Commit Graph

291 Commits

Author SHA1 Message Date
Jan F 91d3b39c03 improve reseeding and seed source (cocumentation) 2011-03-28 16:19:03 +02:00
Jan F e6d33e3bc4 improve reseeding and seed source (cocumentation) 2011-03-27 21:50:47 +02:00
Jan F 39c7b05d62 use /dev/random or /dev/urandom for seeding prng
improve periodical reseeding of random generator
2011-03-22 22:05:18 +01:00
Jan F 3657adf0ba use /dev/random or /dev/urandom for seeding prng 2011-03-22 19:04:37 +01:00
Jan F 0f7ccbf444 add periodical reseeding of random generator
change selinux contex for internal sftp in do_usercontext
exit(0) after sigterm
2011-03-17 11:31:16 +01:00
Jan F 8fe15092c3 add periodical reseeding of random generator
change selinux contex for internal sftp in do_usercontext
exit(0) after sigterm
2011-03-17 08:18:17 +01:00
Jan F f33c99e38b improove ssh-ldap (documentation) 2011-03-10 21:59:08 +01:00
Jan F 9992a8e919 improove ssh-ldap (documentation) 2011-03-10 21:48:09 +01:00
Jan F 9404cdd3e3 improove ssh-ldap (documentation) 2011-03-10 18:26:11 +01:00
Jan F a864d61df9 improve session keys audit 2011-03-10 15:52:21 +01:00
Jan F ffd063fe18 improve session keys audit 2011-03-09 09:07:16 +01:00
Jan F d1fc5c2d41 improve session keys audit 2011-03-09 08:48:51 +01:00
Jan F 71d3d9c683 CVE-2010-4755 2011-03-07 20:31:52 +01:00
Jan F 825921b7f3 improove ssk-keycat (documentation) 2011-03-04 15:22:12 +01:00
Jan F edc1723011 improve audit of logins and auths 2011-03-03 10:54:47 +01:00
Jan F 5c54191b0a improove ssk-keycat 2011-03-02 07:03:38 +01:00
Jan F 5928f9047b improove ssk-keycat 2011-03-01 17:10:09 +01:00
Jan F 1499a28f37 improove ssk-keycat 2011-03-01 07:44:22 +01:00
Jan F 99f427602c add ssk-keycat 2011-02-28 16:42:58 +01:00
Jan F b934981de5 reenable auth-keys ldap backend 2011-02-25 12:07:01 +01:00
Jan F 48446f1f1b another audit improovements 2011-02-25 09:30:56 +01:00
Jan F aefa65dfca another audit improovements 2011-02-24 14:25:14 +01:00
Jan F f9ff105e58 another audit improovements 2011-02-24 14:17:34 +01:00
Jan F 1732b09b93 another audit improovements 2011-02-23 10:23:28 +01:00
Jan F 842f4397cd another audit improovements 2011-02-22 15:07:26 +01:00
Jan F 9cefae06b0 another audit improovements 2011-02-21 19:33:56 +01:00
Jan F 2c1a4adbdd improve audit of server ket management 2011-02-17 17:54:23 +01:00
Jan F b9127ef973 improve audit of logins and auths 2011-02-16 23:36:59 +01:00
Jan F 483c73337b improve audit of logins and auths 2011-02-16 17:30:51 +01:00
Jan F 003cb0b27f - bump openssh version to 5.8p1 2011-02-14 15:32:49 +01:00
Dennis Gilmore fa335ee67e - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-08 21:31:13 -06:00
Jan F cfb0f30feb - clean the data structures in the non privileged process
- clean the data structures when roaming
2011-02-07 20:47:23 +01:00
Jan F 865391f74f - clean the data structures when roaming 2011-02-07 09:21:27 +01:00
Jan F ee23b09ac6 - clean the data structures in the privileged process 2011-02-02 10:18:01 +01:00
Jan F f32d86bd8a - clean the data structures in the privileged process 2011-02-02 09:28:26 +01:00
Jan F 6f931660c8 - clean the data structures in the privileged process 2011-01-31 17:04:10 +01:00
Jan F f00e4a3ddc - clean the data structures before exit net process 2011-01-25 14:06:13 +01:00
Jan F af8738486c - make audit compatible with the fips mode 2011-01-16 23:50:01 +01:00
Jan F 377ba3cfce - add audit of destruction the server keys 2011-01-14 10:20:53 +01:00
Jan F 9828ffb5fc - add audit of destruction the server keys 2011-01-14 10:18:17 +01:00
Jan F 92eab14042 - add audit of destruction the server keys 2011-01-14 09:45:08 +01:00
Jan F 5c20fa8d2d - add audit of destruction the session keys 2011-01-12 11:09:58 +01:00
Jan F. Chadima a7cb7d2954 - reenable run sshd as non root user
- renable rekeying
2010-10-28 13:04:45 +02:00
Jan F 436639ac40 - reapair clientloop crash (#627332)
- properly restore euid in case connect to the ssh-agent socket fails
2010-11-24 08:24:42 +01:00
Jan F bb5eb00d2d - properly restore euid in case connect to the ssh-agent socket fails 2010-11-24 07:49:04 +01:00
Jan F. Chadima d2ed53bfc6 - striped read permissions from suid and sgid binaries
- properly restore euid in case connect to the ssh-agent socket fails
2010-10-10 05:43:12 +02:00
Jan F 7c53d7e5af - used upstream version of the biguid patch 2010-11-15 14:01:18 +01:00
Jan F 82036abfa2 - improoved kuserok patch 2010-11-15 10:35:33 +01:00
Jan F 5daee12df3 - add auditing the host based key ussage
- repait X11 abstract layer socket (#648896)
2010-11-05 17:31:30 +01:00
Jan F. Chadima f44bdee1ed - add auditing the kex result 2010-09-21 05:36:25 +02:00