Timeline


and

07/05/02:

17:34 Changeset [17748] by zacheiss
Remove setjmp/longjmp code, which only works for the first time anyway, since we're not using sigsetjmp/siglongjmp. A SIGALRM handler that just returns is clearer and sufficient for interrupting connect().
17:32 Changeset [17747] by zacheiss
Lower OLCD_TIMEOUT from 10 to 5.
01:56 Changeset [17746] by zacheiss
Redo syslogging of root logins to only occur in one place, and to not happen until authentication has successfully occured.

07/02/02:

23:02 Changeset [17745] by zacheiss
Don't allow foreign zephyrd to request a triplet with a non-wildcard recipient.
17:49 Changeset [17744] by zacheiss
Disable ChallengeResponseAuthentication (which was functionally disabled anyway, since we don't compile in either of the BSD_AUTH or SKEY mechanisms) and PAM keyboard interactive authentication (we don't have PAM enabled, but it might reassure someone reading the config file).
17:47 Changeset [17743] by zacheiss
Patches from OpenSSH 3.4 to fix vulnerabilities in auth mechanisms we don't have enabled.

07/01/02:

17:30 Changeset [17742] by rbasch
Revert back to using the native compiler on IRIX, to avoid stdio-related problems in unexec'ing a binary built with gcc 3.0.3, which broke no-window mode.
11:08 Changeset [17741] by zacheiss
Add --with-md5-passwords, since some of our Linux machines are configured to use them. Doesn't matter on Irix or Solaris, since they'll never have passwords salted with the magic md5 salt.
01:16 Changeset [17740] by zacheiss
Add a default Reply-To: header for mail responses from olcr (but not OLTA, or any other OLC-alike services).

06/29/02:

15:02 Changeset [17739] by zacheiss
TKT_FIL_ACC error message should mention the need to reset $KRB5CCNAME in addition to $KRBTKFILE.
03:00 Changeset [17738] by ghudson
Revert the last two changes, and change the descriptive text to note the real problem, which is variable values equal to "!". ([ ! = ! ] works on Red Hat 7.3 but fails on Solaris 8 and IRIX 6.5.3.) Thanks to jmorzins for pointing this out.

06/28/02:

13:34 Changeset [17737] by ghudson
Similarly, you don't need to use the unnatural literal = "$varname" format for comparing to a literal.
13:32 Changeset [17736] by ghudson
Don't need x$variable when comparing one variable to another, actually. [ -foo = -foo ] works fine.
01:42 Changeset [17735] by ghudson
Pull up 1.58 to athena-9_1 branch.
01:42 Changeset [17734] by ghudson
From rbasch: update space checks for IRIX.
01:21 Changeset [17733] by ghudson
Pull up 1.2 to athena-9_1 branch.
01:20 Changeset [17732] by zacheiss
Pullups from OpenAFS mainline. We never want to get ESTALE for the AFS root, and clear the alloc'ed flag so we don't free something we never allocated.
01:16 Changeset [17731] by ghudson
Pull up 1.2 to athena-9_1 branch.
01:14 Changeset [17730] by ghudson
Use a larger ID space; the five-digit space is too likely to have collisions.
01:12 Changeset [17729] by ghudson
Point 9.1 branch at 9.1 source tree.

06/27/02:

21:54 Changeset [17728] by ghudson
Relax uid checks so that root can destroy anyone's tickets.

06/26/02:

18:43 Changeset [17727] by ghudson
Pull up 1.7-1.8 to athena-9_1 branch.
18:43 Changeset [17726] by ghudson
Pull up 1.1 to athena-9_1 branch.
18:43 Changeset [17725] by ghudson
Pull up 1.5 to athena-9_1 branch.
18:43 Changeset [17724] by ghudson
Pull up 1.27 to athena-9_1 branch.
18:43 Changeset [17723] by ghudson
Pull up 1.4 to athena-9_1 branch.
18:43 Changeset [17722] by ghudson
Pull up 1.7 to athena-9_1 branch.
18:43 Changeset [17721] by ghudson
Pull up 1.13 to athena-9_1 branch.
18:43 Changeset [17720] by ghudson
Pull up 1.1-1.3 to athena-9_1 branch.
18:43 Changeset [17719] by ghudson
Pull up 1.2 to athena-9_1 branch.
18:43 Changeset [17718] by ghudson
Pull up 1.3 to athena-9_1 branch.
18:43 Changeset [17717] by ghudson
Pull up 1.9 to athena-9_1 branch.
18:43 Changeset [17716] by ghudson
Pull up 1.6 to athena-9_1 branch.
18:43 Changeset [17715] by ghudson
Pull up 1.25 to athena-9_1 branch.
18:43 Changeset [17714] by ghudson
Pull up 1.56-1.57 to athena-9_1 branch.
18:42 Changeset [17713] by ghudson
Pull up 1.30 to athena-9_1 branch.
18:42 Changeset [17712] by ghudson
Pull up 1.174 to athena-9_1 branch.
18:42 Changeset [17711] by ghudson
Pull up 1.8 to athena-9_1 branch.
18:39 Changeset [17710]
This commit was manufactured by cvs2svn to create branch 'athena-9_1'.
18:39 Changeset [17709] by ghudson
root's crontab changed to add counterlog.
18:32 Changeset [17708] by ghudson
Use a world-readable mode for the ssh binary.
18:29 Changeset [17707] by ghudson
New script, counterlog, lives in /etc/athena. Run from cron once a day and at boot time, replacing the old Booting syslog. Logs the machine name, type, and version, and a randomly generated ID which can be used to track mobile machines using DHCP.
18:24 Changeset [17706] by ghudson
Remove penrose and julia screensavers; they are reported to wedge the Solaris 8 X server on Ultra 10s with m64 graphics.
18:23 Changeset [17705] by ghudson
Update space checks for the 9.1 release.

06/24/02:

23:46 Changeset [17704] by ghudson
New AFS module to fix denial of service vulnerability.
18:26 Changeset [17703] by rbasch
Spec file for gurlview.
18:25 Changeset [17702] by rbasch
Add gurlview.
15:52 Changeset [17701] by rbasch
setup-swap-boot now lives in /install/miniroot.
09:32 Changeset [17700] by rbasch
A simple utility which calls gnome_url_show() to display a URL in an appropriate viewer.
07:50 Changeset [17699] by rbasch
Increase spawn_wait_ms to 5000 (5 seconds).
07:49 Changeset [17698] by rbasch
Handle an esd spawn wait timeout of one second or greater.
02:28 Changeset [17697] by ghudson
Pull up 1.7 to athena-9_0 branch.
02:28 Changeset [17696] by ghudson
Pull up 1.1 to athena-9_0 branch.
02:28 Changeset [17695] by ghudson
Pull up 1.5 to athena-9_0 branch.
02:27 Changeset [17694]
This commit was manufactured by cvs2svn to create branch 'athena-9_0'.
02:27 Changeset [17693] by ghudson
Some security fixes for IRIX.

06/23/02:

18:28 Changeset [17692] by zacheiss
Redo previous revision to not break ticket forwarding from ssh.com clients.

06/21/02:

19:41 Changeset [17691] by rbasch
/etc/inetd.conf has changed on IRIX.
19:40 Changeset [17690] by rbasch
Disable xfsmd.
14:54 Changeset [17689] by zacheiss
#define CONFIG_SMP to 1, since the most recent Redhat kernel has headers that use #if CONFIG_SMP instead of #ifdef CONFIG_SMP.

06/18/02:

12:38 Changeset [17688] by zacheiss
Use execvp() instead of execv() when we re-exec() ourselves in response to a SIGHUP, in case we were run without an explicit path.

06/14/02:

15:18 Changeset [17687] by jweiss
Add a safety check so we don't detonate sun4m machines tring to update them to Athena 9.1 (which doens't support sun4m) ---------------------------------------------------------------------- ----------------------------------------------------------------------
14:23 Changeset [17686] by zacheiss
From hartmans: authenticator replay attack bad.

06/13/02:

14:44 Changeset [17685] by mwhitson
Explicitly center dialog windows (for non-GNOME windowmanagers).
14:43 Changeset [17684] by mwhitson
Explicitly center dialog window (for non-GNOME windowmanagers).
14:09 Changeset [17683] by rbasch
On IRIX, fix world-writable permission on /var/adm/appletalk/icons, to eliminate a vulnerability.

06/11/02:

17:12 Changeset [17682] by jweiss
1) deal with hosts that have MX records, but not A records 2) deal with the 9.1 host which doesn't do an MX query by default 3) rototill the regression tests because they were completely broken, not that we ever run them

06/09/02:

17:45 Changeset [17681] by ghudson
Pull up 1.7 to athena-9_1 branch.
17:43 Changeset [17680] by ghudson
Module to fix remote crash bug (otherwise same source as last rev). This is the nonfs module (the backport of the openafs fix breaks the NFS translator), but I didn't want to change the name.

06/07/02:

17:09 Changeset [17679] by zacheiss
Spec file for texinfo.
17:08 Changeset [17678] by zacheiss
Don't keep track of our number of unauthenticated forked children and drop incoming connections based on it. It causes a worse denial of service attack than it actually fixes.
12:59 Changeset [17677] by ghudson
Pull up 1.1 to athena-9_1 branch.
12:59 Changeset [17676] by ghudson
Pull up 1.3 to athena-9_1 branch.
12:59 Changeset [17675] by ghudson
Pull up 1.14 to athena-9_1 branch.
12:59 Changeset [17674] by ghudson
Pull up 1.11 to athena-9_1 branch.
12:57 Changeset [17673]
This commit was manufactured by cvs2svn to create branch 'athena-9_1'.
12:57 Changeset [17672] by ghudson
Default to letter paper, not A4.
12:55 Changeset [17671] by ghudson
Turn off blinking cursor.
12:55 Changeset [17670] by ghudson
Awful hack: add symlinks for gnumeric so that oafd can find its .oaf files.
12:36 Changeset [17669] by ghudson
Merge BIND 9.2.1 onto Athena 9.1 branch.
02:35 Changeset [17668] by ghudson
This commit was generated by cvs2svn to compensate for changes in r17667, which included commits to RCS files with non-trunk default branches.
02:35 Changeset [17667] by ghudson
Not present in bind 9.2.1.
01:29 Changeset [17666]
This commit was manufactured by cvs2svn to create branch 'athena-9_1'.
01:29 Changeset [17665]
This commit was manufactured by cvs2svn to create tag 'bind-9_2_1'.
01:29 Changeset [17664] by ghudson
This commit was generated by cvs2svn to compensate for changes in r17663, which included commits to RCS files with non-trunk default branches.
01:29 Changeset [17663] by ghudson
Import bind 9.2.1.
Note: See TracTimeline for information about the timeline view.