summaryrefslogtreecommitdiff
path: root/openbsd-compat/getgrouplist.c
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-10-07 13:22:41 +0100
committerColin Watson <cjwatson@debian.org>2015-09-17 13:52:39 +0100
commit1850a2c93f3dcfa3d682eaa85d1593c01d170429 (patch)
tree4f8672d1e453aeabf0babb63964636bd1a4e8fc9 /openbsd-compat/getgrouplist.c
parent70b18066d3921277861e98902c9cf41a10ac6898 (diff)
Restore TCP wrappers support
Support for TCP wrappers was dropped in OpenSSH 6.7. See this message and thread: https://lists.mindrot.org/pipermail/openssh-unix-dev/2014-April/032497.html It is true that this reduces preauth attack surface in sshd. On the other hand, this support seems to be quite widely used, and abruptly dropping it (from the perspective of users who don't read openssh-unix-dev) could easily cause more serious problems in practice. It's not entirely clear what the right long-term answer for Debian is, but it at least probably doesn't involve dropping this feature shortly before a freeze. Forwarded: not-needed Last-Update: 2014-10-07 Patch-Name: restore-tcp-wrappers.patch
Diffstat (limited to 'openbsd-compat/getgrouplist.c')
0 files changed, 0 insertions, 0 deletions