1 files changed, 11 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index 671a44922..aae858b96 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,17 @@ openssh (1:4.1p1-4) UNRELEASED; urgency=low
 
   * openssh-client and openssh-server conflict with ssh-krb5, as ssh-krb5
     only conflicts with ssh (closes: #312475).
+  * Manoj Srivastava:
+    - Added SELinux capability, and turned it on be default. Added
+      restorecon calls in preinst and postinst (should not matter if the
+      machine is not SELinux aware). By and large, the changes made should
+      have no effect unless the rules file calls --with-selinux; and even
+      then there should be no performance hit for machines not actively
+      running SELinux.
+    - Modified the preinst and postinst to call restorecon to set the
+      security context for the generated public key files.
+    - Added a comment to /etc/pam.d/ssh to indicate that an SELinux system
+      may want to also include pam_selinux.so.
   * debconf template translations:
     - Update German (thanks, Jens Seidel; closes: #313949).