76f329ece1
- allow only protocol 2 in the FIPS mode
2009-05-15 14:44:21 +00:00
685b6239bb
- do integrity verification only on binaries which are part of the OpenSSH
...
FIPS modules
2009-04-30 12:03:29 +00:00
0a4fa5d1ed
- log if FIPS mode is initialized
...
- make aes-ctr cipher modes work in the FIPS mode
2009-04-20 12:18:49 +00:00
3a94ae1476
*** empty log message ***
2009-04-03 13:03:29 +00:00
061e214116
- fix logging after chroot
...
- enable non root users to use chroot %h in internal-sftp
2009-04-03 12:37:30 +00:00
0f07b4ad95
- add AES-CTR ciphers to the FIPS mode proposal
2009-03-13 10:32:52 +00:00
adad2a814e
Upgrade to version 5.2p1
2009-03-10 13:39:03 +00:00
48bd443ba4
Upgrade to version 5.2p1
2009-03-10 12:21:29 +00:00
194f64351a
Upgrade na version 5.2p1
2009-03-10 12:17:53 +00:00
ed9a890257
bounce openssh to version 5.2p1
2009-03-10 12:07:37 +00:00
a3ba41c854
Bounce openssh to version 5.2p1
2009-03-10 11:54:44 +00:00
c5f25a5f48
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
2009-02-26 08:48:36 +00:00
d93958db19
- drop obsolete triggers
...
- add testing FIPS mode support
- LSBize the initscript (#247014 )
2009-02-12 18:19:52 +00:00
ff6d597308
- enable use of ssl engines ( #481100 )
2009-01-30 15:44:41 +00:00
6a5e296ba7
- remove obsolete --with-rsh ( #478298 )
...
- add pam_sepermit to allow blocking confined users in permissive mode
(#471746 )
- move system-auth after pam_selinux in the session stack
2009-01-15 10:52:07 +00:00
9e5c6ecd02
- set FD_CLOEXEC on channel sockets ( #475866 )
...
- adjust summary
- adjust nss-keys patch so it is applicable without selinux patches
(#470859 )
2008-12-11 21:48:41 +00:00
b9a07ad737
- fix compatibility with some servers ( #466818 )
2008-10-17 08:34:36 +00:00
578f0d08a9
- fixed zero length banner problem ( #457326 )
2008-07-31 09:22:18 +00:00
ec5276165c
- rediff for no fuzz
2008-07-23 17:33:16 +00:00
09510adc7c
- rediff for zero fuzz tolerance
2008-07-23 16:30:14 +00:00
93a4744539
- upgrade to new upstream release
...
- fixed a problem with public key authentication and explicitely specified
SELinux role
2008-07-23 14:50:23 +00:00
077dad7320
- pass the connection socket to ssh-keysign ( #447680 )
2008-05-21 08:16:23 +00:00
1961bc12e6
- add LANGUAGE to accepted/sent environment variables ( #443231 )
...
- use pam_selinux to obtain the user context instead of doing it itself
- unbreak server keep alive settings (patch from upstream)
- small addition to scp manpage
2008-05-19 16:53:29 +00:00
ca47f63941
- upgrade to new upstream ( #441066 )
...
- prevent initscript from killing itself on halt with upstart (#438449 )
- initscript status should show that the daemon is running only when the
main daemon is still alive (#430882 )
2008-04-07 20:14:31 +00:00
2cb0e73a4e
- set FD_CLOEXEC on client socket
...
- apply real fix for window size problem (#286181 ) from upstream
- apply fix for the spurious failed bind from upstream
- apply open handle leak in sftp fix from upstream
2008-02-29 16:34:03 +00:00
91bdf496cd
we build sparc32 sparcv9 by default now it needed adding to the -fPIE list
2008-02-13 03:52:43 +00:00
993dd1a3db
- fix gssapi auth with explicit selinux role requested ( #427303 ) - patch by
...
Nalin Dahyabhai
2008-01-03 17:45:59 +00:00
3457e3e00f
- explicitly source krb5-devel profile script
2007-12-04 19:03:49 +00:00
2cc09c66ed
- explicitly source krb5-devel profile script
...
- rebuild for openssl bump
2007-12-04 18:58:25 +00:00
9eac427785
- Rebuild for openssl bump
2007-12-04 18:47:33 +00:00
320a1c8f0e
- localtime in chroot no longer needed
2007-11-20 18:38:37 +00:00
0a9a4072ef
- must require ncurses-devel for libedit
2007-11-20 18:26:30 +00:00
b1ffa00b4c
- version bump
2007-11-20 15:04:37 +00:00
8b8c4dc83c
- do not copy /etc/localtime into the chroot as it is not necessary anymore
...
(#193184 )
- call setkeycreatecon when selinux context is established
- test for NULL privk when freeing key (#391871 ) - patch by Pierre Ossman
2007-11-20 14:53:45 +00:00
5d613bead0
makefile update to properly grab makefile.common
2007-10-15 19:12:18 +00:00
95be083504
- revert default window size adjustments ( #286181 )
2007-09-17 21:33:02 +00:00
c9833c96a4
- upgrade to latest upstream
...
- use libedit in sftp (#203009 )
- fixed audit log injection problem (CVE-2007-3102)
2007-09-06 19:49:16 +00:00
f370730d3b
- fix sftp client problems on write error ( #247802 )
...
- allow disabling autocreation of server keys (#235466 )
2007-08-09 18:33:41 +00:00
fc2f31df03
- oops committed testing only change
2007-06-20 19:33:53 +00:00
0092bbd526
- add buildrequires nss-devel to build with the nss-keys patch
2007-06-20 19:11:49 +00:00
c3274ccb32
- experimental NSS keys support
...
- correctly setup context when empty level requested (#234951 )
2007-06-20 17:47:18 +00:00
7210c0162a
- mls level check must be done with default role same as requested
2007-03-20 09:13:40 +00:00
b40baab181
- make profile.d/gnome-ssh-askpass.* regular files ( #226218 )
2007-03-19 11:57:36 +00:00
546fdd9f47
- reject connection if requested mls range is not obtained ( #229278 )
2007-03-01 08:28:22 +00:00
9d725bd1ab
- improve Buildroot
...
- remove duplicate /etc/ssh from files
2007-02-22 13:00:51 +00:00
73a8557dfd
- fix some forward porting typos
2007-01-16 21:20:04 +00:00
c2b35d09c0
- support mls on labeled networks ( #220487 )
...
- support mls level selection on unlabeled networks
- allow / in usernames in scp (only beginning /, ./, and ../ is special)
2007-01-16 20:58:00 +00:00
45f17da853
- buildrequire tcp_wrappers-devel
2006-12-21 13:59:55 +00:00
ad07b998ed
- update to 4.5p1 ( #212606 )
2006-12-21 13:42:47 +00:00
914284ff3f
- fix gssapi with DNS loadbalanced clusters ( #216857 )
2006-11-30 10:50:12 +00:00
Tomáš Mráz
Jan F. Chadima
Jesse Keating
Dennis Gilmore
Bill Nottingham