Attachment 2111 Details for Bug 1949 – permitopen none with sshd -T support

[patch] permitopen none with sshd -T support

openssh-permitopen-none.patch (text/plain), 2.40 KB, created by Darren Tucker on 2011-12-02 11:59:16 AEDT

(hide)

Description:

Filename:

MIME Type:

Creator: Darren Tucker

Created: 2011-12-02 11:59:16 AEDT

Size: 2.40 KB

patch

obsolete

>Index: channels.c
>===================================================================
>RCS file: /home/dtucker/openssh/cvs/openssh/channels.c,v
>retrieving revision 1.306
>diff -u -p -r1.306 channels.c
>--- channels.c	2 Oct 2011 07:59:03 -0000	1.306
>+++ channels.c	2 Dec 2011 00:47:24 -0000
>@@ -3127,6 +3127,18 @@ channel_add_adm_permitted_opens(char *ho
> }
> 
> void
>+channel_disable_adm_local_opens(void)
>+{
>+	if (num_adm_permitted_opens == 0) {
>+		permitted_adm_opens = xmalloc(sizeof(*permitted_adm_opens));
>+		permitted_adm_opens[num_adm_permitted_opens].host_to_connect
>+		   = NULL;
>+		num_adm_permitted_opens = 1;
>+	}
>+	
>+}
>+
>+void
> channel_clear_permitted_opens(void)
> {
> 	int i;
>@@ -3167,7 +3179,9 @@ channel_print_adm_permitted_opens(void)
> 		return;
> 	}
> 	for (i = 0; i < num_adm_permitted_opens; i++)
>-		if (permitted_adm_opens[i].host_to_connect != NULL)
>+		if (permitted_adm_opens[i].host_to_connect == NULL)
>+			printf(" none");
>+		else
> 			printf(" %s:%d", permitted_adm_opens[i].host_to_connect,
> 			    permitted_adm_opens[i].port_to_connect);
> 	printf("\n");
>Index: channels.h
>===================================================================
>RCS file: /home/dtucker/openssh/cvs/openssh/channels.h,v
>retrieving revision 1.102
>diff -u -p -r1.102 channels.h
>--- channels.h	2 Oct 2011 07:59:03 -0000	1.102
>+++ channels.h	2 Dec 2011 00:46:31 -0000
>@@ -253,6 +253,7 @@ void	 channel_set_af(int af);
> void     channel_permit_all_opens(void);
> void	 channel_add_permitted_opens(char *, int);
> int	 channel_add_adm_permitted_opens(char *, int);
>+void	 channel_disable_adm_local_opens(void);
> void	 channel_update_permitted_opens(int, int);
> void	 channel_clear_permitted_opens(void);
> void	 channel_clear_adm_permitted_opens(void);
>Index: servconf.c
>===================================================================
>RCS file: /home/dtucker/openssh/cvs/openssh/servconf.c,v
>retrieving revision 1.220
>diff -u -p -r1.220 servconf.c
>--- servconf.c	2 Oct 2011 07:57:38 -0000	1.220
>+++ servconf.c	2 Dec 2011 00:46:31 -0000
>@@ -1333,6 +1333,14 @@ process_server_config_line(ServerOptions
> 			}
> 			break;
> 		}
>+		if (strcmp(arg, "none") == 0) {
>+			if (*activep && n == -1) {
>+				channel_clear_adm_permitted_opens();
>+				options->num_permitted_opens = 1;
>+				channel_disable_adm_local_opens();
>+			}
>+			break;
>+		}
> 		if (*activep && n == -1)
> 			channel_clear_adm_permitted_opens();
> 		for (; arg != NULL && *arg != '\0'; arg = strdelim(&cp)) {

Flags:

djm: ok+

Actions: View | Diff

Attachments on bug 1949: 2104 | 2108 | 2111 | 2112 | 2116