92b8e55bea
Crypto policies changed path
2018-03-06 13:53:17 +01:00
bd5b563008
Require crypto policies
2018-03-06 13:53:02 +01:00
c2a9e41702
Recommend crypto policies also for a server
2018-02-19 12:10:48 +01:00
07c951f665
Require gcc
...
https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
2018-02-19 12:10:48 +01:00
a6b5c2c42d
Remove %clean section
...
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 08:27:35 +01:00
5f6f10859d
Remove BuildRoot definition
...
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-13 23:58:21 +01:00
13efdb1d7f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-08 17:49:28 +00:00
6a6c2bc3ab
We need systemd-devel for sdnotify()
2018-02-01 16:30:07 +01:00
0780f33c5f
removal of systemd-units and conforming to packaging guidelines
...
Per announcement on fedora-devel:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/LLG4T53FW2BGVZLGLKNYTKPD5SQNBZ2Y/
2018-01-27 10:57:06 +01:00
bb4b7b77fc
openssh-7.6p1-6 + 0.10.3-3
2018-01-26 16:26:50 +01:00
f61eaad2bd
Rebuild to work around gcc bug leading to sshd miscompilation ( #1538648 )
2018-01-25 16:48:03 +01:00
c45ece5fe8
Do not audit partial auth failures
2018-01-22 12:58:09 +01:00
6996c6f503
Do not audit passsword authentication, if handled by PAM
...
and avoid auditing none auth method (not acually a method)
2018-01-22 12:58:09 +01:00
9b05c6d476
USER_AUTH: Remove bogus rport, add required grantors
2018-01-22 12:58:09 +01:00
667e6f013f
Do not audit final success ( #1534577 )
2018-01-22 12:58:09 +01:00
57349a88a8
Use correct audit event for pubkey auth
2018-01-22 12:58:09 +01:00
427beb2f9e
Rebuilt for switch to libxcrypt
2018-01-20 23:07:25 +01:00
b1ec43ef50
Add missing header to make it build (related to #1534577 )
2018-01-19 10:46:01 +01:00
0f4b4ccdea
Audit correctly the res= after upstream refactoring
2018-01-19 10:18:51 +01:00
38b67ad605
Avoid undefined TRUE/FALSE in ldap patch to build in rawhide
2018-01-17 10:50:05 +01:00
4d97279349
openssh-7.6p1-5 + 0.10.3-3
2018-01-17 10:13:18 +01:00
f284c5eb83
Do not attempt to pass hostnames to audit (inconsistency) ( #1534577 )
2018-01-17 10:10:28 +01:00
32dc9bd1cd
Drop unused function from audit
2018-01-16 16:24:27 +01:00
316553ade0
Remove TCP wrappers support ( #1530163 )
2018-01-16 15:06:23 +01:00
871dc3ed3e
openssh-7.6p1-4 + 0.10.3-3
2017-12-14 10:23:37 +01:00
17cd512319
Whitelist gettid() syscall for systemd (cleanup procedure?)
2017-12-12 14:19:35 +01:00
1f2a7f3926
openssh-7.6p1-3 + 0.10.3-3
2017-12-11 11:54:38 +01:00
fde6b96b35
Avoid gcc warnings about uninitialized variables
2017-12-11 11:53:10 +01:00
217da75d53
Do not segfault for repetitive cipher_free() from audit ( #1524233 )
2017-12-11 11:53:03 +01:00
eef660e534
7.6p1-2 + 0.10.3-3
2017-11-22 08:57:03 +01:00
e3f4c1243d
Do not build all the binaries against libldap
2017-11-15 10:17:46 +01:00
2087929a90
Do not segfault for ECC keys in PKCS#11
2017-11-15 10:17:46 +01:00
a464c88ee6
forgotten sources
2017-11-07 16:49:23 +01:00
8fc2fee4e4
7.6p1-1 + 0.10.3-3
2017-11-07 14:58:44 +01:00
cdc735a59b
Make sure we audit properly from the new code
2017-11-07 14:58:44 +01:00
e0e7ed914b
Address issues of another PR#48 review
2017-11-07 14:58:44 +01:00
c08aa4b8b1
Fix after-release bug in PermitOpen (posted on ML)
2017-11-07 14:58:44 +01:00
5b55d0951d
rebase patches to openssh-7.6p1 and make it build
2017-11-07 14:58:44 +01:00
9e46aafab9
openssh-7.5p1-6 + 0.10.3-2
2017-10-19 16:09:53 +02:00
ed0b5e5a9f
Remove pam_reauthorize, not needed by cockpit anymore ( #1492313 )
2017-10-19 16:09:53 +02:00
e044c5cf76
Enforce pam_sepermit for all logins ( #1492313 )
2017-10-19 16:09:53 +02:00
72514f7644
Add newer gssapi kex methods, but leave them disabled out of the box yet
2017-10-19 16:09:53 +02:00
8bcc21ed64
Add enablement for openssl-ibmca and openssl-ibmpkcs11 ( #1477636 )
2017-10-19 16:09:53 +02:00
8c9e97e65a
Do not export KRBCCNAME if the default path is used ( #1199363 )
2017-10-19 16:09:53 +02:00
ce1afcf244
initial commit of tests from upstreamfirst project
2017-09-29 12:58:09 -04:00
ef66c0c677
openssh-7.5p1-5 + 0.10.3-2
2017-08-14 09:45:09 +02:00
0ce6c7b710
Another approach for crypto policies ( #1479271 )
2017-08-14 09:42:02 +02:00
970a418151
Do not talk about SSHv1 in Summary
2017-08-09 16:10:33 +02:00
6a05936971
Revert "server crypto policy"
...
This reverts commit 1d8ffcfe05
2017-08-09 14:58:13 +02:00
fffad0579c
openssh-7.5p1-4 + 0.10.3-2
2017-08-02 15:46:58 +02:00
Jakub Jelen
Igor Gnatenko
Fedora Release Engineering
Florian Weimer
Björn Esser
Mike Gahagan