| Age | Commit message (Collapse) | Author |
|---|
|
|
|
Upstream seems to intend to gradually phase this out, so don't assume
that this will remain the default forever. However, we were late in
adopting the upstream sshd_config changes, so it makes sense to extend
the grace period (closes: #852320).
|
|
introduced in 1:7.4p1-1; closes: #852781).
|
|
|
|
|
|
#819361).
|
|
|
|
protocol 1 support from sshd (closes: #851573).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
first test in a series for a given MAC happens to modify the low bytes of a packet length.
|
|
|
|
|
|
directory is unreadable by the openssh-tests user.
|
|
|
|
failures.
|
|
doesn't seem to help.
|
|
|
|
the privsep monitor.
|
|
|
|
|
|
passwordless sudo.
|
|
|
|
|
|
|
|
upstream default), and document that setting ServerAliveInterval to 300 by default if BatchMode is set is Debian-specific (closes: #765630).
|
|
* Start handling /etc/ssh/sshd_config using ucf. The immediate motivation
for this is to deal with deprecations of options related to protocol 1,
but something like this has been needed for a long time (closes:
#419574, #848089):
- sshd_config is now a slightly-patched version of upstream's, and only
contains non-default settings (closes: #147201).
- I've included as many historical md5sums of default versions of
sshd_config as I could reconstruct from version control, but I'm sure
I've missed some.
- Explicitly synchronise the debconf database with the current
configuration file state in openssh-server.config, to ensure that the
PermitRootLogin setting is properly preserved.
- UsePrivilegeSeparation now defaults to the stronger "sandbox" rather
than "yes", per upstream.
|
|
|
|
|
|
on new installations.
|
|
|
|
|
|
|
|
|
|
interoperability tests.
|
|
|
|
|
|
target.
|
|
debian/.gitignore, in order to make the source tree more dgit-compatible.
|
|
|
|
sufficient.
|
|
|
|
|
|
|
|
|
