summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2005-06-17Manoj Srivastava:Colin Watson
- Added SELinux capability, and turned it on be default. Added restorecon calls in preinst and postinst (should not matter if the machine is not SELinux aware). By and large, the changes made should have no effect unless the rules file calls --with-selinux; and even then there should be no performance hit for machines not actively running SELinux. - Modified the preinst and postinst to call restorecon to set the security context for the generated public key files. - Added a comment to /etc/pam.d/ssh to indicate that an SELinux system may want to also include pam_selinux.so.
2005-06-14Update German debconf template translation (thanks, Jens Seidel; closes:Colin Watson
#313949).
2005-06-08openssh-client and openssh-server conflict with ssh-krb5, as ssh-krb5 onlyColin Watson
conflicts with ssh (closes: #312475).
2005-06-06Finish 1:4.1p1-3.Colin Watson
2005-06-02Finish 1:4.1p1-2.Colin Watson
2005-06-01Apply Linux 2.2 workaround (see #239999) only on Linux.Colin Watson
2005-06-01Fix DEB_HOST_ARCH_OS/DEB_HOST_GNU_SYSTEM compatibility handling.Colin Watson
2005-05-31ssh-keygen -> ssh-keysign (OK Matti Pöllä), in case this translation getsColin Watson
resurrected
2005-05-31Remove unnecessary SSH_KEYSIGN variable overrides.Colin Watson
2005-05-31Fix picky lintian errors about slogin symlinks.Colin Watson
2005-05-31Add lintian overrides for the above (setuid-binary, no-debconf-templates).Colin Watson
2005-05-31Since ssh-keysign isn't used by default (you need to set EnableSSHKeysignColin Watson
to "yes" in /etc/ssh/ssh_config), having a debconf question to ask whether it should be setuid is overkill, and the question text had got out of date anyway. Remove this question, ship ssh-keysign setuid in openssh-client.deb, and set a statoverride if the debconf question was previously set to false.
2005-05-31Drop debconf support for allowing SSH protocol 1, which is discouraged andColin Watson
has not been the default since openssh 1:3.0.1p1-1. Users who need this should edit sshd_config instead (closes: #147212).
2005-05-31Finish 1:4.1p1-1.Colin Watson
2005-05-31Fix up very old sshd_config files that refer to /usr/libexec/sftp-serverColin Watson
(closes: #141979).
2005-05-31Change libexecdir to /usr/lib/openssh, and fix up various alternatives andColin Watson
configuration files to match (closes: #87900, #151321).
2005-05-30re-enabling PasswordAuthentication by default closes: #247521Colin Watson
2005-05-30Disable ChallengeResponseAuthentication in new installations, returning toColin Watson
PasswordAuthentication by default, since it now supports PAM and apparently works better with a non-threaded sshd.
2005-05-30Take upstream's hint and disable the unsupported USE_POSIX_THREADSColin Watson
(closes: #295757, #308868, and possibly others; may open other bugs). Use PAM password authentication to avoid #278394. In future I may provide two sets of binaries built with and without this option, since it seems I can't win.
2005-05-30bump changelog to 1:4.1p1-1; 4.1p1 closes: #192234Colin Watson
2005-05-30Merge 4.1p1 to the trunk.Colin Watson
2005-05-30Import OpenSSH 4.1p1.Colin Watson
2005-05-26openssh-server Suggests: rssh (closes: #233012).Colin Watson
2005-05-26Finish 1:4.0p1-1.Colin Watson
2005-05-26note that sshd still doesn't work on the HurdColin Watson
2005-05-25remove detritus from 4.0p1 mergeColin Watson
2005-05-25send SSH_RELEASE rather than SSH_VERSION in banners, preserving previousColin Watson
behaviour
2005-05-254.0p1 closes: #163933 ($HOME/.hushlogin mentioned in ssh(8) FILES)Colin Watson
2005-05-25Note in ssh_config(5) that the SetupTimeOut option is Debian-specificColin Watson
(closes: #307069).
2005-05-25Enable HashKnownHosts by default. This only affects new entries; useColin Watson
'ssh-keygen -H' to convert an entire known_hosts file to hashed format.
2005-05-254.0p1 closes: #87253, #192206 (port forwarding improvements)Colin Watson
2005-05-25close earliest merged bug (#257130 instead of #303362)Colin Watson
2005-05-254.0p1 closes: #303452Colin Watson
2005-05-254.0p1 closes: #220726Colin Watson
2005-05-25Don't build ssh-askpass-gnome on the Hurd, until GNOME is available toColin Watson
satisfy build-dependencies.
2005-05-25Hurd fixes:Colin Watson
- Link with -lcrypt. - Link with -lpthread rather than -pthread.
2005-05-25Drop workaround for #242462 on amd64; it's been fixed properly upstream.Colin Watson
2005-05-25 - (djm) Release 4.1p1Damien Miller
2005-05-254.0p1 closes: #303362Colin Watson
2005-05-25Restore Hurd X forwarding fix from #102991, lost somewhere along the way.Colin Watson
2005-05-25Update Finnish (thanks, Matti Pöllä; closes: #303787).Colin Watson
2005-05-25Add Ukrainian (thanks, Eugeniy Meshcheryakov; closes: #301852).Colin Watson
2005-05-25Update Czech debconf template translation (thanks, Miroslav Kure; closes:Colin Watson
#298744).
2005-05-25Enable libedit support in sftp; build-depend on libedit-dev.Colin Watson
2005-05-25Merge 4.0p1 to the trunk.Colin Watson
2005-05-25 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memoryDarren Tucker
allocation when retrieving core Windows environment. Add CYGWIN variable to propagated variables. Patch from vinschen at redhat.com, ok djm@
2005-05-25 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Ensure sufficient memoryDarren Tucker
allocation when retrieving core Windows environment. Add CYGWIN variable to propagated variables. Patch from vinschen at redhat.com, ok djm@
2005-05-25 - (dtucker) [auth-pam.c] Since people don't seem to be getting the messageDarren Tucker
that USE_POSIX_THREADS is unsupported, not recommended and generally a bad idea, it is now known as UNSUPPORTED_POSIX_THREADS_HACK. Attempting to use USE_POSIX_THREADS will now generate an error so we don't silently change behaviour. ok djm@
2005-05-25 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Update spec file versions to 4.1p1
2005-05-24restore portable-specific tweakDamien Miller
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-28 10:51:03 +0000