CVS log for src/crypto/dist/ipsec-tools/src/racoon/privsep.c

Up to [cvs.NetBSD.org] / src / crypto / dist / ipsec-tools / src / racoon

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

more cleanups (const related, format strings)

modernize, prototypes, int -> ssize_t/size_t in simple cases, remove dead
code, pass some lint.

ipsectools: fix lint error

Returning a value from a void function is a GNU extension, but even in
GNU mode, lint does not allow these.

No functional change.

Ooops, restore accidently removed files from merge mishap

Sync with HEAD

Sync with HEAD

Sync with HEAD

Resolve a couple of conflicts (result of the uimin/uimax changes)

fix memory leaks: https://github.com/NetBSD/src/issues/6

Sync with HEAD

Remove unused variables.

PR/50943: David Binderman: Fix misplaced parenthesis.

Have privilege separation child process exit if the parent exits.

Have privilege separation child process exit if the parent exits.

Quiet a gcc warning when strict-aliasing checks are enabled. Reported by
Stephen Clark.

From Stefan Bauer: Fix multiple typoes and manpage formatting errors.

From Stefan Bauer: Fix multiple typoes and manpage formatting errors.

Apply patch (requested by manu/spz in #378):
Downgrade ipsec-tools to 0.7.1nb1.

rewrite local address detection
make some functions static that arr not needed globally
rework how fd_set is construction for the main loop select()

Do not cache pfkey sockets: it might cause to not handle some pfkey events
when select() has marked pfkey socket readable, but a timer callback first
calls pfkey_dump_sadb().

Fix typo in previous and use SIG_IGN as I intended.

Avoid using MSG_NOSIGNAL as it is not available everywhere.
Ignore SIGPIPE instead.

From Krzysztof Piotr Oledzki <olel@ans.pl>:
Revert parts of 2008-08-06 commit; the problem those changes address are
already handled in a sensible way by Cyrus Rahman's patch from 2008-03-06.

Sync with wrstuden-revivesa-base-2.

From Krzysztof Piotr Oledzki:
Make privileged process exit if unprivileged process is terminated and
some spelling fixes.

Sync w/ -current. 34 merge conflicts to follow.

Use utility functions to evaluate and manipulate network port values. No functional changes. Submitted by Timo Teras.

sync with head

Coverity CID 5018: Fix double frees.

for symmetry set controllen the same way we set it on the receiving side.

properly fix the variable stack allocation code.

Still from Cyrus Rahman: fix file descriptor leak introduced by previous
commit.

From Cyrus Rahman: Allow interface reconfiguration when running in privilege separation mode, document privilege separation

sync with head.

sync with HEAD

From Cyrus Rahman <crahman@gmail.com>
privilegied instance exit when unprivilegied one terminates. Save PID in real root, not in chroot

Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts.
Since we previously had a release branch and we import here the HEAD of CVS,
let's assume all local changes are to be dumped. Local patches should have
been propagated upstream, anyway.

Migrate ipsec-tools CVS to cvs.netbsd.org

Apply patch (requested by manu in ticket #981):
Update ipsec-tools to version 0.6.3.

Merge ipsec-tools 0.6.3 import

Apply patch (requested by tron in ticket #741):
Update ipsec-tools to version 0.6.1.

Update to ipsec-tools 0.6.1

Import ipsec-tools 0.6.1

Resolve conflicts caused by recent ipsec-tools-0.6.1rc1 import by prefering
the newer software. Some useful local change might have been overwritten,
we'll take care of this soon.

Update ipsec-tools to 0.6.1rc1
Most of the changes since 0.6b4 have already been committed to the NetBSD
tree. This upgrade fixes some IPcomp and NAT-T related problems that were
left unadressed in the NetBSD tree.

Pull up revision 1.2 (requested by manu in ticket #434):
Fix Xauth login with PAM authentication

Fix Xauth login with PAM authentication

Updated ipsec-tools:

2005-03-16  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{cftoken.l|localconf.h|privsep.c|racoon.conf.5}
          src/racoon/remoteconf.c: When running in privsep mode, check that
          private key and script paths match those given in the path section.

2005-03-15  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{isakmp_cfg|isakmp_cfg.h|isakmp_xauth.c}: initialize
          RADIUS accounting at startup
        * src/racoon/privsep.c: fix minor bug in PAM cleanup
        * src/racoon/isakmp_cfg.c: only call cleanup_pam if PAM is used

2005-03-14  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac: handle correctly dynamic libradius
        * src/racoon/cfparse.y: correctly initialize address pool

Import ipsec-tools ipsec-tools-0_6-20050224

Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported version
according to ipsec-tools' ChangeLog:

2005-02-23  Emmanuel Dreyfus <manu@netbsd.org>

        * configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal
          support for patented algorithms: IDEA and RC5.
        * src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it
          is not required in the configuration
        * src/racoon/isakmp.c: do not reject addresses for which kernel
          refused UDP encapsulation, they can still be used for non NAT-T
          traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)

2005-02-18  Emmanuel Dreyfus <manu@netbsd.org>

        * src/racoon/{main.c|eaytest.c|plairsa-gen.c}
          src/setkey/setkey.c: don't use fuzzy paths for package_version.h

2005-02-18  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/isakmp_inf.c: Purge generated SPDs when getting a
          related DELETE_SA
        * src/racoon/pfkey.c: do NOT unbindph12() when SA acquire

2005-02-17  Emmanuel Dreyfus <manu@netbsd.org>

        From Fred Senault <fred.letter@lacave.net>
        * src/racoon/remoteconf.c: Fix a bug in script init

2005-02-17  Yvan Vanhullebus  <vanhu@free.fr>

        * src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks

2005-02-15  Michal Ludvig  <michal@logix.cz>

        * configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN

Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS)
ipsec-tools is a fork from KAME racoon/libipsec/setkey, with many
enhancements.

Initial revision