5-SA-2006-001. [CVE-2006-3083, VU#580124, CVE-2006-3084, VU#401660] ticket: new target_version: 1.5.1 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18420 dc483132-0cff-0310-8789-dd5450dbe970
* In verify_krb_v4_tgt, use an unsigned KRB4_32 to store an address ratherRuss Allbery2006-06-201-1/+1
| | | | | | | | | | | | than an unsigned long to avoid memcpying past the end of a structure on 64-bit platforms. Ticket: 581 Version_Reported: 1.0.5 Target_Version: 1.5 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18175 dc483132-0cff-0310-8789-dd5450dbe970
* * krlogind.c (doit): Change 0 to (char*)NULL in execl* calls. Patch providedKen Raeburn2005-04-061-1/+1
| | | | | | | | | | | by Michael Calmer. * krshd.c (doit): Likewise. * login.c (main): Likewise. ticket: 3000 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17165 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Don't overwrite "PATH" environment variable ifTom Yu2004-09-081-1/+1
| | | | | | | | | it's already set. ticket: 427 version_reported: 1.0.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16731 dc483132-0cff-0310-8789-dd5450dbe970
* Big step towards integrating libkrb524 into libkrb5:Ken Raeburn2003-05-241-7/+0
| | | | | | | | | | | | | | | | | | | | | | | Move libkrb524 code, including error table, into libkrb5. Now libkrb5 initialization pulls in the krb524 error table, so krb524_init_ets is gone; all calls deleted. Move krb4 life/time conversion functions into libkrb5 under new names, using accessor hooks to get at them from libkrb4. Move declarations from krb524.h into krb5.h, k5-int.h, or krb524d.h; the last doesn't get copied into the include directory. Changed inclusions of krb524.h to the appropriate files, if any were needed. Rebuilt dependencies in Makefiles. These changes are likely to break the Windows build; I'll look into that soon. ticket: 1491 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15491 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Don't zero out terminal window sizeTom Yu2003-02-051-6/+0
| | | | | | ticket: 697 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15156 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (dofork): Don't dissociate from controlling tty in theTom Yu2003-02-041-32/+28
| | | | | | | | | | | parent, since the parent needs to remain the session leader so it can tell when the tty gets hung up. Make the child wait for the parent to set up a SIGHUP handler to ensure that cleanup happens properly. ticket: 608 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15148 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Initialize 'hostname'Ken Raeburn2003-01-311-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15138 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (try_krb4): Delete unused krb5 principal name argument.Ken Raeburn2003-01-311-3/+2
| | | | | | | | (main): Don't pass it. ticket: 479 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15137 dc483132-0cff-0310-8789-dd5450dbe970
* Only system headers should declare errnoSam Hartman2003-01-051-1/+1
| | | | | | | | | | | | | Many parts of krb5 declare errno in source files using extern int errno. This has not been needed in ANSI C for a long time, and actively breaks modern versions of glibc. So these declarations are removed and errno.h included where necessary. Ticket: new Component: krb5-build git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15082 dc483132-0cff-0310-8789-dd5450dbe970
* This commit fixes up the in-tree callers of krb5_read_password() andTom Yu2002-11-061-1/+1
| | | | | | | | | | des_read_password(). We should perhaps tighten up the test suite now. ticket: 1217 status: open target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14972 dc483132-0cff-0310-8789-dd5450dbe970
* * login.M: added information about different command line options;Jen Selby2002-07-091-7/+4
| | | | | | | changed defaults given for tags that did not match code * login.c: changed inaccurate comments git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14625 dc483132-0cff-0310-8789-dd5450dbe970
* update commentKen Raeburn2002-03-081-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14258 dc483132-0cff-0310-8789-dd5450dbe970
* revert accidental checkin of unfinished changesKen Raeburn2002-03-081-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14257 dc483132-0cff-0310-8789-dd5450dbe970
* (kcmd_connect): copy out correct remote address to callerKen Raeburn2002-03-081-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14256 dc483132-0cff-0310-8789-dd5450dbe970
* changes from 1.2.4 branchKen Raeburn2002-03-071-4/+13
| | | | | | | | | | | * loginpaths.h [_PATH_DEFPATH]: Undefine LPATH and RPATH unconditionally before redefining them. * login.c (main): If the supplied name is longer than the utmp buffer, don't bother trying it as a username. (dolastlog): Don't assume lastlog.ll_time is a time_t. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14234 dc483132-0cff-0310-8789-dd5450dbe970
* * krcp.c, krlogin.c, krlogind.c, krsh.c, krshd.c, login.c,Ezra Peisach2001-12-061-1/+1
| | | | | | | | | | | | | | setenv.c, v4rcp.c: Signed v.s unsigned int cleanup. * defines.h: rcmd_stream_{read,write} take size_t as length argument. * kcmd.c: Use GETSOCKNAME_ARG3_TYPE instead of assuming int. input and output handler take size_t as length argument instead of int. Other signed vs. unsigned fixes. * configure.in: Add KRB5_GETSOCKNAME_ARGS. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14050 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (sigint): Declare staticEzra Peisach2001-07-081-2/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13583 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Link krshd with KRSHDLIBS instead of LOGINLIBSEzra Peisach2001-07-061-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | * configure.in: Creare a new variable KRSHDLIBS which differs from LOGINLIBS by not including libkrb524.a. Test for getenv. * krcp.c: Prototype lostconn(). * krlogind.c: Provide prototype for signal handler cleanup. Implied need to add extra argument to function - ensure consistant calling. * krsh.c: Provide prototype for signal handler sendsig. * krshd.c: Rewrite error() to use stdargs/varargs. (doit): When creating a tty name using getpid. Ensure that does not overflow tty string buffer. * login.c: Provide prototype for signal handler timedout. * setenv.c: Do not define getenv() unless needed. * v4rcp.c: Rewrite error() to use stdargs/varargs. Add signal number argument to lostconn(), include prototype, and ensure called consistantly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13567 dc483132-0cff-0310-8789-dd5450dbe970
* * v4rcp.c, login.c: Fill in prototypes, declare many functionsEzra Peisach2001-07-031-24/+24
| | | | | | static. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13550 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c: Much cleanup to reduce globals and shadowingEzra Peisach2001-06-221-32/+48
| | | | | | | | | | | * krlogind.c (main): Change sin to sock_in. * krshd.c: Change sin to sock_in to not shadow global. Change some local variables to not shadow others. 2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13487 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (read_env_vars_from_file: Only define ifEzra Peisach2001-06-211-0/+2
| | | | | | /etc/environment or /etc/timezone exists on machine. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13447 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in (SETENVOBJ): If setenv is not present on system,Ezra Peisach2001-06-111-3/+8
| | | | | | | | | | | | | | | | | | | | | | | | define NEED_SETENV as well as linking in local sources. * defines.h: Include prototype for setenv() if NEED_SETENV defined. * krlogin.c (prf): Declare as void. Used only with one argument - get rid of pseudo-varargs behaviour. * krlogind.c (recvauth): Include k5-util.h for krb5_compat_recvauth_version() prototype. Declare sendoob() void. * krshd.c: Include k5-util.h for krb5_compat_recvauth_version() prototype. * login.c: Include setenv prototype if NEED_SETENV defined. Cast arguments to printf to match format string. * v4rcp.c (source): Cast argument to sprintf() to match format string. * krcp.c (rsource): Likewise. * forward.c (rd_and_store_for_creds): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13334 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c: Add braces around initializers. Cleanup assignments inEzra Peisach2001-06-011-20/+38
| | | | | | | | | | | | | | | | | | | | | | | | | conditionals. Include krb524.h if KRB4_CONVERT defined. * krlogind.c (main): Cleanup unused variables. (protocol): Cleanup ambiguous if-if-else warning. * krshd.c (main): Cleanup unused variables. * krlogin.c (setsignal): Declare as void. (server_message): Cleanup unused variables. * setenv.c (setenv): Declare as returning int and clean up assignments in conditionals. * kcmd.c (kcmd, rcmd_stream_init_krb5, v5_des_read): Clean up unused variables and assignments in conditionals. * forward.c (rd_and_store_for_creds): Likewise. * krcp.c (rsource): Likewise. * v4rcp.c (answer_auth): Likewise. * krsh.c (main): Declare as retuning int. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13257 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (k5_get_password): Declare second argument as unsignedEzra Peisach2000-10-171-0/+1
| | | | | | int length. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12795 dc483132-0cff-0310-8789-dd5450dbe970
* pullup from 1.2.1 releaseKen Raeburn2000-07-011-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12502 dc483132-0cff-0310-8789-dd5450dbe970
* 1.2-beta4 pullupKen Raeburn2000-06-301-37/+46
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12470 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (update_ref_count): Copy passwd info before calling getuserattr, toKen Raeburn2000-03-161-0/+12
| | | | | | keep data from getting clobbered. Patch from Mark Roth. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12119 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Only destroy xtra_creds if non-null. (Patch from Richard ↵Ken Raeburn2000-02-101-1/+2
| | | | | | Basch.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12031 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Reorder some control flow to avoid security holeTom Yu2000-02-061-6/+4
| | | | | | if KRB4_GET_TICKETS is not defined. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12001 dc483132-0cff-0310-8789-dd5450dbe970
* from 1.1 branch: use init_secure_contextKen Raeburn1999-12-151-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11956 dc483132-0cff-0310-8789-dd5450dbe970
* fix typo in calculating buffer sizeKen Raeburn1999-07-261-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11606 dc483132-0cff-0310-8789-dd5450dbe970
* AIX 4.3.2 (4.3.0+) build fixes based on bug report from Joshua Lackey,Ken Raeburn1999-07-121-0/+5
| | | | | | lackeyj@austin.ibm.com. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11563 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (main): Call setluid()Tom Yu1999-01-211-8/+9
| | | | | | | | | * krshd.c (doit): Call setluid(). * configure.in: Check for setluid() rather than main() in libsecurity. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11111 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (login_get_kconf): Also test whether *kconf_val is nullGeoffrey King1998-11-161-1/+1
| | | | | | | | rather than just kconf_val before passing *kconf_val to conf_affirmative (where strcasecmp will choke on it if it is in fact null). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11039 dc483132-0cff-0310-8789-dd5450dbe970
* pull up 3des implementation from the marc-3des branchMarc Horowitz1998-10-301-1219/+1087
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
* login.c (dolastlog): BSD 4.4 systems don't have lastlog.h, but stillTheodore Tso1998-05-271-6/+30
| | | | | | | | | | | | | | | | | | define struct lastlog somewhere. Included from Dima Ruban's FreeBSD patches. krlogin.c: Include sys/ioctl_compat.h if it is present (instead of just for 386BSD). loginpaths.h (LPATH): If the OS provides _PATH_DEFPATH, use it to define LPATH and RPATH. login.c: #include paths.h if present, and use it to set the pathnames for certain common files. configure.in (withval): Check for <sys/ioctl_compat.h> and <paths.h> git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10586 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c: Replace strcpy with strncpy in places. Add nulTom Yu1998-05-161-12/+26
| | | | | | termination to some existing invocations of strncpy. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10572 dc483132-0cff-0310-8789-dd5450dbe970
* POSIX states that getopt returns -1 when it is done parsing options,Theodore Tso1998-05-061-1/+1
| | | | | | not EOF. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10547 dc483132-0cff-0310-8789-dd5450dbe970
* * login.c (try_afscall): try_afscall doesn't work / isn't neededDan Winship1997-12-191-3/+8
| | | | | | on systems without SIGSYS git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10340 dc483132-0cff-0310-8789-dd5450dbe970
* * krlogind.c:Tom Yu1997-12-121-1/+0
| | | | | | | | | | * krshd.c: * login.c: * v4rcp.c: Don't include netdb.h or sys/socket.h if krb.h is included; this works around an Ultrix bug where those headers aren't protected against multiple inclusion. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10331 dc483132-0cff-0310-8789-dd5450dbe970
* killpg() wasn't conditionalized in login.c, causing compiles to fail onKevin Mitchell1997-06-301-0/+4
| | | | | | Solaris 2.4 (which puts the function into the BSD compatibility libraries). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10105 dc483132-0cff-0310-8789-dd5450dbe970
* login.c: Always use the new tty line discpline. [krb5-appl/428]Theodore Tso1997-06-071-10/+27
| | | | | | | login.c: If a hangup signal is received, pass it onto the child. [krb5-appl/432] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10095 dc483132-0cff-0310-8789-dd5450dbe970
* If we're on an SGI machine, don't do the MOTD or MAILCHECK thing,Theodore Tso1997-03-281-1/+1
| | | | | | | since it's done by /etc/cshrc magic. (SGI's don't define __SVR4, even though it's SVR4 derived). [krb5-appl/158] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10033 dc483132-0cff-0310-8789-dd5450dbe970