c3bb4552cf
adjust openssh-5.9p1-privsep-selinux.patch also for internal sftp subsystem
2012-02-17 11:35:49 +01:00
feb99ea644
Look for x11 forward sockets with AI_ADDRCONFIG flag getaddrinfo ( #735889 )
2012-02-14 18:11:26 +01:00
d3ab95741d
5.9p1-18 + 0.9.2-32
2012-02-06 22:16:49 +01:00
d9e6186c71
replace TwoFactorAuth with RequiredAuthentications[12]
...
https://bugzilla.mindrot.org/show_bug.cgi?id=983
2012-02-06 22:16:38 +01:00
21699d5622
5.9p1-17 + 0.9.2-32
2012-01-31 14:09:17 +01:00
cd5891d0d5
run privsep slave process as the users SELinux context ( #781634 )
2012-01-31 14:09:00 +01:00
017c65d99b
add CAVS test driver for the aes-ctr ciphers
2012-01-13 18:28:47 +01:00
6148abd585
enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI
2012-01-11 19:11:33 +01:00
2e12878998
5.9p1-14 + 0.9.2-32
2011-12-06 17:42:00 +01:00
5bd5aa2976
warn about unsupported option UsePAM=no ( #757545 )
2011-12-06 17:41:06 +01:00
4fc167470d
add back the restorecon call to ssh-copy-id - it might be needed on older
...
distributions (#739989 )
2011-11-21 09:03:05 +01:00
2aa158e869
Load also the /etc/sysconfig/sshd before the sshd-keygen script.
2011-11-18 09:32:34 +01:00
81da99ed9b
Fix permissions of sshd private keys created by sshd-keygen script ( #754779 )
2011-11-18 09:26:19 +01:00
17eb1038b2
still support /etc/sysconfig/sshd loading in sshd service ( #754732 )
2011-11-18 09:20:54 +01:00
0fcb25a8d2
remove unnecessary requires on initscripts
...
set VerifyHostKeyDNS to ask in the default configuration (#739856 )
2011-10-14 18:19:47 +02:00
fcc5bdd01d
selinux sandbox rewrite
...
two factor authentication tweaking
2011-09-20 08:14:45 +02:00
28b0dc63f4
selinux sandbox rewrite
...
two factor authentication tweaking
2011-09-19 07:26:32 +02:00
cff1d0c39d
coverity upgrade
...
wipe off nonfunctional nss
selinux sandbox tweaking
2011-09-14 17:03:03 +02:00
c870e661c7
coverity upgrade
...
experimental selinux sandbox
2011-09-13 17:14:48 +02:00
c2ea13d263
fully reanable auditing
2011-09-13 01:53:08 -04:00
1df0cf4657
repair signedness in akc patch
2011-09-12 20:44:35 +02:00
026db1cf63
temporarily disable part of audit4 patch
2011-09-12 08:34:27 +02:00
39b26b5169
temporarily disable part of audit4 patch
2011-09-12 08:11:41 +02:00
ea97ffa1ed
Coverity second pass
...
Reenable akc patch
2011-09-09 21:18:35 +02:00
fc87f2dced
Add chunk missed in the new upstream merge.
2011-09-09 18:06:02 +02:00
3b545be5d7
Coverity first pass
2011-09-09 00:54:28 +02:00
311e6bb088
Rebase to 5.9p1
...
Add chroot sftp patch
Add two factor auth patch
2011-09-07 15:31:21 +02:00
69dd72f6ef
ignore SIGPIPE in ssh keyscan
2011-09-07 15:12:54 +02:00
19d4c790a8
ignore SIGPIPE in ssh keyscan
2011-08-23 19:01:59 +02:00
2b67a53348
save ssh-askpass's debuginfo
2011-08-09 15:15:23 +02:00
56b50ec772
compile ssh-askpass with corect CFLAGS
2011-08-08 23:32:31 +02:00
eed2da95a4
improve selinux's change context log
2011-08-08 13:37:15 +02:00
54f33f6451
improve selinux's change context log
2011-08-08 13:24:47 +02:00
ec3622478b
repair broken man pages
2011-08-08 11:57:43 +02:00
1592780c7c
rebuild
2011-07-25 09:39:35 +02:00
d704eab9f3
rebuild
2011-07-25 09:27:57 +02:00
cadffc562e
Do not change context when run under unconfined_t
2011-07-21 15:26:11 +02:00
ca6abddd0f
Do not change context when run under unconfined_t
2011-07-21 14:52:34 +02:00
294ca75200
Do not change context when run under unconfined_t
2011-07-21 14:52:20 +02:00
d3d3406f12
Add postlogin to pam. ( #718807 )
2011-07-14 15:15:29 +02:00
0d4fd57729
Add postlogin to pam. ( #718807 )
2011-07-14 13:46:20 +02:00
9f698d40a2
Add After auditd.service to sshd.service.
2011-06-30 11:06:26 +02:00
d56cc37855
Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
...
Split out the host keygen into their own command, to ease future migration
to systemd. Compatitbility with the init script was kept.
Migrate the package to full native systemd unit files, according to the Fedora
packaging guidelines.
Prepate the unit files for running an ondemand server. (do not add it actually)
2011-06-29 08:03:00 +02:00
2953c82001
Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
...
Split out the host keygen into their own command, to ease future migration
to systemd. Compatitbility with the init script was kept.
Migrate the package to full native systemd unit files, according to the Fedora
packaging guidelines.
Prepate the unit files for running an ondemand server. (do not add it actually)
2011-06-28 12:37:13 +02:00
273d637227
Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
...
Split out the host keygen into their own command, to ease future migration
to systemd. Compatitbility with the init script was kept.
Migrate the package to full native systemd unit files, according to the Fedora
packaging guidelines.
Prepate the unit files for running an ondemand server. (do not add it actually)
2011-06-28 12:01:11 +02:00
d2cf533023
Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
...
Split out the host keygen into their own command, to ease future migration
to systemd. Compatitbility with the init script was kept.
Migrate the package to full native systemd unit files, according to the Fedora
packaging guidelines.
Prepate the unit files for running an ondemand server. (do not add it actually)
2011-06-28 11:11:10 +02:00
5c8b5cb538
Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
...
Split out the host keygen into their own command, to ease future migration
to systemd. Compatitbility with the init script was kept.
Migrate the package to full native systemd unit files, according to the Fedora
packaging guidelines.
Prepate the unit files for running an ondemand server. (do not add it actually)
2011-06-28 10:35:28 +02:00
29b683c1d2
Mention IPv6 usage in man pages
2011-06-21 11:01:06 +02:00
d3542d5be8
Improve init script
2011-06-20 10:44:49 +02:00
ef264f503b
Improve init script
2011-06-16 15:44:03 +02:00
Petr Lautrbach
Tomas Mraz
Jan F. Chadima
JFCH
Jan F. Chadima
Jan F