Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-12-25 | auth: use caphash and capuse under /dev instead of #¤ | cinap_lenrek | |
2022-12-12 | libauth: aand also fix the leak it in the deactivated code | cinap_lenrek | |
2022-12-12 | libauth: Fix a memory leak in auth_getkey (thanks josiah fentsos) | cinap_lenrek | |
2022-05-28 | auth/newns: add chdev command | Jacob Moody | |
2020-12-23 | libauth: re-implement procsetuser() to use /proc instead of #c/user | cinap_lenrek | |
2020-12-19 | libauth: add procsetuser() function to change user id of the calling process | cinap_lenrek | |
Provide a central function to change the user id of the calling process. This is mostly used by programs to become the none user, followed by a call to newns(). | |||
2020-12-09 | backout OCEXEC changes when potentially opening /srv files | cinap_lenrek | |
Opening a /srv file sets the close-on-exec flag on the shared channel breaking the exportfs openmount() hack. The devsrv tries to prevent posting a channel with the close-on-exec or remove-on-close flags. but nothing currently prevents this poisoning on open. Until this gets fixed in eigther exportfs or devsrv, i'll back out the changes that could have potential side effects like this. | |||
2020-12-07 | libauth: open internal file-descriptors with OCEXEC flag | cinap_lenrek | |
2020-05-02 | make bind(2) error handling consistent | cinap_lenrek | |
The mount() and bind() syscalls return -1 on error, and the mountid sequence number on success. The manpage states that the mountid sequence number is a positive integer, but the kernels implementation currently uses a unsigned 32-bit integer and does not guarantee that the mountid will not become negative. Most code just cares about the error, so test for the -1 error value only. | |||
2019-08-02 | libauth: do not set errstr in auth_rpc() for ARdone result (thanks majiru) | cinap_lenrek | |
2018-05-20 | separate MSCHAP(v2) and NTLM(v2) authentication | cinap_lenrek | |
due to linux omiting the final Z(4) in the NTLMv2 reply, and the need for the windom for LMv2 authentication, here is a new AuthNTLM ticket request now with length and dom fields. | |||
2018-01-21 | libauth: add auth_respondAI() function to get AuthInfo for mschap/mschapv2 | cinap_lenrek | |
2018-01-02 | libauth: simplify _attrfmt() using fmtprint() avoiding stack buffer | cinap_lenrek | |
2018-01-02 | libauth: remove auth_wep() function, and non-existing httpauth() declaration | cinap_lenrek | |
2018-01-01 | libauth: fix out of bounds memory access in _parseattr() | cinap_lenrek | |
empty token would read ""[-1] accidentally in the AttrQuery case. | |||
2017-12-03 | libauth: replace proto=p9cr with new proto=dp9ik/p9sk1 role=login for ↵ | cinap_lenrek | |
auth_userpasswd() | |||
2016-12-22 | libauth: don't attempt to mount when opening mount srv file fails in nsop() | cinap_lenrek | |
making newnsdebug error messages more usefull... | |||
2016-08-04 | libauth: fix mount file-descriptor leak in auth_chuid() | cinap_lenrek | |
2016-05-04 | remove support for import command in namespace files | cinap_lenrek | |
2016-04-10 | libauth: remove unneeded includes for authsrv.h, avoid pulling in dependency ↵ | cinap_lenrek | |
for rerrstr() | |||
2016-01-06 | auth: release dp9ik implementation and reentrant factotum | cinap_lenrek | |
2015-08-19 | libauthsrv: generalize ticket service, not hardcoding ticket format and DES ↵ | cinap_lenrek | |
encryption this is in preparation for replacing DES ticket encryption with something better. but first need to make the code stop making assumptions. the wire encoding of the Ticket might be variable length with TICKETLEN just giving an upper bound. the details will be handled by libauthsrv _asgetticket() and _asgetresp() funciotns. the Authenticator and Passwordreq structures are encrypted with the random ticket key. The encryption schmeme will depend on the Ticket format used, so we pass the Ticket* structure instead of the DES key. introduce Authkey structure that will hold all the required cryptographic keys instead of passing DES key. | |||
2014-05-24 | libauth: dont print blobs in auth_proxy error strings | cinap_lenrek | |
2013-09-16 | libauth: add sanity check for auth_proxy write size | cinap_lenrek | |
2013-04-11 | libauth: auth_chuid empty (from sources) | cinap_lenrek | |
instead of an "i/o count too small", detect a missing capability (empty, null string) before the write, and diagnose it as such. | |||
2011-03-30 | Import sources from 2011-03-30 iso image - lib | Taru Karttunen | |
2011-03-30 | Import sources from 2011-03-30 iso image | Taru Karttunen | |