[openssh-commits] [openssh] branch master updated (4626e39c -> c9cdef35)

Sat Jun 24 17:49:57 AEST 2017

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  4626e39c  upstream commit
       new  849c5468  upstream commit
       new  5abbb31c  upstream commit
       new  e238645d  upstream commit
       new  8904ffce  upstream commit
       new  6f8ca3b9  upstream commit
       new  4540428c  upstream commit
       new  e2004d4b  upstream commit
       new  8f574959  upstream commit
       new  33f86265  upstream commit
       new  40962198  upstream commit
       new  f17ee61c  upstream commit
       new  c9cdef35  upstream commit

The 12 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.

Detailed log of new commits:

commit c9cdef35524bd59007e17d5bd2502dade69e2dfb
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 06:35:24 2017 +0000

    upstream commit

    regress test for ExposeAuthInfo

    Upstream-Regress-ID: 190e5b6866376f4061c411ab157ca4d4e7ae86fd

commit f17ee61cad25d210edab69d04ed447ad55fe80c1
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 07:08:57 2017 +0000

    upstream commit

    correct env var name

    Upstream-ID: 721e761c2b1d6a4dcf700179f16fd53a1dadb313

commit 40962198e3b132cecdb32e9350acd4294e6a1082
Author: jmc at openbsd.org <jmc at openbsd.org>
Date:   Sat Jun 24 06:57:04 2017 +0000

    upstream commit

    spelling;

    Upstream-ID: 606f933c8e2d0be902ea663946bc15e3eee40b25

commit 33f86265d7e8a0e88d3a81745d746efbdd397370
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 06:38:11 2017 +0000

    upstream commit

    don't pass pointer to struct sshcipher between privsep
    processes, just redo the lookup in each using the already-passed cipher name.
    bz#2704 based on patch from Brooks Davis; ok markus dtucker

    Upstream-ID: 2eab434c09bdf549dafd7da3e32a0d2d540adbe0

commit 8f574959272ac7fe9239c4f5d10fd913f8920ab0
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 06:34:38 2017 +0000

    upstream commit

    refactor authentication logging

    optionally record successful auth methods and public credentials
    used in a file accessible to user sessions

    feedback and ok markus@

    Upstream-ID: 090b93036967015717b9a54fd0467875ae9d32fb

commit e2004d4bb7eb01c663dd3a3e7eb224f1ccdc9bba
Author: jmc at openbsd.org <jmc at openbsd.org>
Date:   Sat Jun 24 06:28:50 2017 +0000

    upstream commit

    word fix;

    Upstream-ID: 8539bdaf2366603a34a9b2f034527ca13bb795c5

commit 4540428cd0adf039bcf5a8a27f2d5cdf09191513
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 05:37:44 2017 +0000

    upstream commit

    switch sshconnect.c from (slightly abused) select() to
    poll(); ok deraadt@ a while back

    Upstream-ID: efc1937fc591bbe70ac9e9542bb984f354c8c175

commit 6f8ca3b92540fa1a9b91670edc98d15448e3d765
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 05:35:05 2017 +0000

    upstream commit

    use HostKeyAlias if specified instead of hostname for
    matching host certificate principal names; bz#2728; ok dtucker@

    Upstream-ID: dc2e11c83ae9201bbe74872a0c895ae9725536dd

commit 8904ffce057b80a7472955f1ec00d7d5c250076c
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Sat Jun 24 05:24:11 2017 +0000

    upstream commit

    no need to call log_init to reinitialise logged PID in
    child sessions, since we haven't called openlog() in log_init() since 1999;
    ok markus@

    Upstream-ID: 0906e4002af5d83d3d544df75e1187c932a3cf2e

commit e238645d789cd7eb47541b66aea2a887ea122c9b
Author: mestre at openbsd.org <mestre at openbsd.org>
Date:   Fri Jun 23 07:24:48 2017 +0000

    upstream commit

    When using the escape sequence &~ the code path is
    client_loop() -> client_simple_escape_filter() -> process_escapes() -> fork()
    and the pledge for this path lacks the proc promise and therefore aborts the
    process. The solution is to just add proc the promise to this specific
    pledge.

    Reported by Gregoire Jadi gjadi ! omecha.info
    Insight with tb@, OK jca@

    Upstream-ID: 63c05e30c28209519f476023b65b0b1b0387a05b

commit 5abbb31c4e7a6caa922cc1cbb14e87a77f9d19d3
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jun 23 03:30:42 2017 +0000

    upstream commit

    Import regenerated moduli.

    Upstream-ID: b25bf747544265b39af74fe0716dc8d9f5b63b95

commit 849c5468b6d9b4365784c5dd88e3f1fb568ba38f
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jun 23 03:25:53 2017 +0000

    upstream commit

    Run the screen twice so we end up with more candidate
    groups.  ok djm@

    Upstream-ID: b92c93266d8234d493857bb822260dacf4366157

Summary of changes:
 .skipped-commit-ids |   2 +
 auth.c              |  62 +++++++++++++++------
 auth.h              |  48 +++++++++++-----
 auth2-gss.c         |  12 +++-
 auth2-hostbased.c   |   8 +--
 auth2-pubkey.c      |  80 ++------------------------
 auth2.c             | 133 ++++++++++++++++++++++++++++++++++++++++++-
 clientloop.c        |   4 +-
 gss-serv.c          |  11 +++-
 monitor.c           |  41 ++++++++------
 packet.c            |  14 ++---
 regress/Makefile    |   5 +-
 regress/authinfo.sh |  17 ++++++
 servconf.c          |  13 ++++-
 servconf.h          |   3 +-
 session.c           |  62 ++++++++++++++++++---
 ssh-gss.h           |   3 +-
 ssh_config.5        |   6 +-
 sshconnect.c        | 158 ++++++++++++++++++++++------------------------------
 sshd.8              |  24 ++++++--
 sshd_config.5       |  10 +++-
 21 files changed, 455 insertions(+), 261 deletions(-)
 create mode 100644 regress/authinfo.sh

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.