Jan F
|
af8738486c
|
- make audit compatible with the fips mode
|
2011-01-16 23:50:01 +01:00 |
|
Jan F
|
377ba3cfce
|
- add audit of destruction the server keys
|
2011-01-14 10:20:53 +01:00 |
|
Jan F
|
9828ffb5fc
|
- add audit of destruction the server keys
|
2011-01-14 10:18:17 +01:00 |
|
Jan F
|
92eab14042
|
- add audit of destruction the server keys
|
2011-01-14 09:45:08 +01:00 |
|
Jan F
|
5c20fa8d2d
|
- add audit of destruction the session keys
|
2011-01-12 11:09:58 +01:00 |
|
Jan F. Chadima
|
a7cb7d2954
|
- reenable run sshd as non root user
- renable rekeying
|
2010-10-28 13:04:45 +02:00 |
|
Jan F
|
436639ac40
|
- reapair clientloop crash (#627332)
- properly restore euid in case connect to the ssh-agent socket fails
|
2010-11-24 08:24:42 +01:00 |
|
Jan F
|
bb5eb00d2d
|
- properly restore euid in case connect to the ssh-agent socket fails
|
2010-11-24 07:49:04 +01:00 |
|
Jan F. Chadima
|
d2ed53bfc6
|
- striped read permissions from suid and sgid binaries
- properly restore euid in case connect to the ssh-agent socket fails
|
2010-10-10 05:43:12 +02:00 |
|
Jan F
|
7c53d7e5af
|
- used upstream version of the biguid patch
|
2010-11-15 14:01:18 +01:00 |
|
Jan F
|
82036abfa2
|
- improoved kuserok patch
|
2010-11-15 10:35:33 +01:00 |
|
Jan F
|
5daee12df3
|
- add auditing the host based key ussage
- repait X11 abstract layer socket (#648896)
|
2010-11-05 17:31:30 +01:00 |
|
Jan F. Chadima
|
f44bdee1ed
|
- add auditing the kex result
|
2010-09-21 05:36:25 +02:00 |
|
Jan F
|
f8f722ebad
|
- add auditing the key ussage
|
2010-11-02 21:10:16 +01:00 |
|
Jan F
|
0f4c82ee87
|
- add auditing the key ussage
|
2010-11-02 13:10:33 +01:00 |
|
Jan F
|
2d0bc8b9f6
|
- update gsskex patch (#645389)
|
2010-10-22 15:45:07 +02:00 |
|
Jan F
|
ba25ecfbc7
|
- rebase linux audit according to upstream
|
2010-10-20 11:52:05 +02:00 |
|
Jan F. Chadima
|
cf74d509bc
|
- add missing headers to linux audit
|
2010-08-31 21:47:07 +02:00 |
|
Jan F
|
faae1e801d
|
- audit module now uses openssh audit framevork
|
2010-09-29 09:17:40 +02:00 |
|
Jan F
|
cae7368913
|
- Add the GSSAPI kuserok switch to the kuserok patch
|
2010-09-15 19:21:47 +02:00 |
|
Jan F
|
46c77f5af2
|
- Add the GSSAPI kuserok switch to the kuserok patch
|
2010-09-15 15:55:55 +02:00 |
|
Jan F
|
4c4aa13bbb
|
- Repaired the kuserok patch
|
2010-09-15 10:07:41 +02:00 |
|
Jan F
|
abe4bc8a6b
|
- Repaired the problem with puting entries with very big uid into lastlog
|
2010-09-13 14:22:31 +02:00 |
|
Jan F
|
10c6ac8404
|
- Repaired the problem with puting entries with very big uid into lastlog
|
2010-09-13 13:08:30 +02:00 |
|
Jan F
|
ce0606e548
|
- Repaired the problem with puting entries with very big uid into lastlog
|
2010-09-13 13:02:01 +02:00 |
|
Jan F
|
2bdd0209d2
|
- Merging selabel patch with the upstream version. (#632914)
|
2010-09-13 11:40:52 +02:00 |
|
Jan F
|
84d568abcc
|
- Merging selabel patch with the upstream version. (#632914)
|
2010-09-13 11:38:26 +02:00 |
|
Jan F
|
93909d91af
|
- Tweaking selabel batch to work properly without selinux rules loaded. (#632914)
|
2010-09-13 10:26:50 +02:00 |
|
Tomas Mraz
|
13fa787ecc
|
- Make fipscheck hmacs compliant with FHS - requires new fipscheck
|
2010-09-08 09:00:22 +02:00 |
|
Jan F
|
f7e15d5204
|
- Added -z relro -z now to LDFLAGS
|
2010-09-08 08:41:29 +02:00 |
|
Jan F. Chadima
|
c6801b909e
|
- Rebased to openssh5.6p1
- Added -z relro -z now to LDFLAGS
|
2010-08-12 07:41:58 +02:00 |
|
Jan F. Chadima
|
1b8a267cb9
|
Upgrade to openssh-5.6p1
|
2010-08-03 02:41:49 +02:00 |
|
Jan F. Chadima
|
98ba34ae05
|
upgrade to openssh-5.6p1
|
2010-08-03 01:10:26 +02:00 |
|
Jan F. Chadima
|
7818e56d62
|
- merged with newer bugzilla's version of authorized keys command patch
|
2010-07-07 13:48:36 +00:00 |
|
Jan F. Chadima
|
eb358aa2e5
|
- improved the x11 patch according to upstream (#598671)
|
2010-06-30 14:50:51 +00:00 |
|
Jan F. Chadima
|
a3dee6b29d
|
- improved the x11 patch (#598671)
|
2010-06-25 12:08:42 +00:00 |
|
Jan F. Chadima
|
41a56c5d4d
|
- changed _PATH_UNIX_X to unexistent file name (#598671)
|
2010-06-24 07:02:37 +00:00 |
|
Jan F. Chadima
|
411b917379
|
- sftp works in deviceless chroot again (broken from 5.5p1-3)
|
2010-06-23 13:53:38 +00:00 |
|
Jan F. Chadima
|
59d42d3dc6
|
- add option to switch out krb5_kuserok
|
2010-06-08 10:06:35 +00:00 |
|
Jan F. Chadima
|
2fd105489c
|
- synchronize uid and gid for the user sshd
|
2010-05-21 13:23:44 +00:00 |
|
Jan F. Chadima
|
b1a625a446
|
- Typo in ssh-ldap.conf(5) and ssh-ladap-helper(8)
|
2010-05-20 07:02:32 +00:00 |
|
Jan F. Chadima
|
99d9a391f4
|
- Repair the reference in man ssh-ldap-helper(8)
- Repair the PubkeyAgent section in sshd_config(5)
- Provide example ldap.conf
|
2010-05-14 08:19:04 +00:00 |
|
Jan F. Chadima
|
86b2d1c41c
|
- Make the Ldap configuration widely compatible
- create the aditional docs for LDAP support.
|
2010-05-13 14:25:38 +00:00 |
|
Jan F. Chadima
|
222d52deed
|
- Make the Ldap configuration widely compatible
- create the aditional docs for LDAP support.
|
2010-05-13 13:53:16 +00:00 |
|
Jan F. Chadima
|
4669c37784
|
- Make LDAP config elements TLS_CACERT and TLS_REQCERT compatiple with
pam_ldap (#589360)
|
2010-05-06 14:01:16 +00:00 |
|
Jan F. Chadima
|
b6bdf18518
|
- Make LDAP config element tls_checkpeer compatiple with nss_ldap (#589360)
|
2010-05-06 09:39:44 +00:00 |
|
Jan F. Chadima
|
bd929b4662
|
- Comment spec.file
- Sync patches from upstream
|
2010-05-04 07:50:13 +00:00 |
|
Jan F. Chadima
|
6fa4d807de
|
- Comment spec.file
- Sync patches from upstream
|
2010-05-04 07:27:28 +00:00 |
|
Jan F. Chadima
|
3fdf10cdb4
|
- Create separate ldap package
- Tweak the ldap patch
- Rename stderr patch properly
|
2010-05-03 13:32:38 +00:00 |
|
Jan F. Chadima
|
7e7fb423e6
|
- Added LDAP support
|
2010-04-28 11:07:03 +00:00 |
|