mirror of
https://github.com/freebsd/freebsd-src
synced 2024-07-08 20:26:31 +00:00
19261079b7
Some notable changes, from upstream's release notes: - sshd(8): Remove support for obsolete "host/port" syntax. - ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes". - ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm. - ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures. - ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one). - ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions. - scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default. - scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used. Additional integration work is needed to support FIDO/U2F in the base system. Deprecation Notice ------------------ OpenSSH will disable the ssh-rsa signature scheme by default in the next release. Reviewed by: imp MFC after: 1 month Relnotes: Yes Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D29985
135 lines
4.6 KiB
C
135 lines
4.6 KiB
C
#ifndef _HAVE_LOGINREC_H_
|
|
#define _HAVE_LOGINREC_H_
|
|
|
|
/*
|
|
* Copyright (c) 2000 Andre Lucas. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
/**
|
|
** loginrec.h: platform-independent login recording and lastlog retrieval
|
|
**/
|
|
|
|
#include "includes.h"
|
|
|
|
struct ssh;
|
|
|
|
/**
|
|
** you should use the login_* calls to work around platform dependencies
|
|
**/
|
|
|
|
/*
|
|
* login_netinfo structure
|
|
*/
|
|
|
|
union login_netinfo {
|
|
struct sockaddr sa;
|
|
struct sockaddr_in sa_in;
|
|
struct sockaddr_storage sa_storage;
|
|
};
|
|
|
|
/*
|
|
* * logininfo structure *
|
|
*/
|
|
/* types - different to utmp.h 'type' macros */
|
|
/* (though set to the same value as linux, openbsd and others...) */
|
|
#define LTYPE_LOGIN 7
|
|
#define LTYPE_LOGOUT 8
|
|
|
|
/* string lengths - set very long */
|
|
#define LINFO_PROGSIZE 64
|
|
#define LINFO_LINESIZE 64
|
|
#define LINFO_NAMESIZE 512
|
|
#define LINFO_HOSTSIZE 256
|
|
|
|
struct logininfo {
|
|
char progname[LINFO_PROGSIZE]; /* name of program (for PAM) */
|
|
int progname_null;
|
|
short int type; /* type of login (LTYPE_*) */
|
|
pid_t pid; /* PID of login process */
|
|
uid_t uid; /* UID of this user */
|
|
char line[LINFO_LINESIZE]; /* tty/pty name */
|
|
char username[LINFO_NAMESIZE]; /* login username */
|
|
char hostname[LINFO_HOSTSIZE]; /* remote hostname */
|
|
/* 'exit_status' structure components */
|
|
int exit; /* process exit status */
|
|
int termination; /* process termination status */
|
|
/* struct timeval (sys/time.h) isn't always available, if it isn't we'll
|
|
* use time_t's value as tv_sec and set tv_usec to 0
|
|
*/
|
|
unsigned int tv_sec;
|
|
unsigned int tv_usec;
|
|
union login_netinfo hostaddr; /* caller's host address(es) */
|
|
}; /* struct logininfo */
|
|
|
|
/*
|
|
* login recording functions
|
|
*/
|
|
|
|
/** 'public' functions */
|
|
|
|
/* construct a new login entry */
|
|
struct logininfo *login_alloc_entry(pid_t pid, const char *username,
|
|
const char *hostname, const char *line);
|
|
/* free a structure */
|
|
void login_free_entry(struct logininfo *li);
|
|
/* fill out a pre-allocated structure with useful information */
|
|
int login_init_entry(struct logininfo *li, pid_t pid, const char *username,
|
|
const char *hostname, const char *line);
|
|
/* place the current time in a logininfo struct */
|
|
void login_set_current_time(struct logininfo *li);
|
|
|
|
/* record the entry */
|
|
int login_login (struct logininfo *li);
|
|
int login_logout(struct logininfo *li);
|
|
#ifdef LOGIN_NEEDS_UTMPX
|
|
int login_utmp_only(struct logininfo *li);
|
|
#endif
|
|
|
|
/** End of public functions */
|
|
|
|
/* record the entry */
|
|
int login_write (struct logininfo *li);
|
|
int login_log_entry(struct logininfo *li);
|
|
|
|
/* set the network address based on network address type */
|
|
void login_set_addr(struct logininfo *li, const struct sockaddr *sa,
|
|
const unsigned int sa_size);
|
|
|
|
/*
|
|
* lastlog retrieval functions
|
|
*/
|
|
/* lastlog *entry* functions fill out a logininfo */
|
|
struct logininfo *login_get_lastlog(struct logininfo *li, const uid_t uid);
|
|
/* lastlog *time* functions return time_t equivalent (uint) */
|
|
unsigned int login_get_lastlog_time(const uid_t uid);
|
|
|
|
/* produce various forms of the line filename */
|
|
char *line_fullname(char *dst, const char *src, u_int dstsize);
|
|
char *line_stripname(char *dst, const char *src, int dstsize);
|
|
char *line_abbrevname(char *dst, const char *src, int dstsize);
|
|
|
|
void record_failed_login(struct ssh *, const char *, const char *,
|
|
const char *);
|
|
|
|
#endif /* _HAVE_LOGINREC_H_ */
|