Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Aug 1997 23:02:48 -0700 (PDT)
From:      "Jamil J. Weatherbee" <jamil@counterintelligence.ml.org>
To:        Jimbo Bahooli <griffin@blackhole.iceworld.org>
Cc:        freebsd-hackers@FreeBSD.ORG
Subject:   Re: Patch to sshd to maintain consistency when using libwrap.
Message-ID:  <Pine.BSF.3.96.970831230149.1284A-100000@counterintelligence.ml.org>
In-Reply-To: <Pine.BSF.3.96.970901002120.196A-100000@blackhole.iceworld.org>

next in thread | previous in thread | raw e-mail | index | archive | help

One thing that I really really need is block encryption on an entire
filesystem under freebsd --- does this exist. also can I use ssh to
encrypt single files under idea.




On Mon, 1 Sep 1997, Jimbo Bahooli wrote:

> 	This patch to sshd only affects it when using libwrap.  One would
> expect sshd to log accepted connections just as tcpd, but that is not that
> case until this patch is added.  A long term solution I see is to add an
> opposite to refuse() to libwrap that will provide logging as refuse()
> does.
> 
> 
> --- sshd-old.c	Tue Apr 22 19:40:08 1997
> +++ sshd.c	Mon Sep  1 00:01:20 1997
> @@ -1020,7 +1020,14 @@
>  		    request_init(&req, RQ_DAEMON, av0, RQ_FILE, newsock, NULL);
>  		    fromhost(&req);
>  		    if (!hosts_access(&req))
> -		      refuse(&req);
> +			    {
> +				    refuse(&req);
> +			    }
> +			  else
> +			    {
> +				    syslog(allow_severity,"connect from %s", eval_client(&req));	    
> +			    }
> +			  
>  		  }
>  #endif /* LIBWRAP */
> 
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.970831230149.1284A-100000>