Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-05-06 | Use dh-autoreconf. | Colin Watson | |
2013-03-25 | Add ssh-agent upstart user job. This implements something similar to | Stéphane Graber | |
the 90x11-common_ssh-agent Xsession script. That is, start ssh-agent and set the appropriate environment variables (closes: #703906). | |||
2012-11-26 | Simplify --with-consolekit handling. | Colin Watson | |
2012-11-26 | Install apport hooks. | Colin Watson | |
2012-11-26 | Merge Upstart job scripting support from Ubuntu, to handle the Upstart job ↵ | Colin Watson | |
being primary there. | |||
2012-11-25 | Only build with -j if DEB_BUILD_OPTIONS=parallel=* is used (closes: | Colin Watson | |
#694282). | |||
2012-10-31 | * Merge from Ubuntu: | Colin Watson | |
- Add support for registering ConsoleKit sessions on login. (This is currently enabled only when building for Ubuntu.) | |||
2012-09-28 | Use xz compression for binary packages. | Colin Watson | |
2012-06-24 | Tighten libssl1.0.0 and libcrypto1.0.0-udeb dependencies to the current | Colin Watson | |
"fix" version at build time (closes: #678661). | |||
2012-04-02 | * Fix cross-building: | Colin Watson | |
- Allow using a cross-architecture pkg-config. - Pass default LDFLAGS to contrib/Makefile. - Allow dh_strip to strip gnome-ssh-askpass, rather than calling 'install -s'. | |||
2012-04-01 | Use dpkg-buildflags, including for hardening support; drop use of | Colin Watson | |
hardening-includes. | |||
2011-09-06 | * New upstream release (http://www.openssh.org/txt/release-5.9). | Colin Watson | |
- Introduce sandboxing of the pre-auth privsep child using an optional sshd_config(5) "UsePrivilegeSeparation=sandbox" mode that enables mandatory restrictions on the syscalls the privsep child can perform. - Add new SHA256-based HMAC transport integrity modes from http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt. - The pre-authentication sshd(8) privilege separation slave process now logs via a socket shared with the master process, avoiding the need to maintain /dev/log inside the chroot (closes: #75043, #429243, #599240). - ssh(1) now warns when a server refuses X11 forwarding (closes: #504757). - sshd_config(5)'s AuthorizedKeysFile now accepts multiple paths, separated by whitespace (closes: #76312). The authorized_keys2 fallback is deprecated but documented (closes: #560156). - ssh(1) and sshd(8): set IPv6 traffic class from IPQoS, as well as IPv4 ToS/DSCP (closes: #498297). - ssh-add(1) now accepts keys piped from standard input. E.g. "ssh-add - < /path/to/key" (closes: #229124). - Clean up lost-passphrase text in ssh-keygen(1) (closes: #444691). - Say "required" rather than "recommended" in unprotected-private-key warning (LP: #663455). | |||
2011-07-29 | Use 'dpkg-vendor --derives-from Ubuntu' to detect Ubuntu systems rather | Colin Watson | |
than 'lsb_release -is' so that Ubuntu derivatives behave the same way as Ubuntu itself. | |||
2011-07-29 | Only recommend ssh-import-id when built on Ubuntu (closes: #635887). | Colin Watson | |
2010-04-17 | Use dh_installinit -n, since our maintainer scripts already handle this | Colin Watson | |
more carefully (thanks, Julien Cristau). | |||
2010-04-08 | Use dh_install more effectively. | Colin Watson | |
2010-04-08 | remove obsolete Ssh.bin hack, no longer needed with new PKCS#11 smartcard ↵ | Colin Watson | |
handling | |||
2010-04-08 | remove old ssh_prng_cmds handling; we never use this, and it's unnecessary ↵ | Colin Watson | |
with debhelper v3 anyway | |||
2010-04-07 | Convert to dh(1), and use dh_installdocs --link-doc. | Colin Watson | |
2010-03-29 | Hardcode the location of xauth to /usr/bin/xauth rather than | Colin Watson | |
/usr/bin/X11/xauth (thanks, Aron Griffis; closes: #575725, LP: #8440). xauth no longer depends on x11-common, so we're no longer guaranteed to have the /usr/bin/X11 symlink available. I was taking advantage of the /usr/bin/X11 symlink to smooth X's move to /usr/bin, but this is far enough in the past now that it's probably safe to just use /usr/bin. | |||
2010-03-17 | Fix substitution of ETC_PAM_D_SSH, following the rename in 1:4.7p1-4. | Colin Watson | |
2010-03-01 | mark quilt-setup target as phony | Colin Watson | |
2010-03-01 | Include debian/ssh-askpass-gnome.png in the Debian tarball now that | Colin Watson | |
we're using a source format that permits this, rather than messing around with uudecode. | |||
2010-03-01 | Fix 'debian/rules quilt-setup' to avoid writing .orig files if some | Colin Watson | |
patches apply with offsets. | |||
2010-02-28 | * Update README.source to match, and add a 'quilt-setup' target to | Colin Watson | |
debian/rules for the benefit of those checking out the package from revision control. * All patches are now maintained separately and tagged according to DEP-3. | |||
2010-02-22 | run dh_installexamples after dh_link | Colin Watson | |
2010-01-31 | Honour DEB_BUILD_OPTIONS=nocheck. | Colin Watson | |
2010-01-31 | Use dh_lintian. | Colin Watson | |
2010-01-31 | Install upstream sshd_config as an example (closes: #415008). | Colin Watson | |
2010-01-31 | Link with -Wl,--as-needed (closes: #560155). | Colin Watson | |
2010-01-25 | Drop change from 1:3.8p1-3 to avoid setresuid() and setresgid() system | Colin Watson | |
calls. This only applied to Linux 2.2, which it's no longer feasible to run anyway (see 1:5.2p1-2 changelog). | |||
2010-01-12 | Don't run tests when cross-compiling. | Colin Watson | |
2010-01-12 | Use host compiler for ssh-askpass-gnome when cross-compiling. | Colin Watson | |
2010-01-02 | Use hardening-includes for hardening logic (thanks, Kees Cook; closes: | Colin Watson | |
#561887). | |||
2009-08-28 | Build with just -fPIC on mips/mipsel, not -fPIE as well (thanks, LIU Qi; | Colin Watson | |
closes: #538313). | |||
2009-07-31 | Upgrade to debhelper v7. | Colin Watson | |
2009-06-05 | this isn't needed, already removed above | Colin Watson | |
2009-06-05 | Remove /var/run/sshd from openssh-server package; it will be created at | Colin Watson | |
run-time before starting the server. | |||
2009-06-05 | Build with -fPIC on mips/mipsel (thanks, Luk Claes; closes: #531942). | Colin Watson | |
2009-01-28 | Add ufw integration (thanks, Didier Roche; see | Colin Watson | |
https://wiki.ubuntu.com/UbuntuFirewall#Integrating%20UFW%20with%20Packages; LP: #261884). | |||
2008-09-12 | Configure with --disable-strip; dh_strip will deal with stripping | Colin Watson | |
binaries and will honour DEB_BUILD_OPTIONS (thanks, Bernhard R. Link; closes: #498681). | |||
2008-07-23 | Add lintian overrides for empty /usr/share/doc/openssh-client | Colin Watson | |
directories in openssh-server and ssh (necessary due to being symlink targets). | |||
2008-07-22 | Remove our local version of moduli(5) now that there's one upstream. | Colin Watson | |
2008-06-08 | Update DEB_BUILD_OPTIONS parsing code from policy 3.8.0. | Colin Watson | |
2008-06-08 | Drop openssh-client-udeb isinstallable hack, as main-menu (>= 1.26) now | Colin Watson | |
takes care of that (thanks, Frans Pop; closes: #484404). | |||
2008-05-20 | Generate two keys with the PID forced to the same value and test that | Colin Watson | |
they differ, to defend against recurrences of the recent Debian OpenSSL vulnerability. | |||
2008-05-13 | add repair instructions from Matt | Colin Watson | |
2008-02-08 | * Move /etc/pam.d/ssh to /etc/pam.d/sshd, allowing us to stop defining | Colin Watson | |
SSHD_PAM_SERVICE (closes: #255870). | |||
2008-02-04 | * Include the autogenerated debian/copyright in the source package. | Colin Watson | |
2008-01-11 | * Drop source-compatibility with Debian 3.0: | Colin Watson | |
- Remove support for building with GNOME 1. This allows simplification of our GNOME build-dependencies (see #460136). - Remove hacks to support the old PAM configuration scheme. - Remove compatibility for building without po-debconf. * Build-depend on libgtk2.0-dev rather than libgnomeui-dev. As far as I can see, the GTK2 version of ssh-askpass-gnome has never required libgnomeui-dev. |