The NetBSD Project

CVS log for src/crypto/dist/ipsec-tools/src/racoon/privsep.c

[BACK] Up to [cvs.netbsd.org] / src / crypto / dist / ipsec-tools / src / racoon

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.21.2.1 / (download) - annotate - [select for diffs], Fri Aug 12 05:46:06 2011 UTC (9 months, 2 weeks ago) by tteras
Branch: ipsec-tools-0_8-branch
Changes since 1.21: +10 -1 lines
Diff to previous 1.21 (colored) next main 1.22 (colored)

Have privilege separation child process exit if the parent exits.

Revision 1.22 / (download) - annotate - [select for diffs], Fri Aug 12 05:21:50 2011 UTC (9 months, 2 weeks ago) by tteras
Branch: MAIN
CVS Tags: yamt-pagecache-base5, yamt-pagecache-base4, yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, yamt-pagecache, netbsd-6-base, netbsd-6, HEAD
Changes since 1.21: +10 -1 lines
Diff to previous 1.21 (colored)

Have privilege separation child process exit if the parent exits.

Revision 1.21 / (download) - annotate - [select for diffs], Sun Mar 6 08:28:10 2011 UTC (14 months, 3 weeks ago) by tteras
Branch: MAIN
CVS Tags: ipsec-tools-0_8_0, cherry-xenmp-base, cherry-xenmp
Branch point for: ipsec-tools-0_8-branch
Changes since 1.20: +7 -3 lines
Diff to previous 1.20 (colored)

Quiet a gcc warning when strict-aliasing checks are enabled. Reported by
Stephen Clark.

Revision 1.6.6.1 / (download) - annotate - [select for diffs], Fri Mar 5 06:51:25 2010 UTC (2 years, 2 months ago) by tteras
Branch: ipsec-tools-0_7-branch
Changes since 1.6: +3 -3 lines
Diff to previous 1.6 (colored) next main 1.7 (colored)

From Stefan Bauer: Fix multiple typoes and manpage formatting errors.

Revision 1.20 / (download) - annotate - [select for diffs], Fri Mar 5 06:47:58 2010 UTC (2 years, 2 months ago) by tteras
Branch: MAIN
CVS Tags: matt-mips64-premerge-20101231, bouyer-quota2-nbase, bouyer-quota2-base, bouyer-quota2
Changes since 1.19: +3 -3 lines
Diff to previous 1.19 (colored)

From Stefan Bauer: Fix multiple typoes and manpage formatting errors.

Revision 1.15.2.1 / (download) - annotate - [select for diffs], Sun Feb 8 18:42:18 2009 UTC (3 years, 3 months ago) by snj
Branch: netbsd-5
CVS Tags: netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b
Changes since 1.15: +14 -501 lines
Diff to previous 1.15 (colored) next main 1.16 (colored)

Apply patch (requested by manu/spz in #378):
Downgrade ipsec-tools to 0.7.1nb1.

Revision 1.19 / (download) - annotate - [select for diffs], Tue Dec 23 14:03:12 2008 UTC (3 years, 5 months ago) by tteras
Branch: MAIN
CVS Tags: matt-premerge-20091211, jym-xensuspend-nbase, jym-xensuspend-base, jym-xensuspend
Changes since 1.18: +4 -5 lines
Diff to previous 1.18 (colored)

rewrite local address detection
make some functions static that arr not needed globally
rework how fd_set is construction for the main loop select()

Revision 1.18 / (download) - annotate - [select for diffs], Mon Dec 8 06:00:53 2008 UTC (3 years, 5 months ago) by tteras
Branch: MAIN
Changes since 1.17: +1 -33 lines
Diff to previous 1.17 (colored)

Do not cache pfkey sockets: it might cause to not handle some pfkey events
when select() has marked pfkey socket readable, but a timer callback first
calls pfkey_dump_sadb().

Revision 1.17 / (download) - annotate - [select for diffs], Thu Dec 4 22:30:26 2008 UTC (3 years, 5 months ago) by bad
Branch: MAIN
Changes since 1.16: +2 -2 lines
Diff to previous 1.16 (colored)

Fix typo in previous and use SIG_IGN as I intended.

Revision 1.16 / (download) - annotate - [select for diffs], Tue Nov 25 22:38:31 2008 UTC (3 years, 5 months ago) by bad
Branch: MAIN
Changes since 1.15: +2 -1 lines
Diff to previous 1.15 (colored)

Avoid using MSG_NOSIGNAL as it is not available everywhere.
Ignore SIGPIPE instead.

Revision 1.15 / (download) - annotate - [select for diffs], Thu Oct 23 10:56:10 2008 UTC (3 years, 7 months ago) by tteras
Branch: MAIN
CVS Tags: netbsd-5-base, netbsd-5-0-RC1, matt-mips64-base2
Branch point for: netbsd-5
Changes since 1.14: +13 -31 lines
Diff to previous 1.14 (colored)

From Krzysztof Piotr Oledzki <olel@ans.pl>:
Revert parts of 2008-08-06 commit; the problem those changes address are
already handled in a sensible way by Cyrus Rahman's patch from 2008-03-06.

Revision 1.11.4.2 / (download) - annotate - [select for diffs], Thu Sep 18 04:54:19 2008 UTC (3 years, 8 months ago) by wrstuden
Branch: wrstuden-revivesa
Changes since 1.11.4.1: +37 -15 lines
Diff to previous 1.11.4.1 (colored) to branchpoint 1.11 (colored) next main 1.12 (colored)

Sync with wrstuden-revivesa-base-2.

Revision 1.14 / (download) - annotate - [select for diffs], Wed Aug 6 19:14:28 2008 UTC (3 years, 9 months ago) by tteras
Branch: MAIN
CVS Tags: wrstuden-revivesa-base-3, wrstuden-revivesa-base-2
Changes since 1.13: +37 -15 lines
Diff to previous 1.13 (colored)

From Krzysztof Piotr Oledzki:
Make privileged process exit if unprivileged process is terminated and
some spelling fixes.

Revision 1.11.4.1 / (download) - annotate - [select for diffs], Mon Jun 23 04:26:46 2008 UTC (3 years, 11 months ago) by wrstuden
Branch: wrstuden-revivesa
Changes since 1.11: +16 -23 lines
Diff to previous 1.11 (colored)

Sync w/ -current. 34 merge conflicts to follow.

Revision 1.13 / (download) - annotate - [select for diffs], Wed Jun 18 06:47:25 2008 UTC (3 years, 11 months ago) by mgrooms
Branch: MAIN
CVS Tags: wrstuden-revivesa-base-1, wrstuden-revivesa-base
Changes since 1.12: +2 -19 lines
Diff to previous 1.12 (colored)

Use utility functions to evaluate and manipulate network port values. No functional changes. Submitted by Timo Teras.

Revision 1.11.2.1 / (download) - annotate - [select for diffs], Wed Jun 4 02:02:59 2008 UTC (3 years, 11 months ago) by yamt
Branch: yamt-pf42
Changes since 1.11: +15 -5 lines
Diff to previous 1.11 (colored) next main 1.12 (colored)

sync with head

Revision 1.12 / (download) - annotate - [select for diffs], Sat May 24 18:39:40 2008 UTC (4 years ago) by christos
Branch: MAIN
CVS Tags: yamt-pf42-base4, yamt-pf42-base3
Changes since 1.11: +15 -5 lines
Diff to previous 1.11 (colored)

Coverity CID 5018: Fix double frees.

Revision 1.11 / (download) - annotate - [select for diffs], Sun Apr 13 21:45:19 2008 UTC (4 years, 1 month ago) by christos
Branch: MAIN
CVS Tags: yamt-pf42-baseX, yamt-pf42-base2, yamt-pf42-base, hpcarm-cleanup-nbase
Branch point for: yamt-pf42, wrstuden-revivesa
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

for symmetry set controllen the same way we set it on the receiving side.

Revision 1.10 / (download) - annotate - [select for diffs], Fri Mar 28 21:18:45 2008 UTC (4 years, 1 month ago) by christos
Branch: MAIN
Changes since 1.9: +14 -4 lines
Diff to previous 1.9 (colored)

properly fix the variable stack allocation code.

Revision 1.9 / (download) - annotate - [select for diffs], Fri Mar 28 20:28:14 2008 UTC (4 years, 1 month ago) by manu
Branch: MAIN
Changes since 1.8: +9 -10 lines
Diff to previous 1.8 (colored)

Still from Cyrus Rahman: fix file descriptor leak introduced by previous
commit.

Revision 1.8 / (download) - annotate - [select for diffs], Fri Mar 28 04:18:52 2008 UTC (4 years, 1 month ago) by manu
Branch: MAIN
Changes since 1.7: +475 -2 lines
Diff to previous 1.7 (colored)

From Cyrus Rahman: Allow interface reconfiguration when running in privilege separation mode, document privilege separation

Revision 1.6.16.1 / (download) - annotate - [select for diffs], Mon Mar 24 07:14:30 2008 UTC (4 years, 2 months ago) by keiichi
Branch: keiichi-mipv6
Changes since 1.6: +16 -8 lines
Diff to previous 1.6 (colored) next main 1.7 (colored)

sync with head.

Revision 1.6.10.1 / (download) - annotate - [select for diffs], Sun Mar 23 00:13:34 2008 UTC (4 years, 2 months ago) by matt
Branch: matt-armv6
Changes since 1.6: +16 -8 lines
Diff to previous 1.6 (colored) next main 1.7 (colored)

sync with HEAD

Revision 1.7 / (download) - annotate - [select for diffs], Thu Mar 6 04:29:20 2008 UTC (4 years, 2 months ago) by manu
Branch: MAIN
CVS Tags: matt-armv6-nbase, keiichi-mipv6-base
Changes since 1.6: +16 -8 lines
Diff to previous 1.6 (colored)

From Cyrus Rahman <crahman@gmail.com>
privilegied instance exit when unprivilegied one terminates. Save PID in real root, not in chroot

Revision 1.6 / (download) - annotate - [select for diffs], Sat Sep 9 16:22:10 2006 UTC (5 years, 8 months ago) by manu
Branch: MAIN
CVS Tags: wrstuden-fixsa-newbase, wrstuden-fixsa-base-1, wrstuden-fixsa-base, wrstuden-fixsa, netbsd-4-base, netbsd-4-0-RELEASE, netbsd-4-0-RC5, netbsd-4-0-RC4, netbsd-4-0-RC3, netbsd-4-0-RC2, netbsd-4-0-RC1, netbsd-4-0-1-RELEASE, netbsd-4-0, netbsd-4, matt-mips64-base, matt-mips64, matt-armv6-prevmlocking, matt-armv6-base, ipsec-tools-0_7_3, ipsec-tools-0_7_2, ipsec-tools-0_7_1, ipsec-tools-0_7-rc1, ipsec-tools-0_7-beta3, ipsec-tools-0_7-beta2, ipsec-tools-0_7-beta1, ipsec-tools-0_7-base, ipsec-tools-0_7-RC1, ipsec-tools-0_7, hpcarm-cleanup-base, hpcarm-cleanup, cube-autoconf-base, cube-autoconf
Branch point for: matt-armv6, keiichi-mipv6, ipsec-tools-0_7-branch
Changes since 1.5: +214 -87 lines
Diff to previous 1.5 (colored)

Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts.
Since we previously had a release branch and we import here the HEAD of CVS,
let's assume all local changes are to be dumped. Local patches should have
been propagated upstream, anyway.

Revision 1.1.1.7 / (download) - annotate - [select for diffs] (vendor branch), Sat Sep 9 16:12:14 2006 UTC (5 years, 8 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-base
Changes since 1.1.1.6: +214 -87 lines
Diff to previous 1.1.1.6 (colored)

Migrate ipsec-tools CVS to cvs.netbsd.org

Revision 1.1.1.4.2.3 / (download) - annotate - [select for diffs], Mon Nov 21 21:12:30 2005 UTC (6 years, 6 months ago) by tron
Branch: netbsd-3
CVS Tags: netbsd-3-1-RELEASE, netbsd-3-1-RC4, netbsd-3-1-RC3, netbsd-3-1-RC2, netbsd-3-1-RC1, netbsd-3-1-1-RELEASE, netbsd-3-1, netbsd-3-0-RELEASE, netbsd-3-0-RC6, netbsd-3-0-RC5, netbsd-3-0-RC4, netbsd-3-0-RC3, netbsd-3-0-RC2, netbsd-3-0-3-RELEASE, netbsd-3-0-2-RELEASE, netbsd-3-0-1-RELEASE, netbsd-3-0
Changes since 1.1.1.4.2.2: +1 -1 lines
Diff to previous 1.1.1.4.2.2 (colored) to branchpoint 1.1.1.4 (colored) next main 1.1.1.5 (colored)

Apply patch (requested by manu in ticket #981):
Update ipsec-tools to version 0.6.3.

Revision 1.5 / (download) - annotate - [select for diffs], Mon Nov 21 14:20:29 2005 UTC (6 years, 6 months ago) by manu
Branch: MAIN
CVS Tags: abandoned-netbsd-4-base, abandoned-netbsd-4
Changes since 1.4: +0 -0 lines
Diff to previous 1.4 (colored)

Merge ipsec-tools 0.6.3 import

Revision 1.1.1.4.2.2 / (download) - annotate - [select for diffs], Sat Sep 3 07:03:50 2005 UTC (6 years, 8 months ago) by snj
Branch: netbsd-3
CVS Tags: netbsd-3-0-RC1
Changes since 1.1.1.4.2.1: +7 -3 lines
Diff to previous 1.1.1.4.2.1 (colored) to branchpoint 1.1.1.4 (colored)

Apply patch (requested by tron in ticket #741):
Update ipsec-tools to version 0.6.1.

Revision 1.4 / (download) - annotate - [select for diffs], Sat Aug 20 00:57:06 2005 UTC (6 years, 9 months ago) by manu
Branch: MAIN
Changes since 1.3: +3 -3 lines
Diff to previous 1.3 (colored)

Update to ipsec-tools 0.6.1

Revision 1.1.1.6 / (download) - annotate - [select for diffs] (vendor branch), Sat Aug 20 00:42:20 2005 UTC (6 years, 9 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6_3, ipsec-tools-0_6_2, ipsec-tools-0_6_1
Changes since 1.1.1.5: +2 -2 lines
Diff to previous 1.1.1.5 (colored)

Import ipsec-tools 0.6.1

Revision 1.3 / (download) - annotate - [select for diffs], Sun Aug 7 09:38:46 2005 UTC (6 years, 9 months ago) by manu
Branch: MAIN
Changes since 1.2: +6 -2 lines
Diff to previous 1.2 (colored)

Resolve conflicts caused by recent ipsec-tools-0.6.1rc1 import by prefering
the newer software. Some useful local change might have been overwritten,
we'll take care of this soon.

Revision 1.1.1.5 / (download) - annotate - [select for diffs] (vendor branch), Sun Aug 7 08:47:48 2005 UTC (6 years, 9 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6_1-rc1
Changes since 1.1.1.4: +6 -2 lines
Diff to previous 1.1.1.4 (colored)

Update ipsec-tools to 0.6.1rc1
Most of the changes since 0.6b4 have already been committed to the NetBSD
tree. This upgrade fixes some IPcomp and NAT-T related problems that were
left unadressed in the NetBSD tree.

Revision 1.1.1.4.2.1 / (download) - annotate - [select for diffs], Fri Jun 10 09:25:32 2005 UTC (6 years, 11 months ago) by tron
Branch: netbsd-3
Changes since 1.1.1.4: +1 -1 lines
Diff to previous 1.1.1.4 (colored)

Pull up revision 1.2 (requested by manu in ticket #434):
Fix Xauth login with PAM authentication

Revision 1.2 / (download) - annotate - [select for diffs], Sat Jun 4 22:09:27 2005 UTC (6 years, 11 months ago) by manu
Branch: MAIN
Changes since 1.1: +151 -8 lines
Diff to previous 1.1 (colored)

Fix Xauth login with PAM authentication

Revision 1.1.1.4 / (download) - annotate - [select for diffs] (vendor branch), Wed Mar 16 23:53:12 2005 UTC (7 years, 2 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: netbsd-3-base, ipsec-tools-0_6-20050317
Branch point for: netbsd-3
Changes since 1.1.1.3: +82 -3 lines
Diff to previous 1.1.1.3 (colored)

Updated ipsec-tools:

2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool

Revision 1.1.1.3 / (download) - annotate - [select for diffs] (vendor branch), Thu Feb 24 20:53:50 2005 UTC (7 years, 3 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6-20050314, ipsec-tools-0_6-20050224
Changes since 1.1.1.2: +67 -5 lines
Diff to previous 1.1.1.2 (colored)

Import ipsec-tools ipsec-tools-0_6-20050224

Revision 1.1.1.2 / (download) - annotate - [select for diffs] (vendor branch), Wed Feb 23 14:54:25 2005 UTC (7 years, 3 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6-20050223
Changes since 1.1.1.1: +3 -1 lines
Diff to previous 1.1.1.1 (colored)

Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported version
according to ipsec-tools' ChangeLog:

2005-02-23  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
          support for patented algorithms: IDEA and RC5.
        * src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
          is not required in the configuration
        * src/racoon/isakmp.c: do not reject addresses for which kernel
          refused UDP encapsulation, they can still be used for non NAT-T
          traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)

2005-02-18  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{main.c|eaytest.c|plairsa-gen.c}
          src/setkey/setkey.c: don't use fuzzy paths for package_version.h

2005-02-18  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
          related DELETE_SA
        * src/racoon/pfkey.c: do NOT unbindph12() when SA acquire

2005-02-17  Emmanuel Dreyfus <manu@netbsd.org>

        From Fred Senault <fred.letter@lacave.net>
        * src/racoon/remoteconf.c: Fix a bug in script init

2005-02-17  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks

2005-02-15  Michal Ludvig  <michal@logix.cz>

        * configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Sat Feb 12 11:12:51 2005 UTC (7 years, 3 months ago) by manu
Branch: IPSEC_TOOLS
CVS Tags: ipsec-tools-0_6-base
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS)
ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many
enhancements.

Revision 1.1 / (download) - annotate - [select for diffs], Sat Feb 12 11:12:51 2005 UTC (7 years, 3 months ago) by manu
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>