]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
openssh: simplify login class restrictions
authorEd Maste <emaste@FreeBSD.org>
Tue, 31 Aug 2021 19:30:50 +0000 (15:30 -0400)
committerEd Maste <emaste@FreeBSD.org>
Wed, 1 Sep 2021 19:53:09 +0000 (15:53 -0400)
commit27ceebbc2402e4c98203c7eef9696f4bd3d326f8
tree32e1331517b4dff4e6815426f8c692efb2321eda
parentc511383de7a0325a80b9c5d2b8678b438db146dc
openssh: simplify login class restrictions

Login class-based restrictions were introduced in 5b400a39b8ad.  The
code was adapted for sshd's Capsicum sandbox and received many changes
over time, including at least fc3c19a9fceebd393de91cc3, and
e8c56fba2926.

During an attempt to upstream the work a much simpler approach was
suggested.  Adopt it now in the in-tree OpenSSH to reduce conflicts with
future updates.

Submitted by: Yuchiro Naito (against OpenSSH-portable on GitHub)
Obtained from: https://github.com/openssh/openssh-portable/pull/262
Reviewed by: allanjude, kevans
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D31760
crypto/openssh/auth.c
crypto/openssh/auth2.c
crypto/openssh/config.h
crypto/openssh/configure.ac
crypto/openssh/monitor.c
crypto/openssh/monitor.h
crypto/openssh/monitor_wrap.c
crypto/openssh/monitor_wrap.h
crypto/openssh/ssh_namespace.h
crypto/openssh/sshbuf-getput-basic.c
crypto/openssh/sshbuf.h