summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2005-09-02* Work around the ssh-askpass alternative somehow ending up in manual modeColin Watson
pointing to the obsolete /usr/lib/ssh/gnome-ssh-askpass.
2005-07-09Do the IDEA host key check on a temporary file to avoid alteringColin Watson
/etc/ssh/ssh_host_key itself (closes: #312312).
2005-07-09fix awful formatting in check_idea_keyColin Watson
2005-07-07Finish 1:4.1p1-6.Colin Watson
2005-07-07Fix one-character typo that meant the binaries in openssh-client andColin Watson
openssh-server got recompiled with the wrong options during 'debian/rules install' (closes: #317088, #317238, #317241).
2005-07-03Finish 1:4.1p1-5.Colin Watson
2005-07-03Allow ~/.ssh/config to be group-writable, provided that the group inColin Watson
question contains only the file's owner (closes: #314347).
2005-07-03Disable btmp logging, since Debian's /var/log/btmp has inappropriateColin Watson
permissions (closes: #314956).
2005-07-03documentation directory reorganisation closes: #314745Colin Watson
2005-07-03Ship README.dns (closes: #284874).Colin Watson
2005-07-03Make /usr/share/doc/openssh-server and /usr/share/doc/ssh symlinks toColin Watson
/usr/share/doc/openssh-client.
2005-07-03debconf-updatepoColin Watson
2005-07-02Add Vietnamese debconf template translation (thanks, Clytie Siddall;Colin Watson
closes: #316636).
2005-06-30Drop priority of ssh to extra to match the override file.Colin Watson
2005-06-24Update Brazilian Portuguese debconf template translation (thanks, AndréColin Watson
Luís Lopes; closes: #315477).
2005-06-17Build-depend on libselinux1-dev on ppc64 too (closes: #314625).Colin Watson
2005-06-17Finish 1:4.1p1-4.Colin Watson
2005-06-17Switch to debhelper compat level 3, since 2 is deprecated.Colin Watson
2005-06-17Restore /usr/lib/sftp-server temporarily, as a symlink toColin Watson
/usr/lib/openssh/sftp-server (closes: #312891).
2005-06-17Re-enable ssh-askpass-gnome on the Hurd, now that its build-dependenciesColin Watson
are available.
2005-06-17close #308555Colin Watson
2005-06-17Manoj Srivastava:Colin Watson
- Added SELinux capability, and turned it on be default. Added restorecon calls in preinst and postinst (should not matter if the machine is not SELinux aware). By and large, the changes made should have no effect unless the rules file calls --with-selinux; and even then there should be no performance hit for machines not actively running SELinux. - Modified the preinst and postinst to call restorecon to set the security context for the generated public key files. - Added a comment to /etc/pam.d/ssh to indicate that an SELinux system may want to also include pam_selinux.so.
2005-06-14Update German debconf template translation (thanks, Jens Seidel; closes:Colin Watson
#313949).
2005-06-08openssh-client and openssh-server conflict with ssh-krb5, as ssh-krb5 onlyColin Watson
conflicts with ssh (closes: #312475).
2005-06-06Finish 1:4.1p1-3.Colin Watson
2005-06-02Finish 1:4.1p1-2.Colin Watson
2005-06-01Apply Linux 2.2 workaround (see #239999) only on Linux.Colin Watson
2005-06-01Fix DEB_HOST_ARCH_OS/DEB_HOST_GNU_SYSTEM compatibility handling.Colin Watson
2005-05-31ssh-keygen -> ssh-keysign (OK Matti Pöllä), in case this translation getsColin Watson
resurrected
2005-05-31Remove unnecessary SSH_KEYSIGN variable overrides.Colin Watson
2005-05-31Fix picky lintian errors about slogin symlinks.Colin Watson
2005-05-31Add lintian overrides for the above (setuid-binary, no-debconf-templates).Colin Watson
2005-05-31Since ssh-keysign isn't used by default (you need to set EnableSSHKeysignColin Watson
to "yes" in /etc/ssh/ssh_config), having a debconf question to ask whether it should be setuid is overkill, and the question text had got out of date anyway. Remove this question, ship ssh-keysign setuid in openssh-client.deb, and set a statoverride if the debconf question was previously set to false.
2005-05-31Drop debconf support for allowing SSH protocol 1, which is discouraged andColin Watson
has not been the default since openssh 1:3.0.1p1-1. Users who need this should edit sshd_config instead (closes: #147212).
2005-05-31Finish 1:4.1p1-1.Colin Watson
2005-05-31Fix up very old sshd_config files that refer to /usr/libexec/sftp-serverColin Watson
(closes: #141979).
2005-05-31Change libexecdir to /usr/lib/openssh, and fix up various alternatives andColin Watson
configuration files to match (closes: #87900, #151321).
2005-05-30re-enabling PasswordAuthentication by default closes: #247521Colin Watson
2005-05-30Disable ChallengeResponseAuthentication in new installations, returning toColin Watson
PasswordAuthentication by default, since it now supports PAM and apparently works better with a non-threaded sshd.
2005-05-30Take upstream's hint and disable the unsupported USE_POSIX_THREADSColin Watson
(closes: #295757, #308868, and possibly others; may open other bugs). Use PAM password authentication to avoid #278394. In future I may provide two sets of binaries built with and without this option, since it seems I can't win.
2005-05-30bump changelog to 1:4.1p1-1; 4.1p1 closes: #192234Colin Watson
2005-05-26openssh-server Suggests: rssh (closes: #233012).Colin Watson
2005-05-26Finish 1:4.0p1-1.Colin Watson
2005-05-26note that sshd still doesn't work on the HurdColin Watson
2005-05-254.0p1 closes: #163933 ($HOME/.hushlogin mentioned in ssh(8) FILES)Colin Watson
2005-05-25Note in ssh_config(5) that the SetupTimeOut option is Debian-specificColin Watson
(closes: #307069).
2005-05-25Enable HashKnownHosts by default. This only affects new entries; useColin Watson
'ssh-keygen -H' to convert an entire known_hosts file to hashed format.
2005-05-254.0p1 closes: #87253, #192206 (port forwarding improvements)Colin Watson
2005-05-25close earliest merged bug (#257130 instead of #303362)Colin Watson
2005-05-254.0p1 closes: #303452Colin Watson