Ignore extra groups that don't fit in the buffer passed to getgrouplist(3)

Our kernel supports 16 groups (NGROUPS_MAX), but nothing prevents
an admin from adding a user to more groups. With that tw

Ignore extra groups that don't fit in the buffer passed to getgrouplist(3)

Our kernel supports 16 groups (NGROUPS_MAX), but nothing prevents
an admin from adding a user to more groups. With that tweak we'll keep
on ignoring them instead of potentially reading past the buffer passed to
getgrouplist(3). That behavior is explicitely described in initgroups(3).

ok millert@ gilles@

show more ...

Move checks for lists of users or groups into their own function.
This is a no-op on OpenBSD but will make things easier in -portable,
eg on systems where these checks should be case-insensitive. ok

Move checks for lists of users or groups into their own function.
This is a no-op on OpenBSD but will make things easier in -portable,
eg on systems where these checks should be case-insensitive. ok djm@

show more ...

Remove pattern length argument from match_pattern_list(),
we only ever use it for strlen(pattern).

Prompted by hanno AT hboeck.de pointing an out-of-bound read
error caused by an incorrect pattern l

Remove pattern length argument from match_pattern_list(),
we only ever use it for strlen(pattern).

Prompted by hanno AT hboeck.de pointing an out-of-bound read
error caused by an incorrect pattern length found using AFL
and his own tools.

ok markus@

show more ...

Reduce use of <sys/param.h> and transition to <limits.h> throughout.
ok djm markus

bye, bye xfree(); ok markus@

support negation of groups in "Match group" block (bz#1315); ok dtucker@

almost entirely get rid of the culture of ".h files that include .h files"
ok djm, sort of ok stevesk
makes the pain stop in one easy step

move #include <sys/param.h> out of includes.h

move #include <unistd.h> out of includes.h

move #include <grp.h> out of includes.h

Put $OpenBSD$ tags back (as comments) to replace the RCSID()s that
Theo nuked - our scripts to sync -portable need them in the files

RCSID() can die

rename log() into logit() to avoid name conflict. markus ok, from netbsd

$OpenBSD$ and RCSID() cleanup: don't use RCSID() in .h files; add
missing RCSID() to .c files and remove dup /*$OpenBSD$*/ from .c
files. ok markus@

remove comments from .h, since they are cut&paste from the .c files
and out of sync

$OpenBSD$

split ssh.h and try to cleanup the #include mess. remove unnecessary #includes.
rename util.[ch] -> misc.[ch]

support supplementary group in {Allow,Deny}Groups
from stevesk@pobox.com