Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
Upstream seems to intend to gradually phase this out, so don't assume
that this will remain the default forever. However, we were late in
adopting the upstream sshd_config changes, so it makes sense to extend
the grace period (closes: #852320).
|
|
|
|
* Start handling /etc/ssh/sshd_config using ucf. The immediate motivation
for this is to deal with deprecations of options related to protocol 1,
but something like this has been needed for a long time (closes:
#419574, #848089):
- sshd_config is now a slightly-patched version of upstream's, and only
contains non-default settings (closes: #147201).
- I've included as many historical md5sums of default versions of
sshd_config as I could reconstruct from version control, but I'm sure
I've missed some.
- Explicitly synchronise the debconf database with the current
configuration file state in openssh-server.config, to ensure that the
PermitRootLogin setting is properly preserved.
- UsePrivilegeSeparation now defaults to the stronger "sandbox" rather
than "yes", per upstream.
|
|
|
|
#1588457).
|
|
|
|
|
|
|
|
outdated SSH1-only servers (closes: #807107).
|
|
#806962).
|
|
|
|
to undo the sshd_config change automatically without compounding the problem of (arguably) overwriting user configuration.
|
|
|
|
previous unofficial builds (closes: #231472).
|
|
|
|
(until sarge+2) it's still honoured to avoid breaking existing
configurations, but the right approach is now to remove the openssh-server
package if you don't want to run the server. Add a NEWS item to that
effect.
|
|
package.
|