6cf9b8e61b
* Drop unaccepted (unapplying) coverity patches * Drop server support for SSH1 (server) * Workaround #2641 for systemd * UseLogin is gone * Drop upstream commit 28652bca * Tighten seccomp filter (cache credentials before entering sandbox) (#1395288)
27 lines
889 B
Diff
27 lines
889 B
Diff
diff --git a/sshd.c b/sshd.c
|
|
--- a/sshd.c
|
|
+++ b/sshd.c
|
|
@@ -1701,6 +1701,10 @@ main(int ac, char **av)
|
|
parse_server_config(&options, rexeced_flag ? "rexec" : config_file_name,
|
|
&cfg, NULL);
|
|
|
|
+ /* 'UsePAM no' is not supported in Fedora */
|
|
+ if (! options.use_pam)
|
|
+ logit("WARNING: 'UsePAM no' is not supported in Fedora and may cause several problems.");
|
|
+
|
|
seed_rng();
|
|
|
|
/* Fill in default values for those options not explicitly set. */
|
|
diff --git a/sshd_config b/sshd_config
|
|
--- a/sshd_config
|
|
+++ b/sshd_config
|
|
@@ -101,6 +101,8 @@ GSSAPICleanupCredentials no
|
|
# If you just want the PAM account and session checks to run without
|
|
# PAM authentication, then enable this but set PasswordAuthentication
|
|
# and ChallengeResponseAuthentication to 'no'.
|
|
+# WARNING: 'UsePAM no' is not supported in Fedora and may cause several
|
|
+# problems.
|
|
UsePAM yes
|
|
|
|
#AllowAgentForwarding yes
|