Mon May 19 2008 Tomas Mraz <tmraz@redhat.com> - 5.0p1-2 - add LANGUAGE to accepted/sent environment variables (#443231) - use pam_selinux to obtain the user context instead of doing it itself - unbreak server keep alive settings (patch from upstream) - small addition to scp manpage
1402 lines
49 KiB
RPMSpec
1402 lines
49 KiB
RPMSpec
# Do we want SELinux & Audit
|
|
%define WITH_SELINUX 1
|
|
|
|
# OpenSSH privilege separation requires a user & group ID
|
|
%define sshd_uid 74
|
|
%define sshd_gid 74
|
|
|
|
# Do we want to disable building of gnome-askpass? (1=yes 0=no)
|
|
%define no_gnome_askpass 0
|
|
|
|
# Do we want to link against a static libcrypto? (1=yes 0=no)
|
|
%define static_libcrypto 0
|
|
|
|
# Do we want smartcard support (1=yes 0=no)
|
|
%define scard 0
|
|
|
|
# Use GTK2 instead of GNOME in gnome-ssh-askpass
|
|
%define gtk2 1
|
|
|
|
# Build position-independent executables (requires toolchain support)?
|
|
%define pie 1
|
|
|
|
# Do we want kerberos5 support (1=yes 0=no)
|
|
%define kerberos5 1
|
|
|
|
# Do we want libedit support
|
|
%define libedit 1
|
|
|
|
# Do we want NSS tokens support
|
|
%define nss 1
|
|
|
|
# Whether or not /sbin/nologin exists.
|
|
%define nologin 1
|
|
|
|
# Reserve options to override askpass settings with:
|
|
# rpm -ba|--rebuild --define 'skip_xxx 1'
|
|
%{?skip_gnome_askpass:%define no_gnome_askpass 1}
|
|
|
|
# Add option to build without GTK2 for older platforms with only GTK+.
|
|
# Red Hat Linux <= 7.2 and Red Hat Advanced Server 2.1 are examples.
|
|
# rpm -ba|--rebuild --define 'no_gtk2 1'
|
|
%{?no_gtk2:%define gtk2 0}
|
|
|
|
# Options for static OpenSSL link:
|
|
# rpm -ba|--rebuild --define "static_openssl 1"
|
|
%{?static_openssl:%define static_libcrypto 1}
|
|
|
|
# Options for Smartcard support: (needs libsectok and openssl-engine)
|
|
# rpm -ba|--rebuild --define "smartcard 1"
|
|
%{?smartcard:%define scard 1}
|
|
|
|
# Is this a build for the rescue CD (without PAM, with MD5)? (1=yes 0=no)
|
|
%define rescue 0
|
|
%{?build_rescue:%define rescue 1}
|
|
%{?build_rescue:%define rescue_rel rescue}
|
|
|
|
# Turn off some stuff for resuce builds
|
|
%if %{rescue}
|
|
%define kerberos5 0
|
|
%define libedit 0
|
|
%endif
|
|
|
|
Summary: The OpenSSH implementation of SSH protocol versions 1 and 2
|
|
Name: openssh
|
|
Version: 5.0p1
|
|
Release: 3%{?dist}%{?rescue_rel}
|
|
URL: http://www.openssh.com/portable.html
|
|
#Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz
|
|
#Source1: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz.asc
|
|
# This package differs from the upstream OpenSSH tarball in that
|
|
# the ACSS cipher is removed by running openssh-nukeacss.sh in
|
|
# the unpacked source directory.
|
|
Source0: openssh-%{version}-noacss.tar.bz2
|
|
Source1: openssh-nukeacss.sh
|
|
Source2: sshd.pam
|
|
Source3: sshd.init
|
|
Patch0: openssh-4.7p1-redhat.patch
|
|
Patch2: openssh-3.8.1p1-skip-initial.patch
|
|
Patch3: openssh-3.8.1p1-krb5-config.patch
|
|
Patch4: openssh-4.7p1-vendor.patch
|
|
Patch12: openssh-4.7p1-selinux.patch
|
|
Patch13: openssh-4.7p1-mls.patch
|
|
Patch16: openssh-4.7p1-audit.patch
|
|
Patch17: openssh-4.3p2-cve-2007-3102.patch
|
|
Patch22: openssh-3.9p1-askpass-keep-above.patch
|
|
Patch24: openssh-4.3p1-fromto-remote.patch
|
|
Patch27: openssh-4.7p1-log-in-chroot.patch
|
|
Patch30: openssh-4.0p1-exit-deadlock.patch
|
|
Patch35: openssh-4.2p1-askpass-progress.patch
|
|
Patch38: openssh-4.3p2-askpass-grab-info.patch
|
|
Patch39: openssh-4.3p2-no-v6only.patch
|
|
Patch44: openssh-4.3p2-allow-ip-opts.patch
|
|
Patch49: openssh-4.3p2-gssapi-canohost.patch
|
|
Patch51: openssh-4.7p1-nss-keys.patch
|
|
Patch54: openssh-4.7p1-gssapi-role.patch
|
|
Patch55: openssh-4.7p1-cloexec.patch
|
|
Patch58: openssh-4.5p1-controlcleanup.patch
|
|
Patch59: openssh-4.7p1-master-race.patch
|
|
Patch60: openssh-5.0p1-pam_selinux.patch
|
|
Patch61: openssh-5.0p1-unbreakalive.patch
|
|
Patch62: openssh-3.9p1-scp-manpage.patch
|
|
|
|
License: BSD
|
|
Group: Applications/Internet
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
|
%if %{nologin}
|
|
Requires: /sbin/nologin
|
|
%endif
|
|
|
|
Requires: initscripts >= 5.20
|
|
|
|
%if ! %{no_gnome_askpass}
|
|
%if %{gtk2}
|
|
BuildRequires: gtk2-devel
|
|
BuildRequires: libX11-devel
|
|
%else
|
|
BuildRequires: gnome-libs-devel
|
|
%endif
|
|
%endif
|
|
|
|
%if %{scard}
|
|
BuildRequires: sharutils
|
|
%endif
|
|
BuildRequires: autoconf, automake, openssl-devel, perl, zlib-devel
|
|
BuildRequires: audit-libs-devel
|
|
BuildRequires: util-linux, groff, man
|
|
BuildRequires: pam-devel
|
|
BuildRequires: tcp_wrappers-devel
|
|
|
|
%if %{kerberos5}
|
|
BuildRequires: krb5-devel
|
|
%endif
|
|
|
|
%if %{libedit}
|
|
BuildRequires: libedit-devel ncurses-devel
|
|
%endif
|
|
|
|
%if %{nss}
|
|
BuildRequires: nss-devel
|
|
%endif
|
|
|
|
%if %{WITH_SELINUX}
|
|
Requires: libselinux >= 1.27.7
|
|
BuildRequires: libselinux-devel >= 1.27.7
|
|
Requires: audit-libs >= 1.0.8
|
|
BuildRequires: audit-libs >= 1.0.8
|
|
%endif
|
|
|
|
BuildRequires: xauth
|
|
|
|
%package clients
|
|
Summary: The OpenSSH client applications
|
|
Requires: openssh = %{version}-%{release}
|
|
Group: Applications/Internet
|
|
|
|
%package server
|
|
Summary: The OpenSSH server daemon
|
|
Group: System Environment/Daemons
|
|
Requires: openssh = %{version}-%{release}
|
|
Requires(post): chkconfig >= 0.9, /sbin/service
|
|
Requires(pre): /usr/sbin/useradd
|
|
Requires: pam >= 1.0.1-3
|
|
|
|
%package askpass
|
|
Summary: A passphrase dialog for OpenSSH and X
|
|
Group: Applications/Internet
|
|
Requires: openssh = %{version}-%{release}
|
|
Obsoletes: openssh-askpass-gnome
|
|
Provides: openssh-askpass-gnome
|
|
|
|
%description
|
|
SSH (Secure SHell) is a program for logging into and executing
|
|
commands on a remote machine. SSH is intended to replace rlogin and
|
|
rsh, and to provide secure encrypted communications between two
|
|
untrusted hosts over an insecure network. X11 connections and
|
|
arbitrary TCP/IP ports can also be forwarded over the secure channel.
|
|
|
|
OpenSSH is OpenBSD's version of the last free version of SSH, bringing
|
|
it up to date in terms of security and features, as well as removing
|
|
all patented algorithms to separate libraries.
|
|
|
|
This package includes the core files necessary for both the OpenSSH
|
|
client and server. To make this package useful, you should also
|
|
install openssh-clients, openssh-server, or both.
|
|
|
|
%description clients
|
|
OpenSSH is a free version of SSH (Secure SHell), a program for logging
|
|
into and executing commands on a remote machine. This package includes
|
|
the clients necessary to make encrypted connections to SSH servers.
|
|
You'll also need to install the openssh package on OpenSSH clients.
|
|
|
|
%description server
|
|
OpenSSH is a free version of SSH (Secure SHell), a program for logging
|
|
into and executing commands on a remote machine. This package contains
|
|
the secure shell daemon (sshd). The sshd daemon allows SSH clients to
|
|
securely connect to your SSH server. You also need to have the openssh
|
|
package installed.
|
|
|
|
%description askpass
|
|
OpenSSH is a free version of SSH (Secure SHell), a program for logging
|
|
into and executing commands on a remote machine. This package contains
|
|
an X11 passphrase dialog for OpenSSH.
|
|
|
|
%prep
|
|
|
|
%setup -q
|
|
%patch0 -p1 -b .redhat
|
|
%patch2 -p1 -b .skip-initial
|
|
%patch3 -p1 -b .krb5-config
|
|
%patch4 -p1 -b .vendor
|
|
|
|
%if %{WITH_SELINUX}
|
|
#SELinux
|
|
%patch12 -p1 -b .selinux
|
|
%patch13 -p1 -b .mls
|
|
%patch16 -p1 -b .audit
|
|
%patch17 -p1 -b .inject-fix
|
|
%endif
|
|
|
|
%patch22 -p1 -b .keep-above
|
|
%patch24 -p1 -b .fromto-remote
|
|
%patch27 -p1 -b .log-chroot
|
|
%patch30 -p1 -b .exit-deadlock
|
|
%patch35 -p1 -b .progress
|
|
%patch38 -p1 -b .grab-info
|
|
%patch39 -p1 -b .no-v6only
|
|
%patch44 -p1 -b .ip-opts
|
|
%patch49 -p1 -b .canohost
|
|
%patch51 -p1 -b .nss-keys
|
|
%patch54 -p0 -b .gssapi-role
|
|
%patch55 -p1 -b .cloexec
|
|
%patch58 -p1 -b .controlcleanup
|
|
%patch59 -p1 -b .master-race
|
|
%patch60 -p1 -b .pam_selinux
|
|
%patch61 -p0 -b .unbreakalive
|
|
%patch62 -p0 -b .manpage
|
|
|
|
autoreconf
|
|
|
|
%build
|
|
CFLAGS="$RPM_OPT_FLAGS"; export CFLAGS
|
|
%if %{rescue}
|
|
CFLAGS="$CFLAGS -Os"
|
|
%endif
|
|
%if %{pie}
|
|
%ifarch s390 s390x sparc sparcv9 sparc64
|
|
CFLAGS="$CFLAGS -fPIE"
|
|
%else
|
|
CFLAGS="$CFLAGS -fpie"
|
|
%endif
|
|
export CFLAGS
|
|
LDFLAGS="$LDFLAGS -pie"; export LDFLAGS
|
|
%endif
|
|
%if %{kerberos5}
|
|
source /etc/profile.d/krb5-devel.sh
|
|
krb5_prefix=`krb5-config --prefix`
|
|
if test "$krb5_prefix" != "%{_prefix}" ; then
|
|
CPPFLAGS="$CPPFLAGS -I${krb5_prefix}/include -I${krb5_prefix}/include/gssapi"; export CPPFLAGS
|
|
CFLAGS="$CFLAGS -I${krb5_prefix}/include -I${krb5_prefix}/include/gssapi"
|
|
LDFLAGS="$LDFLAGS -L${krb5_prefix}/%{_lib}"; export LDFLAGS
|
|
else
|
|
krb5_prefix=
|
|
CPPFLAGS="-I%{_includedir}/gssapi"; export CPPFLAGS
|
|
CFLAGS="$CFLAGS -I%{_includedir}/gssapi"
|
|
fi
|
|
%endif
|
|
|
|
%configure \
|
|
--sysconfdir=%{_sysconfdir}/ssh \
|
|
--libexecdir=%{_libexecdir}/openssh \
|
|
--datadir=%{_datadir}/openssh \
|
|
--with-tcp-wrappers \
|
|
--with-rsh=%{_bindir}/rsh \
|
|
--with-default-path=/usr/local/bin:/bin:/usr/bin \
|
|
--with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \
|
|
--with-privsep-path=%{_var}/empty/sshd \
|
|
--enable-vendor-patchlevel="FC-%{version}-%{release}" \
|
|
--disable-strip \
|
|
--without-zlib-version-check \
|
|
%if %{nss}
|
|
--with-nss \
|
|
%endif
|
|
%if %{scard}
|
|
--with-smartcard \
|
|
%endif
|
|
%if %{rescue}
|
|
--without-pam \
|
|
%else
|
|
--with-pam \
|
|
%endif
|
|
%if %{WITH_SELINUX}
|
|
--with-selinux --with-linux-audit \
|
|
%endif
|
|
%if %{kerberos5}
|
|
--with-kerberos5${krb5_prefix:+=${krb5_prefix}} \
|
|
%else
|
|
--without-kerberos5 \
|
|
%endif
|
|
%if %{libedit}
|
|
--with-libedit
|
|
%else
|
|
--without-libedit
|
|
%endif
|
|
|
|
%if %{static_libcrypto}
|
|
perl -pi -e "s|-lcrypto|%{_libdir}/libcrypto.a|g" Makefile
|
|
%endif
|
|
|
|
make
|
|
|
|
# Define a variable to toggle gnome1/gtk2 building. This is necessary
|
|
# because RPM doesn't handle nested %if statements.
|
|
%if %{gtk2}
|
|
gtk2=yes
|
|
%else
|
|
gtk2=no
|
|
%endif
|
|
|
|
%if ! %{no_gnome_askpass}
|
|
pushd contrib
|
|
if [ $gtk2 = yes ] ; then
|
|
make gnome-ssh-askpass2
|
|
mv gnome-ssh-askpass2 gnome-ssh-askpass
|
|
else
|
|
make gnome-ssh-askpass1
|
|
mv gnome-ssh-askpass1 gnome-ssh-askpass
|
|
fi
|
|
popd
|
|
%endif
|
|
|
|
%install
|
|
rm -rf $RPM_BUILD_ROOT
|
|
mkdir -p -m755 $RPM_BUILD_ROOT%{_sysconfdir}/ssh
|
|
mkdir -p -m755 $RPM_BUILD_ROOT%{_libexecdir}/openssh
|
|
mkdir -p -m755 $RPM_BUILD_ROOT%{_var}/empty/sshd
|
|
make install DESTDIR=$RPM_BUILD_ROOT
|
|
|
|
install -d $RPM_BUILD_ROOT/etc/pam.d/
|
|
install -d $RPM_BUILD_ROOT/etc/rc.d/init.d
|
|
install -d $RPM_BUILD_ROOT%{_libexecdir}/openssh
|
|
install -m644 %{SOURCE2} $RPM_BUILD_ROOT/etc/pam.d/sshd
|
|
install -m755 %{SOURCE3} $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd
|
|
install -m755 contrib/ssh-copy-id $RPM_BUILD_ROOT%{_bindir}/
|
|
install contrib/ssh-copy-id.1 $RPM_BUILD_ROOT%{_mandir}/man1/
|
|
|
|
%if ! %{no_gnome_askpass}
|
|
install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/gnome-ssh-askpass
|
|
%endif
|
|
|
|
%if ! %{scard}
|
|
rm -f $RPM_BUILD_ROOT%{_datadir}/openssh/Ssh.bin
|
|
%endif
|
|
|
|
%if ! %{no_gnome_askpass}
|
|
ln -s gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/ssh-askpass
|
|
install -m 755 -d $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
|
|
install -m 755 contrib/redhat/gnome-ssh-askpass.csh $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
|
|
install -m 755 contrib/redhat/gnome-ssh-askpass.sh $RPM_BUILD_ROOT%{_sysconfdir}/profile.d/
|
|
%endif
|
|
|
|
%if %{no_gnome_askpass}
|
|
rm -f $RPM_BUILD_ROOT/etc/profile.d/gnome-ssh-askpass.*
|
|
%endif
|
|
|
|
perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/man*/*
|
|
|
|
rm -f README.nss.nss-keys
|
|
%if ! %{nss}
|
|
rm -f README.nss
|
|
%endif
|
|
%clean
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
%triggerun server -- ssh-server
|
|
if [ "$1" != 0 -a -r /var/run/sshd.pid ] ; then
|
|
touch /var/run/sshd.restart
|
|
fi
|
|
|
|
%triggerun server -- openssh-server < 2.5.0p1
|
|
# Count the number of HostKey and HostDsaKey statements we have.
|
|
gawk 'BEGIN {IGNORECASE=1}
|
|
/^hostkey/ || /^hostdsakey/ {sawhostkey = sawhostkey + 1}
|
|
END {exit sawhostkey}' /etc/ssh/sshd_config
|
|
# And if we only found one, we know the client was relying on the old default
|
|
# behavior, which loaded the the SSH2 DSA host key when HostDsaKey wasn't
|
|
# specified. Now that HostKey is used for both SSH1 and SSH2 keys, specifying
|
|
# one nullifies the default, which would have loaded both.
|
|
if [ $? -eq 1 ] ; then
|
|
echo HostKey /etc/ssh/ssh_host_rsa_key >> /etc/ssh/sshd_config
|
|
echo HostKey /etc/ssh/ssh_host_dsa_key >> /etc/ssh/sshd_config
|
|
fi
|
|
|
|
%triggerpostun server -- ssh-server
|
|
if [ "$1" != 0 ] ; then
|
|
/sbin/chkconfig --add sshd
|
|
if test -f /var/run/sshd.restart ; then
|
|
rm -f /var/run/sshd.restart
|
|
/sbin/service sshd start > /dev/null 2>&1 || :
|
|
fi
|
|
fi
|
|
|
|
%pre server
|
|
%if %{nologin}
|
|
/usr/sbin/useradd -c "Privilege-separated SSH" -u %{sshd_uid} \
|
|
-s /sbin/nologin -r -d /var/empty/sshd sshd 2> /dev/null || :
|
|
%else
|
|
/usr/sbin/useradd -c "Privilege-separated SSH" -u %{sshd_uid} \
|
|
-s /dev/null -r -d /var/empty/sshd sshd 2> /dev/null || :
|
|
%endif
|
|
|
|
%post server
|
|
/sbin/chkconfig --add sshd
|
|
|
|
%postun server
|
|
/sbin/service sshd condrestart > /dev/null 2>&1 || :
|
|
|
|
%preun server
|
|
if [ "$1" = 0 ]
|
|
then
|
|
/sbin/service sshd stop > /dev/null 2>&1 || :
|
|
/sbin/chkconfig --del sshd
|
|
fi
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%doc CREDITS ChangeLog INSTALL LICENCE OVERVIEW README* RFC* TODO WARNING*
|
|
%attr(0755,root,root) %dir %{_sysconfdir}/ssh
|
|
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/moduli
|
|
%if ! %{rescue}
|
|
%attr(0755,root,root) %{_bindir}/ssh-keygen
|
|
%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*
|
|
%attr(0755,root,root) %dir %{_libexecdir}/openssh
|
|
%attr(4755,root,root) %{_libexecdir}/openssh/ssh-keysign
|
|
%attr(0644,root,root) %{_mandir}/man8/ssh-keysign.8*
|
|
%endif
|
|
%if %{scard}
|
|
%attr(0755,root,root) %dir %{_datadir}/openssh
|
|
%attr(0644,root,root) %{_datadir}/openssh/Ssh.bin
|
|
%endif
|
|
|
|
%files clients
|
|
%defattr(-,root,root)
|
|
%attr(0755,root,root) %{_bindir}/ssh
|
|
%attr(0644,root,root) %{_mandir}/man1/ssh.1*
|
|
%attr(0755,root,root) %{_bindir}/scp
|
|
%attr(0644,root,root) %{_mandir}/man1/scp.1*
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh/ssh_config
|
|
%attr(0755,root,root) %{_bindir}/slogin
|
|
%attr(0644,root,root) %{_mandir}/man1/slogin.1*
|
|
%attr(0644,root,root) %{_mandir}/man5/ssh_config.5*
|
|
%if ! %{rescue}
|
|
%attr(2755,root,nobody) %{_bindir}/ssh-agent
|
|
%attr(0755,root,root) %{_bindir}/ssh-add
|
|
%attr(0755,root,root) %{_bindir}/ssh-keyscan
|
|
%attr(0755,root,root) %{_bindir}/sftp
|
|
%attr(0755,root,root) %{_bindir}/ssh-copy-id
|
|
%attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*
|
|
%attr(0644,root,root) %{_mandir}/man1/ssh-add.1*
|
|
%attr(0644,root,root) %{_mandir}/man1/ssh-keyscan.1*
|
|
%attr(0644,root,root) %{_mandir}/man1/sftp.1*
|
|
%attr(0644,root,root) %{_mandir}/man1/ssh-copy-id.1*
|
|
%endif
|
|
|
|
%if ! %{rescue}
|
|
%files server
|
|
%defattr(-,root,root)
|
|
%dir %attr(0711,root,root) %{_var}/empty/sshd
|
|
%attr(0755,root,root) %{_sbindir}/sshd
|
|
%attr(0755,root,root) %{_libexecdir}/openssh/sftp-server
|
|
%attr(0644,root,root) %{_mandir}/man5/sshd_config.5*
|
|
%attr(0644,root,root) %{_mandir}/man8/sshd.8*
|
|
%attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
|
|
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ssh/sshd_config
|
|
%attr(0644,root,root) %config(noreplace) /etc/pam.d/sshd
|
|
%attr(0755,root,root) /etc/rc.d/init.d/sshd
|
|
%endif
|
|
|
|
%if ! %{no_gnome_askpass}
|
|
%files askpass
|
|
%defattr(-,root,root)
|
|
%attr(0644,root,root) %{_sysconfdir}/profile.d/gnome-ssh-askpass.*
|
|
%attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass
|
|
%attr(0755,root,root) %{_libexecdir}/openssh/ssh-askpass
|
|
%endif
|
|
|
|
%changelog
|
|
* Wed May 21 2008 Tomas Mraz <tmraz@redhat.com> - 5.0p1-3
|
|
- pass the connection socket to ssh-keysign (#447680)
|
|
|
|
* Mon May 19 2008 Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
|
|
- add LANGUAGE to accepted/sent environment variables (#443231)
|
|
- use pam_selinux to obtain the user context instead of doing it itself
|
|
- unbreak server keep alive settings (patch from upstream)
|
|
- small addition to scp manpage
|
|
|
|
* Mon Apr 7 2008 Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
|
|
- upgrade to new upstream (#441066)
|
|
- prevent initscript from killing itself on halt with upstart (#438449)
|
|
- initscript status should show that the daemon is running
|
|
only when the main daemon is still alive (#430882)
|
|
|
|
* Thu Mar 6 2008 Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
|
|
- fix race on control master and cleanup stale control socket (#436311)
|
|
patches by David Woodhouse
|
|
|
|
* Fri Feb 29 2008 Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
|
|
- set FD_CLOEXEC on client socket
|
|
- apply real fix for window size problem (#286181) from upstream
|
|
- apply fix for the spurious failed bind from upstream
|
|
- apply open handle leak in sftp fix from upstream
|
|
|
|
* Tue Feb 12 2008 Dennis Gilmore <dennis@ausil.us> - 4.7p1-8
|
|
- we build for sparcv9 now and it needs -fPIE
|
|
|
|
* Thu Jan 3 2008 Tomas Mraz <tmraz@redhat.com> - 4.7p1-7
|
|
- fix gssapi auth with explicit selinux role requested (#427303) - patch
|
|
by Nalin Dahyabhai
|
|
|
|
* Tue Dec 4 2007 Tomas Mraz <tmraz@redhat.com> - 4.7p1-6
|
|
- explicitly source krb5-devel profile script
|
|
|
|
* Tue Dec 04 2007 Release Engineering <rel-eng at fedoraproject dot org> - 4.7p1-5
|
|
- Rebuild for openssl bump
|
|
|
|
* Tue Nov 20 2007 Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
|
|
- do not copy /etc/localtime into the chroot as it is not
|
|
necessary anymore (#193184)
|
|
- call setkeycreatecon when selinux context is established
|
|
- test for NULL privk when freeing key (#391871) - patch by
|
|
Pierre Ossman
|
|
|
|
* Mon Sep 17 2007 Tomas Mraz <tmraz@redhat.com> - 4.7p1-2
|
|
- revert default window size adjustments (#286181)
|
|
|
|
* Thu Sep 6 2007 Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
|
|
- upgrade to latest upstream
|
|
- use libedit in sftp (#203009)
|
|
- fixed audit log injection problem (CVE-2007-3102)
|
|
|
|
* Thu Aug 9 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
|
|
- fix sftp client problems on write error (#247802)
|
|
- allow disabling autocreation of server keys (#235466)
|
|
|
|
* Wed Jun 20 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-7
|
|
- experimental NSS keys support
|
|
- correctly setup context when empty level requested (#234951)
|
|
|
|
* Tue Mar 20 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-6
|
|
- mls level check must be done with default role same as requested
|
|
|
|
* Mon Mar 19 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-5
|
|
- make profile.d/gnome-ssh-askpass.* regular files (#226218)
|
|
|
|
* Thu Feb 27 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-4
|
|
- reject connection if requested mls range is not obtained (#229278)
|
|
|
|
* Wed Feb 22 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-3
|
|
- improve Buildroot
|
|
- remove duplicate /etc/ssh from files
|
|
|
|
* Tue Jan 16 2007 Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
|
|
- support mls on labeled networks (#220487)
|
|
- support mls level selection on unlabeled networks
|
|
- allow / in usernames in scp (only beginning /, ./, and ../ is special)
|
|
|
|
* Thu Dec 21 2006 Tomas Mraz <tmraz@redhat.com> - 4.5p1-1
|
|
- update to 4.5p1 (#212606)
|
|
|
|
* Thu Nov 30 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-14
|
|
- fix gssapi with DNS loadbalanced clusters (#216857)
|
|
|
|
* Tue Nov 28 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
|
|
- improved pam_session patch so it doesn't regress, the patch is necessary
|
|
for the pam_session_close to be called correctly as uid 0
|
|
|
|
* Fri Nov 10 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-12
|
|
- CVE-2006-5794 - properly detect failed key verify in monitor (#214641)
|
|
|
|
* Thu Nov 2 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
|
|
- merge sshd initscript patches
|
|
- kill all ssh sessions when stop is called in halt or reboot runlevel
|
|
- remove -TERM option from killproc so we don't race on sshd restart
|
|
|
|
* Mon Oct 2 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
|
|
- improve gssapi-no-spnego patch (#208102)
|
|
- CVE-2006-4924 - prevent DoS on deattack detector (#207957)
|
|
- CVE-2006-5051 - don't call cleanups from signal handler (#208459)
|
|
|
|
* Wed Aug 23 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
|
|
- don't report duplicate syslog messages, use correct local time (#189158)
|
|
- don't allow spnego as gssapi mechanism (from upstream)
|
|
- fixed memleaks found by Coverity (from upstream)
|
|
- allow ip options except source routing (#202856) (patch by HP)
|
|
|
|
* Tue Aug 8 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
|
|
- drop the pam-session patch from the previous build (#201341)
|
|
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
|
|
|
|
* Thu Jul 20 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
|
|
- dropped old ssh obsoletes
|
|
- call the pam_session_open/close from the monitor when privsep is
|
|
enabled so it is always called as root (patch by Darren Tucker)
|
|
|
|
* Mon Jul 17 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
|
|
- improve selinux patch (by Jan Kiszka)
|
|
- upstream patch for buffer append space error (#191940)
|
|
- fixed typo in configure.ac (#198986)
|
|
- added pam_keyinit to pam configuration (#198628)
|
|
- improved error message when askpass dialog cannot grab
|
|
keyboard input (#198332)
|
|
- buildrequires xauth instead of xorg-x11-xauth
|
|
- fixed a few rpmlint warnings
|
|
|
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 4.3p2-5.1
|
|
- rebuild
|
|
|
|
* Fri Apr 14 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-5
|
|
- don't request pseudoterminal allocation if stdin is not tty (#188983)
|
|
|
|
* Thu Mar 2 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-4
|
|
- allow access if audit is not compiled in kernel (#183243)
|
|
|
|
* Fri Feb 24 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
|
|
- enable the subprocess in chroot to send messages to system log
|
|
- sshd should prevent login if audit call fails
|
|
|
|
* Tue Feb 21 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-2
|
|
- print error from scp if not remote (patch by Bjorn Augustsson #178923)
|
|
|
|
* Mon Feb 13 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p2-1
|
|
- new version
|
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 4.3p1-2.1
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
* Mon Feb 6 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
|
|
- fixed another place where syslog was called in signal handler
|
|
- pass locale environment variables to server, accept them there (#179851)
|
|
|
|
* Wed Feb 1 2006 Tomas Mraz <tmraz@redhat.com> - 4.3p1-1
|
|
- new version, dropped obsolete patches
|
|
|
|
* Tue Dec 20 2005 Tomas Mraz <tmraz@redhat.com> - 4.2p1-10
|
|
- hopefully make the askpass dialog less confusing (#174765)
|
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
- rebuilt
|
|
|
|
* Tue Nov 22 2005 Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
|
|
- drop x11-ssh-askpass from the package
|
|
- drop old build_6x ifs from spec file
|
|
- improve gnome-ssh-askpass so it doesn't reveal number of passphrase
|
|
characters to person looking at the display
|
|
- less hackish fix for the __USE_GNU problem
|
|
|
|
* Fri Nov 18 2005 Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
|
|
- work around missing gccmakedep by wrapping makedepend in a local script
|
|
- remove now-obsolete build dependency on "xauth"
|
|
|
|
* Thu Nov 17 2005 Warren Togami <wtogami@redhat.com> - 4.2p1-7
|
|
- xorg-x11-devel -> libXt-devel
|
|
- rebuild for new xauth location so X forwarding works
|
|
- buildreq audit-libs-devel
|
|
- buildreq automake for aclocal
|
|
- buildreq imake for xmkmf
|
|
- -D_GNU_SOURCE in flags in order to get it to build
|
|
Ugly hack to workaround openssh defining __USE_GNU which is
|
|
not allowed and causes problems according to Ulrich Drepper
|
|
fix this the correct way after FC5test1
|
|
|
|
* Wed Nov 9 2005 Jeremy Katz <katzj@redhat.com> - 4.2p1-6
|
|
- rebuild against new openssl
|
|
|
|
* Fri Oct 28 2005 Tomas Mraz <tmraz@redhat.com> 4.2p1-5
|
|
- put back the possibility to skip SELinux patch
|
|
- add patch for user login auditing by Steve Grubb
|
|
|
|
* Tue Oct 18 2005 Dan Walsh <dwalsh@redhat.com> 4.2p1-4
|
|
- Change selinux patch to use get_default_context_with_rolelevel in libselinux.
|
|
|
|
* Thu Oct 13 2005 Tomas Mraz <tmraz@redhat.com> 4.2p1-3
|
|
- Update selinux patch to use getseuserbyname
|
|
|
|
* Fri Oct 7 2005 Tomas Mraz <tmraz@redhat.com> 4.2p1-2
|
|
- use include instead of pam_stack in pam config
|
|
- use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
|
|
- upstream patch for displaying authentication errors
|
|
|
|
* Tue Sep 06 2005 Tomas Mraz <tmraz@redhat.com> 4.2p1-1
|
|
- upgrade to a new upstream version
|
|
|
|
* Tue Aug 16 2005 Tomas Mraz <tmraz@redhat.com> 4.1p1-5
|
|
- use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
|
|
- install ssh-copy-id from contrib (#88707)
|
|
|
|
* Wed Jul 27 2005 Tomas Mraz <tmraz@redhat.com> 4.1p1-4
|
|
- don't deadlock on exit with multiple X forwarded channels (#152432)
|
|
- don't use X11 port which can't be bound on all IP families (#163732)
|
|
|
|
* Wed Jun 29 2005 Tomas Mraz <tmraz@redhat.com> 4.1p1-3
|
|
- fix small regression caused by the nologin patch (#161956)
|
|
- fix race in getpeername error checking (mindrot #1054)
|
|
|
|
* Thu Jun 9 2005 Tomas Mraz <tmraz@redhat.com> 4.1p1-2
|
|
- use only pam_nologin for nologin testing
|
|
|
|
* Mon Jun 6 2005 Tomas Mraz <tmraz@redhat.com> 4.1p1-1
|
|
- upgrade to a new upstream version
|
|
- call pam_loginuid as a pam session module
|
|
|
|
* Mon May 16 2005 Tomas Mraz <tmraz@redhat.com> 4.0p1-3
|
|
- link libselinux only to sshd (#157678)
|
|
|
|
* Mon Apr 4 2005 Tomas Mraz <tmraz@redhat.com> 4.0p1-2
|
|
- fixed Local/RemoteForward in ssh_config.5 manpage
|
|
- fix fatal when Local/RemoteForward is used and scp run (#153258)
|
|
- don't leak user validity when using krb5 authentication
|
|
|
|
* Thu Mar 24 2005 Tomas Mraz <tmraz@redhat.com> 4.0p1-1
|
|
- upgrade to 4.0p1
|
|
- remove obsolete groups patch
|
|
|
|
* Wed Mar 16 2005 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Mon Feb 28 2005 Nalin Dahyabhai <nalin@redhat.com> 3.9p1-12
|
|
- rebuild so that configure can detect that krb5_init_ets is gone now
|
|
|
|
* Mon Feb 21 2005 Tomas Mraz <tmraz@redhat.com> 3.9p1-11
|
|
- don't call syslog in signal handler
|
|
- allow password authentication when copying from remote
|
|
to remote machine (#103364)
|
|
|
|
* Wed Feb 9 2005 Tomas Mraz <tmraz@redhat.com>
|
|
- add spaces to messages in initscript (#138508)
|
|
|
|
* Tue Feb 8 2005 Tomas Mraz <tmraz@redhat.com> 3.9p1-10
|
|
- enable trusted forwarding by default if X11 forwarding is
|
|
required by user (#137685 and duplicates)
|
|
- disable protocol 1 support by default in sshd server config (#88329)
|
|
- keep the gnome-askpass dialog above others (#69131)
|
|
|
|
* Fri Feb 4 2005 Tomas Mraz <tmraz@redhat.com>
|
|
- change permissions on pam.d/sshd to 0644 (#64697)
|
|
- patch initscript so it doesn't kill opened sessions if
|
|
the sshd daemon isn't running anymore (#67624)
|
|
|
|
* Mon Jan 3 2005 Bill Nottingham <notting@redhat.com> 3.9p1-9
|
|
- don't use initlog
|
|
|
|
* Mon Nov 29 2004 Thomas Woerner <twoerner@redhat.com> 3.9p1-8.1
|
|
- fixed PIE build for all architectures
|
|
|
|
* Mon Oct 4 2004 Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
|
|
- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
|
|
to enable display of a vendor patch level during version exchange (#120285)
|
|
- configure with --disable-strip to build useful debuginfo subpackages
|
|
|
|
* Mon Sep 20 2004 Bill Nottingham <notting@redhat.com> 3.9p1-7
|
|
- when using gtk2 for askpass, don't buildprereq gnome-libs-devel
|
|
|
|
* Tue Sep 14 2004 Nalin Dahyabhai <nalin@redhat.com> 3.9p1-6
|
|
- build
|
|
|
|
* Mon Sep 13 2004 Nalin Dahyabhai <nalin@redhat.com>
|
|
- disable ACSS support
|
|
|
|
* Thu Sep 2 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-5
|
|
- Change selinux patch to use get_default_context_with_role in libselinux.
|
|
|
|
* Thu Sep 2 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-4
|
|
- Fix patch
|
|
* Bad debug statement.
|
|
* Handle root/sysadm_r:kerberos
|
|
|
|
* Thu Sep 2 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-3
|
|
- Modify Colin Walter's patch to allow specifying rule during connection
|
|
|
|
* Tue Aug 31 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-2
|
|
- Fix TTY handling for SELinux
|
|
|
|
* Tue Aug 24 2004 Daniel Walsh <dwalsh@redhat.com> 3.9p1-1
|
|
- Update to upstream
|
|
|
|
* Sun Aug 1 2004 Alan Cox <alan@redhat.com> 3.8.1p1-5
|
|
- Apply buildreq fixup patch (#125296)
|
|
|
|
* Tue Jun 15 2004 Daniel Walsh <dwalsh@redhat.com> 3.8.1p1-4
|
|
- Clean up patch for upstream submission.
|
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Wed Jun 9 2004 Daniel Walsh <dwalsh@redhat.com> 3.8.1p1-2
|
|
- Remove use of pam_selinux and patch selinux in directly.
|
|
|
|
* Mon Jun 7 2004 Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
|
|
- request gssapi-with-mic by default but not delegation (flag day for anyone
|
|
who used previous gssapi patches)
|
|
- no longer request x11 forwarding by default
|
|
|
|
* Thu Jun 3 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-36
|
|
- Change pam file to use open and close with pam_selinux
|
|
|
|
* Tue Jun 1 2004 Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-0
|
|
- update to 3.8.1p1
|
|
- add workaround from CVS to reintroduce passwordauth using pam
|
|
|
|
* Tue Jun 1 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-35
|
|
- Remove CLOSEXEC on STDERR
|
|
|
|
* Tue Mar 16 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
|
|
|
|
* Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
|
|
- Built RHLE3 U2 update package.
|
|
|
|
* Wed Mar 3 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-33
|
|
- Close file descriptors on exec
|
|
|
|
* Mon Mar 1 2004 Thomas Woerner <twoerner@redhat.com> 3.6.1p2-32
|
|
- fixed pie build
|
|
|
|
* Thu Feb 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-31
|
|
- Add restorecon to startup scripts
|
|
|
|
* Thu Feb 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-30
|
|
- Add multiple qualified to openssh
|
|
|
|
* Mon Feb 23 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-29
|
|
- Eliminate selinux code and use pam_selinux
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Mon Jan 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-27
|
|
- turn off pie on ppc
|
|
|
|
* Mon Jan 26 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-26
|
|
- fix is_selinux_enabled
|
|
|
|
* Wed Jan 14 2004 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-25
|
|
- Rebuild to grab shared libselinux
|
|
|
|
* Wed Dec 3 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-24
|
|
- turn on selinux
|
|
|
|
* Tue Nov 18 2003 Nalin Dahyabhai <nalin@redhat.com>
|
|
- un#ifdef out code for reporting password expiration in non-privsep
|
|
mode (#83585)
|
|
|
|
* Mon Nov 10 2003 Nalin Dahyabhai <nalin@redhat.com>
|
|
- add machinery to build with/without -fpie/-pie, default to doing so
|
|
|
|
* Thu Nov 06 2003 David Woodhouse <dwmw2@redhat.com> 3.6.1p2-23
|
|
- Don't whinge about getsockopt failing (#109161)
|
|
|
|
* Fri Oct 24 2003 Nalin Dahyabhai <nalin@redhat.com>
|
|
- add missing buildprereq on zlib-devel (#104558)
|
|
|
|
* Mon Oct 13 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-22
|
|
- turn selinux off
|
|
|
|
* Mon Oct 13 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-21.sel
|
|
- turn selinux on
|
|
|
|
* Fri Sep 19 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-21
|
|
- turn selinux off
|
|
|
|
* Fri Sep 19 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-20.sel
|
|
- turn selinux on
|
|
|
|
* Fri Sep 19 2003 Nalin Dahyabhai <nalin@redhat.com>
|
|
- additional fix for apparently-never-happens double-free in buffer_free()
|
|
- extend fix for #103998 to cover SSH1
|
|
|
|
* Wed Sep 17 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-19
|
|
- rebuild
|
|
|
|
* Wed Sep 17 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-18
|
|
- additional buffer manipulation cleanups from Solar Designer
|
|
|
|
* Wed Sep 17 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-17
|
|
- turn selinux off
|
|
|
|
* Wed Sep 17 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-16.sel
|
|
- turn selinux on
|
|
|
|
* Tue Sep 16 2003 Bill Nottingham <notting@redhat.com> 3.6.1p2-15
|
|
- rebuild
|
|
|
|
* Tue Sep 16 2003 Bill Nottingham <notting@redhat.com> 3.6.1p2-14
|
|
- additional buffer manipulation fixes (CAN-2003-0695)
|
|
|
|
* Tue Sep 16 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-13.sel
|
|
- turn selinux on
|
|
|
|
* Tue Sep 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-12
|
|
- rebuild
|
|
|
|
* Tue Sep 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
|
|
- apply patch to store the correct buffer size in allocated buffers
|
|
(CAN-2003-0693)
|
|
- skip the initial PAM authentication attempt with an empty password if
|
|
empty passwords are not permitted in our configuration (#103998)
|
|
|
|
* Fri Sep 5 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-10
|
|
- turn selinux off
|
|
|
|
* Fri Sep 5 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-9.sel
|
|
- turn selinux on
|
|
|
|
* Tue Aug 26 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-8
|
|
- Add BuildPreReq gtk2-devel if gtk2
|
|
|
|
* Tue Aug 12 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-7
|
|
- rebuild
|
|
|
|
* Tue Aug 12 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
|
|
- modify patch which clears the supplemental group list at startup to only
|
|
complain if setgroups() fails if sshd has euid == 0
|
|
- handle krb5 installed in %%{_prefix} or elsewhere by using krb5-config
|
|
|
|
* Tue Jul 28 2003 Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-5
|
|
- Add SELinux patch
|
|
|
|
* Tue Jul 22 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-4
|
|
- rebuild
|
|
|
|
* Wed Jun 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-3
|
|
- rebuild
|
|
|
|
* Wed Jun 16 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-2
|
|
- rebuild
|
|
|
|
* Thu Jun 5 2003 Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-1
|
|
- update to 3.6.1p2
|
|
|
|
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
|
|
- rebuilt
|
|
|
|
* Mon Mar 24 2003 Florian La Roche <Florian.LaRoche@redhat.de>
|
|
- add patch for getsockopt() call to work on bigendian 64bit archs
|
|
|
|
* Fri Feb 14 2003 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
|
|
- move scp to the -clients subpackage, because it directly depends on ssh
|
|
which is also in -clients (#84329)
|
|
|
|
* Mon Feb 10 2003 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-5
|
|
- rebuild
|
|
|
|
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
|
|
- rebuilt
|
|
|
|
* Tue Jan 7 2003 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-3
|
|
- rebuild
|
|
|
|
* Tue Nov 12 2002 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
|
|
- patch PAM configuration to use relative path names for the modules, allowing
|
|
us to not worry about which arch the modules are built for on multilib systems
|
|
|
|
* Tue Oct 15 2002 Nalin Dahyabhai <nalin@redhat.com> 3.5p1-1
|
|
- update to 3.5p1, merging in filelist/perm changes from the upstream spec
|
|
|
|
* Fri Oct 4 2002 Nalin Dahyabhai <nalin@redhat.com> 3.4p1-3
|
|
- merge
|
|
|
|
* Thu Sep 12 2002 Than Ngo <than@redhat.com> 3.4p1-2.1
|
|
- fix to build on multilib systems
|
|
|
|
* Thu Aug 29 2002 Curtis Zinzilieta <curtisz@redhat.com> 3.4p1-2gss
|
|
- added gssapi patches and uncommented patch here
|
|
|
|
* Wed Aug 14 2002 Nalin Dahyabhai <nalin@redhat.com> 3.4p1-2
|
|
- pull patch from CVS to fix too-early free in ssh-keysign (#70009)
|
|
|
|
* Thu Jun 27 2002 Nalin Dahyabhai <nalin@redhat.com> 3.4p1-1
|
|
- 3.4p1
|
|
- drop anon mmap patch
|
|
|
|
* Tue Jun 25 2002 Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
|
|
- rework the close-on-exit docs
|
|
- include configuration file man pages
|
|
- make use of nologin as the privsep shell optional
|
|
|
|
* Mon Jun 24 2002 Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
|
|
- update to 3.3p1
|
|
- merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
|
|
- disable gtk2 askpass
|
|
- require pam-devel by filename rather than by package for erratum
|
|
- include patch from Solar Designer to work around anonymous mmap failures
|
|
|
|
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
|
- automated rebuild
|
|
|
|
* Fri Jun 7 2002 Nalin Dahyabhai <nalin@redhat.com> 3.2.3p1-3
|
|
- don't require autoconf any more
|
|
|
|
* Fri May 31 2002 Nalin Dahyabhai <nalin@redhat.com> 3.2.3p1-2
|
|
- build gnome-ssh-askpass with gtk2
|
|
|
|
* Tue May 28 2002 Nalin Dahyabhai <nalin@redhat.com> 3.2.3p1-1
|
|
- update to 3.2.3p1
|
|
- merge in spec file changes from upstream
|
|
|
|
* Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 3.2.2p1-1
|
|
- update to 3.2.2p1
|
|
|
|
* Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
|
|
- drop buildreq on db1-devel
|
|
- require pam-devel by package name
|
|
- require autoconf instead of autoconf253 again
|
|
|
|
* Tue Apr 2 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
|
|
- pull patch from CVS to avoid printing error messages when some of the
|
|
default keys aren't available when running ssh-add
|
|
- refresh to current revisions of Simon's patches
|
|
|
|
* Thu Mar 21 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
|
|
- reintroduce Simon's gssapi patches
|
|
- add buildprereq for autoconf253, which is needed to regenerate configure
|
|
after applying the gssapi patches
|
|
- refresh to the latest version of Markus's patch to build properly with
|
|
older versions of OpenSSL
|
|
|
|
* Thu Mar 7 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2
|
|
- bump and grind (through the build system)
|
|
|
|
* Thu Mar 7 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
|
|
- require sharutils for building (mindrot #137)
|
|
- require db1-devel only when building for 6.x (#55105), which probably won't
|
|
work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
|
|
- require pam-devel by file (not by package name) again
|
|
- add Markus's patch to compile with OpenSSL 0.9.5a (from
|
|
http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
|
|
building for 6.x
|
|
|
|
* Thu Mar 7 2002 Nalin Dahyabhai <nalin@redhat.com> 3.1p1-0
|
|
- update to 3.1p1
|
|
|
|
* Tue Mar 5 2002 Nalin Dahyabhai <nalin@redhat.com> SNAP-20020305
|
|
- update to SNAP-20020305
|
|
- drop debug patch, fixed upstream
|
|
|
|
* Wed Feb 20 2002 Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
|
|
- update to SNAP-20020220 for testing purposes (you've been warned, if there's
|
|
anything to be warned about, gss patches won't apply, I don't mind)
|
|
|
|
* Wed Feb 13 2002 Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
|
|
- add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
|
|
exchange, authentication, and named key support
|
|
|
|
* Wed Jan 23 2002 Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-2
|
|
- remove dependency on db1-devel, which has just been swallowed up whole
|
|
by gnome-libs-devel
|
|
|
|
* Sun Dec 29 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- adjust build dependencies so that build6x actually works right (fix
|
|
from Hugo van der Kooij)
|
|
|
|
* Tue Dec 4 2001 Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-1
|
|
- update to 3.0.2p1
|
|
|
|
* Fri Nov 16 2001 Nalin Dahyabhai <nalin@redhat.com> 3.0.1p1-1
|
|
- update to 3.0.1p1
|
|
|
|
* Tue Nov 13 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- update to current CVS (not for use in distribution)
|
|
|
|
* Thu Nov 8 2001 Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
|
|
- merge some of Damien Miller <djm@mindrot.org> changes from the upstream
|
|
3.0p1 spec file and init script
|
|
|
|
* Wed Nov 7 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- update to 3.0p1
|
|
- update to x11-ssh-askpass 1.2.4.1
|
|
- change build dependency on a file from pam-devel to the pam-devel package
|
|
- replace primes with moduli
|
|
|
|
* Thu Sep 27 2001 Nalin Dahyabhai <nalin@redhat.com> 2.9p2-9
|
|
- incorporate fix from Markus Friedl's advisory for IP-based authorization bugs
|
|
|
|
* Thu Sep 13 2001 Bernhard Rosenkraenzer <bero@redhat.com> 2.9p2-8
|
|
- Merge changes to rescue build from current sysadmin survival cd
|
|
|
|
* Thu Sep 6 2001 Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
|
|
- fix scp's server's reporting of file sizes, and build with the proper
|
|
preprocessor define to get large-file capable open(), stat(), etc.
|
|
(sftp has been doing this correctly all along) (#51827)
|
|
- configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
|
|
- pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
|
|
- mark profile.d scriptlets as config files (#42337)
|
|
- refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
|
|
- change a couple of log() statements to debug() statements (#50751)
|
|
- pull cvs patch to add -t flag to sshd (#28611)
|
|
- clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)
|
|
|
|
* Mon Aug 20 2001 Nalin Dahyabhai <nalin@redhat.com> 2.9p2-6
|
|
- add db1-devel as a BuildPrerequisite (noted by Hans Ecke)
|
|
|
|
* Thu Aug 16 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- pull cvs patch to fix remote port forwarding with protocol 2
|
|
|
|
* Thu Aug 9 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- pull cvs patch to add session initialization to no-pty sessions
|
|
- pull cvs patch to not cut off challengeresponse auth needlessly
|
|
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
|
|
it by default on a system that doesn't have X installed (#49263)
|
|
|
|
* Wed Aug 8 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- don't apply patches to code we don't intend to build (spotted by Matt Galgoci)
|
|
|
|
* Mon Aug 6 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- pass OPTIONS correctly to initlog (#50151)
|
|
|
|
* Wed Jul 25 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- switch to x11-ssh-askpass 1.2.2
|
|
|
|
* Wed Jul 11 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- rebuild in new environment
|
|
|
|
* Mon Jun 25 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- disable the gssapi patch
|
|
|
|
* Mon Jun 18 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- update to 2.9p2
|
|
- refresh to a new version of the gssapi patch
|
|
|
|
* Thu Jun 7 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- change Copyright: BSD to License: BSD
|
|
- add Markus Friedl's unverified patch for the cookie file deletion problem
|
|
so that we can verify it
|
|
- drop patch to check if xauth is present (was folded into cookie patch)
|
|
- don't apply gssapi patches for the errata candidate
|
|
- clear supplemental groups list at startup
|
|
|
|
* Fri May 25 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- fix an error parsing the new default sshd_config
|
|
- add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
|
|
dealing with comments right
|
|
|
|
* Thu May 24 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
|
|
to be removed before the next beta cycle because it's a big departure
|
|
from the upstream version
|
|
|
|
* Thu May 3 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- finish marking strings in the init script for translation
|
|
- modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
|
|
at startup (change merged from openssh.com init script, originally by
|
|
Pekka Savola)
|
|
- refuse to do X11 forwarding if xauth isn't there, handy if you enable
|
|
it by default on a system that doesn't have X installed
|
|
|
|
* Wed May 2 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- update to 2.9
|
|
- drop various patches that came from or went upstream or to or from CVS
|
|
|
|
* Wed Apr 18 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)
|
|
|
|
* Sun Apr 8 2001 Preston Brown <pbrown@redhat.com>
|
|
- remove explicit openssl requirement, fixes builddistro issue
|
|
- make initscript stop() function wait until sshd really dead to avoid
|
|
races in condrestart
|
|
|
|
* Mon Apr 2 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- mention that challengereponse supports PAM, so disabling password doesn't
|
|
limit users to pubkey and rsa auth (#34378)
|
|
- bypass the daemon() function in the init script and call initlog directly,
|
|
because daemon() won't start a daemon it detects is already running (like
|
|
open connections)
|
|
- require the version of openssl we had when we were built
|
|
|
|
* Fri Mar 23 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- make do_pam_setcred() smart enough to know when to establish creds and
|
|
when to reinitialize them
|
|
- add in a couple of other fixes from Damien for inclusion in the errata
|
|
|
|
* Thu Mar 22 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- update to 2.5.2p2
|
|
- call setcred() again after initgroups, because the "creds" could actually
|
|
be group memberships
|
|
|
|
* Tue Mar 20 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
|
|
- don't enable challenge-response by default until we find a way to not
|
|
have too many userauth requests (we may make up to six pubkey and up to
|
|
three password attempts as it is)
|
|
- remove build dependency on rsh to match openssh.com's packages more closely
|
|
|
|
* Sat Mar 3 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- remove dependency on openssl -- would need to be too precise
|
|
|
|
* Fri Mar 2 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- rebuild in new environment
|
|
|
|
* Mon Feb 26 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Revert the patch to move pam_open_session.
|
|
- Init script and spec file changes from Pekka Savola. (#28750)
|
|
- Patch sftp to recognize '-o protocol' arguments. (#29540)
|
|
|
|
* Thu Feb 22 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Chuck the closing patch.
|
|
- Add a trigger to add host keys for protocol 2 to the config file, now that
|
|
configuration file syntax requires us to specify it with HostKey if we
|
|
specify any other HostKey values, which we do.
|
|
|
|
* Tue Feb 20 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Redo patch to move pam_open_session after the server setuid()s to the user.
|
|
- Rework the nopam patch to use be picked up by autoconf.
|
|
|
|
* Mon Feb 19 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update for 2.5.1p1.
|
|
- Add init script mods from Pekka Savola.
|
|
- Tweak the init script to match the CVS contrib script more closely.
|
|
- Redo patch to ssh-add to try to adding both identity and id_dsa to also try
|
|
adding id_rsa.
|
|
|
|
* Fri Feb 16 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update for 2.5.0p1.
|
|
- Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
|
|
- Resync with parts of Damien Miller's openssh.spec from CVS, including
|
|
update of x11 askpass to 1.2.0.
|
|
- Only require openssl (don't prereq) because we generate keys in the init
|
|
script now.
|
|
|
|
* Tue Feb 13 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Don't open a PAM session until we've forked and become the user (#25690).
|
|
- Apply Andrew Bartlett's patch for letting pam_authenticate() know which
|
|
host the user is attempting a login from.
|
|
- Resync with parts of Damien Miller's openssh.spec from CVS.
|
|
- Don't expose KbdInt responses in debug messages (from CVS).
|
|
- Detect and handle errors in rsa_{public,private}_decrypt (from CVS).
|
|
|
|
* Wed Feb 7 2001 Trond Eivind Glomsrxd <teg@redhat.com>
|
|
- i18n-tweak to initscript.
|
|
|
|
* Tue Jan 23 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- More gettextizing.
|
|
- Close all files after going into daemon mode (needs more testing).
|
|
- Extract patch from CVS to handle auth banners (in the client).
|
|
- Extract patch from CVS to handle compat weirdness.
|
|
|
|
* Fri Jan 19 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Finish with the gettextizing.
|
|
|
|
* Thu Jan 18 2001 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Fix a bug in auth2-pam.c (#23877)
|
|
- Gettextize the init script.
|
|
|
|
* Wed Dec 20 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Incorporate a switch for using PAM configs for 6.x, just in case.
|
|
|
|
* Tue Dec 5 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Incorporate Bero's changes for a build specifically for rescue CDs.
|
|
|
|
* Wed Nov 29 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
|
|
succeeded, to allow public-key authentication after a failure with "none"
|
|
authentication. (#21268)
|
|
|
|
* Tue Nov 28 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to x11-askpass 1.1.1. (#21301)
|
|
- Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)
|
|
|
|
* Mon Nov 27 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Merge multiple PAM text messages into subsequent prompts when possible when
|
|
doing keyboard-interactive authentication.
|
|
|
|
* Sun Nov 26 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Disable the built-in MD5 password support. We're using PAM.
|
|
- Take a crack at doing keyboard-interactive authentication with PAM, and
|
|
enable use of it in the default client configuration so that the client
|
|
will try it when the server disallows password authentication.
|
|
- Build with debugging flags. Build root policies strip all binaries anyway.
|
|
|
|
* Tue Nov 21 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Use DESTDIR instead of %%makeinstall.
|
|
- Remove /usr/X11R6/bin from the path-fixing patch.
|
|
|
|
* Mon Nov 20 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Add the primes file from the latest snapshot to the main package (#20884).
|
|
- Add the dev package to the prereq list (#19984).
|
|
- Remove the default path and mimic login's behavior in the server itself.
|
|
|
|
* Fri Nov 17 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Resync with conditional options in Damien Miller's .spec file for an errata.
|
|
- Change libexecdir from %%{_libexecdir}/ssh to %%{_libexecdir}/openssh.
|
|
|
|
* Tue Nov 7 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to OpenSSH 2.3.0p1.
|
|
- Update to x11-askpass 1.1.0.
|
|
- Enable keyboard-interactive authentication.
|
|
|
|
* Mon Oct 30 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to ssh-askpass-x11 1.0.3.
|
|
- Change authentication related messages to be private (#19966).
|
|
|
|
* Tue Oct 10 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Patch ssh-keygen to be able to list signatures for DSA public key files
|
|
it generates.
|
|
|
|
* Thu Oct 5 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
|
|
build PAM authentication in.
|
|
- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
|
|
- Clean out no-longer-used patches.
|
|
- Patch ssh-add to try to add both identity and id_dsa, and to error only
|
|
when neither exists.
|
|
|
|
* Mon Oct 2 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update x11-askpass to 1.0.2. (#17835)
|
|
- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
|
|
always find them in the right place. (#17909)
|
|
- Set the default path to be the same as the one supplied by /bin/login, but
|
|
add /usr/X11R6/bin. (#17909)
|
|
- Try to handle obsoletion of ssh-server more cleanly. Package names
|
|
are different, but init script name isn't. (#17865)
|
|
|
|
* Wed Sep 6 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to 2.2.0p1. (#17835)
|
|
- Tweak the init script to allow proper restarting. (#18023)
|
|
|
|
* Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to 20000823 snapshot.
|
|
- Change subpackage requirements from %%{version} to %%{version}-%%{release}
|
|
- Back out the pipe patch.
|
|
|
|
* Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to 2.1.1p4, which includes fixes for config file parsing problems.
|
|
- Move the init script back.
|
|
- Add Damien's quick fix for wackiness.
|
|
|
|
* Wed Jul 12 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().
|
|
|
|
* Thu Jul 6 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Move condrestart to server postun.
|
|
- Move key generation to init script.
|
|
- Actually use the right patch for moving the key generation to the init script.
|
|
- Clean up the init script a bit.
|
|
|
|
* Wed Jul 5 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.
|
|
|
|
* Sun Jul 2 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to 2.1.1p2.
|
|
- Use of strtok() considered harmful.
|
|
|
|
* Sat Jul 1 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Get the build root out of the man pages.
|
|
|
|
* Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Add and use condrestart support in the init script.
|
|
- Add newer initscripts as a prereq.
|
|
|
|
* Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Build in new environment (release 2)
|
|
- Move -clients subpackage to Applications/Internet group
|
|
|
|
* Fri Jun 9 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Update to 2.2.1p1
|
|
|
|
* Sat Jun 3 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- Patch to build with neither RSA nor RSAref.
|
|
- Miscellaneous FHS-compliance tweaks.
|
|
- Fix for possibly-compressed man pages.
|
|
|
|
* Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>
|
|
- Updated for new location
|
|
- Updated for new gnome-ssh-askpass build
|
|
|
|
* Sun Dec 26 1999 Damien Miller <djm@mindrot.org>
|
|
- Added Jim Knoble's <jmknoble@pobox.com> askpass
|
|
|
|
* Mon Nov 15 1999 Damien Miller <djm@mindrot.org>
|
|
- Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>
|
|
|
|
* Sat Nov 13 1999 Damien Miller <djm@mindrot.org>
|
|
- Added 'Obsoletes' directives
|
|
|
|
* Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>
|
|
- Use make install
|
|
- Subpackages
|
|
|
|
* Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>
|
|
- Added links for slogin
|
|
- Fixed perms on manpages
|
|
|
|
* Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>
|
|
- Renamed init script
|
|
|
|
* Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>
|
|
- Back to old binary names
|
|
|
|
* Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>
|
|
- Use autoconf
|
|
- New binary names
|
|
|
|
* Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>
|
|
- Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.
|