From 48241bb588b5a831640fa543e5f9361500d48d36 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Sun, 28 Feb 2010 00:28:13 +0000 Subject: DEP-3 tagging of versioning and file system layout --- debian/patches/authorized-keys-man-symlink.patch | 5 +++++ debian/patches/debian-banner.patch | 8 ++++++++ debian/patches/lintian-symlink-pickiness.patch | 4 ++++ debian/patches/package-versioning.patch | 9 +++++++++ 4 files changed, 26 insertions(+) diff --git a/debian/patches/authorized-keys-man-symlink.patch b/debian/patches/authorized-keys-man-symlink.patch index 1e8aab147..d15293e93 100644 --- a/debian/patches/authorized-keys-man-symlink.patch +++ b/debian/patches/authorized-keys-man-symlink.patch @@ -1,3 +1,8 @@ +Description: Install authorized_keys(5) as a symlink to sshd(8) +Author: Tomas Pospisek +Bug-Debian: http://bugs.debian.org/441817 +Last-Update: 2010-02-28 + Index: b/Makefile.in =================================================================== --- a/Makefile.in diff --git a/debian/patches/debian-banner.patch b/debian/patches/debian-banner.patch index 814294e26..a9b38e281 100644 --- a/debian/patches/debian-banner.patch +++ b/debian/patches/debian-banner.patch @@ -1,3 +1,11 @@ +Description: Add DebianBanner server configuration option + Setting this to "no" causes sshd to omit the Debian revision from its + initial protocol handshake, for those scared by package-versioning.patch. +Author: Kees Cook +Bug-Debian: http://bugs.debian.org/562048 +Forwarded: not-needed +Last-Update: 2010-02-28 + Index: b/servconf.c =================================================================== --- a/servconf.c diff --git a/debian/patches/lintian-symlink-pickiness.patch b/debian/patches/lintian-symlink-pickiness.patch index 33acec411..7cd8ab173 100644 --- a/debian/patches/lintian-symlink-pickiness.patch +++ b/debian/patches/lintian-symlink-pickiness.patch @@ -1,3 +1,7 @@ +Description: Fix picky lintian errors about slogin symlinks +Author: Colin Watson +Last-Update: 2010-02-28 + Index: b/Makefile.in =================================================================== --- a/Makefile.in diff --git a/debian/patches/package-versioning.patch b/debian/patches/package-versioning.patch index 4c227f054..939b9adca 100644 --- a/debian/patches/package-versioning.patch +++ b/debian/patches/package-versioning.patch @@ -1,3 +1,12 @@ +Description: Include the Debian version in our identification + This makes it easier to audit networks for versions patched against + security vulnerabilities. It has little detrimental effect, as attackers + will generally just try attacks rather than bothering to scan for + vulnerable-looking version strings. (However, see debian-banner.patch.) +Author: Matthew Vernon +Forwarded: not-needed +Last-Update: 2010-02-28 + Index: b/sshconnect.c =================================================================== --- a/sshconnect.c -- cgit v1.2.3