summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--debian/README.Debian24
-rw-r--r--debian/changelog7
2 files changed, 29 insertions, 2 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
index c2858d2f9..fd969d7c9 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -11,11 +11,31 @@ ssh that is going to make it into Debian proper, being the only one
11that complies with the Debian Free Software Guidelines. 11that complies with the Debian Free Software Guidelines.
12 12
13If you were expecting to get the non-free version of ssh (1.2.27 or 13If you were expecting to get the non-free version of ssh (1.2.27 or
14whatever) when you installed this package, please install ssh-nonfree 14whatever) when you installed this package, then you're out of luck, as
15instead, which is what we're now calling the non-free version. 15Debian don't ship it.
16 16
17=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 17=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
18 18
19Privilege Separation
20--------------------
21
22As of 3.3, openssh has employed privilege separation to reduce the
23quantity of code that runs as root, thereby reducing the impact of
24some security holes in sshd.
25
26Unfortunately, privilege separation interacts badly with PAM. Any PAM
27session modules that need to run as root (pam_mkhomedir, for example)
28will fail, and PAM keyboard-interactive authentication won't work.
29
30Privilege separation is turned on by default, so if you decide you
31want it turned off, you need to add "UsePrivilegeSeparation no" to
32/etc/ssh/sshd_config
33
34NB! If you are running a 2.0 series Linux kernel, then privilege
35separation will not work at all, and your sshd will fail to start
36unless you explicity turn privilege separation off.
37
38
19PermitRootLogin set to yes 39PermitRootLogin set to yes
20-------------------------- 40--------------------------
21 41
diff --git a/debian/changelog b/debian/changelog
index 32f541a0f..f2e32f13e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
1openssh (1:3.4p1-2) unstable; urgency=high
2
3 * Get a security-fixed version into unstable
4 * Also tidy README.Debian up a little
5
6 -- Matthew Vernon <matthew@debian.org> Fri, 28 Jun 2002 17:20:59 +0100
7
1openssh (1:3.4p1-1) testing; urgency=high 8openssh (1:3.4p1-1) testing; urgency=high
2 9
3 * Extend my tendrils back into this package (Closes: #150915, #151098) 10 * Extend my tendrils back into this package (Closes: #150915, #151098)