summaryrefslogtreecommitdiff
path: root/libexec/rexecd
AgeCommit message (Collapse)Author
2005-06-10Remove rexecd(8), a server that implements a particularly insecureJacques Vidrine
method of executing commands remotely. There are no rexec clients in the FreeBSD tree, and the client function rexec(3) is present only in libcompat. It has been documented as "obsolete" since 4.3BSD, and its use has been discouraged in the man page for over 10 years. Notes: svn path=/head/; revision=147270
2005-04-17s/int/size_t/ as appropriate.David Schultz
Noticed by: bde Notes: svn path=/head/; revision=145177
2005-04-08Revert parts of previous commits and use a temporary variable to avoidDag-Erling Smørgrav
an invalid type pun. Notes: svn path=/head/; revision=144795
2005-04-07An array was mistaken for a pointer in the previous commit.Jacques Vidrine
Noticed by: tinderbox, stefanf Pointy hat to: nectar Notes: svn path=/head/; revision=144754
2005-04-05Correct type mismatch introduced in last commit.Jacques Vidrine
Noticed by: Steve Kargl <sgk@troutmask.apl.washington.edu> Notes: svn path=/head/; revision=144680
2005-04-05DES pointed out that the PAM layer may change the target user nameJacques Vidrine
during authentication. Thus we need to call getpwnam *after* the user has been authenticated. Colin mentioned that we should also move the check for root in that case. Notes: svn path=/head/; revision=144668
2005-03-27When PAM support was added to rexecd in revision 1.29 (just prior toJacques Vidrine
5.0-RELEASE), a visually elusive bug was introduced. A comparison operator was changed to assignment. As a result, rexecd behaved always as if the `-i' option had been specified. It would allow root logins. This commit corrects the situation in the obvious way. A separate bug was introduced at the same time. The PAM library functions are called between the invocation of getpwnam(3) and the use of the returned static object. Since many PAM library functions result in additional getpwnam(3) calls, the contents of the returned static object could be changed from under rexecd. With this commit, getpwnam_r(3) is used instead. Other PAM-using applications should be reviewed for similar errors in getpw* usage. Security: rexecd's documented default policy of disallowing root logins was not enforced. Reviewed by: cperciva Notes: svn path=/head/; revision=144180
2005-03-21Use sysconf(_SC_ARG_MAX) instead of NCARGS.David Schultz
Notes: svn path=/head/; revision=143907
2005-03-01correct WARNS=6 fix to use cast to (void *).Hajimu UMEMOTO
use of struct sockaddr_strage * is thought as not good manner. :) Notes: svn path=/head/; revision=142900
2005-02-23If what we have is a struct sockaddr_storage * and what we want is aDag-Erling Smørgrav
struct sockaddr_storage *, there's no point in casting it prematurely to a struct sockaddr *. This unbreaks WARNS=6 on sparc64. Notes: svn path=/head/; revision=142329
2005-02-23Make WARNS=6-clean.Dag-Erling Smørgrav
Notes: svn path=/head/; revision=142317
2005-02-14Fix most cases where the address of an int is passed to a function expecting aStefan Farfeleder
socklen_t * argument. Notes: svn path=/head/; revision=141918
2005-01-18Sort sections.Ruslan Ermilov
Notes: svn path=/head/; revision=140414
2004-07-02Mechanically kill hard sentence breaks.Ruslan Ermilov
Notes: svn path=/head/; revision=131487
2004-05-24Include <stdlib.h> for exit() and abort() prototypes.Stefan Farfeleder
Approved by: das (mentor) Notes: svn path=/head/; revision=129658
2003-06-08Add section number to .XrPhilippe Charnier
Notes: svn path=/head/; revision=116034
2002-07-06The .Nm utilityPhilippe Charnier
Notes: svn path=/head/; revision=99500
2002-05-03Unbreak static build and remove usage() that isn't usage().Dag-Erling Smørgrav
Reviewed by: bde Notes: svn path=/head/; revision=95980
2002-05-02PAMify rexecd(8).Dag-Erling Smørgrav
Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=95915
2002-04-16When opieverify() is fail, fallback to try unix password.Hajimu UMEMOTO
Tested by: kuriyama Notes: svn path=/head/; revision=94830
2002-04-16Add an IPv6 support.Hajimu UMEMOTO
I dunno if there is an IPv6 supported rexec client. So, it was tested that this change doesn't break an IPv4. Tested by: kuriyama (IPv4 only) Notes: svn path=/head/; revision=94828
2002-04-16Make this compilable without -DOPIE.Jun Kuriyama
Hint by: ume Notes: svn path=/head/; revision=94824
2002-02-07o __P removalWarner Losh
o register removal o use new style prototypes and function definitions Notes: svn path=/head/; revision=90377
2002-02-04Lock down with WFORMAT?=1, with overrides in the subdirectories whichKris Kennaway
are not yet warning-clean. Tested on i386 and alpha. Notes: svn path=/head/; revision=90164
2001-08-03Don't clobber the default for CFLAGS.Bruce Evans
Notes: svn path=/head/; revision=81118
2001-07-26Use STD{ERR,IN,OUT}_FILENO instead of their numeric values. TheSheldon Hearn
definitions are more readable, and it's possible that they're more portable to pathalogical platforms. Submitted by: David Hill <david@phobia.ms> Notes: svn path=/head/; revision=80381
2001-07-15Remove whitespace at EOL.Dima Dorfman
Notes: svn path=/head/; revision=79754
2001-07-10mdoc(7) police: removed HISTORY info from the .Os call.Ruslan Ermilov
Notes: svn path=/head/; revision=79529
2001-07-09Goodbye S/Key, Hello OPIE.Mark Murray
I believe I have done due dilligence on this, but I'd appreciate decent test scenarios and sucess (or failure) reports. Notes: svn path=/head/; revision=79466
2001-07-09Fix the type of the NULL arg to execl()Brian Somers
Idea from: Theo de Raadt <deraadt@openbsd.org> Notes: svn path=/head/; revision=79452
2001-05-01Avoid a warning by making a variable a const char *.David Malone
Notes: svn path=/head/; revision=76183
2001-03-26- Backout botched attempt to intoduce MANSECT feature.Ruslan Ermilov
- MAN[1-9] -> MAN. Notes: svn path=/head/; revision=74814
2001-03-20Set the default manual section for libexec/ to 8.Ruslan Ermilov
Notes: svn path=/head/; revision=74529
2000-11-28Remove unused #include. Use getopt(3). Add usage() with syslog(3) cap.Philippe Charnier
Notes: svn path=/head/; revision=69313
2000-11-20mdoc(7) police: use the new features of the Nm macro.Ruslan Ermilov
Notes: svn path=/head/; revision=68949
2000-05-15Man page fixupsNick Sayer
Submitted by: sheldonh@uunet.co.za Notes: svn path=/head/; revision=60594
2000-05-13Add -i (insecure) flag to rexecd, which allows uid == 0 loginsNick Sayer
(presuming that the user in question is not in /etc/ftpusers and does not have a null password). Notes: svn path=/head/; revision=60507
1999-08-28$Id$ -> $FreeBSD$Peter Wemm
Notes: svn path=/head/; revision=50476
1999-04-07Ensure that things returned by gethostname() andBrian Somers
friends are terminated and allow for a maximum host name length of MAXHOSTNAMELEN - 1. Put parenthesis around sizeof args. Make some variables static. Fix telnetd -u (broken by my last commit) Prompted by: bde Notes: svn path=/head/; revision=45422
1999-04-06Link with libutilBrian Somers
Notes: svn path=/head/; revision=45396
1999-04-06Use realhostname() rather than various combinations ofBrian Somers
gethostbyaddr() & gethostbyname(). Remove brokeness in ftpd for hosts of MAXHOSTNAMELEN length. Notes: svn path=/head/; revision=45393
1997-11-26Use err(3). -Wall cleaning. Use Pa for file names and add section in Xrefs.Philippe Charnier
Notes: svn path=/head/; revision=31419
1997-03-24Julian A's fix. Do chdir as user rather than as root. Fixes a minor NFSWarner Losh
compatibility problem at the same time. Some buffer made large enough for worst case hostname. fixes PR 2593. Reviewed by: Dan Cross and maybe others Notes: svn path=/head/; revision=24189
1997-02-22Revert $FreeBSD$ to $Id$Peter Wemm
Notes: svn path=/head/; revision=22989
1997-02-09Buffer Overflow from OpenBSDWarner Losh
rev 1.7 deraadt: buf oflow Obtained from: OpenBSD Notes: svn path=/head/; revision=22457
1997-01-14Make the long-awaited change from $Id$ to $FreeBSD$Jordan K. Hubbard
This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise. Notes: svn path=/head/; revision=21673
1996-11-22Back out recent security patch for rexecd. After more careful analysis,Paul Traina
it is both uneeded and breaks certain lock-step timing in the rexec protocol. Yes, an attacker can "relay" connections using this trick, but a properly configured firewall that would make this sort of subterfuge necessary in the first place (instead of direct packet spoofing) would also thwart useful attacks based on this. Notes: svn path=/head/; revision=19924
1996-11-19Do not attempt to open reverse channel until authentication phase hasPaul Traina
succeeded. Never allow the reverse channel to be to a privileged port. Cannidate for: 2.1 and 2.2 branches Reviewed by: pst (with local cleanups) Submitted by: Cy Shubert <cy@cwsys.cwent.com> Obtained from: Jaeger <jaeger@dhp.com> via BUGTRAQ Notes: svn path=/head/; revision=19871
1996-09-22add forgotten $Id$Wolfram Schneider
Notes: svn path=/head/; revision=18471
1995-08-28Check for expired passwords before allowing access to the system.Mike Pritchard
Notes: svn path=/head/; revision=10401
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-21 00:46:51 +0000