lsh-0.9.6 is a work-in-progress release. Changes include:

 * Improved behaviour of -z with no argument (see the docs)

 * First step of utmp/wtmp support. This version logs to wtmp using
   the logwtmp() function. I don't know if logwtmp() is a glibc:ism or
   if it is available on other systems (but I'll start a compile on
   Solaris before I go to bed). It doesn't yet update utmp, and it
   doesn't perform any reverse dns lookups.

 * The name resolution functions are replaced, and use getaddrinfo()
   if that function is available. My system has getaddrinfo(), but no
   IPv6, so testing on IPv6 systems could be interesting.

 * I added functions io_listen_local and io_connect_local to deal with
   AF_LOCAL sockets in a safe way (which is not entirely trivial).
   These functions are not used for anything yet. And they will cause
   a fatal failure whenever fchdir() fails in the situation below:

     old_cd = open(".", ...);
     ...
     fchdir(old_cd);

   I don't know how to get around that, and changing the cwd seems
   necessary, in order to make  sure that the sockets are created in a
   directory with the right permissions, with no symlink/race attacks.

     http://www.lysator.liu.se/~nisse/archive/lsh-0.9.6.tar.gz
     ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-0.9.6.tar.gz

Happy hacking,
/Niels

Reply via email to